BBWin client not appearing in server
I would suggest using a Class statement for the default settings for all clients using the powershell client, using settings Windows understands. One change here applies to all. Individual hosts can be listed to obtain unique settings.
HOST=WINDOWS2016
LOAD 95 99CLASS=powershell
UP 30m
LOAD 90 95
DISK * 85 95
MEMACT 98 101
MEMPHYS 90 95
MEMSWAP 85 95
LOG eventlog_application Error|WarningIGNORE=[1008],[2004],[1018],[1022],[11],[1524],[1030],[ 2003],[4099],[8005],[12289]
LOG eventlog_system ErrorIGNORE=[36871],[36874],[1002],[513],[4879],[36887],[1030],[36888],[6037],[1],DCOM,Print,TermServDevices
LOG eventlog_system Warning COLOR=yellowTim Williams VCU Computing Center
On Wed, May 22, 2019 at 4:02 PM Jaime Kikpole via Xymon <xymon at xymon.com> wrote:
---------- Forwarded message ---------- From: Jaime Kikpole <jkikpole at cairodurham.org> To: "xymon at xymon.com" <xymon at xymon.com> Cc: Bcc: Date: Wed, 22 May 2019 16:01:58 -0400 Subject: Re: [Xymon] BBWin client not appearing in server The PowerShell version turned out to be really easy to use, once I figured it out. I see why you prefer it. Thanks for the tip!
I only have two glitches remaining. First, I have a Windows 10 VM that is giving a yellow alert on MEMSWAP. This is despite changing the configuration. Here is what it looks like now.
DEFAULT
# These are the built-in defaults. You should only modify these # lines, not add new ones (no PROC, DISK, LOG ... lines). UP 1h LOAD 5.0 10.0 DISK * 90 95 INODE * 70 90 MEMPHYS 100 101 MEMSWAP 50 80 MEMACT 90 97 PORT "LOCAL=%([\.:]22)$" STATE=ESTABLISHED min=0 TRACK=ssh"TEXT=SSH logins"
PORT "LOCAL=%([\.:]80)$" STATE=ESTABLISHED min=0 TRACK=http"TEXT=Web Connections"
[ ... other hosts here ... ]
HOST=host.domain.name
MEMSWAP 75 85As far as I can tell, the settings for DEFAULT are still in effect for host.domain.name. (This is not its real FQDN.) It is giving a yellow alert for 55% utilization. Any suggestions on why it is using the DEFAULT configuration instead of the HOST=... configuration?
The second issue is that Xymon keeps giving alerts for CPU over-utilization when the systems are running just fine. The CPU page for those hosts will have text like this:
Wed 22 May 15:54:07 2019 up: 6 days, 0 users, 82 procs, load=6.73%
If I'm reading this right, the CPU is reporting in percentage instead of Unix-like "load" numbers, so Xymon is getting confused. Is that right? Should I just make a new "LOAD 85 95" line in analysis.cfg for those hosts?
Thanks for all the help.
Jaime Kikpole
Director of Technology & Innovations Cairo-Durham Central School District (518) 622-8543, x59500 cairodurham.org <http://www.cairodurham.org>
Technical Support: help at cairodurham.org go.cairodurham.org/techtips
[image: Google Certified Educator, Level 1] [image: Google Certified Educator, Level 2]
On Tue, May 21, 2019 at 2:17 PM Kris Springer <kspringer at innovateteam.com> wrote:
I would suggest the Powershell client instead of the BBWin client, but it's up to you.
Here's my instructions for the BBWin client.
- Install the BB-Xymon client http://sourceforge.net/projects/bbwin/ <http://sourceforge.net/projects/bbwin/> - Configure the client’s config - BBWin server address - servername.yourdomain.com <http://servername.yourdomain.com> - Hostname - PC-123 (must match the Hostname in the server hosts.cfg file) - Mode - local - Services - Add the services you want to monitor - Processes - Add the processes you want to monitor - XML File tab - Save - Start the BBwin service manually the first time - Configure the firewall to allow port 1984 - If you edit the config, restart the service - Give it about 30 minutes to clear the red messages that will pop up - You can manually edit the BBWin.cfg file and make all ‘msgs’ green * Also, if using the BBWin client I always use the GUI tool. It just works easier to add/remove services and processes to the config. https://sourceforge.net/projects/bbwingui/ <https://sourceforge.net/projects/bbwingui/files/>
If you want to use the Powershell client instead, https://www.krisspringer.com/posts/xymon-ps-client.php
Kris Springer
On 5/21/19 12:00 PM, Root, Paul T wrote:
It is telling you the issue:
*can't open C:\Program Files (x86)\BBWin\tmp\clientlocal.cfg : The system cannot find the file specified.*
Seems like a strange place for a config file.
