<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:Helvetica;
panose-1:2 11 6 4 2 2 2 2 2 4;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";
color:black;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
p
{mso-style-priority:99;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman","serif";
color:black;}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
{mso-style-priority:99;
mso-style-link:"Balloon Text Char";
margin:0in;
margin-bottom:.0001pt;
font-size:8.0pt;
font-family:"Tahoma","sans-serif";
color:black;}
span.BalloonTextChar
{mso-style-name:"Balloon Text Char";
mso-style-priority:99;
mso-style-link:"Balloon Text";
font-family:"Tahoma","sans-serif";
color:black;}
span.EmailStyle20
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:windowtext;}
span.EmailStyle21
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.EmailStyle22
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.EmailStyle23
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.EmailStyle24
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.EmailStyle25
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.EmailStyle26
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.EmailStyle27
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.EmailStyle28
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.EmailStyle30
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><![endif]--><!--[if gte mso 9]><![endif]-->
</head>
<body bgcolor="white" lang="EN-US" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal"><span style="color:#1F497D">I changed my df script to sudo df $* so it receives all the commandline arguments that xymon passes to df. That seems to make it happy.</span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p id="c1-id-6" style="FONT-FAMILY: Arial"><span id="c1-id-7" style="FONT-SIZE: 8pt; FONT-FAMILY: Calibri; LETTER-SPACING: normal"><strong id="c1-id-39"><span id="c1-id-41" style="font-size:9pt">Scot Kreienkamp | Senior Systems Engineer | La-Z-Boy Corporate</span></strong><br id="c1-id-8">
</span><span id="c1-id-9" style="FONT-SIZE: 8pt; FONT-FAMILY: Calibri; LETTER-SPACING: normal">One La-Z-Boy Drive | Monroe, Michigan 48162 | Office: 734-384-6403 | | Mobile: 7349151444 | Email: Scot.Kreienkamp@la-z-boy.com</span></p>
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal" style="margin-left:.5in"><b><span style="color:windowtext">From:</span></b><span style="color:windowtext"> Root, Paul T [mailto:Paul.Root@CenturyLink.com]
<br>
<b>Sent:</b> Thursday, January 5, 2017 4:41 PM<br>
<b>To:</b> Root, Paul T; Scot Kreienkamp; 'Japheth Cleaver'; 'shea4th@comcast.net'<br>
<b>Cc:</b> 'xymon'<br>
<b>Subject:</b> RE: [Xymon] xymon disk not alerting at 100%, need another set of eyes</span></p>
</div>
</div>
<p class="MsoNormal" style="margin-left:.5in"><o:p> </o:p></p>
<p class="MsoNormal" style="margin-left:.5in"><span style="color:#1F497D">Specifically if you look in the xymonclient-linux shell script, the df output is looking for:</span></p>
<p class="MsoNormal" style="margin-left:.5in"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal" style="margin-left:.5in"><span style="color:#1F497D">EXCLUDES=`cat /proc/filesystems | grep nodev | grep -v rootfs | awk '{print $2}' | xargs echo | sed -e 's! ! -x !g'`</span></p>
<p class="MsoNormal" style="margin-left:.5in"><span style="color:#1F497D">ROOTFS=`readlink -m /dev/root`</span></p>
<p class="MsoNormal" style="margin-left:.5in"><span style="color:#1F497D">df -Pl -x iso9660 -x $EXCLUDES | sed -e '/^[^ ][^ ]*$/{</span></p>
<p class="MsoNormal" style="margin-left:.5in"><span style="color:#1F497D">N</span></p>
<p class="MsoNormal" style="margin-left:.5in"><span style="color:#1F497D">s/[ ]*\n[ ]*/ /</span></p>
<p class="MsoNormal" style="margin-left:.5in"><span style="color:#1F497D">}' -e "s&^rootfs&${ROOTFS}&"</span></p>
<p class="MsoNormal" style="margin-left:.5in"><span style="color:#1F497D">echo "[inode]"</span></p>
<p class="MsoNormal" style="margin-left:.5in"><span style="color:#1F497D">df -Pil -x iso9660 -x $EXCLUDES | sed -e '/^[^ ][^ ]*$/{</span></p>
<p class="MsoNormal" style="margin-left:.5in"><span style="color:#1F497D">N</span></p>
<p class="MsoNormal" style="margin-left:.5in"><span style="color:#1F497D">s/[ ]*\n[ ]*/ /</span></p>
