<HTML><HEAD>
<META content="text/html; charset=utf-8" http-equiv=Content-Type>
<META name=GENERATOR content="MSHTML 8.00.6001.19154"></HEAD>
<BODY style="MARGIN: 4px 4px 1px; FONT: 10pt Tahoma">
<DIV>Thanks guys.</DIV>
<DIV> </DIV>
<DIV>Alerting using procs does send an alert as expected for all monitored processes/daemons/services/etc. So that was my misunderstanding. And, yes, drilling down on info shows an alert when I use procs and no alert when I use ntpd by itself. I hadn't understood to look at "info" previously; thank you for the pointer.<BR></DIV>
<DIV>I had looked at the protocols doc late on Friday and I'm starting to understand xymon's behavior better.</DIV>
<DIV> </DIV>
<DIV>Since the doc for protocols says that the testing is for TCP-based services, I gather that I would need to get at UDP-based services in some other way. I'm assuming that for something like ntpd, I'd need to build a shell script to run ntpq and parse that output, but I'm not sure.</DIV>
<DIV> </DIV>
<DIV>Can someone point me at the appropriate document or at a code sample to look at?</DIV>
<DIV> </DIV>
<DIV>Thank you all again.</DIV>
<DIV><BR>>>> "White, Bruce" <bewhite@fellowes.com> 11/21/2011 8:00 AM >>><BR>I think Tim found the issue. Click on the info page for the server and<BR>see if the alert shows up in the alerts box. If the server has no ntpd<BR>test, then no alert will appear in the alerts box.<BR><BR><BR><BR>Bruce White<BR>Senior Enterprise Systems Engineer | Phone: 1-630-671-5169 | Fax: 630-893-1648 | bewhite@fellowes.com | <A href="http://www.fellowes.com/">http://www.fellowes.com/</A><BR><BR><BR><BR>Disclaimer: The information contained in this message may be privileged and confidential and protected from disclosure. If the reader of this message is not the intended recipient or an employee or agent responsible for delivering this message to the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited. If you have received this communication in error, please notify us immediately by replying to the message and deleting it from your computer. Thank you. Fellowes, Inc.<BR><BR>-----Original Message-----<BR>From: xymon-bounces@xymon.com [mailto:xymon-bounces@xymon.com] On Behalf<BR>Of Tim McCloskey<BR>Sent: Friday, November 18, 2011 11:46 AM<BR>To: Barrie Parker; xymon@xymon.com<BR>Subject: Re: [Xymon] Trouble shooting alerts<BR><BR><BR>________________________________________<BR>From: xymon-bounces@xymon.com [xymon-bounces@xymon.com] On Behalf Of<BR>Barrie Parker [Barrie.Parker@uregina.ca]<BR>Sent: Friday, November 18, 2011 9:22 AM<BR>To: xymon@xymon.com<BR>Subject: [Xymon] Trouble shooting alerts<BR><BR>...snip...<BR>The status page shows the red "critical" icon for procs. When I drill<BR>down into procs ...snip...<BR><BR><BR><BR>Should the alert be for 'procs', not ntpd?<BR><BR>Tim<BR>_______________________________________________<BR>Xymon mailing list<BR>Xymon@xymon.com<BR><A href="http://lists.xymon.com/mailman/listinfo/xymon">http://lists.xymon.com/mailman/listinfo/xymon</A><BR></DIV></BODY></HTML>