From novosirj at umdnj.edu Mon Apr 1 21:58:42 2013 From: novosirj at umdnj.edu (Novosielski, Ryan) Date: Mon, 1 Apr 2013 15:58:42 -0400 Subject: [Xymon] Ldap support when built References: <514F2362.3040001@hswn.dk> Message-ID: <6A34302C7B62B54EB77F697809EFC81E411F57D06D@UMDEXMBX02.core.umdnj.edu> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 03/24/2013 12:01 PM, Henrik Størner wrote: > On 24-03-2013 16:59, Allen Ferdinand wrote: >> Is there an easy way to tell if ldap support was added when a >> Xymon server was compiled? I've started working on a system that >> I didn't build and don't want to spend time trying to set up >> tests on something that isn't support > > $ /usr/lib/xymon/server/bin/xymonnet --version xymonnet version > 4.3.10 SSL library : OpenSSL 0.9.8o 01 Jun 2010 LDAP library: > OpenLDAP 20423 > > If you see the "LDAP library" line, it has LDAP support. In general, ldd -v is a good way. # ldd -v ./xymonnet | grep ldap find object=libldap-2.4.so.2; required by xymonnet libldap-2.4.so.2 => /opt/csw/lib/libldap-2.4.so.2 - -- - ---- _ _ _ _ ___ _ _ _ |Y#| | | |\/| | \ |\ | | |Ryan Novosielski - Sr. Systems Programmer |$&| |__| | | |__/ | \| _| |novosirj at umdnj.edu - 973/972.0922 (2-0922) \__/ Univ. of Med. and Dent.|IST/EI-Academic Svcs. - ADMC 450, Newark -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) Comment: Using GnuPG with undefined - http://www.enigmail.net/ iEYEARECAAYFAlFZ5u4ACgkQmb+gadEcsb69ywCgmCV8wW9NZR1+T8AamJ9EyRWa sp4An3flDc8hNrHZf7oLpm2WUwwJvf37 =h7d1 -----END PGP SIGNATURE----- From jlaidman at rebel-it.com.au Tue Apr 2 03:33:38 2013 From: jlaidman at rebel-it.com.au (Jeremy Laidman) Date: Tue, 2 Apr 2013 12:33:38 +1100 Subject: [Xymon] html charset setting In-Reply-To: <10931889.TxLRZjk9I8@asy-nb.localdomain> References: <10931889.TxLRZjk9I8@asy-nb.localdomain> Message-ID: The content type is not in the HTML header, it's in the HTTP header. To check, try this: telnet localhost 80 HEAD /xymon-cgi/ghostlist.sh HTTP/1.0 You'll see the HTTP headers, including "Content-type: nnn/mmm" Easier if you have curl installed: curl --head http://localhost/xymon-cgi/ghostlist.sh J On 31 March 2013 12:18, Sergey wrote: > Hello. > > I found information about HTMLCONTENTTYPE in xymonserver.cfg, > but I can't see content-type definition in html header: > > > > > > > red : Xymon - Status @ Sun Mar 31 04:58:57 2013 > > What I need to check ? > > -- > Regards, Sergey > _______________________________________________ > Xymon mailing list > Xymon at xymon.com > http://lists.xymon.com/mailman/listinfo/xymon > -------------- next part -------------- An HTML attachment was scrubbed... URL: From Paul.Root at CenturyLink.com Tue Apr 2 14:23:08 2013 From: Paul.Root at CenturyLink.com (Root, Paul T) Date: Tue, 2 Apr 2013 12:23:08 +0000 Subject: [Xymon] graphing the number of processes Message-ID: Is it possible to graph the number of processes that are defined in analaysis.cfg? -------------- next part -------------- An HTML attachment was scrubbed... URL: From a_s_y at sama.ru Tue Apr 2 14:45:32 2013 From: a_s_y at sama.ru (Sergey) Date: Tue, 2 Apr 2013 16:45:32 +0400 Subject: [Xymon] html charset setting In-Reply-To: References: <10931889.TxLRZjk9I8@asy-nb.localdomain> Message-ID: <201304021645.32302.a_s_y@sama.ru> On Tuesday 02 April 2013, Jeremy Laidman wrote: > The content type is not in the HTML header, it's in the HTTP header. To > check, try this: You right, thanks. > telnet localhost 80 > HEAD /xymon-cgi/ghostlist.sh HTTP/1.0 > It works: HTTP/1.1 200 OK Date: Tue, 02 Apr 2013 12:19:55 GMT Server: Apache/2.2.22 (Unix) mod_perl/2.0.4 Perl/v5.12.5 Connection: close Content-Type: text/html; charset=utf-8 But it not works for users. :-( Firefox 17.0.4 and IE9 are not recognize it. I solved problem partially by adding to headers but I would like to solve the problem globally... -- Regards, Sergey From Neil.Simmonds at express-gifts.co.uk Tue Apr 2 16:54:08 2013 From: Neil.Simmonds at express-gifts.co.uk (Neil Simmonds) Date: Tue, 2 Apr 2013 15:54:08 +0100 Subject: [Xymon] graphing the number of processes In-Reply-To: References: Message-ID: <1BF7D566CC4F514288455EF3C9B7CF830C706648@EXSVIRTUAL.express.findel.co.uk> You could write an external script to grep the analysis.cfg for the word PROC, pipe it into a wc -l to get a count and send that to Xymon. Should be easy enough to set that up as an NCV graph. I don't think there's any way to do it without writing an external script though. Regards, Neil Simmonds Senior Operations Analyst (Operations Support Group) Express Gifts Limited Express House Clayton Business Park Accrington Lancashire BB5 5JY T: 01254 303092 | E: neil.simmonds at Express-Gifts.co.uk ________________________________ From: xymon-bounces at xymon.com [mailto:xymon-bounces at xymon.com] On Behalf Of Root, Paul T Sent: 02 April 2013 13:23 To: 'xymon at xymon.com' Subject: [Xymon] graphing the number of processes Is it possible to graph the number of processes that are defined in analaysis.cfg? Name & Registered Office: EXPRESS GIFTS LIMITED, 2 GREGORY ST, HYDE, CHESHIRE, ENGLAND, SK14 4TH, Company No. 00718151. Express Gifts Limited is authorised and regulated by the Financial Services Authority -------------- NOTE: This email and any information contained within or attached in a separate file is confidential and intended solely for the Individual to whom it is addressed. The information or data included is solely for the purpose indicated or previously agreed. Any information or data included with this e-mail remains the property of Findel PLC and the recipient will refrain from utilising the information for any purpose other than that indicated and upon request will destroy the information and remove it from their records. Any views or opinions presented are solely those of the author and do not necessarily represent those of Findel PLC. If you are not the intended recipient, be advised that you have received this email in error and that any use, dissemination, forwarding, printing, or copying of this email is strictly prohibited. No warranties or assurances are made in relation to the safety and content of this e-mail and any attachments. No liability is accepted for any consequences arising from it. Findel Plc reserves the right to monitor all e-mail communications through its internal and external networks. If you have received this email in error please notify our IT helpdesk on +44(0) 1254 303030 -------------- next part -------------- An HTML attachment was scrubbed... URL: From Galen.Johnson at sas.com Tue Apr 2 17:23:23 2013 From: Galen.Johnson at sas.com (Galen Johnson) Date: Tue, 2 Apr 2013 15:23:23 +0000 Subject: [Xymon] graphing the number of processes In-Reply-To: <1BF7D566CC4F514288455EF3C9B7CF830C706648@EXSVIRTUAL.express.findel.co.uk> References: <1BF7D566CC4F514288455EF3C9B7CF830C706648@EXSVIRTUAL.express.findel.co.uk> Message-ID: Actually, I think you just need to add the "TRACK=id" option to your analysis.cfg file for the proc you want to track. Just look at the man page, http://xymon.com/xymon/help/manpages/man5/analysis.cfg.5.html, for proper syntax. =G= From: xymon-bounces at xymon.com [mailto:xymon-bounces at xymon.com] On Behalf Of Neil Simmonds Sent: Tuesday, April 02, 2013 10:54 AM To: xymon at xymon.com Subject: Re: [Xymon] graphing the number of processes You could write an external script to grep the analysis.cfg for the word PROC, pipe it into a wc -l to get a count and send that to Xymon. Should be easy enough to set that up as an NCV graph. I don't think there's any way to do it without writing an external script though. Regards, Neil Simmonds Senior Operations Analyst (Operations Support Group) Express Gifts Limited Express House Clayton Business Park Accrington Lancashire BB5 5JY T: 01254 303092 | E: neil.simmonds at Express-Gifts.co.uk ________________________________ From: xymon-bounces at xymon.com [mailto:xymon-bounces at xymon.com] On Behalf Of Root, Paul T Sent: 02 April 2013 13:23 To: 'xymon at xymon.com' Subject: [Xymon] graphing the number of processes Is it possible to graph the number of processes that are defined in analaysis.cfg? Name & Registered Office: EXPRESS GIFTS LIMITED, 2 GREGORY ST, HYDE, CHESHIRE, ENGLAND, SK14 4TH, Company No. 00718151. Express Gifts Limited is authorised and regulated by the Financial Services Authority ________________________________ NOTE: This email and any information contained within or attached in a separate file is confidential and intended solely for the Individual to whom it is addressed. The information or data included is solely for the purpose indicated or previously agreed. Any information or data included with this e-mail remains the property of Findel PLC and the recipient will refrain from utilising the information for any purpose other than that indicated and upon request will destroy the information and remove it from their records. Any views or opinions presented are solely those of the author and do not necessarily represent those of Findel PLC. If you are not the intended recipient, be advised that you have received this email in error and that any use, dissemination, forwarding, printing, or copying of this email is strictly prohibited. No warranties or assurances are made in relation to the safety and content of this e-mail and any attachments. No liability is accepted for any consequences arising from it. Findel Plc reserves the right to monitor all e-mail communications through its internal and external networks. If you have received this email in error please notify our IT helpdesk on +44(0) 1254 303030 -------------- next part -------------- An HTML attachment was scrubbed... URL: From Paul.Root at centurylink.com Tue Apr 2 17:35:46 2013 From: Paul.Root at centurylink.com (Root, Paul T) Date: Tue, 2 Apr 2013 15:35:46 +0000 Subject: [Xymon] graphing the number of processes In-Reply-To: References: <1BF7D566CC4F514288455EF3C9B7CF830C706648@EXSVIRTUAL.express.findel.co.uk> Message-ID: Thanks, That's what I was looking for. And I knew that, I've already used it, can't believe I didn't remember this. Paul. From: xymon-bounces at xymon.com [mailto:xymon-bounces at xymon.com] On Behalf Of Galen Johnson Sent: Tuesday, April 02, 2013 10:23 AM To: Neil Simmonds; xymon at xymon.com Subject: Re: [Xymon] graphing the number of processes Actually, I think you just need to add the "TRACK=id" option to your analysis.cfg file for the proc you want to track. Just look at the man page, http://xymon.com/xymon/help/manpages/man5/analysis.cfg.5.html, for proper syntax. =G= From: xymon-bounces at xymon.com [mailto:xymon-bounces at xymon.com] On Behalf Of Neil Simmonds Sent: Tuesday, April 02, 2013 10:54 AM To: xymon at xymon.com Subject: Re: [Xymon] graphing the number of processes You could write an external script to grep the analysis.cfg for the word PROC, pipe it into a wc -l to get a count and send that to Xymon. Should be easy enough to set that up as an NCV graph. I don't think there's any way to do it without writing an external script though. Regards, Neil Simmonds Senior Operations Analyst (Operations Support Group) Express Gifts Limited Express House Clayton Business Park Accrington Lancashire BB5 5JY T: 01254 303092 | E: neil.simmonds at Express-Gifts.co.uk ________________________________ From: xymon-bounces at xymon.com [mailto:xymon-bounces at xymon.com] On Behalf Of Root, Paul T Sent: 02 April 2013 13:23 To: 'xymon at xymon.com' Subject: [Xymon] graphing the number of processes Is it possible to graph the number of processes that are defined in analaysis.cfg? Name & Registered Office: EXPRESS GIFTS LIMITED, 2 GREGORY ST, HYDE, CHESHIRE, ENGLAND, SK14 4TH, Company No. 00718151. Express Gifts Limited is authorised and regulated by the Financial Services Authority ________________________________ NOTE: This email and any information contained within or attached in a separate file is confidential and intended solely for the Individual to whom it is addressed. The information or data included is solely for the purpose indicated or previously agreed. Any information or data included with this e-mail remains the property of Findel PLC and the recipient will refrain from utilising the information for any purpose other than that indicated and upon request will destroy the information and remove it from their records. Any views or opinions presented are solely those of the author and do not necessarily represent those of Findel PLC. If you are not the intended recipient, be advised that you have received this email in error and that any use, dissemination, forwarding, printing, or copying of this email is strictly prohibited. No warranties or assurances are made in relation to the safety and content of this e-mail and any attachments. No liability is accepted for any consequences arising from it. Findel Plc reserves the right to monitor all e-mail communications through its internal and external networks. If you have received this email in error please notify our IT helpdesk on +44(0) 1254 303030 -------------- next part -------------- An HTML attachment was scrubbed... URL: From haertig at avaya.com Wed Apr 3 00:21:49 2013 From: haertig at avaya.com (Haertig, David F (Dave)) Date: Tue, 2 Apr 2013 22:21:49 +0000 Subject: [Xymon] Custom graphs, non-standard config Message-ID: My installation is an old Hobbit 4.2.0 one, but in case the graphing is still similar to the way Xymon does things nowadays, I thought I'd ask here. I am familiar with custom graphs, using NCV, and have implemented many. I am looking to try something a little different from that. I have a network appliance (not a "server") that cannot have the Hobbit client installed on it, but I can gather CPU load info from it like this "ssh user at appliance status cpu". This generates a response like this example: 0.18 0.14 0.10 3/74 29150 Command Result : 0 (Success) I currently use the above collected data to create a "status" message that I then use the "bb" command to send to Hobbit. Works as expected, with the data showing up in the "cpu" column for this appliance I am monitoring: /usr/local/bin/bb 192.168.0.1 status qcosvhsm1.cpu green Tue Apr 2 15:55:16 2013 CPU load ======== &green 5 minute average CPU load is 0.10, which is <= warning level of 3 load average: 0.10, 0.10, 0.09 Raw data (command = 'status cpu'): 0.10 0.10 0.09 3/74 7177 Command Result : 0 (Success) (I have other custom stuff that turns text like "&green" into a link to the green light icon Hobbit normally uses, but that's irrelevant to my questions here.) What I would like to do is use the built-in RRD and "CPU Load" graph definitions to display a graph on the Hobbit webpage. I realize I can make my own custom ones, and I know how to do that already (but not showing up on the default "cpu" column, I'd have to make a different "cpu_load" column using a different name than just "cpu"), but I wanted to try sending my data into Hobbit to force it to use the built-in definitions rather than my own custom defs. You can see in the above bb message I formatted a part of the text as "load average: 0.10, 0.10, 0.09" so that would mimic what Hobbit normally sees in the data typically collected with "top" (which I believe is how it collects data on CPU load - but I'm not sure of Hobbits internals in this case - possibly it uses some other command, maybe "uptime"). Do I need to send an additional "data" message along with the "status" message above to trigger the graphing? What format would that data message require? Typically for a custom graph you add onto the TEST2RRD line with "column_name=ncv" but I can see as part of the original TEST2RRD line that there already is a part that says "cpu=la". As I understand TEST2RRD (and I don't understand it all that well), I think this means that incoming "status" and "data" messages for "cpu" are directed to some internal "la" module. I am working on the assumption that all's I need to do to invoke the built-in graphing defs for "CPU Load" is to format my custom status message so that the "la" module can parse out the load data it needs for graphing. Am I even close to being correct in this assumption? Any tips on how I should proceed? This is as much a mental gymnastics exercise as anything. It is going into a production system and I know how to skin this cat another way. I was just hoping to learn how to skin this cat using the already built-in "CPU Load" graphing definitions. Thanks in advance! -------------- next part -------------- An HTML attachment was scrubbed... URL: From Phil.Crooker at orix.com.au Wed Apr 3 01:12:37 2013 From: Phil.Crooker at orix.com.au (Phil Crooker) Date: Wed, 03 Apr 2013 10:12:37 +1100 Subject: [Xymon] xymond_alert --test feature request Message-ID: <515C0095020000C0000CE0C3@vho64pn04.orix.com.au> When using this facility, I've found it will show an alert for a service that is not being monitored. For example: host.cfg entry: 10.1.2.3 whatever.au # http smtp NAME:"Sample Entry" alert.cfg entry: HOST=whatever.au MAIL someone at whatever.au COLOR=RED So, if I do this test: xymoncmd xymond_alert --test vho64pl09.orix.com.au blah it will return an alert. I understand that the alert.cfg just says to alarm on any RED condition, but it would be useful for this test to actually check that the service is in fact one being tested for. This already tests that the host has a hosts.cfg entry (very useful when working from a separate host list), it would be nice to extend this to the actual test as well - a single cross check on the whole chain of config files to ensure alerts are working as expected. thanks, Phil -------------- next part -------------- An HTML attachment was scrubbed... URL: From jlaidman at rebel-it.com.au Wed Apr 3 02:11:09 2013 From: jlaidman at rebel-it.com.au (Jeremy Laidman) Date: Wed, 3 Apr 2013 11:11:09 +1100 Subject: [Xymon] Custom graphs, non-standard config In-Reply-To: References: Message-ID: David Making a cpu status message requires it to be formatted just right. Instead, you can craft up a "client" message for the device, and Hobbit (the hobbitd_channel process) will parse the client data for [top] and [uptime] messages and feed them into hobbitd_client, which generates status and data messages on behalf of the client. The data/status messages should be formatted in the way Hobbit can use to create and show graphs. More info in the man page for hobbitd_client, such as here: http://hobbit.math.cnrs.fr/hobbit/help/manpages/man8/hobbitd_client.8.html The load average is actually gleaned from the 'uptime' data, and not from 'top'. If you can generate a valid client message showing an [uptime] section, then it should create a cpu page and graph data. The uptime message needs to be a form expected by hobbitd_client, such as: 10:05am up 27 day(s), 9:16, 1 user, load average: 0.32, 0.36, 0.33 So all you need to do is something like so: /usr/local/bin/bb**** 192.168.0.1**** client qcosvhsm1.linux** [uptime] 10:05am up 1 day(s), 9:16, 1 user, load average: 0.10, 0.10, 0.09 Once hobbitd_client parses the message, it then creates a "cpu" status message to inject into Hobbit, and the message gets collected by hobbitd_rrd (via hobbitd_channel), and hobbitd_rrd pushes the numbers into la.rrd (test-to-RRD-filename translation is specified by TEST2RRD). You could bypass the client message, and just create a "cpu" status message of the correct format, but I've found it easier to use a client message for all the different things I want to collect, and send them all to Hobbit at once. The same principle applies to other data collected and graphed from client messages, such as disk space, memory, interface usage. Cheers Jeremy On 3 April 2013 09:21, Haertig, David F (Dave) wrote: > My installation is an old Hobbit 4.2.0 one, but in case the graphing is > still similar to the way Xymon does things nowadays, I thought I’d ask here. > **** > > ** ** > > I am familiar with custom graphs, using NCV, and have implemented many. I > am looking to try something a little different from that.**** > > ** ** > > I have a network appliance (not a “server”) that cannot have the Hobbit > client installed on it, but I can gather CPU load info from it like this > “ssh user at appliance status cpu”. This generates a response like this > example: **** > > ** ** > > 0.18 0.14 0.10 3/74 29150**** > > Command Result : 0 (Success)**** > > ** ** > > I currently use the above collected data to create a “status” message that > I then use the “bb” command to send to Hobbit. Works as expected, with the > data showing up in the “cpu” column for this appliance I am monitoring:*** > * > > ** ** > > /usr/local/bin/bb**** > > 192.168.0.1**** > > status qcosvhsm1.cpu green Tue Apr 2 15:55:16 2013**** > > CPU load**** > > ========**** > > ** ** > > &green 5 minute average CPU load is 0.10, which is <= warning level of 3** > ** > > ** ** > > load average: 0.10, 0.10, 0.09**** > > ** ** > > Raw data (command = 'status cpu'):**** > > 0.10 0.10 0.09 3/74 7177**** > > Command Result : 0 (Success)**** > > ** ** > > (I have other custom stuff that turns text like “&green” into a link to > the green light icon Hobbit normally uses, but that’s irrelevant to my > questions here.)**** > > ** ** > > *What I would like to do is use the built-in RRD and “CPU Load” graph > definitions to display a graph on the Hobbit webpage.* I realize I can > make my own custom ones, and I know how to do that already (but not showing > up on the default “cpu” column, I’d have to make a different “cpu_load” > column using a different name than just “cpu”), but I wanted to try sending > my data into Hobbit to force it to use the built-in definitions rather than > my own custom defs. You can see in the above bb message I formatted a part > of the text as “load average: 0.10, 0.10, 0.09” so that would mimic what > Hobbit normally sees in the data typically collected with “top” (which I > believe is how it collects data on CPU load – but I’m not sure of Hobbits > internals in this case – possibly it uses some other command, maybe > “uptime”).**** > > ** ** > > Do I need to send an additional “data” message along with the “status” > message above to trigger the graphing? What format would that data message > require? Typically for a custom graph you add onto the TEST2RRD line with > “column_name=ncv” but I can see as part of the original TEST2RRD line that > there already is a part that says “cpu=la”. As I understand TEST2RRD (and > I don’t understand it all that well), I think this means that incoming > “status” and “data” messages for “cpu” are directed to some internal “la” > module. I am working on the assumption that all’s I need to do to invoke > the built-in graphing defs for “CPU Load” is to format my custom status > message so that the “la” module can parse out the load data it needs for > graphing. Am I even close to being correct in this assumption?**** > > ** ** > > Any tips on how I should proceed? This is as much a mental gymnastics > exercise as anything. It is going into a production system and I know how > to skin this cat another way. I was just hoping to learn how to skin this > cat using the already built-in “CPU Load” graphing definitions.**** > > ** ** > > Thanks in advance!**** > > ** ** > > _______________________________________________ > Xymon mailing list > Xymon at xymon.com > http://lists.xymon.com/mailman/listinfo/xymon > > -------------- next part -------------- An HTML attachment was scrubbed... URL: From jlaidman at rebel-it.com.au Wed Apr 3 02:26:41 2013 From: jlaidman at rebel-it.com.au (Jeremy Laidman) Date: Wed, 3 Apr 2013 11:26:41 +1100 Subject: [Xymon] Custom graphs, non-standard config In-Reply-To: References: Message-ID: On 3 April 2013 09:21, Haertig, David F (Dave) wrote: > I currently use the above collected data to create a “status” message > that I then use the “bb” command to send to Hobbit. Works as expected, > with the data showing up in the “cpu” column for this appliance I am > monitoring: > > ** > > ** ** > > /usr/local/bin/bb**** > > 192.168.0.1**** > > status qcosvhsm1.cpu green Tue Apr 2 15:55:16 2013**** > > CPU load**** > > ======== > An easy fix to get this working is to format the status message with the first line containing the load. So something like this should work: /usr/local/bin/bb 192.168.0.1 status gcosvhsm1.cpu green Tue Apr 2 15:15:16 2013 up: 999 days, 0 users, 0 procs, load=0.10 CPU Load ======= &green yada yada J -------------- next part -------------- An HTML attachment was scrubbed... URL: From oliviermo75 at gmail.com Tue Apr 2 11:48:28 2013 From: oliviermo75 at gmail.com (gmail) Date: Tue, 02 Apr 2013 11:48:28 +0200 Subject: [Xymon] Rule for send email every hour. Message-ID: <515AA96C.6070800@gmail.com> hi i try to define a rule for send email every hour in my hobbit-alert.cfg, i dont know why my rule doesn't work . I receive a lot of alert in 1 hour. Do you know where i make a mistake ? my hobbit-alert.cfg HOST=* SERVICE=* IGNORE HOST=sql01 SERVICE=mysql TIME=*:0000:2400 MAIL $TEAMALERT $QA=oliviermo75 at gmail.com HOST=* MAIL $QA SERVICE=msgs REPEAT=1h From oliviermo75 at gmail.com Tue Apr 2 12:32:34 2013 From: oliviermo75 at gmail.com (gmail) Date: Tue, 02 Apr 2013 12:32:34 +0200 Subject: [Xymon] How do you do for send a sms alert Message-ID: <515AB3C2.80203@gmail.com> Do You know how i can send a sms-alert with hobbit i didn't find a script for send a sms . How do you do for send a sms alert ? From abs at shadymint.com Wed Apr 3 08:07:00 2013 From: abs at shadymint.com (Andy Smith) Date: Wed, 03 Apr 2013 07:07:00 +0100 Subject: [Xymon] Custom graphs, non-standard config In-Reply-To: References: Message-ID: <515BC704.90905@shadymint.com> Haertig, David F (Dave) wrote: > My installation is an old Hobbit 4.2.0 one, but in case the graphing is > still similar to the way Xymon does things nowadays, I thought I’d ask here. > > > > I am familiar with custom graphs, using NCV, and have implemented many. > I am looking to try something a little different from that. > > > > I have a network appliance (not a “server”) that cannot have the Hobbit > client installed on it, but I can gather CPU load info from it like this > “ssh user at appliance status cpu”. This generates a response like this > example: > > > > 0.18 0.14 0.10 3/74 29150 > > Command Result : 0 (Success) > > > > I currently use the above collected data to create a “status” message > that I then use the “bb” command to send to Hobbit. Works as expected, > with the data showing up in the “cpu” column for this appliance I am > monitoring: > > > > /usr/local/bin/bb > > 192.168.0.1 > > status qcosvhsm1.cpu green Tue Apr 2 15:55:16 2013 > > CPU load > > ======== > > > > &green 5 minute average CPU load is 0.10, which is <= warning level of 3 > > > > load average: 0.10, 0.10, 0.09 > > > > Raw data (command = 'status cpu'): > > 0.10 0.10 0.09 3/74 7177 > > Command Result : 0 (Success) > > > > (I have other custom stuff that turns text like “&green” into a link to > the green light icon Hobbit normally uses, but that’s irrelevant to my > questions here.) > > > > *What I would like to do is use the built-in RRD and “CPU Load” graph > definitions to display a graph on the Hobbit webpage.* I realize I can > make my own custom ones, and I know how to do that already (but not > showing up on the default “cpu” column, I’d have to make a different > “cpu_load” column using a different name than just “cpu”), but I wanted > to try sending my data into Hobbit to force it to use the built-in > definitions rather than my own custom defs. You can see in the above bb > message I formatted a part of the text as “load average: 0.10, 0.10, > 0.09” so that would mimic what Hobbit normally sees in the data > typically collected with “top” (which I believe is how it collects data > on CPU load – but I’m not sure of Hobbits internals in this case – > possibly it uses some other command, maybe “uptime”). > > > > Do I need to send an additional “data” message along with the “status” > message above to trigger the graphing? What format would that data > message require? Typically for a custom graph you add onto the TEST2RRD > line with “column_name=ncv” but I can see as part of the original > TEST2RRD line that there already is a part that says “cpu=la”. As I > understand TEST2RRD (and I don’t understand it all that well), I think > this means that incoming “status” and “data” messages for “cpu” are > directed to some internal “la” module. I am working on the assumption > that all’s I need to do to invoke the built-in graphing defs for “CPU > Load” is to format my custom status message so that the “la” module can > parse out the load data it needs for graphing. Am I even close to being > correct in this assumption? > > > > Any tips on how I should proceed? This is as much a mental gymnastics > exercise as anything. It is going into a production system and I know > how to skin this cat another way. I was just hoping to learn how to > skin this cat using the already built-in “CPU Load” graphing definitions. > > > > Thanks in advance! > > > > > ------------------------------------------------------------------------ > > _______________________________________________ > Xymon mailing list > Xymon at xymon.com > http://lists.xymon.com/mailman/listinfo/xymon Hi, We have had a lot of success with appliances using xymon-rclient which is documented and available from here :- http://tools.rebel-it.com.au/xymon-rclient/ -- Andy From Neil.Simmonds at express-gifts.co.uk Wed Apr 3 09:10:16 2013 From: Neil.Simmonds at express-gifts.co.uk (Neil Simmonds) Date: Wed, 3 Apr 2013 08:10:16 +0100 Subject: [Xymon] graphing the number of processes In-Reply-To: References: <1BF7D566CC4F514288455EF3C9B7CF830C706648@EXSVIRTUAL.express.findel.co.uk> Message-ID: <1BF7D566CC4F514288455EF3C9B7CF830C706691@EXSVIRTUAL.express.findel.co.uk> Paul, I read your post as wanting to track the total number of processes you had monitored. Having seen Galens post I realised that wanting to track the number of instances of a particular process made more sense. I'm glad Galen read it the right way for you. Regards, Neil Simmonds Senior Operations Analyst (Operations Support Group) Express Gifts Limited Express House Clayton Business Park Accrington Lancashire BB5 5JY T: 01254 303092 | E: neil.simmonds at Express-Gifts.co.uk ________________________________ From: Root, Paul T [mailto:Paul.Root at CenturyLink.com] Sent: 02 April 2013 16:36 To: 'Galen Johnson'; Neil Simmonds; 'xymon at xymon.com' Subject: RE: [Xymon] graphing the number of processes Thanks, That's what I was looking for. And I knew that, I've already used it, can't believe I didn't remember this. Paul. From: xymon-bounces at xymon.com [mailto:xymon-bounces at xymon.com] On Behalf Of Galen Johnson Sent: Tuesday, April 02, 2013 10:23 AM To: Neil Simmonds; xymon at xymon.com Subject: Re: [Xymon] graphing the number of processes Actually, I think you just need to add the "TRACK=id" option to your analysis.cfg file for the proc you want to track. Just look at the man page, http://xymon.com/xymon/help/manpages/man5/analysis.cfg.5.html, for proper syntax. =G= From: xymon-bounces at xymon.com [mailto:xymon-bounces at xymon.com] On Behalf Of Neil Simmonds Sent: Tuesday, April 02, 2013 10:54 AM To: xymon at xymon.com Subject: Re: [Xymon] graphing the number of processes You could write an external script to grep the analysis.cfg for the word PROC, pipe it into a wc -l to get a count and send that to Xymon. Should be easy enough to set that up as an NCV graph. I don't think there's any way to do it without writing an external script though. Regards, Neil Simmonds Senior Operations Analyst (Operations Support Group) Express Gifts Limited Express House Clayton Business Park Accrington Lancashire BB5 5JY T: 01254 303092 | E: neil.simmonds at Express-Gifts.co.uk ________________________________ From: xymon-bounces at xymon.com [mailto:xymon-bounces at xymon.com] On Behalf Of Root, Paul T Sent: 02 April 2013 13:23 To: 'xymon at xymon.com' Subject: [Xymon] graphing the number of processes Is it possible to graph the number of processes that are defined in analaysis.cfg? Name & Registered Office: EXPRESS GIFTS LIMITED, 2 GREGORY ST, HYDE, CHESHIRE, ENGLAND, SK14 4TH, Company No. 00718151. Express Gifts Limited is authorised and regulated by the Financial Services Authority ________________________________ NOTE: This email and any information contained within or attached in a separate file is confidential and intended solely for the Individual to whom it is addressed. The information or data included is solely for the purpose indicated or previously agreed. Any information or data included with this e-mail remains the property of Findel PLC and the recipient will refrain from utilising the information for any purpose other than that indicated and upon request will destroy the information and remove it from their records. Any views or opinions presented are solely those of the author and do not necessarily represent those of Findel PLC. If you are not the intended recipient, be advised that you have received this email in error and that any use, dissemination, forwarding, printing, or copying of this email is strictly prohibited. No warranties or assurances are made in relation to the safety and content of this e-mail and any attachments. No liability is accepted for any consequences arising from it. Findel Plc reserves the right to monitor all e-mail communications through its internal and external networks. If you have received this email in error please notify our IT helpdesk on +44(0) 1254 303030 Name & Registered Office: EXPRESS GIFTS LIMITED, 2 GREGORY ST, HYDE, CHESHIRE, ENGLAND, SK14 4TH, Company No. 00718151. Express Gifts Limited is authorised and regulated by the Financial Services Authority -------------- NOTE: This email and any information contained within or attached in a separate file is confidential and intended solely for the Individual to whom it is addressed. The information or data included is solely for the purpose indicated or previously agreed. Any information or data included with this e-mail remains the property of Findel PLC and the recipient will refrain from utilising the information for any purpose other than that indicated and upon request will destroy the information and remove it from their records. Any views or opinions presented are solely those of the author and do not necessarily represent those of Findel PLC. If you are not the intended recipient, be advised that you have received this email in error and that any use, dissemination, forwarding, printing, or copying of this email is strictly prohibited. No warranties or assurances are made in relation to the safety and content of this e-mail and any attachments. No liability is accepted for any consequences arising from it. Findel Plc reserves the right to monitor all e-mail communications through its internal and external networks. If you have received this email in error please notify our IT helpdesk on +44(0) 1254 303030 -------------- next part -------------- An HTML attachment was scrubbed... URL: From mburger at bubbanfriends.org Wed Apr 3 15:26:39 2013 From: mburger at bubbanfriends.org (Mike Burger) Date: Wed, 3 Apr 2013 09:26:39 -0400 (EDT) Subject: [Xymon] xymond_alert --test feature request In-Reply-To: <515C0095020000C0000CE0C3@vho64pn04.orix.com.au> References: <515C0095020000C0000CE0C3@vho64pn04.orix.com.au> Message-ID: <54938.166.137.107.237.1364995599.squirrel@www.bubbanfriends.org> > When using this facility, I've found it will show an alert for a service > that is not being monitored. For example: > > host.cfg entry: > 10.1.2.3 whatever.au # http smtp NAME:"Sample Entry" > > alert.cfg entry: > HOST=whatever.au > MAIL someone at whatever.au COLOR=RED > > So, if I do this test: > xymoncmd xymond_alert --test vho64pl09.orix.com.au blah > it will return an alert. > > I understand that the alert.cfg just says to alarm on any RED condition, > but it would be useful for this test to actually check that the service is > in fact one being tested for. This already tests that the host has a > hosts.cfg entry (very useful when working from a separate host list), it > would be nice to extend this to the actual test as well - a single cross > check on the whole chain of config files to ensure alerts are working as > expected. > > thanks, Phil Phil: If you want to alert on a particular service, add "SERVICE=XXX,YYY" to the entries in your alerts.cfg, a la: MAIL email at address.com,email2 at address.com COLOR=red SERVICE=conn,cpu,disk Which would send an email to the aforementioned email addresses, on a red status, for services/facilities conn, cpu and disk. This option, and more, are available in the MAN pages for the alerts.cfg. -- Mike Burger