[Xymon] Problems with an alarm

7 Mar 2014 · *:0600:2359 NOPROPRED:*

      Guys, I want to thank you all for the quick help you sent to me..   We resolved the problem.  (It was in the 8 layer … me)     We made a “friendly” application web that  allow us to modify the analisys.cfg file using a intermediate file, but it was recording wrongly the file and when We put max=0 in that app, it put "nothing" into the file… so, when I check the analisys.cfg file, I realized the mistake…
I want to apologize for the time I steal to you, and thanks again!
Regards!
Seba
De: Root, Paul T [mailto:Paul.Root at CenturyLink.com]
Enviado el: viernes, 07 de marzo de 2014 02:46 p.m.
Para: Schapovalov, Sebastian; 'Henrik Størner'; 'xymon at xymon.com'
Asunto: RE: [Xymon] Problems with an alarm
The example tells me to have max=0 and nothing for min.
     Example: Check that ONLY ports 22, 80 and 443 are open for incoming connections:
PORT STATE=LISTEN LOCAL=%0.0.0.0[.:].* EXLOCAL=%.:$ MAX=0 "TEXT=Bad listeners"
From: Schapovalov, Sebastian [mailto:sebastian.schapovalov at telefonica.com]
Sent: Friday, March 07, 2014 11:32 AM
To: Root, Paul T; 'Henrik Størner'; 'xymon at xymon.com'
Subject: RE: [Xymon] Problems with an alarm
Hi Paul, We have tried with “min=0  max=0” cause we need this alarm inform us when there are connections, because that servers are in the shutdown process (since 2 months ago) and don’t have to get to connect.
  PORT LOCAL=%10.20.70.157.* REMOTE=%10.20.32.184.1198*  state=ESTABLISHED  min=0  max=0  color=red  "TEXT=OPGE->Comandos SDP 1 : frontal datos1      vlzfesg16|10.20.70.157:  -> vlzfedsdp1|10.20.32.184:1198*      "
  PORT LOCAL=%10.20.70.157.* REMOTE=%10.20.32.185.1198*  state=ESTABLISHED  min=0  max=0  color=red  "TEXT=OPGE->Comandos SDP 1 : frontal datos2      vlzfesg16|10.20.70.157:  -> vlzfedsdp2|10.20.32.185:1198*      "
  PORT LOCAL=%10.20.70.157.* REMOTE=%10.20.32.186.1198*  state=ESTABLISHED  min=0  max=0  color=red  "TEXT=OPGE->Comandos SDP 1 : frontal datos3      vlzfesg16|10.20.70.157:  -> vlzfedsdp3|10.20.32.186:1198*      "
De: Root, Paul T [mailto:Paul.Root at CenturyLink.com]
Enviado el: viernes, 07 de marzo de 2014 10:34 a.m.
Para: Schapovalov, Sebastian; 'Henrik Størner'; 'xymon at xymon.com'
Asunto: RE: [Xymon] Problems with an alarm
Shouldn’t it be max=0?
From: Xymon [mailto:xymon-bounces at xymon.com] On Behalf Of Schapovalov, Sebastian
Sent: Friday, March 07, 2014 7:22 AM
To: Henrik Størner; xymon at xymon.com<mailto:xymon at xymon.com>
Subject: Re: [Xymon] Problems with an alarm
Hi Henrik, thanks for you quick answer.
Analisys.cfg
PORT LOCAL=%10.20.170.57.* REMOTE=%10.20.132.84.1198* state=ESTABLISHED min=0 color=red "TEXT=OPGE->Comandos SDP 1 : frontal datos1 fesg16|10.20.170.57: -> fedsdp1|10.20.132.84:1198* "
hosts.cfg
subpage VLZ_SDP1 <H5>Velez SDP1</H5>
group-compress <H5>SDP1 EG:</H5>
0.0.0.0 .default. # REPORTTIME=*:0600:2359 NOPROPRED:* NOPROPPURPLE:*
include /home/xymon/server/www/gestion/tmp/hosts.cfg_20140307_VLZ_SDP1_10
group-compress <H5>SDP1 BEsBDs:</H5>
All the others alarms run Ok.
De: Xymon [mailto:xymon-bounces at xymon.com] En nombre de Henrik Størner
Enviado el: viernes, 07 de marzo de 2014 09:46 a.m.
Para: xymon at xymon.com<mailto:xymon at xymon.com>
Asunto: Re: [Xymon] Problems with an alarm
Importancia: Alta
Den 2014-03-07 12:47, Schapovalov, Sebastian skrev:
Hi!  I am Sebastian and I am working actually in Telefonica Argentina.  I have a problem with XYMon settings.  We have an alarm which shows the ports connections totality   to a server. We´d need this alarm turns to red when exists 1 or more connections, but it keeps in green.
Send you an example..
[cid:image001.png at 01CF3A15.CF8E56D0]
Could you show us what your configuration is - the analysis.cfg and hosts.cfg settings ?
Regards,
Henrik

Este mensaje y sus adjuntos se dirigen exclusivamente a su destinatario, puede contener información privilegiada o confidencial y es para uso exclusivo de la persona o entidad de destino. Si no es usted. el destinatario indicado, queda notificado de que la lectura, utilización, divulgación y/o copia sin autorización puede estar prohibida en virtud de la legislación vigente. Si ha recibido este mensaje por error, le rogamos que nos lo comunique inmediatamente por esta misma vía y proceda a su destrucción.
The information contained in this transmission is privileged and confidential information intended only for the use of the individual or entity named above. If the reader of this message is not the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited. If you have received this transmission in error, do not read it. Please immediately reply to the sender that you have received this communication in error and then delete it.
Esta mensagem e seus anexos se dirigem exclusivamente ao seu destinatário, pode conter informação privilegiada ou confidencial e é para uso exclusivo da pessoa ou entidade de destino. Se não é vossa senhoria o destinatário indicado, fica notificado de que a leitura, utilização, divulgação e/ou cópia sem autorização pode estar proibida em virtude da legislação vigente. Se recebeu esta mensagem por erro, rogamos-lhe que nos o comunique imediatamente por esta mesma via e proceda a sua destruição

[Xymon] Problems with an alarm

sebastian.schapovalov＠telefonica.com

PORT STATE=LISTEN LOCAL=%0.0.0.0[.:].* EXLOCAL=%.:$ MAX=0 "TEXT=Bad listeners"