*From:* Jaime Kikpole <jkikpole at cairodurham.org> <jkikpole at cairodurham.org> *Sent:* Tuesday, May 21, 2019 12:50 PM *To:* xymon at xymon.com *Subject:* Re: [Xymon] BBWin client not appearing in server
I have some additional information. I changed the logging level from 3 to 4, restarted the service, and the logs now show the following.
2019/05/21 13:45:47 [INFO]: bbwin is started - using central configuration 2019/05/21 13:45:47 [DEBUG]: [cpu]: cpu review started 2019/05/21 13:45:48 [DEBUG]: [cpu]: cpu review ended 2019/05/21 13:45:48 [DEBUG]: [disk]: drive string C:
2019/05/21 13:45:48 [DEBUG]: [disk]: drive string D:
2019/05/21 13:45:48 [DEBUG]: [disk]: drive string E:
2019/05/21 13:45:48 [DEBUG]: [disk]: drive string F:
2019/05/21 13:45:48 [DEBUG]: [filesystem]: start AgentFileSystem::InitCentralMode 2019/05/21 13:45:48 [DEBUG]: [filesystem]: checking file C:\Program Files (x86)\BBWin\tmp\clientlocal.cfg 2019/05/21 13:45:48 [INFO]: [filesystem]: can't open C:\Program Files (x86)\BBWin\tmp\clientlocal.cfg : The system cannot find the file specified. 2019/05/21 13:45:48 [DEBUG]: [msgs]: start AgentMsgs::InitCentralMode 2019/05/21 13:45:48 [DEBUG]: [msgs]: checking file C:\Program Files (x86)\BBWin\tmp\clientlocal.cfg 2019/05/21 13:45:48 [INFO]: [msgs]: can't open C:\Program Files (x86)\BBWin\tmp\clientlocal.cfg : The system cannot find the file specified. 2019/05/21 13:45:49 [DEBUG]: [svcs]: start AgentSvcs::InitCentralMode 2019/05/21 13:45:49 [DEBUG]: [svcs]: checking file C:\Program Files (x86)\BBWin\tmp\clientlocal.cfg 2019/05/21 13:45:49 [INFO]: [svcs]: can't open C:\Program Files (x86)\BBWin\tmp\clientlocal.cfg : The system cannot find the file specified. 2019/05/21 13:45:49 [DEBUG]: [svcs]: can't open service BFE 2019/05/21 13:45:49 [DEBUG]: [svcs]: can't open service Dnscache 2019/05/21 13:45:49 [DEBUG]: [svcs]: can't open service mpssvc 2019/05/21 13:45:49 [DEBUG]: [svcs]: can't open service SecurityHealthService 2019/05/21 13:45:49 [DEBUG]: [svcs]: can't open service WdNisSvc 2019/05/21 13:45:49 [DEBUG]: [svcs]: can't open service WinDefend 2019/05/21 13:45:49 [DEBUG]: [svcs]: can't open service WinHttpAutoProxySvcAny tips are greatly appreciated.
*Jaime Kikpole*
*Director of Technology & Innovations* *Cairo-Durham Central School District* (518) 622-8543, x59500 cairodurham.org <http://www.cairodurham.org>
*Technical Support:* help at cairodurham.org go.cairodurham.org/techtips
[image: Google Certified Educator, Level 1] [image: Google Certified Educator, Level 2]
On Tue, May 21, 2019 at 1:26 PM Jaime Kikpole via Xymon <xymon at xymon.com> wrote:
---------- Forwarded message ---------- From: Jaime Kikpole <jkikpole at cairodurham.org> To: xymon at xymon.com Cc: Bcc: Date: Tue, 21 May 2019 13:18:56 -0400 Subject: BBWin client not appearing in server
I just learned of BBWin last night and have been trying to get it to work with my Xymon system. I've got it installed and started, added the system to hosts.cfg on the server, and I can now see it on conn, info, and trends, but nothing else. I only changed BBWin.cfg enough to set the "mode" to "central".
The C:\Program Files (x86)\BBWin\logs\BBWin.log file shows these messages every 5 minutes:
[filesystem]: can't open C:\Program Files (x86)\BBWin\tmp\clientlocal.cfg : The system cannot find the file specified.