http://www.bubbanfriends.org "It's always suicide-mission this, save-the-planet that. No one ever just stops by to say 'hi' anymore." --Colonel Jack O'Neill, SG1 From jtkbishop at gmail.com Wed Apr 3 15:59:12 2013 From: jtkbishop at gmail.com (Jonathan Bishop) Date: Thu, 4 Apr 2013 00:59:12 +1100 Subject: [Xymon] Monitoring Remote Sites Message-ID: Hi. Does anyone have an experience with using xymon to monitor remote sites? How do you handle the security side of things? Can we use xymon with SSL for example? Thank you. Jon B. -------------- next part -------------- An HTML attachment was scrubbed... URL: From haertig at avaya.com Wed Apr 3 23:07:39 2013 From: haertig at avaya.com (Haertig, David F (Dave)) Date: Wed, 3 Apr 2013 21:07:39 +0000 Subject: [Xymon] Custom graphs, non-standard config In-Reply-To: References: Message-ID: Thanks for the response! I tried both the client message as you detailed below, and also the status message modification that you suggested in a separate response. Both methods worked perfectly for collecting/displaying/graphing the data! I will be using the client message method going forward. I did some more research into this appliance I am monitoring and found that I can use ssh to extract much more information than just the CPU load. So I am doing that now, and creating multiple sections in the client message I'm sending. I am now populating the following sections in the client message I am generating: date, uptime, df, free, ifconfig, route, ports, ifstat and ps. I had to do a little minor reformatting of the raw data I collect so that when I create the sections of the client message the look like something I would expect from a standard Linux box running the Hobbit client. But that was trivial and I got it all done easily. So now many of the standard Hobbit client message sections are being populated by my script that is mimic'ing an installed client on the appliance. And Hobbit is gobbling up the data and working with it as expected. Thanks for the help!!! From: Jeremy Laidman [mailto:jlaidman at rebel-it.com.au] Sent: Tuesday, April 02, 2013 6:11 PM To: Haertig, David F (Dave) Cc: xymon at xymon.com Subject: Re: [Xymon] Custom graphs, non-standard config David Making a cpu status message requires it to be formatted just right. Instead, you can craft up a "client" message for the device, and Hobbit (the hobbitd_channel process) will parse the client data for [top] and [uptime] messages and feed them into hobbitd_client, which generates status and data messages on behalf of the client. The data/status messages should be formatted in the way Hobbit can use to create and show graphs. More info in the man page for hobbitd_client, such as here: http://hobbit.math.cnrs.fr/hobbit/help/manpages/man8/hobbitd_client.8.html The load average is actually gleaned from the 'uptime' data, and not from 'top'. If you can generate a valid client message showing an [uptime] section, then it should create a cpu page and graph data. The uptime message needs to be a form expected by hobbitd_client, such as: 10:05am up 27 day(s), 9:16, 1 user, load average: 0.32, 0.36, 0.33 So all you need to do is something like so: /usr/local/bin/bb 192.168.0.1 client qcosvhsm1.linux [uptime] 10:05am up 1 day(s), 9:16, 1 user, load average: 0.10, 0.10, 0.09 Once hobbitd_client parses the message, it then creates a "cpu" status message to inject into Hobbit, and the message gets collected by hobbitd_rrd (via hobbitd_channel), and hobbitd_rrd pushes the numbers into la.rrd (test-to-RRD-filename translation is specified by TEST2RRD). You could bypass the client message, and just create a "cpu" status message of the correct format, but I've found it easier to use a client message for all the different things I want to collect, and send them all to Hobbit at once. The same principle applies to other data collected and graphed from client messages, such as disk space, memory, interface usage. Cheers Jeremy On 3 April 2013 09:21, Haertig, David F (Dave) > wrote: My installation is an old Hobbit 4.2.0 one, but in case the graphing is still similar to the way Xymon does things nowadays, I thought I'd ask here. I am familiar with custom graphs, using NCV, and have implemented many. I am looking to try something a little different from that. I have a network appliance (not a "server") that cannot have the Hobbit client installed on it, but I can gather CPU load info from it like this "ssh user at appliance status cpu". This generates a response like this example: 0.18 0.14 0.10 3/74 29150 Command Result : 0 (Success) I currently use the above collected data to create a "status" message that I then use the "bb" command to send to Hobbit. Works as expected, with the data showing up in the "cpu" column for this appliance I am monitoring: /usr/local/bin/bb 192.168.0.1 status qcosvhsm1.cpu green Tue Apr 2 15:55:16 2013 CPU load ======== &green 5 minute average CPU load is 0.10, which is <= warning level of 3 load average: 0.10, 0.10, 0.09 Raw data (command = 'status cpu'): 0.10 0.10 0.09 3/74 7177 Command Result : 0 (Success) (I have other custom stuff that turns text like "&green" into a link to the green light icon Hobbit normally uses, but that's irrelevant to my questions here.) What I would like to do is use the built-in RRD and "CPU Load" graph definitions to display a graph on the Hobbit webpage. I realize I can make my own custom ones, and I know how to do that already (but not showing up on the default "cpu" column, I'd have to make a different "cpu_load" column using a different name than just "cpu"), but I wanted to try sending my data into Hobbit to force it to use the built-in definitions rather than my own custom defs. You can see in the above bb message I formatted a part of the text as "load average: 0.10, 0.10, 0.09" so that would mimic what Hobbit normally sees in the data typically collected with "top" (which I believe is how it collects data on CPU load - but I'm not sure of Hobbits internals in this case - possibly it uses some other command, maybe "uptime"). Do I need to send an additional "data" message along with the "status" message above to trigger the graphing? What format would that data message require? Typically for a custom graph you add onto the TEST2RRD line with "column_name=ncv" but I can see as part of the original TEST2RRD line that there already is a part that says "cpu=la". As I understand TEST2RRD (and I don't understand it all that well), I think this means that incoming "status" and "data" messages for "cpu" are directed to some internal "la" module. I am working on the assumption that all's I need to do to invoke the built-in graphing defs for "CPU Load" is to format my custom status message so that the "la" module can parse out the load data it needs for graphing. Am I even close to being correct in this assumption? Any tips on how I should proceed? This is as much a mental gymnastics exercise as anything. It is going into a production system and I know how to skin this cat another way. I was just hoping to learn how to skin this cat using the already built-in "CPU Load" graphing definitions. Thanks in advance! _______________________________________________ Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon -------------- next part -------------- An HTML attachment was scrubbed... URL: From haertig at avaya.com Wed Apr 3 23:13:35 2013 From: haertig at avaya.com (Haertig, David F (Dave)) Date: Wed, 3 Apr 2013 21:13:35 +0000 Subject: [Xymon] Custom graphs, non-standard config In-Reply-To: <515BC704.90905@shadymint.com> References: <515BC704.90905@shadymint.com> Message-ID: Thanks for the response. I already have an object oriented PERL module I designed and use with Hobbit that is specifically for collecting data from servers and interfacing with my custom scripts. Both "standard" data that a normal Hobbit client would retrieve, and also custom data. What I have sounds a lot like that RCLIENT that you mention. I read the documentation on RCLIENT by following your link, and it is eerie how similar the implementation is to what I have done in my PERL module. I wrote this module years ago, if is used all over in my Hobbit installation, so changing it now would not be worthwhile. I didn't find anything that RCLIENT can do that my existing module can't. I guess others saw the same need I identified for this type of operation, and we developed similar solutions independently. Thanks for your response! -----Original Message----- From: Andy Smith [mailto:abs at shadymint.com] Sent: Wednesday, April 03, 2013 12:07 AM To: Haertig, David F (Dave) Cc: xymon at xymon.com Subject: Re: [Xymon] Custom graphs, non-standard config Haertig, David F (Dave) wrote: > My installation is an old Hobbit 4.2.0 one, but in case the graphing is > still similar to the way Xymon does things nowadays, I thought I'd ask here. > > > > I am familiar with custom graphs, using NCV, and have implemented many. > I am looking to try something a little different from that. > > > > I have a network appliance (not a "server") that cannot have the Hobbit > client installed on it, but I can gather CPU load info from it like this > "ssh user at appliance status cpu". This generates a response like this > example: > > > > 0.18 0.14 0.10 3/74 29150 > > Command Result : 0 (Success) > > > > I currently use the above collected data to create a "status" message > that I then use the "bb" command to send to Hobbit. Works as expected, > with the data showing up in the "cpu" column for this appliance I am > monitoring: > > > > /usr/local/bin/bb > > 192.168.0.1 > > status qcosvhsm1.cpu green Tue Apr 2 15:55:16 2013 > > CPU load > > ======== > > > > &green 5 minute average CPU load is 0.10, which is <= warning level of 3 > > > > load average: 0.10, 0.10, 0.09 > > > > Raw data (command = 'status cpu'): > > 0.10 0.10 0.09 3/74 7177 > > Command Result : 0 (Success) > > > > (I have other custom stuff that turns text like "&green" into a link to > the green light icon Hobbit normally uses, but that's irrelevant to my > questions here.) > > > > *What I would like to do is use the built-in RRD and "CPU Load" graph > definitions to display a graph on the Hobbit webpage.* I realize I can > make my own custom ones, and I know how to do that already (but not > showing up on the default "cpu" column, I'd have to make a different > "cpu_load" column using a different name than just "cpu"), but I wanted > to try sending my data into Hobbit to force it to use the built-in > definitions rather than my own custom defs. You can see in the above bb > message I formatted a part of the text as "load average: 0.10, 0.10, > 0.09" so that would mimic what Hobbit normally sees in the data > typically collected with "top" (which I believe is how it collects data > on CPU load - but I'm not sure of Hobbits internals in this case - > possibly it uses some other command, maybe "uptime"). > > > > Do I need to send an additional "data" message along with the "status" > message above to trigger the graphing? What format would that data > message require? Typically for a custom graph you add onto the TEST2RRD > line with "column_name=ncv" but I can see as part of the original > TEST2RRD line that there already is a part that says "cpu=la". As I > understand TEST2RRD (and I don't understand it all that well), I think > this means that incoming "status" and "data" messages for "cpu" are > directed to some internal "la" module. I am working on the assumption > that all's I need to do to invoke the built-in graphing defs for "CPU > Load" is to format my custom status message so that the "la" module can > parse out the load data it needs for graphing. Am I even close to being > correct in this assumption? > > > > Any tips on how I should proceed? This is as much a mental gymnastics > exercise as anything. It is going into a production system and I know > how to skin this cat another way. I was just hoping to learn how to > skin this cat using the already built-in "CPU Load" graphing definitions. > > > > Thanks in advance! > > > > > ------------------------------------------------------------------------ > > _______________________________________________ > Xymon mailing list > Xymon at xymon.com > http://lists.xymon.com/mailman/listinfo/xymon Hi, We have had a lot of success with appliances using xymon-rclient which is documented and available from here :- http://tools.rebel-it.com.au/xymon-rclient/ -- Andy From jlaidman at rebel-it.com.au Thu Apr 4 00:23:56 2013 From: jlaidman at rebel-it.com.au (Jeremy Laidman) Date: Thu, 4 Apr 2013 09:23:56 +1100 Subject: [Xymon] How do you do for send a sms alert In-Reply-To: <515AB3C2.80203@gmail.com> References: <515AB3C2.80203@gmail.com> Message-ID: On 2 April 2013 21:32, gmail wrote: > Do You know how i can send a sms-alert with hobbit i didn't find a script > for send a sms . > How do you do for send a sms alert ? > There are a few ways to do this. In general, they rely on email-to-SMS gateways. You can either host one yourself: * connect a mobile phone to a computer and run something like Gnokii (see http://tools.rebel-it.com.au/sms-transport/ for a script that converts mail to Gnokii) * connect a modem to a computer and run something like smsclient (see http://smsclient.sourcearchive.com/documentation/2.0.8z-7/main.html) - this requires that a local carrier provides an SMS TAP (or similar) service. * use a USB 3G modem - these usually support sending SMS messages * use a stand-alone device, like the kickstarter project SmushBox ( http://www.kickstarter.com/projects/smush/smart-sms-texting-for-everyone-the-smushbox ) Or you can use a commercial mail-to-sms gateway - some mobile carriers offer such a service to their customers for cheap or free. See: http://en.wikipedia.org/wiki/List_of_SMS_gateways For some solutions (eg Gnokii) lack of queuing is a problem, in that if a messages is ready to be sent but the phone signal drops, then the messages is lost. In such cases it's helpful to incorporate a mail service that can retry when a message fails. Cheers Jeremy -------------- next part -------------- An HTML attachment was scrubbed... URL: From jlaidman at rebel-it.com.au Thu Apr 4 03:55:51 2013 From: jlaidman at rebel-it.com.au (Jeremy Laidman) Date: Thu, 4 Apr 2013 12:55:51 +1100 Subject: [Xymon] Monitoring Remote Sites In-Reply-To: References: Message-ID: On 4 April 2013 00:59, Jonathan Bishop wrote: > Does anyone have an experience with using xymon to monitor remote sites? > How do you handle the security side of things? Can we use xymon with SSL > for example? > You can do various VPN type things, such as using stunnel or ssh tunnels (with key auth). Also, you can run the client from the server (eg from tasks.cfg) over an ssh connection like so: ssh -R1984:127.0.0.1:1984 -o batchmode=yes xymon at remote-server'/usr/lib/xymon/client/bin/xymoncmd sh -c "XYMSRV=127.0.0.1 /usr/lib/xymon/client/bin/xymonclient.sh"' J -------------- next part -------------- An HTML attachment was scrubbed... URL: From jlaidman at rebel-it.com.au Thu Apr 4 04:16:58 2013 From: jlaidman at rebel-it.com.au (Jeremy Laidman) Date: Thu, 4 Apr 2013 13:16:58 +1100 Subject: [Xymon] Custom graphs, non-standard config In-Reply-To: References: <515BC704.90905@shadymint.com> Message-ID: On 4 April 2013 08:13, Haertig, David F (Dave) wrote: > I guess others saw the same need I identified for this type of operation, > and we developed similar solutions independently. > (I'm the author if RCLIENT) Yes, I had the same need. However, in my case, I didn't want to rely on having perl installed on the server or the client. It takes some shell-fu-gymnastics to pull off, but so far, the only problem I've had was with a broken bourne shell implementation on some old Solaris boxes, and that's been worked around. A Perl version would have been faster to write, and would probably run faster too. J -------------- next part -------------- An HTML attachment was scrubbed... URL: From jlaidman at rebel-it.com.au Thu Apr 4 04:33:16 2013 From: jlaidman at rebel-it.com.au (Jeremy Laidman) Date: Thu, 4 Apr 2013 13:33:16 +1100 Subject: [Xymon] Monitoring Remote Sites In-Reply-To: References: Message-ID: On 4 April 2013 12:55, Jeremy Laidman wrote: > You can do various VPN type things, such as using stunnel or ssh tunnels > (with key auth). > Also, this: http://lists.xymon.com/archive/2011-October/032866.html In summary, the client-side can use curl to send a web "POST" message to the Xymon server using an https:// type URL. Encryption solved. The Xymon server can do whatever authentication is required (password, client-side certificate, or none). J -------------- next part -------------- An HTML attachment was scrubbed... URL: From ralphmitchell at gmail.com Thu Apr 4 05:12:02 2013 From: ralphmitchell at gmail.com (Ralph Mitchell) Date: Wed, 3 Apr 2013 23:12:02 -0400 Subject: [Xymon] Monitoring Remote Sites In-Reply-To: References: Message-ID: On Apr 3, 2013 10:33 PM, "Jeremy Laidman" wrote: > > On 4 April 2013 12:55, Jeremy Laidman wrote: >> >> You can do various VPN type things, such as using stunnel or ssh tunnels (with key auth). > > > Also, this: http://lists.xymon.com/archive/2011-October/032866.html > > In summary, the client-side can use curl to send a web "POST" message to the Xymon server using an https:// type URL. Encryption solved. The Xymon server can do whatever authentication is required (password, client-side certificate, or none). Just to clarify - on the Xymon server side it's Apache that handles the client authentication, and there are many docs describing that. Xymon itself is not involved in the authentication or encryption. I also found that the xymoncgi handler sends back to the client any client-local configuration that it finds, so it isn't just a one way street. Ralph Mitchell -------------- next part -------------- An HTML attachment was scrubbed... URL: From a_s_y at sama.ru Thu Apr 4 13:21:22 2013 From: a_s_y at sama.ru (Sergey) Date: Thu, 4 Apr 2013 15:21:22 +0400 Subject: [Xymon] html charset setting In-Reply-To: <201304021645.32302.a_s_y@sama.ru> References: <10931889.TxLRZjk9I8@asy-nb.localdomain> <201304021645.32302.a_s_y@sama.ru> Message-ID: <201304041521.22856.a_s_y@sama.ru> On Tuesday 02 April 2013, Sergey wrote: > HTTP/1.1 200 OK > Date: Tue, 02 Apr 2013 12:19:55 GMT > Server: Apache/2.2.22 (Unix) mod_perl/2.0.4 Perl/v5.12.5 > Connection: close > Content-Type: text/html; charset=utf-8 > > But it not works for users. :-( Firefox 17.0.4 and IE9 are not > recognize it. Strange but it works for some pages. I do not understand it... > I solved problem partially by adding to headers > > but I would like to solve the problem globally... I seems what it changed all needed headers: perl -p -e 's##\n#;' -i web/*_header And I remove charset from $HTMLCONTENTTYPE. -- Regards, Sergey From a_s_y at sama.ru Thu Apr 4 13:30:59 2013 From: a_s_y at sama.ru (Sergey) Date: Thu, 4 Apr 2013 15:30:59 +0400 Subject: [Xymon] comments for a tests (possible a feature request) Message-ID: <201304041530.59281.a_s_y@sama.ru> Hello. Can I add comments about incidents per host/test ? -- Regards, Sergey From Paul.Root at CenturyLink.com Thu Apr 4 16:04:20 2013 From: Paul.Root at CenturyLink.com (Root, Paul T) Date: Thu, 4 Apr 2013 14:04:20 +0000 Subject: [Xymon] proc tracking graph not working. Message-ID: Hi, So I have the following in my analisys.cfg (4.3.10): HOST=iadccmp1,iadccmp2,apaccmp1,apaccmp2 FILE /usr/local/dat/naIpAddrs.txt yellow MTIME<3630 PROC sshd 1 300 yellow PROC sshd 1 1000 red "TEXT=ssh daemon (sshd)" "TRACK=ssh daemon" HOST=* EXHOST=iadccmp1,iadccmp2,apaccmp1,apaccmp2 PROC sshd 1 70 yellow PROC sshd 1 100 red "TEXT=ssh daemon (sshd)" But I'm still not getting the graph tracking the number of connections. Any ideas? Paul. -------------- next part -------------- An HTML attachment was scrubbed... URL: From David.Mills at ngc.com Thu Apr 4 16:49:04 2013 From: David.Mills at ngc.com (Mills, David (IS)) Date: Thu, 4 Apr 2013 14:49:04 +0000 Subject: [Xymon] --debug not working for xymonlaunch? Message-ID: <582DD1C70A06C94F91852BD46B8A59691B419B6E@XMBC3084.northgrum.com> Hello, All... We have a nasty problem ongoing flapping problem with our network-based tests (e.g. HTTP/SSH/DNS/etc. - see http://lists.xymon.com/archive/2013-March/037071.html) and last night I tried to use the "--debug" flag on "xymonlaunch". Unfortunately, nothing got sent to any files and nothing extra happened on STDOUT. What did I do wrong? Xymon 4.3.3 - Updated "xymon.sh" like this: ... /export/xymon-4.3.3/server/bin/xymonlaunch \ --config=/export/xymon-4.3.3/server/etc/tasks.cfg \ --env=/export/xymon-4.3.3/server/etc/xymonserver.cfg --log=/var/log/xymon-4.3.3/xymonlaunch.log \ --pidfile=/var/log/xymon-4.3.3/xymonlaunch.pid \ --debug=/var/log/Xymon/xymonlaunch-debug.log # This last switch was the addition echo "Xymon started" ~~~ Did a "xymon.sh restart" (several times) and no log file. Then I tried removing the "=....log" , with just the "... --debug" and stopped/restarted things. All with no success. Any ideas? Thanks! david ~~~~~~~~~~~~~~~~~~~ David Mills Systems Administrator Northrop Grumman 512-595-1238 david.mills at ngc.com -------------- next part -------------- An HTML attachment was scrubbed... URL: From David.Mills at ngc.com Thu Apr 4 17:02:11 2013 From: David.Mills at ngc.com (Mills, David (IS)) Date: Thu, 4 Apr 2013 15:02:11 +0000 Subject: [Xymon] --debug not working for xymonlaunch? In-Reply-To: <582DD1C70A06C94F91852BD46B8A59691B419B6E@XMBC3084.northgrum.com> References: <582DD1C70A06C94F91852BD46B8A59691B419B6E@XMBC3084.northgrum.com> Message-ID: <582DD1C70A06C94F91852BD46B8A59691B419BC0@XMBC3084.northgrum.com> ... Updated "xymon.sh" like this: ... /export/xymon-4.3.3/server/bin/xymonlaunch \ --config=/export/xymon-4.3.3/server/etc/tasks.cfg \ --env=/export/xymon-4.3.3/server/etc/xymonserver.cfg --log=/var/log/xymon-4.3.3/xymonlaunch.log \ --pidfile=/var/log/xymon-4.3.3/xymonlaunch.pid \ --debug=/var/log/Xymon/xymonlaunch-debug.log # This last switch was the addition echo "Xymon started" ~~~ Just noticed in my above-posting the absence of a "\" char after the ".../xymonserver.cfg " line. This was not missing when I executed the commands last night: sorry for the oversight in the posting... -------------- next part -------------- An HTML attachment was scrubbed... URL: From cleaver at terabithia.org Thu Apr 4 18:03:11 2013 From: cleaver at terabithia.org (cleaver at terabithia.org) Date: Thu, 4 Apr 2013 16:03:11 -0000 (UTC) Subject: [Xymon] --debug not working for xymonlaunch? In-Reply-To: <582DD1C70A06C94F91852BD46B8A59691B419B6E@XMBC3084.northgrum.com> References: <582DD1C70A06C94F91852BD46B8A59691B419B6E@XMBC3084.northgrum.com> Message-ID: <52096.199.91.139.248.1365091391.squirrel@mail.kkytbs.net> > > ... > /export/xymon-4.3.3/server/bin/xymonlaunch \ > --config=/export/xymon-4.3.3/server/etc/tasks.cfg \ > --env=/export/xymon-4.3.3/server/etc/xymonserver.cfg > --log=/var/log/xymon-4.3.3/xymonlaunch.log \ > --pidfile=/var/log/xymon-4.3.3/xymonlaunch.pid \ > --debug=/var/log/Xymon/xymonlaunch-debug.log # This last switch > was the addition > echo "Xymon started" > > ~~~ > Did a "xymon.sh restart" (several times) and no log file. Then I tried > removing the "=....log" , with just the "... --debug" and > stopped/restarted things. All with no success. > Any ideas? > > Thanks! > > david Simply a "--debug" is sufficient. The flag is set as soon as it's encountered in the option list, so you should actually see output even sooner if you put it first. Output should end up in xymonlaunch.log. Also, for xymonlaunch I believe even in 4.3.3 sending it a -USR2 signal will turn debugging on and off on the fly. Wherever it starts sending data out to as a result of that should be where a '--debug' sends it to as well. HTH, -jc From David.Mills at ngc.com Thu Apr 4 18:05:06 2013 From: David.Mills at ngc.com (Mills, David (IS)) Date: Thu, 4 Apr 2013 16:05:06 +0000 Subject: [Xymon] EXT :Re: --debug not working for xymonlaunch? In-Reply-To: <52096.199.91.139.248.1365091391.squirrel@mail.kkytbs.net> References: <582DD1C70A06C94F91852BD46B8A59691B419B6E@XMBC3084.northgrum.com> <52096.199.91.139.248.1365091391.squirrel@mail.kkytbs.net> Message-ID: <582DD1C70A06C94F91852BD46B8A59691B419EDE@XMBC3084.northgrum.com> Thx, JC! ;-) -----Original Message----- From: cleaver at terabithia.org [mailto:cleaver at terabithia.org] Sent: Thursday, April 04, 2013 11:03 AM To: Mills, David (IS) Cc: xymon at xymon.com Subject: EXT :Re: [Xymon] --debug not working for xymonlaunch? > > ... > /export/xymon-4.3.3/server/bin/xymonlaunch \ > --config=/export/xymon-4.3.3/server/etc/tasks.cfg \ > --env=/export/xymon-4.3.3/server/etc/xymonserver.cfg > --log=/var/log/xymon-4.3.3/xymonlaunch.log \ > --pidfile=/var/log/xymon-4.3.3/xymonlaunch.pid \ > --debug=/var/log/Xymon/xymonlaunch-debug.log # This last switch > was the addition > echo "Xymon started" > > ~~~ > Did a "xymon.sh restart" (several times) and no log file. Then I tried > removing the "=....log" , with just the "... --debug" and > stopped/restarted things. All with no success. > Any ideas? > > Thanks! > > david Simply a "--debug" is sufficient. The flag is set as soon as it's encountered in the option list, so you should actually see output even sooner if you put it first. Output should end up in xymonlaunch.log. Also, for xymonlaunch I believe even in 4.3.3 sending it a -USR2 signal will turn debugging on and off on the fly. Wherever it starts sending data out to as a result of that should be where a '--debug' sends it to as well. HTH, -jc From cleaver at terabithia.org Thu Apr 4 18:09:12 2013 From: cleaver at terabithia.org (cleaver at terabithia.org) Date: Thu, 4 Apr 2013 16:09:12 -0000 (UTC) Subject: [Xymon] proc tracking graph not working. In-Reply-To: References: Message-ID: <52150.199.91.139.248.1365091752.squirrel@mail.kkytbs.net> > > Hi, > So I have the following in my analisys.cfg (4.3.10): > > HOST=iadccmp1,iadccmp2,apaccmp1,apaccmp2 > FILE /usr/local/dat/naIpAddrs.txt yellow MTIME<3630 > PROC sshd 1 300 yellow > PROC sshd 1 1000 red "TEXT=ssh daemon (sshd)" "TRACK=ssh daemon" > > HOST=* EXHOST=iadccmp1,iadccmp2,apaccmp1,apaccmp2 > PROC sshd 1 70 yellow > PROC sshd 1 100 red "TEXT=ssh daemon (sshd)" > > > But I'm still not getting the graph tracking the number of > connections. Any ideas? > > Paul. > I believe the quotes need to be around the content, not the key, for the TEXT and TRACK values... And IIRC (could be wrong) the TRACK needs to be a space-less id, since it ends up in the name of the rrd file. Can you run "xymoncmd xymond_client --dump-config" and paste the output? It should help identify the problem here... Regards, -jc From Paul.Root at CenturyLink.com Thu Apr 4 18:15:00 2013 From: Paul.Root at CenturyLink.com (Root, Paul T) Date: Thu, 4 Apr 2013 16:15:00 +0000 Subject: [Xymon] proc tracking graph not working. In-Reply-To: <52150.199.91.139.248.1365091752.squirrel@mail.kkytbs.net> References: <52150.199.91.139.248.1365091752.squirrel@mail.kkytbs.net> Message-ID: I know for a fact that TEXT requires the quotes around the whole thing, as shown on line 303 of analysis.cfg, comments: # Example: Check that at least 5 "ssh" connections are established, but # not more than 10; warn but do not error; graph the connection count: # PORT "LOCAL=%([.:]22)$" state=ESTABLISHED min=5 max=20 color=yellow TRACK= ssh "TEXT=SSH logins" And I have the quotes around other TRACK entries that are working fine. It would be bad from a consistency standpoint to have TEXT and TRACK be different. I'll check the dump-config. Thanks, Paul. -----Original Message----- From: cleaver at terabithia.org [mailto:cleaver at terabithia.org] Sent: Thursday, April 04, 2013 11:09 AM To: Root, Paul T Cc: 'xymon at xymon.com' Subject: Re: [Xymon] proc tracking graph not working. > > Hi, > So I have the following in my analisys.cfg (4.3.10): > > HOST=iadccmp1,iadccmp2,apaccmp1,apaccmp2 > FILE /usr/local/dat/naIpAddrs.txt yellow MTIME<3630 PROC sshd 1 300 > yellow PROC sshd 1 1000 red "TEXT=ssh daemon (sshd)" "TRACK=ssh > daemon" > > HOST=* EXHOST=iadccmp1,iadccmp2,apaccmp1,apaccmp2 > PROC sshd 1 70 yellow > PROC sshd 1 100 red "TEXT=ssh daemon (sshd)" > > > But I'm still not getting the graph tracking the > number of connections. Any ideas? > > Paul. > I believe the quotes need to be around the content, not the key, for the TEXT and TRACK values... And IIRC (could be wrong) the TRACK needs to be a space-less id, since it ends up in the name of the rrd file. Can you run "xymoncmd xymond_client --dump-config" and paste the output? It should help identify the problem here... Regards, -jc From Paul.Root at CenturyLink.com Thu Apr 4 18:17:48 2013 From: Paul.Root at CenturyLink.com (Root, Paul T) Date: Thu, 4 Apr 2013 16:17:48 +0000 Subject: [Xymon] proc tracking graph not working. In-Reply-To: <52150.199.91.139.248.1365091752.squirrel@mail.kkytbs.net> References: <52150.199.91.139.248.1365091752.squirrel@mail.kkytbs.net> Message-ID: Ok, So it is ignoring the TRACK: $ ~xymon/server/bin/xymoncmd xymond_client --dump-config |grep iadccmp1 2013-04-04 11:15:50 Using default environment file /usr/lib64/xymon/server/etc/xymonserver.cfg 2013-04-04 11:15:50 Unknown token 'TRACK=ssh daemon' ignored at line 529 2013-04-04 11:15:50 Unknown token 'TRACK=sshd' ignored at line 1001 LOG /opt/netcool/omnibus/log/MNS_NFMS_GW.log MATCH=%Error:.*ObjectServerB: Reader component has failed COLOR=yellow HOST=iadccmp1,iadccmt1,iadccmd1,iadccmp2,apaccmp1,apaccmp2 (line: 508) LOG /rendition/NA/server/log/jboss_wrapper.log MATCH=%OutOfMemory COLOR=red HOST=iadccmp1,iadccmt1,iadccmd1,iadccmp2,apaccmp1,apaccmp2 (line: 509) LOG /rendition/NA/server/log/jboss_wrapper.log MATCH=%not able to connect to its database COLOR=red HOST=iadccmp1,iadccmt1,iadccmd1,iadccmp2,apaccmp1,apaccmp2 (line: 510) PORT local=%([.:]443)$ state=LISTEN min=1 color=red HOST=iadccmp1,iadccmt1,iadccmd1,iadccmp2,apaccmp1,apaccmp2 TEXT=https (80) (line: 511) PORT local=%([.:]8022)$ min=1 max=80 color=yellow TRACK=hpnassh HOST=iadccmp1,iadccmt1,iadccmd1,iadccmp2,apaccmp1,apaccmp2 TEXT=HPNA SSH proxy (8022) (line: 513) PROC "jre/bin/java -DTCMgmtEngine" 1 3 red HOST=iadccmp1,iadccmt1,iadccmd1,iadccmp2,apaccmp1,apaccmp2 (line: 515) PROC "jre/bin/java -DTCMgmtEngine" 1 1 yellow HOST=iadccmp1,iadccmt1,iadccmd1,iadccmp2,apaccmp1,apaccmp2 TEXT=Mgmt Engine - Yellow (line: 516) PROC "jre/bin/java -DTCSyslog" 1 1 red HOST=iadccmp1,iadccmt1,iadccmd1,iadccmp2,apaccmp1,apaccmp2 (line: 517) LOG /rendition/NA/server/log/jboss_wrapper.log MATCH=OutOfMemoryError COLOR=red HOST=iadccmp1,iadccmt1,iadccmd1,iadccmp2,apaccmp1,apaccmp2 (line: 518) LOG /rendition/NA/server/log/jboss_wrapper.log MATCH=not able to connect to its database COLOR=red HOST=iadccmp1,iadccmt1,iadccmd1,iadccmp2,apaccmp1,apaccmp2 (line: 519) FILE /rendition/NA/jre/logging.rcx yellow mtime>600 HOST=iadccmp1,iadccmt1,iadccmd1,iadccmp2,apaccmp1,apaccmp2 (line: 520) FILE /var/log/cron yellow mtime<3600 HOST=iadccmp1,iadccmt1,iadccmd1,iadccmp2,apaccmp1,apaccmp2 (line: 521) DISK /opt/NASSoftware IGNORE HOST=iadccmp1,iadccmt1,iadccmd1,iadccmp2,apaccmp1,apaccmp2 (line: 522) LOAD 18.00 25.00 HOST=iadccmp1,iadccmt1,iadccmd1,iadccmp2,apaccmp1,apaccmp2 (line: 523) FILE /usr/local/dat/naIpAddrs.txt yellow mtime<3630 HOST=iadccmp1,iadccmp2,apaccmp1,apaccmp2 (line: 526) PROC sshd 1 300 yellow HOST=iadccmp1,iadccmp2,apaccmp1,apaccmp2 (line: 528) PROC sshd 1 1000 red HOST=iadccmp1,iadccmp2,apaccmp1,apaccmp2 TEXT=ssh daemon (sshd) (line: 529) PROC sshd 1 70 yellow HOST=* EXHOST=iadccmp1,iadccmp2,apaccmp1,apaccmp2 (line: 1004) PROC sshd 1 100 red HOST=* EXHOST=iadccmp1,iadccmp2,apaccmp1,apaccmp2 TEXT=ssh daemon (sshd) (line: 1005) -----Original Message----- From: cleaver at terabithia.org [mailto:cleaver at terabithia.org] Sent: Thursday, April 04, 2013 11:09 AM To: Root, Paul T Cc: 'xymon at xymon.com' Subject: Re: [Xymon] proc tracking graph not working. > > Hi, > So I have the following in my analisys.cfg (4.3.10): > > HOST=iadccmp1,iadccmp2,apaccmp1,apaccmp2 > FILE /usr/local/dat/naIpAddrs.txt yellow MTIME<3630 PROC sshd 1 300 > yellow PROC sshd 1 1000 red "TEXT=ssh daemon (sshd)" "TRACK=ssh > daemon" > > HOST=* EXHOST=iadccmp1,iadccmp2,apaccmp1,apaccmp2 > PROC sshd 1 70 yellow > PROC sshd 1 100 red "TEXT=ssh daemon (sshd)" > > > But I'm still not getting the graph tracking the > number of connections. Any ideas? > > Paul. > I believe the quotes need to be around the content, not the key, for the TEXT and TRACK values... And IIRC (could be wrong) the TRACK needs to be a space-less id, since it ends up in the name of the rrd file. Can you run "xymoncmd xymond_client --dump-config" and paste the output? It should help identify the problem here... Regards, -jc From Paul.Root at CenturyLink.com Thu Apr 4 18:24:01 2013 From: Paul.Root at CenturyLink.com (Root, Paul T) Date: Thu, 4 Apr 2013 16:24:01 +0000 Subject: [Xymon] proc tracking graph not working. In-Reply-To: References: <52150.199.91.139.248.1365091752.squirrel@mail.kkytbs.net> Message-ID: Looks like TRACK has to come before TEXT. -----Original Message----- From: xymon-bounces at xymon.com [mailto:xymon-bounces at xymon.com] On Behalf Of Root, Paul T Sent: Thursday, April 04, 2013 11:18 AM To: 'cleaver at terabithia.org' Cc: 'xymon at xymon.com' Subject: Re: [Xymon] proc tracking graph not working. Ok, So it is ignoring the TRACK: $ ~xymon/server/bin/xymoncmd xymond_client --dump-config |grep iadccmp1 2013-04-04 11:15:50 Using default environment file /usr/lib64/xymon/server/etc/xymonserver.cfg 2013-04-04 11:15:50 Unknown token 'TRACK=ssh daemon' ignored at line 529 2013-04-04 11:15:50 Unknown token 'TRACK=sshd' ignored at line 1001 LOG /opt/netcool/omnibus/log/MNS_NFMS_GW.log MATCH=%Error:.*ObjectServerB: Reader component has failed COLOR=yellow HOST=iadccmp1,iadccmt1,iadccmd1,iadccmp2,apaccmp1,apaccmp2 (line: 508) LOG /rendition/NA/server/log/jboss_wrapper.log MATCH=%OutOfMemory COLOR=red HOST=iadccmp1,iadccmt1,iadccmd1,iadccmp2,apaccmp1,apaccmp2 (line: 509) LOG /rendition/NA/server/log/jboss_wrapper.log MATCH=%not able to connect to its database COLOR=red HOST=iadccmp1,iadccmt1,iadccmd1,iadccmp2,apaccmp1,apaccmp2 (line: 510) PORT local=%([.:]443)$ state=LISTEN min=1 color=red HOST=iadccmp1,iadccmt1,iadccmd1,iadccmp2,apaccmp1,apaccmp2 TEXT=https (80) (line: 511) PORT local=%([.:]8022)$ min=1 max=80 color=yellow TRACK=hpnassh HOST=iadccmp1,iadccmt1,iadccmd1,iadccmp2,apaccmp1,apaccmp2 TEXT=HPNA SSH proxy (8022) (line: 513) PROC "jre/bin/java -DTCMgmtEngine" 1 3 red HOST=iadccmp1,iadccmt1,iadccmd1,iadccmp2,apaccmp1,apaccmp2 (line: 515) PROC "jre/bin/java -DTCMgmtEngine" 1 1 yellow HOST=iadccmp1,iadccmt1,iadccmd1,iadccmp2,apaccmp1,apaccmp2 TEXT=Mgmt Engine - Yellow (line: 516) PROC "jre/bin/java -DTCSyslog" 1 1 red HOST=iadccmp1,iadccmt1,iadccmd1,iadccmp2,apaccmp1,apaccmp2 (line: 517) LOG /rendition/NA/server/log/jboss_wrapper.log MATCH=OutOfMemoryError COLOR=red HOST=iadccmp1,iadccmt1,iadccmd1,iadccmp2,apaccmp1,apaccmp2 (line: 518) LOG /rendition/NA/server/log/jboss_wrapper.log MATCH=not able to connect to its database COLOR=red HOST=iadccmp1,iadccmt1,iadccmd1,iadccmp2,apaccmp1,apaccmp2 (line: 519) FILE /rendition/NA/jre/logging.rcx yellow mtime>600 HOST=iadccmp1,iadccmt1,iadccmd1,iadccmp2,apaccmp1,apaccmp2 (line: 520) FILE /var/log/cron yellow mtime<3600 HOST=iadccmp1,iadccmt1,iadccmd1,iadccmp2,apaccmp1,apaccmp2 (line: 521) DISK /opt/NASSoftware IGNORE HOST=iadccmp1,iadccmt1,iadccmd1,iadccmp2,apaccmp1,apaccmp2 (line: 522) LOAD 18.00 25.00 HOST=iadccmp1,iadccmt1,iadccmd1,iadccmp2,apaccmp1,apaccmp2 (line: 523) FILE /usr/local/dat/naIpAddrs.txt yellow mtime<3630 HOST=iadccmp1,iadccmp2,apaccmp1,apaccmp2 (line: 526) PROC sshd 1 300 yellow HOST=iadccmp1,iadccmp2,apaccmp1,apaccmp2 (line: 528) PROC sshd 1 1000 red HOST=iadccmp1,iadccmp2,apaccmp1,apaccmp2 TEXT=ssh daemon (sshd) (line: 529) PROC sshd 1 70 yellow HOST=* EXHOST=iadccmp1,iadccmp2,apaccmp1,apaccmp2 (line: 1004) PROC sshd 1 100 red HOST=* EXHOST=iadccmp1,iadccmp2,apaccmp1,apaccmp2 TEXT=ssh daemon (sshd) (line: 1005) -----Original Message----- From: cleaver at terabithia.org [mailto:cleaver at terabithia.org] Sent: Thursday, April 04, 2013 11:09 AM To: Root, Paul T Cc: 'xymon at xymon.com' Subject: Re: [Xymon] proc tracking graph not working. > > Hi, > So I have the following in my analisys.cfg (4.3.10): > > HOST=iadccmp1,iadccmp2,apaccmp1,apaccmp2 > FILE /usr/local/dat/naIpAddrs.txt yellow MTIME<3630 PROC sshd 1 300 > yellow PROC sshd 1 1000 red "TEXT=ssh daemon (sshd)" "TRACK=ssh > daemon" > > HOST=* EXHOST=iadccmp1,iadccmp2,apaccmp1,apaccmp2 > PROC sshd 1 70 yellow > PROC sshd 1 100 red "TEXT=ssh daemon (sshd)" > > > But I'm still not getting the graph tracking the > number of connections. Any ideas? > > Paul. > I believe the quotes need to be around the content, not the key, for the TEXT and TRACK values... And IIRC (could be wrong) the TRACK needs to be a space-less id, since it ends up in the name of the rrd file. Can you run "xymoncmd xymond_client --dump-config" and paste the output? It should help identify the problem here... Regards, -jc _______________________________________________ Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon From Paul.Root at CenturyLink.com Thu Apr 4 18:41:15 2013 From: Paul.Root at CenturyLink.com (Root, Paul T) Date: Thu, 4 Apr 2013 16:41:15 +0000 Subject: [Xymon] proc tracking graph not working. In-Reply-To: References: <52150.199.91.139.248.1365091752.squirrel@mail.kkytbs.net> Message-ID: Yep, that did it TRACK must come before TEXT. -----Original Message----- From: Root, Paul T Sent: Thursday, April 04, 2013 11:24 AM To: Root, Paul T; 'cleaver at terabithia.org' Cc: 'xymon at xymon.com' Subject: RE: [Xymon] proc tracking graph not working. Looks like TRACK has to come before TEXT. -----Original Message----- From: xymon-bounces at xymon.com [mailto:xymon-bounces at xymon.com] On Behalf Of Root, Paul T Sent: Thursday, April 04, 2013 11:18 AM To: 'cleaver at terabithia.org' Cc: 'xymon at xymon.com' Subject: Re: [Xymon] proc tracking graph not working. Ok, So it is ignoring the TRACK: $ ~xymon/server/bin/xymoncmd xymond_client --dump-config |grep iadccmp1 2013-04-04 11:15:50 Using default environment file /usr/lib64/xymon/server/etc/xymonserver.cfg 2013-04-04 11:15:50 Unknown token 'TRACK=ssh daemon' ignored at line 529 2013-04-04 11:15:50 Unknown token 'TRACK=sshd' ignored at line 1001 LOG /opt/netcool/omnibus/log/MNS_NFMS_GW.log MATCH=%Error:.