<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; font-size: 14px; font-family: Calibri, sans-serif; ">
<div style="color: rgb(0, 0, 0); ">Hi folks. I've been trying to validate that my analysis.cfg and alerts.cfg settings are set up right to get good info for certain ports and services (SQL Ports, and SQL services on windows machines).</div>
<div style="color: rgb(0, 0, 0); "><br>
</div>
<div style="color: rgb(0, 0, 0); ">While tweaking things I noticed my messages may have been truncated, which I believe leads to invalidate status and emails (now using html_mail.pl)</div>
<div style="color: rgb(0, 0, 0); ">I changed the values in xymonserver.cfg as shown below:</div>
<div style="color: rgb(0, 0, 0); ">
<div>MAXLINE="32768"</div>
<div>MAXMSG_STATUS="384"</div>
<div>MAXMSG_CLIENT="1024"</div>
<div>MAXMSG_DATA="1024"</div>
<div><br>
</div>
</div>
<div style="color: rgb(0, 0, 0); ">Are there going to be problems on the xymon server with me making these values larger? Should I add a MAXMSG_CLICHG setting to fix the "Oversize clichg" truncation?</div>
<div style="color: rgb(0, 0, 0); "><br>
</div>
<div style="color: rgb(0, 0, 0); ">Here is a snip from the xymond.log file showing truncated msgs…</div>
<div style="color: rgb(0, 0, 0); "><br>
</div>
<div>
<div>012-04-26 13:58:35 Oversize <font class="Apple-style-span" color="#ff2500">clichg msg
</font>from xymond for SERVERNAME truncated (n=3985606, limit=524288)</div>
<div style="color: rgb(0, 0, 0); ">2012-04-26 13:58:35 Oversize clichg msg from xymond for SERVERNAME truncated (n=3985606, limit=524288)</div>
<div><span class="Apple-style-span" style="color: rgb(0, 0, 0); ">2012-04-26 16:01:41 Oversize
</span><font class="Apple-style-span" color="#ff2500">data/client</font> msg from xxx.xx.xx.xx truncated (n=4471230, limit 1048576)</div>
<div style="color: rgb(0, 0, 0); ">2012-04-26 16:06:48 Oversize data/client msg from xxx.xx.xx.xx truncated (n=4471517, limit 1048576)</div>
<div style="color: rgb(0, 0, 0); "><br>
</div>
</div>
<div style="color: rgb(0, 0, 0); ">Should I be doing something else for the analysis.cfg to watch SQL ports and services?</div>
<div style="color: rgb(0, 0, 0); "><br>
</div>
<div style="color: rgb(0, 0, 0); ">I'm sending another email with the analysis.cfg and alerts.cfg settings to keep this from being too long.</div>
<div style="color: rgb(0, 0, 0); "><br>
</div>
<div style="color: rgb(0, 0, 0); ">Any thoughts appreciated.</div>
<div style="color: rgb(0, 0, 0); "><br>
</div>
<div style="color: rgb(0, 0, 0); ">Thanks</div>
<div style="color: rgb(0, 0, 0); "><br>
</div>
<div style="color: rgb(0, 0, 0); ">Don K</div>
<div style="color: rgb(0, 0, 0); "><br>
</div>
<div style="color: rgb(0, 0, 0); "><br>
</div>
</body>
</html>