[msgs]: can't open C:\Program Files (x86)\BBWin\tmp\clientlocal.cfg : The system cannot find the file specified.
[svcs]: can't open C:\Program Files (x86)\BBWin\tmp\clientlocal.cfg : The system cannot find the file specified.
I've also found the following error when I restart the BBWin service:
[filesystem]: failed to load logfetch status C:\Program Files (x86)\BBWin\tmp\logfetch.status : The system cannot find the file specified.
I confirmed that these files are missing, but the "tmp" folder exists.
Any thoughts on what I've missed?
*Jaime Kikpole*
*Director of Technology & Innovations* *Cairo-Durham Central School District* (518) 622-8543, x59500 cairodurham.org <http://www.cairodurham.org>
*Technical Support:* help at cairodurham.org go.cairodurham.org/techtips
[image: Google Certified Educator, Level 1] [image: Google Certified Educator, Level 2]
This electronic message and any attachment(s) may contain confidential or legally privileged information protected by law from further disclosure and is intended only for the individual or entity identified above as the addressee. If you are not the addressee (or the employee or agency responsible to deliver it to the addressee), or if this message has been addressed to you in error, you are hereby notified that you may not copy, forward, disclose or use any part of this message or any attachment(s). Please notify the sender immediately by return email or telephone and permanently delete this message and attachment(s) from your system.
---------- Forwarded message ---------- From: Jaime Kikpole via Xymon <xymon at xymon.com> To: xymon at xymon.com Cc: Bcc: Date: Tue, 21 May 2019 13:18:56 -0400 Subject: [Xymon] BBWin client not appearing in server
Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon
This electronic message and any attachment(s) may contain confidential or legally privileged information protected by law from further disclosure and is intended only for the individual or entity identified above as the addressee. If you are not the addressee (or the employee or agency responsible to deliver it to the addressee), or if this message has been addressed to you in error, you are hereby notified that you may not copy, forward, disclose or use any part of this message or any attachment(s). Please notify the sender immediately by return email or telephone and permanently delete this message and attachment(s) from your system. This communication is the property of CenturyLink and may contain confidential or privileged information. Unauthorized use of this communication is strictly prohibited and may be unlawful. If you have received this communication in error, please immediately notify the sender by reply e-mail and destroy all copies of the communication and any attachments.
Xymon mailing listXymon at xymon.comhttp://lists.xymon.com/mailman/listinfo/xymon
This electronic message and any attachment(s) may contain confidential or legally privileged information protected by law from further disclosure and is intended only for the individual or entity identified above as the addressee. If you are not the addressee (or the employee or agency responsible to deliver it to the addressee), or if this message has been addressed to you in error, you are hereby notified that you may not copy, forward, disclose or use any part of this message or any attachment(s). Please notify the sender immediately by return email or telephone and permanently delete this message and attachment(s) from your system.
---------- Forwarded message ---------- From: Jaime Kikpole via Xymon <xymon at xymon.com> To: "xymon at xymon.com" <xymon at xymon.com> Cc: Bcc: Date: Wed, 22 May 2019 16:01:58 -0400 Subject: Re: [Xymon] BBWin client not appearing in server
Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon
I had no idea that was a possibility. I love the approach. Unfortunately, it doesn't seem to be working. I put your example (sans "DISK") in my analysis.cfg file just below the DEFAULT section and above the first HOST=... section. Then I ran three YouTube videos to force the load above 10% for a while. The alert went red.
Based on some online research, I added "CLASS:powershell" to the end of that host's line in hosts.cfg. Then I waited a bit over 5 minutes. The alert stayed red.
Is there a way to see what class a host is reporting in as?
Is there an easier way to see if the desired settings are applying to the host than waiting 5 minutes to see if the alarm changes?
Jaime Kikpole
Director of Technology & Innovations Cairo-Durham Central School District (518) 622-8543, x59500 cairodurham.org <http://www.cairodurham.org>
Technical Support: help at cairodurham.org go.cairodurham.org/techtips
[image: Google Certified Educator, Level 1] [image: Google Certified Educator, Level 2]
-- This electronic message and any attachment(s) may contain confidential or legally privileged information protected by law from further disclosure and is intended only for the individual or entity identified above as the addressee. If you are not the addressee (or the employee or agency responsible to deliver it to the addressee), or if this message has been addressed to you in error, you are hereby notified that you may not copy, forward, disclose or use any part of this message or any attachment(s). Please notify the sender immediately by return email or telephone and permanently delete this message and attachment(s) from your system.
