- Xymon - Xymon mailman web

Recent alerts text file
by indymichaelb＠gmail.com 17 Jun '11

17 Jun '11

The all non-green view bb2.html shows a history of the recent alerts going back 240 minutes or 100 events, whichever is less. I need to gather more then 100 events for a report. Is there a text file containing what I'm after?

3 2

Service list being cut off in SVCS test column
by willowbrookmagic＠hotmail.com 17 Jun '11

17 Jun '11

Moved xymon 4.3.2 into production and resolving a few hanging issues. various systems are plagued with this issue. the service list is getting cut off causing test to alert red or sometimes purple. PID Name 0 Idle 4 System 460 smss.exe 508 csrss.exe 532 winlogon.exe 580 services.exe 592 lsass.exe 756 svchost.exe 844 svchost.exe 900 svchost.exe 956 Smc.exe 984 svchost.exe 1000 svchost.exe 1092 ccSvcHst.exe 1420 spoolsv.exe 1448 msdtc.exe 1584 AeXNSAgent.exe 1612 BBWin.exe 1628 bbnt.exe 1656 CdfSvc.exe 1724 HCAService.exe 1796 CpSvc.exe 1840 DNTUS26.EXE 1900 js.exe 1924 svchost.exe 1960 HealthService.exe 2088 IMAAdvanceSrv.exe 2164 jqs.exe 2244 MDM.EXE 2264 svchost.exe 2280 svc any idea?

2 2

email alerts
by scottz1234＠comcast.net 16 Jun '11

16 Jun '11

I cannot get our XYMON to send any emails alerts from hosts that we are monitoring. Please send a more detailed example of hobbit-alertscfg setup. Is there something I'm missing in another config file??? Scott A. Zboch 1-248-421-8613

3 2

alert collections
by gsimpson＠comcast.net 16 Jun '11

16 Jun '11

Hello, I have a collection of pages and subpages that compose a system. There are several systems in my xymon hosts file. Each system looks at a set of machines, VMs and http targets. And each system is listed on an 'Environments' page, which only has links (and icons) to the subpages for the systems (i.e. no URL or http info is connected to that Environments page) Periodically, each system is brought down for maintenance. But when that happens, I get swamped with alerts about every component of that system. Does anyone know of a way to get one, high-level alert, say from the subpages under my ovmEnvironments page instead of 100+ alerts from my monitored elements ? I have not seen any discussions like this in the archives, but I could have missed them. thanks Greg Here is a modified snippet of my hosts.cfg file ---------------------------------------------------------------- page ovmEnvironments OVMEnvironments title OVM Environments ################################################################################################## # Env1 starts here ################################################################################################## subpage b16Env1 B16Env1 title B16 Env1 subparent b16Env1 b16Env1Hypers Hypervisors title B16 Env1 Hypervisors group-compress Hypervisors 0.0.0.6 appohs-crm-machine06 0.0.0.7 authohs-crm-machine07 ... subparent b16Env1 b16Env1Hosts Hosts title B16 Env1 Hosts group-compress OVM Hosts 0.0.0.8 v_resourceWebgate_machine08 0.0.0.9 v_challengWebgate_machine09 ... subparent b16Env1 b16Env1Admin Weblogic Admin/EM Pages title B16 Env1 Weblogic Administration group-compress All Admin Consoles 0.0.0.91 v_BI_ADMIN # http://user:pswd at machine:port/console 0.0.0.90 v_CRM_ADMIN # http://user:pswd at machine:port/console ... and here is a snippet from alerts.cfg which DO NOT fire when any of the subpage indicators turn red: PAGE=ovmEnvironments COLOR=red RECOVERED SCRIPT /home/msmith/xymon/xymonServer/server/ext/smsplus.sh me at company.com REPEAT=24h PAGE=ovmEnvironments/b16Env1 COLOR=red RECOVERED SCRIPT /home/msmith/xymon/xymonServer/server/ext/smsplus.sh me at company.com REPEAT=24h

3 3

No SMS when alert time starts
by Johan.Sjoberg＠deltamanagement.se 16 Jun '11

16 Jun '11

Hi, We have a number of servers for which we do not want SMS during the night. The alert conf looks like this for these servers: SCRIPT /usr/local/xymon/server/ext/html_mail.pl noc at domain.com REPEAT=1d RECOVERED FORMAT=PLAIN SCRIPT /usr/local/bin/sendsms.sh XXXXXXXXX TIME=W:0700:2000 DURATION>7 FORMAT=SMS REPEAT=15 With Xymon 4.2.x, if an alert occurred during the night, we got an e-mail immediately, and then we got SMS at 07:00. Now, with 4.3.3, we get the e-mail, but we never get any SMS when the SMS alert time begins. If the alert is triggered during office hours, we get SMS. Is this a bug in 4.3, or is the functionality changed? /Johan

1 0

msgs display is interpreting logfile as HTML.
by Alan.FORD＠stanwell.com 16 Jun '11

