Hello,

On Mon, 08 Sep 2008 15:50:39 +0200, Rolf Schrittenlocher <schritte at hebis.uni-frankfurt.de> wrote:

Hi,

don't you need localclient.cfg on the server (who is a client, too) as well?

Regards Rolf

I also added this on the localclient.cfg file from the server : $ cat localclient.cfg ... HOST=Suspendisse LOG /var/log/messages MARK COLOR=RED ... $

But I don't have any logs coming up in the Hobbit web interface : The client did not report any logfile data Where could be the problem? Anyone here check its log files without any problem?

...

Hello,

I've posted a couple of month but after hours & hours of tests, I still can't check logs with Hobbit. I'm running a Hobbit server on Linux Ubuntu and a Hobbit client with 'client side configuration' on Ubuntu or RHEL.

On my client computer called "Suspendisse" : $ cat localclient.cfg ... # LOG LOG /var/log/messages MARK COLOR=RED ... $

For this example, I will go get a red alert when a "MARK" Then, on my Hobbit server called "Fusce" : $ cat hobbit-clients.cfg ... HOST=Suspendisse LOG /var/log/messages MARK COLOR=RED ... $

That's what I've read on the Hobbit man page but it doesn't work. The log doesn't appear on my Hobbit web pages. What I'm doing wrong ?

Le Tue, 9 Sep 2008 09:38:37 -0400, Galen Johnson <Galen.Johnson at sas.com> a écrit :

One of the behaviors of the log message monitor is it only sends logs if there is a problem. I think they hang around for 30 minutes or so. Not exactly clear if it is triggering and not sending.

=G=

Hi,

I've especially specify "MARK" in red color in /var/log/messages. I know this MARK come each 30min. I still can't monitor any logs with Hobbit :-/

Best regards

Fear Google and its outstanding ability to find things...

http://www.google.com/search?q=hobbit+fedora+client&ie=utf-8&oe=utf-8&aq=t&r...

http://rpm.pbone.net/index.php3/stat/3/srodzaj/1/search/hobbit-client

Josh Luthman Office: 937-552-2340 Direct: 937-552-2343 1100 Wayne St Suite 1337 Troy, OH 45373

Those who don't understand UNIX are condemned to reinvent it, poorly. --- Henry Spencer

On Mon, Sep 8, 2008 at 3:06 PM, Nikesh Maharaj <NMaharaj at tcta.co.za> wrote:

Hi all,

Im looking for a fedora client with instructions on how to load.

Thanks

Le Tue, 9 Sep 2008 15:39:59 -0400, "Kauffman, Tom" <KauffmanT at nibco.com> a écrit :

Start with the basics -

As the hobbit user on "Suspendisse", try "less /var/log/messages" to see if the hobbit client can even read the log (I don't know Ubuntu, but RHEL and SUSE both set /var/log/messages to mode 640 by default).

You won't need the 'localclient.cfg' entry on the hobbit server - that only applies to the hobbit client running on the server. But you WILL need a rule in hobbit-alerts.cfg on the server if you want to be alerted when the condition comes up.

Hello Tom,

I've already checked this : the Hobbit user on "Suspendisse" can read the "/var/log/messages" file. Gonna remove the lines I've added on the Hobbit server. Gonna put a trigger on hobbit-alerts.cfg and see. I will keep you in touch

I will post an example on existing hobbit FAQ mediawiki site.

http://en.wikibooks.org/wiki/System_Monitoring_with_Hobbit/Other_Docs/FAQ#Ho....

T.J. Yang

Date: Wed, 10 Sep 2008 17:42:10 +0200 From: linuxmasterjedi at free.fr To: hobbit at hswn.dk Subject: Re: [hobbit] Problem to check logs with Hobbit

Hi once again

...

Hello,

I've posted a couple of month but after hours & hours of tests, I still can't check logs with Hobbit. I'm running a Hobbit server on Linux Ubuntu and a Hobbit client with 'client side configuration' on Ubuntu or RHEL.

On my client computer called "Suspendisse" : $ cat localclient.cfg ... # LOG LOG /var/log/messages MARK COLOR=RED ... $

I re-up this topic because I can't find a way to monitor any log files with Hobbit on any clients (Linux, AIX, Solaris) Is there an example somewhere I can follow (I already man'ed and google'd).

Thanks by advance

See how Windows connects the people, information, and fun that are part of your life. http://clk.atdmt.com/MRT/go/msnnkwxp1020093175mrt/direct/01/

Le Wed, 10 Sep 2008 13:34:46 -0400, "Kauffman, Tom" <KauffmanT at nibco.com> a écrit :

On your hobbit server -

1. set up etc/client-local.cfg to reference the logs you want AND any exclusions. For AIX, I have: [aix] log:/var/log/syslog:10240 ignore 3004-004 ignore 3004-035 ignore 3004 log:/var/log/console.log:10240 log:/var/log/dsmsched.log:10240

2. set up etc/hobbit-clients.cfg to create your alerting criteria. For AIX, I've got these set: HOST=%.* LOG /var/log/syslog %.*crit.su.*to.root red LOG /var/log/syslog %.*crit.su yellow LOG %/var/(adm|log)/console.log %.*not.responding.still.trying yellow

Change client-local.cfg first. Allow 15 to 20 minutes for this to propagate to the client; look for a file called logfetch.<hostname>.cfg in client/tmp. This should match your entries in client-local.cfg.

Once the logs sart coming in, play with the client-local.cfg and a test system, to track what you're interested in.