<p class="MsoNormal" style="margin-left:.5in"><span style="color:#1F497D">}' -e "s&^rootfs&${ROOTFS}&"</span></p>
<p class="MsoNormal" style="margin-left:.5in"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal" style="margin-left:.5in"><span style="color:#1F497D">So it specifically does not want –h. That is most likely the problem.</span></p>
<p class="MsoNormal" style="margin-left:.5in"><span style="color:#1F497D"><o:p> </o:p></span></p>
<div>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal" style="margin-left:.5in"><b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif";color:windowtext">From:</span></b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif";color:windowtext"> Root, Paul T
<br>
<b>Sent:</b> Thursday, January 05, 2017 3:35 PM<br>
<b>To:</b> 'Scot Kreienkamp'; Japheth Cleaver; <a href="mailto:shea4th@comcast.net">
shea4th@comcast.net</a><br>
<b>Cc:</b> xymon<br>
<b>Subject:</b> RE: [Xymon] xymon disk not alerting at 100%, need another set of eyes</span></p>
</div>
</div>
<p class="MsoNormal" style="margin-left:.5in"><o:p> </o:p></p>
<p class="MsoNormal" style="margin-left:.5in"><span style="color:#1F497D">I think you need df –P in your sudo script.
</span></p>
<p class="MsoNormal" style="margin-left:.5in"><span style="color:#1F497D"><o:p> </o:p></span></p>
<div>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal" style="margin-left:.5in"><b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif";color:windowtext">From:</span></b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif";color:windowtext"> Xymon [<a href="mailto:xymon-bounces@xymon.com">mailto:xymon-bounces@xymon.com</a>]
<b>On Behalf Of </b>Scot Kreienkamp<br>
<b>Sent:</b> Thursday, January 05, 2017 3:32 PM<br>
<b>To:</b> Japheth Cleaver; <a href="mailto:shea4th@comcast.net">shea4th@comcast.net</a><br>
<b>Cc:</b> xymon<br>
<b>Subject:</b> Re: [Xymon] xymon disk not alerting at 100%, need another set of eyes</span></p>
</div>
</div>
<p class="MsoNormal" style="margin-left:.5in"><o:p> </o:p></p>
<p class="MsoNormal" style="margin-left:.5in"><span style="color:#1F497D">Here’s the output of df, just looks normal to me:</span></p>
<p class="MsoNormal" style="margin-left:.5in"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal" style="margin-left:.5in"><span style="color:#1F497D">[root@corpvskreienl bin]# df -h</span></p>
<p class="MsoNormal" style="margin-left:.5in"><span style="color:#1F497D">Filesystem Size Used Avail Use% Mounted on</span></p>
<p class="MsoNormal" style="margin-left:.5in"><span style="color:#1F497D">/dev/mapper/ol-root 100G 3.2G 97G 4% /</span></p>
<p class="MsoNormal" style="margin-left:.5in"><span style="color:#1F497D">devtmpfs 909M 0 909M 0% /dev</span></p>
<p class="MsoNormal" style="margin-left:.5in"><span style="color:#1F497D">tmpfs 920M 72K 920M 1% /dev/shm</span></p>
<p class="MsoNormal" style="margin-left:.5in"><span style="color:#1F497D">tmpfs 920M 49M 872M 6% /run</span></p>
<p class="MsoNormal" style="margin-left:.5in"><span style="color:#1F497D">tmpfs 920M 0 920M 0% /sys/fs/cgroup</span></p>
<p class="MsoNormal" style="margin-left:.5in"><span style="color:#1F497D">/dev/sda1 2.0G 2.0G 20K 100% /boot</span></p>
<p class="MsoNormal" style="margin-left:.5in"><span style="color:#1F497D">tmpfs 184M 0 184M 0% /run/user/0</span></p>
<p class="MsoNormal" style="margin-left:.5in"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal" style="margin-left:.5in"><img border="0" width="493" height="169" id="_x0000_i1025" src="cid:image001.png@01D26773.F714C840"></p>
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal" style="margin-left:1.0in"><b><span style="color:windowtext">From:</span></b><span style="color:windowtext"> Japheth Cleaver [<a href="mailto:cleaver@terabithia.org">mailto:cleaver@terabithia.org</a>]
<br>
<b>Sent:</b> Thursday, January 5, 2017 3:55 PM<br>
<b>To:</b> Scot Kreienkamp; <a href="mailto:shea4th@comcast.net">shea4th@comcast.net</a><br>
<b>Cc:</b> xymon<br>
<b>Subject:</b> Re: [Xymon] xymon disk not alerting at 100%, need another set of eyes</span></p>
</div>
</div>
<p class="MsoNormal" style="margin-left:1.0in"><o:p> </o:p></p>
<div>
<p class="MsoNormal" style="margin-left:1.0in">Hmm. That seems strange... We're not showing any space data there, just 0%. It should look something like this below...
