<html><body><p><font size="2">Hi Thomas,</font><br><br><font size="2">thx for your suggestions, but unfortunately this did not catch the issue.</font><br><font size="2">The restart runs without messages, nothing suspicious in the logs.</font><br><font size="2">But after restart and after some minutes all acks are gone.</font><br><font size="2">Also the ack table on bottom of the nongreen page is empty.</font><br><br><font size="2">My alert.chk file is always up-to-date, a SIGUSR1 does not change anything.</font><br><font size="2">But it is quite large (5,1MB) currently due to the lot of alerts (my access to one of the DMZ is blocked creating a lot of conn/ssh/rdp alerts).</font><br><br><font size="2">I wrote a script to mass-ack such alerts, otherwise the noise would be unmanageable.</font><br><font size="2">This acks all the red conns/ssh/rdp for this DMZ, and i can see the acks in the nongreen page.</font><br><font size="2">Until next restart...</font><br><br><font size="2">Btw: In difference what Erik wrote: at least new CLASS settings in analysis.cfg need a xymon.sh restart to take effect (just checked).</font><br><br><font size="2">Norbert</font><br><br><br><img width="16" height="16" src="cid:1__=4EBB09AADFAD32368f9e8a93df938690918c4EB@" border="0" alt="Inactive hide details for Thomas Eckert ---11/02/2018 10:45:59 AM---Hi Norbert, as I can not remember that I encountered this I"><font size="2" color="#424282">Thomas Eckert ---11/02/2018 10:45:59 AM---Hi Norbert, as I can not remember that I encountered this I just tested this (in a mini setup, xymon</font><br><br><font size="2" color="#5F5F5F">From: </font><font size="2">Thomas Eckert <thomas.eckert@it-eckert.de></font><br><font size="2" color="#5F5F5F">To: </font><font size="2">xymon <xymon@xymon.com></font><br><font size="2" color="#5F5F5F">Cc: </font><font size="2">Norbert Kriegenburg <norbert.kriegenburg@de.ibm.com></font><br><font size="2" color="#5F5F5F">Date: </font><font size="2">11/02/2018 10:45 AM</font><br><font size="2" color="#5F5F5F">Subject: </font><font size="2">Re: [Xymon] acknowledgements does not survive xymon restart</font><br><hr width="100%" size="2" align="left" noshade style="color:#8091A5; "><br><br><br>Hi Norbert,<br><br>as I can not remember that I encountered this I just tested this (in a mini setup, xymon 4.3.28 on Debian9) and my 2 acks survived the xymon-restart.<br>As your environment is fairly large this could be size/load problem.<br><br>Random ideas:<br>- is the restart “clean” or does something crash during the stop-phase (logfiles)?<br>- you could try is to manually force writing a checkpoint-file by sending SIGUSR1 to xymond before restart.<br>- if you have a redundant/multi-server setup: Is there any chance that an other xymon-server is propagating incomplete state (`xymond_distribute` not enabled)?<br><br>All the best<br>Thomas
<ul><ul>On 01 Nov 2018, at 13:16, Norbert Kriegenburg <<a href="mailto:norbert.kriegenburg@de.ibm.com"><u><font color="#0000FF">norbert.kriegenburg@de.ibm.com</font></u></a>> wrote:<br>
<p><font size="2">Don't get me wrong: i don't do frequent restarts usually, but from time to time i need a restart, or the whole server must be restarted bc. of patches.<br>And as i constantly have to add new checks with new NCV definitions the TEST2RRD and SPLITNCV settings in xymonserver.cfg changes, this needs also a restart.</font><br><font size="2"><br>Because we have such a huge numer of servers a lot of departments use Xymon regularly (luckily), and use the ack mechanism to organize their work (add ticket number to an alert, do some evaluation reports and so on).<br>To have >100 alerts ack'ed is normal situation.<br>And it creates a lot of extra work to restore this.<br>In old BB times the acks always survived downtimes and restarts, but now there are no more ack files stored in the acks dir, so i thought it would be restored from the info in the alert.chk file, what is not the case.</font><br><font size="2"><br>Norbert</font><br><br><br><br><graycol.gif><font size="2" color="#424282">EDSchminke---11/01/2018 12:58:35 PM---What config changes are you making that requires such frequent restarts? Changes to hosts.cfg, alert</font><br><font size="2" color="#5F5F5F"><br>From: </font><a href="mailto:EDSchminke@hormel.com"><u><font size="2" color="#0000FF">EDSchminke@Hormel.com</font></u></a><font size="2" color="#5F5F5F"><br>To: </font><a href="mailto:xymon@xymon.com"><u><font size="2" color="#0000FF">xymon@xymon.com</font></u></a><font size="2" color="#5F5F5F"><br>Cc: </font><a href="mailto:norbert.kriegenburg@de.ibm.com"><u><font size="2" color="#0000FF">norbert.kriegenburg@de.ibm.com</font></u></a><font size="2" color="#5F5F5F"><br>Date: </font><font size="2">11/01/2018 12:58 PM</font><font size="2" color="#5F5F5F"><br>Subject: </font><font size="2">Re: [Xymon] acknowledgements does not survive xymon restart</font><p><hr width="100%" size="2" align="left" noshade><br><br><tt><font size="2"><br><br>What config changes are you making that requires such frequent restarts?<br><br>Changes to hosts.cfg, alerts.cfg, analysis.cfg, client-local.cfg; these are<br>files that get changed most frequently in my environment. None of which<br>require a restart to pick up the changes. I think the only one that *does*<br>need a restart, would be xymonserver.cfg, and the only component that would<br>need to be restarted would be xym</font></tt><tt><font size="2">xm-multiack.sh -t conn -c clear -a rdp -d 144000 -r "FW blocked" -i de152911<br></font></tt><tt><font size="2">ond, not the full stack.<br><br>Erik D. Schminke | Associate Systems Programmer<br>Hormel Foods Corporation | One Hormel Place | Austin, MN 55912<br>Phone: (507) 434-6817</font></tt><tt><u><font size="2" color="#0000FF"><br></font></u></tt><a href="mailto:edschminke@hormel.com"><tt><u><font size="2" color="#0000FF">edschminke@hormel.com</font></u></tt></a><tt><font size="2"> | </font></tt><a href="http://www.hormelfoods.com"><tt><u><font size="2" color="#0000FF">www.hormelfoods.com</font></u></tt></a><tt><font size="2"><br><br></font></tt><br><br><br><br>_______________________________________________<br>Xymon mailing list<u><font color="#0000FF"><br></font></u><a href="mailto:Xymon@xymon.com"><u><font color="#0000FF">Xymon@xymon.com</font></u></a><br><a href="http://lists.xymon.com/mailman/listinfo/xymon">http://lists.xymon.com/mailman/listinfo/xymon</a></ul></ul><br><br><BR>
</body></html>