*ObjectServerB: Reader component has failed COLOR=yellow HOST=iadccmp1,iadccmt1,iadccmd1,iadccmp2,apaccmp1,apaccmp2 (line: 508) LOG /rendition/NA/server/log/jboss_wrapper.log MATCH=%OutOfMemory COLOR=red HOST=iadccmp1,iadccmt1,iadccmd1,iadccmp2,apaccmp1,apaccmp2 (line: 509) LOG /rendition/NA/server/log/jboss_wrapper.log MATCH=%not able to connect to its database COLOR=red HOST=iadccmp1,iadccmt1,iadccmd1,iadccmp2,apaccmp1,apaccmp2 (line: 510) PORT local=%([.:]443)$ state=LISTEN min=1 color=red HOST=iadccmp1,iadccmt1,iadccmd1,iadccmp2,apaccmp1,apaccmp2 TEXT=https (80) (line: 511) PORT local=%([.:]8022)$ min=1 max=80 color=yellow TRACK=hpnassh HOST=iadccmp1,iadccmt1,iadccmd1,iadccmp2,apaccmp1,apaccmp2 TEXT=HPNA SSH proxy (8022) (line: 513) PROC "jre/bin/java -DTCMgmtEngine" 1 3 red HOST=iadccmp1,iadccmt1,iadccmd1,iadccmp2,apaccmp1,apaccmp2 (line: 515) PROC "jre/bin/java -DTCMgmtEngine" 1 1 yellow HOST=iadccmp1,iadccmt1,iadccmd1,iadccmp2,apaccmp1,apaccmp2 TEXT=Mgmt Engine - Yellow (line: 516) PROC "jre/bin/java -DTCSyslog" 1 1 red HOST=iadccmp1,iadccmt1,iadccmd1,iadccmp2,apaccmp1,apaccmp2 (line: 517) LOG /rendition/NA/server/log/jboss_wrapper.log MATCH=OutOfMemoryError COLOR=red HOST=iadccmp1,iadccmt1,iadccmd1,iadccmp2,apaccmp1,apaccmp2 (line: 518) LOG /rendition/NA/server/log/jboss_wrapper.log MATCH=not able to connect to its database COLOR=red HOST=iadccmp1,iadccmt1,iadccmd1,iadccmp2,apaccmp1,apaccmp2 (line: 519) FILE /rendition/NA/jre/logging.rcx yellow mtime>600 HOST=iadccmp1,iadccmt1,iadccmd1,iadccmp2,apaccmp1,apaccmp2 (line: 520) FILE /var/log/cron yellow mtime<3600 HOST=iadccmp1,iadccmt1,iadccmd1,iadccmp2,apaccmp1,apaccmp2 (line: 521) DISK /opt/NASSoftware IGNORE HOST=iadccmp1,iadccmt1,iadccmd1,iadccmp2,apaccmp1,apaccmp2 (line: 522) LOAD 18.00 25.00 HOST=iadccmp1,iadccmt1,iadccmd1,iadccmp2,apaccmp1,apaccmp2 (line: 523) FILE /usr/local/dat/naIpAddrs.txt yellow mtime<3630 HOST=iadccmp1,iadccmp2,apaccmp1,apaccmp2 (line: 526) PROC sshd 1 300 yellow HOST=iadccmp1,iadccmp2,apaccmp1,apaccmp2 (line: 528) PROC sshd 1 1000 red HOST=iadccmp1,iadccmp2,apaccmp1,apaccmp2 TEXT=ssh daemon (sshd) (line: 529) PROC sshd 1 70 yellow HOST=* EXHOST=iadccmp1,iadccmp2,apaccmp1,apaccmp2 (line: 1004) PROC sshd 1 100 red HOST=* EXHOST=iadccmp1,iadccmp2,apaccmp1,apaccmp2 TEXT=ssh daemon (sshd) (line: 1005) -----Original Message----- From: cleaver at terabithia.org [mailto:cleaver at terabithia.org] Sent: Thursday, April 04, 2013 11:09 AM To: Root, Paul T Cc: 'xymon at xymon.com' Subject: Re: [Xymon] proc tracking graph not working. > > Hi, > So I have the following in my analisys.cfg (4.3.10): > > HOST=iadccmp1,iadccmp2,apaccmp1,apaccmp2 > FILE /usr/local/dat/naIpAddrs.txt yellow MTIME<3630 PROC sshd 1 300 > yellow PROC sshd 1 1000 red "TEXT=ssh daemon (sshd)" "TRACK=ssh > daemon" > > HOST=* EXHOST=iadccmp1,iadccmp2,apaccmp1,apaccmp2 > PROC sshd 1 70 yellow > PROC sshd 1 100 red "TEXT=ssh daemon (sshd)" > > > But I'm still not getting the graph tracking the > number of connections. Any ideas? > > Paul. > I believe the quotes need to be around the content, not the key, for the TEXT and TRACK values... And IIRC (could be wrong) the TRACK needs to be a space-less id, since it ends up in the name of the rrd file. Can you run "xymoncmd xymond_client --dump-config" and paste the output? It should help identify the problem here... Regards, -jc _______________________________________________ Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon From cleaver at terabithia.org Thu Apr 4 18:52:31 2013 From: cleaver at terabithia.org (cleaver at terabithia.org) Date: Thu, 4 Apr 2013 16:52:31 -0000 (UTC) Subject: [Xymon] comments for a tests (possible a feature request) In-Reply-To: <201304041530.59281.a_s_y@sama.ru> References: <201304041530.59281.a_s_y@sama.ru> Message-ID: <65444.199.91.139.248.1365094351.squirrel@mail.kkytbs.net> > Hello. > > Can I add comments about incidents per host/test ? > > -- > Regards, > Sergey It's an interesting idea. While a non-green status is in effect, you can achieve something like it with an ACKnowledgement message, but there's no real provision for commentary on specific events beyond that. One could cobble together a uniq-ID event without an alert cookie from hostsvc-timestamp most likely, but svcstatus would still need to know about it for the comments to be displayed. Regards, -jc From cleaver at terabithia.org Thu Apr 4 18:54:13 2013 From: cleaver at terabithia.org (cleaver at terabithia.org) Date: Thu, 4 Apr 2013 16:54:13 -0000 (UTC) Subject: [Xymon] proc tracking graph not working. In-Reply-To: References: <52150.199.91.139.248.1365091752.squirrel@mail.kkytbs.net> Message-ID: <52672.199.91.139.248.1365094453.squirrel@mail.kkytbs.net> > I know for a fact that TEXT requires the quotes around the whole thing, as > shown on line 303 of analysis.cfg, comments: > > # Example: Check that at least 5 "ssh" connections are established, but > # not more than 10; warn but do not error; graph the connection count: > # PORT "LOCAL=%([.:]22)$" state=ESTABLISHED min=5 max=20 color=yellow > TRACK= ssh "TEXT=SSH logins" > > > And I have the quotes around other TRACK entries that are working fine. It > would be bad from a consistency standpoint to have TEXT and TRACK be > different. > > I'll check the dump-config. > > Thanks, > Paul. D'oh! I'm definitely wrong here then... :) -jc From diffusion at bulot-fr.com Thu Apr 4 19:43:26 2013 From: diffusion at bulot-fr.com (diffusion at bulot-fr.com) Date: Thu, 4 Apr 2013 19:43:26 +0200 Subject: [Xymon] [xymon]use "Files" status for noob Message-ID: <20130404194326.6760b783@roland.bulot-fr.com> Hello, I ask help for Xymon 4.3.0-0.beta2 (native package for Debian/Squeeze=stable) Sorry for this question, but i don't understand howto use 'files' status, someone can help me howto use (in French ?) My File check stay "clear" For example I just want to see if one file is present (later, i will check if some data are inside file) Where i am now : - xymon srv = supervision.toto.com - client to monitoring : adama59.toto.com On srv : in /etc/hobbit/hobbit-clients.cfg HOST=adama59.toto.com FILE /etc/awstats/update_stats.sh "red" TYPE=file in /etc/hobbit/client-local.cfg [adama59.toto.com] log:/var/log/messages:10240 ignore MARK log:/var/log/mail.log log:/etc/awstats/update_stats.sh I suppose i have to do something on the client ? but what ? From Paul.Root at CenturyLink.com Thu Apr 4 19:58:41 2013 From: Paul.Root at CenturyLink.com (Root, Paul T) Date: Thu, 4 Apr 2013 17:58:41 +0000 Subject: [Xymon] [xymon]use "Files" status for noob In-Reply-To: <20130404194326.6760b783@roland.bulot-fr.com> References: <20130404194326.6760b783@roland.bulot-fr.com> Message-ID: You don't want adam59.toto.com in the client-local.cfg file. You want the server type, like linux. After changing that, you need to restart the server. -----Original Message----- From: xymon-bounces at xymon.com [mailto:xymon-bounces at xymon.com] On Behalf Of diffusion at bulot-fr.com Sent: Thursday, April 04, 2013 12:43 PM To: xymon at xymon.com Subject: [Xymon] [xymon]use "Files" status for noob Hello, I ask help for Xymon 4.3.0-0.beta2 (native package for Debian/Squeeze=stable) Sorry for this question, but i don't understand howto use 'files' status, someone can help me howto use (in French ?) My File check stay "clear" For example I just want to see if one file is present (later, i will check if some data are inside file) Where i am now : - xymon srv = supervision.toto.com - client to monitoring : adama59.toto.com On srv : in /etc/hobbit/hobbit-clients.cfg HOST=adama59.toto.com FILE /etc/awstats/update_stats.sh "red" TYPE=file in /etc/hobbit/client-local.cfg [adama59.toto.com] log:/var/log/messages:10240 ignore MARK log:/var/log/mail.log log:/etc/awstats/update_stats.sh I suppose i have to do something on the client ? but what ? _______________________________________________ Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon From jtkbishop at gmail.com Thu Apr 4 20:10:06 2013 From: jtkbishop at gmail.com (Jonathan Bishop) Date: Fri, 5 Apr 2013 05:10:06 +1100 Subject: [Xymon] Monitoring Remote Sites In-Reply-To: References: Message-ID: Thank you all for the suggestions. Much appreciated. Regards, Jon B. On Thu, Apr 4, 2013 at 2:12 PM, Ralph Mitchell wrote: > > On Apr 3, 2013 10:33 PM, "Jeremy Laidman" > wrote: > > > > On 4 April 2013 12:55, Jeremy Laidman wrote: > >> > >> You can do various VPN type things, such as using stunnel or ssh > tunnels (with key auth). > > > > > > Also, this: http://lists.xymon.com/archive/2011-October/032866.html > > > > In summary, the client-side can use curl to send a web "POST" message to > the Xymon server using an https:// type URL. Encryption solved. The > Xymon server can do whatever authentication is required (password, > client-side certificate, or none). > > Just to clarify - on the Xymon server side it's Apache that handles the > client authentication, and there are many docs describing that. Xymon > itself is not involved in the authentication or encryption. > > I also found that the xymoncgi handler sends back to the client any > client-local configuration that it finds, so it isn't just a one way street. > > Ralph Mitchell > -------------- next part -------------- An HTML attachment was scrubbed... URL: From g.fer.ordas at unicyber.co.uk Fri Apr 5 10:18:19 2013 From: g.fer.ordas at unicyber.co.uk (Gonzalo Fernandez Ordas) Date: Fri, 05 Apr 2013 09:18:19 +0100 Subject: [Xymon] Xymon -- Page Refresh Message-ID: <515E88CB.9000508@unicyber.co.uk> Hi I am having a look at the possibility of changing the REFRESH for the webpages, or to disable it!!! as 60 seconds for some webpages it is too little when you got a big bunch of graphs, but changing and hard-coding the template will impact on all the other pages as well. I also could not find the actual variable and I did not know where to change it but hard-coding.. (Unless this has been compiled in the cgi files..) Any thoughts around this at all? Many thanks for all your help. Gonzalo. From g.fer.ordas at unicyber.co.uk Fri Apr 5 10:12:20 2013 From: g.fer.ordas at unicyber.co.uk (Gonzalo Fernandez Ordas) Date: Fri, 05 Apr 2013 09:12:20 +0100 Subject: [Xymon] Monitoring Multiple Cores Message-ID: <515E8764.9040907@unicyber.co.uk> Hi This a topic I am complete sure was been already discussed, but I have been for hours around the web and I cannot find what I am looking for.... I am trying to monitor every cpu within the server rather than the load average, and I wonder if there anything already done rather than re-inventing the wheel again? maybe something which is already done in relation to monitoring multiple cores? Many thanks to all of you. From spah at syntec.co.uk Fri Apr 5 13:30:01 2013 From: spah at syntec.co.uk (SebA) Date: Fri, 5 Apr 2013 12:30:01 +0100 Subject: [Xymon] Reverse DNS lookup check not working Message-ID: There seems to be a bug where DNS PTR (Reverse DNS lookup) checks do not work in Xymon (4.3.7, but I don't recall seeing any fixes in the commits). The man page for hosts.cfg says the format to use is: dns=TYPE:lookup and one of the examples underneath for TYPE is PTR (reverse). I have tried this in small and capitals and neither work (the result is Name not found). Using A does work though. I wonder if it could be related to the fact that DiG needs to be invoked with -x for PTR checks. A quick look at the DiG man page suggests you could use either: # dig -t PTR my.ip.ad.dr.ess Or: # dig my.ip.ad.dr.ess PTR However, this is not the case. A closer looks reveals you have to use: # dig -x my.ip.ad.dr.ess So what I am saying is that the treatment for type PTR differs from the other types, and that the parameters supplied to DiG (if Xymon uses DiG ) differ for PTR. Tested manually with DiG 9.2.4 and the latest RHEL5: 9.3.6-P1-RedHat-9.3.6-20.P1.el5_8.6. Kind regards, SebA -------------- next part -------------- An HTML attachment was scrubbed... URL: From Mark.Deiss at xerox.com Fri Apr 5 14:47:10 2013 From: Mark.Deiss at xerox.com (Deiss, Mark) Date: Fri, 5 Apr 2013 12:47:10 +0000 Subject: [Xymon] comments for a tests (possible a feature request) In-Reply-To: <65444.199.91.139.248.1365094351.squirrel@mail.kkytbs.net> References: <201304041530.59281.a_s_y@sama.ru> <65444.199.91.139.248.1365094351.squirrel@mail.kkytbs.net> Message-ID: <5423B232CA65934E965B64588ED5D5EB06900375@USA7109MB015.na.xerox.net> Once upon a time, (meaning I don't know where the code is - senility) we had a cgi script that would tie in a icon/button to the host ID in the Big Brother display. (i.e Hostname ) A free form editor would pop up that would allow appending date-stamped comments. The button color would change from clear to blue if there were any comments on a host. The cgi would allow removal of comments by their IDs etc. Idea was a comment could be placed regarding any ongoing issue or as a FYI; we had to report status every 30 minutes to upper management on a sev 1 incident so this was a way to handle that and coordinate with other staff members. This allowed web-based entry (password protected) so staff did not have to log into the BB server to update a flat file (i.e. like using the notes capability tied to the hostname). Just got to be a pain in the neck re-integrating the modifications as we flipped between versions and going from Big Brother to Big Sister back to Big Brother to Xymon. -----Original Message----- From: xymon-bounces at xymon.com [mailto:xymon-bounces at xymon.com] On Behalf Of cleaver at terabithia.org Sent: Thursday, April 04, 2013 12:53 PM To: Sergey Cc: xymon at xymon.com Subject: Re: [Xymon] comments for a tests (possible a feature request) > Hello. > > Can I add comments about incidents per host/test ? > > -- > Regards, > Sergey It's an interesting idea. While a non-green status is in effect, you can achieve something like it with an ACKnowledgement message, but there's no real provision for commentary on specific events beyond that. One could cobble together a uniq-ID event without an alert cookie from hostsvc-timestamp most likely, but svcstatus would still need to know about it for the comments to be displayed. Regards, -jc _______________________________________________ Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon From lebarber at gmail.com Fri Apr 5 16:40:48 2013 From: lebarber at gmail.com (Larry Barber) Date: Fri, 5 Apr 2013 09:40:48 -0500 Subject: [Xymon] Xymon -- Page Refresh In-Reply-To: <515E88CB.9000508@unicyber.co.uk> References: <515E88CB.9000508@unicyber.co.uk> Message-ID: The refresh interval is set in the templates in the $XYMONHOME/web directory: Since there are templates (often just symlinks) for just about every page type you could change (or remove) the refresh interval base on page type. Thanks, Larry Barber On Fri, Apr 5, 2013 at 3:18 AM, Gonzalo Fernandez Ordas < g.fer.ordas at unicyber.co.uk> wrote: > Hi > > I am having a look at the possibility of changing the REFRESH for the > webpages, or to disable it!!! as 60 seconds for some webpages it is too > little when you got a big bunch of graphs, but changing and hard-coding the > template will impact on all the other pages as well. > I also could not find the actual variable and I did not know where to > change it but hard-coding.. (Unless this has been compiled in the cgi > files..) > > Any thoughts around this at all? > > Many thanks for all your help. > > Gonzalo. > ______________________________**_________________ > Xymon mailing list > Xymon at xymon.com > http://lists.xymon.com/**mailman/listinfo/xymon > -------------- next part -------------- An HTML attachment was scrubbed... URL: From diffusion at bulot-fr.com Fri Apr 5 18:48:28 2013 From: diffusion at bulot-fr.com ('diffusion@bulot-fr.com') Date: Fri, 5 Apr 2013 18:48:28 +0200 Subject: [Xymon] [xymon]use "Files" status for noob In-Reply-To: References: <20130404194326.6760b783@roland.bulot-fr.com> Message-ID: <20130405184828.44de93b5@roland.bulot-fr.com> Le Thu, 4 Apr 2013 17:58:41 +0000, "Root, Paul T" a écrit : > You don't want adam59.toto.com in the client-local.cfg file. You want > the server type, like linux. After changing that, you need to > restart the server. Hi Root, Paul T It was my first test (restart was done after ) my second was to copy [linux] section and after i was rename this copy to adam59.toto.com and restart From Paul.Root at CenturyLink.com Fri Apr 5 19:14:47 2013 From: Paul.Root at CenturyLink.com (Root, Paul T) Date: Fri, 5 Apr 2013 17:14:47 +0000 Subject: [Xymon] [xymon]use "Files" status for noob In-Reply-To: <20130405184828.44de93b5@roland.bulot-fr.com> References: <20130404194326.6760b783@roland.bulot-fr.com> <20130405184828.44de93b5@roland.bulot-fr.com> Message-ID: Just add the filename you want to watch in the linux section. That's how it will work. Clients-local.cfg does not have host names just architecture types. -----Original Message----- From: xymon-bounces at xymon.com [mailto:xymon-bounces at xymon.com] On Behalf Of 'diffusion at bulot-fr.com' Sent: Friday, April 05, 2013 11:48 AM To: 'xymon at xymon.com' Subject: Re: [Xymon] [xymon]use "Files" status for noob Le Thu, 4 Apr 2013 17:58:41 +0000, "Root, Paul T" a écrit : > You don't want adam59.toto.com in the client-local.cfg file. You want > the server type, like linux. After changing that, you need to restart > the server. Hi Root, Paul T It was my first test (restart was done after ) my second was to copy [linux] section and after i was rename this copy to adam59.toto.com and restart _______________________________________________ Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon From bferrell at baywinds.org Fri Apr 5 19:57:04 2013 From: bferrell at baywinds.org (Bruce Ferrell) Date: Fri, 05 Apr 2013 10:57:04 -0700 Subject: [Xymon] Scaling Message-ID: <515F1070.1040000@baywinds.org> Hi all, I've been doing systems monitoring for a very long time now... I was early on with BB, used HP openview back in day day, blah blah. Anyway, recently I've been told that in very large installations (multi thousands of devices) things like zabbix are the only thing(s) that will do. What are the groups thoughts on this? What ARE the scaling limits of xymon and can they be overcome somehow? From lebarber at gmail.com Fri Apr 5 20:54:50 2013 From: lebarber at gmail.com (Larry Barber) Date: Fri, 5 Apr 2013 13:54:50 -0500 Subject: [Xymon] Scaling In-Reply-To: <515F1070.1040000@baywinds.org> References: <515F1070.1040000@baywinds.org> Message-ID: Well, I'm monitoring ~2000 hosts on a fairly modest box (8 3Ghz cores, 8 GB of memory). I'm also running quite a few cpu intensive scripts on the same box that could be easily moved to another host, if needed. I do the network testing on separate hosts in each of our major security zones, for reliability of the tests more than to unload the main Xymon server. The main server is not operating anywhere near its capacity, it's using less than 10% (physical) of it's memory and the load average tends to stay around 1. I suspect that the box could handle 5000 hosts without too much trouble, maybe more. If you do have scaling problems there are some things you can do, though. Move things like the network tests to separate hosts. You can also move the alerting to a different host using xymonproxy. I've found that the most likely limit you're likely to hit with Xymon is disk i/o, this can be helped by moving the data directory to SAN. Thanks, Larry Barber On Fri, Apr 5, 2013 at 12:57 PM, Bruce Ferrell wrote: > Hi all, > > I've been doing systems monitoring for a very long time now... I was early > on with BB, used HP openview back in day day, blah blah. > > Anyway, recently I've been told that in very large installations (multi > thousands of devices) things like zabbix are the only thing(s) that will do. > > What are the groups thoughts on this? What ARE the scaling limits of > xymon and can they be overcome somehow? > ______________________________**_________________ > Xymon mailing list > Xymon at xymon.com > http://lists.xymon.com/**mailman/listinfo/xymon > -------------- next part -------------- An HTML attachment was scrubbed... URL: From Mike.Burger at FreedomMortgage.com Fri Apr 5 21:11:35 2013 From: Mike.Burger at FreedomMortgage.com (Mike Burger) Date: Fri, 5 Apr 2013 15:11:35 -0400 Subject: [Xymon] [xymon]use "Files" status for noob In-Reply-To: References: <20130404194326.6760b783@roland.bulot-fr.com><20130405184828.44de93b5@roland.bulot-fr.com> Message-ID: This would be inaccurate. You can (and I do) use specific hosts in the client-local.cfg. If you're going to monitor a specific log on a specific system, you can use: [hostname] (as it appears in hosts.cfg) file:/path/to/file log:/var/log/messages:1024 (Or whatever the default syslog is for your installation) The first line monitors for the presence of the file in question, the second line replicates the default syslog for your OS. This second line is necessary if you wish to monitor that log, as specifying a particular host in the client-local.cfg will supercede any OS specific settings. -- Mike Burger AIX Administrator Phone (317) 537-3680, Fax (317) 537-4680, Cell (317) 797-2040 E-mail:  Mike.Burger at FreedomMortgage.com "Once word leaks out that a pirate's gone soft, people begin to disobey you and then it's nothing but work, work, work, all the time." --Westley/The Dread Pirate Roberts -----Original Message----- From: xymon-bounces at xymon.com [mailto:xymon-bounces at xymon.com] On Behalf Of Root, Paul T Sent: Friday, April 05, 2013 1:15 PM To: 'diffusion at bulot-fr.com'; 'xymon at xymon.com' Subject: Re: [Xymon] [xymon]use "Files" status for noob Just add the filename you want to watch in the linux section. That's how it will work. Clients-local.cfg does not have host names just architecture types. -----Original Message----- From: xymon-bounces at xymon.com [mailto:xymon-bounces at xymon.com] On Behalf Of 'diffusion at bulot-fr.com' Sent: Friday, April 05, 2013 11:48 AM To: 'xymon at xymon.com' Subject: Re: [Xymon] [xymon]use "Files" status for noob Le Thu, 4 Apr 2013 17:58:41 +0000, "Root, Paul T" a écrit : > You don't want adam59.toto.com in the client-local.cfg file. You want > the server type, like linux. After changing that, you need to restart > the server. Hi Root, Paul T It was my first test (restart was done after ) my second was to copy [linux] section and after i was rename this copy to adam59.toto.com and restart _______________________________________________ Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon _______________________________________________ Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon CONFIDENTIALITY NOTICE: This e-mail message, including all attachments, is for the sole use of the intended recipient(s) and may contain confidential information. Any unauthorized review, use, disclosure, alteration or distribution is strictly prohibited and may violate state or federal law. If you are not the intended recipient, please contact the sender by reply e-mail, delete this email and destroy all copies of the message. From olivier at audry.fr Fri Apr 5 22:33:41 2013 From: olivier at audry.fr (Olivier AUDRY) Date: Fri, 05 Apr 2013 22:33:41 +0200 Subject: [Xymon] Scaling In-Reply-To: References: <515F1070.1040000@baywinds.org> Message-ID: <1365194021.4481.29.camel@aragorn> hello 15 000 devices here. For me the key is ssd :) I plan to monitore 60 000 devices with xymon. Only network devices. We'll see the result. oau Le vendredi 05 avril 2013 à 13:54 -0500, Larry Barber a écrit : > Well, I'm monitoring ~2000 hosts on a fairly modest box (8 3Ghz cores, > 8 GB of memory). I'm also running quite a few cpu intensive scripts on > the same box that could be easily moved to another host, if needed. I > do the network testing on separate hosts in each of our major security > zones, for reliability of the tests more than to unload the main Xymon > server. The main server is not operating anywhere near its capacity, > it's using less than 10% (physical) of it's memory and the load > average tends to stay around 1. I suspect that the box could handle > 5000 hosts without too much trouble, maybe more. > > > If you do have scaling problems there are some things you can do, > though. Move things like the network tests to separate hosts. You can > also move the alerting to a different host using xymonproxy. I've > found that the most likely limit you're likely to hit with Xymon is > disk i/o, this can be helped by moving the data directory to SAN. > > > Thanks, > Larry Barber > > > On Fri, Apr 5, 2013 at 12:57 PM, Bruce Ferrell > wrote: > Hi all, > > I've been doing systems monitoring for a very long time now... > I was early on with BB, used HP openview back in day day, blah > blah. > > Anyway, recently I've been told that in very large > installations (multi thousands of devices) things like zabbix > are the only thing(s) that will do. > > What are the groups thoughts on this? What ARE the scaling > limits of xymon and can they be overcome somehow? > _______________________________________________ > Xymon mailing list > Xymon at xymon.com > http://lists.xymon.com/mailman/listinfo/xymon > > > _______________________________________________ > Xymon mailing list > Xymon at xymon.com > http://lists.xymon.com/mailman/listinfo/xymon From diffusion at bulot-fr.com Sun Apr 7 13:35:03 2013 From: diffusion at bulot-fr.com (diffusion at bulot-fr.com) Date: Sun, 7 Apr 2013 13:35:03 +0200 Subject: [Xymon] [solved]use "Files" status for noob In-Reply-To: References: <20130404194326.6760b783@roland.bulot-fr.com> <20130405184828.44de93b5@roland.bulot-fr.com> Message-ID: <20130407133503.7c988736@roland.bulot-fr.com> Le Fri, 5 Apr 2013 15:11:35 -0400, "Mike Burger" a écrit : > [hostname] (as it appears in hosts.cfg) > file:/path/to/file > log:/var/log/messages:1024 (Or whatever the default syslog is for > your installation) Yes ! it's because i didn't respect that it must have these 2 lines : file: log: thanks ! From everett.vernon at gmail.com Sun Apr 7 13:33:36 2013 From: everett.vernon at gmail.com (Vernon Everett) Date: Sun, 7 Apr 2013 19:33:36 +0800 Subject: [Xymon] Monitoring Multiple Cores In-Reply-To: <515E8764.9040907@unicyber.co.uk> References: <515E8764.9040907@unicyber.co.uk> Message-ID: For which OS? I think I saw something that does this for Solaris on Xymonton. Might be able to modify it for whatever you are using. Regards Vernon On 5 April 2013 16:12, Gonzalo Fernandez Ordas wrote: > Hi > > This a topic I am complete sure was been already discussed, but I have > been for hours around the web and I cannot find what I am looking for.... > I am trying to monitor every cpu within the server rather than the load > average, and I wonder if there anything already done rather than > re-inventing the wheel again? > maybe something which is already done in relation to monitoring multiple > cores? > > Many thanks to all of you. > ______________________________**_________________ > Xymon mailing list > Xymon at xymon.com > http://lists.xymon.com/**mailman/listinfo/xymon > -- "Accept the challenges so that you can feel the exhilaration of victory" - General George Patton -------------- next part -------------- An HTML attachment was scrubbed... URL: From jlaidman at rebel-it.com.au Sun Apr 7 16:34:26 2013 From: jlaidman at rebel-it.com.au (Jeremy Laidman) Date: Mon, 8 Apr 2013 00:34:26 +1000 Subject: [Xymon] Reverse DNS lookup check not working In-Reply-To: References: Message-ID: On 5 April 2013 22:30, SebA wrote: > ** > I wonder if it could be related to the fact that DiG needs to be invoked > with -x for PTR checks. > Not required for PTR checks. > A quick look at the DiG man page suggests you could use either: > # dig -t PTR my.ip.ad.dr.ess > Or: > # dig my.ip.ad.dr.ess PTR > No, it's more like this: # dig ess.addr.ip.my.in-addr.arpa PTR > However, this is not the case. A closer looks reveals you have to use: > # dig -x my.ip.ad.dr.ess > The -x option is a convenience, and it means not only "set type to PTR" but also "reverse octets and append 'in-addr.arpa'". I'm not in a position to check until tomorrow, but I'm confident that I successfully test for the localhost address like so DNS=PTR:1.0.0.127.in-addr.arpa J -------------- next part -------------- An HTML attachment was scrubbed... URL: From operaciones at corpresa.com Sun Apr 7 16:56:32 2013 From: operaciones at corpresa.com (Operaciones) Date: Sun, 07 Apr 2013 16:56:32 +0200 Subject: [Xymon] About CPU load Message-ID: <51618920.6060006@corpresa.com> Hello, I'm using xymon 4.3.5, my as is the follow: Is correct the default params that appear on "analysis.cfg" for chect the cpu load in case that the server have 4 cores (intel xeon 1230)?, can i use this values for anyone CPU types? Thank you, best regards. -------------- next part -------------- An HTML attachment was scrubbed... URL: From operaciones at corpresa.com Sun Apr 7 16:58:13 2013 From: operaciones at corpresa.com (Operaciones) Date: Sun, 07 Apr 2013 16:58:13 +0200 Subject: [Xymon] Fwd: About CPU load In-Reply-To: <51618920.6060006@corpresa.com> References: <51618920.6060006@corpresa.com> Message-ID: <51618985.5030207@corpresa.com> I forget, the default params that appear in this file are: LOAD 5.0 10.0 Thank you, best regards. -------- Mensaje original -------- Asunto: About CPU load Fecha: Sun, 07 Apr 2013 16:56:32 +0200 De: Operaciones Para: xymon at xymon.com Hello, I'm using xymon 4.3.5, my as is the follow: Is correct the default params that appear on "analysis.cfg" for chect the cpu load in case that the server have 4 cores (intel xeon 1230)?, can i use this values for anyone CPU types? Thank you, best regards. -------------- next part -------------- An HTML attachment was scrubbed... URL: From novosirj at umdnj.edu Sun Apr 7 18:16:23 2013 From: novosirj at umdnj.edu (Novosielski, Ryan) Date: Sun, 7 Apr 2013 12:16:23 -0400 Subject: [Xymon] Fwd: About CPU load In-Reply-To: <51618985.5030207@corpresa.com> Message-ID: <6A34302C7B62B54EB77F697809EFC81E4122CF41F3@UMDEXMBX02.core.umdnj.edu> This default is a reasonably nice default for a single CPU system, but this is really a parameter that is site-dependent. For example, I have a 24 CPU compute server. A load of 5 is hardly breaking a sweat. In some cases, high load doesn't even affect the system and you wouldn't want to be notified until a normally unreasonably high value. I'd suspect 10.0 15.0 for your system or 15.0 20.0 might not be a bad guess. From: Operaciones [mailto:operaciones at corpresa.com] Sent: Sunday, April 07, 2013 10:58 AM To: Xymon List Subject: [Xymon] Fwd: About CPU load I forget, the default params that appear in this file are: LOAD 5.0 10.0 Thank you, best regards. -------- Mensaje original -------- Asunto: About CPU load Fecha: Sun, 07 Apr 2013 16:56:32 +0200 De: Operaciones Para: xymon at xymon.com Hello, I'm using xymon 4.3.5, my as is the follow: Is correct the default params that appear on "analysis.cfg" for chect the cpu load in case that the server have 4 cores (intel xeon 1230)?, can i use this values for anyone CPU types? Thank you, best regards. -------------- next part -------------- An HTML attachment was scrubbed... URL: From operaciones at corpresa.com Sun Apr 7 18:22:07 2013 From: operaciones at corpresa.com (Operaciones) Date: Sun, 07 Apr 2013 18:22:07 +0200 Subject: [Xymon] Fwd: About CPU load In-Reply-To: <6A34302C7B62B54EB77F697809EFC81E4122CF41F3@UMDEXMBX02.core.umdnj.edu> References: <6A34302C7B62B54EB77F697809EFC81E4122CF41F3@UMDEXMBX02.core.umdnj.edu> Message-ID: <51619D2F.5000802@corpresa.com> Thank you Ryan, one ask, are there eny way for calc this?, or you suggest taht the better way is testing in each server? El 07/04/13 18:16, Novosielski, Ryan escribió: > This default is a reasonably nice default for a single CPU system, but > this is really a parameter that is site-dependent. For example, I have > a 24 CPU compute server. A load of 5 is hardly breaking a sweat. In > some cases, high load doesn't even affect the system and you wouldn't > want to be notified until a normally unreasonably high value. I'd > suspect 10.0 15.0 for your system or 15.0 20.0 might not be a bad guess. > > > *From*: Operaciones [mailto:operaciones at corpresa.com] > *Sent*: Sunday, April 07, 2013 10:58 AM > *To*: Xymon List > *Subject*: [Xymon] Fwd: About CPU load > > I forget, the default params that appear in this file are: > > LOAD 5.0 10.0 > > Thank you, best regards. > > -------- Mensaje original -------- > Asunto: About CPU load > Fecha: Sun, 07 Apr 2013 16:56:32 +0200 > De: Operaciones > Para: xymon at xymon.com > > > > Hello, > > I'm using xymon 4.3.5, my as is the follow: > > Is correct the default params that appear on "analysis.cfg" for chect > the cpu load in case that the server have 4 cores (intel xeon 1230)?, > can i use this values for anyone CPU types? > > Thank you, best regards. > > -------------- next part -------------- An HTML attachment was scrubbed... URL: From novosirj at umdnj.edu Sun Apr 7 23:26:30 2013 From: novosirj at umdnj.edu (Novosielski, Ryan) Date: Sun, 7 Apr 2013 17:26:30 -0400 Subject: [Xymon] Fwd: About CPU load In-Reply-To: <51619D2F.5000802@corpresa.com> Message-ID: <6A34302C7B62B54EB77F697809EFC81E4122CF41F4@UMDEXMBX02.core.umdnj.edu> Others may have some ideas. I think no, just set it too low (I use the default value to start generally) and wait for it to get annoying and raise it accordingly. From: Operaciones [mailto:operaciones at corpresa.com] Sent: Sunday, April 07, 2013 12:22 PM To: Novosielski, Ryan Cc: 'xymon at xymon.com' Subject: Re: [Xymon] Fwd: About CPU load Thank you Ryan, one ask, are there eny way for calc this?, or you suggest taht the better way is testing in each server? El 07/04/13 18:16, Novosielski, Ryan escribió: This default is a reasonably nice default for a single CPU system, but this is really a parameter that is site-dependent. For example, I have a 24 CPU compute server. A load of 5 is hardly breaking a sweat. In some cases, high load doesn't even affect the system and you wouldn't want to be notified until a normally unreasonably high value. I'd suspect 10.0 15.0 for your system or 15.0 20.0 might not be a bad guess. From: Operaciones [mailto:operaciones at corpresa.com] Sent: Sunday, April 07, 2013 10:58 AM To: Xymon List Subject: [Xymon] Fwd: About CPU load I forget, the default params that appear in this file are: LOAD 5.0 10.0 Thank you, best regards. -------- Mensaje original -------- Asunto: About CPU load Fecha: Sun, 07 Apr 2013 16:56:32 +0200 De: Operaciones Para: xymon at xymon.com Hello, I'm using xymon 4.3.5, my as is the follow: Is correct the default params that appear on "analysis.cfg" for chect the cpu load in case that the server have 4 cores (intel xeon 1230)?, can i use this values for anyone CPU types? Thank you, best regards. -------------- next part -------------- An HTML attachment was scrubbed... URL: From jlaidman at rebel-it.com.au Mon Apr 8 03:32:23 2013 From: jlaidman at rebel-it.com.au (Jeremy Laidman) Date: Mon, 8 Apr 2013 11:32:23 +1000 Subject: [Xymon] Reverse DNS lookup check not working In-Reply-To: References: Message-ID: On 8 April 2013 00:34, Jeremy Laidman wrote: > I'm not in a position to check until tomorrow, but I'm confident that I > successfully test for the localhost address like so > > DNS=PTR:1.0.0.127.in-addr.arpa > I was wrong in the IP address that I test, but correct in the format and the fact that it works. You should be able to do PTR record checks by formatting in this "in-addr.arpa" format. An easy way to get this is from the output of "dig -x" which shows the question section in the "in-addr.arpa" format (and also in the answer section if it resolves). J -------------- next part -------------- An HTML attachment was scrubbed... URL: From oyvind.bjorge at telenor.com Mon Apr 8 10:03:04 2013 From: oyvind.bjorge at telenor.com (oyvind.bjorge at telenor.com) Date: Mon, 8 Apr 2013 08:03:04 +0000 Subject: [Xymon] Fwd: About CPU load (OPEN) Message-ID: <439AC9D7C36C784597D2450F29AB0B5D4001B861@TNS-FBU-24-205.corp.telenor.no> To be able to estimate this it is good to understand what this load value is showing. There is plenty of people that has explained this in a better way than I’m able to (This is one example: http://en.wikipedia.org/wiki/Load_(computing)), but still I will give you my very simplified understanding. The load is number of tasks in the runque. In my head, to utilize your resources perfectly, the value 1 for single CPU would be good, since than there should be minimal delay, but still there is always something to do for the CPU. If the value are > 1 for a single cpu, than there will be wait time for tasks to be done. This is not necessary an issue, depending on what the machine is used for, and the world is not perfect, so this will not always be the same. Therefor it also is an average value we are monitoring. A long que for a short time is normal and the reason we have ques. Problem is if the que over time is longer than the cpu can process giving delay and degraded performance. Again, what is acceptable for one machine is depending on the tasks it shall do. From: xymon-bounces at xymon.com [mailto:xymon-bounces at xymon.com] On Behalf Of Novosielski, Ryan Sent: 7. april 2013 23:27 To: 'operaciones at corpresa.com' Cc: 'xymon at xymon.com' Subject: Re: [Xymon] Fwd: About CPU load Others may have some ideas. I think no, just set it too low (I use the default value to start generally) and wait for it to get annoying and raise it accordingly. From: Operaciones [mailto:operaciones at corpresa.com] Sent: Sunday, April 07, 2013 12:22 PM To: Novosielski, Ryan Cc: 'xymon at xymon.com' > Subject: Re: [Xymon] Fwd: About CPU load Thank you Ryan, one ask, are there eny way for calc this?, or you suggest taht the better way is testing in each server? El 07/04/13 18:16, Novosielski, Ryan escribió: This default is a reasonably nice default for a single CPU system, but this is really a parameter that is site-dependent. For example, I have a 24 CPU compute server. A load of 5 is hardly breaking a sweat. In some cases, high load doesn't even affect the system and you wouldn't want to be notified until a normally unreasonably high value. I'd suspect 10.0 15.0 for your system or 15.0 20.0 might not be a bad guess. From: Operaciones [mailto:operaciones at corpresa.com] Sent: Sunday, April 07, 2013 10:58 AM To: Xymon List Subject: [Xymon] Fwd: About CPU load I forget, the default params that appear in this file are: LOAD 5.0 10.0 Thank you, best regards. -------- Mensaje original -------- Asunto: About CPU load Fecha: Sun, 07 Apr 2013 16:56:32 +0200 De: Operaciones Para: xymon at xymon.com Hello, I'm using xymon 4.3.5, my as is the follow: Is correct the default params that appear on "analysis.cfg" for chect the cpu load in case that the server have 4 cores (intel xeon 1230)?, can i use this values for anyone CPU types? Thank you, best regards. -------------- next part -------------- An HTML attachment was scrubbed... URL: From iain at shihad.org Mon Apr 8 10:36:30 2013 From: iain at shihad.org (Iain M Conochie) Date: Mon, 08 Apr 2013 09:36:30 +0100 Subject: [Xymon] Fwd: About CPU load In-Reply-To: <51619D2F.5000802@corpresa.com> References: <6A34302C7B62B54EB77F697809EFC81E4122CF41F3@UMDEXMBX02.core.umdnj.edu> <51619D2F.5000802@corpresa.com> Message-ID: On 2013-04-07 17:22, Operaciones wrote: > Thank you Ryan, one ask, are there eny way for calc this?, or you > suggest taht the better way is testing in each server? Load average is a logarithmic method of measuring the run queue on your system. The output of the 3 values gives you the run queue over 1 minute, 5 minutes and 15 minutes respectively. An old rule of thumb was to have a load average of not greater than 2 per cpu, but this is generally site dependent. Are you going to be sending out alerts for a high load? Do you _really_ want to be woken at 2AM cos the backup job has spiked the load? I would advise you set the threshold a bit higher for your system (perhaps 8.0 and 16.0, based on 4 cores) and then after a suitable time period (perhaps 2 weeks) you can look at the CPU load graph to see what kind of usage the system has and adjust accordingly. During this time you probably don't want to send out alerts (but perhaps you do; your call :) IMO, normally a spike in load is not an issue, but a a system that over 6 months has an ever increasing load is a problem. This is where the trends analysis function comes into it's own. OF course load spikes can impact performance, but it is hard to gauge exactly what that impact is from the load average alone. Cheers Iain > > El 07/04/13 18:16, Novosielski, Ryan escribió: > >> This default is a reasonably nice default for a single CPU system, >> but this is really a parameter that is site-dependent. For example, >> I have a 24 CPU compute server. A load of 5 is hardly breaking a >> sweat. In some cases, high load doesn't even affect the system and >> you wouldn't want to be notified until a normally unreasonably high >> value. I'd suspect 10.0 15.0 for your system or 15.0 20.0 might not >> be a bad guess. >> >>   >> >> FROM: Operaciones [mailto:operaciones at corpresa.com [1]] >> SENT: Sunday, April 07, 2013 10:58 AM >> TO: Xymon List [2] >> SUBJECT: [Xymon] Fwd: About CPU load >>   >> I forget, the default params that appear in this file are: >> >> LOAD    5.0 10.0 >> >> Thank you, best regards. >> >> -------- Mensaje original -------- >> >> ASUNTO: >> About CPU load >> >> FECHA: >> Sun, 07 Apr 2013 16:56:32 +0200 >> >> DE: >> Operaciones [3] >> >> PARA: >> xymon at xymon.com [4] >> >> Hello, >> >> I'm using xymon 4.3.5, my as is the follow: >> >> Is correct the default params that appear on "analysis.cfg" for >> chect the cpu load in case that the server have 4 cores (intel xeon >> 1230)?, can i use this values for anyone CPU types? >> >> Thank you, best regards. > > > > Links: > ------ > [1] mailto:operaciones at corpresa.com > [2] mailto:xymon at xymon.com > [3] mailto:operaciones at corpresa.com > [4] mailto:xymon at xymon.com From operaciones at corpresa.com Mon Apr 8 12:21:32 2013 From: operaciones at corpresa.com (Operaciones) Date: Mon, 08 Apr 2013 12:21:32 +0200 Subject: [Xymon] Fwd: About CPU load (OPEN) In-Reply-To: <439AC9D7C36C784597D2450F29AB0B5D4001B861@TNS-FBU-24-205.corp.telenor.no> References: <439AC9D7C36C784597D2450F29AB0B5D4001B861@TNS-FBU-24-205.corp.telenor.no> Message-ID: <51629A2C.5030900@corpresa.com> Thank you all for your advices, think on digest: Should be test first with the default value, and still checking the loads then begin this change the new values right? El 08/04/13 10:03, oyvind.bjorge at telenor.com escribió: > > To be able to estimate this it is good to understand what this load > value is showing. > > There is plenty of people that has explained this in a better way than > I’m able to (This is one example: > http://en.wikipedia.org/wiki/Load_(computing)) > , but still I > will give you my very simplified understanding. > > The load is number of tasks in the runque. In my head, to utilize your > resources perfectly, the value 1 for single CPU would be good, since > than there should be minimal delay, but still there is always > something to do for the CPU. If the value are > 1 for a single cpu, > than there will be wait time for tasks to be done. This is not > necessary an issue, depending on what the machine is used for, and the > world is not perfect, so this will not always be the same. Therefor it > also is an average value we are monitoring. A long que for a short > time is normal and the reason we have ques. Problem is if the que over > time is longer than the cpu can process giving delay and degraded > performance. Again, what is acceptable for one machine is depending on > the tasks it shall do. > > *From:*xymon-bounces at xymon.com [mailto:xymon-bounces at xymon.com] *On > Behalf Of *Novosielski, Ryan > *Sent:* 7. april 2013 23:27 > *To:* 'operaciones at corpresa.com' > *Cc:* 'xymon at xymon.com' > *Subject:* Re: [Xymon] Fwd: About CPU load > > Others may have some ideas. I think no, just set it too low (I use the > default value to start generally) and wait for it to get annoying and > raise it accordingly. > > > *From*: Operaciones [mailto:operaciones at corpresa.com] > *Sent*: Sunday, April 07, 2013 12:22 PM > *To*: Novosielski, Ryan > *Cc*: 'xymon at xymon.com' > > *Subject*: Re: [Xymon] Fwd: About CPU load > > Thank you Ryan, one ask, are there eny way for calc this?, or you > suggest taht the better way is testing in each server? > > El 07/04/13 18:16, Novosielski, Ryan escribió: > > This default is a reasonably nice default for a single CPU system, > but this is really a parameter that is site-dependent. For > example, I have a 24 CPU compute server. A load of 5 is hardly > breaking a sweat. In some cases, high load doesn't even affect the > system and you wouldn't want to be notified until a normally > unreasonably high value. I'd suspect 10.0 15.0 for your system or > 15.0 20.0 might not be a bad guess. > > *From*: Operaciones [mailto:operaciones at corpresa.com] > *Sent*: Sunday, April 07, 2013 10:58 AM > *To*: Xymon List > *Subject*: [Xymon] Fwd: About CPU load > > I forget, the default params that appear in this file are: > > LOAD 5.0 10.0 > > > Thank you, best regards. > > -------- Mensaje original -------- > > *Asunto: * > > > > About CPU load > > *Fecha: * > > > > Sun, 07 Apr 2013 16:56:32 +0200 > > *De: * > > > > Operaciones > > > *Para: * > > > > xymon at xymon.com > > > > Hello, > > I'm using xymon 4.3.5, my as is the follow: > > Is correct the default params that appear on "analysis.cfg" for > chect the cpu load in case that the server have 4 cores (intel > xeon 1230)?, can i use this values for anyone CPU types? > > Thank you, best regards. > -------------- next part -------------- An HTML attachment was scrubbed... URL: From ralphmitchell at gmail.com Mon Apr 8 14:21:37 2013 From: ralphmitchell at gmail.com (Ralph Mitchell) Date: Mon, 8 Apr 2013 08:21:37 -0400 Subject: [Xymon] Fwd: About CPU load In-Reply-To: References: <6A34302C7B62B54EB77F697809EFC81E4122CF41F3@UMDEXMBX02.core.umdnj.edu> <51619D2F.5000802@corpresa.com> Message-ID: You can handle load spikes with the DURATION keyword in alerts.cfg. The client normally samples every 5 minutes, so if a spike generally lasts for two samples you could set DURATION>13 to get alerts sent out on the 3rd sample. Ralph Mitchell On Mon, Apr 8, 2013 at 4:36 AM, Iain M Conochie wrote: > On 2013-04-07 17:22, Operaciones wrote: > >> Thank you Ryan, one ask, are there eny way for calc this?, or you >> suggest taht the better way is testing in each server? >> > > Load average is a logarithmic method of measuring the run queue on your > system. The output of the 3 values gives you the run queue over 1 minute, 5 > minutes and 15 minutes respectively. > > An old rule of thumb was to have a load average of not greater than 2 per > cpu, but this is generally site dependent. Are you going to be sending out > alerts for a high load? Do you _really_ want to be woken at 2AM cos the > backup job has spiked the load? > > I would advise you set the threshold a bit higher for your system (perhaps > 8.0 and 16.0, based on 4 cores) and then after a suitable time period > (perhaps 2 weeks) you can look at the CPU load graph to see what kind of > usage the system has and adjust accordingly. During this time you probably > don't want to send out alerts (but perhaps you do; your call :) IMO, > normally a spike in load is not an issue, but a a system that over 6 months > has an ever increasing load is a problem. This is where the trends analysis > function comes into it's own. > > OF course load spikes can impact performance, but it is hard to gauge > exactly what that impact is from the load average alone. > > Cheers > > Iain > > > >> El 07/04/13 18:16, Novosielski, Ryan escribió: >> >> This default is a reasonably nice default for a single CPU system, >>> but this is really a parameter that is site-dependent. For example, >>> I have a 24 CPU compute server. A load of 5 is hardly breaking a >>> sweat. In some cases, high load doesn't even affect the system and >>> you wouldn't want to be notified until a normally unreasonably high >>> value. I'd suspect 10.0 15.0 for your system or 15.0 20.0 might not >>> be a bad guess. >>> >>> >>> >>> FROM: Operaciones [mailto:operaciones at corpresa.**com[1]] >>> SENT: Sunday, April 07, 2013 10:58 AM >>> TO: Xymon List [2] >>> SUBJECT: [Xymon] Fwd: About CPU load >>> >>> >>> I forget, the default params that appear in this file are: >>> >>> LOAD 5.0 10.0 >>> >>> Thank you, best regards. >>> >>> -------- Mensaje original -------- >>> >>> ASUNTO: >>> About CPU load >>> >>> FECHA: >>> >>> Sun, 07 Apr 2013 16:56:32 +0200 >>> >>> DE: >>> Operaciones [3] >>> >>> PARA: >>> xymon at xymon.com [4] >>> >>> >>> Hello, >>> >>> I'm using xymon 4.3.5, my as is the follow: >>> >>> Is correct the default params that appear on "analysis.cfg" for >>> chect the cpu load in case that the server have 4 cores (intel xeon >>> 1230)?, can i use this values for anyone CPU types? >>> >>> Thank you, best regards. >>> >> >> >> >> Links: >> ------ >> [1] mailto:operaciones at corpresa.**com >> [2] mailto:xymon at xymon.com >> [3] mailto:operaciones at corpresa.**com >> [4] mailto:xymon at xymon.com >> > > ______________________________**_________________ > Xymon mailing list > Xymon at xymon.com > http://lists.xymon.com/**mailman/listinfo/xymon > -------------- next part -------------- An HTML attachment was scrubbed... URL: From sholmes42 at gmail.com Mon Apr 8 15:15:09 2013 From: sholmes42 at gmail.com (Steve Holmes) Date: Mon, 8 Apr 2013 09:15:09 -0400 Subject: [Xymon] Fwd: About CPU load In-Reply-To: References: <6A34302C7B62B54EB77F697809EFC81E4122CF41F3@UMDEXMBX02.core.umdnj.edu> <51619D2F.5000802@corpresa.com> Message-ID: <141D934D-42F7-4737-B773-6705E5F8864C@gmail.com> We also have regular expected load spikes (e.g. When backups are running) and handle those with the TIME keyword on the LOAD line. Steve Wherever you go, there you are. On Apr 8, 2013, at 8:21 AM, Ralph Mitchell wrote: > You can handle load spikes with the DURATION keyword in alerts.cfg. The client normally samples every 5 minutes, so if a spike generally lasts for two samples you could set DURATION>13 to get alerts sent out on the 3rd sample. > > Ralph Mitchell > > > > On Mon, Apr 8, 2013 at 4:36 AM, Iain M Conochie wrote: >> On 2013-04-07 17:22, Operaciones wrote: >>> Thank you Ryan, one ask, are there eny way for calc this?, or you >>> suggest taht the better way is testing in each server? >> >> Load average is a logarithmic method of measuring the run queue on your system. The output of the 3 values gives you the run queue over 1 minute, 5 minutes and 15 minutes respectively. >> >> An old rule of thumb was to have a load average of not greater than 2 per cpu, but this is generally site dependent. Are you going to be sending out alerts for a high load? Do you _really_ want to be woken at 2AM cos the backup job has spiked the load? >> >> I would advise you set the threshold a bit higher for your system (perhaps 8.0 and 16.0, based on 4 cores) and then after a suitable time period (perhaps 2 weeks) you can look at the CPU load graph to see what kind of usage the system has and adjust accordingly. During this time you probably don't want to send out alerts (but perhaps you do; your call :) IMO, normally a spike in load is not an issue, but a a system that over 6 months has an ever increasing load is a problem. This is where the trends analysis function comes into it's own. >> >> OF course load spikes can impact performance, but it is hard to gauge exactly what that impact is from the load average alone. >> >> Cheers >> >> Iain >> >> >>> >>> El 07/04/13 18:16, Novosielski, Ryan escribió: >>> >>>> This default is a reasonably nice default for a single CPU system, >>>> but this is really a parameter that is site-dependent. For example, >>>> I have a 24 CPU compute server. A load of 5 is hardly breaking a >>>> sweat. In some cases, high load doesn't even affect the system and >>>> you wouldn't want to be notified until a normally unreasonably high >>>> value. I'd suspect 10.0 15.0 for your system or 15.0 20.0 might not >>>> be a bad guess. >>>> >>>> >>>> >>>> FROM: Operaciones [mailto:operaciones at corpresa.com [1]] >>>> SENT: Sunday, April 07, 2013 10:58 AM >>>> TO: Xymon List [2] >>>> SUBJECT: [Xymon] Fwd: About CPU load >>>> >>>> >>>> I forget, the default params that appear in this file are: >>>> >>>> LOAD 5.0 10.0 >>>> >>>> Thank you, best regards. >>>> >>>> -------- Mensaje original -------- >>>> >>>> ASUNTO: >>>> About CPU load >>>> >>>> FECHA: >>>> >>>> Sun, 07 Apr 2013 16:56:32 +0200 >>>> >>>> DE: >>>> Operaciones [3] >>>> >>>> PARA: >>>> xymon at xymon.com [4] >>>> >>>> >>>> Hello, >>>> >>>> I'm using xymon 4.3.5, my as is the follow: >>>> >>>> Is correct the default params that appear on "analysis.cfg" for >>>> chect the cpu load in case that the server have 4 cores (intel xeon >>>> 1230)?, can i use this values for anyone CPU types? >>>> >>>> Thank you, best regards. >>> >>> >>> >>> Links: >>> ------ >>> [1] mailto:operaciones at corpresa.com >>> [2] mailto:xymon at xymon.com >>> [3] mailto:operaciones at corpresa.com >>> [4] mailto:xymon at xymon.com >> >> _______________________________________________ >> Xymon mailing list >> Xymon at xymon.com >> http://lists.xymon.com/mailman/listinfo/xymon > > _______________________________________________ > Xymon mailing list > Xymon at xymon.com > http://lists.xymon.com/mailman/listinfo/xymon -------------- next part -------------- An HTML attachment was scrubbed... URL: From g.fer.ordas at unicyber.co.uk Mon Apr 8 21:41:09 2013 From: g.fer.ordas at unicyber.co.uk (Gonzalo Fernandez Ordas) Date: Mon, 08 Apr 2013 20:41:09 +0100 Subject: [Xymon] Xymon -- Page Refresh In-Reply-To: References: <515E88CB.9000508@unicyber.co.uk> Message-ID: <51631D55.8090305@unicyber.co.uk> Hi Larry Yes, I was having a look at that, but that affects all the pages, as you said it is a template so that is then something I should about as the change will affect to every single setup... many thanks On 05/04/2013 15:40, Larry Barber wrote: > The refresh interval is set in the templates in the $XYMONHOME/web > directory: > > > > Since there are templates (often just symlinks) for just about every > page type you could change (or remove) the refresh interval base on > page type. > > Thanks, > Larry Barber > > > On Fri, Apr 5, 2013 at 3:18 AM, Gonzalo Fernandez Ordas > > wrote: > > Hi > > I am having a look at the possibility of changing the REFRESH for > the webpages, or to disable it!!! as 60 seconds for some webpages > it is too little when you got a big bunch of graphs, but changing > and hard-coding the template will impact on all the other pages as > well. > I also could not find the actual variable and I did not know where > to change it but hard-coding.. (Unless this has been compiled in > the cgi files..) > > Any thoughts around this at all? > > Many thanks for all your help. > > Gonzalo. > _______________________________________________ > Xymon mailing list > Xymon at xymon.com > http://lists.xymon.com/mailman/listinfo/xymon > > -------------- next part -------------- An HTML attachment was scrubbed... URL: From lebarber at gmail.com Mon Apr 8 22:08:08 2013 From: lebarber at gmail.com (Larry Barber) Date: Mon, 8 Apr 2013 15:08:08 -0500 Subject: [Xymon] [solved]use "Files" status for noob In-Reply-To: <20130407133503.7c988736@roland.bulot-fr.com> References: <20130404194326.6760b783@roland.bulot-fr.com> <20130405184828.44de93b5@roland.bulot-fr.com> <20130407133503.7c988736@roland.bulot-fr.com> Message-ID: You will also need an entry in the analysis.cfg file Thanks, Larry Barber On Sun, Apr 7, 2013 at 6:35 AM, wrote: > Le Fri, 5 Apr 2013 15:11:35 -0400, > "Mike Burger" a écrit : > > > [hostname] (as it appears in hosts.cfg) > > file:/path/to/file > > log:/var/log/messages:1024 (Or whatever the default syslog is for > > your installation) > > Yes ! it's because i didn't respect that it must have these 2 lines : > file: > log: > > > thanks ! > _______________________________________________ > Xymon mailing list > Xymon at xymon.com > http://lists.xymon.com/mailman/listinfo/xymon > -------------- next part -------------- An HTML attachment was scrubbed... URL: From cleaver at terabithia.org Tue Apr 9 00:43:15 2013 From: cleaver at terabithia.org (cleaver at terabithia.org) Date: Mon, 8 Apr 2013 22:43:15 -0000 (UTC) Subject: [Xymon] Xymon -- Page Refresh In-Reply-To: <51631D55.8090305@unicyber.co.uk> References: <515E88CB.9000508@unicyber.co.uk> <51631D55.8090305@unicyber.co.uk> Message-ID: <52070.199.91.139.248.1365460995.squirrel@mail.kkytbs.net> I'm not sure if it's documented, but you can create special headers for specific pages. xymongen checks in sequence, working its way back up a page/subpage hierarchy even, before using the 'web/stdnormal_header'. For a subpage of foo/bar/meh: open("/usr/share/xymon/server/web/foo_bar_meh_header", O_RDONLY) = -1 ENOENT (No such file or directory) open("/usr/share/xymon/server/web/foo_bar_header", O_RDONLY) = -1 ENOENT (No such file or directory) open("/usr/share/xymon/server/web/foo_header", O_RDONLY) = -1 ENOENT (No such file or directory) open("/usr/share/xymon/server/web/stdnormal_header", O_RDONLY) = 4 HTH, -jc > Hi Larry > > Yes, I was having a look at that, but that affects all the pages, as you > said it is a template so that is then something I should about as the > change will affect to every single setup... > > many thanks > > > On 05/04/2013 15:40, Larry Barber wrote: >> The refresh interval is set in the templates in the $XYMONHOME/web >> directory: >> >> >> >> Since there are templates (often just symlinks) for just about every >> page type you could change (or remove) the refresh interval base on >> page type. >> >> Thanks, >> Larry Barber >> >> >> On Fri, Apr 5, 2013 at 3:18 AM, Gonzalo Fernandez Ordas >> > wrote: >> >> Hi >> >> I am having a look at the possibility of changing the REFRESH for >> the webpages, or to disable it!!! as 60 seconds for some webpages >> it is too little when you got a big bunch of graphs, but changing >> and hard-coding the template will impact on all the other pages as >> well. >> I also could not find the actual variable and I did not know where >> to change it but hard-coding.. (Unless this has been compiled in >> the cgi files..) >> >> Any thoughts around this at all? >> >> Many thanks for all your help. >> >> Gonzalo. >> _______________________________________________ >> Xymon mailing list >> Xymon at xymon.com >> http://lists.xymon.com/mailman/listinfo/xymon >> >> > > _______________________________________________ > Xymon mailing list > Xymon at xymon.com > http://lists.xymon.com/mailman/listinfo/xymon > From betsy.schwartz at gmail.com Tue Apr 9 20:19:34 2013 From: betsy.schwartz at gmail.com (Betsy Schwartz) Date: Tue, 9 Apr 2013 14:19:34 -0400 Subject: [Xymon] PROCS not monitored correctly -what is wrong with this picture?? (Find the error!) (LONG) Message-ID: My apologies to anyone who gets this on a digest I'm having some odd issues with procs on a database cluster and I would be very grateful for any clues! We have multiple rule sets to cut down on multiple alerts for shared disk, and because some have more capacity db0-db6 are Solaris 10 servers (there is no db8) running xymon 4.3.10 db11-db62 are RHEL Linux running a mix of xymon 4.3.10 and 4.3.7 server is a RHEL VM running xymon 4.3.10 Procs have been screwey for a while, but we only noticed when we added rngd testing to the linux boxes db1, db2, db3, db6 are alerting for missing rngd . db0, db4 and db5 are NOT (this is particularly puzzling since db5&db6 share a rule set, as do db0 and db1. I'd expect them to go as pairs. db1, db2, db3, and db6 all show: [image: green] cron (found 1, req. 1 or more)[image: green] nscd (found 1, req. 1 or more)[image: green] xntpd (found 1, req. 1 or more)[image: green] cron (found 1, req. 1 or more)[image: green] nscd (found 1, req. 1 or more)[image: green] ntpd (found 1, req. 1 or more)[image: yellow] rngd (found 0, req. 1 or more)[image: green] cron (found 1, req. 1 or more) db0, db4 and db5 all show: [image: green] cron (found 1, req. 1 or more)[image: green] nscd (found 1, req. 1 or more)[image: green] xntpd (found 1, req. 1 or more)[image: green] cron (found 1, req. 1 or more) That last cron comes from a HOST=* rule atthe end. Can you find what is wrong with the lines below? #-------------------#Database Servers HOST=%^db[0|1].example.com MEMPHYS 100 101 MEMSWAP 85 95 PROC cron 1 -1 yellow PROC nscd 1 -1 yellow PROC xntpd 1 -1 yellow # PROC sar -1 4 yellow LOAD 80.0 120.0 DISK /oracle/dba_msc_nfs2 101 101 DISK /oracle/data09 99 99 DISK /oracle/data10 97 98 DISK /oracle/data17 96 97 DISK /oracle/data22 98 99 DISK %.*archivelogs.* 90 95 DISK %.*redologs.* 90 95 DISK %.*data.* 95 96 LOG /export/home/xymon/client/tmp/powermt.out %degraded COLOR=yellow HOST=%^db[2|3|4|8].example.com UP 30m 9999d MEMPHYS 100 101 MEMSWAP 85 95 # LOAD 48.0 64.0 LOAD 80.0 120.0 PROC cron 1 -1 yellow PROC nscd 1 -1 yellow PROC xntpd 1 -1 yellow # PROC sar -1 4 yellow DISK %.*data.* IGNORE DISK %.*oracle.* IGNORE DISK %.*redologs.* IGNORE DISK %.* 80 90 LOG /export/home/xymon/client/tmp/powermt.out %degraded COLOR=yellow HOST=%^db[5|6].example.com UP 30m 9999d MEMPHYS 100 101 MEMSWAP 85 95 LOAD 160.0 240.0 DISK /oracle/export02 90 95 DISK %.*oracle.* IGNORE DISK %.* 80 90 PROC cron 1 -1 yellow PROC nscd 1 -1 yellow PROC xntpd 1 -1 yellow # PROC sar -1 4 yellow LOG /export/home/xymon/client/tmp/powermt.out %degraded COLOR=yellow HOST=%^db[11|12|13|21|22|23|31|32|33|61|62].bo3.* UP 30m 9999d MEMPHYS 100 101 MEMSWAP 85 95 LOAD 64.0 128.0 PROC cron 1 -1 yellow PROC nscd 1 -1 yellow PROC ntpd 1 -1 yellow PROC rngd 1 -1 yellow (there are usually more LOG lines but I removed them for clarity, and verified that the errors persist) -------------- next part -------------- An HTML attachment was scrubbed... URL: From betsy.schwartz at gmail.com Tue Apr 9 20:28:09 2013 From: betsy.schwartz at gmail.com (Betsy Schwartz) Date: Tue, 9 Apr 2013 14:28:09 -0400 Subject: [Xymon] PROCS not monitored correctly -what is wrong with this picture?? (Find the error!) (LONG) In-Reply-To: References: Message-ID: heh and as soon as I sent that whole LONG thing, someone on my team points out a clue which leads to HOST=%^db[11|12|13|21|22|23|31|32|33|61|62].bo3.* which is of course not a well-formed regexp. I dont' see why it would match db1.bo3.example.com, but it's certainly mucked up. -------------- next part -------------- An HTML attachment was scrubbed... URL: From lebarber at gmail.com Tue Apr 9 20:34:00 2013 From: lebarber at gmail.com (Larry Barber) Date: Tue, 9 Apr 2013 13:34:00 -0500 Subject: [Xymon] PROCS not monitored correctly -what is wrong with this picture?? (Find the error!) (LONG) In-Reply-To: References: Message-ID: Yes all of your "or" expressions should be in parenthesis, not brackets, what you're saying with the brackets is "match any character contained within the brackets", so the '|' isn't being interpreted as an "or" but just as a pipe character to match. So the regular expression ^db[11|12|12 ...] is saying "match any phrase that starts with db and has 1 or 1 or | or 1 or 2 ... as a second character, so db1.bo3.example.com certainly matches. Thanks, Larry Barber On Tue, Apr 9, 2013 at 1:28 PM, Betsy Schwartz wrote: > heh and as soon as I sent that whole LONG thing, someone on my team points > out a clue which leads to > HOST=%^db[11|12|13|21|22|23|31|32|33|61|62].bo3.* > > which is of course not a well-formed regexp. I dont' see why it would > match db1.bo3.example.com, but it's certainly mucked up. > > _______________________________________________ > Xymon mailing list > Xymon at xymon.com > http://lists.xymon.com/mailman/listinfo/xymon > > -------------- next part -------------- An HTML attachment was scrubbed... URL: From betsy.schwartz at gmail.com Wed Apr 10 00:57:00 2013 From: betsy.schwartz at gmail.com (Betsy Schwartz) Date: Tue, 9 Apr 2013 18:57:00 -0400 Subject: [Xymon] PROCS not monitored correctly -what is wrong with this picture?? (Find the error!) (LONG) In-Reply-To: References: Message-ID: Yep, thanks again. I fixed the regexp, but I also hadn't realized that "|" is not a special character within brackets, so I fixed it to the not-really-correct but working: HOST=%^db[1|2|3|6][1|2|3].bo3.* which works but has extraneous characters, it should be: HOST=%^db[1236][123].bo3.* or to get exactly what I had before: HOST=%^db(11|12|13|21|22|23|31|32|33|61|62).bo3.* Although for our particular purposes I could also just do: HOST=%^db[1-6][0-9].bo3.* since that matches all the present and future dbN.bo3 hosts except db0-db9 , which are special educational day! HOST=%^db[11|12|13|21|22|23|31|32|33|61|62].bo3.* >> > -------------- next part -------------- An HTML attachment was scrubbed... URL: From Phil.Crooker at orix.com.au Wed Apr 10 03:47:31 2013 From: Phil.Crooker at orix.com.au (Phil Crooker) Date: Wed, 10 Apr 2013 11:47:31 +1000 Subject: [Xymon] vim config parser Message-ID: <51655153020000C0000CE7A7@vho64pn04.orix.com.au> Has anyone done a vim syntax file for xymon config files? I'm starting to look into it, but just wondering if anyone has done the work? A syntax file is the bit that colourises the syntactic elements of a language - eg bash or perl. If you are curious as well: http://vimdoc.sourceforge.net/htmldoc/syntax.html cheers, Phil -------------- next part -------------- An HTML attachment was scrubbed... URL: From Nick at Pettefar.com Wed Apr 10 12:48:51 2013 From: Nick at Pettefar.com (Nick Pettefar) Date: Wed, 10 Apr 2013 11:48:51 +0100 Subject: [Xymon] /etc/passwd Monitoring of Solaris Xymon Clients Message-ID: Is there an established way of monitoring for /etc/passwd entriy changes/additions on Solaris servers? If not, is it possible to add it as a log to be fetched and then do some processing on the Xymon server? Regards, Nick Pettefar From henrik at hswn.dk Wed Apr 10 13:18:41 2013 From: henrik at hswn.dk (henrik at hswn.dk) Date: Wed, 10 Apr 2013 13:18:41 +0200 Subject: [Xymon] /etc/passwd Monitoring of Solaris Xymon Clients In-Reply-To: References: Message-ID: On Wed, 10 Apr 2013 11:48:51 +0100, Nick Pettefar wrote: > Is there an established way of monitoring for /etc/passwd entriy > changes/additions on Solaris servers? If it is not supposed to change, then you can check an MD5 or SHA1 hash of the file matches. See the "FILE" check in analysis.cfg http://www.xymon.com/xymon/help/manpages/man5/analysis.cfg.5.html#lbAK http://www.xymon.com/xymon/help/manpages/man5/client-local.cfg.5.html#lbAI The "xymondigest" tool can calculate the hash for you, if the system doesn't have a pre-installed MD5/SHA1 hash tool installed. Regards, Henrik From Mark.Deiss at xerox.com Wed Apr 10 14:45:34 2013 From: Mark.Deiss at xerox.com (Deiss, Mark) Date: Wed, 10 Apr 2013 12:45:34 +0000 Subject: [Xymon] Feature request: add description in hosts.cfg for conn multiple IP entry In-Reply-To: References: Message-ID: <5423B232CA65934E965B64588ED5D5EB06900C32@USA7109MB015.na.xerox.net> Maybe this is supported(?) or someone has a hack available: Would like to see support for a displayed description field for the hosts.cfg conn declaration for cases where there are multiple IPs. When there are a multiple IPs being tested on a given host, it can be a bit confusing figuring out what a particular failing IP is associated with. Ideally the description would show up in the status report to help identify the IP's purpose. For example in the hosts.cfg file: 1.2.3.1 main-host1 # conn=worst,1.2.4.10 (ILO address), 1.2.5.20 (PA-RISC Console port), 1.2.3.2 (Web Server Business Portal), 1.2.3.3 (Web Server https Business Portal), 1.2.3.4 (Oracle Listener/databases connections)...... In web status page: 1.2.3.1 is alive (1ms) 1.2.4.10 is alive (3 ms) ILO address 1.2.5.20 is alive (3 ms) PA-RISC Console port 1.2.3.2 is alive (1 ms) Web Server Business Portal 1.2.3.3 is unreachable Web Server https Business Portal 1.2.3.4 is alive (1 ms) Oracle Listener/databases connections The secondary IPs can be declared as separate entries in the hosts.cfg but that can lead to display "bloat". Even using the separate entries, there is still no user-friendly detail in the status messages on what is being tested. group-compress Operations 1.2.3.1 main-host1 # conn .... ... Group-compress ILO ports 1.2.4.10 main-host1 # conn .... Group-compress Console ports 1.2.5.20 main-host1 # conn .... Group-compress Web Servers ports 1.2.3.2 main-host1 # conn=worst,1.2.3.3 (so if the .3 address ip is unreachable, you don't know what the business impact is from just looking at the web status display) .... From Michael.Beatty at sherwin.com Wed Apr 10 16:27:43 2013 From: Michael.Beatty at sherwin.com (Michael Beatty) Date: Wed, 10 Apr 2013 10:27:43 -0400 Subject: [Xymon] Checking disk space on a "backup" system Message-ID: <516576DF.6060905@sherwin.com> All of the hosts that I will be monitoring have a backup. This backup is, for most all practical purposes, idle. It does nothing but sits and wait for someone to move it into production. The primary system copies files and database exports over to this backup system. I had no intention on running a Xymon client on these backup systems (though one would be installed and waiting to be started), the only monitoring is a ping test. With that said, one exposure that exists on these backup systems is that the disk space in the file system has the potential to fill up. Is there any functionality built into xymon that would let me check the disk space on this remote system and report it back from the primary system? My initial thought was to write an extension script that does an 'rsh backup du /home/user/' and parsing the results and test against a threshold, but I would prefer to utilize what is built into xymon before recreating the wheel. Thanks -- Michael Beatty From steve.anderson at bipsolutions.com Wed Apr 10 17:09:22 2013 From: steve.anderson at bipsolutions.com (Steve Anderson) Date: Wed, 10 Apr 2013 16:09:22 +0100 Subject: [Xymon] Checking disk space on a "backup" system In-Reply-To: <516576DF.6060905@sherwin.com> References: <516576DF.6060905@sherwin.com> Message-ID: <301D3D51AC1B13438C91BBC951ED471F0284BC58@PEMEXMBX14.jellyfishnet.co.uk.local> You could always grab a copy of xymonclient.sh and xymonclient-linux.sh and adjust the information gathering parts to run everything over ssh (never rsh. Authentication and encryption for ftw) Just hardwire the xymonclient.sh to send the details as the server you're monitoring. Steve Anderson -----Original Message----- From: xymon-bounces at xymon.com [mailto:xymon-bounces at xymon.com] On Behalf Of Michael Beatty Sent: 10 April 2013 15:28 To: xymon at xymon.com Subject: [Xymon] Checking disk space on a "backup" system All of the hosts that I will be monitoring have a backup. This backup is, for most all practical purposes, idle. It does nothing but sits and wait for someone to move it into production. The primary system copies files and database exports over to this backup system. I had no intention on running a Xymon client on these backup systems (though one would be installed and waiting to be started), the only monitoring is a ping test. With that said, one exposure that exists on these backup systems is that the disk space in the file system has the potential to fill up. Is there any functionality built into xymon that would let me check the disk space on this remote system and report it back from the primary system? My initial thought was to write an extension script that does an 'rsh backup du /home/user/' and parsing the results and test against a threshold, but I would prefer to utilize what is built into xymon before recreating the wheel. Thanks -- Michael Beatty _______________________________________________ Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon BiP Solutions Limited is a company registered in Scotland with Company Number SC086146 and VAT number 383030966 and having its registered office at Medius, 60 Pacific Quay, Glasgow, G51 1DZ. In order to improve the quality of the service we offer, calls may be recorded for quality management and training purposes. **************************************************************************** This e-mail (and any attachment) is intended only for the attention of the addressee(s). Its unauthorised use, disclosure, storage or copying is not permitted. If you are not the intended recipient, please destroy all copies and inform the sender by return e-mail. This e-mail (whether you are the sender or the recipient) may be monitored, recorded and retained by BiP Solutions Ltd. E-mail monitoring/ blocking software may be used, and e-mail content may be read at any time.You have a responsibility to ensure laws are not broken when composing or forwarding e-mails and their contents. **************************************************************************** From mailinglists at websitemanagers.com.au Wed Apr 10 17:26:47 2013 From: mailinglists at websitemanagers.com.au (Adam Goryachev) Date: Thu, 11 Apr 2013 01:26:47 +1000 Subject: [Xymon] Checking disk space on a "backup" system In-Reply-To: <516576DF.6060905@sherwin.com> References: <516576DF.6060905@sherwin.com> Message-ID: <516584B7.8020302@websitemanagers.com.au> On 11/04/13 00:27, Michael Beatty wrote: > All of the hosts that I will be monitoring have a backup. This backup > is, for most all practical purposes, idle. It does nothing but sits > and wait for someone to move it into production. The primary system > copies files and database exports over to this backup system. I had > no intention on running a Xymon client on these backup systems (though > one would be installed and waiting to be started), the only monitoring > is a ping test. > > With that said, one exposure that exists on these backup systems is > that the disk space in the file system has the potential to fill up. > Is there any functionality built into xymon that would let me check > the disk space on this remote system and report it back from the > primary system? > > My initial thought was to write an extension script that does an 'rsh > backup du /home/user/' and parsing the results and test against a > threshold, but I would prefer to utilize what is built into xymon > before recreating the wheel. Just mount the backup FS onto the live machine? Use sshfs, NFS, or whatever else is convenient. Make sure xymon is configured to report this type of remote mounted filesystems (I think the default is to not check remote mounts). Personally, I'd prefer to install an actual xymon client, and monitor the backup machine fully to ensure that it will be fully operational when you need it. Nothing worse than having a problem on the live server, and then find the backup machine died last week but is still pingable, or whatever. Just consider Murphy's Law, it will fail in the worst possible way, at the worst possible time. (Or whatever he actually said). Oh, going back to your original question... Adjust the xymonclient to call a local script instead of /usr/bin/df or whatever. Make that script call the local /usr/bin/df, as well as collect the data from the backup machine. Prepend "backup" to all device names and mountpoints on the backup server, and then combine the local and remote data together. This allows you to differentiate the backup system within xymon (ie, 75% full for production and 90% full for backup systems, etc). Hope one of the above helps.... Regards, Adam -- Adam Goryachev Website Managers www.websitemanagers.com.au From bewhite at fellowes.com Wed Apr 10 17:49:14 2013 From: bewhite at fellowes.com (White, Bruce) Date: Wed, 10 Apr 2013 10:49:14 -0500 Subject: [Xymon] Feature request: add description in hosts.cfg for conn multiple IP entry Message-ID: <1ABE07FDD59C3943B32FC5FBD5507466020586D5@vmmsitmx01.fellowes-na.com> Use the COMMENT keyword in your hosts.cfg entry and it will display on the web page.   