Not getting alerts or change of colors for message files

[Edward Croft]

I am trying to get alerting for message files. I have checked the archives,
but found nothing in there. I have tried various configurations. The two I
have set up with hobbit clients right now are set up, one as a client with
the server controlling, the other as a client that pushes its info. Neither
seems to work. The client set to push (nodens), does not send any message
file data and the indicator stays clear and the comment says: The client did
not report any logfile data. On the client set so that the server controls
(sirona),  there is information for the logs, but nothing triggers a yellow
or red.

No entries in /var/log/messages<http://phanes/hobbit-cgi/bb-hostsvc.sh?CLIENT=sirona.hq.openratings.com&SECTION=msgs:/var/log/messages>


No entries in /var/log/secure
<http://phanes/hobbit-cgi/bb-hostsvc.sh?CLIENT=sirona.hq.openratings.com&SECTION=msgs:/var/log/secure>


Full log /var/log/messages
<http://phanes/hobbit-cgi/bb-hostsvc.sh?CLIENT=sirona.hq.openratings.com&SECTION=msgs:/var/log/messages>
Jan  2 08:27:03 sirona ecroft: NOTICE

Full log /var/log/secure
<http://phanes/hobbit-cgi/bb-hostsvc.sh?CLIENT=sirona.hq.openratings.com&SECTION=msgs:/var/log/secure>
Jan  2 07:56:19 sirona sshd[27841]: Connection closed by 10.0.14.249
Jan  2 08:01:20 sirona sshd[27897]: Connection closed by 10.0.14.249
Jan  2 08:06:21 sirona sshd[27943]: Connection closed by 10.0.14.249


The client-local.cfg file on the server has these entries.
[sirona.hq.openratings.com]
log:/var/log/messages:10240
trigger NOTICE
trigger WARNING

log:/var/log/secure:10240
ignore "Connection closed by"
trigger BREAKIN

[nodens.hq.openratings.com]
log:/var/log/messages:10240
trigger NOTICE

log:/var/log/secure:10240
ignore "Connection closed by"
trigger BREAKIN

The hobbit-clients.cfg file on the server has:
HOST=sirona.hq.openratings.com
        LOG %.* WARNING COLOR=yellow
        LOG %.* NOTICE COLOR=red

HOST=nodens.hq.openratings.com
        LOG %.* WARNING COLOR=yellow
        LOG %.* NOTICE COLOR=red

DEFAULT
        # These are the built-in defaults.
        #LOG %.* WARNING COLOR=yellow
        LOG %.* WARNING COLOR=yellow
        LOG %.* NOTICE COLOR=red
        UP      1h
        LOAD    5.0 10.0
        DISK    * 91 95
        MEMPHYS 100 101
        MEMSWAP 50 80
        MEMACT  90 97
        PROC    cron

On nodens I have in the client-local.cfg
[nodens.hq.openratings.com]
log:/var/log/messages:10240
trigger NOTICE
#ignore MARK

log:/var/log/secure:10240
ignore Martian
trigger BREAKIN
#trigger TESTING

And in the localclient.cfg
HOST=nodens.hq.openratings.com
       PROC cron
       DISK /data1 96 99
       LOG /var/log/messages NOTICE COLOR=red
       LOG /var/log/secure BREAKIN COLOR=red
       LOG /var/log/messages WARNING COLOR=yellow



DEFAULT
        # These are the built-in defaults.
        UP      1h
        LOAD    5.0 10.0
        DISK    * 90 95
        MEMPHYS 100 101
        MEMSWAP 50 80
        MEMACT  90 97
       LOG /var/log/messages NOTICE COLOR=red
       LOG /var/log/secure BREAKIN COLOR=red




  clientlaunch.cfg on nodens is:
[msgcache]
        DISABLED
        ENVFILE $HOBBITCLIENTHOME/etc/hobbitclient.cfg
        CMD $HOBBITCLIENTHOME/bin/msgcache --no-daemon
--pidfile=$HOBBITCLIENTHOME/logs/msgcache.pid
        LOGFILE $HOBBITCLIENTHOME/logs/msgcache.log

# The main client task
[client]
        ENVFILE $HOBBITCLIENTHOME/etc/hobbitclient.cfg
        CMD $HOBBITCLIENTHOME/bin/hobbitclient.sh --local
        LOGFILE $HOBBITCLIENTHOME/logs/hobbitclient.log
        INTERVAL 5m

# ORCA data collector. This is an experimental add-on module,
# the data sent by this module are not processed by Hobbit 4.2.
[orcadata]
        DISABLED
        ENVFILE $HOBBITCLIENTHOME/etc/hobbitclient.cfg
        CMD $HOBBITCLIENTHOME/bin/orcahobbit
--orca=/usr/local/orca/orcallator
        LOGFILE $HOBBITCLIENTHOME/logs/hobbitclient.log �

-- 
If the sane say the insane are insane,
What if the sane are insane?
Would that make the insane sane?
Explains a lot in Washington!
 --E. Croft
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.xymon.com/pipermail/xymon/attachments/20080103/09e1a936/attachment.html>