<br>
What's the output of the normal 'df' command on these boxes?<br>
<br>
7416 2017-01-05 12:49:20.809413 Disk check host rhel5-i386.build<br>
7416 2017-01-05 12:49:20.809926 Disk check: header 'Filesystem 1024-blocks Used Available Capacity Mounted on', columns 3 and 4<br>
7416 2017-01-05 12:49:20.810409 Disk check: FS='/' level 74%/1751688U (thresholds: 90/95, abs: 0/0)<br>
7416 2017-01-05 12:49:20.810818 Disk check: FS='/boot' level 13%/83419U (thresholds: 90/95, abs: 0/0)<br>
7416 2017-01-05 12:49:20.820510 Disk check: FS='/dev/shm' level 1%/257372U (thresholds: 90/95, abs: 0/0)<br>
7416 2017-01-05 12:49:20.820691 Adding to combo msg: status rhel5-i386,build.disk green Thu Jan 5 12:49:52 PST 2017 - Filesystems ok<br>
<br>
One idea: Are these the same boxes that you had to put the sudo hack in for? Is it possible the arguments to 'df' are not being passed in with the execution? At the very least, I think missing a -P (posix) could cause parsing problems.<br>
<br>
-jc<br>
<br>
On 1/5/2017 12:23 PM, Scot Kreienkamp wrote:</p>
</div>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<p class="MsoNormal" style="margin-left:1.0in"><span style="color:#1F497D">Running the config dump with xymoncmd in front of it didn’t make any difference to the output.
</span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="color:#1F497D"> </span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="color:#1F497D">Here’s the debug mode output for the disk section:</span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="color:#1F497D"> </span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="color:#1F497D"> </span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="color:#1F497D">4873 2017-01-05 15:18:07.632660 Disk check host corpvskreienl.na.lzb.hq</span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="color:#1F497D">4873 2017-01-05 15:18:07.632670 Disk check: header 'Filesystem 1K-blocks Used Available Use% Mounted on', columns 3 and -1</span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="color:#1F497D">4873 2017-01-05 15:18:07.632677 Disk check: FS='/' level 0%/101469992U (thresholds: 90/95, abs: 0/0)</span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="color:#1F497D">4873 2017-01-05 15:18:07.632683 Disk check: FS='/dev' level 0%/930248U (thresholds: 90/95, abs: 0/0)</span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="color:#1F497D">4873 2017-01-05 15:18:07.632688 Disk check: FS='/dev/shm' level 0%/941992U (thresholds: 90/95, abs: 0/0)</span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="color:#1F497D">4873 2017-01-05 15:18:07.632692 Disk check: FS='/run' level 0%/892380U (thresholds: 90/95, abs: 0/0)</span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="color:#1F497D">4873 2017-01-05 15:18:07.632696 Disk check: FS='/sys/fs/cgroup' level 0%/942064U (thresholds: 90/95, abs: 0/0)</span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="color:#1F497D">4873 2017-01-05 15:18:07.632700 Disk check: FS='/boot' level 0%/20U (thresholds: 90/95, abs: 0/0)</span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="color:#1F497D">4873 2017-01-05 15:18:07.632704 Disk check: FS='/run/user/0' level 0%/188416U (thresholds: 90/95, abs: 0/0)</span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="color:#1F497D">4873 2017-01-05 15:18:07.632708 Adding to combo msg: status corpvskreienl,na,lzb,hq.disk green Thu Jan 5 15:18:07 EST 2017 - Filesystems ok</span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="color:#1F497D">4873 2017-01-05 15:18:07.632710 combo_add (tcp): current xymonmsg size: 11068, buffer size: 617; maxmsgspercombo: 100, messages queued so far: 