Bruce White Senior Enterprise Systems Engineer | Phone: 1-630-671-5169 | Fax: 630-893-1648 | bewhite at fellowes.com | http://www.fellowes.com/       Disclaimer: The information contained in this message may be privileged and confidential and protected from disclosure. If the reader of this message is not the intended recipient or an employee or agent responsible for delivering this message to the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited. If you have received this communication in error, please notify us immediately by replying to the message and deleting it from your computer. Thank you. Fellowes, Inc.   -----Original Message----- From: xymon-bounces at xymon.com [mailto:xymon-bounces at xymon.com] On Behalf Of Deiss, Mark Sent: Wednesday, April 10, 2013 7:46 AM To: xymon Subject: [Xymon] Feature request: add description in hosts.cfg for conn multiple IP entry Maybe this is supported(?) or someone has a hack available: Would like to see support for a displayed description field for the hosts.cfg conn declaration for cases where there are multiple IPs. When there are a multiple IPs being tested on a given host, it can be a bit confusing figuring out what a particular failing IP is associated with. Ideally the description would show up in the status report to help identify the IP's purpose. For example in the hosts.cfg file: 1.2.3.1 main-host1 # conn=worst,1.2.4.10 (ILO address), 1.2.5.20 (PA-RISC Console port), 1.2.3.2 (Web Server Business Portal), 1.2.3.3 (Web Server https Business Portal), 1.2.3.4 (Oracle Listener/databases connections)...... In web status page: 1.2.3.1 is alive (1ms) 1.2.4.10 is alive (3 ms) ILO address 1.2.5.20 is alive (3 ms) PA-RISC Console port 1.2.3.2 is alive (1 ms) Web Server Business Portal 1.2.3.3 is unreachable Web Server https Business Portal 1.2.3.4 is alive (1 ms) Oracle Listener/databases connections The secondary IPs can be declared as separate entries in the hosts.cfg but that can lead to display "bloat". Even using the separate entries, there is still no user-friendly detail in the status messages on what is being tested. group-compress Operations 1.2.3.1 main-host1 # conn .... ... Group-compress ILO ports 1.2.4.10 main-host1 # conn .... Group-compress Console ports 1.2.5.20 main-host1 # conn .... Group-compress Web Servers ports 1.2.3.2 main-host1 # conn=worst,1.2.3.3 (so if the .3 address ip is unreachable, you don't know what the business impact is from just looking at the web status display) .... _______________________________________________ Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon From bewhite at fellowes.com Wed Apr 10 17:51:21 2013 From: bewhite at fellowes.com (White, Bruce) Date: Wed, 10 Apr 2013 10:51:21 -0500 Subject: [Xymon] Scaling In-Reply-To: <1365194021.4481.29.camel@aragorn> References: <515F1070.1040000@baywinds.org> <1365194021.4481.29.camel@aragorn> Message-ID: <1ABE07FDD59C3943B32FC5FBD5507466020586D6@vmmsitmx01.fellowes-na.com> Over 1000 devices monitored here and only real issue is rrd keeping up. I have been told an ssd for the rrd files will solve this issue.   Bruce White Senior Enterprise Systems Engineer | Phone: 1-630-671-5169 | Fax: 630-893-1648 | bewhite at fellowes.com | http://www.fellowes.com/       Disclaimer: The information contained in this message may be privileged and confidential and protected from disclosure. If the reader of this message is not the intended recipient or an employee or agent responsible for delivering this message to the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited. If you have received this communication in error, please notify us immediately by replying to the message and deleting it from your computer. Thank you. Fellowes, Inc.   -----Original Message----- From: xymon-bounces at xymon.com [mailto:xymon-bounces at xymon.com] On Behalf Of Olivier AUDRY Sent: Friday, April 05, 2013 3:34 PM To: Larry Barber Cc: xymon at xymon.com Subject: Re: [Xymon] Scaling hello 15 000 devices here. For me the key is ssd :) I plan to monitore 60 000 devices with xymon. Only network devices. We'll see the result. oau Le vendredi 05 avril 2013 à 13:54 -0500, Larry Barber a écrit : > Well, I'm monitoring ~2000 hosts on a fairly modest box (8 3Ghz cores, > 8 GB of memory). I'm also running quite a few cpu intensive scripts on > the same box that could be easily moved to another host, if needed. I > do the network testing on separate hosts in each of our major security > zones, for reliability of the tests more than to unload the main Xymon > server. The main server is not operating anywhere near its capacity, > it's using less than 10% (physical) of it's memory and the load > average tends to stay around 1. I suspect that the box could handle > 5000 hosts without too much trouble, maybe more. > > > If you do have scaling problems there are some things you can do, > though. Move things like the network tests to separate hosts. You can > also move the alerting to a different host using xymonproxy. I've > found that the most likely limit you're likely to hit with Xymon is > disk i/o, this can be helped by moving the data directory to SAN. > > > Thanks, > Larry Barber > > > On Fri, Apr 5, 2013 at 12:57 PM, Bruce Ferrell > wrote: > Hi all, > > I've been doing systems monitoring for a very long time now... > I was early on with BB, used HP openview back in day day, blah > blah. > > Anyway, recently I've been told that in very large > installations (multi thousands of devices) things like zabbix > are the only thing(s) that will do. > > What are the groups thoughts on this? What ARE the scaling > limits of xymon and can they be overcome somehow? > _______________________________________________ > Xymon mailing list > Xymon at xymon.com > http://lists.xymon.com/mailman/listinfo/xymon > > > _______________________________________________ > Xymon mailing list > Xymon at xymon.com > http://lists.xymon.com/mailman/listinfo/xymon _______________________________________________ Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon From Mark.Deiss at xerox.com Wed Apr 10 18:28:20 2013 From: Mark.Deiss at xerox.com (Deiss, Mark) Date: Wed, 10 Apr 2013 16:28:20 +0000 Subject: [Xymon] Feature request: add description in hosts.cfg for conn multiple IP entry In-Reply-To: <1ABE07FDD59C3943B32FC5FBD5507466020586D5@vmmsitmx01.fellowes-na.com> References: <1ABE07FDD59C3943B32FC5FBD5507466020586D5@vmmsitmx01.fellowes-na.com> Message-ID: <5423B232CA65934E965B64588ED5D5EB06900D15@USA7109MB015.na.xerox.net> Thanks I will play around with that. I have already written an external server-side script that I am testing out now. -----Original Message----- From: White, Bruce [mailto:bewhite at fellowes.com] Sent: Wednesday, April 10, 2013 11:49 AM To: Deiss, Mark; xymon Subject: RE: [Xymon] Feature request: add description in hosts.cfg for conn multiple IP entry Use the COMMENT keyword in your hosts.cfg entry and it will display on the web page.   Bruce White Senior Enterprise Systems Engineer | Phone: 1-630-671-5169 | Fax: 630-893-1648 | bewhite at fellowes.com | http://www.fellowes.com/       Disclaimer: The information contained in this message may be privileged and confidential and protected from disclosure. If the reader of this message is not the intended recipient or an employee or agent responsible for delivering this message to the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited. If you have received this communication in error, please notify us immediately by replying to the message and deleting it from your computer. Thank you. Fellowes, Inc.   -----Original Message----- From: xymon-bounces at xymon.com [mailto:xymon-bounces at xymon.com] On Behalf Of Deiss, Mark Sent: Wednesday, April 10, 2013 7:46 AM To: xymon Subject: [Xymon] Feature request: add description in hosts.cfg for conn multiple IP entry Maybe this is supported(?) or someone has a hack available: Would like to see support for a displayed description field for the hosts.cfg conn declaration for cases where there are multiple IPs. When there are a multiple IPs being tested on a given host, it can be a bit confusing figuring out what a particular failing IP is associated with. Ideally the description would show up in the status report to help identify the IP's purpose. For example in the hosts.cfg file: 1.2.3.1 main-host1 # conn=worst,1.2.4.10 (ILO address), 1.2.5.20 (PA-RISC Console port), 1.2.3.2 (Web Server Business Portal), 1.2.3.3 (Web Server https Business Portal), 1.2.3.4 (Oracle Listener/databases connections)...... In web status page: 1.2.3.1 is alive (1ms) 1.2.4.10 is alive (3 ms) ILO address 1.2.5.20 is alive (3 ms) PA-RISC Console port 1.2.3.2 is alive (1 ms) Web Server Business Portal 1.2.3.3 is unreachable Web Server https Business Portal 1.2.3.4 is alive (1 ms) Oracle Listener/databases connections The secondary IPs can be declared as separate entries in the hosts.cfg but that can lead to display "bloat". Even using the separate entries, there is still no user-friendly detail in the status messages on what is being tested. group-compress Operations 1.2.3.1 main-host1 # conn .... ... Group-compress ILO ports 1.2.4.10 main-host1 # conn .... Group-compress Console ports 1.2.5.20 main-host1 # conn .... Group-compress Web Servers ports 1.2.3.2 main-host1 # conn=worst,1.2.3.3 (so if the .3 address ip is unreachable, you don't know what the business impact is from just looking at the web status display) .... _______________________________________________ Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon From cami at hack.co.za Wed Apr 10 22:09:21 2013 From: cami at hack.co.za (Cami Sardinha) Date: Wed, 10 Apr 2013 22:09:21 +0200 Subject: [Xymon] Scaling In-Reply-To: <1ABE07FDD59C3943B32FC5FBD5507466020586D6@vmmsitmx01.fellowes-na.com> References: <515F1070.1040000@baywinds.org> <1365194021.4481.29.camel@aragorn> <1ABE07FDD59C3943B32FC5FBD5507466020586D6@vmmsitmx01.fellowes-na.com> Message-ID: On Wed, Apr 10, 2013 at 5:51 PM, White, Bruce wrote: > Over 1000 devices monitored here and only real issue is rrd keeping up. I > have been told an ssd for the rrd files will solve this issue. > ~2000 hosts and that will double or triple in the next few weeks. I really don't see any IO issues in the slightest. 6 x 15k RPM SCSI drives in Raid 5 on a Dell PowerEdge 2950 with 8 gigs of ram and the thing is snoring (LA: 0.25) Regards, Cami -------------- next part -------------- An HTML attachment was scrubbed... URL: From jlaidman at rebel-it.com.au Thu Apr 11 02:49:53 2013 From: jlaidman at rebel-it.com.au (Jeremy Laidman) Date: Thu, 11 Apr 2013 10:49:53 +1000 Subject: [Xymon] Checking disk space on a "backup" system In-Reply-To: <516576DF.6060905@sherwin.com> References: <516576DF.6060905@sherwin.com> Message-ID: On 11 April 2013 00:27, Michael Beatty wrote: > My initial thought was to write an extension script that does an 'rsh > backup du /home/user/' and parsing the results and test against a > threshold, but I would prefer to utilize what is built into xymon before > recreating the wheel. > There's nothing within Xymon that supports this, without a client installation. As others have said, this might not be a bad idea anyway. Just have the client run and report its details. But if you don't want to do this... If you have snmp enabled on the server, you can get disk space using devmon, which is not part of Xymon, but a well-used add-on. You have identified one risk: that the disk fills up. But what about the risk that the backup copy process fails for another reason (account expires, rsh/ssh daemon stopped, out of inodes, etc). So you probably want to build some tests into your copy script and have it report success to Xymon. While you're at it, just get the "du" output and report that also. If you use a client message, you can report as little or as much info as you like. A status message would be required for the backup result: SERVERNAME=name.of.server REPORT=`backup_to_server $SERVERNAME` # calls backup function, which returns empty report if OK # report status if [ "$REPORT" ]; then printf "status $SERVERNAME.backup red `date` Backup to $SERVERNAME failed\n$REPORT\n" else printf "status $SERVERNAME.backup green `date` Backup to $SERVERNAME OK\n" fi | xymoncmd sh -c 'xymon $XYMSRV @' # report client data CLIENTDATA=`ssh $SERVERNAME 'echo "[uptime]"; uptime; echo "[df]"; df -Pl /home/usr; echo "[inode]"; df -Pil /home/usr'` printf "client $SERVERNAME.linux\n$CLIENTDATA\n" | xymoncmd sh -c 'xymon $XYMSRV @' J -------------- next part -------------- An HTML attachment was scrubbed... URL: From jlaidman at rebel-it.com.au Thu Apr 11 03:01:38 2013 From: jlaidman at rebel-it.com.au (Jeremy Laidman) Date: Thu, 11 Apr 2013 11:01:38 +1000 Subject: [Xymon] Feature request: add description in hosts.cfg for conn multiple IP entry In-Reply-To: <1ABE07FDD59C3943B32FC5FBD5507466020586D5@vmmsitmx01.fellowes-na.com> References: <1ABE07FDD59C3943B32FC5FBD5507466020586D5@vmmsitmx01.fellowes-na.com> Message-ID: On 11 April 2013 01:49, White, Bruce wrote: > Use the COMMENT keyword in your hosts.cfg entry and it will display on > the web page. > I think that's only per-host, and not per-IP. However, I wonder if the "route:" tag might be used to leverage the COMMENT keyword. You could define the other IP addresses as other hostnames, and then use the route: tag to bind them to the main host. Like so: 1.2.3.1 main-host1 # conn=worst,1.2.4.10,1.2.5.20,1.2.3.2,1.2.3.3,1.2.3.4 route:main-host1-ilo,main-host1-con,main-host1-wsbp,main-host-wshbp,main-host-ora 1.2.4.10 main-host1-ilo # "COMMENT:ILO address" 1.2.5.20 main-host1-con # "COMMENT:PA-RISC Console port" 1.2.3.2 main-host1-wsbp # "COMMENT:Web Server Business Portal" 1.2.3.3 main-host1-wshbp # "COMMENT:Web Server https Business Portal" 1.2.3.4 main-host1-ora # "COMMENT:Oracle Listener/databases" The key result from using the "route:" tag is (from the man page): "The status message will include information about the hosts in the router-list that are down". J -------------- next part -------------- An HTML attachment was scrubbed... URL: From dannyroberts.personal at googlemail.com Thu Apr 11 10:06:53 2013 From: dannyroberts.personal at googlemail.com (Danny Roberts) Date: Thu, 11 Apr 2013 09:06:53 +0100 Subject: [Xymon] Xymon Server in Debian Message-ID: Hi Folks, I am currently testing out Xymon and using Debian as both the server and client in my tests. I installed both xymon clients and the xymon server from the Debian repo rather than using the .deb from the xymon site or compiling from source. I have a couple of issues that may be Debian sepcific, I originally asked this question on the Debian forums ( http://forums.debian.net/viewtopic.php?f=5&t=103076) but got no response. 1. I created a user using "htpasswd" so that I could access the cgi sections of the web server, however I am never prompted for a username/password so still cannot access these sections. 2. I was looking for hosts.cfg to setup monitoring of diskspace and the like but the file does not exist under /etc/hobbit where I expected it. In-fact any file mentioned on this page does not seem to exist: http://xymon.com/xymon/help/xymon-config.html This second point in particular makes me think Debian is doing something odd with packaging and file names etc. Any help is greatly appreciated. -- Kind Regards Danny R Website: http://danny-roberts.info/ -------------- next part -------------- An HTML attachment was scrubbed... URL: From iain at shihad.org Thu Apr 11 10:50:10 2013 From: iain at shihad.org (Iain M Conochie) Date: Thu, 11 Apr 2013 09:50:10 +0100 Subject: [Xymon] Fwd: Re: Xymon Server in Debian Message-ID: On 2013-04-11 09:06, Danny Roberts wrote: > Hi Folks, > > I am currently testing out Xymon and using Debian as both the server > and client in my tests. I installed both xymon clients and the xymon > server from the Debian repo rather than using the .deb from the xymon > site or compiling from source. I have a couple of issues that may be > Debian sepcific, I originally asked this question on the Debian > forums > (http://forums.debian.net/viewtopic.php?f=5&t=103076 [1]) but got no > response. > > 1. I created a user using "htpasswd" so that I could access the cgi > sections of the web server, however I am never prompted for a > username/password so still cannot access these sections. How did you setup you apache installation for Xymon? Sounds like you need to add authentication config for apache here. > 2. I was looking for hosts.cfg to setup monitoring of diskspace and > the like but the file does not exist under /etc/hobbit where I > expected it. In-fact any file mentioned on this page does not seem to > exist: http://xymon.com/xymon/help/xymon-config.html [2] Have a look in /usr/lib/hobbit/. Under there you will see server for the server files and client for the client files > > This second point in particular makes me think Debian is doing > something odd with packaging and file names etc. Any help is greatly > appreciated.  Cheers Iain From spah at syntec.co.uk Thu Apr 11 13:30:20 2013 From: spah at syntec.co.uk (SebA) Date: Thu, 11 Apr 2013 12:30:20 +0100 Subject: [Xymon] Reverse DNS lookup check not working In-Reply-To: References: Message-ID: Thanks Jeremy, that's awesome. There were no examples for PTR on Xymon out there so this may help others too. It works and thanks for the explanation. Kind regards, SebA _____ From: Jeremy Laidman [mailto:jlaidman at rebel-it.com.au] Sent: 08 April 2013 02:32 To: SebA Cc: xymon Subject: Re: [Xymon] Reverse DNS lookup check not working On 8 April 2013 00:34, Jeremy Laidman wrote: I'm not in a position to check until tomorrow, but I'm confident that I successfully test for the localhost address like so DNS=PTR:1.0.0.127.in-addr.arpa I was wrong in the IP address that I test, but correct in the format and the fact that it works. You should be able to do PTR record checks by formatting in this "in-addr.arpa" format. An easy way to get this is from the output of "dig -x" which shows the question section in the "in-addr.arpa" format (and also in the answer section if it resolves). J -------------- next part -------------- An HTML attachment was scrubbed... URL: From spah at syntec.co.uk Thu Apr 11 13:46:46 2013 From: spah at syntec.co.uk (SebA) Date: Thu, 11 Apr 2013 12:46:46 +0100 Subject: [Xymon] Monitoring that iptables and SELinux are running / enabled Message-ID: Is there any code out there to monitor that (a) iptables is running (not just set to everything allowed) (b) SELinux is enabled I've looked on Xymonton, the Xymon archives and Google but not found anything. Obviously, checking that these are running is anywhere between nice and critical if one either has a server exposed to the Internet or need to pass regulatory security checks. The way I would ideally have liked these to work (but beggers can't be choosers!) is that the iptables check would work a bit like the port checks in analysis.cfg so one can check if particular rules are enabled (and the default policy on chains), and SELinux would also be monitored and configured in analysis.cfg with options to go yellow or red depending on the state of the enabled/disabled, permissive/enforcing and targeted/strict toggles. This then allows for sending alerts to managers if someone disables security measures on a server. Kind regards, SebA -------------- next part -------------- An HTML attachment was scrubbed... URL: From tlewick at apsaranetworks.com Thu Apr 11 14:59:52 2013 From: tlewick at apsaranetworks.com (taylor lewick) Date: Thu, 11 Apr 2013 07:59:52 -0500 Subject: [Xymon] Alert Recovery question Message-ID: <002b01ce36b4$75ae6660$610b3320$@com> Does Duration work with Recovered in alerts.cfg. Meaning, is there a way to tell xymon not to send the recovered message until the link/device/threshold is back to recovery level for at least some time, i.e. 1 or 5 minutes? Thanks, Taylor -------------- next part -------------- An HTML attachment was scrubbed... URL: From alias at kimber.net.au Thu Apr 11 15:27:26 2013 From: alias at kimber.net.au (Alias) Date: Thu, 11 Apr 2013 23:27:26 +1000 Subject: [Xymon] Custom Graphs Message-ID: <52BC2D40DC64E846A7404397F4C66E5F1806A7@server.kimber.net.au> Our weakness with xymon is forecasting disk trends. With the right thresholds I can be proactive in managing disk capacity however it's not possible to check the past 576days for hundreds of servers. Metric Reporting results are blank when selecting multiple hosts and disks however it does work for CPU but it compiles all results\servers into one graph . I would like to see disk trends of 200hosts display in 200graphs on the one page. Has anyone got any suggestions or "been there, done that" ? regards -------------- next part -------------- An HTML attachment was scrubbed... URL: From Paul.Root at CenturyLink.com Thu Apr 11 15:55:06 2013 From: Paul.Root at CenturyLink.com (Root, Paul T) Date: Thu, 11 Apr 2013 13:55:06 +0000 Subject: [Xymon] Alert Recovery question In-Reply-To: <002b01ce36b4$75ae6660$610b3320$@com> References: <002b01ce36b4$75ae6660$610b3320$@com> Message-ID: It didn't in our experience. We ended up taking a lot of Recovered keywords out, because of it. From: xymon-bounces at xymon.com [mailto:xymon-bounces at xymon.com] On Behalf Of taylor lewick Sent: Thursday, April 11, 2013 8:00 AM To: xymon at xymon.com Subject: [Xymon] Alert Recovery question Does Duration work with Recovered in alerts.cfg. Meaning, is there a way to tell xymon not to send the recovered message until the link/device/threshold is back to recovery level for at least some time, i.e. 1 or 5 minutes? Thanks, Taylor -------------- next part -------------- An HTML attachment was scrubbed... URL: From novosirj at umdnj.edu Thu Apr 11 16:03:12 2013 From: novosirj at umdnj.edu (Novosielski, Ryan) Date: Thu, 11 Apr 2013 10:03:12 -0400 Subject: [Xymon] Xymon Server in Debian In-Reply-To: Message-ID: <6A34302C7B62B54EB77F697809EFC81E4122CF4224@UMDEXMBX02.core.umdnj.edu> dpkg -L on an installed package name (and dpkg -l to get all packages in a one-per-line format) will tell you what files a package DID install. The CGI stuff is really an Apache question. But you might check the mailing list archives or re-read the documentation. Seems to me that the Apache config changes were documented pretty well. From: Danny Roberts [mailto:dannyroberts.personal at googlemail.com] Sent: Thursday, April 11, 2013 04:06 AM To: xymon at xymon.com Subject: [Xymon] Xymon Server in Debian Hi Folks, I am currently testing out Xymon and using Debian as both the server and client in my tests. I installed both xymon clients and the xymon server from the Debian repo rather than using the .deb from the xymon site or compiling from source. I have a couple of issues that may be Debian sepcific, I originally asked this question on the Debian forums (http://forums.debian.net/viewtopic.php?f=5&t=103076) but got no response. 1. I created a user using "htpasswd" so that I could access the cgi sections of the web server, however I am never prompted for a username/password so still cannot access these sections. 2. I was looking for hosts.cfg to setup monitoring of diskspace and the like but the file does not exist under /etc/hobbit where I expected it. In-fact any file mentioned on this page does not seem to exist: http://xymon.com/xymon/help/xymon-config.html This second point in particular makes me think Debian is doing something odd with packaging and file names etc. Any help is greatly appreciated. -- Kind Regards Danny R Website: http://danny-roberts.info/ -------------- next part -------------- An HTML attachment was scrubbed... URL: From ulric at siag.nu Thu Apr 11 16:39:24 2013 From: ulric at siag.nu (Ulric Eriksson) Date: Thu, 11 Apr 2013 16:39:24 +0200 Subject: [Xymon] Checking disk space on a "backup" system In-Reply-To: <516576DF.6060905@sherwin.com> References: <516576DF.6060905@sherwin.com> Message-ID: <5166CB1C.5070904@siag.nu> On 04/10/2013 04:27 PM, Michael Beatty wrote: > I had no > intention on running a Xymon client on these backup systems (though one > would be installed and waiting to be started), the only monitoring is a > ping test. Why not? It must be by far the easiest and most efficient solution, especially since the client is already installed. Ulric From Paul.Root at CenturyLink.com Thu Apr 11 17:20:32 2013 From: Paul.Root at CenturyLink.com (Root, Paul T) Date: Thu, 11 Apr 2013 15:20:32 +0000 Subject: [Xymon] FILE in analysis.cfg Message-ID: So I'm creating a log file that will only get updated about every 3 months. But I want to watch that and make sure that it does get updated every three months. That part is easy. But, the file is only for our Linux machines, not our Solaris machines. Is there a way to tell analysis that I want to look for this file, but if it doesn't exist, that's ok? Or is there something like CLASS but for machine type? Oh, and I'm also monitoring a handful of linux machines for others outside my group, that won't have this file. And if I just put in the FILE line, it's going to tag those machines with file doesn't exist, if I put it in HOST=*. And I don't really want to put it in, individually, for the 90+ machines I do have, and the ones I'm adding weekly. The vast majority of my machines do have a 3 character start, so I guess I could use those... Any better ideas? While, I'm at it, is mtime> only in seconds or can I put a 'd' modifier for days on the end of it? -------------- next part -------------- An HTML attachment was scrubbed... URL: From cleaver at terabithia.org Thu Apr 11 19:18:04 2013 From: cleaver at terabithia.org (cleaver at terabithia.org) Date: Thu, 11 Apr 2013 17:18:04 -0000 (UTC) Subject: [Xymon] Scaling In-Reply-To: References: <515F1070.1040000@baywinds.org> <1365194021.4481.29.camel@aragorn> <1ABE07FDD59C3943B32FC5FBD5507466020586D6@vmmsitmx01.fellowes-na.com> Message-ID: <24593.199.91.139.248.1365700684.squirrel@mail.kkytbs.net> > On Wed, Apr 10, 2013 at 5:51 PM, White, Bruce > wrote: > >> Over 1000 devices monitored here and only real issue is rrd keeping up. >> I >> have been told an ssd for the rrd files will solve this issue. >> > > > ~2000 hosts and that will double or triple in the next few weeks. I really > don't see any IO issues in the slightest. > 6 x 15k RPM SCSI drives in Raid 5 on a Dell PowerEdge 2950 with 8 gigs of > ram and the thing is snoring (LA: 0.25) > > Regards, > Cami We're currently processing ~2K incoming messages a second on a single xymond instance. This is a pretty beefy box, but it's also handling lots of other concurrent monitoring tasks that we're slowly moving over to xymon... including a non-fping-enabled Icinga install >.< ]# xymon localhost "xymondboard test=info fields=hostname" | wc -l 42459 (Not all of those are full hosts; some are application nodes with statuses being generated server-side out of client-side jvm stats or the like.) At these levels it's important to ensure you're using whatever NUMA capabilities your system has properly, since message passing is basically just shoveling incoming TCP data around within memory. Also, you might want to tweak net.ipv4.ip_local_port_range and enable net.ipv4.tcp_tw_reuse and/or net.ipv4.tcp_tw_recycle on Linux to eke more simultaneous testing out of xymonnet. One of the beauties of Xymon's architecture is the ability to cleanly disconnect the components... Xymongen can run on some other box, xymond_locator can be used to send rrd data off somewhere if IO becomes an issue, xymonnet pollers can be distributed, and xymonproxy can be used as needed to aggregate and smooth out incoming status reports, etc. There are lots of different mechanisms for "scaling" efficiently depending on your particular needs, but I'd bet that on decently modern server hardware you'll probably want to scale for HA purposes long before you actually /need/ the additional power. HTH, -jc -------------- next part -------------- A non-text attachment was scrubbed... Name: xymond-msgs-per-sec.gif Type: image/gif Size: 14082 bytes Desc: not available URL: From olivier at audry.fr Thu Apr 11 19:29:37 2013 From: olivier at audry.fr (Olivier AUDRY) Date: Thu, 11 Apr 2013 19:29:37 +0200 Subject: [Xymon] Scaling In-Reply-To: <24593.199.91.139.248.1365700684.squirrel@mail.kkytbs.net> References: <515F1070.1040000@baywinds.org> <1365194021.4481.29.camel@aragorn> <1ABE07FDD59C3943B32FC5FBD5507466020586D6@vmmsitmx01.fellowes-na.com> <24593.199.91.139.248.1365700684.squirrel@mail.kkytbs.net> Message-ID: <1365701377.4608.3.camel@aragorn> hello I impressed with your 2k incoming message. I only got 600 and we have a lot of gap in our trends. I suspect xymonproxy to add latency into the process or our huge and historical extra-rrd.pl We don't have load or iowait. I'm not sure that it could be network issue. So if you have an idee :) oau Le jeudi 11 avril 2013 à 17:18 +0000, cleaver at terabithia.org a écrit : > > On Wed, Apr 10, 2013 at 5:51 PM, White, Bruce > > wrote: > > > >> Over 1000 devices monitored here and only real issue is rrd keeping up. > >> I > >> have been told an ssd for the rrd files will solve this issue. > >> > > > > > > ~2000 hosts and that will double or triple in the next few weeks. I really > > don't see any IO issues in the slightest. > > 6 x 15k RPM SCSI drives in Raid 5 on a Dell PowerEdge 2950 with 8 gigs of > > ram and the thing is snoring (LA: 0.25) > > > > Regards, > > Cami > > > We're currently processing ~2K incoming messages a second on a single > xymond instance. This is a pretty beefy box, but it's also handling lots > of other concurrent monitoring tasks that we're slowly moving over to > xymon... including a non-fping-enabled Icinga install >.< > > ]# xymon localhost "xymondboard test=info fields=hostname" | wc -l > 42459 > > (Not all of those are full hosts; some are application nodes with statuses > being generated server-side out of client-side jvm stats or the like.) > > > At these levels it's important to ensure you're using whatever NUMA > capabilities your system has properly, since message passing is basically > just shoveling incoming TCP data around within memory. Also, you might > want to tweak net.ipv4.ip_local_port_range and enable > net.ipv4.tcp_tw_reuse and/or net.ipv4.tcp_tw_recycle on Linux to eke more > simultaneous testing out of xymonnet. > > > One of the beauties of Xymon's architecture is the ability to cleanly > disconnect the components... Xymongen can run on some other box, > xymond_locator can be used to send rrd data off somewhere if IO becomes an > issue, xymonnet pollers can be distributed, and xymonproxy can be used as > needed to aggregate and smooth out incoming status reports, etc. > > There are lots of different mechanisms for "scaling" efficiently depending > on your particular needs, but I'd bet that on decently modern server > hardware you'll probably want to scale for HA purposes long before you > actually /need/ the additional power. > > > HTH, > > -jc > _______________________________________________ Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon From olivier at audry.fr Thu Apr 11 20:40:14 2013 From: olivier at audry.fr (Olivier AUDRY) Date: Thu, 11 Apr 2013 20:40:14 +0200 Subject: [Xymon] Scaling In-Reply-To: <24593.199.91.139.248.1365700684.squirrel@mail.kkytbs.net> References: <515F1070.1040000@baywinds.org> <1365194021.4481.29.camel@aragorn> <1ABE07FDD59C3943B32FC5FBD5507466020586D6@vmmsitmx01.fellowes-na.com> <24593.199.91.139.248.1365700684.squirrel@mail.kkytbs.net> Message-ID: <1365705614.4608.8.camel@aragorn> hello can you gives us more information on your numa config ? As I understand I only see two node 1 per physical cpu numactl --hardware available: 2 nodes (0-1) node 0 size: 12097 MB node 0 free: 594 MB node 1 size: 12120 MB node 1 free: 12 MB node distances: node 0 1 0: 10 20 event I got 24 cpu. Multi core and hyperthreading. Is that correct ? As I can see my two node are full. Not good at all I guess. My policy is the default one. Perhaps you can advice a specific policy for a xymon setup ? numactl --show policy: default preferred node: current physcpubind: 0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 cpubind: 0 1 nodebind: 0 1 membind: 0 1 I'm looking into /proc/pid/numa_maps to find more info. If you can help it will be great :) thx oau Le jeudi 11 avril 2013 à 17:18 +0000, cleaver at terabithia.org a écrit : > > On Wed, Apr 10, 2013 at 5:51 PM, White, Bruce > > wrote: > > > >> Over 1000 devices monitored here and only real issue is rrd keeping up. > >> I > >> have been told an ssd for the rrd files will solve this issue. > >> > > > > > > ~2000 hosts and that will double or triple in the next few weeks. I really > > don't see any IO issues in the slightest. > > 6 x 15k RPM SCSI drives in Raid 5 on a Dell PowerEdge 2950 with 8 gigs of > > ram and the thing is snoring (LA: 0.25) > > > > Regards, > > Cami > > > We're currently processing ~2K incoming messages a second on a single > xymond instance. This is a pretty beefy box, but it's also handling lots > of other concurrent monitoring tasks that we're slowly moving over to > xymon... including a non-fping-enabled Icinga install >.