[hobbit] possible issue with two hobbit servers reporting for the same client?
Hello everyone,
I have a question on monitoring separate filesystems with different thresholds. My hobbit-clients.cfg file on the Xymon server includes the following:
(Names changed to protect the innocent of course).
$MACRO=%^(asdf|qwer|jalopy).*(a|s|h|l).xyz.com HOST=$MACRO DISK / 90 95 GROUP=SOMEONES_PAGER DISK %^/.+$ 90 95 GROUP=SOMEONES_EMAIL DISK %^/export/data/subdir/subdir2/log.* 95 99
However, Xymon doesn't seem to honor the above DISK entries and still marks both "/export/data/subdir/subdir2/log" and "/export/data/subdir/subdir2/log2" as red when it hits 90%+ due to the DEFAULT entry.
We recently migrated to Xymon from an aging Big Brother monitoring infrastructure, which had bb-dftab that had to be on all clients. From my understanding all of this is now handled on the server but the above just doesn't seem to be working.
My questions at this point are:
- Are my regular expressions specified correctly?
- Does Xymon support full extended regular expressions? (e.g. the difference between grep and egrep on Sun systems) - Is my understanding of the above accurate with respect to alerts about file system monitoring being generated on the server?
Thanks, Matt.
Unix System Administrator Computer Science Corporation General Dynamics Land Systems 38500 Mound Rd. Sterling Heights, MI. 48310
This is a PRIVATE message. If you are not the intended recipient, please delete without copying and kindly advise us by e-mail of the mistake in delivery. NOTE: Regardless of content, this e-mail shall not operate to bind CSC to any order or other contract unless pursuant to explicit written agreement or government initiative expressly permitting the use of e-mail for such purpose.
Oops, guess I should have changed the subject line before sending this off. Been a long day ...
Unix System Administrator Computer Science Corporation General Dynamics Land Systems 38500 Mound Rd. Sterling Heights, MI. 48310 Desk: (586) 825-8294 Oracle IM: moldvanm
This is a PRIVATE message. If you are not the intended recipient, please delete without copying and kindly advise us by e-mail of the mistake in delivery. NOTE: Regardless of content, this e-mail shall not operate to bind CSC to any order or other contract unless pursuant to explicit written agreement or government initiative expressly permitting the use of e-mail for such purpose.
Matthew Moldvan/GIS/CSC at CSC 11/05/2009 03:40 PM Please respond to hobbit at hswn.dk
To hobbit at hswn.dk cc
Subject Re: [hobbit] possible issue with two hobbit servers reporting for the same client?
Hello everyone,
I have a question on monitoring separate filesystems with different thresholds. My hobbit-clients.cfg file on the Xymon server includes the following:
(Names changed to protect the innocent of course).
$MACRO=%^(asdf|qwer|jalopy).*(a|s|h|l).xyz.com HOST=$MACRO DISK / 90 95 GROUP=SOMEONES_PAGER DISK %^/.+$ 90 95 GROUP=SOMEONES_EMAIL DISK %^/export/data/subdir/subdir2/log.* 95 99
However, Xymon doesn't seem to honor the above DISK entries and still marks both "/export/data/subdir/subdir2/log" and "/export/data/subdir/subdir2/log2" as red when it hits 90%+ due to the DEFAULT entry.
We recently migrated to Xymon from an aging Big Brother monitoring infrastructure, which had bb-dftab that had to be on all clients. From my understanding all of this is now handled on the server but the above just doesn't seem to be working.
My questions at this point are:
- Are my regular expressions specified correctly?
- Does Xymon support full extended regular expressions? (e.g. the difference between grep and egrep on Sun systems) - Is my understanding of the above accurate with respect to alerts about file system monitoring being generated on the server?
Thanks, Matt.
Unix System Administrator Computer Science Corporation General Dynamics Land Systems 38500 Mound Rd. Sterling Heights, MI. 48310
This is a PRIVATE message. If you are not the intended recipient, please delete without copying and kindly advise us by e-mail of the mistake in delivery. NOTE: Regardless of content, this e-mail shall not operate to bind CSC to any order or other contract unless pursuant to explicit written agreement or government initiative expressly permitting the use of e-mail for such purpose.
"However, Xymon doesn't seem to honor the above DISK entries and still marks both "/export/data/subdir/subdir2/log" and "/export/data/subdir/subdir2/log2" as red when it hits 90%+ due to the DEFAULT entry."