2</span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="color:#1F497D">4873 2017-01-05 15:18:07.632713 Inode check host corpvskreienl.na.lzb.hq</span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="color:#1F497D">4873 2017-01-05 15:18:07.632719 Inode check: header 'Filesystem 1K-blocks Used Available Use% Mounted on', columns -1 and -1</span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="color:#1F497D">4873 2017-01-05 15:18:07.632726 Inode check: FS='/' level 0%/0U (thresholds: 70/90, abs: 0/0)</span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="color:#1F497D">4873 2017-01-05 15:18:07.632752 Inode check: FS='/dev' level 0%/0U (thresholds: 70/90, abs: 0/0)</span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="color:#1F497D">4873 2017-01-05 15:18:07.632758 Inode check: FS='/dev/shm' level 0%/0U (thresholds: 70/90, abs: 0/0)</span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="color:#1F497D">4873 2017-01-05 15:18:07.632762 Inode check: FS='/run' level 0%/0U (thresholds: 70/90, abs: 0/0)</span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="color:#1F497D">4873 2017-01-05 15:18:07.632766 Inode check: FS='/sys/fs/cgroup' level 0%/0U (thresholds: 70/90, abs: 0/0)</span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="color:#1F497D">4873 2017-01-05 15:18:07.632770 Inode check: FS='/boot' level 0%/0U (thresholds: 70/90, abs: 0/0)</span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="color:#1F497D">4873 2017-01-05 15:18:07.632773 Inode check: FS='/run/user/0' level 0%/0U (thresholds: 70/90, abs: 0/0)</span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="color:#1F497D">4873 2017-01-05 15:18:07.632777 Adding to combo msg: status corpvskreienl,na,lzb,hq.inode green Thu Jan 5 15:18:07 EST 2017 - Filesystems ok</span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="color:#1F497D"> </span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="color:#1F497D"> </span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="color:#1F497D"> </span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="color:#1F497D"> </span></p>
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal" style="margin-left:1.5in"><b><span style="color:windowtext">From:</span></b><span style="color:windowtext"> Japheth Cleaver [<a href="mailto:cleaver@terabithia.org">mailto:cleaver@terabithia.org</a>]
<br>
<b>Sent:</b> Thursday, January 5, 2017 3:11 PM<br>
<b>To:</b> Scot Kreienkamp; <a href="mailto:shea4th@comcast.net">shea4th@comcast.net</a><br>
<b>Cc:</b> xymon<br>
<b>Subject:</b> Re: [Xymon] xymon disk not alerting at 100%, need another set of eyes</span></p>
</div>
</div>
<p class="MsoNormal" style="margin-left:1.5in"> </p>
<div>
<p class="MsoNormal" style="margin-left:1.5in">Eyeballing it, it seems to be correct, and if windows matches are working then it seems like class (or at least OS) is being sensed properly. Can you put xymond_client in debug mode (-USR2) and show the output
from the processing of the disk section for this client? It should indicate there the thresholds it *thinks* apply to this host.<br>
<br>
Also, when running manually like this:<span style="color:#1F497D"><br>
/usr/libexec/xymon/xymond_client --dump-config</span><br>
...can you prefix with xymoncmd and see if anything changes? Weird configs I'd forgotten about in xymonserver.cfg have bit me on occasion.<br>
<br>
-jc<br>
<br>
On 1/5/2017 11:38 AM, Scot Kreienkamp wrote:</p>
</div>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<p class="MsoNormal" style="margin-left:1.5in"><span style="color:#1F497D">No… it’s showing up on the page and in the graph. Even if it was ignored, reverting to the default out-of-the-box config would have removed the ignore also.
