<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<style type="text/css" style="display:none"><!--P{margin-top:0;margin-bottom:0;} .ms-cui-menu {background-color:#ffffff;border:1px rgb(171, 171, 171) solid;font-family:'Segoe UI WPC','Segoe UI',Tahoma,'Microsoft Sans Serif',Verdana,sans-serif;font-size:10pt;color:rgb(51, 51, 51);} .ms-cui-menusection-title {display:none;} .ms-cui-ctl {vertical-align:text-top;text-decoration:none;color:rgb(51, 51, 51);} .ms-cui-ctl-on {background-color:rgb(223, 237, 250);opacity: 0.8;} .ms-cui-img-cont-float {display:inline-block;margin-top:2px} .ms-cui-smenu-inner {padding-top:0px;} .ms-owa-paste-option-icon {margin: 2px 4px 0px 4px;vertical-align:sub;padding-bottom: 2px;display:inline-block;} .ms-rtePasteFlyout-option:hover {background-color:rgb(223, 237, 250) !important;opacity:1 !important;} .ms-rtePasteFlyout-option {padding:8px 4px 8px 4px;outline:none;} .ms-cui-menusection {float:left; width:85px;height:24px;overflow:hidden}--></style>
</head>
<body>
<div style="font-size:12pt;color:#000000;background-color:#FFFFFF;font-family:Calibri,Arial,Helvetica,sans-serif;">
<p>Hello,</p>
<p>I recently upgraded my xymon servers (primary and failover) from Xymon 4.2.3 to 4.3.18. After the upgrade, we noticed gaps in such as CPU Utilization, TCP/IP Statistics, and Block IO, but only for clients that are running the xymon 4.2.3 client, not for
those running the Big Brother client. I built a new 4.3.18 client but we still see gaps.</p>
<p><br>
</p>
<p>We are running the old vmstat-bf.sh and netstat-bf.sh extension scripts in the xymon client.</p>
<p><br>
</p>
<p>I turned on debugging for rrdstatus and rrddata on our failover server, and saw errors such as the ones below during the times when there was a gap.</p>
<p><br>
</p>
<p>Does anyone have ideas on how to troubleshoot and fix this? Why was the xymon client working ok with xymon server 4.2.3 and not 4.3.18?<br>
</p>
<p><br>
</p>
<p><br>
</p>
<p>from rrdstatus.log</p>
<p>12793 2015-07-15 14:24:20 xymond_rrd: Got message 73002 @@status#73002/its-splun<br>
k-log1.syr.edu|1436984660.571622|128.230.1.66||its-splunk-log1.syr.edu|netstat|1<br>
436986460|green||green|1435596907|0||0||1436984369|linux|NSM/UNIX/Misc24x7|0|<br>
12793 2015-07-15 14:24:20 startpos 770321, fillpos 770321, endpos -1<br>
12793 2015-07-15 14:24:20 Flushing '/its-splunk-log1.syr.edu/netstat.rrd' with 4<br>
updates pending, template 'udpInDatagrams:udpOutDatagrams:udpInErrors:tcpActive<br>
Opens:tcpPassiveOpens:tcpAttemptFails:tcpEstabResets:tcpCurrEstab:tcpOutDataByte<br>
s:tcpInInorderBytes:tcpInUnorderBytes:tcpRetransBytes:tcpOutDataPackets:tcpInIno<br>
rderPackets:tcpInUnorderPackets:tcpRetransPackets'<br>
12793 2015-07-15 14:24:20 RRD error updating /usr/local/xymon/xymon-current/data<br>
/rrd/its-splunk-log1.syr.edu/netstat.rrd from 128.230.1.66: /usr/local/xymon/xym<br>
on-current/data/rrd/its-splunk-log1.syr.edu/netstat.rrd: illegal attempt to upda<br>
te using time 1436983760 when last update time is 1436983769 (minimum one second<br>
step)<br>
12793 2015-07-15 14:24:20 Flush, but xymonmsg is empty</p>
<p><br>
</p>
<p><br>
</p>
<p><br>
</p>
<p><br>
</p>
<p>from rrddata.log</p>
<p>12806 2015-07-15 16:27:30 Flushing '/its-splunk-log1.syr.edu/netstat.rrd' with 4<br>
updates pending, template 'udpInDatagrams:udpOutDatagrams:udpInErrors:tcpActive<br>
Opens:tcpPassiveOpens:tcpAttemptFails:tcpEstabResets:tcpCurrEstab:tcpOutDataByte<br>
s:tcpInInorderBytes:tcpInUnorderBytes:tcpRetransBytes:tcpOutDataPackets:tcpInIno<br>
rderPackets:tcpInUnorderPackets:tcpRetransPackets'<br>
12806 2015-07-15 16:27:30 Flushing cache '/its-splunk-log1.syr.edu/vmstat.rrd'<br>
12806 2015-07-15 16:27:30 Flushing '/its-splunk-log1.syr.edu/vmstat.rrd' with 10<br>
updates pending, template 'cpu_r:cpu_b:cpu_w:mem_swpd:mem_free:mem_buff:mem_cac<br>
h:mem_si:mem_so:dsk_bi:dsk_bo:cpu_int:cpu_csw:cpu_usr:cpu_sys:cpu_idl:cpu_wait'<br>
12806 2015-07-15 16:27:30 Flush of '/its-splunk-log1.syr.edu/' skipped, too soon<br>
12806 2015-07-15 16:27:30 Flush of '/its-splunk-log1.syr.edu/' skipped, too soon<br>
12806 2015-07-15 16:27:30 Flush of '/its-splunk-log1.syr.edu/' skipped, too soon<br>
12806 2015-07-15 16:27:30 Flush of '/its-splunk-log1.syr.edu/' skipped, too soon<br>
12806 2015-07-15 16:27:30 Flush of '/its-splunk-log1.syr.edu/' skipped, too soon<br>
12806 2015-07-15 16:27:30 Flush of '/its-splunk-log1.syr.edu/' skipped, too soon<br>
12806 2015-07-15 16:27:30 Flush of '/its-splunk-log1.syr.edu/' skipped, too soon<br>
12806 2015-07-15 16:27:30 Flush of '/its-splunk-log1.syr.edu/' skipped, too soon<br>
12806 2015-07-15 16:27:30 Flush of '/its-splunk-log1.syr.edu/' skipped, too soon<br>
12806 2015-07-15 16:27:30 Flush of '/its-splunk-log1.syr.edu/' skipped, too soon<br>
12806 2015-07-15 16:27:30 Want msg 38335, startpos 431139, fillpos 431139, endpo<br>
s -1, usedbytes=0, bufleft=3767260<br>
12806 2015-07-15 16:27:30 Got 1121 bytes<br>
<br>
Thanks !</p>
<p>Nicole<br>
</p>
</div>
</body>
</html>