< > > ]# xymon localhost "xymondboard test=info fields=hostname" | wc -l > 42459 > > (Not all of those are full hosts; some are application nodes with statuses > being generated server-side out of client-side jvm stats or the like.) > > > At these levels it's important to ensure you're using whatever NUMA > capabilities your system has properly, since message passing is basically > just shoveling incoming TCP data around within memory. Also, you might > want to tweak net.ipv4.ip_local_port_range and enable > net.ipv4.tcp_tw_reuse and/or net.ipv4.tcp_tw_recycle on Linux to eke more > simultaneous testing out of xymonnet. > > > One of the beauties of Xymon's architecture is the ability to cleanly > disconnect the components... Xymongen can run on some other box, > xymond_locator can be used to send rrd data off somewhere if IO becomes an > issue, xymonnet pollers can be distributed, and xymonproxy can be used as > needed to aggregate and smooth out incoming status reports, etc. > > There are lots of different mechanisms for "scaling" efficiently depending > on your particular needs, but I'd bet that on decently modern server > hardware you'll probably want to scale for HA purposes long before you > actually /need/ the additional power. > > > HTH, > > -jc > _______________________________________________ Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon From olivier at audry.fr Thu Apr 11 21:40:40 2013 From: olivier at audry.fr (Olivier AUDRY) Date: Thu, 11 Apr 2013 21:40:40 +0200 Subject: [Xymon] Scaling In-Reply-To: <1365705614.4608.8.camel@aragorn> References: <515F1070.1040000@baywinds.org> <1365194021.4481.29.camel@aragorn> <1ABE07FDD59C3943B32FC5FBD5507466020586D6@vmmsitmx01.fellowes-na.com> <24593.199.91.139.248.1365700684.squirrel@mail.kkytbs.net> <1365705614.4608.8.camel@aragorn> Message-ID: <1365709240.4608.9.camel@aragorn> hello as I understand I should run xymon on a single node to improve memory access latency. Right ? I will test this if I found the right command :) oau Le jeudi 11 avril 2013 à 20:40 +0200, Olivier AUDRY a écrit : > hello > > can you gives us more information on your numa config ? > > As I understand I only see two node 1 per physical cpu > > numactl --hardware > available: 2 nodes (0-1) > node 0 size: 12097 MB > node 0 free: 594 MB > node 1 size: 12120 MB > node 1 free: 12 MB > node distances: > node 0 1 > 0: 10 20 > > > event I got 24 cpu. Multi core and hyperthreading. Is that correct ? > > As I can see my two node are full. Not good at all I guess. > > My policy is the default one. Perhaps you can advice a specific policy > for a xymon setup ? > > numactl --show > policy: default > preferred node: current > physcpubind: 0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 > 23 > cpubind: 0 1 > nodebind: 0 1 > membind: 0 1 > > > I'm looking into /proc/pid/numa_maps to find more info. > > If you can help it will be great :) > > thx > > oau > > Le jeudi 11 avril 2013 à 17:18 +0000, cleaver at terabithia.org a écrit : > > > On Wed, Apr 10, 2013 at 5:51 PM, White, Bruce > > > wrote: > > > > > >> Over 1000 devices monitored here and only real issue is rrd keeping up. > > >> I > > >> have been told an ssd for the rrd files will solve this issue. > > >> > > > > > > > > > ~2000 hosts and that will double or triple in the next few weeks. I really > > > don't see any IO issues in the slightest. > > > 6 x 15k RPM SCSI drives in Raid 5 on a Dell PowerEdge 2950 with 8 gigs of > > > ram and the thing is snoring (LA: 0.25) > > > > > > Regards, > > > Cami > > > > > > We're currently processing ~2K incoming messages a second on a single > > xymond instance. This is a pretty beefy box, but it's also handling lots > > of other concurrent monitoring tasks that we're slowly moving over to > > xymon... including a non-fping-enabled Icinga install >.< > > > > ]# xymon localhost "xymondboard test=info fields=hostname" | wc -l > > 42459 > > > > (Not all of those are full hosts; some are application nodes with statuses > > being generated server-side out of client-side jvm stats or the like.) > > > > > > At these levels it's important to ensure you're using whatever NUMA > > capabilities your system has properly, since message passing is basically > > just shoveling incoming TCP data around within memory. Also, you might > > want to tweak net.ipv4.ip_local_port_range and enable > > net.ipv4.tcp_tw_reuse and/or net.ipv4.tcp_tw_recycle on Linux to eke more > > simultaneous testing out of xymonnet. > > > > > > One of the beauties of Xymon's architecture is the ability to cleanly > > disconnect the components... Xymongen can run on some other box, > > xymond_locator can be used to send rrd data off somewhere if IO becomes an > > issue, xymonnet pollers can be distributed, and xymonproxy can be used as > > needed to aggregate and smooth out incoming status reports, etc. > > > > There are lots of different mechanisms for "scaling" efficiently depending > > on your particular needs, but I'd bet that on decently modern server > > hardware you'll probably want to scale for HA purposes long before you > > actually /need/ the additional power. > > > > > > HTH, > > > > -jc > > _______________________________________________ Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon > > _______________________________________________ > Xymon mailing list > Xymon at xymon.com > http://lists.xymon.com/mailman/listinfo/xymon From cleaver at terabithia.org Thu Apr 11 22:12:40 2013 From: cleaver at terabithia.org (cleaver at terabithia.org) Date: Thu, 11 Apr 2013 20:12:40 -0000 (UTC) Subject: [Xymon] Scaling In-Reply-To: <1365709240.4608.9.camel@aragorn> References: <515F1070.1040000@baywinds.org> <1365194021.4481.29.camel@aragorn> <1ABE07FDD59C3943B32FC5FBD5507466020586D6@vmmsitmx01.fellowes-na.com> <24593.199.91.139.248.1365700684.squirrel@mail.kkytbs.net> <1365705614.4608.8.camel@aragorn> <1365709240.4608.9.camel@aragorn> Message-ID: <55189.199.91.139.248.1365711160.squirrel@mail.kkytbs.net> > Le jeudi 11 avril 2013 à 20:40 +0200, Olivier AUDRY a écrit : > hello > > as I understand I should run xymon on a single node to improve memory > access latency. Right ? > --snip-- >> numactl --hardware >> available: 2 nodes (0-1) >> node 0 size: 12097 MB >> node 0 free: 594 MB >> node 1 size: 12120 MB >> node 1 free: 12 MB >> node distances: >> node 0 1 >> 0: 10 20 >> >> >> event I got 24 cpu. Multi core and hyperthreading. Is that correct ? That seems odd; almost like hyperthreading is disabled? You should see "node 0 cpus: ..." above each size. I'm running RHEL 6.4; it's possible things have changed in that output over time if you're on a different system. >> >> As I can see my two node are full. Not good at all I guess. >> >> My policy is the default one. Perhaps you can advice a specific policy >> for a xymon setup ? >> >> numactl --show >> policy: default >> preferred node: current >> physcpubind: 0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 >> 23 >> cpubind: 0 1 >> nodebind: 0 1 >> membind: 0 1 Generally speaking, yeah, use numactl in front of xymonlaunch to ensure the entire process tree gets assigned to a single node. But it really depends on your workload (can everything fit in that node?) and what else is going on on the box. If you have something which analyzes xymondata in a large dump, then does heavy munging on it and sends it back, it might be better to have than on a different node than (say) the xymond_* worker modules. 'numastat -s -z -p xymon' is your friend The RH Performance Tuning and Resource Management guides are definitely useful reading as well. I'm sure there's plenty of cgroup stuff that could be helpful if/when the time came, but there are only so many hours in the day and there's other low-hanging fruit at the moment :) I'd definitely start with running the 'numad' service and seeing what it does over time; it really could be all that you need. HTH, -jc From olivier at audry.fr Thu Apr 11 22:23:15 2013 From: olivier at audry.fr (Olivier AUDRY) Date: Thu, 11 Apr 2013 22:23:15 +0200 Subject: [Xymon] Scaling In-Reply-To: <55189.199.91.139.248.1365711160.squirrel@mail.kkytbs.net> References: <515F1070.1040000@baywinds.org> <1365194021.4481.29.camel@aragorn> <1ABE07FDD59C3943B32FC5FBD5507466020586D6@vmmsitmx01.fellowes-na.com> <24593.199.91.139.248.1365700684.squirrel@mail.kkytbs.net> <1365705614.4608.8.camel@aragorn> <1365709240.4608.9.camel@aragorn> <55189.199.91.139.248.1365711160.squirrel@mail.kkytbs.net> Message-ID: <1365711795.4608.10.camel@aragorn> great many thx for your time I will check this > but there are only so many hours in the > day and there's other low-hanging fruit at the moment :) so true :) Le jeudi 11 avril 2013 à 20:12 +0000, cleaver at terabithia.org a écrit : > > Le jeudi 11 avril 2013 à 20:40 +0200, Olivier AUDRY a écrit : > > > hello > > > > as I understand I should run xymon on a single node to improve memory > > access latency. Right ? > > > --snip-- > >> numactl --hardware > >> available: 2 nodes (0-1) > >> node 0 size: 12097 MB > >> node 0 free: 594 MB > >> node 1 size: 12120 MB > >> node 1 free: 12 MB > >> node distances: > >> node 0 1 > >> 0: 10 20 > >> > >> > >> event I got 24 cpu. Multi core and hyperthreading. Is that correct ? > > That seems odd; almost like hyperthreading is disabled? You should see > "node 0 cpus: ..." above each size. I'm running RHEL 6.4; it's possible > things have changed in that output over time if you're on a different > system. > > > >> > >> As I can see my two node are full. Not good at all I guess. > >> > >> My policy is the default one. Perhaps you can advice a specific policy > >> for a xymon setup ? > >> > >> numactl --show > >> policy: default > >> preferred node: current > >> physcpubind: 0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 > >> 23 > >> cpubind: 0 1 > >> nodebind: 0 1 > >> membind: 0 1 > > Generally speaking, yeah, use numactl in front of xymonlaunch to ensure > the entire process tree gets assigned to a single node. But it really > depends on your workload (can everything fit in that node?) and what else > is going on on the box. If you have something which analyzes xymondata in > a large dump, then does heavy munging on it and sends it back, it might be > better to have than on a different node than (say) the xymond_* worker > modules. > > 'numastat -s -z -p xymon' is your friend > > The RH Performance Tuning and Resource Management guides are definitely > useful reading as well. I'm sure there's plenty of cgroup stuff that could > be helpful if/when the time came, but there are only so many hours in the > day and there's other low-hanging fruit at the moment :) > > I'd definitely start with running the 'numad' service and seeing what it > does over time; it really could be all that you need. > > HTH, > > -jc > > From jlaidman at rebel-it.com.au Fri Apr 12 03:13:37 2013 From: jlaidman at rebel-it.com.au (Jeremy Laidman) Date: Fri, 12 Apr 2013 11:13:37 +1000 Subject: [Xymon] Monitoring that iptables and SELinux are running / enabled In-Reply-To: References: Message-ID: On 11 April 2013 21:46, SebA wrote: > ** > Is there any code out there to monitor that > (a) iptables is running (not just set to everything allowed) > (b) SELinux is enabled > For the second one, you can add this to client-local.cfg: file:/selinux/enforce:md5 then in analysis.cfg: FILE /selinux/enforce MD5=cfcd208495d565ef66e7dff9f98764da red "TEXT=SELinux is not enforcing" This will warn if the contents of /selinux/enforce is not zero. This also warns if the file does not exist (such as when selinux is disabled). You can't really do the same thing with iptables, because you need to be root to dump the rules. There's only so much the xymon user can do. You could check that the ip_tables kernel module is loaded with lsmod, or you could check a file that a root cron job dumps to every 5 minutes. You also might want to be a bit careful that you're not transmitting iptables rules in-the-clear to the Xymon server. Perhaps something like this: Create /etc/cron.d/dump-iptables with: # analyse and report on iptables rules, for xymon to read */5 * * * * root { /usr/bin/iptables-save | grep "^:INPUT REJECT" >/dev/null && echo "green: iptables default is reject" || echo "red: iptables problem"; } | logger This will put a messages in your syslog, which you can then match using standard Xymon log monitoring. One problem with this technique is that when someone stops the cronjob, you'll simply stop getting log messages through. There are ways to detect or work around this. J -------------- next part -------------- An HTML attachment was scrubbed... URL: From jlaidman at rebel-it.com.au Fri Apr 12 04:27:57 2013 From: jlaidman at rebel-it.com.au (Jeremy Laidman) Date: Fri, 12 Apr 2013 12:27:57 +1000 Subject: [Xymon] FILE in analysis.cfg In-Reply-To: References: Message-ID: On 12 April 2013 01:20, Root, Paul T wrote: > > ** > > Is there a way to tell analysis that I want to look for this file, but if > it doesn’t exist, that’s ok? > I don't think so. But you can work around this in client-local.cfg, like so: file:`[ -f /path/to/file ] && echo /path/to/file || echo /dev/null` This will simply send through a different filename in the client data, and the server-side will act as if you haven't configured it at all, which I think means it won't report anything. Also, there seems to be an undocumented modifier "optional" for both FILE and LOG clauses. I haven't used this, but it seems you would just append it to the end of the FILE line in analysis.cfg, like so: FILE:/path/to/file red mtime<7776000 optional > While, I’m at it, is mtime> only in seconds or can I put a ‘d’ modifier > for days on the end of it? > Nope, the string after "mtime>" is fed straight into aton() before being stored in the rule structure, so it can only be digits. Cheers Jeremy -------------- next part -------------- An HTML attachment was scrubbed... URL: From deepakdeore2004 at gmail.com Fri Apr 12 12:20:41 2013 From: deepakdeore2004 at gmail.com (deepak deore) Date: Fri, 12 Apr 2013 15:50:41 +0530 Subject: [Xymon] backticks not working in client-local.cfg Message-ID: Xymon version: - Xymon 4.3.10 OS: - Ubuntu 12.04 LTS **I am using the below entry but it is not converting the date command to the value. [server-name] log:/mnt/logs/access.`date +%Y-%m-%d`.log:10240 ignore INFO trigger SEVERE I tried many things but no luck, on the log page I see the date command as it is instead of the actual date value.: - log:`/mnt/logs/access.`date +%Y-%m-%d`.log`:10240 log:$(/mnt/logs/access.`date +%Y-%m-%d`.log):10240 log:$(echo /mnt/logs/access.`date +%Y-%m-%d`.log):10240 log:/mnt/logs/access.$(date +%Y-%m-%d).log:10240 -------------- next part -------------- An HTML attachment was scrubbed... URL: From Michael.Beatty at sherwin.com Fri Apr 12 13:33:55 2013 From: Michael.Beatty at sherwin.com (Michael Beatty) Date: Fri, 12 Apr 2013 07:33:55 -0400 Subject: [Xymon] backticks not working in client-local.cfg In-Reply-To: References: Message-ID: <5167F123.1040604@sherwin.com> Try: log:`find /mnt/logs/access.$(date +%Y-%m-%d).log:10240` Michael Beatty Sherwin-Williams IT Analyst/Developer michael.beatty at sherwin.com 216-515-7374 On 04/12/2013 06:20 AM, deepak deore wrote: > Xymon version: - Xymon 4.3.10 > OS: - Ubuntu 12.04 LTS > > I am using the below entry but it is not converting the date command > to the value. > > [server-name] > log:/mnt/logs/access.`date +%Y-%m-%d`.log:10240 > ignore INFO > trigger SEVERE > > I tried many things but no luck, on the log page I see the date > command as it is instead of the actual date value.: - > > log:`/mnt/logs/access.`date +%Y-%m-%d`.log`:10240 > log:$(/mnt/logs/access.`date +%Y-%m-%d`.log):10240 > log:$(echo /mnt/logs/access.`date +%Y-%m-%d`.log):10240 > log:/mnt/logs/access.$(date +%Y-%m-%d).log:10240 > > > _______________________________________________ > Xymon mailing list > Xymon at xymon.com > http://lists.xymon.com/mailman/listinfo/xymon -------------- next part -------------- An HTML attachment was scrubbed... URL: From spah at syntec.co.uk Fri Apr 12 13:56:36 2013 From: spah at syntec.co.uk (SebA) Date: Fri, 12 Apr 2013 12:56:36 +0100 Subject: [Xymon] Monitoring that iptables and SELinux are running / enabled In-Reply-To: References: Message-ID: Hi Jeremy, Thanks! Those are some great ideas. FYI, the md5 is different for me though: $ xymondigest md5 /selinux/enforce md5:c4ca4238a0b923820dcc509a6f75849b $ cat /selinux/enforce 1[prompt]$ i.e. no carriage return or new line caracters. For iptables the path is different on my system too, and my default is DROP rather than REJECT: $ sudo /sbin/iptables-save | grep "^:INPUT DROP" >/dev/null && echo "green: iptables default is DROP" || echo "red: iptables problem"; green: iptables default is DROP Presumably I could allow xymon user to run /sbin/iptables-save with sudo though as I did. I guess that's a bit trickier... Oh well, let's have a go! Using xymon-client-4.3.10-1 RPM. It's working for me but (if anyone else wants to use this) YMMV. I've hacked up some example scripts so they work in my environment and used your suggestion but coverted it to be sudoers safe (I hope). Create xymon-clientIPtablesCheck.sh in /etc/xymon-client/ext (and ensure it is executable: chmod +x ): #!/bin/sh # Written by SebA 12/04/13 with help from articles on the net. # Test-Mode ? # TEST=0 => works in cooperation with Xymon agent (default) # TEST=1 => for testing, results to stdout (run "TEST=1 ./bb-testname.sh" on cmd-line) # TEST>1 => for testing, but sending results to Xymon server without activating script in hobbitlaunch.cfg TEST=${TEST:-"0"} if [ "$TEST" -gt "0" ] then # You only need to change these if you want to test the script manually. BBHOME="/usr/share/xymon-client" # . /etc/xymon-client/xymonclient.cfg # This did not work for me (include is not a valid command), so set the parts we need: XYMONSERVERS="CHANGEME.FOR.TESTING.ONLY" PATH="/usr/libexec/xymon-client:/bin:/usr/bin:/sbin:/usr/sbin:/etc" # PATH setting for the client scripts. BBQUERYCMD=$BB [ "$TEST" = "1" ] && BB="echo" fi COLUMN=iptables # Name of the column COLOR=purple # By default, there is no report. MSG="iptables status" # Not used. # Do whatever you need to test for something #sudo /sbin/iptables-save | grep "^:INPUT DROP" >/dev/null # This would allow xymon user to get potentially sensitive information, so put this into a new script instead: sudo /sbin/iptables-check RETVAL=$? if [ $RETVAL -eq 0 ] then COLOR=green MSG="iptables default is DROP" else COLOR=red MSG="iptables problem" fi # Tell Xymon about it $BB $XYMONSERVERS "status $MACHINE.$COLUMN $COLOR `date` ${MSG} " exit 0 EOF Create IPtablesCheck.cfg in /etc/xymon-client/ext: [iptables-check] ENVFILE $XYMONCLIENTHOME/etc/xymonclient.cfg CMD $XYMONCLIENTHOME/ext/xymon-clientIPtablesCheck.sh LOGFILE $XYMONCLIENTHOME/logs/iptables-check.log INTERVAL 5m EOF Create /sbin/iptables-check with: #!/bin/sh /sbin/iptables-save | grep "^:INPUT DROP" >/dev/null EOF Check that permissions are suitable: $ ls -l /sbin/iptables-check -rwxr-xr-x 1 root root 63 Apr 12 11:08 /sbin/iptables-check You don't want non-root to be able to modify this file. Everyone can run it, but it will only work properly for root. In /etc/sudoers add: Defaults:xymon !requiretty After: Defaults requiretty And lower down in an appropriate section add: xymon ALL=(root) NOPASSWD: /sbin/iptables-check Kind regards, SebA ________________________________ From: Jeremy Laidman [mailto:jlaidman at rebel-it.com.au] Sent: 12 April 2013 02:14 To: SebA Cc: xymon Subject: Re: [Xymon] Monitoring that iptables and SELinux are running / enabled On 11 April 2013 21:46, SebA wrote: Is there any code out there to monitor that (a) iptables is running (not just set to everything allowed) (b) SELinux is enabled For the second one, you can add this to client-local.cfg: file:/selinux/enforce:md5 then in analysis.cfg: FILE /selinux/enforce MD5=cfcd208495d565ef66e7dff9f98764da red "TEXT=SELinux is not enforcing" This will warn if the contents of /selinux/enforce is not zero. This also warns if the file does not exist (such as when selinux is disabled). You can't really do the same thing with iptables, because you need to be root to dump the rules. There's only so much the xymon user can do. You could check that the ip_tables kernel module is loaded with lsmod, or you could check a file that a root cron job dumps to every 5 minutes. You also might want to be a bit careful that you're not transmitting iptables rules in-the-clear to the Xymon server. Perhaps something like this: Create /etc/cron.d/dump-iptables with: # analyse and report on iptables rules, for xymon to read */5 * * * * root { /usr/bin/iptables-save | grep "^:INPUT REJECT" >/dev/null && echo "green: iptables default is reject" || echo "red: iptables problem"; } | logger This will put a messages in your syslog, which you can then match using standard Xymon log monitoring. One problem with this technique is that when someone stops the cronjob, you'll simply stop getting log messages through. There are ways to detect or work around this. J From deepakdeore2004 at gmail.com Fri Apr 12 14:59:05 2013 From: deepakdeore2004 at gmail.com (deepak deore) Date: Fri, 12 Apr 2013 18:29:05 +0530 Subject: [Xymon] backticks not working in client-local.cfg In-Reply-To: <5167F123.1040604@sherwin.com> References: <5167F123.1040604@sherwin.com> Message-ID: Hi Michael, this worked! Thanks a ton. I didnt know that we have to close the backtick after the message size. One more question, can I add multiple servers for common log file monitoring like below? [server1,server2,server3] log: ..... On Fri, Apr 12, 2013 at 5:03 PM, Michael Beatty wrote: > Try: > > log:`find /mnt/logs/access.$(date +%Y-%m-%d).log:10240` > > Michael Beatty > Sherwin-Williams > IT Analyst/Developermichael.beatty at sherwin.com > 216-515-7374 > > On 04/12/2013 06:20 AM, deepak deore wrote: > > Xymon version: - Xymon 4.3.10 > OS: - Ubuntu 12.04 LTS > > I am using the below entry but it is not converting the date command to > the value. > > [server-name] > log:/mnt/logs/access.`date +%Y-%m-%d`.log:10240 > ignore INFO > trigger SEVERE > > I tried many things but no luck, on the log page I see the date command > as it is instead of the actual date value.: - > > log:`/mnt/logs/access.`date +%Y-%m-%d`.log`:10240 > log:$(/mnt/logs/access.`date +%Y-%m-%d`.log):10240 > log:$(echo /mnt/logs/access.`date +%Y-%m-%d`.log):10240 > log:/mnt/logs/access.$(date +%Y-%m-%d).log:10240 > > > _______________________________________________ > Xymon mailing listXymon at xymon.comhttp://lists.xymon.com/mailman/listinfo/xymon > > > > > _______________________________________________ > Xymon mailing list > Xymon at xymon.com > http://lists.xymon.com/mailman/listinfo/xymon > > -------------- next part -------------- An HTML attachment was scrubbed... URL: From Michael.Beatty at sherwin.com Fri Apr 12 16:33:57 2013 From: Michael.Beatty at sherwin.com (Michael Beatty) Date: Fri, 12 Apr 2013 10:33:57 -0400 Subject: [Xymon] backticks not working in client-local.cfg In-Reply-To: References: <5167F123.1040604@sherwin.com> Message-ID: <51681B55.3050807@sherwin.com> Actually.... I didn't know you had to close the backticks after the message size either... My original reply was a typo, I thought it should have gone after the ".log" Hmm??? If it works, it works I guess. For your second question, it can be done, but not the way you have shown. the client-local file won't work with multiple hostnames. What id does work on, however, is a CLASS names which are defined in your hosts.cfg. So in your hosts.cfg file: 1.2.3.1 server1 # CLASS:myclass 1.2.3.2 server2 # CLASS:myclass 1.2.3.3 server3 # CLASS:myclass In your client-local.cfg [myclass] log:.... Michael Beatty Sherwin-Williams IT Analyst/Developer michael.beatty at sherwin.com 216-515-7374 On 04/12/2013 08:59 AM, deepak deore wrote: > Hi Michael, this worked! > Thanks a ton. I didnt know that we have to close the backtick after > the message size. > One more question, can I add multiple servers for common log file > monitoring like below? > > [server1,server2,server3] > log: ..... > > > > On Fri, Apr 12, 2013 at 5:03 PM, Michael Beatty > > wrote: > > Try: > > log:`find /mnt/logs/access.$(date +%Y-%m-%d).log:10240` > > Michael Beatty > Sherwin-Williams > IT Analyst/Developer > michael.beatty at sherwin.com > 216-515-7374 > > On 04/12/2013 06:20 AM, deepak deore wrote: >> Xymon version: - Xymon 4.3.10 >> OS: - Ubuntu 12.04 LTS >> >> I am using the below entry but it is not converting the date >> command to the value. >> >> [server-name] >> log:/mnt/logs/access.`date +%Y-%m-%d`.log:10240 >> ignore INFO >> trigger SEVERE >> >> I tried many things but no luck, on the log page I see the date >> command as it is instead of the actual date value.: - >> >> log:`/mnt/logs/access.`date +%Y-%m-%d`.log`:10240 >> log:$(/mnt/logs/access.`date +%Y-%m-%d`.log):10240 >> log:$(echo /mnt/logs/access.`date +%Y-%m-%d`.log):10240 >> log:/mnt/logs/access.$(date +%Y-%m-%d).log:10240 >> >> >> _______________________________________________ >> Xymon mailing list >> Xymon at xymon.com >> http://lists.xymon.com/mailman/listinfo/xymon > > > > _______________________________________________ > Xymon mailing list > Xymon at xymon.com > http://lists.xymon.com/mailman/listinfo/xymon > > -------------- next part -------------- An HTML attachment was scrubbed... URL: From deepakdeore2004 at gmail.com Fri Apr 12 17:24:00 2013 From: deepakdeore2004 at gmail.com (deepak deore) Date: Fri, 12 Apr 2013 20:54:00 +0530 Subject: [Xymon] backticks not working in client-local.cfg In-Reply-To: <51681B55.3050807@sherwin.com> References: <5167F123.1040604@sherwin.com> <51681B55.3050807@sherwin.com> Message-ID: You rock! One last question, my analysis.cfg entry seems to be wrong, xymon not alerting for below entry which has backtrick. LOG %/mnt/logs/access.`date +%Y-%m-%d`.log "%Exception:" COLOR=red On Fri, Apr 12, 2013 at 8:03 PM, Michael Beatty wrote: > Actually.... I didn't know you had to close the backticks after the > message size either... My original reply was a typo, I thought it should > have gone after the ".log" Hmm??? If it works, it works I guess. > > For your second question, it can be done, but not the way you have shown. > the client-local file won't work with multiple hostnames. What id does > work on, however, is a CLASS names which are defined in your hosts.cfg. > > So in your hosts.cfg file: > 1.2.3.1 server1 # CLASS:myclass > 1.2.3.2 server2 # CLASS:myclass > 1.2.3.3 server3 # CLASS:myclass > > In your client-local.cfg > [myclass] > log:.... > > > Michael Beatty > Sherwin-Williams > IT Analyst/Developermichael.beatty at sherwin.com > 216-515-7374 > > On 04/12/2013 08:59 AM, deepak deore wrote: > > Hi Michael, this worked! > Thanks a ton. I didnt know that we have to close the backtick after the > message size. > One more question, can I add multiple servers for common log file > monitoring like below? > > [server1,server2,server3] > log: ..... > > > > On Fri, Apr 12, 2013 at 5:03 PM, Michael Beatty < > Michael.Beatty at sherwin.com> wrote: > >> Try: >> >> log:`find /mnt/logs/access.$(date +%Y-%m-%d).log:10240` >> >> Michael Beatty >> Sherwin-Williams >> IT Analyst/Developermichael.beatty at sherwin.com >> 216-515-7374 >> >> On 04/12/2013 06:20 AM, deepak deore wrote: >> >> Xymon version: - Xymon 4.3.10 >> OS: - Ubuntu 12.04 LTS >> >> I am using the below entry but it is not converting the date command to >> the value. >> >> [server-name] >> log:/mnt/logs/access.`date +%Y-%m-%d`.log:10240 >> ignore INFO >> trigger SEVERE >> >> I tried many things but no luck, on the log page I see the date command >> as it is instead of the actual date value.: - >> >> log:`/mnt/logs/access.`date +%Y-%m-%d`.log`:10240 >> log:$(/mnt/logs/access.`date +%Y-%m-%d`.log):10240 >> log:$(echo /mnt/logs/access.`date +%Y-%m-%d`.log):10240 >> log:/mnt/logs/access.$(date +%Y-%m-%d).log:10240 >> >> >> _______________________________________________ >> Xymon mailing listXymon at xymon.comhttp://lists.xymon.com/mailman/listinfo/xymon >> >> >> >> >> _______________________________________________ >> Xymon mailing list >> Xymon at xymon.com >> http://lists.xymon.com/mailman/listinfo/xymon >> >> > > > -------------- next part -------------- An HTML attachment was scrubbed... URL: From Michael.Beatty at sherwin.com Fri Apr 12 17:46:04 2013 From: Michael.Beatty at sherwin.com (Michael Beatty) Date: Fri, 12 Apr 2013 11:46:04 -0400 Subject: [Xymon] backticks not working in client-local.cfg In-Reply-To: References: <5167F123.1040604@sherwin.com> <51681B55.3050807@sherwin.com> Message-ID: <51682C3C.4000302@sherwin.com> You don't need to do the date calculation in the analysis, just need to provide the regular expression to match it. The client-local.cfg is telling your client what data to send, but supply the date string in the "find" statement, the client is going going to return data from those files. So once the data gets to the server, it will only be for today's data. For example, the client data will only have. /mnt/logs/access.2013-04-12.log So your regex in analysis.cfg only needs LOG %/mnt/logs/access\.[0-9]*-[0-9]*-[0-9]*\.log Michael Beatty On 04/12/2013 11:24 AM, deepak deore wrote: > You rock! > > One last question, my analysis.cfg entry seems to be wrong, xymon not > alerting for below entry which has backtrick. > > LOG %/mnt/logs/access.`date +%Y-%m-%d`.log "%Exception:" COLOR=red > > > On Fri, Apr 12, 2013 at 8:03 PM, Michael Beatty > > wrote: > > Actually.... I didn't know you had to close the backticks after > the message size either... My original reply was a typo, I thought > it should have gone after the ".log" Hmm??? If it works, it works > I guess. > > For your second question, it can be done, but not the way you have > shown. the client-local file won't work with multiple hostnames. > What id does work on, however, is a CLASS names which are defined > in your hosts.cfg. > > So in your hosts.cfg file: > 1.2.3.1 server1 # CLASS:myclass > 1.2.3.2 server2 # CLASS:myclass > 1.2.3.3 server3 # CLASS:myclass > > In your client-local.cfg > [myclass] > log:.... > > > Michael Beatty > Sherwin-Williams > IT Analyst/Developer > michael.beatty at sherwin.com > 216-515-7374 > > On 04/12/2013 08:59 AM, deepak deore wrote: >> Hi Michael, this worked! >> Thanks a ton. I didnt know that we have to close the backtick >> after the message size. >> One more question, can I add multiple servers for common log file >> monitoring like below? >> >> [server1,server2,server3] >> log: ..... >> >> >> >> On Fri, Apr 12, 2013 at 5:03 PM, Michael Beatty >> > >> wrote: >> >> Try: >> >> log:`find /mnt/logs/access.$(date +%Y-%m-%d).log:10240` >> >> Michael Beatty >> Sherwin-Williams >> IT Analyst/Developer >> michael.beatty at sherwin.com >> 216-515-7374 >> >> On 04/12/2013 06:20 AM, deepak deore wrote: >>> Xymon version: - Xymon 4.3.10 >>> OS: - Ubuntu 12.04 LTS >>> >>> I am using the below entry but it is not converting the date >>> command to the value. >>> >>> [server-name] >>> log:/mnt/logs/access.`date +%Y-%m-%d`.log:10240 >>> ignore INFO >>> trigger SEVERE >>> >>> I tried many things but no luck, on the log page I see the >>> date command as it is instead of the actual date value.: - >>> >>> log:`/mnt/logs/access.`date +%Y-%m-%d`.log`:10240 >>> log:$(/mnt/logs/access.`date +%Y-%m-%d`.log):10240 >>> log:$(echo /mnt/logs/access.`date +%Y-%m-%d`.log):10240 >>> log:/mnt/logs/access.$(date +%Y-%m-%d).log:10240 >>> >>> >>> _______________________________________________ >>> Xymon mailing list >>> Xymon at xymon.com >>> http://lists.xymon.com/mailman/listinfo/xymon >> >> >> >> _______________________________________________ >> Xymon mailing list >> Xymon at xymon.com >> http://lists.xymon.com/mailman/listinfo/xymon >> >> > > > -------------- next part -------------- An HTML attachment was scrubbed... URL: From deepakdeore2004 at gmail.com Fri Apr 12 19:10:29 2013 From: deepakdeore2004 at gmail.com (deepak deore) Date: Fri, 12 Apr 2013 22:40:29 +0530 Subject: [Xymon] backticks not working in client-local.cfg In-Reply-To: <51682C3C.4000302@sherwin.com> References: <5167F123.1040604@sherwin.com> <51681B55.3050807@sherwin.com> <51682C3C.4000302@sherwin.com> Message-ID: This was really a great help, everything is working fine now. On Fri, Apr 12, 2013 at 9:16 PM, Michael Beatty wrote: > You don't need to do the date calculation in the analysis, just need to > provide the regular expression to match it. > > The client-local.cfg is telling your client what data to send, but supply > the date string in the "find" statement, the client is going going to > return data from those files. So once the data gets to the server, it will > only be for today's data. For example, the client data will only have. > > /mnt/logs/access.2013-04-12.log > > So your regex in analysis.cfg only needs > LOG %/mnt/logs/access\.[0-9]*-[0-9]*-[0-9]*\.log > > Michael Beatty > > > On 04/12/2013 11:24 AM, deepak deore wrote: > > You rock! > > One last question, my analysis.cfg entry seems to be wrong, xymon not > alerting for below entry which has backtrick. > > LOG %/mnt/logs/access.`date +%Y-%m-%d`.log "%Exception:" COLOR=red > > > On Fri, Apr 12, 2013 at 8:03 PM, Michael Beatty < > Michael.Beatty at sherwin.com> wrote: > >> Actually.... I didn't know you had to close the backticks after the >> message size either... My original reply was a typo, I thought it should >> have gone after the ".log" Hmm??? If it works, it works I guess. >> >> For your second question, it can be done, but not the way you have >> shown. the client-local file won't work with multiple hostnames. What id >> does work on, however, is a CLASS names which are defined in your hosts.cfg. >> >> So in your hosts.cfg file: >> 1.2.3.1 server1 # CLASS:myclass >> 1.2.3.2 server2 # CLASS:myclass >> 1.2.3.3 server3 # CLASS:myclass >> >> In your client-local.cfg >> [myclass] >> log:.... >> >> >> Michael Beatty >> Sherwin-Williams >> IT Analyst/Developermichael.beatty at sherwin.com >> 216-515-7374 >> >> On 04/12/2013 08:59 AM, deepak deore wrote: >> >> Hi Michael, this worked! >> Thanks a ton. I didnt know that we have to close the backtick after the >> message size. >> One more question, can I add multiple servers for common log file >> monitoring like below? >> >> [server1,server2,server3] >> log: ..... >> >> >> >> On Fri, Apr 12, 2013 at 5:03 PM, Michael Beatty < >> Michael.Beatty at sherwin.com> wrote: >> >>> Try: >>> >>> log:`find /mnt/logs/access.$(date +%Y-%m-%d).log:10240` >>> >>> Michael Beatty >>> Sherwin-Williams >>> IT Analyst/Developermichael.beatty at sherwin.com >>> 216-515-7374 >>> >>> On 04/12/2013 06:20 AM, deepak deore wrote: >>> >>> Xymon version: - Xymon 4.3.10 >>> OS: - Ubuntu 12.04 LTS >>> >>> I am using the below entry but it is not converting the date command to >>> the value. >>> >>> [server-name] >>> log:/mnt/logs/access.`date +%Y-%m-%d`.log:10240 >>> ignore INFO >>> trigger SEVERE >>> >>> I tried many things but no luck, on the log page I see the date >>> command as it is instead of the actual date value.: - >>> >>> log:`/mnt/logs/access.`date +%Y-%m-%d`.log`:10240 >>> log:$(/mnt/logs/access.`date +%Y-%m-%d`.log):10240 >>> log:$(echo /mnt/logs/access.`date +%Y-%m-%d`.log):10240 >>> log:/mnt/logs/access.