</span></p>
<p class="MsoNormal" style="margin-left:1.5in"><span style="color:#1F497D"> </span></p>
<p class="MsoNormal" style="margin-left:1.5in"><img border="0" width="493" height="195" id="Picture_x0020_1" src="cid:image002.jpg@01D26773.F714C840"></p>
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal" style="margin-left:2.0in"><b>From:</b><a href="mailto:shea4th@comcast.net">shea4th@comcast.net</a> [<a href="mailto:shea4th@comcast.net">mailto:shea4th@comcast.net</a>]
<br>
<b>Sent:</b> Thursday, January 5, 2017 2:36 PM<br>
<b>To:</b> Scot Kreienkamp<br>
<b>Cc:</b><a href="mailto:cleaver@terabithia.org">cleaver@terabithia.org</a>; xymon<br>
<b>Subject:</b> Re: [Xymon] xymon disk not alerting at 100%, need another set of eyes</p>
</div>
</div>
<p class="MsoNormal" style="margin-left:2.0in"> </p>
<div>
<div>
<p class="MsoNormal" style="margin-left:2.0in"><span style="font-family:"Arial","sans-serif"">Is /boot ignored?</span></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:2.0in"><span style="font-family:"Arial","sans-serif""> </span></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:2.0in"><span style="font-family:"Arial","sans-serif""> </span></p>
</div>
<div style="margin-left:.5in">
<div style="margin-left:.5in">
<div style="margin-left:.5in">
<div class="MsoNormal" align="center" style="margin-left:.5in;text-align:center">
<span style="font-family:"Arial","sans-serif"">
<hr size="2" width="100%" align="center">
</span></div>
</div>
</div>
</div>
<blockquote style="border:none;border-left:solid #1010FF 1.5pt;padding:0in 0in 0in 4.0pt;margin-left:3.75pt;margin-top:5.0pt;margin-bottom:5.0pt">
<p class="MsoNormal" style="margin-left:2.0in"><span style="color:#1F497D">It’s not the partition the client is on, and it’s been that way for days.
</span></p>
<p class="MsoNormal" style="margin-left:2.0in"><span style="color:#1F497D"> </span></p>
<p class="MsoNormal" style="margin-left:2.0in"><span style="color:#1F497D">So a bit more troubleshooting, I moved all the files out of analysis.d so the only analysis config is the default included from the install and restarted xymon.
</span></p>
<p class="MsoNormal" style="margin-left:2.0in"><span style="color:#1F497D"> </span></p>
<p class="MsoNormal" style="margin-left:2.0in"><span style="color:#1F497D">[root@monvxymon analysis.d]# /usr/libexec/xymon/xymond_client --dump-config --config=etc/analysis.cfg ; echo Done</span></p>
<p class="MsoNormal" style="margin-left:2.0in"><span style="color:#1F497D">UP 3600 -1 (line: 365)</span></p>
<p class="MsoNormal" style="margin-left:2.0in"><span style="color:#1F497D">LOAD 5.00 10.00 (line: 366)</span></p>
<p class="MsoNormal" style="margin-left:2.0in"><span style="color:#1F497D">DISK * 90% 95% 0 -1 red (line: 367)</span></p>
<p class="MsoNormal" style="margin-left:2.0in"><span style="color:#1F497D">INODE * 70% 90% 0 -1 red (line: 368)</span></p>
<p class="MsoNormal" style="margin-left:2.0in"><span style="color:#1F497D">MEMREAL 100 101 (line: 369)</span></p>
<p class="MsoNormal" style="margin-left:2.0in"><span style="color:#1F497D">MEMSWAP 50 80 (line: 370)</span></p>
<p class="MsoNormal" style="margin-left:2.0in"><span style="color:#1F497D">MEMACT 90 97 (line: 371)</span></p>
<p class="MsoNormal" style="margin-left:2.0in"><span style="color:#1F497D">Done</span></p>
<p class="MsoNormal" style="margin-left:2.0in"><span style="color:#1F497D"> </span></p>
<p class="MsoNormal" style="margin-left:2.0in"><span style="color:#1F497D"> </span></p>
<p class="MsoNormal" style="margin-left:2.0in"><span style="color:#1F497D">Then I restarted my client to force it to report in. The disk test is still green with the /boot partition at 100% full! All my windows clients are working, but NONE of my Linux clients
with disk full conditions are working. </span></p>
<p class="MsoNormal" style="margin-left:2.0in"><span style="color:#1F497D"> </span></p>
<p class="MsoNormal" style="margin-left:2.0in"><span style="color:#1F497D">Something is definitely broken!</span></p>
<p class="MsoNormal" style="margin-left:2.0in"><span style="color:#1F497D"> </span></p>
<p class="MsoNormal" style="margin-left:2.0in"><span style="color:#1F497D">JC, any ideas?
