<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p.msonormal0, li.msonormal0, div.msonormal0
{mso-style-name:msonormal;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
span.EmailStyle18
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal">Good point!<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Thanks for finding my message and replying. That gives me something to try.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">- Chris<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><b>From:</b> Jeremy Laidman <jeremy@laidman.org> <br>
<b>Sent:</b> Tuesday, August 21, 2018 8:26 AM<br>
<b>To:</b> Seip, Christopher (HPN SIS team) <chris.seip@hpe.com><br>
<b>Cc:</b> xymon@xymon.com<br>
<b>Subject:</b> Re: [Xymon] Setting thresholds in analysis.cfg<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<p class="MsoNormal">Chris<o:p></o:p></p>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">I think this is the key part of the man page:<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<div>
<p class="MsoNormal">HOST=targetstring Rule matching a host by the hostname. "targetstring"<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"> is either a comma-separated list of hostnames (from the hosts.cfg<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"> file), "*" to indicate "all hosts", or a Perl-compatible regular<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"> expression.<o:p></o:p></p>
</div>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Are your host definitions comma-separated lists, or PCREs? They can't be both.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">So none of your hosts match, and the DEFAULT stanza is the one that applies.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">J<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<p class="MsoNormal">On 9 June 2018 at 02:43, Seip, Christopher (HPN SIS team) <<a href="mailto:chris.seip@hpe.com" target="_blank">chris.seip@hpe.com</a>> wrote:<o:p></o:p></p>
<blockquote style="border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in">
<p class="MsoNormal">I could a hand getting the basics of analysis.cfg worked out, please. Here's mine:<br>
<br>
# egrep -v '^#' analysis.cfg<br>
<br>
HOST=%<a href="http://swnfs06.rose.rdlabs.hpecorp.net" target="_blank">swnfs06.rose.rdlabs.hpecorp.net</a>,%swnfs06<br>
DISK /disk/data 50 55<br>
DISK * 90 95<br>
MEMSWAP 80 90<br>
<br>
HOST=%<a href="http://swnfs07.rose.rdlabs.hpecorp.net" target="_blank">swnfs07.rose.rdlabs.hpecorp.net</a>,%swnfs07<br>
DISK /disk/data 92 96<br>
DISK * 90 95<br>
<br>
HOST=%<a href="http://hpnsvr18.rose.rdlabs.hpecorp.net" target="_blank">hpnsvr18.rose.rdlabs.hpecorp.net</a>,%hpnsvr18<br>
DISK /BACKUP 98 99<br>
DISK * 90 95<br>
<br>
DEFAULT<br>
# Ignore some usually uninteresting tmpfs mounts.<br>
DISK /dev IGNORE<br>
DISK /dev/shm IGNORE<br>
DISK /lib/init/rw IGNORE<br>
DISK /run IGNORE<br>
# These are the built-in defaults. You should only modify these<br>
# lines, not add new ones (no PROC, DISK, LOG ... lines).<br>
UP 1h<br>
LOAD 5.0 10.0<br>
DISK * 90 95<br>
INODE * 70 90<br>
MEMPHYS 100 101<br>
MEMSWAP 50 80<br>
MEMACT 90 97<br>
<br>
<br>
Three issues with this:<br>
<br>
1. Swap consumption in the first host, swnfs06, has been steady at 74%, so I was trying to hush the alerts with the MEMSWAP line. This change hasn't had any effect; I am still getting a memory low yellow-warning for swap/page usage on swnfs06.<br>
<br>
2. On the same swnfs06 host, its /disk/data partition is 56% full, so my "DISK..50 60" line was an attempt to trigger a yellow alert. I was testing my understanding of the analysis.cfg file, but the filesystems test remains green.<br>
<br>
3. And my 96% full /BACKUP drive on hpnsvr18 is issuing a red alert for being over the panic level of 95%, where I was trying to set the panic level at 99%.<br>
<br>
After wrestling with the man page and many experiments, I'm tossing this to the group for help. Seems very basic, but it's just not working for me. What'm I missing?<br>
<br>
I tried switching to the "threshold hostname" format, like this:<br>
<br>
# egrep -v '^#' analysis.cfg | head -11<br>
<br>