$(date +%Y-%m-%d).log:10240 >>> >>> >>> _______________________________________________ >>> Xymon mailing listXymon at xymon.comhttp://lists.xymon.com/mailman/listinfo/xymon >>> >>> >>> >>> >>> _______________________________________________ >>> Xymon mailing list >>> Xymon at xymon.com >>> http://lists.xymon.com/mailman/listinfo/xymon >>> >>> >> >> >> > > > -------------- next part -------------- An HTML attachment was scrubbed... URL: From martin.flemming at desy.de Mon Apr 15 00:07:05 2013 From: martin.flemming at desy.de (Martin Flemming) Date: Mon, 15 Apr 2013 00:07:05 +0200 (CEST) Subject: [Xymon] Monitoring Multiple Cores In-Reply-To: References: <515E8764.9040907@unicyber.co.uk> Message-ID: Hi ! Are there any plans or scripts already there ? I will be interesting for Linux as MultiCore-Platform ... cheers, martin On Sun, 7 Apr 2013, Vernon Everett wrote: > For which OS? > I think I saw something that does this for Solaris on Xymonton. > Might be able to modify it for whatever you are using. > > Regards > Vernon > > On 5 April 2013 16:12, Gonzalo Fernandez Ordas wrote: > Hi > > This a topic I am complete sure was been already discussed, but I have been for hours around the web and I cannot find what I am looking for.... > I am trying to monitor every cpu within the server rather than the load average, and I wonder if there anything already done rather than re-inventing the wheel > again? > maybe something which is already done in relation to monitoring multiple cores? > > Many thanks to all of you. > _______________________________________________ > Xymon mailing list > Xymon at xymon.com > http://lists.xymon.com/mailman/listinfo/xymon > > > > > -- > "Accept the challenges so that you can feel the exhilaration of victory"- General George Patton From jlaidman at rebel-it.com.au Mon Apr 15 07:45:32 2013 From: jlaidman at rebel-it.com.au (Jeremy Laidman) Date: Mon, 15 Apr 2013 15:45:32 +1000 Subject: [Xymon] Monitoring that iptables and SELinux are running / enabled In-Reply-To: References: Message-ID: On 12 April 2013 21:56, SebA wrote: > FYI, the md5 is different for me though: > $ xymondigest md5 /selinux/enforce > md5:c4ca4238a0b923820dcc509a6f75849b > Yes, I was checking for the file to contain "0" rather than "1". If the MD5 of the file matched the MD5 hash of "0", then it would go red, otherwise (default) green. But I think I've mis-read the "checksum" part of the analysis.cfg man page, and got the logic back-to-front. Presumably I could allow xymon user to run /sbin/iptables-save with sudo > though as I did. Yes, I'd have done this, so that another script isn't required. I guess that's a bit trickier... > How so? Glad it's working for you. Cheers Jeremy -------------- next part -------------- An HTML attachment was scrubbed... URL: From martin.flemming at desy.de Mon Apr 15 11:17:03 2013 From: martin.flemming at desy.de (Martin Flemming) Date: Mon, 15 Apr 2013 11:17:03 +0200 (CEST) Subject: [Xymon] la graph autoscale question Message-ID: Hi ! I've got a little stupid rrd-graphic-question... How can i change the start of y-axis with min value to be at 0 and not be autoscaled ? thanks & cheers Martin From martin.flemming at desy.de Mon Apr 15 11:47:09 2013 From: martin.flemming at desy.de (Martin Flemming) Date: Mon, 15 Apr 2013 11:47:09 +0200 (CEST) Subject: [Xymon] la graph autoscale question In-Reply-To: <61575C06CB38C242BE91633B98D6A750CDBA94@KFMEX39P.ud1.utility> References: <61575C06CB38C242BE91633B98D6A750CDBA94@KFMEX39P.ud1.utility> Message-ID: Thanks, Chris ! works like a charm :-) martin On Mon, 15 Apr 2013, Chris.Morris at rwe.com wrote: > Edit ~/server/etc/graphs.cfg and in the [la] section add the "-l 0" > statement to have the graphs start at zero. > > -----Original Message----- > From: xymon-bounces at xymon.com [mailto:xymon-bounces at xymon.com] On Behalf > Of Martin Flemming > Sent: 15 April 2013 10:17 > To: xymon at xymon.com > Subject: [Xymon] la graph autoscale question > > > Hi ! > > I've got a little stupid rrd-graphic-question... > > How can i change the start of y-axis > with min value to be at 0 and not be autoscaled ? > > thanks & cheers > > Martin > _______________________________________________ > Xymon mailing list > Xymon at xymon.com > http://lists.xymon.com/mailman/listinfo/xymon > > **************************************************************************** > The information contained in this email is intended only for the use of the intended recipient at the email address to which it has been addressed. If the reader of this message is not an intended recipient, you are hereby notified that you have received this document in error and that any review, dissemination or copying of the message or associated attachments is strictly prohibited. If you have received this email in error, please contact the sender by return email or call 01793 877777 and ask for the sender and then delete it immediately from your system.Please note that neither the RWE Group of Companies nor the sender accepts any responsibility for viruses and it is your responsibility to scan attachments (if any). > > ***************************************************************************** > > From Chris.Morris at rwe.com Mon Apr 15 11:38:48 2013 From: Chris.Morris at rwe.com (Chris.Morris at rwe.com) Date: Mon, 15 Apr 2013 10:38:48 +0100 Subject: [Xymon] la graph autoscale question In-Reply-To: References: Message-ID: <61575C06CB38C242BE91633B98D6A750CDBA94@KFMEX39P.ud1.utility> Edit ~/server/etc/graphs.cfg and in the [la] section add the "-l 0" statement to have the graphs start at zero. -----Original Message----- From: xymon-bounces at xymon.com [mailto:xymon-bounces at xymon.com] On Behalf Of Martin Flemming Sent: 15 April 2013 10:17 To: xymon at xymon.com Subject: [Xymon] la graph autoscale question Hi ! I've got a little stupid rrd-graphic-question... How can i change the start of y-axis with min value to be at 0 and not be autoscaled ? thanks & cheers Martin _______________________________________________ Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon **************************************************************************** The information contained in this email is intended only for the use of the intended recipient at the email address to which it has been addressed. If the reader of this message is not an intended recipient, you are hereby notified that you have received this document in error and that any review, dissemination or copying of the message or associated attachments is strictly prohibited. If you have received this email in error, please contact the sender by return email or call 01793 877777 and ask for the sender and then delete it immediately from your system.Please note that neither the RWE Group of Companies nor the sender accepts any responsibility for viruses and it is your responsibility to scan attachments (if any). ***************************************************************************** From majones at mnsi.net Mon Apr 15 16:40:13 2013 From: majones at mnsi.net (Mark Jones) Date: Mon, 15 Apr 2013 10:40:13 -0400 Subject: [Xymon] Xymond_history Message-ID: <00d701ce39e7$23ba65d0$6b2f3170$@mnsi.net> On Friday after over 800 days of operation our xymon server is reporting purple status for xymond_history. It says program crashed fatal sig caught. Yet the process is running and nothing shows in the log as a problem. Any ideas where I should start looking? Mark Jones From cleaver at terabithia.org Mon Apr 15 17:22:27 2013 From: cleaver at terabithia.org (cleaver at terabithia.org) Date: Mon, 15 Apr 2013 15:22:27 -0000 (UTC) Subject: [Xymon] Xymond_history In-Reply-To: <00d701ce39e7$23ba65d0$6b2f3170$@mnsi.net> References: <00d701ce39e7$23ba65d0$6b2f3170$@mnsi.net> Message-ID: <44400.199.91.139.248.1366039347.squirrel@mail.kkytbs.net> /var/log/xymon/history.log or xymonlaunch.log might have something or, depending on your system, /var/log/messages or audit/... Basically, anywhere that's liable to have segfault information. ($XYMONTMP might also contain a core dump file that could be useful.) If xymond_history crashed, it was auto-restarted by xymonlaunch pretty quickly, which is why it's still running now. To clear the purple alert (it was a one-time message), simply drop the status manually (xymon localhost "drop xymond_history") HTH, -jc > On Friday after over 800 days of operation our xymon server is reporting > purple status for xymond_history. It says program crashed fatal sig > caught. > Yet the process is running and nothing shows in the log as a problem. Any > ideas where I should start looking? > > Mark Jones > > _______________________________________________ > Xymon mailing list > Xymon at xymon.com > http://lists.xymon.com/mailman/listinfo/xymon > From deepakdeore2004 at gmail.com Mon Apr 15 20:02:42 2013 From: deepakdeore2004 at gmail.com (deepak deore) Date: Mon, 15 Apr 2013 23:32:42 +0530 Subject: [Xymon] mails in html format Message-ID: Can we send xymon alerts in html format? which will give better look to the mails. -------------- next part -------------- An HTML attachment was scrubbed... URL: From deepakdeore2004 at gmail.com Mon Apr 15 21:51:23 2013 From: deepakdeore2004 at gmail.com (deepak deore) Date: Tue, 16 Apr 2013 01:21:23 +0530 Subject: [Xymon] mails in html format In-Reply-To: <37385EB2A81D7A4C810FDC0ED2603ED310E752E5@lin-exch-02.rakon.net> References: <37385EB2A81D7A4C810FDC0ED2603ED310E752E5@lin-exch-02.rakon.net> Message-ID: Thanks Carl, there are lots of other scripts as well on this site. Will give a try. BTW ... do you have any other sites which has lots of scripts/ plugin kind of things for xymon? On Tue, Apr 16, 2013 at 1:09 AM, Carl Inglis wrote: > Hi Deepak,**** > > ** ** > > If you search the archives, there was discussion about a perl script that > sent HTML formatted emails. It’s available here: > http://www.xymonton.org/alerts:html_mail1.2**** > > ** ** > > Regards,**** > > ** ** > > Carl**** > > ** ** > > Carl Inglis * > Systems Administrator* > > *Rakon UK Limited* > Dowsett House, Sadler Road, Lincoln LN6 3RS, United Kingdom > Tel: +44 (0)1522 812630 | Fax: +44 (0) 1522 812664 | Mob: +44 (0) 7786 > 552915 > Carl.Inglis at rakon.com | www.rakon.com > > [image: The Queens Awards for Enterprise 2012] > > [image: Rakon Logo] > > This message together with any attachments contains confidential > information and may be > subject to privilege. If you are not the intended recipient you may not > distribute it in any > way, you must notify the sender immediately and delete any copies of the > message along > with its attachments. > > *Rakon UK Ltd is a limited company registered in England and Wales. > Registered Office: Dowsett House, Sadler Road, Lincoln LN6 3RS > Company Registration Number: 5128090. > > Please be aware that Rakon UK Limited may monitor email traffic data > including the date, time, subject line, sender and recipients for the > purposes of security and usage monitoring. Automated monitoring > systems may also be applied to ascertain whether incoming/outgoing > emails are likely to contain viruses, other destructive devices or > inappropriate content. * > > *From:* xymon-bounces at xymon.com [mailto:xymon-bounces at xymon.com] *On > Behalf Of *deepak deore > *Sent:* 15 April 2013 19:03 > *To:* xymon at xymon.com > *Subject:* [Xymon] mails in html format**** > > ** ** > > Can we send xymon alerts in html format? which will give better look to > the mails.**** > -------------- next part -------------- An HTML attachment was scrubbed... URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: qafe2.jpg Type: image/jpeg Size: 9624 bytes Desc: not available URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: emailsig.jpg Type: image/jpeg Size: 4046 bytes Desc: not available URL: From Carl.Inglis at rakon.com Mon Apr 15 21:39:04 2013 From: Carl.Inglis at rakon.com (Carl Inglis) Date: Mon, 15 Apr 2013 19:39:04 +0000 Subject: [Xymon] mails in html format In-Reply-To: References: Message-ID: <37385EB2A81D7A4C810FDC0ED2603ED310E752E5@lin-exch-02.rakon.net> Hi Deepak, If you search the archives, there was discussion about a perl script that sent HTML formatted emails. It's available here: http://www.xymonton.org/alerts:html_mail1.2 Regards, Carl Carl Inglis Systems Administrator Rakon UK Limited Dowsett House, Sadler Road, Lincoln LN6 3RS, United Kingdom Tel: +44 (0)1522 812630 | Fax: +44 (0) 1522 812664 | Mob: +44 (0) 7786 552915 Carl.Inglis at rakon.com | www.rakon.com [The Queens Awards for Enterprise 2012] [Rakon Logo] This message together with any attachments contains confidential information and may be subject to privilege. If you are not the intended recipient you may not distribute it in any way, you must notify the sender immediately and delete any copies of the message along with its attachments. Rakon UK Ltd is a limited company registered in England and Wales. Registered Office: Dowsett House, Sadler Road, Lincoln LN6 3RS Company Registration Number: 5128090. Please be aware that Rakon UK Limited may monitor email traffic data including the date, time, subject line, sender and recipients for the purposes of security and usage monitoring. Automated monitoring systems may also be applied to ascertain whether incoming/outgoing emails are likely to contain viruses, other destructive devices or inappropriate content. From: xymon-bounces at xymon.com [mailto:xymon-bounces at xymon.com] On Behalf Of deepak deore Sent: 15 April 2013 19:03 To: xymon at xymon.com Subject: [Xymon] mails in html format Can we send xymon alerts in html format? which will give better look to the mails. -------------- next part -------------- An HTML attachment was scrubbed... URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: qafe2.jpg Type: image/jpeg Size: 9624 bytes Desc: qafe2.jpg URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: emailsig.jpg Type: image/jpeg Size: 4046 bytes Desc: emailsig.jpg URL: From mburger at bubbanfriends.org Mon Apr 15 21:34:59 2013 From: mburger at bubbanfriends.org (Mike Burger) Date: Mon, 15 Apr 2013 15:34:59 -0400 (EDT) Subject: [Xymon] Monitoring Multiple Cores In-Reply-To: References: <515E8764.9040907@unicyber.co.uk> Message-ID: <25205.209.43.25.133.1366054499.squirrel@www.bubbanfriends.org> I'd be interested such functionality for both Linux and AIX. -- Mike Burger http://www.bubbanfriends.org "It's always suicide-mission this, save-the-planet that. No one ever just stops by to say 'hi' anymore." --Colonel Jack O'Neill, SG1 > > Hi ! > > Are there any plans or scripts already there ? > > I will be interesting for Linux as MultiCore-Platform ... > > cheers, > martin > > On Sun, 7 Apr 2013, Vernon Everett wrote: > >> For which OS? >> I think I saw something that does this for Solaris on Xymonton. >> Might be able to modify it for whatever you are using. >> >> Regards >> Vernon >> >> On 5 April 2013 16:12, Gonzalo Fernandez Ordas >> wrote: >> Hi >> >> This a topic I am complete sure was been already discussed, but I >> have been for hours around the web and I cannot find what I am >> looking for.... >> I am trying to monitor every cpu within the server rather than the >> load average, and I wonder if there anything already done rather >> than re-inventing the wheel >> again? >> maybe something which is already done in relation to monitoring >> multiple cores? >> >> Many thanks to all of you. >> _______________________________________________ >> Xymon mailing list >> Xymon at xymon.com >> http://lists.xymon.com/mailman/listinfo/xymon >> >> >> >> >> -- >> "Accept the challenges so that you can feel the exhilaration of >> victory"- General George >> Patton_______________________________________________ > Xymon mailing list > Xymon at xymon.com > http://lists.xymon.com/mailman/listinfo/xymon > From novosirj at umdnj.edu Mon Apr 15 22:42:36 2013 From: novosirj at umdnj.edu (Novosielski, Ryan) Date: Mon, 15 Apr 2013 16:42:36 -0400 Subject: [Xymon] mails in html format References: <37385EB2A81D7A4C810FDC0ED2603ED310E752E5@lin-exch-02.rakon.net> Message-ID: <6A34302C7B62B54EB77F697809EFC81E4122CF424E@UMDEXMBX02.core.umdnj.edu> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 You can use any of the Big Brother scripts with relatively minimal modifications. That repository (though I believe it's going to disappear at some point if it has not already) is deadcat.net. On 04/15/2013 03:51 PM, deepak deore wrote: > Thanks Carl, there are lots of other scripts as well on this site. > Will give a try. BTW ... do you have any other sites which has lots > of scripts/ plugin kind of things for xymon? > > > On Tue, Apr 16, 2013 at 1:09 AM, Carl Inglis > > wrote: > > Hi Deepak,____ > > __ __ > > If you search the archives, there was discussion about a perl > script that sent HTML formatted emails. It’s available here: > http://www.xymonton.org/alerts:html_mail1.2____ > > __ __ > > Regards,____ > > __ __ > > Carl____ > > __ __ > > > Carl Inglis * Systems Administrator* > > *Rakon UK Limited* Dowsett House, Sadler Road, Lincoln LN6 3RS, > United Kingdom Tel: +44 (0)1522 812630 | Fax: +44 (0) 1522 812664 | > Mob: +44 (0) 7786 552915 Carl.Inglis at rakon.com > | www.rakon.com > > > The Queens Awards for Enterprise 2012 > > Rakon Logo > > This message together with any attachments contains confidential > information and may be subject to privilege. If you are not the > intended recipient you may not distribute it in any way, you must > notify the sender immediately and delete any copies of the message > along with its attachments. > > /Rakon UK Ltd is a limited company registered in England and > Wales. Registered Office: Dowsett House, Sadler Road, Lincoln LN6 > 3RS Company Registration Number: 5128090. > > Please be aware that Rakon UK Limited may monitor email traffic > data including the date, time, subject line, sender and recipients > for the purposes of security and usage monitoring. Automated > monitoring systems may also be applied to ascertain whether > incoming/outgoing emails are likely to contain viruses, other > destructive devices or inappropriate content. / > > *From:*xymon-bounces at xymon.com > [mailto:xymon-bounces at xymon.com ] > *On Behalf Of *deepak deore *Sent:* 15 April 2013 19:03 *To:* > xymon at xymon.com *Subject:* [Xymon] mails > in html format____ > > __ __ > > Can we send xymon alerts in html format? which will give better > look to the mails.____ > > - -- - ---- _ _ _ _ ___ _ _ _ |Y#| | | |\/| | \ |\ | | |Ryan Novosielski - Sr. Systems Programmer |$&| |__| | | |__/ | \| _| |novosirj at umdnj.edu - 973/972.0922 (2-0922) \__/ Univ. of Med. and Dent.|IST/EI-Academic Svcs. - ADMC 450, Newark -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) Comment: Using GnuPG with undefined - http://www.enigmail.net/ iEYEARECAAYFAlFsZjcACgkQmb+gadEcsb4rsACglysyrWtUZzNZvCpKwzrBOM7y 8CQAoNxVFfGCa8p5nc0rpmBUZ1AfguVL =d/p/ -----END PGP SIGNATURE----- From novosirj at umdnj.edu Tue Apr 16 05:11:14 2013 From: novosirj at umdnj.edu (Novosielski, Ryan) Date: Mon, 15 Apr 2013 23:11:14 -0400 Subject: [Xymon] IGNORE for DISK and INODE in analysis.cfg Message-ID: <6A34302C7B62B54EB77F697809EFC81E4122CF4253@UMDEXMBX02.core.umdnj.edu> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi all, Quick question: does anyone know of an intelligent way to ignore both the disk and inode tests for a filesystem without adding two lines to analysis.cfg every time? I've noticed that a lot of the FS I excluded from the disk test have now returned (with all of the associated RRD cruft) in the form of the inode test now that I'm running 4.3.10. Thanks in advance for the tips. - -- - ---- _ _ _ _ ___ _ _ _ |Y#| | | |\/| | \ |\ | | |Ryan Novosielski - Sr. Systems Programmer |$&| |__| | | |__/ | \| _| |novosirj at umdnj.edu - 973/972.0922 (2-0922) \__/ Univ. of Med. and Dent.|IST/EI-Academic Svcs. - ADMC 450, Newark -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) Comment: Using GnuPG with undefined - http://www.enigmail.net/ iEYEARECAAYFAlFswUwACgkQmb+gadEcsb52dwCfeFSq7JAh2T24jdY+wN+zIS8t 1wwAoLyGrE0FvOzvvUcNAPdEkKL8oF1b =bG8V -----END PGP SIGNATURE----- From g.fer.ordas at unicyber.co.uk Tue Apr 16 09:07:04 2013 From: g.fer.ordas at unicyber.co.uk (Gonzalo Fernandez Ordas) Date: Tue, 16 Apr 2013 08:07:04 +0100 Subject: [Xymon] Monitoring Multiple Cores In-Reply-To: <25205.209.43.25.133.1366054499.squirrel@www.bubbanfriends.org> References: <515E8764.9040907@unicyber.co.uk> <25205.209.43.25.133.1366054499.squirrel@www.bubbanfriends.org> Message-ID: <516CF898.4030406@unicyber.co.uk> Well... I will try to find time to write an extension (or something) to achieve something like that for linux. On 15/04/2013 20:34, Mike Burger wrote: > I'd be interested such functionality for both Linux and AIX. From martin.flemming at desy.de Tue Apr 16 09:41:57 2013 From: martin.flemming at desy.de (Martin Flemming) Date: Tue, 16 Apr 2013 09:41:57 +0200 (CEST) Subject: [Xymon] Monitoring Multiple Cores In-Reply-To: <516CF898.4030406@unicyber.co.uk> References: <515E8764.9040907@unicyber.co.uk> <25205.209.43.25.133.1366054499.squirrel@www.bubbanfriends.org> <516CF898.4030406@unicyber.co.uk> Message-ID: On Tue, 16 Apr 2013, Gonzalo Fernandez Ordas wrote: > Well... I will try to find time to write an extension (or something) to > achieve something like that for linux. That sounds nice :-) martin > > On 15/04/2013 20:34, Mike Burger wrote: >> I'd be interested such functionality for both Linux and AIX. From spah at syntec.co.uk Tue Apr 16 17:29:29 2013 From: spah at syntec.co.uk (SebA) Date: Tue, 16 Apr 2013 16:29:29 +0100 Subject: [Xymon] client-local.cfg backticks expression help Message-ID: Using Jeremy's amazing example here http://lists.xymon.com/pipermail/xymon/2013-January/036615.html I'm trying to do something a little simpler... Basically, if the line contains "debug:" replace it and the rest of the line with "DEBUG LINE DETECTED AND REPLACED". Otherwise just output the log normally. Here is what I have tried and the part within the backticks works fine (if I exclude the exec part that hangs my bash session) from a command line to produce the name of the file: log:`exec 2>/dev/null; F=/path/to/file/log.log; T=/tmp/substitutedlog.log; C=$(sed 's/debug:.*/DEBUG LINE DETECTED AND REPLACED/' $F > $T); echo $T`:1024 log:`exec 2>/dev/null; F=/path/to/file/log.log; T=/tmp/substitutedlog.log; sed 's/debug:.*/DEBUG LINE DETECTED AND REPLACED/' $F > $T; echo $T`:1024 log:`exec 2>/dev/null; F=/path/to/file/log.log; T=/tmp/substitutedlog.log; sed "s/debug:.*/DEBUG LINE DETECTED AND REPLACED/" $F > $T; echo $T`:1024 log:`F=/path/to/file/log.log; T=/tmp/substitutedlog.log; sed "s/debug:.*/DEBUG LINE DETECTED AND REPLACED/" $F > $T; echo $T`:1024 But /usr/share/xymon-client/logs/xymonclient.log gets this: sh: -c: line 0: unexpected EOF while looking for matching `'' sh: -c: line 1: syntax error: unexpected end of file Or this: sh: -c: line 0: unexpected EOF while looking for matching `"' sh: -c: line 1: syntax error: unexpected end of file ...depending on whether I use single or double quotes in the sed expression. Kind regards, SebA From sean.clark at twcable.com Tue Apr 16 17:04:15 2013 From: sean.clark at twcable.com (Clark, Sean) Date: Tue, 16 Apr 2013 11:04:15 -0400 Subject: [Xymon] Scaling In-Reply-To: <1365711795.4608.10.camel@aragorn> Message-ID: [Sorry to respond so late, I am catching up on emails] I monitor about 43,000 devices split across 8 instances. It runs on ancient hardware with 2 CPU, 8GB RAM, sun x4200's I split RRD's to a different host, as well as xymongen and histfiles being handled outside of stock xymon The only issue I have run into (which I suspect will be fixed by beefier hardware) is that once I get around 5,000 hosts, if xymon crashes, the IPC/Shared Memory does not clean up right away, and it goes into a continual restart process - henrik posted to the list earlier a way to restart that kills all those things, so I haven't had issues since (still tracking down what causes the crash) On 4/11/13 4:23 PM, "Olivier AUDRY" wrote: >great many thx for your time I will check this > >> but there are only so many hours in the >> day and there's other low-hanging fruit at the moment :) > >so true :) > >Le jeudi 11 avril 2013 à 20:12 +0000, cleaver at terabithia.org a écrit : >> > Le jeudi 11 avril 2013 à 20:40 +0200, Olivier AUDRY a écrit : >> >> > hello >> > >> > as I understand I should run xymon on a single node to improve memory >> > access latency. Right ? >> > >> --snip-- >> >> numactl --hardware >> >> available: 2 nodes (0-1) >> >> node 0 size: 12097 MB >> >> node 0 free: 594 MB >> >> node 1 size: 12120 MB >> >> node 1 free: 12 MB >> >> node distances: >> >> node 0 1 >> >> 0: 10 20 >> >> >> >> >> >> event I got 24 cpu. Multi core and hyperthreading. Is that correct ? >> >> That seems odd; almost like hyperthreading is disabled? You should see >> "node 0 cpus: ..." above each size. I'm running RHEL 6.4; it's possible >> things have changed in that output over time if you're on a different >> system. >> >> >> >> >> >> As I can see my two node are full. Not good at all I guess. >> >> >> >> My policy is the default one. Perhaps you can advice a specific >>policy >> >> for a xymon setup ? >> >> >> >> numactl --show >> >> policy: default >> >> preferred node: current >> >> physcpubind: 0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 >>22 >> >> 23 >> >> cpubind: 0 1 >> >> nodebind: 0 1 >> >> membind: 0 1 >> >> Generally speaking, yeah, use numactl in front of xymonlaunch to ensure >> the entire process tree gets assigned to a single node. But it really >> depends on your workload (can everything fit in that node?) and what >>else >> is going on on the box. If you have something which analyzes xymondata >>in >> a large dump, then does heavy munging on it and sends it back, it might >>be >> better to have than on a different node than (say) the xymond_* worker >> modules. >> >> 'numastat -s -z -p xymon' is your friend >> >> The RH Performance Tuning and Resource Management guides are definitely >> useful reading as well. I'm sure there's plenty of cgroup stuff that >>could >> be helpful if/when the time came, but there are only so many hours in >>the >> day and there's other low-hanging fruit at the moment :) >> >> I'd definitely start with running the 'numad' service and seeing what it >> does over time; it really could be all that you need. >> >> HTH, >> >> -jc >> >> > >_______________________________________________ >Xymon mailing list >Xymon at xymon.com >http://lists.xymon.com/mailman/listinfo/xymon This E-mail and any of its attachments may contain Time Warner Cable proprietary information, which is privileged, confidential, or subject to copyright belonging to Time Warner Cable. This E-mail is intended solely for the use of the individual or entity to which it is addressed. If you are not the intended recipient of this E-mail, you are hereby notified that any dissemination, distribution, copying, or action taken in relation to the contents of and attachments to this E-mail is strictly prohibited and may be unlawful. If you have received this E-mail in error, please notify the sender immediately and permanently delete the original and any copy of this E-mail and any printout. From troy at athabascau.ca Tue Apr 16 18:51:26 2013 From: troy at athabascau.ca (Troy Adams) Date: Tue, 16 Apr 2013 10:51:26 -0600 (MDT) Subject: [Xymon] DNS error In-Reply-To: <1956738543.423211366131050409.JavaMail.root@amundsen.cs.athabascau.ca> Message-ID: <778137355.423481366131086100.JavaMail.root@amundsen.cs.athabascau.ca> This has been happening on many, but not all, of my http tests since 23:49:51 last night. cheers, Troy ----- Original Message ----- From: "Troy Adams" To: "xymon" Sent: Tuesday, April 16, 2013 10:40:57 AM GMT -07:00 US/Canada Mountain Subject: DNS error A couple of my xymonnet tests are reporting "DNS error". There are no other details and the --no-ares xymonnet option didn't help. Please help! /Troy -- This communication is intended for the use of the recipient to whom it is addressed, and may contain confidential, personal, and or privileged information. Please contact us immediately if you are not the intended recipient of this communication, and do not copy, distribute, or take action relying on it. Any communications received in error, or subsequent reply, should be deleted or destroyed. --- -------------- next part -------------- An HTML attachment was scrubbed... URL: From troy at athabascau.ca Tue Apr 16 18:40:57 2013 From: troy at athabascau.ca (Troy Adams) Date: Tue, 16 Apr 2013 10:40:57 -0600 (MDT) Subject: [Xymon] DNS error In-Reply-To: <1203106277.416871366130409710.JavaMail.root@amundsen.cs.athabascau.ca> Message-ID: <342574757.417461366130457774.JavaMail.root@amundsen.cs.athabascau.ca> A couple of my xymonnet tests are reporting "DNS error". There are no other details and the --no-ares xymonnet option didn't help. Please help! / Troy -- This communication is intended for the use of the recipient to whom it is addressed, and may contain confidential, personal, and or privileged information. Please contact us immediately if you are not the intended recipient of this communication, and do not copy, distribute, or take action relying on it. Any communications received in error, or subsequent reply, should be deleted or destroyed. --- -------------- next part -------------- An HTML attachment was scrubbed... URL: From mburger at bubbanfriends.org Tue Apr 16 19:22:27 2013 From: mburger at bubbanfriends.org (Mike Burger) Date: Tue, 16 Apr 2013 13:22:27 -0400 (EDT) Subject: [Xymon] DNS error In-Reply-To: <778137355.423481366131086100.JavaMail.root@amundsen.cs.athabascau.ca> References: <778137355.423481366131086100.JavaMail.root@amundsen.cs.athabascau.ca> Message-ID: <41107.209.43.25.133.1366132947.squirrel@www.bubbanfriends.org> I have a similar situation for one particular system...in my case, it's likely an issue that the name I'm monitoring is actually a CNAME, and there are occasional timeouts when querying the server that's responsible for the domain where the CNAME record resides. My guess is that you're experiencing timeouts with DNS queries. If the "error" states don't last longer than a single polling interval, that's your likely culprit. -- Mike Burger http://www.bubbanfriends.org "It's always suicide-mission this, save-the-planet that. No one ever just stops by to say 'hi' anymore." --Colonel Jack O'Neill, SG1 > This has been happening on many, but not all, of my http tests since > 23:49:51 last night. > > > cheers, > > Troy > > > > ----- Original Message ----- > From: "Troy Adams" > To: "xymon" > Sent: Tuesday, April 16, 2013 10:40:57 AM GMT -07:00 US/Canada Mountain > Subject: DNS error > > > A couple of my xymonnet tests are reporting "DNS error". > > There are no other details and the --no-ares xymonnet option didn't help. > > Please help! > > > /Troy > > > > > -- > This communication is intended for the use of the recipient to whom it > is addressed, and may contain confidential, personal, and or > privileged > information. Please contact us immediately if you are not the intended > recipient of this communication, and do not copy, distribute, or take > action relying on it. Any communications received in error, or > subsequent reply, should be deleted or destroyed. > --- > _______________________________________________ > Xymon mailing list > Xymon at xymon.com > http://lists.xymon.com/mailman/listinfo/xymon > From troy at athabascau.ca Tue Apr 16 19:30:56 2013 From: troy at athabascau.ca (Troy Adams) Date: Tue, 16 Apr 2013 11:30:56 -0600 (MDT) Subject: [Xymon] DNS error In-Reply-To: <41107.209.43.25.133.1366132947.squirrel@www.bubbanfriends.org> Message-ID: <796667471.448641366133456957.JavaMail.root@amundsen.cs.athabascau.ca> Thanks Mike. cheers, Troy ----- Original Message ----- From: "Mike Burger" To: "Troy Adams" Cc: "xymon" Sent: Tuesday, April 16, 2013 11:22:27 AM GMT -07:00 US/Canada Mountain Subject: Re: [Xymon] DNS error I have a similar situation for one particular system...in my case, it's likely an issue that the name I'm monitoring is actually a CNAME, and there are occasional timeouts when querying the server that's responsible for the domain where the CNAME record resides. My guess is that you're experiencing timeouts with DNS queries. If the "error" states don't last longer than a single polling interval, that's your likely culprit. -- Mike Burger http://www.bubbanfriends.org "It's always suicide-mission this, save-the-planet that. No one ever just stops by to say 'hi' anymore." --Colonel Jack O'Neill, SG1 > This has been happening on many, but not all, of my http tests since > 23:49:51 last night. > > > cheers, > > Troy > > > > ----- Original Message ----- > From: "Troy Adams" > To: "xymon" > Sent: Tuesday, April 16, 2013 10:40:57 AM GMT -07:00 US/Canada Mountain > Subject: DNS error > > > A couple of my xymonnet tests are reporting "DNS error". > > There are no other details and the --no-ares xymonnet option didn't help. > > Please help! > > > /Troy > > > > > -- > This communication is intended for the use of the recipient to whom it > is addressed, and may contain confidential, personal, and or > privileged > information. Please contact us immediately if you are not the intended > recipient of this communication, and do not copy, distribute, or take > action relying on it. Any communications received in error, or > subsequent reply, should be deleted or destroyed. > --- > _______________________________________________ > Xymon mailing list > Xymon at xymon.com > http://lists.xymon.com/mailman/listinfo/xymon > -------------- next part -------------- An HTML attachment was scrubbed... URL: From troy at athabascau.ca Tue Apr 16 19:31:47 2013 From: troy at athabascau.ca (Troy Adams) Date: Tue, 16 Apr 2013 11:31:47 -0600 (MDT) Subject: [Xymon] EXT : DNS error In-Reply-To: <582DD1C70A06C94F91852BD46B8A59691B4407F6@XMBC3084.northgrum.com> Message-ID: <876106775.449381366133507183.JavaMail.root@amundsen.cs.athabascau.ca> Thanks David. I will dig further with the new information you folks have given. cheers, Troy ----- Original Message ----- From: "David Mills (IS)" To: "Troy Adams" , "xymon" Sent: Tuesday, April 16, 2013 11:29:30 AM GMT -07:00 US/Canada Mountain Subject: RE: EXT :[Xymon] DNS error Troy – If you need extra help tracking down what’s happening with the xymonnet process, don’t forget about the “--debug" and “--dump" options to include in the tasks.cfg file for “[xymonnet]”. This was very useful for me in tracking down what was going on in my environment recently. E.g. xymonnet '--report' '--ping' '--checkresponse' '--timeout=25' '--dns-timeout=2' '--dnslog=/var/log/xymon-4.3.3/dns.log' '--concurrency=5' '--debug' '--dump=both david From: xymon-bounces at xymon.com [mailto:xymon-bounces at xymon.com] On Behalf Of Troy Adams Sent: Tuesday, April 16, 2013 11:41 AM To: xymon Subject: EXT :[Xymon] DNS error A couple of my xymonnet tests are reporting "DNS error". There are no other details and the --no-ares xymonnet option didn't help. Please help! /Troy This communication is intended for the use of the recipient to whom it is addressed, and may contain confidential, personal, and or privileged information. Please contact us immediately if you are not the intended recipient of this communication, and do not copy, distribute, or take action relying on it. Any communications received in error, or subsequent reply, should be deleted or destroyed. -------------- next part -------------- An HTML attachment was scrubbed... URL: From bakgat8 at hotmail.com Tue Apr 16 19:20:17 2013 From: bakgat8 at hotmail.com (Bakkies Gatvol) Date: Tue, 16 Apr 2013 13:20:17 -0400 Subject: [Xymon] TIME=*:2101:0729 DURATION>5 and MAIL MACRO Message-ID: Can anyone shed any light for me? larry:/xymondev/L:=> date -d "Tue Apr 16 22:01:23 EDT 2013" +%s 1366164083 this works: [[note *** Match with '$XCD' ***]] $XCD=MAIL user at user.com FORMAT=PLAIN RECOVERED TIME=*:2101:0729 DURATION>5 #-------------------------------------------------------------------- HOST=* SERVICE=conn MAIL user at user.com FORMAT=PLAIN RECOVERED TIME=*:2101:0729 DURATION>5 $XCD larry:/xymondev/-L:=> gelaptopp conn --duration=6 --time=1366164083 < 00009651 2013-04-16 22:01:23 send_alert gelaptopp:conn state Paging 00009651 2013-04-16 22:01:23 Matching host:service:dgroup:page 'gelaptopp:conn:NONE:test' against rule line 132 00009651 2013-04-16 22:01:23 *** Match with 'HOST=* SERVICE=conn' *** 00009651 2013-04-16 22:01:23 Matching host:service:dgroup:page 'gelaptopp:conn:NONE:test' against rule line 133 00009651 2013-04-16 22:01:23 *** Match with 'MAIL user at user.com FORMAT=PLAIN RECOVERED TIME=*:2101:0729 DURATION>5' *** 00009651 2013-04-16 22:01:23 Mail alert with command '/var/spool/mail/xymondev1 "Xymon [12345] gelaptopp:conn CRITICAL (RED)" user at user.com' 00009651 2013-04-16 22:01:23 Matching host:service:dgroup:page 'gelaptopp:conn:NONE:test' against rule line 134 00009651 2013-04-16 22:01:23 *** Match with '$XCD' *** 00009651 2013-04-16 22:01:23 Mail alert with command '/var/spool/mail/xymondev1 "Xymon [12345] gelaptopp:conn CRITICAL (RED)" user at user.com' 00009651 2013-04-16 22:01:23 Matching host:service:dgroup:page 'gelaptopp:conn:NONE:test' against rule line 151 00009651 2013-04-16 22:01:23 Failed 'HOST=* SERVICE=msgs' (service not in include list) 00009651 2013-04-16 22:01:23 Matching host:service:dgroup:page 'gelaptopp:conn:NONE:test' against rule line 155 00009651 2013-04-16 