- Xymon - Xymon mailman web

Mailing list problems - should be fixed now
by henrik＠hswn.dk 05 Mar '08

05 Mar '08

There's been some problems with the mail server hosting the Hobbit mailing list over the past few days. It seems that mail has been rejected with a temporary error, so your mails to the list might have been delayed. It hasn't affected all mail, but some of it certainly has been queued up. The problem was caused by a clamav virus scanner acting up; Debian bugtracker http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=467298 has the details. My Hobbit setup did catch that clamav was misbehaving, but I didn't realize that it would have this impact on the mailsystem. I expect the backlog to be flushed out over the next few hours. Sorry for any inconvenience it may have caused. Regards, Henrik

1 0

rrd-status.log messages
by tlewick＠tradebotsystems.com 05 Mar '08

05 Mar '08

Hi all, I am receiving the following messages in my rrd-status.log file... Got over-size message, truncating at 131072 bytes (max 131072) Dropping (more) garbled data Bad data in channel, skipping it. Everything seems to be working, but don't really know where to look to see what host(s) this is coming from. Can someone tell me where I can change the max message size hobbit can receive? Or RRD? Thanks, Taylor Lewick

1 0

[Devmon] [hobbit] RE: Devmon Turning Purple
by mprice＠sgt-inc.com 05 Mar '08

05 Mar '08

We upgrade devmon to 0.3.0rc1 as well and we were good for a couple days until it went purple again. We changed our cronjob to be every 15 minutes and are ok now. We have no updates for you as of this point yet. Sorry, michael On 3/5/08 9:41 AM, "Whilding, Craig" <Craig_Whilding at mentor.com> wrote: > I've discovered something with this purple problem. If the module that > parses hobbit client data isn't running then devmon seems to remain > fine. > > Basically on one of our servers that runs a proxy sending data to > localhost and our main server one of the modules has died so that no > linux client data gets to the local display. Haven't quite worked out > what will have died yet as I need to run a diff with another box to > check the dead channel but whatever it was it seems to be the service > that devmon disagreed with. > > Any progress on debugging what devmon code causes the problem in the > first place? I can leave this broken for now on mine as the local > display is only a backup if the wan link fails. > > Regards, > Craig > > -----Original Message----- > From: devmon-support-bounces at lists.sourceforge.net > [mailto:devmon-support-bounces at lists.sourceforge.net] On Behalf Of > Buchan Milne > Sent: 21 February 2008 10:22 > To: hobbit at hswn.dk > Cc: devmon-support at lists.sourceforge.net > Subject: Re: [Devmon] [hobbit] RE: Devmon Turning Purple > > On Wednesday 20 February 2008 18:44:24 Joyner, William wrote: >> > I've upgraded to the new release and still have the issues with purple >> > errors. I do however like that it shows the devmon process in Hobbit > as >> > a monitored piece. > > One of mine running 0.3.0rc1 has been green for 16 days (it doesn't get > restarted automatically) ... it went purple last night. I'll add logging > at > the places I suspect may be problematic, and try and reproduce ... > > Regards, > Buchan > > > ------------------------------------------------------------------------ > - > This SF.net email is sponsored by: Microsoft > Defy all challenges. Microsoft(R) Visual Studio 2008. > http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/ > _______________________________________________ > Devmon-support mailing list > Devmon-support at lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/devmon-support > > ------------------------------------------------------------------------- > This SF.net email is sponsored by: Microsoft > Defy all challenges. Microsoft(R) Visual Studio 2008. > http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/ > _______________________________________________ > Devmon-support mailing list > Devmon-support at lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/devmon-support > -- Michael A. Price EOS Network Security Engineer SGT, Inc. www.sgt-inc.com NASA/GSFC Code 428.0 Greenbelt, Maryland 20770 e-mai: mprice at sgt-inc.com desk: 301-614-5848 cell: 410-507-7476 ------------------------------------------------------------------------- PGP Public Key available from keyserver.pgp.com -------------------------------------------------------------------------

1 0

df output incorrect only produces yellow instead of red.
by Craig_Whilding＠mentor.com 05 Mar '08

05 Mar '08

One of our solaris servers has had the /var partition fill up to 100%. This has had a knock on effect of somehow killing the df command. Not although the line below is displayed and is red the actual page has only gone yellow. Expected strings (capacity and Mounted) not found in df output How do I change this so that the page goes red when I lose disk reporting? Thanks. Regards, Craig Whilding IT Systems Contractor Mentor Graphics 1 Edward Court Altrincham Business Park Altrincham WA14 5GL

2 2

Changes in checking file hashes?
by tschenk＠pironet-ndh.com 05 Mar '08

05 Mar '08

Hi all, Sorry if this was discussed before, I could not find it. After running 4.2.0 for some time I wanted to try the nightly snapshot again. All the file checks turned red, complaining about missing md5 data. Did I miss a configuration change? Error message: File has MD5 hash (No MD5 data) - should be c784b19d0034235fbf6de2accc6e86b6 Client data: [file:/bin/bash] type:100000 (file) mode:555 (-r-xr-xr-x) linkcount:1 owner:0 (root) group:2 (bin) size:516392 clock:1204716972 (2008/03/05-12:36:12) atime:1204716816 (2008/03/05-12:33:36) ctime:1029943369 (2002/08/21-17:22:49) mtime:947116452 (2000/01/06-00:54:12) md5:c784b19d0034235fbf6de2accc6e86b6 Reagards, Thomas

