<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix">On 15/04/14 01:14, John D. Alexander
wrote:<br>
</div>
<blockquote
cite="mid:A9B926EE68F17844B9EEFE88BBB30DAD1B90F76A@feeney-excg02.feeneywireless.local"
type="cite">
<meta http-equiv="Content-Type" content="text/html;
charset=ISO-8859-1">
<meta name="Generator" content="Microsoft Word 14 (filtered
medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
{mso-style-priority:99;
mso-style-link:"Balloon Text Char";
margin:0in;
margin-bottom:.0001pt;
font-size:8.0pt;
font-family:"Tahoma","sans-serif";}
span.BalloonTextChar
{mso-style-name:"Balloon Text Char";
mso-style-priority:99;
mso-style-link:"Balloon Text";
font-family:"Tahoma","sans-serif";}
span.EmailStyle19
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:windowtext;}
span.EmailStyle20
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
<div class="WordSection1">
<p class="MsoNormal"><span style="color:#1F497D">I’m at a loss.
Now I’ve got a client reporting /var/log/messages as
unreadable and the server is showing a flapping status for
msgs. Group ownership for /var/log/messages is set to
root:xymon with proper permissions, so it should be able to
read it. When I su to the xymon user, it can get to that
file just fine.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
</div>
</blockquote>
<br>
Look at the IP address reporting the issue, possibly you have two
systems reporting under the same name.<br>
<br>
Regards,<br>
Adam<br>
<br>
<blockquote
cite="mid:A9B926EE68F17844B9EEFE88BBB30DAD1B90F76A@feeney-excg02.feeneywireless.local"
type="cite">
<div class="WordSection1">
<p class="MsoNormal"><span style="color:#1F497D">There is
nothing in analysis.cfg that is watching either
/var/log/messages or /var/log/fail2ban.
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">I cleared msgs
from the server. Restarted the client. The issue keeps
coming back.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">Any ideas?<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">John A.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<div>
<div style="border:none;border-top:solid #B5C4DF
1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span
style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">From:</span></b><span
style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">
Betsy Schwartz [<a class="moz-txt-link-freetext" href="mailto:betsy.schwartz@gmail.com">mailto:betsy.schwartz@gmail.com</a>]
<br>
<b>Sent:</b> Friday, April 11, 2014 6:44 PM<br>
<b>To:</b> John D. Alexander<br>
<b>Cc:</b> <a class="moz-txt-link-abbreviated" href="mailto:xymon@xymon.com">xymon@xymon.com</a><br>
<b>Subject:</b> Re: [Xymon] recurring email alerts<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<p class="MsoNormal"><br>
I had that error once when I had a space after the file name
in analysis.cfg<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">If you can't find that file name maybe
there's a shell eval that includes it somewhere?<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><br>
Sent from my iPhone<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="margin-bottom:12.0pt"><br>
On Apr 11, 2014, at 6:41 PM, "John D. Alexander" <<a
moz-do-not-send="true"
href="mailto:JAlexander@feeneywireless.com">JAlexander@feeneywireless.com</a>>
wrote:<o:p></o:p></p>
</div>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<p class="MsoNormal">My Xymon server keeps sending alerts
for a system saying that /var/log/fail2ban.log is
unreadable.<o:p></o:p></p>
<p class="MsoNormal"> <o:p></o:p></p>
<p class="MsoNormal">Nothing I can find is testing for this
file and the permissions are such that xymon can read it.<o:p></o:p></p>
<p class="MsoNormal"> <o:p></o:p></p>
<p class="MsoNormal">Any clues on where to look to find what
is causing this?<o:p></o:p></p>
<p class="MsoNormal"> <o:p></o:p></p>
<p class="MsoNormal">Thanks.<o:p></o:p></p>
<p class="MsoNormal"> <o:p></o:p></p>
<p class="MsoNormal"><b><span
style="font-size:9.0pt;font-family:"Arial","sans-serif";color:#00467F">John
Alexander</span></b><br>
<span
style="font-size:9.0pt;font-family:"Arial","sans-serif";color:black">Network
Administrator<br>
</span><i><u><span
style="font-size:9.0pt;font-family:"Arial","sans-serif";color:#00467F"><a
moz-do-not-send="true"
href="mailto:John.Alexander@feeneywireless.com">John.Alexander@feeneywireless.com</a></span></u></i><span
style="font-size:9.0pt;font-family:"Arial","sans-serif";color:black"><br>
Feeney Wireless, LLC - PO Box 2549, Eugene, Oregon
97402</span><o:p></o:p></p>
<p class="MsoNormal"><span
style="font-size:9.0pt;font-family:"Arial","sans-serif";color:black">(Free)
800-683-4818<span
style="position:relative;top:-3.0pt;mso-text-raise:3.0pt">
</span> (P) 541-685-9045 <span
style="position:relative;top:-3.0pt;mso-text-raise:3.0pt">
</span> (F) 541-284-0030 <br>
<a moz-do-not-send="true"
href="http://www.feeneywireless.com/"><i><span
style="color:#00467F">www.feeneywireless.com</span></i></a></span><o:p></o:p></p>
<p class="MsoNormal"
style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><a
moz-do-not-send="true" href="http://feeneywireless.com/"><span
style="font-size:9.0pt;font-family:"Arial","sans-serif";color:black;text-decoration:none"><image001.jpg></span></a><o:p></o:p></p>
<p class="MsoNormal"><span
style="font-size:7.0pt;font-family:"Arial","sans-serif";color:#00467F">This
email transmission is intended only for the addressee
shown above. It may contain information that is
privileged, confidential or otherwise protected from
disclosure. Any review, dissemination or use of this
transmission or its contents by persons other than the
addressee is strictly prohibited! If you have received
this email transmission in error please notify us
immediately.</span><o:p></o:p></p>
<p class="MsoNormal"> <o:p></o:p></p>
</div>
</blockquote>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<p class="MsoNormal"><span
style="font-size:12.0pt;font-family:"Times New
Roman","serif"">_______________________________________________<br>
Xymon mailing list<br>
<a moz-do-not-send="true" href="mailto:Xymon@xymon.com">Xymon@xymon.com</a><br>
<a moz-do-not-send="true"
href="http://lists.xymon.com/mailman/listinfo/xymon">http://lists.xymon.com/mailman/listinfo/xymon</a><o:p></o:p></span></p>
</div>
</blockquote>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
Xymon mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Xymon@xymon.com">Xymon@xymon.com</a>
<a class="moz-txt-link-freetext" href="http://lists.xymon.com/mailman/listinfo/xymon">http://lists.xymon.com/mailman/listinfo/xymon</a>
</pre>
</blockquote>
<br>
<br>
<div class="moz-signature">-- <br>
Adam Goryachev
Website Managers
<a class="moz-txt-link-abbreviated" href="http://www.websitemanagers.com.au">www.websitemanagers.com.au</a></div>
</body>
</html>