<div dir="ltr">Chris<div><br></div><div>I think this is the key part of the man page:</div><div><br></div><div><div>HOST=targetstring Rule matching a host by the hostname. "targetstring"</div><div> is either a comma-separated list of hostnames (from the hosts.cfg</div><div> file), "*" to indicate "all hosts", or a Perl-compatible regular</div><div> expression.</div></div><div><br></div><div>Are your host definitions comma-separated lists, or PCREs? They can't be both.</div><div><br></div><div>So none of your hosts match, and the DEFAULT stanza is the one that applies.</div><div><br></div><div>J</div><div><br></div><div><br></div></div><div class="gmail_extra"><br><div class="gmail_quote">On 9 June 2018 at 02:43, Seip, Christopher (HPN SIS team) <span dir="ltr"><<a href="mailto:chris.seip@hpe.com" target="_blank">chris.seip@hpe.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">I could a hand getting the basics of analysis.cfg worked out, please. Here's mine:<br>
<br>
# egrep -v '^#' analysis.cfg<br>
<br>
HOST=%<a href="http://swnfs06.rose.rdlabs.hpecorp.net" rel="noreferrer" target="_blank">swnfs06.rose.rdlabs.<wbr>hpecorp.net</a>,%swnfs06<br>
DISK /disk/data 50 55<br>
DISK * 90 95<br>
MEMSWAP 80 90<br>
<br>
HOST=%<a href="http://swnfs07.rose.rdlabs.hpecorp.net" rel="noreferrer" target="_blank">swnfs07.rose.rdlabs.<wbr>hpecorp.net</a>,%swnfs07<br>
DISK /disk/data 92 96<br>
DISK * 90 95<br>
<br>
HOST=%<a href="http://hpnsvr18.rose.rdlabs.hpecorp.net" rel="noreferrer" target="_blank">hpnsvr18.rose.rdlabs.<wbr>hpecorp.net</a>,%hpnsvr18<br>
DISK /BACKUP 98 99<br>
DISK * 90 95<br>
<br>
DEFAULT<br>
# Ignore some usually uninteresting tmpfs mounts.<br>
DISK /dev IGNORE<br>
DISK /dev/shm IGNORE<br>
DISK /lib/init/rw IGNORE<br>
DISK /run IGNORE<br>
# These are the built-in defaults. You should only modify these<br>
# lines, not add new ones (no PROC, DISK, LOG ... lines).<br>
UP 1h<br>
LOAD 5.0 10.0<br>
DISK * 90 95<br>
INODE * 70 90<br>
MEMPHYS 100 101<br>
MEMSWAP 50 80<br>
MEMACT 90 97<br>
<br>
<br>
Three issues with this:<br>
<br>
1. Swap consumption in the first host, swnfs06, has been steady at 74%, so I was trying to hush the alerts with the MEMSWAP line. This change hasn't had any effect; I am still getting a memory low yellow-warning for swap/page usage on swnfs06.<br>
<br>
2. On the same swnfs06 host, its /disk/data partition is 56% full, so my "DISK..50 60" line was an attempt to trigger a yellow alert. I was testing my understanding of the analysis.cfg file, but the filesystems test remains green.<br>
<br>
3. And my 96% full /BACKUP drive on hpnsvr18 is issuing a red alert for being over the panic level of 95%, where I was trying to set the panic level at 99%.<br>
<br>
After wrestling with the man page and many experiments, I'm tossing this to the group for help. Seems very basic, but it's just not working for me. What'm I missing?<br>
<br>
I tried switching to the "threshold hostname" format, like this:<br>
<br>
# egrep -v '^#' analysis.cfg | head -11<br>
<br>
DISK /disk/data 50 55 HOST=%<a href="http://swnfs06.rose.rdlabs.hpecorp.net" rel="noreferrer" target="_blank">swnfs06.rose.rdlabs.<wbr>hpecorp.net</a>,%swnfs06<br>
DISK * 90 95 HOST=%<a href="http://swnfs06.rose.rdlabs.hpecorp.net" rel="noreferrer" target="_blank">swnfs06.rose.rdlabs.<wbr>hpecorp.net</a>,%swnfs06<br>
MEMSWAP 80 90 HOST=%<a href="http://swnfs06.rose.rdlabs.hpecorp.net" rel="noreferrer" target="_blank">swnfs06.rose.rdlabs.<wbr>hpecorp.net</a>,%swnfs06<br>
<br>
DISK /disk/data 92 96 HOST=%<a href="http://swnfs07.rose.rdlabs.hpecorp.net" rel="noreferrer" target="_blank">swnfs07.rose.rdlabs.<wbr>hpecorp.net</a>,%swnfs07<br>