Is the DEFAULT entry above or below this? Xymon stops at the first match.
You might try hard coding something instead of using the fancy $MACRO just to separate the problems of "is my DISK statement right" from "is my fancy $MACRO right".
GLH
On Thu, Nov 5, 2009 at 2:40 PM, Matthew Moldvan <mmoldvan at csc.com> wrote:
Hello everyone,
I have a question on monitoring separate filesystems with different thresholds. My hobbit-clients.cfg file on the Xymon server includes the following:
(Names changed to protect the innocent of course).
$MACRO=%^(asdf|qwer|jalopy).*(a|s|h|l).xyz.com HOST=$MACRO DISK / 90 95 GROUP=SOMEONES_PAGER DISK %^/.+$ 90 95 GROUP=SOMEONES_EMAIL DISK %^/export/data/subdir/subdir2/log.* 95 99
However, Xymon doesn't seem to honor the above DISK entries and still marks both "/export/data/subdir/subdir2/log" and "/export/data/subdir/subdir2/log2" as red when it hits 90%+ due to the DEFAULT entry.
We recently migrated to Xymon from an aging Big Brother monitoring infrastructure, which had bb-dftab that had to be on all clients. From my understanding all of this is now handled on the server but the above just doesn't seem to be working.
My questions at this point are:
- Are my regular expressions specified correctly? - Does Xymon support full extended regular expressions? (e.g. thedifference between grep and egrep on Sun systems) - Is my understanding of the above accurate with respect to alerts about file system monitoring being generated on the server?
Thanks, Matt.
Unix System Administrator Computer Science Corporation General Dynamics Land Systems 38500 Mound Rd. Sterling Heights, MI. 48310
This is a PRIVATE message. If you are not the intended recipient, please delete without copying and kindly advise us by e-mail of the mistake in delivery. NOTE: Regardless of content, this e-mail shall not operate to bind CSC to any order or other contract unless pursuant to explicit written agreement or government initiative expressly permitting the use of e-mail for such purpose.
-- Disclaimer: 1) all opinions are my own, 2) I may be completely wrong, 3) my advice is worth at least as much as what you are paying for it, or your money cheerfully refunded.
The default is at 90 95, which it seems to be applying. I'll try hard coding the hostname and work from there ...
The question still remains: does Xymon support extended regular expressions?
Thanks, Matt.
Unix System Administrator Computer Science Corporation General Dynamics Land Systems 38500 Mound Rd. Sterling Heights, MI. 48310 Desk: (586) 825-8294 Oracle IM: moldvanm
This is a PRIVATE message. If you are not the intended recipient, please delete without copying and kindly advise us by e-mail of the mistake in delivery. NOTE: Regardless of content, this e-mail shall not operate to bind CSC to any order or other contract unless pursuant to explicit written agreement or government initiative expressly permitting the use of e-mail for such purpose.
Greg Hubbard <glh.forums at gmail.com> 11/05/2009 04:42 PM Please respond to hobbit at hswn.dk
To hobbit at hswn.dk cc
Subject Re: [hobbit] possible issue with two hobbit servers reporting for the same client?
"However, Xymon doesn't seem to honor the above DISK entries and still marks both "/export/data/subdir/subdir2/log" and "/export/data/subdir/subdir2/log2" as red when it hits 90%+ due to the DEFAULT entry."
Is the DEFAULT entry above or below this? Xymon stops at the first match.
You might try hard coding something instead of using the fancy $MACRO just to separate the problems of "is my DISK statement right" from "is my fancy $MACRO right".
GLH
On Thu, Nov 5, 2009 at 2:40 PM, Matthew Moldvan <mmoldvan at csc.com> wrote:
Hello everyone,
I have a question on monitoring separate filesystems with different thresholds. My hobbit-clients.cfg file on the Xymon server includes the following:
(Names changed to protect the innocent of course).
$MACRO=%^(asdf|qwer|jalopy).*(a|s|h|l).xyz.com HOST=$MACRO DISK / 90 95 GROUP=SOMEONES_PAGER DISK %^/.+$ 90 95 GROUP=SOMEONES_EMAIL DISK %^/export/data/subdir/subdir2/log.* 95 99
However, Xymon doesn't seem to honor the above DISK entries and still marks both "/export/data/subdir/subdir2/log" and "/export/data/subdir/subdir2/log2" as red when it hits 90%+ due to the DEFAULT entry.
