We monitor several hundred Linux/Windows hosts roughly 50/50 split.
We use regular expressions with the PAGE=, and this works because we organize our pages by location, then by windows or linux servers, or other categories such as power, storage, network, etc
For example: PAGE=%.*-Win.* EXHOST=hosta,hostb,etc PAGE=%.*-Lin.* EXHOST=host123,host234,etc
Works for PROC, LOG, LOAD, etc, and you can make the stuff inside the regex more or less restrictive/specific as needed. Our entire config file is about 50 or 60 lines, including the default section.
-----Original Message----- From: xymon-bounces at xymon.com [mailto:xymon-bounces at xymon.com] On Behalf Of Soporte Infraestructura Operativa y Almacenamiento Sent: Monday, May 02, 2011 2:49 PM To: xymon at xymon.com Subject: [Xymon] advice/Best Practices for hobbit-clients.cfg
Hi all: I guess that many of us have mixed environment with*nix,windows,linux boxes. On my env I have CMT (cool thread) and monothread sparcs and x86 older and newer ones.
So I'm trying to make my hobbit-clients.cfg easy-use/config/modify... So I use CLASS to group HW-like tests and HOST to specialize other ones. But I'm dealing with a strange behavior with this setup... When procs test runs; appears in red because both Windows and unix processes are seek on the host. So clearly I have a trouble here, since I don't like the EXHOST option to deal with exceptions to the DEFAULT entry ( I'm dealing with nearly 80 monitored hosts, between bare metals and Solaris Zones + VMware Machines and Virtual box) to put that on one line it's scary.
I adding some parts of the file and If anybody want can put the entire one.
---parts of hobbit-clients.cfg
HOST=hssftp01 (no specs added since the class have all what I need)
CLASS=SZCSolSFTP UP 45m TIME=*:0000:2400 #alarmas rojas/amarillas en este intervalo 8x5+/24x7 PROC sshd 1 -1 yellow PROC in.ftpd 1 30 red PROC cron 1 -1 yellow PORT "LOCAL=%([.:]21)$" state=LISTEN TEXT=ftp MEMSWAP 25 55 MEMPHYS 99 101 MEMACT 90 98 LOAD 8 10 CLOCK 95 #DOWNTIME=*:1205:1210 #puede apagarse en ese rango (8x5+/24x7) debe ir en bb-hosts
DEFAULT # These are the built-in defaults. UP 1h LOAD 8.0 10.0 DISK * 97 99 MEMPHYS 100 101 MEMSWAP 50 80 MEMACT 90 95
----parts of bb-hosts file 10.xxx.xxx.xxx hssftp01.hss.dnm.icetel.ice # COMMENT:"FTP Server 01" CLIENT:hssftp01 CLASS:SZCSolSFTP testip prefer multihomed ssh files ports uptime vmstat ftp TRENDS:*,ifstat
------Error that I received with procs test enable. (and it’s a unix box) red Mon May 2 13:43:32 CST 2011 - Processes NOT ok
sshd (found 3, req. 1 or more) ntpd (found 1, req. 1 or more) httpd (found 12, req. 1 or more) cron (found 1, req. 1 or more) cron (found 1, req. 1 or more) %hobbitd (found 26, req. between 1 and 1) winvnc.exe (found 0, req. between 1 and 25) oracle.exe (found 0, req. between 1 and 1) BBWin.exe (found 0, req. between 1 and 1) winvnc.exe (found 0, req. between 1 and 25) NBConsole.exe (found 0, req. between 1 and 1) BBWin.exe (found 0, req. between 1 and 1) %^nb*.exe (found 0, req. 1 or more) sshd (found 3, req. 1 or more) named (found 1, req. 1 or more) cron (found 1, req. 1 or more) winvnc.exe (found 0, req. between 1 and 25) VisualSVNServer.exe (found 0, req. between 1 and 10) BBWin.exe (found 0, req. between 1 and 1) tnslsnr (found 0, req. 1 or more) sshd (found 3, req. 1 or more) ntpd (found 1, req. 1 or more) %ora_.* (found 0, req. 1 or more) winvnc.exe (found 0, req. between 1 and 25) sqlservr.exe (found 0, req. between 1 and 10) BBWin.exe (found 0, req. between 1 and 1) sshd (found 3, req. 1 or more) %java -jar /opt/dai/dai.jar (found 0, req. between 1 and 1) %java -classpath .:./Frontal* (found 0, req. 1 or more) winvnc.exe (found 0, req. between 1 and 25) BBWin.exe (found 0, req. between 1 and 1) winvnc.exe (found 0, req. between 1 and 25) BBWin.exe (found 0, req. between 1 and 1) sshd (found 3, req. 1 or more) in.ftpd (found 0, req. between 1 and 30) cron (found 1, req. 1 or more) sshd (found 3, req. 1 or more) ntpd (found 1, req. 1 or more) sshd (found 3, req. 1 or more) ntpd (found 1, req. 1 or more) sshd (found 3, req. 1 or more) ntpd (found 1, req. 1 or more) tnslsnr (found 0, req. 1 or more) sshd (found 3, req. 1 or more) ntpd (found 1, req. 1 or more) %ora_.* (found 0, req. 1 or more)
I'm looking to any help but also any advice/BP about how to handle it will be welcome.
PD: Using xymon 4.2.3 and please accept my apologizes for spanish comments.!
Este mensaje de correo electrónico, incluidos los archivos adjuntos, es para el uso exclusivo de la persona a la que se ha enviado, y puede contener información que sea confidencial o protegida legalmente. Si usted no es el destinatario, o ha recibido este mensaje por error, no está autorizado a copiar, distribuir, o utilizar de alguna manera este mensaje. Por favor notifique inmediatamente al remitente por correo electrónico y suprimir permanentemente este mensaje y los archivos adjuntos. No se otorga ninguna garantía de que este e-mail esté libre de errores o virus. INSTITUTO COSTARRICENSE DE ELECTRICIDAD
Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon