I have set up XYMon and XYMon - Client successfully today!
But I have an interesting situation, I have services like my Routers and esxi servers where I want XYMon to go RED if SSH is ENABLED. It should be disabled for security, can I make it so it runs the other way around then normal?
I Apologize if this is written somewhere and super easy, I couldn't find it!
PS: I had a hard time getting client to work, if I can make a polite suggestion for the this webpage >>
http://xymon.sourceforge.net/xymon/help/xymon-tips.html#noclient
Basically that
cat /etc/default/xymon-client | grep CLIENTHOSTNAME
must match
XYMon-Server's /etc/xymon/hosts.cfg.
1.2.3.4 CLIENTHOSTNAME # Extra Params
I understand that it is implied in the text, but this might make things much easier to fix for those of us looking to solve the issue of "The client is using another hostname than what is in the hosts.cfg file."
On 7/21/2016 7:58 AM, FreeSoftwareServers wrote:
I want XYMon to go RED if SSH is ENABLED
0.0.0.0 foo.bar.com # !ssh
From the man page for hosts.cfg
By prefixing a test with "!" it becomes a reverse test: Xymon will expect the service NOT to be available, and send a green status if it does NOT respond. If a connection to the service succeeds, the status will go red.
-- Do things because you should, not just because you can.
John Thurston 907-465-8591 John.Thurston at alaska.gov Enterprise Technology Services Department of Administration State of Alaska
Hi,
On Thu, Jul 21, 2016 at 01:10:18PM -0800, John Thurston wrote:
On 7/21/2016 7:58 AM, FreeSoftwareServers wrote:
I want XYMon to go RED if SSH is ENABLED
0.0.0.0 foo.bar.com # !ssh
That's for the remote test.
If you want a "local" test, i.e. one that's based on data sent by the client, you can put lines the following into your analysis.cfg:
HOST=foo.bar.com PORT STATE=LISTEN "LOCAL=%^(0\.0\.0\.0|::).:$" MAX=0 "TRACK=Unwanted SSH server"
(We use that to get informed if some user starts a web server on typical ports like 8000 or 8080 on managed Linux workstations.)
Kind regards, Axel Beckert-- Axel Beckert <beckert at phys.ethz.ch> support: +41 44 633 26 68 IT Services Group, HPT H 6 voice: +41 44 633 41 89 Departement of Physics, ETH Zurich CH-8093 Zurich, Switzerland http://nic.phys.ethz.ch/
participants (3)
-
beckert＠phys.ethz.ch
-
freesoftwareservers＠gmail.com
-
john.thurston＠alaska.gov