From the man page: "The entire file is evaluated from the top to bottom, and the first match found is used. So you should put the specific settings first, and the generic ones last."
The DEFAULT section should be the LAST section, and the Powershell above it.
Tim
On Thu, May 23, 2019 at 11:22 AM Jaime Kikpole <jkikpole at cairodurham.org> wrote:
I had no idea that was a possibility. I love the approach. Unfortunately, it doesn't seem to be working. I put your example (sans "DISK") in my analysis.cfg file just below the DEFAULT section and above the first HOST=... section. Then I ran three YouTube videos to force the load above 10% for a while. The alert went red.
Based on some online research, I added "CLASS:powershell" to the end of that host's line in hosts.cfg. Then I waited a bit over 5 minutes. The alert stayed red.
Is there a way to see what class a host is reporting in as?
Is there an easier way to see if the desired settings are applying to the host than waiting 5 minutes to see if the alarm changes?
Jaime Kikpole
Director of Technology & Innovations Cairo-Durham Central School District (518) 622-8543, x59500 cairodurham.org <http://www.cairodurham.org>
Technical Support: help at cairodurham.org go.cairodurham.org/techtips
[image: Google Certified Educator, Level 1] [image: Google Certified Educator, Level 2]
This electronic message and any attachment(s) may contain confidential or legally privileged information protected by law from further disclosure and is intended only for the individual or entity identified above as the addressee. If you are not the addressee (or the employee or agency responsible to deliver it to the addressee), or if this message has been addressed to you in error, you are hereby notified that you may not copy, forward, disclose or use any part of this message or any attachment(s). Please notify the sender immediately by return email or telephone and permanently delete this message and attachment(s) from your system.
That was it. Thank you so much. That was driving me crazy.
I've been using Xymon for a decade or so and I had the "DEFAULT" section at the top of analysis.cfg all of that time. I'm not sure why some of my customizations were even working.
Jaime Kikpole
Director of Technology & Innovations Cairo-Durham Central School District (518) 622-8543, x59500 cairodurham.org <http://www.cairodurham.org>
Technical Support: help at cairodurham.org go.cairodurham.org/techtips
[image: Google Certified Educator, Level 1] [image: Google Certified Educator, Level 2]
On Thu, May 23, 2019 at 11:29 AM Timothy Williams <tlwilliams4 at vcu.edu> wrote:
From the man page: "The entire file is evaluated from the top to bottom, and the first match found is used. So you should put the specific settings first, and the generic ones last."
The DEFAULT section should be the LAST section, and the Powershell above it.
Tim
On Thu, May 23, 2019 at 11:22 AM Jaime Kikpole <jkikpole at cairodurham.org> wrote:
I had no idea that was a possibility. I love the approach. Unfortunately, it doesn't seem to be working. I put your example (sans "DISK") in my analysis.cfg file just below the DEFAULT section and above the first HOST=... section. Then I ran three YouTube videos to force the load above 10% for a while. The alert went red.
Based on some online research, I added "CLASS:powershell" to the end of that host's line in hosts.cfg. Then I waited a bit over 5 minutes. The alert stayed red.
Is there a way to see what class a host is reporting in as?
Is there an easier way to see if the desired settings are applying to the host than waiting 5 minutes to see if the alarm changes?
Jaime Kikpole
Director of Technology & Innovations Cairo-Durham Central School District (518) 622-8543, x59500 cairodurham.org <http://www.cairodurham.org>
Technical Support: help at cairodurham.org go.cairodurham.org/techtips
[image: Google Certified Educator, Level 1] [image: Google Certified Educator, Level 2]
This electronic message and any attachment(s) may contain confidential or legally privileged information protected by law from further disclosure and is intended only for the individual or entity identified above as the addressee. If you are not the addressee (or the employee or agency responsible to deliver it to the addressee), or if this message has been addressed to you in error, you are hereby notified that you may not copy, forward, disclose or use any part of this message or any attachment(s). Please notify the sender immediately by return email or telephone and permanently delete this message and attachment(s) from your system.
-- This electronic message and any attachment(s) may contain confidential or legally privileged information protected by law from further disclosure and is intended only for the individual or entity identified above as the addressee. If you are not the addressee (or the employee or agency responsible to deliver it to the addressee), or if this message has been addressed to you in error, you are hereby notified that you may not copy, forward, disclose or use any part of this message or any attachment(s). Please notify the sender immediately by return email or telephone and permanently delete this message and attachment(s) from your system.
participants (2)
-
jkikpole＠cairodurham.org
-
tlwilliams4＠vcu.edu