RESOLVED, skip to bottom for resolution or read on
Hi all,
As reported earlier, http://www.xymon.com/archive/2010/04/msg00058.html I've been having a problem with false procs showing up on other pages and causing alerts to go out that aren't for that host. Strange trying to explain it but for my dev box hobbitdev, I'm only interested in hobbitd_channel and heartbeat as seen from the snippet of my hobbit-clients.cfg file For certain ESX servers I'm looking for the specific procs listed below in the ESX VI Servers section. What's happening is, the procs from the ESX VI Servers page is merging with the procs from the HOST hobbitdev
From hobbitdev procs web page: hobbitdev - procs Thu Nov 04 10:08:10 EDT 2010
Thu Nov 4 10:08:04 EDT 2010 - Processes NOT ok G hobbitd_channel (found 6, req. 1 or more) Y heartbeat (found 0, req. between 1 and 1) G /usr/sbin/sshd (found 1, req. 1 or more) R /opt/vmware/vpxa/vpx/vpxa (found 0, req. 1 or more) R /usr/lib/vmware/hostd/vmware-hostd (found 0, req. 1 or more) G /usr/sbin/snmpd (found 1, req. 1 or more) G cron (found 1, req. 1 or more) G sshd (found 5, req. 1 or more) ... ...
From hobbit-clients.cfg: HOST=hobbitdev LOAD 40.0 50.0 PROC hobbitd_channel PROC heartbeat 1 1 yellow GROUP=HHEARTBEAT FILE /apps/hobbit/server/etc/bb-hosts yellow MTIME>600 TRACK FILE /apps/hobbit/server/etc/hobbit-alerts.cfg yellow MTIME>600 TRACK FILE /apps/hobbit/server/etc/hobbit-clients.cfg yellow MTIME>600 TRACK PORT LOCAL=0.0.0.0:1984 TEXT=HobbitD
############################################################ ..SNIP..
ESX VI Servers
PAGE=ESXVI LOAD 5.0 8.0 PROC /usr/sbin/sshd 1 -1 PROC /opt/vmware/vpxa/vpx/vpxa 1 -1 PROC /usr/lib/vmware/hostd/vmware-hostd 1 -1 PROC /usr/sbin/snmpd 1 -1
############################################################ ..SNIP..
DEFAULT
# These are the built-in defaults.
#UP 1h
UP 30m
LOAD 8.0 10.0
DISK "%^/mnt.*|^/cdrom.*" 102 102
DISK * 90 95
MEMPHYS 101 102
MEMSWAP 85 95
MEMACT 90 95
LOG /var/log/messages "%(?-i)NOTICE"
LOG /var/log/messages "%(?-i)WARNING" COLOR=yellow
LOG /var/adm/messages "%(?-i)NOTICE" "IGNORE=%(file system
full|disabled dmpnode|di
sabled path|enabled dmpnode|enabled
path|vx_nospace|vxdmp|dmp_tur_temp_pgr|pure-ftpd|rdftp|
downloaded|uploaded|Deleted|acl_server|unrecognized
ioctl|Unknown:|exited without|uid 29108
|unregistered|pcn: possible RX|nfssrv)"
RESOLUTION In hobbit-clients.cfg there's an entry for ESX VI Servers, well this doesn't exist. I'm not watching those ESX servers from my dev box and there is no entry in bb-hosts for this as well. I've removed the PAGE=ESXVI entry from hobbit-clients.cfg and the "phantom" processes are now gone. Sorry for being long winded here, just wanted to post so no one else runs into this bone-headed mistake.
Regards Gregory R Shea EMC Corporation