[Xymon] advice/Best Practices for hobbit-clients.cfg

[Taylor Lewick]

We monitor several hundred Linux/Windows hosts roughly 50/50 split.

We use regular expressions with the PAGE=, and this works because we organize our pages by location, then by windows or linux servers, or other categories such as power, storage, network, etc

For example:
PAGE=%.*-Win.* EXHOST=hosta,hostb,etc
PAGE=%.*-Lin.* EXHOST=host123,host234,etc

Works for PROC, LOG, LOAD, etc, and you can make the stuff inside the regex more or less restrictive/specific as needed.  Our entire config file is about 50 or 60 lines, including the default section.

-----Original Message-----
From: xymon-bounces at xymon.com [mailto:xymon-bounces at xymon.com] On Behalf Of Soporte Infraestructura Operativa y Almacenamiento
Sent: Monday, May 02, 2011 2:49 PM
To: xymon at xymon.com
Subject: [Xymon] advice/Best Practices for hobbit-clients.cfg

Hi all:
I guess that many of us have mixed environment with*nix,windows,linux boxes.
On my env I have CMT (cool thread) and monothread sparcs and x86 older and newer ones.

So I'm trying to make my hobbit-clients.cfg easy-use/config/modify... So I use CLASS to group HW-like tests and HOST to specialize other ones.
But I'm dealing with a strange behavior with this setup... When procs test runs;
appears in red because both Windows and unix processes are seek on the host. So clearly I have a trouble here, since I don't like the EXHOST option to deal with exceptions to the DEFAULT entry ( I'm dealing with nearly 80 monitored hosts, between bare metals and Solaris Zones + VMware Machines and
Virtual box) to put that on one line it's scary.

I adding some parts of the file and If anybody want can put the entire one.

---parts of hobbit-clients.cfg


HOST=hssftp01 (no specs added since the class have all what  I need)

CLASS=SZCSolSFTP
                UP 45m
                TIME=*:0000:2400   #alarmas rojas/amarillas en este intervalo 8x5+/24x7
                PROC sshd 1 -1 yellow
                PROC in.ftpd 1 30 red
                PROC cron 1 -1 yellow
                PORT "LOCAL=%([.:]21)$" state=LISTEN TEXT=ftp
                MEMSWAP 25 55
                MEMPHYS 99 101
                MEMACT 90 98
                LOAD 8 10
                CLOCK 95
                #DOWNTIME=*:1205:1210 #puede apagarse en ese rango (8x5+/24x7) debe ir en bb-hosts

DEFAULT
        # These are the built-in defaults.
        UP      1h
        LOAD    8.0 10.0
        DISK    * 97 99
        MEMPHYS 100 101
        MEMSWAP 50 80
        MEMACT  90 95


----parts of bb-hosts file
10.xxx.xxx.xxx  hssftp01.hss.dnm.icetel.ice     #       COMMENT:"FTP Server 01"         CLIENT:hssftp01 CLASS:SZCSolSFTP                testip  prefer  multihomed      ssh files ports uptime vmstat ftp       TRENDS:*,ifstat


------Error that I received with procs test enable. (and it’s a unix box)
red Mon May 2 13:43:32 CST 2011 - Processes NOT ok

 sshd (found 3, req. 1 or more)
 ntpd (found 1, req. 1 or more)
 httpd (found 12, req. 1 or more)
 cron (found 1, req. 1 or more)
 cron (found 1, req. 1 or more)
 %hobbitd (found 26, req. between 1 and 1)
 winvnc.exe (found 0, req. between 1 and 25)
 oracle.exe (found 0, req. between 1 and 1)
 BBWin.exe (found 0, req. between 1 and 1)
 winvnc.exe (found 0, req. between 1 and 25)
 NBConsole.exe (found 0, req. between 1 and 1)
 BBWin.exe (found 0, req. between 1 and 1)
 %^nb*.exe (found 0, req. 1 or more)
 sshd (found 3, req. 1 or more)
 named (found 1, req. 1 or more)
 cron (found 1, req. 1 or more)
 winvnc.exe (found 0, req. between 1 and 25)
 VisualSVNServer.exe (found 0, req. between 1 and 10)
 BBWin.exe (found 0, req. between 1 and 1)
 tnslsnr (found 0, req. 1 or more)
 sshd (found 3, req. 1 or more)
 ntpd (found 1, req. 1 or more)
 %ora_.* (found 0, req. 1 or more)
 winvnc.exe (found 0, req. between 1 and 25)
 sqlservr.exe (found 0, req. between 1 and 10)
 BBWin.exe (found 0, req. between 1 and 1)
 sshd (found 3, req. 1 or more)
 %java -jar /opt/dai/dai.jar (found 0, req. between 1 and 1)
 %java  -classpath .:./Frontal* (found 0, req. 1 or more)
 winvnc.exe (found 0, req. between 1 and 25)
 BBWin.exe (found 0, req. between 1 and 1)
 winvnc.exe (found 0, req. between 1 and 25)
 BBWin.exe (found 0, req. between 1 and 1)
 sshd (found 3, req. 1 or more)
 in.ftpd (found 0, req. between 1 and 30)
 cron (found 1, req. 1 or more)
 sshd (found 3, req. 1 or more)
 ntpd (found 1, req. 1 or more)
 sshd (found 3, req. 1 or more)
 ntpd (found 1, req. 1 or more)
 sshd (found 3, req. 1 or more)
 ntpd (found 1, req. 1 or more)
 tnslsnr (found 0, req. 1 or more)
 sshd (found 3, req. 1 or more)
 ntpd (found 1, req. 1 or more)
 %ora_.* (found 0, req. 1 or more)



I'm looking to any help but also any advice/BP about how to handle it will be welcome.


PD: Using xymon 4.2.3 and please accept my apologizes for spanish comments.!

Este mensaje de correo electrónico, incluidos los archivos adjuntos, es para el uso exclusivo de la persona a la que se ha enviado, y puede contener información que sea confidencial o protegida legalmente. Si usted no es el destinatario, o ha recibido este mensaje por error, no está autorizado a copiar, distribuir, o utilizar de alguna manera este mensaje. Por favor notifique inmediatamente al remitente por correo electrónico y suprimir permanentemente este mensaje y los archivos adjuntos. No se otorga ninguna garantía de que este e-mail esté libre de errores o virus.
INSTITUTO COSTARRICENSE DE ELECTRICIDAD
_______________________________________________
Xymon mailing list
Xymon at xymon.com
http://lists.xymon.com/mailman/listinfo/xymon