Thank you both. I will check this out first thing Monday morning.<br><br><div class="gmail_quote">On Jan 12, 2008 11:46 AM, Henrik Stoerner <<a href="mailto:henrik@hswn.dk">henrik@hswn.dk</a>> wrote:<br><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
<div class="Ih2E3d">On Sat, Jan 12, 2008 at 10:43:31AM -0500, Edward Croft wrote:<br>> On Jan 12, 2008 9:15 AM, Henrik Stoerner <<a href="mailto:henrik@hswn.dk">henrik@hswn.dk</a>> wrote:<br>><br>> > Have you configured your client(s) for server-side or client-side
<br>> > configuration ?<br>><br></div><div class="Ih2E3d">> I have it set up on different machines, in different configurations trying<br>> to find the one that works.<br><br></div>Ok, let's pick ONE machine and get that to work. Preferably one where
<br>the client is configured for server-side configuration. Verify this by<br>looking at the "conn" status - you must have a "Client data available"<br>link right above the graph. If there's no link, then the client isn't
<br>sending a Hobbit "client" message, but just the old-style BB messages.<br><br><br>I'll assume this client system is called "<a href="http://testhost.foo.com" target="_blank">testhost.foo.com</a>". Your
<br>client-local.cfg (on the hobbit server) should then have<br><br> [<a href="http://testhost.foo.com" target="_blank">testhost.foo.com</a>]<br><div class="Ih2E3d"> log:/var/log/messages:10240<br> trigger NOTICE
<br> trigger WARNING<br><br> log:/var/log/secure:10240<br> ignore "Connection closed by"<br> trigger BREAKIN<br><br></div>Changes to client-local.cfg can take up to 15 minutes to trickle down to<br>the client. You can speed this up by 1) sending a HUP signal to the
<br>hobbitd process on the Hobbit server, and then 2) restarting the Hobbit<br>client software. After restarting the client, it takes 5 minutes for the<br>changes to take effect.<br><br><br>Your hobbit-clients.cfg - also on the Hobbit server - must have these
<br>lines:<br><br> HOST=<a href="http://testhost.foo.com" target="_blank">testhost.foo.com</a><br><div class="Ih2E3d"> LOG /var/log/messages WARNING COLOR=yellow<br> LOG /var/log/messages NOTICE COLOR=red
<br> LOG /var/log/secure BREAKIN<br><br></div>You can test the configuration on the Hobbit server with the<br>"hobbitd_client --test" command. Like this:<br><br> $ bbcmd hobbitd_client --test<br> 2008-01-12 17:41:18 Using default environment file /usr/lib/hobbit/server/etc/hobbitserver.cfg
<br> Hostname (.=end, ?=dump, !=reload) []: <a href="http://testhost.foo.com" target="_blank">testhost.foo.com</a><br> Hosttype []:<br> Test (cpu, mem, disk, proc, log, port): log<br> log filename: /var/log/secure
<br> To read log data from a file, enter '@FILENAME' at the prompt<br> log line: Jan 10 13:22:50 sirona sshd[5087]: Connection closed by <a href="http://10.0.14.249" target="_blank">10.0.14.249</a><br> log line: Jan 10 13:27:51 sirona sshd[5133]: Connection closed by
<a href="http://10.0.14.249" target="_blank">10.0.14.249</a><br> log line: Jan 10 13:31:38 sirona ecroft: BREAKIN<br> log line: Jan 10 13:32:52 sirona sshd[5181]: Connection closed by <a href="http://10.0.14.249" target="_blank">
10.0.14.249</a><br> log line: Jan 10 13:37:53 sirona sshd[5227]: Connection closed by <a href="http://10.0.14.249" target="_blank">10.0.14.249</a><br> log line:<br> Log status is red<br><br> &red Jan 10 13:22:50 sirona sshd[5087]: Connection closed by
<br> 10.0.14.249Jan 10 13:27:51 sirona sshd[5133]: Connection closed by<br> 10.0.14.249Jan 10 13:31:38 sirona ecroft: BREAKINJan 10 13:32:52 sirona<br> sshd[5181]: Connection closed by 10.0.14.249Jan 10 13:37:53 sirona
<br><div class="Ih2E3d"> sshd[5227]: Connection closed by <a href="http://10.0.14.249" target="_blank">10.0.14.249</a><br><br></div>Also, while in the "hobbitd_client --test" environment, you can use the<br>dump-command to see how your
hobbits-clients.cfg was parsed.<br><br><br>If this doesn't make your msgs column go red, then I'd like to have a<br>look at the bb-hosts entry for this host, and your client-local.cfg and<br>hobbit-clients.cfg files. You can send them directly to me, no need to
<br>bother the entire mailing list with them.<br><br><br>Regards,<br><font color="#888888">Henrik<br></font><div><div></div><div class="Wj3C7c"><br><br>To unsubscribe from the hobbit list, send an e-mail to<br><a href="mailto:hobbit-unsubscribe@hswn.dk">
hobbit-unsubscribe@hswn.dk</a><br><br><br></div></div></blockquote></div><br><br clear="all"><br>-- <br>If the sane say the insane are insane, <br>What if the sane are insane?<br>Would that make the insane sane? <br>Explains a lot in Washington!
<br> --E. Croft