We recently migrated to Xymon from an aging Big Brother monitoring infrastructure, which had bb-dftab that had to be on all clients. From my understanding all of this is now handled on the server but the above just doesn't seem to be working.
My questions at this point are:
- Are my regular expressions specified correctly?
- Does Xymon support full extended regular expressions? (e.g. the difference between grep and egrep on Sun systems) - Is my understanding of the above accurate with respect to alerts about file system monitoring being generated on the server?
Thanks, Matt.
Unix System Administrator Computer Science Corporation General Dynamics Land Systems 38500 Mound Rd. Sterling Heights, MI. 48310
This is a PRIVATE message. If you are not the intended recipient, please delete without copying and kindly advise us by e-mail of the mistake in delivery. NOTE: Regardless of content, this e-mail shall not operate to bind CSC to any order or other contract unless pursuant to explicit written agreement or government initiative expressly permitting the use of e-mail for such purpose.
-- Disclaimer: 1) all opinions are my own, 2) I may be completely wrong, 3) my advice is worth at least as much as what you are paying for it, or your money cheerfully refunded.
[thread formatted for slightly better readability]
----- "Matthew Moldvan" <mmoldvan at csc.com> wrote:
The default is at 90 95, which it seems to be applying.
But, is it listed before or after the host-specific threshold? The DEFAULT rule will match all hosts, and first match wins, so if you added *after* DEFAULT, you must move it to before DEFAULT.
I'll try hard coding the hostname and work from there ...
The question still remains: does Xymon support extended regular expressions?
Yes it does. The question below about whether DEFAULT precedes or follows your host-specific rule also still remains.
Greg Hubbard <glh.forums at gmail.com> "However, Xymon doesn't seem to honor the above DISK entries and still marks both "/export/data/subdir/subdir2/log" and "/export/data/subdir/subdir2/log2" as red when it hits 90%+ due to the DEFAULT entry."
Is the DEFAULT entry above or below this? Xymon stops at the first match.
You might try hard coding something instead of using the fancy $MACRO just to separate the problems of "is my DISK statement right" from "is my fancy $MACRO right".
In <OFF6AB57C5.0DA01ADC-ON85257665.007099A1-85257665.00717534 at csc.com> Matthew Moldvan <mmoldvan at csc.com> writes:
I have a question on monitoring separate filesystems with different thresholds. My hobbit-clients.cfg file on the Xymon server includes the following:
(Names changed to protect the innocent of course).
$MACRO=%^(asdf|qwer|jalopy).*(a|s|h|l).xyz.com HOST=$MACRO DISK / 90 95 GROUP=SOMEONES_PAGER DISK %^/.+$ 90 95 GROUP=SOMEONES_EMAIL DISK %^/export/data/subdir/subdir2/log.* 95 99
However, Xymon doesn't seem to honor the above DISK entries and still marks both "/export/data/subdir/subdir2/log" and "/export/data/subdir/subdir2/log2" as red when it hits 90%+ due to the DEFAULT entry.
You should reverse the order of your rules. As the hobbit-clients.cfg man page says:
"The entire file is evaluated from the top to bottom, and
the first match found is used. So you should put the specific
settings first, and the generic ones last.So what happens is that your second rule "DISK %^/.+$" matches everything, since all of your filesystems begin with "/", so that is the rule that is applied.
(Your first rule is OK, because it is not a pattern - so it will only match the root filesystem).
My questions at this point are:
- Are my regular expressions specified correctly?
Except for the order, yes.
- Does Xymon support full extended regular expressions? (e.g. thedifference between grep and egrep on Sun systems)
Xymon uses the "pcre" library, so it support "Perl-compatible" regular expressions.
- Is my understanding of the above accurate with respect to alertsabout file system monitoring being generated on the server?
Not sure what you mean by this, but it seems ok. You must have some corresponding entries in your hobbit-alerts.cfg file for the "SOMEONES_PAGER" and "SOMEONES_EMAIL" groups, like
GROUP=SOMEONES_EMAIL
MAIL joe at foo.comRegards, Henrik
participants (4)
-
bgmilne＠staff.telkomsa.net
-
glh.forums＠gmail.com
-
henrik＠hswn.dk
-
mmoldvan＠csc.com