Tom

Thanks both to Tom & T.J. Yang, I will try this out tomorrow

I am running a 1982 version of the BB client on one Windows box and it is reporting load to my $newname4hobbit. Are you comparing load to load or CPU% to load? Josh Luthman Office: 937-552-2340 Direct: 937-552-2343 1100 Wayne St Suite 1337 Troy, OH 45373

Those who don't understand UNIX are condemned to reinvent it, poorly. --- Henry Spencer

On Wed, Sep 10, 2008 at 5:26 PM, Jon Boede <jon at shadowsoft.com> wrote:

Anybody else using bbwin (0.11) and seeing that it reports CPU much higher than what Windows says the CPU load is?

Personally, I'm inclined to believe that Windows is getting it wrong, but I'm biased. :-)

My Windows server is next door to unused so 4 load is could be a percentage or the *nix variant. I do know that *nix load is NOT a % - this may be the same situation with the BBWin client.

Josh Luthman Office: 937-552-2340 Direct: 937-552-2343 1100 Wayne St Suite 1337 Troy, OH 45373

Those who don't understand UNIX are condemned to reinvent it, poorly. --- Henry Spencer

On Wed, Sep 10, 2008 at 5:55 PM, Jon Boede <jon at shadowsoft.com> wrote:

The BBWIN cpu component reports cpu usage as load... for example, if cpu0 is 4% and cpu1 is 6% then it reports load=5%, the average of the two.

The thing is, that we've been watching the cpu utilization with the Windows tools and it never shows either cpu hitting 100% (more like maybe 70% max) even though bbwin frequently goes red, hitting 99 and 100%.

Josh Luthman wrote:

I am running a 1982 version of the BB client on one Windows box and it is reporting load to my $newname4hobbit. Are you comparing load to load or CPU% to load? Josh Luthman Office: 937-552-2340 Direct: 937-552-2343 1100 Wayne St Suite 1337 Troy, OH 45373

Those who don't understand UNIX are condemned to reinvent it, poorly. --- Henry Spencer

On Wed, Sep 10, 2008 at 5:26 PM, Jon Boede <jon at shadowsoft.com> wrote:

...

Anybody else using bbwin (0.11) and seeing that it reports CPU much higher than what Windows says the CPU load is?

Personally, I'm inclined to believe that Windows is getting it wrong, but I'm biased. :-)

Le Wed, 10 Sep 2008 13:34:46 -0400, "Kauffman, Tom" <KauffmanT at nibco.com> a écrit :

On your hobbit server -

1. set up etc/client-local.cfg to reference the logs you want AND any exclusions. For AIX, I have: [aix] log:/var/log/syslog:10240 ignore 3004-004 ignore 3004-035 ignore 3004 log:/var/log/console.log:10240 log:/var/log/dsmsched.log:10240

2. set up etc/hobbit-clients.cfg to create your alerting criteria. For AIX, I've got these set: HOST=%.* LOG /var/log/syslog %.*crit.su.*to.root red LOG /var/log/syslog %.*crit.su yellow LOG %/var/(adm|log)/console.log %.*not.responding.still.trying yellow

Change client-local.cfg first. Allow 15 to 20 minutes for this to propagate to the client; look for a file called logfetch.<hostname>.cfg in client/tmp. This should match your entries in client-local.cfg.

Once the logs sart coming in, play with the client-local.cfg and a test system, to track what you're interested in.

Hi & thanks once again for you tutorial but that's crazy, I still can't see any log reported to the server! I'm monitoring oracle & mysql databases, Netapp filers, DNS, DHCP, smtp, imap, firewall via devmons, SAP via CheckMySAP plugin, a lot processes on 4 different OS, etc... but I'm incapable to monitor a nasty log file :-/ Is there some well-know bugs about this issue? I'm using Hobbit 4.2.0 without allinonepatch.

Thanks for any help

Best regards,

  LMJ

I checked - the allinone patch has significant changes for logfetch.c, the client-side program that processes the log file.

Tom

-----Original Message----- From: L.M.J [mailto:linuxmasterjedi at free.fr] Sent: Saturday, September 13, 2008 1:58 AM To: hobbit at hswn.dk Subject: Re: [hobbit] Problem to check logs with Hobbit

Le Wed, 10 Sep 2008 13:34:46 -0400, "Kauffman, Tom" <KauffmanT at nibco.com> a écrit :

On your hobbit server -

1. set up etc/client-local.cfg to reference the logs you want AND any exclusions. For AIX, I have: [aix] log:/var/log/syslog:10240 ignore 3004-004 ignore 3004-035 ignore 3004 log:/var/log/console.log:10240 log:/var/log/dsmsched.log:10240

2. set up etc/hobbit-clients.cfg to create your alerting criteria. For AIX, I've got these set: HOST=%.* LOG /var/log/syslog %.*crit.su.*to.root red LOG /var/log/syslog %.*crit.su yellow LOG %/var/(adm|log)/console.log %.*not.responding.still.trying yellow

Change client-local.cfg first. Allow 15 to 20 minutes for this to propagate to the client; look for a file called logfetch.<hostname>.cfg in client/tmp. This should match your entries in client-local.cfg.

Once the logs sart coming in, play with the client-local.cfg and a test system, to track what you're interested in.

Hi & thanks once again for you tutorial but that's crazy, I still can't see any log reported to the server! I'm monitoring oracle & mysql databases, Netapp filers, DNS, DHCP, smtp, imap, firewall via devmons, SAP via CheckMySAP plugin, a lot processes on 4 different OS, etc... but I'm incapable to monitor a nasty log file :-/ Is there some well-know bugs about this issue? I'm using Hobbit 4.2.0 without allinonepatch.

Thanks for any help

Best regards,

  LMJ