DISK /disk/data 50 55 HOST=%<a href="http://swnfs06.rose.rdlabs.hpecorp.net" target="_blank">swnfs06.rose.rdlabs.hpecorp.net</a>,%swnfs06<br>
DISK * 90 95 HOST=%<a href="http://swnfs06.rose.rdlabs.hpecorp.net" target="_blank">swnfs06.rose.rdlabs.hpecorp.net</a>,%swnfs06<br>
MEMSWAP 80 90 HOST=%<a href="http://swnfs06.rose.rdlabs.hpecorp.net" target="_blank">swnfs06.rose.rdlabs.hpecorp.net</a>,%swnfs06<br>
<br>
DISK /disk/data 92 96 HOST=%<a href="http://swnfs07.rose.rdlabs.hpecorp.net" target="_blank">swnfs07.rose.rdlabs.hpecorp.net</a>,%swnfs07<br>
DISK * 90 95 HOST=%<a href="http://swnfs07.rose.rdlabs.hpecorp.net" target="_blank">swnfs07.rose.rdlabs.hpecorp.net</a>,%swnfs07<br>
<br>
DISK /BACKUP 98 99 HOST=%<a href="http://hpnsvr18.rose.rdlabs.hpecorp.net" target="_blank">hpnsvr18.rose.rdlabs.hpecorp.net</a>,%hpnsvr18<br>
DISK * 90 95 HOST=%<a href="http://hpnsvr18.rose.rdlabs.hpecorp.net" target="_blank">hpnsvr18.rose.rdlabs.hpecorp.net</a>,%hpnsvr18<br>
<br>
This produced no change in behavior. I am stopping and starting the Xymon server software and waiting for new html pages to generate after every change in the analysis.cfg.<br>
<br>
In my configuration report, I can see that every server configured for local memory tests has acquired the 80%/90% threshold setting, not just swnfs06. And my "DISK /disk/data 50 55" is having no effect at all on any host: The strings "50%" or "60%" appear
nowhere in my configuration report.<br>
<br>
# egrep 'swnfs0[67]' hosts.cfg<br>
16.93.247.204 <a href="http://swnfs06.rose.rdlabs.hpecorp.net" target="_blank">swnfs06.rose.rdlabs.hpecorp.net</a> # rpc=mount,nlockmgr,nfs,ypbind ssh<br>
16.93.247.205 <a href="http://swnfs07.rose.rdlabs.hpecorp.net" target="_blank">swnfs07.rose.rdlabs.hpecorp.net</a> # NOCOLUMNS=files rpc=mount,nlockmgr,nfs,ypbind ssh<br>
16.93.247.204 <a href="http://swnfs06.rose.rdlabs.hpecorp.net" target="_blank">swnfs06.rose.rdlabs.hpecorp.net</a><br>
<br>
# xymoncmd xymond_client --dump-config<br>
DISK /disk/data 50% 55% 0 -1 red HOST=%<a href="http://swnfs06.rose.rdlabs.hpecorp.net" target="_blank">swnfs06.rose.rdlabs.hpecorp.net</a>,%swnfs06 (line: 351)<br>
DISK * 90% 95% 0 -1 red HOST=%<a href="http://swnfs06.rose.rdlabs.hpecorp.net" target="_blank">swnfs06.rose.rdlabs.hpecorp.net</a>,%swnfs06 (line: 352)<br>
MEMSWAP 80 90 HOST=%<a href="http://swnfs06.rose.rdlabs.hpecorp.net" target="_blank">swnfs06.rose.rdlabs.hpecorp.net</a>,%swnfs06 (line: 353)<br>
DISK /disk/data 92% 96% 0 -1 red HOST=%<a href="http://swnfs07.rose.rdlabs.hpecorp.net" target="_blank">swnfs07.rose.rdlabs.hpecorp.net</a>,%swnfs07 (line: 355)<br>
DISK * 90% 95% 0 -1 red HOST=%<a href="http://swnfs07.rose.rdlabs.hpecorp.net" target="_blank">swnfs07.rose.rdlabs.hpecorp.net</a>,%swnfs07 (line: 356)<br>
DISK /BACKUP 98% 99% 0 -1 red HOST=%<a href="http://hpnsvr18.rose.rdlabs.hpecorp.net" target="_blank">hpnsvr18.rose.rdlabs.hpecorp.net</a>,%hpnsvr18 (line: 360)<br>
DISK * 90% 95% 0 -1 red HOST=%<a href="http://hpnsvr18.rose.rdlabs.hpecorp.net" target="_blank">hpnsvr18.rose.rdlabs.hpecorp.net</a>,%hpnsvr18 (line: 361)<br>
DISK /dev IGNORE (line: 371)<br>
DISK /dev/shm IGNORE (line: 372)<br>
DISK /lib/init/rw IGNORE (line: 373)<br>
DISK /run IGNORE (line: 374)<br>
UP 3600 -1 (line: 377)<br>
LOAD 5.00 10.00 (line: 378)<br>
DISK * 90% 95% 0 -1 red (line: 379)<br>
INODE * 70% 90% 0 -1 red (line: 380)<br>
MEMREAL 100 101 (line: 381)<br>
MEMSWAP 50 80 (line: 382)<br>
MEMACT 90 97 (line: 383)<br>
<br>
Thanks for any insights you can provide. Feels like I'm making a wrong assumption about how analysis.cfg works.<br>
<br>
Best thing I can figure to do would be to switch to local configuration of my Xymon clients, but I'd rather manage custom thresholds centrally.<br>
<br>
- Chris<br>
<br>
_______________________________________________<br>
Xymon mailing list<br>
<a href="mailto:Xymon@xymon.com">Xymon@xymon.com</a><br>
<a href="http://lists.xymon.com/mailman/listinfo/xymon" target="_blank">http://lists.xymon.com/mailman/listinfo/xymon</a><o:p></o:p></p>
</blockquote>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</div>
</body>
</html>