</span></p>
<p class="MsoNormal" style="margin-left:2.0in"><span style="color:#1F497D"> </span></p>
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal" style="margin-left:2.5in"><b>From:</b><a href="mailto:shea4th@comcast.net">shea4th@comcast.net</a> [<a href="mailto:shea4th@comcast.net">mailto:shea4th@comcast.net</a>]
<br>
<b>Sent:</b> Thursday, January 5, 2017 2:18 PM<br>
<b>To:</b> Scot Kreienkamp<br>
<b>Cc:</b> xymon<br>
<b>Subject:</b> Re: [Xymon] xymon disk not alerting at 100%, need another set of eyes</p>
</div>
</div>
<p class="MsoNormal" style="margin-left:2.5in"> </p>
<div>
<div>
<p class="MsoNormal" style="margin-left:2.5in"><span style="font-family:"Arial","sans-serif"">Hi Scott,</span></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:2.5in"><span style="font-family:"Arial","sans-serif""> </span></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:2.5in"><span style="font-family:"Arial","sans-serif"">What may have happened is that the disk filled up quicker than the client could send the alert.</span></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:2.5in"><span style="font-family:"Arial","sans-serif"">If the client is on the same disk that is full. That's caught me a few times.</span></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:2.5in"><span style="font-family:"Arial","sans-serif""> </span></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:2.5in"><span style="font-family:"Arial","sans-serif"">HTH</span></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:2.5in"><span style="font-family:"Arial","sans-serif"">Regards</span></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:2.5in"><span style="font-family:"Arial","sans-serif"">Greg Shea</span></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:2.5in"><span style="font-family:"Arial","sans-serif""> </span></p>
</div>
<div style="margin-left:.5in">
<div style="margin-left:.5in">
<div style="margin-left:.5in">
<div style="margin-left:.5in">
<div class="MsoNormal" align="center" style="margin-left:.5in;text-align:center">
<span style="font-family:"Arial","sans-serif"">
<hr size="2" width="100%" align="center">
</span></div>
</div>
</div>
</div>
</div>
<blockquote style="border:none;border-left:solid #1010FF 1.5pt;padding:0in 0in 0in 4.0pt;margin-left:3.75pt;margin-top:5.0pt;margin-bottom:5.0pt">
<p class="MsoNormal" style="margin-left:2.5in"><span style="color:#1F497D">So I had another thought, I copied the class statement to another file so it’s now first in the list and last in the list, and my disk test is still green. Is the class match broken?</span></p>
<p class="MsoNormal" style="margin-left:2.5in"><span style="color:#1F497D"> </span></p>
<p class="MsoNormal" style="margin-left:2.5in"><span style="color:#1F497D">I’m on 4.3.27-1 from Terabithia.</span></p>
<p class="MsoNormal" style="margin-left:2.5in"><span style="color:#1F497D"> </span></p>
<p class="MsoNormal" style="margin-left:2.5in"><span style="color:#1F497D">Thanks!</span></p>
<p class="MsoNormal" style="margin-left:2.5in"><span style="color:#1F497D"> </span></p>
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal" style="margin-left:2.5in"><b>From:</b> Scot Kreienkamp <br>
<b>Sent:</b> Thursday, January 5, 2017 1:53 PM<br>
