Greetings, Is there anyway to get an Xymon alert on Windows server that has been running for over 120days.
-Agege
On Mar 10, 2016, at 5:00 AM, xymon-request at xymon.com wrote:
Send Xymon mailing list submissions to xymon at xymon.com
To subscribe or unsubscribe via the World Wide Web, visit http://lists.xymon.com/mailman/listinfo/xymon or, via email, send a message with subject or body 'help' to xymon-request at xymon.com
You can reach the person managing the list at xymon-owner at xymon.com
When replying, please edit your Subject line so it is more specific than "Re: Contents of Xymon digest..."
Today's Topics:
- PORTS and STATE syntax (Boldt, David)
- Re: jmxstat (Andy Smith)
- The testip option does not seem to be honored by the http test (Shawn Heisey)
- Re: The testip option does not seem to be honored by the http test (John Thurston)
- How to change the refresh time for acknowledgements (john boris)
- Re: How to change the refresh time for acknowledgements (Ryan Novosielski)
- Re: How to change the refresh time for acknowledgements (Ryan Novosielski)
- Re: How to change the refresh time for acknowledgements (john boris)
- Re: jmxstat (Galen Johnson)
- Always purple history after time shift on server - how to fix (Andrey Chervonets)
Message: 1 Date: Wed, 9 Mar 2016 09:09:16 -0500 From: "Boldt, David" <dboldt at usgs.gov> To: <xymon at xymon.com> Subject: [Xymon] PORTS and STATE syntax Message-ID: <CAC_ry0YJfGtLA9sHeqLH6RnwRfMYeKbq+3S7EnS5AEBVsfcFng at mail.gmail.com> Content-Type: text/plain; charset="UTF-8"
I'm not successful filtering on the connection state associated with a port. None of the syntax variations I have tried have been successful. If I remove the STATE specifier, matches are found.
There are multiple hosts connecting to the same port:
ESTAB 0 0 10.160.8.130:61617 10.160.8.132:57765 ESTAB 0 0 10.160.8.130:61617 10.160.8.132:57766 ESTAB 0 0 10.160.8.130:61617 10.160.8.132:57768 ESTAB 0 0 10.160.8.130:61617 10.160.8.133:45096 ESTAB 0 0 10.160.8.130:61617 10.160.8.133:45104 ESTAB 0 0 10.160.8.130:61617 10.160.8.133:45107 ESTAB 0 0 10.160.8.130:61617 130.118.4.2:36141 ESTAB 0 0 10.160.8.130:61617 130.118.4.2:36150 ESTAB 0 0 10.160.8.130:61617 130.118.4.2:36151 ESTAB 0 0 10.160.8.130:61617 136.177.16.3:34320 ESTAB 0 0 10.160.8.130:61617 136.177.16.3:34321 ESTAB 0 0 10.160.8.130:61617 136.177.16.3:34324 ESTAB 0 0 10.160.8.130:61617 137.227.240.32:50726 ESTAB 0 0 10.160.8.130:61617 137.227.240.32:50727 ESTAB 0 0 10.160.8.130:61617 137.227.240.32:50729 LISTEN 0 0 *:61617 *:*
I've set up several port monitoring specifications, but none of them match the state (the first example where no state is specified succeeds):
PORT LOCAL=%: REMOTE=%10.160.8.132 MIN=3 MAX=3 COLOR=yellow TEXT=ActiveMQ-DHCP PORT LOCAL=%: REMOTE=%10.160.8.133 STATE=ESTABLISHED MIN=3 MAX=3 COLOR=yellow TEXT=ActiveMQ-nsp.er PORT LOCAL=%: REMOTE=%136.177.16.3 STATE=ESTAB MIN=3 MAX=3 COLOR=yellow TEXT=ActiveMQ-ns.cr PORT LOCAL=%: REMOTE=%137.227.240.32 STATE=%ESTAB MIN=3 MAX=3 COLOR=yellow TEXT=ActiveMQ-ns.er PORT LOCAL=%: REMOTE=%130.118.4.2 STATE=%ESTAB* MIN=3 MAX=3 COLOR=yellow TEXT=ActiveMQ-ns.wr
Note: On this server netstat does not exist and ss is being used,.
Observation: Discovering the syntax for REMOTE was trial and error. Specifying the IP address alone did not work, and I found no examples for the type of filtering above.
