<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:windowtext;}
span.EmailStyle18
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal">After re-reading I can see how that may not be totally clear. By alerting, I mean that the disk test is still green, even though a partition is at 100%full.
<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I found two hosts that weren’t alerting on disk full condition and started digging into the problem further. As I understand it, xymon matches the first entry from analysis config files. So I dumped the analysis config for disks:<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Client line:<o:p></o:p></p>
<p class="MsoNormal">[collector:]<o:p></o:p></p>
<p class="MsoNormal">client corpvskreienl,na,lzb,hq.linux linux<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">[root@monvxymon hosts.d]# /usr/libexec/xymon/xymond_client --dump-config --config=etc/analysis.cfg |grep -i ^disk<o:p></o:p></p>
<p class="MsoNormal">DISK %^(D|E|F|G|H|I|J|K|L|M|N|O|P|Q|R|S|T|U|V|W|X|Y|Z) 15728640U 10485760U 0 -1 red HOST=%(mondbexec.*|mondb.*|retmaildb.*).na.lzb.hq (line: 515)<o:p></o:p></p>
<p class="MsoNormal">DISK %^(1|2|3|4|5|6|7|8|9|0).* IGNORE HOST=%(mondbexec.*|mondb.*|retmaildb.*).na.lzb.hq (line: 516)<o:p></o:p></p>
<p class="MsoNormal">DISK %^(D|E|F|G|H|I|J|K|L|M|N|O|P|Q|R|S|T|U|V|W|X|Y|Z) 15728640U 10485760U 0 -1 red HOST=%(mon|new|red|neo|taz|sil|kin|sal|hpt)exch.*.na.lzb.hq (line: 527)<o:p></o:p></p>
<p class="MsoNormal">DISK %^(1|2|3|4|5|6|7|8|9|0).* IGNORE HOST=%(mon|new|red|neo|taz|sil|kin|sal|hpt)exch.*.na.lzb.hq (line: 528)<o:p></o:p></p>
<p class="MsoNormal">DISK %^(D|E|F|G|H|I|J|K|L|M|N|O|P|Q|R|S|U|V|W|X|Y|Z) 15728640U 10485760U 0 -1 red HOST=%dayexch.*.na.lzb.hq (line: 539)<o:p></o:p></p>
<p class="MsoNormal">DISK %^T IGNORE HOST=%dayexch.*.na.lzb.hq (line: 540)<o:p></o:p></p>
<p class="MsoNormal">DISK %^(1|2|3|4|5|6|7|8|9|0|).* IGNORE HOST=%dayexch.*.na.lzb.hq (line: 541)<o:p></o:p></p>
<p class="MsoNormal">DISK C 204800U 102400U 0 -1 red HOST=mdas4000.mdmza.dmz.hq (line: 567)<o:p></o:p></p>
<p class="MsoNormal">DISK E 101% 101% 0 -1 red HOST=mdas4000.mdmza.dmz.hq (line: 568)<o:p></o:p></p>
<p class="MsoNormal">DISK F 99% 100% 0 -1 red HOST=mons6000.na.lzb.hq (line: 576)<o:p></o:p></p>
<p class="MsoNormal">DISK %^(D|E|F|G|H|I|J|K|L|M|N|O|P|Q|R|S|T|U|V|W|X|Y|Z) 15728640U 10485760U 0 -1 red PAGE=infrastructure/fileserv (line: 582)<o:p></o:p></p>
<p class="MsoNormal">DISK D 99% 100% 0 -1 red HOST=lzbv5223.na.lzb.hq,lzbv6016.na.lzb.hq (line: 746)<o:p></o:p></p>
<p class="MsoNormal">DISK * 90% 95% 0 -1 red HOST=%dvrvas(0|1)\.mdmza.dmz.hq (line: 762)<o:p></o:p></p>
<p class="MsoNormal">DISK * 90% 95% 0 -1 red CLASS=powershell (line: 1054)<o:p></o:p></p>
<p class="MsoNormal">DISK * 90% 95% 0 -1 red CLASS=win32 (line: 1073)<o:p></o:p></p>
<p class="MsoNormal">DISK * 90% 95% 0 -1 red CLASS=linux (line: 1090)<o:p></o:p></p>
<p class="MsoNormal">DISK * 90% 95% 0 -1 red (line: 1132)<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I can’t find any lines above where the hostname matches, it’s on page Infrastructure/Miscellaneous so none of the page statements match, so it should match on the class. Or the very last line is the system default which should apply if
nothing else. My server is sitting at 100%full on one partition so it SHOULD be alerting.