DISK * 90 95 HOST=%<a href="http://swnfs07.rose.rdlabs.hpecorp.net" rel="noreferrer" target="_blank">swnfs07.rose.rdlabs.<wbr>hpecorp.net</a>,%swnfs07<br>
<br>
DISK /BACKUP 98 99 HOST=%<a href="http://hpnsvr18.rose.rdlabs.hpecorp.net" rel="noreferrer" target="_blank">hpnsvr18.rose.rdlabs.<wbr>hpecorp.net</a>,%hpnsvr18<br>
DISK * 90 95 HOST=%<a href="http://hpnsvr18.rose.rdlabs.hpecorp.net" rel="noreferrer" target="_blank">hpnsvr18.rose.rdlabs.<wbr>hpecorp.net</a>,%hpnsvr18<br>
<br>
This produced no change in behavior. I am stopping and starting the Xymon server software and waiting for new html pages to generate after every change in the analysis.cfg.<br>
<br>
In my configuration report, I can see that every server configured for local memory tests has acquired the 80%/90% threshold setting, not just swnfs06. And my "DISK /disk/data 50 55" is having no effect at all on any host: The strings "50%" or "60%" appear nowhere in my configuration report.<br>
<br>
# egrep 'swnfs0[67]' hosts.cfg<br>
16.93.247.204 <a href="http://swnfs06.rose.rdlabs.hpecorp.net" rel="noreferrer" target="_blank">swnfs06.rose.rdlabs.hpecorp.<wbr>net</a> # rpc=mount,nlockmgr,nfs,ypbind ssh<br>
16.93.247.205 <a href="http://swnfs07.rose.rdlabs.hpecorp.net" rel="noreferrer" target="_blank">swnfs07.rose.rdlabs.hpecorp.<wbr>net</a> # NOCOLUMNS=files rpc=mount,nlockmgr,nfs,ypbind ssh<br>
16.93.247.204 <a href="http://swnfs06.rose.rdlabs.hpecorp.net" rel="noreferrer" target="_blank">swnfs06.rose.rdlabs.hpecorp.<wbr>net</a><br>
<br>
# xymoncmd xymond_client --dump-config<br>
DISK /disk/data 50% 55% 0 -1 red HOST=%<a href="http://swnfs06.rose.rdlabs.hpecorp.net" rel="noreferrer" target="_blank">swnfs06.rose.rdlabs.<wbr>hpecorp.net</a>,%swnfs06 (line: 351)<br>
DISK * 90% 95% 0 -1 red HOST=%<a href="http://swnfs06.rose.rdlabs.hpecorp.net" rel="noreferrer" target="_blank">swnfs06.rose.rdlabs.<wbr>hpecorp.net</a>,%swnfs06 (line: 352)<br>
MEMSWAP 80 90 HOST=%<a href="http://swnfs06.rose.rdlabs.hpecorp.net" rel="noreferrer" target="_blank">swnfs06.rose.rdlabs.<wbr>hpecorp.net</a>,%swnfs06 (line: 353)<br>
DISK /disk/data 92% 96% 0 -1 red HOST=%<a href="http://swnfs07.rose.rdlabs.hpecorp.net" rel="noreferrer" target="_blank">swnfs07.rose.rdlabs.<wbr>hpecorp.net</a>,%swnfs07 (line: 355)<br>
DISK * 90% 95% 0 -1 red HOST=%<a href="http://swnfs07.rose.rdlabs.hpecorp.net" rel="noreferrer" target="_blank">swnfs07.rose.rdlabs.<wbr>hpecorp.net</a>,%swnfs07 (line: 356)<br>
DISK /BACKUP 98% 99% 0 -1 red HOST=%<a href="http://hpnsvr18.rose.rdlabs.hpecorp.net" rel="noreferrer" target="_blank">hpnsvr18.rose.rdlabs.<wbr>hpecorp.net</a>,%hpnsvr18 (line: 360)<br>
DISK * 90% 95% 0 -1 red HOST=%<a href="http://hpnsvr18.rose.rdlabs.hpecorp.net" rel="noreferrer" target="_blank">hpnsvr18.rose.rdlabs.<wbr>hpecorp.net</a>,%hpnsvr18 (line: 361)<br>
DISK /dev IGNORE (line: 371)<br>
DISK /dev/shm IGNORE (line: 372)<br>
DISK /lib/init/rw IGNORE (line: 373)<br>
DISK /run IGNORE (line: 374)<br>
UP 3600 -1 (line: 377)<br>
LOAD 5.00 10.00 (line: 378)<br>
DISK * 90% 95% 0 -1 red (line: 379)<br>
INODE * 70% 90% 0 -1 red (line: 380)<br>
MEMREAL 100 101 (line: 381)<br>
MEMSWAP 50 80 (line: 382)<br>
MEMACT 90 97 (line: 383)<br>
<br>
Thanks for any insights you can provide. Feels like I'm making a wrong assumption about how analysis.cfg works.<br>
<br>
Best thing I can figure to do would be to switch to local configuration of my Xymon clients, but I'd rather manage custom thresholds centrally.<br>
<br>
- Chris<br>
<br>
______________________________<wbr>_________________<br>
Xymon mailing list<br>
<a href="mailto:Xymon@xymon.com">Xymon@xymon.com</a><br>
<a href="http://lists.xymon.com/mailman/listinfo/xymon" rel="noreferrer" target="_blank">http://lists.xymon.com/<wbr>mailman/listinfo/xymon</a><br>
</blockquote></div><br></div>