1 0

[hobbit] Hobbit Server API
by Thomas.Kern＠hq.doe.gov 04 Mar '08

04 Mar '08

If you don't mind loading the hobbit client software on your application servers, you can use the communications code to send 'status' messages to the hobbit server. A status message is rather free form so it can be used for lots of non-hobbit things. I use it to report on my Tivoli Storage Manager (TSM) backups. I do not have access to my work systems today, but I think you can find the format in the help files. I think bbcmd would be the place to start. Thomas Kern 301-903-2211 (O) 301-905-6427 (M) ----- Original Message ----- From: Ryan Sclanders <merlin_rbs at hotmail.com> To: hobbit at hswn.dk <hobbit at hswn.dk> Sent: Mon Mar 03 09:11:14 2008 Subject: [hobbit] Hobbit Server API Hi All, We are using hobbit to monitor our infrastructure and would like to extend it to monitor some custom application statistics for our product. Our product is hosted within our client’s network and all communications are through HTTPS. Rather than hosting the hobbit agent, I would like to send the hobbit information directly from our application. Does have a server side API which can allows application to update monitoring information directly? Thanks in advance, Ryan ________________________________ Sounds like? How many syllables? Guess and win prizes with Search Charades! _________________________________________________________________ Get Hotmail on your mobile, text MSN to 63463! http://mobile.uk.msn.com/pc/mail.aspx To unsubscribe from the hobbit list, send an e-mail to hobbit-unsubscribe at hswn.dk

1 0

Test remote TCP port
by linuxmasterjedi＠free.fr 04 Mar '08

04 Mar '08

Hi, I would like to monitor some special TCP port from my hobbit server. Since those port are not famous at all, I quickly oriented my choice on a hping related tool. I've found "bbhping.sh" which runs only for BB. Any ideas for something similar who could help me to determine in the host, via a "TCP ping", is up or not please ? LMJ

4 4

hobbit color-changing issue
by georgi.lalev＠zdv.uni-tuebingen.de 04 Mar '08

04 Mar '08

Hello, I have a small hobbit issue. I want hobbit to go red every time the word "/evicted/" shows up in /var/log/messages on some hosts. So the part in /hobbit-clients.cfg/ is as follows: HOST=%cn4[3-6]*-hp PROC "%syslogd" 1 1 red PROC "%/usr/sbin/nscd" 1 red PROC "%iscsid" 2 2 red LOAD 16.5 20.0 LOG %/var/log/messages %(?-i)evicted|Oops|ALERT|NOTICE COLOR=red LOG %/var/log/messages %(?-i)LustreError|WARNING|FAILED|kernel|failing|ILLEGAL COLOR=yellow The Part in client-local.cfg: [cn44-hp] log:/var/log/messages:10240 ignore MARK trigger ALERT trigger .*(dumping log to)|(evicted).* file:/var/log/messages The Issue: Every time I put the word "/evicted/" manually in the messages file, hobbit will go red for about 15 minutes. That's fine. If I put a second line with the word "/kernel/" in the messages file, a second (yellow) line appears in the mesgs column. That's also fine. Hobbit is still red, but stays that way only for about 15 minutes. After the 15 minutes, it changes to yellow and the "/evicted/" warning is gone. It stays yellow for another 15 minutes, and then it turns green. The messages file is really small (under 10 KByte) and not much is being written in it. That's why hobbit must stay red all the time!?! I searched for the number 900 in server/etc, but nothing matches (exept some proxy configuration). Does anyone have an Idea what or where the problem could be? Greetings Georgi

1 0

Log client-local.cfg IGNORE
by s_aiello＠comcast.net 03 Mar '08

03 Mar '08

I am trying to monitor a log file for Oracle DB conection issues. This logfile outputs the results of all the db queries. For the sake of having a small file, I am attempting to put and ignore rule in the client-local.cfg file. basically I want to ignore all lines except those with table or view in it. the configuration is: log:/app/subdir/db/server/Log/AQuery.log:10240 ignore (?!)(table|view) when i run bin/logfetch, it Segmentation fault. Here is the gdb backtrace on it. Also it will segfault if I do "ignore (?-i)table|view". There is absolutely no warranty for GDB. Type "show warranty" for details. This GDB was configured as "x86_64-redhat-linux-gnu"...Using host libthread_db library "/lib64/tls/libthread_db.so.1". Reading symbols from shared object read from target memory...done. Loaded system supplied DSO at 0xffffe000 Core was generated by `hobbit/bin/logfetch /hobbit/client/tmp/logfetch.serv'. Program terminated with signal 11, Segmentation fault. #0 0x0807476b in re_search_internal () (gdb) bt #0 0x0807476b in re_search_internal () #1 0x0807ada4 in regexec () #2 0x0804850c in logdata ( filename=0x80ca550 "/app/subdir/db/server/Log/AQuery.log", logdef=0x80ca4fc) at logfetch.c:239 #3 0x08049e4d in main (argc=3, argv=0xffffd614) at logfetch.c:963 If this doesn't make any sense.. it is possible it is the ninary itself. I did a static linuix compile on an i386 server. This server is an x86_64 server. Thouhg I thought a static compile builds all the library dependency into the binary. Your help is appreciated, ~Steve

1 0

alerts won't stop
by lebarber＠gmail.com 03 Mar '08

03 Mar '08

I have removed some machines from hobbit, taken all mention of them from the configuration files and issued the "drop" command using bb. I am still getting notified of their "purple" status every day, and it has been several weeks since I removed them from Hobbit. How can I stop these alerts from being generated? Thanks, Larry Barber

5 14