<html>
<head>
<meta content="text/html; charset=UTF-8" http-equiv="Content-Type">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<div class="moz-cite-prefix">Well my problem is half fixed. I've
set the hostname in client-local.cfg on the server and now it's
showing the correct log file name on the webpage. The problem now
is that it says there's no data in the log. Is the client not
sending the data? This still feels like something that needs set
on the client side. How do clients know what file is the correct
log file to send?<br>
<div class="moz-signature">
<title>Signature - Kris</title>
<meta content="text/html; charset=UTF-8"
http-equiv="content-type">
<style type="text/css">@import url('<a class="moz-txt-link-freetext" href="https://themes.googleusercontent.com/fonts/css?kit=wAPX1HepqA24RkYW1AuHYA">https://themes.googleusercontent.com/fonts/css?kit=wAPX1HepqA24RkYW1AuHYA</a>');ol{margin:0;padding:0}.c0{color:#990000;font-size:10pt;background-color:#ffffff;font-family:"Calibri";font-weight:bold}.c5{color:#990000;font-size:8pt;background-color:#ffffff;font-family:"Calibri"}.c1{color:#990000;font-size:10pt;background-color:#ffffff;font-family:"Calibri"}.c2{max-width:468pt;background-color:#ffffff;padding:72pt 72pt 72pt 72pt}.c4{text-decoration:underline}.c3{direction:ltr}.title{widows:2;padding-top:0pt;line-height:1.15;orphans:2;text-align:left;color:#000000;font-size:21pt;font-family:"Trebuchet MS";padding-bottom:0pt;page-break-after:avoid}.subtitle{widows:2;padding-top:0pt;line-height:1.15;orphans:2;text-align:left;color:#666666;font-style:italic;font-size:13pt;font-family:"Trebuchet MS";padding-bottom:10pt;page-break-afte
r:avoid}li{color:#000000;font-size:11pt;font-family:"Arial"}p{color:#000000;font-size:11pt;margin:0;font-family:"Arial"}h1{widows:2;padding-top:10pt;line-height:1.15;orphans:2;text-align:left;color:#000000;font-size:16pt;font-family:"Trebuchet MS";padding-bottom:0pt;page-break-after:avoid}h2{widows:2;padding-top:10pt;line-height:1.15;orphans:2;text-align:left;color:#000000;font-size:13pt;font-family:"Trebuchet MS";font-weight:bold;padding-bottom:0pt;page-break-after:avoid}h3{widows:2;padding-top:8pt;line-height:1.15;orphans:2;text-align:left;color:#666666;font-size:12pt;font-family:"Trebuchet MS";font-weight:bold;padding-bottom:0pt;page-break-after:avoid}h4{widows:2;padding-top:8pt;line-height:1.15;orphans:2;text-align:left;color:#666666;font-size:11pt;text-decoration:underline;font-family:"Trebuchet MS";padding-bottom:0pt;page-break-after:avoid}h5{widows:2;padding-top:8pt;line-height:1.15;orphans:2;text-align:left;color:#666666;font-size:11pt;font-family:"Trebuchet MS";padding-botto
m:0pt;page-break-after:avoid}h6{widows:2;padding-top:8pt;line-height:1.15;orphans:2;text-align:left;color:#666666;font-style:italic;font-size:11pt;font-family:"Trebuchet MS";padding-bottom:0pt;page-break-after:avoid}</style>
<br>
<p class="c3"><span class="c1">Thank you.</span></p>
<p class="c3"><span class="c1">------------------------------------------------</span></p>
<p class="c3"><span class="c0">Kris Springer<br>
</span></p>
<p class="c3"><span class="c0"><br>
<br>
</span>
</p>
</div>
On 9/8/2014 11:47 PM, Jeremy Laidman wrote:<br>
</div>
<blockquote
cite="mid:CAAnki7DZqtejzzqVMzX5a285XYfr2KjEuxYMGV3EC+g0TM4b1A@mail.gmail.com"
type="cite">
<div dir="ltr">
<div class="gmail_extra">
<div class="gmail_quote">On 9 September 2014 10:16, Kris
Springer <span dir="ltr"><<a moz-do-not-send="true"
href="mailto:kspringer@innovateteam.com" target="_blank">kspringer@innovateteam.com</a>></span>
wrote:<br>
<blockquote class="gmail_quote" style="margin:0px 0px 0px
0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">
<div text="#000000" bgcolor="#FFFFFF"> I've got a hobbit
client that I installed from a FreeBSD Package running
on a pfSense firewall.</div>
</blockquote>
<div><br>
</div>
<div>Time to upgrade to Xymon? Even so, should work for
you.</div>
<div> </div>
<blockquote class="gmail_quote" style="margin:0px 0px 0px
0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">
<div text="#000000" bgcolor="#FFFFFF">It's working fine
other than it trying to read /var/log/messages instead
of /var/log/system.log. I can't seem to figure out how
to define the log file.</div>
</blockquote>
<div><br>
</div>
<div>This is defined on the server (assuming you're in
central mode) in the file client-local.cfg, like so:</div>
<div><br>
</div>
<div>
<div>[freebsd]</div>
<div>log:/var/log/messages:10240</div>
</div>
<div><br>
</div>
<div>On my FreeBSD boxes the log file is in
/var/log/messages, so that's probably the standard
location, and your installation might be unusual (or newer
than mine). You can either just edit the filename in
client-local.cfg, or create a section with the hostname of
your server, so that it overrides the [freebsd]
definition:</div>
<div><br>
</div>
<div>[myhostname]</div>
<div>log:/var/log/messages:10240</div>
<div><br>
</div>
<div>Please note that the file needs to be defined twice,
once in client-local.cfg to tell the client to sent the
log messages, and a second time in analysis.cfg (which I
think was hobbit-clients.cfg in Hobbit) to tell Xymon what
to alert on. So if you change the filename in
client-local.cfg, you need to make sure there's a "LOG"
definition that matches in analysis.cfg if you want any,
well, analysis done. Example:</div>
<div><br>
</div>
<div>HOST=myhostname</div>
<div> LOG /var/log/messages "kernel: .* segfault "
COLOR=red</div>
<div><br>
</div>
<div>I think the default file has no LOG entries at all, so
you'll have to add something here if you want any
alerting.</div>
<div><br>
</div>
<blockquote class="gmail_quote" style="margin:0px 0px 0px
0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">
<div text="#000000" bgcolor="#FFFFFF"> In the client
/xymon/client/etc/hobbitclient.cfg I've set the
CONFIGCLASS definition to "darwin" which is the only
ostype that has the system.log type file (listed on the
server in /xymon/server/etc/client-local.cfg).</div>
</blockquote>
<div><br>
</div>
<div>Yep, this won't affect the log collection (again,
assuming central mode). Instead, the log definition gets
pulled from the server each time the client sends its
client data, and stored in a file in
$XYMONTMP/logfetch.<hostname>.cfg. You might like
to have a look at that file and you'll probably see the
"log:/var/log/messages:10240" definition from the relevant
section of client-local.cfg.</div>
<div><br>
</div>
<div>J</div>
<div><br>
</div>
</div>
</div>
</div>
</blockquote>
<br>
</body>
</html>