-- -- David Boldt <dboldt at usgs.gov>
"Discovery consists of seeing what everybody has seen and thinking what nobody has thought." --Albert Szent-Gyorgyi (1893 - 1986)
Message: 2 Date: Wed, 9 Mar 2016 16:36:44 +0000 From: Andy Smith <abs at shadymint.com> To: Galen Johnson <Galen.Johnson at sas.com>, "xymon at xymon.com" <xymon at xymon.com> Subject: Re: [Xymon] jmxstat Message-ID: <CAFz9LfvL-9XVo5BOui2oDy4XXqRPmajP-yhAyfEfrObzxB6Y=g at mail.gmail.com> Content-Type: text/plain; charset=UTF-8
---------- Forwarded message ----------
From: Galen Johnson <Galen.Johnson at sas.com> Date: 9 March 2016 at 00:26 Subject: [Possible Spam] [Xymon] jmxstat To: "xymon at xymon.com" <xymon at xymon.com>
Hey,
I don't think this is specific to jmxstat but I'm trying to implement. I'm getting the > following in apache log when I hit the page:
Setup error: Service GCInfo has a graph GCInfo, but no graph-definition,...
However, the definition does exist and I can view the graphs if I select a different > > service and change the name in the URL. RRDs are being created.
Anyone else run into this and overcome it?
thanks
Not seen that before, but just check for me please, is GCInfo mentioned in both TEST2RRD and GRAPHS in xymonserver.cfg?
Andy
Message: 3 Date: Wed, 9 Mar 2016 10:53:08 -0700 From: Shawn Heisey <hobbit at elyograg.org> To: xymon at xymon.com Subject: [Xymon] The testip option does not seem to be honored by the http test Message-ID: <56E06304.6040301 at elyograg.org> Content-Type: text/plain; charset=utf-8
I have the following in my hosts.cfg file:
10.100.2.131 fourqueens.REDACTED.com # testip ssh mgmt=10.2.6.131[http,https,ssh] https://megaagency.REDACTED.com delayred=http:10 10.100.2.132 fitzgeralds.REDACTED.com # testip ssh mgmt=10.2.6.132[http,https,ssh] https://megaagency.REDACTED.com delayred=http:10
The "mgmt" option controls a custom server-side script we wrote that verifies reachability of the out-of-band server management (Dell DRAC in this case).
I had expected the "testip" option to force the https URL test to be sent directly to the server, not the DNS address (which is a load balancer), but I can see the load balancer cookie in the response and requests in the load balancer's log.
Is there any way to get the intended behavior?
The server is running 4.3.23 with the patch to fix http response code interpretation.
Thanks, Shawn
Message: 4 Date: Wed, 09 Mar 2016 09:00:09 -0900 From: John Thurston <john.thurston at alaska.gov> To: xymon at xymon.com Subject: Re: [Xymon] The testip option does not seem to be honored by the http test Message-ID: <56E064A9.300 at alaska.gov> Content-Type: text/plain; CHARSET=US-ASCII; format=flowed
On 3/9/2016 8:53 AM, Shawn Heisey wrote:
- snip -
I had expected the "testip" option to force the https URL test to be sent directly to the server, not the DNS address (which is a load balancer), but I can see the load balancer cookie in the response and requests in the load balancer's log.
The TESTIP controls the behavior of the CONN test. To make the HTTP test use an IP address instead of resolving the name, use the following syntax: http://www.sample.com=1.2.3.4/index.html
From the hosts.cfg man page:
Testing sites by IP-address xymonnet ignores the "testip" tag normally used to force a test to use the IP-address from the hosts.cfg file instead of the hostname, when it performs http and https tests. The reason for this is that it interacts badly with virtual hosts, especially if these are IP-based as is common with https-websites. Instead the IP-address to connect to can be overridden by specifying it as: http://www.sample.com=1.2.3.4/index.html The "=1.2.3.4" will case xymonnet to run the test against the IP-address "1.2.3.4", but still trying to access a virtual website with the name "www.sample.com". The "=ip.address.of.host" must be the last part of the hostname, so if you need to combine this with e.g. an explicit port number, it should be done as http://www.sample.com:3128=1.2.3.4/index.html
-- Do things because you should, not just because you can.
John Thurston 907-465-8591 John.Thurston at alaska.gov Enterprise Technology Services Department of Administration State of Alaska
Message: 5 Date: Wed, 9 Mar 2016 13:03:13 -0500 From: john boris <jborissr at gmail.com> To: xymon at xymon.com Subject: [Xymon] How to change the refresh time for acknowledgements Message-ID: <CAOk1TCyYkPqGEVNE=6eXDfOwpxd=_0_AneWivxn0WBjgaXdO0w at mail.gmail.com> Content-Type: text/plain; charset="utf-8"
How can you change the response time when you acknowledge an issue so that it shows up as a check and you don't get pinged repeatedly. It looks like it takes about 5 minutes for the acknowledgement to take place.
-- John J. Boris, Sr.