On 15/04/14 01:14, John D. Alexander wrote:
I'm at a loss. Now I've got a client reporting /var/log/messages as unreadable and the server is showing a flapping status for msgs.
Group ownership for /var/log/messages is set to root:xymon with proper permissions, so it should be able to read it. When I su to the xymon user, it can get to that file just fine.
Look at the IP address reporting the issue, possibly you have two systems reporting under the same name.
Regards, Adam
There is nothing in analysis.cfg that is watching either /var/log/messages or /var/log/fail2ban.
I cleared msgs from the server. Restarted the client. The issue keeps coming back.
Any ideas?
John A.
*From:*Betsy Schwartz [mailto:betsy.schwartz at gmail.com] *Sent:* Friday, April 11, 2014 6:44 PM *To:* John D. Alexander *Cc:* xymon at xymon.com *Subject:* Re: [Xymon] recurring email alerts
I had that error once when I had a space after the file name in analysis.cfg
If you can't find that file name maybe there's a shell eval that includes it somewhere?
Sent from my iPhone
On Apr 11, 2014, at 6:41 PM, "John D. Alexander" <JAlexander at feeneywireless.com <mailto:JAlexander at feeneywireless.com>> wrote:
My Xymon server keeps sending alerts for a system saying that /var/log/fail2ban.log is unreadable. Nothing I can find is testing for this file and the permissions are such that xymon can read it. Any clues on where to look to find what is causing this? Thanks. *John Alexander* Network Administrator /_John.Alexander at feeneywireless.com <mailto:John.Alexander at feeneywireless.com>_/ Feeney Wireless, LLC - PO Box 2549, Eugene, Oregon 97402 (Free) 800-683-4818 (P) 541-685-9045 (F) 541-284-0030 /www.feeneywireless.com/ <http://www.feeneywireless.com/> <image001.jpg> <http://feeneywireless.com/> This email transmission is intended only for the addressee shown above. It may contain information that is privileged, confidential or otherwise protected from disclosure. Any review, dissemination or use of this transmission or its contents by persons other than the addressee is strictly prohibited! If you have received this email transmission in error please notify us immediately. _______________________________________________ Xymon mailing list Xymon at xymon.com <mailto:Xymon at xymon.com> http://lists.xymon.com/mailman/listinfo/xymon
Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon
-- Adam Goryachev Website Managers www.websitemanagers.com.au