<b>To:</b><a href="mailto:xymon@xymon.com" target="_blank">xymon@xymon.com</a><br>
<b>Subject:</b> RE: xymon disk not alerting at 100%, need another set of eyes</p>
</div>
</div>
<p class="MsoNormal" style="margin-left:2.5in"> </p>
<p class="MsoNormal" style="margin-left:2.5in">After re-reading I can see how that may not be totally clear. By alerting, I mean that the disk test is still green, even though a partition is at 100%full. </p>
<p class="MsoNormal" style="margin-left:2.5in"> </p>
<p class="MsoNormal" style="margin-left:2.5in"> </p>
<p class="MsoNormal" style="margin-left:2.5in"> </p>
<p class="MsoNormal" style="margin-left:2.5in"> </p>
<p class="MsoNormal" style="margin-left:2.5in">I found two hosts that weren’t alerting on disk full condition and started digging into the problem further. As I understand it, xymon matches the first entry from analysis config files. So I dumped the analysis
config for disks:</p>
<p class="MsoNormal" style="margin-left:2.5in"> </p>
<p class="MsoNormal" style="margin-left:2.5in">Client line:</p>
<p class="MsoNormal" style="margin-left:2.5in">[collector:]</p>
<p class="MsoNormal" style="margin-left:2.5in">client corpvskreienl,na,lzb,hq.linux linux</p>
<p class="MsoNormal" style="margin-left:2.5in"> </p>
<p class="MsoNormal" style="margin-left:2.5in">[root@monvxymon hosts.d]# /usr/libexec/xymon/xymond_client --dump-config --config=etc/analysis.cfg |grep -i ^disk</p>
<p class="MsoNormal" style="margin-left:2.5in">DISK %^(D|E|F|G|H|I|J|K|L|M|N|O|P|Q|R|S|T|U|V|W|X|Y|Z) 15728640U 10485760U 0 -1 red HOST=%(mondbexec.*|mondb.*|retmaildb.*).na.lzb.hq (line: 515)</p>
<p class="MsoNormal" style="margin-left:2.5in">DISK %^(1|2|3|4|5|6|7|8|9|0).* IGNORE HOST=%(mondbexec.*|mondb.*|retmaildb.*).na.lzb.hq (line: 516)</p>
<p class="MsoNormal" style="margin-left:2.5in">DISK %^(D|E|F|G|H|I|J|K|L|M|N|O|P|Q|R|S|T|U|V|W|X|Y|Z) 15728640U 10485760U 0 -1 red HOST=%(mon|new|red|neo|taz|sil|kin|sal|hpt)exch.*.na.lzb.hq (line: 527)</p>
<p class="MsoNormal" style="margin-left:2.5in">DISK %^(1|2|3|4|5|6|7|8|9|0).* IGNORE HOST=%(mon|new|red|neo|taz|sil|kin|sal|hpt)exch.*.na.lzb.hq (line: 528)</p>
<p class="MsoNormal" style="margin-left:2.5in">DISK %^(D|E|F|G|H|I|J|K|L|M|N|O|P|Q|R|S|U|V|W|X|Y|Z) 15728640U 10485760U 0 -1 red HOST=%dayexch.*.na.lzb.hq (line: 539)</p>
<p class="MsoNormal" style="margin-left:2.5in">DISK %^T IGNORE HOST=%dayexch.*.na.lzb.hq (line: 540)</p>
<p class="MsoNormal" style="margin-left:2.5in">DISK %^(1|2|3|4|5|6|7|8|9|0|).* IGNORE HOST=%dayexch.*.na.lzb.hq (line: 541)</p>
<p class="MsoNormal" style="margin-left:2.5in">DISK C 204800U 102400U 0 -1 red HOST=mdas4000.mdmza.dmz.hq (line: 567)</p>
<p class="MsoNormal" style="margin-left:2.5in">DISK E 101% 101% 0 -1 red HOST=mdas4000.mdmza.dmz.hq (line: 568)</p>
<p class="MsoNormal" style="margin-left:2.5in">DISK F 99% 100% 0 -1 red HOST=mons6000.na.lzb.hq (line: 576)</p>
<p class="MsoNormal" style="margin-left:2.5in">DISK %^(D|E|F|G|H|I|J|K|L|M|N|O|P|Q|R|S|T|U|V|W|X|Y|Z) 15728640U 10485760U 0 -1 red PAGE=infrastructure/fileserv (line: 582)</p>
<p class="MsoNormal" style="margin-left:2.5in">DISK D 99% 100% 0 -1 red HOST=lzbv5223.na.lzb.hq,lzbv6016.na.lzb.hq (line: 746)</p>