16 Jun '11

Hi all, I am using Xymon 4.3.2 on RHEL5 I am monitoring a log file which has a lot of <...> combinations. It looks like Xymon is interpreting the contents of the logfile as HTML When it gets displayed to the screen I see this.. #### <[ACTIVE] ExecuteThread: '1' for queue: 'weblogic.kernel.Default (self-tuning)'> <> <> <> <1308183254039> but the actual log entry (and when I view source) shows this... ####<Jun 16, 2011 10:14:14 AM EST> <Info> <WliSbTransports> <soapro01.stanwell.com> <osb_ms01> <[ACTIVE] ExecuteThread: '1' for queue: 'weblogic.kernel.Default (self-tuning)'> <<anonymous>> <> <> <1308183254039> <BEA-381113> <File Market_Trading/DataTransfer/Barron_Process_Data_20110616_101406.csv renamed to 2008343281842716392-3dafdf91.130945f6a25.bb__Barron_Process_Data_20110616_101406.csv.Stage on the remote host barftp01 for the service endpoint ProxyService$Remote Operations Scada$Proxy Services$PollForBarronScadaFilePS> Thanks Alan Ford ________________________________________________________________________________ This email (including all attachments) may contain personal information and is intended solely for the named addressee. It is confidential and may be subject to legal or other professional privilege and any confidentiality or privilege is not waived or lost because this email has been sent to you by mistake. This email is also subject to copyright. No part of it should be reproduced, adapted or communicated without the written consent of the copyright owner. Any personal Information in this email must be handled in accordance with the Privacy Act 1988 (Cth). If you have received it in error, please let Stanwell Corporation Limited know by reply email, delete it from your system and destroy any copies. Stanwell is not responsible for any changes made to a document other than those made by Stanwell. Stanwell accepts no liability for any damage caused by this email or its attachments due to viruses, interference, interception, corruption or unauthorised access. If you have any doubts about the authenticity of an email purportedly sent by us, please contact us immediately. If this is a commercial electronic message within the meaning of the Spam Act 2003 (Cth), you may indicate that you do not wish to receive any further commercial electronic messages from Stanwell by emailing mailto:privacy at stanwell.com... ________________________________________________________________________________

2 3

Need help understanding bbwin settings behavior
by indymichaelb＠gmail.com 14 Jun '11

14 Jun '11

I have some questions on bbwin configuration. from bbwin.cfg <setting name="mode" value="central" /> <setting name="configclass" value="win32" /> In the disk section <setting name="default" warnlevel="85%" paniclevel="95%" /> from hobbit-clients.cfg DEFAULT # These are the built-in defaults. CLOCK 1200 DISK * 90 95 UP 30m CLASS=win32 DISK C 50 55 # Can be harddrive or mount points DISK D 50 55 # Can be harddrive or mount points HOST=foo DISK V 101 101 DISK W 101 101 I am expecting mode central to cause the disk section of bbwin.cfg to be ignored, and for node foo the C and D drives to go yellow at 50%, red at 55%, and the V and W drives to always be green. However, that is not happening. All of the drives are going yellow at 90% and red at 95% which matches default. What am I doing wrong?

5 8

disabling all alerts from xymon
by tomg＠mcclatchyinteractive.com 14 Jun '11

14 Jun '11

I was wondering if the method for disabling all alerts from Xymon has changed. The method we are using is as follows: In tasks.cfg, we add a DISABLE tag to the "Alert" module, like so: [alert] DISABLE ENVFILE /path..... However, last night members of our team did overnight maintenance and reported that this did not work as expected. We used this method many times in the past, but I don't think we've tested it on Xymon 4.3.3. Should this still work? Do we need to restart xymon? Is there another config that needs to change? Any tips are appreciated. Tom

1 1

Hobbotd Yellow error
by kconnell＠ryerson.ca 14 Jun '11

14 Jun '11

Starting see the following last night and have never seen this error before.... Latest errormessages: Oversize data/client msg from 127.0.0.1 truncated (n=585509, limit 524288) First line: xymon.ns.ryerson.ca|linux|linux Oversize status msg from 127.0.0.1 for xymon.ns.ryerson.ca:procs truncated (n=328505, limit=262144) Ken Connell Intermediate Network Engineer Computer & Communication Services Ryerson University 350 Victoria St RM AB50 Toronto, Ont M5B 2K3 416-979-5000 x6709

2 2

Xymon pages too many levels on not-quite-new reds
by betsy.schwartz＠gmail.com 13 Jun '11

13 Jun '11

We have xymon set to page four tiers of support after appropriate delays, like so: MAIL alert1 REPEAT=10 COLOR=red,purple FORMAT=SMS # MAIL alert2 DURATION>20 REPEAT=10 COLOR=red,purple FORMAT=SMS# MAIL alert3 DURATION>40 REPEAT=10 COLOR=red,purple FORMAT=SMS# MAIL alert4 DURATION>60 REPEAT=10 COLOR=red,purple FORMAT=SMS# HOWEVER there are two circumstances in which xymon pages ALL the tiers IMMEDIATELY: 1) when a yellow has been yellow for some time, and then turns red 2) when a server has gone red during a scheduled maintenance window IMHO this is undesirable behavior. Having a server go from yellow to red, or having a server come out of a maintenance window, should 'reset' the alert timer to zero and only page the first level of alert. We don't ever want all of the tiers to be paged the second something turns red. Thoughts? Any way around this? This is seriously ticking off our tier 4 person...who has been paged multiple times now for things that the tier1 folks are prepared to handle in a timely manner.

2 1