<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Thanks for any help. <o:p></o:p></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
</div>
<p id="c1-id-6" style="FONT-FAMILY: Arial"><span id="c1-id-7" style="FONT-SIZE: 8pt; FONT-FAMILY: Calibri; LETTER-SPACING: normal"><strong id="c1-id-39"><span id="c1-id-41" style="font-size:9pt">Scot Kreienkamp | Senior Systems Engineer | La-Z-Boy Corporate</span></strong><br id="c1-id-8">
</span><span id="c1-id-9" style="FONT-SIZE: 8pt; FONT-FAMILY: Calibri; LETTER-SPACING: normal">One La-Z-Boy Drive | Monroe, Michigan 48162 | Office: 734-384-6403 | | Mobile: 7349151444 | Email: Scot.Kreienkamp@la-z-boy.com</span></p>
<p id="c1-id-10" style="FONT-FAMILY: 'Arial Narrow'; LINE-HEIGHT: 14px"><span id="c1-id-11" style="FONT-FAMILY: Arial; COLOR: #000000"><span id="c1-id-12" style="FONT-SIZE: 8pt; LETTER-SPACING: normal"><span id="c1-id-13" style="FONT-SIZE: 8pt"><span id="c1-id-14" style="FONT-SIZE: 8pt">This
</span></span><span id="c1-id-15" style="FONT-SIZE: 8pt"><span id="c1-id-16" style="FONT-SIZE: 8pt">message</span><span id="c1-id-17" style="FONT-SIZE: 8pt"> is intended
</span></span><span id="c1-id-18" style="FONT-SIZE: 8pt"><span id="c1-id-19" style="FONT-SIZE: 8pt">only</span></span><span id="c1-id-20" style="FONT-SIZE: 8pt"><span id="c1-id-21" style="FONT-SIZE: 8pt"> for t</span></span><span id="c1-id-22" style="FONT-SIZE: 8pt"><span id="c1-id-23" style="FONT-SIZE: 8pt">he
individual or entity to which it is addressed. It may contain privileged, confi</span></span></span><span id="c1-id-24" style="FONT-SIZE: 8pt; LETTER-SPACING: normal"><span id="c1-id-25" style="FONT-SIZE: 8pt"><span id="c1-id-26" style="FONT-SIZE: 8pt">dential
information which is exempt from disclosure under applicable laws. If you are not the intended recipient, you are strictly prohibited from disseminating or distributing this information (other than to the intended recipient) or copying this information.
If you have received this communication in error, please notify </span></span></span><span id="c1-id-27" style="FONT-SIZE: 8pt; LETTER-SPACING: normal"><span id="c1-id-28" style="FONT-SIZE: 8pt"><span id="c1-id-29" style="FONT-SIZE: 8pt">us</span></span></span><span id="c1-id-30" style="FONT-SIZE: 8pt; LETTER-SPACING: normal"><span id="c1-id-31" style="FONT-SIZE: 8pt"><span id="c1-id-32" style="FONT-SIZE: 8pt">
immediately by e-mail or by telephone at the above number.</span></span></span><span id="c1-id-33" style="FONT-SIZE: 8pt; LETTER-SPACING: normal"><span id="c1-id-34" style="FONT-SIZE: 8pt"><span id="c1-id-35" style="FONT-SIZE: 8pt"> Thank you</span></span></span></span><span id="c1-id-36" style="FONT-SIZE: 8pt; FONT-FAMILY: Calibri; LETTER-SPACING: normal"><span id="c1-id-37" style="FONT-SIZE: 8pt; FONT-FAMILY: 'Arial Narrow'"><span id="c1-id-38" style="FONT-SIZE: 8pt; FONT-FAMILY: 'Arial Narrow'">.</span></span></span></p>
</body>
</html>