<p class="MsoNormal" style="margin-left:2.5in">DISK * 90% 95% 0 -1 red HOST=%dvrvas(0|1)\.mdmza.dmz.hq (line: 762)</p>
<p class="MsoNormal" style="margin-left:2.5in">DISK * 90% 95% 0 -1 red CLASS=powershell (line: 1054)</p>
<p class="MsoNormal" style="margin-left:2.5in">DISK * 90% 95% 0 -1 red CLASS=win32 (line: 1073)</p>
<p class="MsoNormal" style="margin-left:2.5in">DISK * 90% 95% 0 -1 red CLASS=linux (line: 1090)</p>
<p class="MsoNormal" style="margin-left:2.5in">DISK * 90% 95% 0 -1 red (line: 1132)</p>
<p class="MsoNormal" style="margin-left:2.5in"> </p>
<p class="MsoNormal" style="margin-left:2.5in"> </p>
<p class="MsoNormal" style="margin-left:2.5in">I can’t find any lines above where the hostname matches, it’s on page Infrastructure/Miscellaneous so none of the page statements match, so it should match on the class. Or the very last line is the system default
which should apply if nothing else. My server is sitting at 100%full on one partition so it SHOULD be alerting. </p>
<p class="MsoNormal" style="margin-left:2.5in"> </p>
<p class="MsoNormal" style="margin-left:2.5in">Thanks for any help. </p>
<p class="MsoNormal" style="margin-left:2.5in"><span style="color:#1F497D"> </span></p>
<p style="margin-left:2.5in;line-height:10.5pt" id="c1-id-10"><span style="font-size:8.0pt;font-family:"Arial","sans-serif"">This message is intended only for the individual or entity to which it is addressed. It may contain privileged, confidential information
which is exempt from disclosure under applicable laws. If you are not the intended recipient, you are strictly prohibited from disseminating or distributing this information (other than to the intended recipient) or copying this information. If you have
received this communication in error, please notify us immediately by e-mail or by telephone at the above number. Thank you</span><span style="font-size:8.0pt">.</span></p>
<p class="MsoNormal" style="margin-left:2.5in"><span style="font-size:12.0pt;font-family:"Helvetica","sans-serif""><br>
_______________________________________________<br>
Xymon mailing list<br>
<a href="mailto:Xymon@xymon.com" target="_blank">Xymon@xymon.com</a><br>
<a href="http://lists.xymon.com/mailman/listinfo/xymon" target="_blank">http://lists.xymon.com/mailman/listinfo/xymon</a></span></p>
</blockquote>
<div>
<p class="MsoNormal" style="margin-left:2.5in"><span style="font-size:12.0pt;font-family:"Arial","sans-serif""> </span></p>
</div>
</div>
</blockquote>
<div>
<p class="MsoNormal" style="margin-left:2.0in"><span style="font-size:12.0pt;font-family:"Arial","sans-serif""> </span></p>
</div>
</div>
</blockquote>
<p style="margin-left:1.5in"> </p>
</blockquote>
<p style="margin-left:1.0in"><o:p> </o:p></p>
<p class="MsoNormal" align="center" style="margin-left:.5in;text-align:center"><span style="font-size:12.0pt;font-family:"Times New Roman","serif";color:windowtext">This communication is the property of CenturyLink and may contain confidential or privileged
information. Unauthorized use of this communication is strictly prohibited and may be unlawful. If you have received this communication in error, please immediately notify the sender by reply e-mail and destroy all copies of the communication and any attachments.</span></p>
</div>
</body>
</html>