22:01:23 Failed 'HOST=* SERVICE=* EXSERVICE=conn,memory' (service excluded) this works -- moved only the duration part to be on the line within the HOST paragraph [[*** Match with '$XCD DURATION>5' ***]] $XCD=MAIL user at user.com FORMAT=PLAIN RECOVERED TIME=*:2101:0729 #-------------------------------------------------------------------- HOST=* SERVICE=conn MAIL user at user.com FORMAT=PLAIN RECOVERED TIME=*:2101:0729 DURATION>5 $XCD DURATION>5 larry:/xymondev/ -L:=> /xymondev/dev1/server/bin/xymond_alert --test gelaptopp conn --duration=6 --time=1366164> 00009878 2013-04-16 22:01:23 send_alert gelaptopp:conn state Paging 00009878 2013-04-16 22:01:23 Matching host:service:dgroup:page 'gelaptopp:conn:NONE:test' against rule line 132 00009878 2013-04-16 22:01:23 *** Match with 'HOST=* SERVICE=conn' *** 00009878 2013-04-16 22:01:23 Matching host:service:dgroup:page 'gelaptopp:conn:NONE:test' against rule line 133 00009878 2013-04-16 22:01:23 *** Match with 'MAIL user at user.com FORMAT=PLAIN RECOVERED TIME=*:2101:0729 DURATION>5' *** 00009878 2013-04-16 22:01:23 Mail alert with command '/var/spool/mail/xymondev1 "Xymon [12345] gelaptopp:conn CRITICAL (RED)" user at user.com' 00009878 2013-04-16 22:01:23 Matching host:service:dgroup:page 'gelaptopp:conn:NONE:test' against rule line 134 00009878 2013-04-16 22:01:23 *** Match with '$XCD DURATION>5' *** 00009878 2013-04-16 22:01:23 Mail alert with command '/var/spool/mail/xymondev1 "Xymon [12345] gelaptopp:conn CRITICAL (RED)" user at user.com' 00009878 2013-04-16 22:01:23 Matching host:service:dgroup:page 'gelaptopp:conn:NONE:test' against rule line 151 00009878 2013-04-16 22:01:23 Failed 'HOST=* SERVICE=msgs' (service not in include list) 00009878 2013-04-16 22:01:23 Matching host:service:dgroup:page 'gelaptopp:conn:NONE:test' against rule line 155 00009878 2013-04-16 22:01:23 Failed 'HOST=* SERVICE=* EXSERVICE=conn,memory' (service excluded) If I try and move the TIME as well it fails to match. Why? $XCD=MAIL user at user.com FORMAT=PLAIN RECOVERED #-------------------------------------------------------------------- HOST=* SERVICE=conn MAIL user at user.com FORMAT=PLAIN RECOVERED TIME=*:2101:0729 DURATION>5 $XCD TIME=*:2101:0729 DURATION>5 larry:/xymondev/ -L:=> /xymondev/dev1/server/bin/xymond_alert --test gelaptopp conn --duration=6 --time=1366164> 00010046 2013-04-16 22:01:23 send_alert gelaptopp:conn state Paging 00010046 2013-04-16 22:01:23 Matching host:service:dgroup:page 'gelaptopp:conn:NONE:test' against rule line 132 00010046 2013-04-16 22:01:23 *** Match with 'HOST=* SERVICE=conn' *** 00010046 2013-04-16 22:01:23 Matching host:service:dgroup:page 'gelaptopp:conn:NONE:test' against rule line 133 00010046 2013-04-16 22:01:23 *** Match with 'MAIL user at user.com FORMAT=PLAIN RECOVERED TIME=*:2101:0729 DURATION>5' *** 00010046 2013-04-16 22:01:23 Mail alert with command '/var/spool/mail/xymondev1 "Xymon [12345] gelaptopp:conn CRITICAL (RED)" user at user.com' 00010046 2013-04-16 22:01:23 Matching host:service:dgroup:page 'gelaptopp:conn:NONE:test' against rule line 151 00010046 2013-04-16 22:01:23 Failed 'HOST=* SERVICE=msgs' (service not in include list) 00010046 2013-04-16 22:01:23 Matching host:service:dgroup:page 'gelaptopp:conn:NONE:test' against rule line 155 00010046 2013-04-16 22:01:23 Failed 'HOST=* SERVICE=* EXSERVICE=conn,memory' (service excluded) this does not work either ... $XCD=MAIL user at user.com FORMAT=PLAIN RECOVERED DURATION>5 #-------------------------------------------------------------------- HOST=* SERVICE=conn MAIL user at user.com FORMAT=PLAIN RECOVERED TIME=*:2101:0729 DURATION>5 $XCD TIME=*:2101:0729 00013510 2013-04-16 22:01:23 send_alert gelaptopp:conn state Paging 00013510 2013-04-16 22:01:23 Matching host:service:dgroup:page 'gelaptopp:conn:NONE:test' against rule line 132 00013510 2013-04-16 22:01:23 *** Match with 'HOST=* SERVICE=conn' *** 00013510 2013-04-16 22:01:23 Matching host:service:dgroup:page 'gelaptopp:conn:NONE:test' against rule line 133 00013510 2013-04-16 22:01:23 *** Match with 'MAIL user at user.com FORMAT=PLAIN RECOVERED TIME=*:2101:0729 DURATION>5' *** 00013510 2013-04-16 22:01:23 Mail alert with command '/var/spool/mail/xymondev1 "Xymon [12345] gelaptopp:conn CRITICAL (RED)" user at user.com' 00013510 2013-04-16 22:01:23 Matching host:service:dgroup:page 'gelaptopp:conn:NONE:test' against rule line 151 00013510 2013-04-16 22:01:23 Failed 'HOST=* SERVICE=msgs' (service not in include list) 00013510 2013-04-16 22:01:23 Matching host:service:dgroup:page 'gelaptopp:conn:NONE:test' against rule line 155 00013510 2013-04-16 22:01:23 Failed 'HOST=* SERVICE=* EXSERVICE=conn,memory' (service excluded) -------------- next part -------------- An HTML attachment was scrubbed... URL: From David.Mills at ngc.com Tue Apr 16 19:29:30 2013 From: David.Mills at ngc.com (Mills, David (IS)) Date: Tue, 16 Apr 2013 17:29:30 +0000 Subject: [Xymon] EXT : DNS error In-Reply-To: <342574757.417461366130457774.JavaMail.root@amundsen.cs.athabascau.ca> References: <1203106277.416871366130409710.JavaMail.root@amundsen.cs.athabascau.ca> <342574757.417461366130457774.JavaMail.root@amundsen.cs.athabascau.ca> Message-ID: <582DD1C70A06C94F91852BD46B8A59691B4407F6@XMBC3084.northgrum.com> Troy – If you need extra help tracking down what’s happening with the xymonnet process, don’t forget about the “--debug" and “--dump" options to include in the tasks.cfg file for “[xymonnet]”. This was very useful for me in tracking down what was going on in my environment recently. E.g. xymonnet '--report' '--ping' '--checkresponse' '--timeout=25' '--dns-timeout=2' '--dnslog=/var/log/xymon-4.3.3/dns.log' '--concurrency=5' '--debug' '--dump=both david From: xymon-bounces at xymon.com [mailto:xymon-bounces at xymon.com] On Behalf Of Troy Adams Sent: Tuesday, April 16, 2013 11:41 AM To: xymon Subject: EXT :[Xymon] DNS error A couple of my xymonnet tests are reporting "DNS error". There are no other details and the --no-ares xymonnet option didn't help. Please help! /Troy ________________________________ This communication is intended for the use of the recipient to whom it is addressed, and may contain confidential, personal, and or privileged information. Please contact us immediately if you are not the intended recipient of this communication, and do not copy, distribute, or take action relying on it. Any communications received in error, or subsequent reply, should be deleted or destroyed. ________________________________ -------------- next part -------------- An HTML attachment was scrubbed... URL: From jlaidman at rebel-it.com.au Wed Apr 17 02:00:30 2013 From: jlaidman at rebel-it.com.au (Jeremy Laidman) Date: Wed, 17 Apr 2013 10:00:30 +1000 Subject: [Xymon] DNS error In-Reply-To: <778137355.423481366131086100.JavaMail.root@amundsen.cs.athabascau.ca> References: <1956738543.423211366131050409.JavaMail.root@amundsen.cs.athabascau.ca> <778137355.423481366131086100.JavaMail.root@amundsen.cs.athabascau.ca> Message-ID: On 17 April 2013 02:51, Troy Adams wrote: > A couple of my xymonnet tests are reporting "DNS error". > I use "testip" on pretty much all my hosts, and have explicit tests for important DNS names. I don't think it's helpful for a service to be reported as unavailable, or not even tested, because a DNS lookup fails. (You can also run xymonnet with "--dns=ip" to get the same effect for network tests.) However the "testip" and "--dns=ip" settings don't apply to web tests. Instead, you use a special syntax in hosts.cfg, for example: 10.1.2.3 # webserver1.example.com http://web1.example.com= 10.1.2.3/cgi-bin/testthis J -------------- next part -------------- An HTML attachment was scrubbed... URL: From jlaidman at rebel-it.com.au Wed Apr 17 03:02:00 2013 From: jlaidman at rebel-it.com.au (Jeremy Laidman) Date: Wed, 17 Apr 2013 11:02:00 +1000 Subject: [Xymon] client-local.cfg backticks expression help In-Reply-To: References: Message-ID: On 17 April 2013 01:29, SebA wrote: > Using Jeremy's amazing example here > http://lists.xymon.com/pipermail/xymon/2013-January/036615.html I'm trying > to do something a little simpler... > Yeah, simpler is good. I wouldn't call my example "amazing", instead it's "complicated", or even "hackgly". Actually, I'm amazed it works! log:`exec 2>/dev/null; F=/path/to/file/log.log; T=/tmp/substitutedlog.log; > C=$(sed 's/debug:.*/DEBUG LINE DETECTED AND REPLACED/' $F > $T); echo > $T`:1024 > Yup. But /usr/share/xymon-client/logs/xymonclient.log gets this: > > sh: -c: line 0: unexpected EOF while looking for matching `'' > sh: -c: line 1: syntax error: unexpected end of file > I'm fairly sure the problem is the colon in "debug:". The Xymon client-side binary logfetch parses the log line from /tmp/logfetch.$HOSTNAME.cfg. The first thing it does is to split the line on the colon delimiter, into three parts, the last one being the max log message size. The logfetch program doesn't process any escapes or quoting, and only cares about the colons. In my post to which you linked, I mentioned this problem. I handled it by putting creating a quote using printf from a hex representation, put it in a variable ($Z), and used that in my commands. So this might stop the errors, and let the full command parse correctly: log:`exec 2>/dev/null; COLON=$(printf "\x3a"); F=/path/to/file/log.log; T=/tmp/substitutedlog.log;C=$(sed "s/debug${COLON}.*/DEBUG LINE DETECTED AND REPLACED/" $F > $T); echo $T`:1024 This could be considered an obscure way of quoting, so I could get the colon into the grep parameter. Unlike grep, GNU sed can use quoted hex to represent arbitrary characters, so you might be able to get away with this: log:`exec 2>/dev/null; F=/path/to/file/log.log; T=/tmp/substitutedlog.log;C=$(sed "s/debug\x3a.*/DEBUG LINE DETECTED AND REPLACED/" $F > $T); echo $T`:1024 In bash, the same \xnn format is expanded in strings of the form $'...', so this can be used if you weren't using sed to do pattern matching. For example: grep $'debug\x3a.*' > /tmp/tmpfile. I'm not sure why you're using C=$() rather than just the commands - probably just a hang-over from my example. There's unlikely to be any output to put into $C, and you don't use it anyway. I had it in my post because I wanted to do some calculations with it. So you can simplify this to be: log:`exec 2>/dev/null; F=/path/to/file/log.log; T=/tmp/substitutedlog.log;sed "s/debug\x2a.*/DEBUG LINE DETECTED AND REPLACED/" $F > $T; echo $T`:1024 In fact, this is almost simple enough that variables don't aid maintainability, so I'd probably go with this, which is easier for a sysadmin to grok IMHO: log:`sed "s/debug\x2a.*/DEBUG LINE DETECTED AND REPLACED/" /path/to/file/log.log > /tmp/substitutedlog.log 2>/dev/null; echo /tmp/substitutedlog.log`:1024 J -------------- next part -------------- An HTML attachment was scrubbed... URL: From Phil.Crooker at orix.com.au Wed Apr 17 03:48:44 2013 From: Phil.Crooker at orix.com.au (Phil Crooker) Date: Wed, 17 Apr 2013 11:48:44 +1000 Subject: [Xymon] graphing problem Message-ID: <516E8C1C020000C0000CEF27@vho64pn04.orix.com.au> I'm a graphing newbie and can't get the graph to work. Could anyone please help? This is to measure internet latency, the test is called "internet". This is running over four hosts, so we should be getting four sets of graphs. The rrd file is created, but I just see NaN values, no data is being recorded. many thanks, Phil I've got the following data coming in from an ext script every 10 mintues: google : 0.15 businessspectator : 1.28 bloomberg : 0.05 ------------------------------------- I set this up as a gauge graph. Here is one of the entries: google GAUGE 600 NaN NaN U 0.0000000000e+00 172 ---------------------------------------------------- Here are the config files. in xymonserver.cfg: I added this to the GRAPHS string: internet=ncv and put in this line after that NCV_internet="google:GAUGE,businessspectator:GAUGE,bloomberg:GAUGE" ------------------------------------- graphs.cfg: [internet] TITLE Internet Latency YAXIS Seconds DEF:google=internet.rrd:google:GAUGE DEF:businessspectator=internet.rrd:businessspectator:GAUGE DEF:bloomberg=internet.rrd:bloomberg:GAUGE LINE2:google#00CCCC:Inode cache LINE2:businessspectator#FF0000:Dentry cache LINE2:bloomberg#00FF00:In COMMENT:Time to load home page in seconds.\n -------------- next part -------------- An HTML attachment was scrubbed... URL: From Rolands at logicaltech.com.au Wed Apr 17 05:45:08 2013 From: Rolands at logicaltech.com.au (Roland Soderstrom) Date: Wed, 17 Apr 2013 03:45:08 +0000 Subject: [Xymon] clustered xymonserver using XYMONSERVERS Message-ID: Hi, Just want to let anyone out there know how I worked out a cheap and easy xymon server "cluster" I really have no idea if this is the correct way of doing this but it works flawlessly for me. I had 1 xymon server, pxym01, running Solaris 10 and xymon 4.3.10 I wanted to get another "backup server" if this one fails. (it has some disk issues which resolves in recoverable errors at the moment) This is a brief step by step how I configured a second xymon server. * Install Solaris 10 on new server (pxym02) * Install all pre-requisite for running a Xymon server, this should be the same as the existing pxym01. * Change ALL xymon-clients to use XYMONSERVERS Vi /usr/local/xymon/client/etc/xymonclient.cfg XYMSRV="0.0.0.0" # IP address of the Xymon server XYMSERVERS="192.168.1.1 192.168.1.2" # IP of multiple Xymon servers. XYMSRV must be "0.0.0.0". * copy /etc/apache2/httpd.conf from pxym01 to pxym02 and change it to suit pxym02, you need f.ex. change the port and ip-address * copy /usr/local/xymon directory from pxym01 to pxym02 (this obviously requires same arch and OS on both servers) * change /usr/local/xymon/server/etc/hosts on both xymon servers 192.168.1.1 pxym01 # bbd http://pxym01:8082/xymon/xymon.html 192.168.1.2 pxym02 # bbd http://pxym02:8083/xymon/xymon.html * change /usr/local/xymon/server/etc/xymonserver.cfg on pxym02, change ip and xymonserver name * start apache2 * start xymon on pxym02 As we copied the whole xymon directory all history is there, graphs and the lot. One funny thing I noticed, is it a bug? The CPU test also checks the time difference and if the time diffs more than 10secs between xymonserver and xymonclient the test goes yellow. In the list of XYMSERVERS="192.168.1.1 192.168.1.2" it will check with the first one in the list not the second?? In this example if I take down 192.168.1.1 the cpu time diff test goes yellow on 192.168.1.2. If I swap them around XYMSERVERS="192.168.1.2 192.168.1.1" it works again. Have fun. - Roland Soderstrom From Phil.Crooker at orix.com.au Wed Apr 17 07:30:50 2013 From: Phil.Crooker at orix.com.au (Phil Crooker) Date: Wed, 17 Apr 2013 15:30:50 +1000 Subject: [Xymon] graphing problem In-Reply-To: References: <516E8C1C020000C0000CEF27@vho64pn04.orix.com.au> Message-ID: <516EC02A020000C0000CEF88@vho64pn04.orix.com.au> >> should be getting four sets of graphs. The rrd file is created, but I just see NaN values, no data is being recorded. > First, it sometimes takes a few cycles for RRD entries to show up. Although I suspect this is normally for non-GAUGE data sources. This has been running for several days. > Check your RRD file permissions and make sure that Xymon can write to them. If they contain nothing but NaNs, you could delete them and see if they get recreated. Yes they are recreated. >> in xymonserver.cfg: >> I added this to the GRAPHS string: internet=ncv >> and put in this line after that >> NCV_internet="google:GAUGE,businessspectator:GAUGE,bloomberg:GAUGE" > Good. Also, you might need to add "internet=ncv" to TEST2RRD. It is now in both GRAPHS and TEST2RRD and has gone through several cycles... Probably something simple I missed out. thanks. From mailinglists at websitemanagers.com.au Wed Apr 17 07:35:51 2013 From: mailinglists at websitemanagers.com.au (Adam Goryachev) Date: Wed, 17 Apr 2013 15:35:51 +1000 Subject: [Xymon] graphing problem In-Reply-To: <516EC02A020000C0000CEF88@vho64pn04.orix.com.au> References: <516E8C1C020000C0000CEF27@vho64pn04.orix.com.au> <516EC02A020000C0000CEF88@vho64pn04.orix.com.au> Message-ID: <516E34B7.6050507@websitemanagers.com.au> On 17/04/13 15:30, Phil Crooker wrote: >>> should be getting four sets of graphs. The rrd file is created, but I just see NaN values, no data is being recorded. You mentioned that your data is updated every 10 minutes, ensure that the RRD is defined as receiving one update every 10 minutes. By default, it expects data every 5 minutes, and only half the values can be invalid before all data is invalid, and one update every 10 minutes means half the data is invalid/unknown.... Just something to check anyway... (or consider sending data updates more frequently, every 5 minutes like xymon expects). Regards, Adam -- Adam Goryachev Website Managers www.websitemanagers.com.au From jlaidman at rebel-it.com.au Wed Apr 17 07:58:51 2013 From: jlaidman at rebel-it.com.au (Jeremy Laidman) Date: Wed, 17 Apr 2013 15:58:51 +1000 Subject: [Xymon] graphing problem In-Reply-To: <516EC02A020000C0000CEF88@vho64pn04.orix.com.au> References: <516E8C1C020000C0000CEF27@vho64pn04.orix.com.au> <516EC02A020000C0000CEF88@vho64pn04.orix.com.au> Message-ID: On 17 April 2013 15:30, Phil Crooker wrote: > Probably something simple I missed out. > See if there are errors showing in your rrd-status.log file. J -------------- next part -------------- An HTML attachment was scrubbed... URL: From massimo.morsiani at gilbarco.com Wed Apr 17 13:09:51 2013 From: massimo.morsiani at gilbarco.com (Morsiani, Massimo) Date: Wed, 17 Apr 2013 11:09:51 +0000 Subject: [Xymon] root login script Message-ID: <508A72BA79410E498259B65610F6CFFB3177D423@DHREUSVXM02.danaher.org> Hi all, is there anyone that is using one script to check if root user is logged on Unix/Linux machines? Or is there anyone that is using "xymond_rootlogin.pl" and can explain me how to use it? Thanks in advance for the support. Regards. Massimo Morsiani Information Technology Dept. ------ Gilbarco S.r.l. via de' Cattani, 220/G 50145 Firenze, Italy tel:    +39-055-30941 fax:    +39-055-318603 email:  massimo.morsiani at gilbarco.com web:    http://www.gilbarco.it  Please consider the environment before printing this e-mail Please be advised that this email may contain confidential information. If you are not the intended recipient, please notify us by email by replying to the sender and delete this message. The sender disclaims that the content of this email constitutes an offer to enter into, or the acceptance of, any agreement; provided that the foregoing does not invalidate the binding effect of any digital or other electronic reproduction of a manual signature that is included in any attachment. From novosirj at umdnj.edu Wed Apr 17 13:13:32 2013 From: novosirj at umdnj.edu (Novosielski, Ryan) Date: Wed, 17 Apr 2013 07:13:32 -0400 Subject: [Xymon] root login script In-Reply-To: <508A72BA79410E498259B65610F6CFFB3177D423@DHREUSVXM02.danaher.org> Message-ID: <6A34302C7B62B54EB77F697809EFC81E4122CF4263@UMDEXMBX02.core.umdnj.edu> I can't imagine it would be much different than any other external client script. What is the real question? What have you tried? ----- Original Message ----- From: Morsiani, Massimo [mailto:massimo.morsiani at gilbarco.com] Sent: Wednesday, April 17, 2013 07:09 AM To: 'xymon at xymon.com' Subject: [Xymon] root login script Hi all, is there anyone that is using one script to check if root user is logged on Unix/Linux machines? Or is there anyone that is using "xymond_rootlogin.pl" and can explain me how to use it? Thanks in advance for the support. Regards. Massimo Morsiani Information Technology Dept. ------ Gilbarco S.r.l. via de' Cattani, 220/G 50145 Firenze, Italy tel:    +39-055-30941 fax:    +39-055-318603 email:  massimo.morsiani at gilbarco.com web:    http://www.gilbarco.it  Please consider the environment before printing this e-mail Please be advised that this email may contain confidential information. If you are not the intended recipient, please notify us by email by replying to the sender and delete this message. The sender disclaims that the content of this email constitutes an offer to enter into, or the acceptance of, any agreement; provided that the foregoing does not invalidate the binding effect of any digital or other electronic reproduction of a manual signature that is included in any attachment. _______________________________________________ Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon From massimo.morsiani at gilbarco.com Wed Apr 17 14:00:15 2013 From: massimo.morsiani at gilbarco.com (Morsiani, Massimo) Date: Wed, 17 Apr 2013 12:00:15 +0000 Subject: [Xymon] root login script In-Reply-To: <6A34302C7B62B54EB77F697809EFC81E4122CF4263@UMDEXMBX02.core.umdnj.edu> References: <508A72BA79410E498259B65610F6CFFB3177D423@DHREUSVXM02.danaher.org> <6A34302C7B62B54EB77F697809EFC81E4122CF4263@UMDEXMBX02.core.umdnj.edu> Message-ID: <508A72BA79410E498259B65610F6CFFB3177D55D@DHREUSVXM02.danaher.org> Hi, I have tried to use "xymond_rootlogin.pl" but w/o any result. I have copied it in .../xymon/server/ext/ and I have added the following to tasks.cfg. [xymond_rootlogin] ENVFILE /usr/lib/xymon/server/etc/xymonserver.cfg NEEDS xymond CMD $XYMONHOME/ext/xymond_rootlogin.pl LOGFILE $XYMONSERVERLOGS/xymond_rootlogin.log INTERVAL 1m After these actions nothing happens that is no result at all (neither new login test, nor xymond_rootlogin.log file). Where am I wrong? Thanks in advance. Regards. Massimo Morsiani Information Technology Dept. ------ Gilbarco S.r.l. via de' Cattani, 220/G 50145 Firenze, Italy tel:    +39-055-30941 fax:    +39-055-318603 email:  massimo.morsiani at gilbarco.com web:    http://www.gilbarco.it  Please consider the environment before printing this e-mail -----Original Message----- From: Novosielski, Ryan [mailto:novosirj at umdnj.edu] Sent: mercoledì 17 aprile 2013 13:14 To: Morsiani, Massimo; 'xymon at xymon.com' Subject: Re: [Xymon] root login script I can't imagine it would be much different than any other external client script. What is the real question? What have you tried? ----- Original Message ----- From: Morsiani, Massimo [mailto:massimo.morsiani at gilbarco.com] Sent: Wednesday, April 17, 2013 07:09 AM To: 'xymon at xymon.com' Subject: [Xymon] root login script Hi all, is there anyone that is using one script to check if root user is logged on Unix/Linux machines? Or is there anyone that is using "xymond_rootlogin.pl" and can explain me how to use it? Thanks in advance for the support. Regards. Massimo Morsiani Information Technology Dept. ------ Gilbarco S.r.l. via de' Cattani, 220/G 50145 Firenze, Italy tel:    +39-055-30941 fax:    +39-055-318603 email:  massimo.morsiani at gilbarco.com web:    http://www.gilbarco.it ü Please consider the environment before printing this e-mail Please be advised that this email may contain confidential information. If you are not the intended recipient, please notify us by email by replying to the sender and delete this message. The sender disclaims that the content of this email constitutes an offer to enter into, or the acceptance of, any agreement; provided that the foregoing does not invalidate the binding effect of any digital or other electronic reproduction of a manual signature that is included in any attachment. _______________________________________________ Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon Please be advised that this email may contain confidential information. If you are not the intended recipient, please notify us by email by replying to the sender and delete this message. The sender disclaims that the content of this email constitutes an offer to enter into, or the acceptance of, any agreement; provided that the foregoing does not invalidate the binding effect of any digital or other electronic reproduction of a manual signature that is included in any attachment. From novosirj at umdnj.edu Wed Apr 17 14:05:10 2013 From: novosirj at umdnj.edu (Novosielski, Ryan) Date: Wed, 17 Apr 2013 08:05:10 -0400 Subject: [Xymon] root login script In-Reply-To: <508A72BA79410E498259B65610F6CFFB3177D55D@DHREUSVXM02.danaher.org> Message-ID: <6A34302C7B62B54EB77F697809EFC81E4122CF4264@UMDEXMBX02.core.umdnj.edu> What are you trying to do with this test. Wouldn't it normally be run on each client machine you're checking? In any case, my guess is another logfile is logging something about it (maybe xymond.log -- I forget the names off the top of my head). ----- Original Message ----- From: Morsiani, Massimo [mailto:massimo.morsiani at gilbarco.com] Sent: Wednesday, April 17, 2013 08:00 AM To: Novosielski, Ryan; 'xymon at xymon.com' Subject: RE: [Xymon] root login script Hi, I have tried to use "xymond_rootlogin.pl" but w/o any result. I have copied it in .../xymon/server/ext/ and I have added the following to tasks.cfg. [xymond_rootlogin] ENVFILE /usr/lib/xymon/server/etc/xymonserver.cfg NEEDS xymond CMD $XYMONHOME/ext/xymond_rootlogin.pl LOGFILE $XYMONSERVERLOGS/xymond_rootlogin.log INTERVAL 1m After these actions nothing happens that is no result at all (neither new login test, nor xymond_rootlogin.log file). Where am I wrong? Thanks in advance. Regards. Massimo Morsiani Information Technology Dept. ------ Gilbarco S.r.l. via de' Cattani, 220/G 50145 Firenze, Italy tel:    +39-055-30941 fax:    +39-055-318603 email:  massimo.morsiani at gilbarco.com web:    http://www.gilbarco.it  Please consider the environment before printing this e-mail -----Original Message----- From: Novosielski, Ryan [mailto:novosirj at umdnj.edu] Sent: mercoledì 17 aprile 2013 13:14 To: Morsiani, Massimo; 'xymon at xymon.com' Subject: Re: [Xymon] root login script I can't imagine it would be much different than any other external client script. What is the real question? What have you tried? ----- Original Message ----- From: Morsiani, Massimo [mailto:massimo.morsiani at gilbarco.com] Sent: Wednesday, April 17, 2013 07:09 AM To: 'xymon at xymon.com' Subject: [Xymon] root login script Hi all, is there anyone that is using one script to check if root user is logged on Unix/Linux machines? Or is there anyone that is using "xymond_rootlogin.pl" and can explain me how to use it? Thanks in advance for the support. Regards. Massimo Morsiani Information Technology Dept. ------ Gilbarco S.r.l. via de' Cattani, 220/G 50145 Firenze, Italy tel:    +39-055-30941 fax:    +39-055-318603 email:  massimo.morsiani at gilbarco.com web:    http://www.gilbarco.it ü Please consider the environment before printing this e-mail Please be advised that this email may contain confidential information. If you are not the intended recipient, please notify us by email by replying to the sender and delete this message. The sender disclaims that the content of this email constitutes an offer to enter into, or the acceptance of, any agreement; provided that the foregoing does not invalidate the binding effect of any digital or other electronic reproduction of a manual signature that is included in any attachment. _______________________________________________ Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon Please be advised that this email may contain confidential information. If you are not the intended recipient, please notify us by email by replying to the sender and delete this message. The sender disclaims that the content of this email constitutes an offer to enter into, or the acceptance of, any agreement; provided that the foregoing does not invalidate the binding effect of any digital or other electronic reproduction of a manual signature that is included in any attachment. From Michael.Beatty at sherwin.com Wed Apr 17 14:10:41 2013 From: Michael.Beatty at sherwin.com (Michael Beatty) Date: Wed, 17 Apr 2013 08:10:41 -0400 Subject: [Xymon] graphing problem In-Reply-To: <516E8C1C020000C0000CEF27@vho64pn04.orix.com.au> References: <516E8C1C020000C0000CEF27@vho64pn04.orix.com.au> Message-ID: <516E9141.2050105@sherwin.com> The problem is most certainly that your data is coming in at 10 minute intervals. The RRD files are created to have a step of 300 seconds and a heartbeat of 600 seconds. This means that rrd expects a new data point every 300 seconds (5 minutes) and if it doesn't get a new data point withing 600 seconds (10 minutes) it considers the data junk and disregards it. Typically, this is set to be double the step, so if you miss one, its okay, but if you miss 2 it returns NaN (Not a Number), there is nothing to stop you from going larger. Since your data is coming in every 10 minutes, it is in violation of your heartbeat and the data is being ignored. I have asked around before and didn't get a solid answer as to if there is a better way to do it, but I have worked out a way to fix this. If there is a better way, please let me know! There are two places you need to tweak, first is in xymonserver.cfg. You need to fully define your NCV value for that RRD. You have: NCV_internet="google:GAUGE,businessspectator:GAUGE,bloomberg:GAUGE" When an rrd file is created it is in the following format: dataSourceName:dataSourceType:heartbeat:min_value:max_value So, your NCV value should be fully defined as: NCV_internet="google:GAUGE:1200:0:U,businessspectator:GAUGE:1200:0:U,bloomberg:GAUGE:1200:0:U This will create your 3 datasets, all of type GAUGE with a 1200 (double your 10 minute test) with a 0 for a minimum expected value and an "U"nlimited maximum value. Next, you need to set your rrddefinition.cfg to set the "step" to override the default 300 second value. Since your script runs every 10 minutes, it should be 600. To do this, put a "-s" parameter in your rrddefinition [internet] -s 600 RRA:AVERAGE:0.5:1:576 One thing to note, while you can change the heartbeat on the fly, the step is permanent. Once the file is created, changing your rrddefinition.cfg won't change the RRD file. As long as you are still in development, every time you make a change, just delete the rrd file and let xymon create a new one, it will set the step you have defined in rrddefinition.cfg. If you aren't in development and do not want to loose the data you currently have, the only option I know you have is to export the rrd using "rrdtool dump" to an XML file, manually edit the STEP of that file, then do an "rrdtool restore" to convert that XML back into an rrd. Here is a link to the rrd man page, its a good read. http://oss.oetiker.ch/rrdtool/doc/rrdgraph.en.html Michael Beatty On 04/16/2013 09:48 PM, Phil Crooker wrote: > I'm a graphing newbie and can't get the graph to work. Could anyone > please help? This is to measure internet latency, the test is called > "internet". This is running over four hosts, so we should be getting > four sets of graphs. The rrd file is created, but I just see NaN > values, no data is being recorded. > many thanks, Phil > I've got the following data coming in from an ext script every 10 mintues: > google : 0.15 > businessspectator : 1.28 > bloomberg : 0.05 > ------------------------------------- > I set this up as a gauge graph. Here is one of the entries: > > google > GAUGE > 600 > NaN > NaN > > U > 0.0000000000e+00 > 172 > > ---------------------------------------------------- > Here are the config files. > in xymonserver.cfg: > I added this to the GRAPHS string: internet=ncv > and put in this line after that > NCV_internet="google:GAUGE,businessspectator:GAUGE,bloomberg:GAUGE" > ------------------------------------- > graphs.cfg: > [internet] > TITLE Internet Latency > YAXIS Seconds > DEF:google=internet.rrd:google:GAUGE > DEF:businessspectator=internet.rrd:businessspectator:GAUGE > DEF:bloomberg=internet.rrd:bloomberg:GAUGE > LINE2:google#00CCCC:Inode cache > LINE2:businessspectator#FF0000:Dentry cache > LINE2:bloomberg#00FF00:In > COMMENT:Time to load home page in seconds.\n > > > _______________________________________________ > Xymon mailing list > Xymon at xymon.com > http://lists.xymon.com/mailman/listinfo/xymon -------------- next part -------------- An HTML attachment was scrubbed... URL: From massimo.morsiani at gilbarco.com Wed Apr 17 18:27:08 2013 From: massimo.morsiani at gilbarco.com (Morsiani, Massimo) Date: Wed, 17 Apr 2013 16:27:08 +0000 Subject: [Xymon] How to use xymond_rootlogin.pl (was RE: root login script) In-Reply-To: <6A34302C7B62B54EB77F697809EFC81E4122CF4264@UMDEXMBX02.core.umdnj.edu> References: <508A72BA79410E498259B65610F6CFFB3177D55D@DHREUSVXM02.danaher.org> <6A34302C7B62B54EB77F697809EFC81E4122CF4264@UMDEXMBX02.core.umdnj.edu> Message-ID: <508A72BA79410E498259B65610F6CFFB3177D7D5@DHREUSVXM02.danaher.org> Hi, I'm trying to run it on Xymon *itself*, but nothing happens... Henrik could you please explain me how to use your ext? Thanks in advance. Regards. Massimo Morsiani Information Technology Dept. ------ Gilbarco S.r.l. via de' Cattani, 220/G 50145 Firenze, Italy tel:    +39-055-30941 fax:    +39-055-318603 email:  massimo.morsiani at gilbarco.com web:    http://www.gilbarco.it  Please consider the environment before printing this e-mail -----Original Message----- From: Novosielski, Ryan [mailto:novosirj at umdnj.edu] Sent: mercoledì 17 aprile 2013 14:05 To: Morsiani, Massimo; 'xymon at xymon.com' Subject: Re: [Xymon] root login script What are you trying to do with this test. Wouldn't it normally be run on each client machine you're checking? In any case, my guess is another logfile is logging something about it (maybe xymond.log -- I forget the names off the top of my head). ----- Original Message ----- From: Morsiani, Massimo [mailto:massimo.morsiani at gilbarco.com] Sent: Wednesday, April 17, 2013 08:00 AM To: Novosielski, Ryan; 'xymon at xymon.com' Subject: RE: [Xymon] root login script Hi, I have tried to use "xymond_rootlogin.pl" but w/o any result. I have copied it in .../xymon/server/ext/ and I have added the following to tasks.cfg. [xymond_rootlogin] ENVFILE /usr/lib/xymon/server/etc/xymonserver.cfg NEEDS xymond CMD $XYMONHOME/ext/xymond_rootlogin.pl LOGFILE $XYMONSERVERLOGS/xymond_rootlogin.log INTERVAL 1m After these actions nothing happens that is no result at all (neither new login test, nor xymond_rootlogin.log file). Where am I wrong? Thanks in advance. Regards. Massimo Morsiani Information Technology Dept. ------ Gilbarco S.r.l. via de' Cattani, 220/G 50145 Firenze, Italy tel:    +39-055-30941 fax:    +39-055-318603 email:  massimo.morsiani at gilbarco.com web:    http://www.gilbarco.it ü Please consider the environment before printing this e-mail -----Original Message----- From: Novosielski, Ryan [mailto:novosirj at umdnj.edu] Sent: mercoledì 17 aprile 2013 13:14 To: Morsiani, Massimo; 'xymon at xymon.com' Subject: Re: [Xymon] root login script I can't imagine it would be much different than any other external client script. What is the real question? What have you tried? ----- Original Message ----- From: Morsiani, Massimo [mailto:massimo.morsiani at gilbarco.com] Sent: Wednesday, April 17, 2013 07:09 AM To: 'xymon at xymon.com' Subject: [Xymon] root login script Hi all, is there anyone that is using one script to check if root user is logged on Unix/Linux machines? Or is there anyone that is using "xymond_rootlogin.pl" and can explain me how to use it? Thanks in advance for the support. Regards. Massimo Morsiani Information Technology Dept. ------ Gilbarco S.r.l. via de' Cattani, 220/G 50145 Firenze, Italy tel:    +39-055-30941 fax:    +39-055-318603 email:  massimo.morsiani at gilbarco.com web:    http://www.gilbarco.it ü Please consider the environment before printing this e-mail Please be advised that this email may contain confidential information. If you are not the intended recipient, please notify us by email by replying to the sender and delete this message. The sender disclaims that the content of this email constitutes an offer to enter into, or the acceptance of, any agreement; provided that the foregoing does not invalidate the binding effect of any digital or other electronic reproduction of a manual signature that is included in any attachment. _______________________________________________ Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon Please be advised that this email may contain confidential information. If you are not the intended recipient, please notify us by email by replying to the sender and delete this message. The sender disclaims that the content of this email constitutes an offer to enter into, or the acceptance of, any agreement; provided that the foregoing does not invalidate the binding effect of any digital or other electronic reproduction of a manual signature that is included in any attachment. Please be advised that this email may contain confidential information. If you are not the intended recipient, please notify us by email by replying to the sender and delete this message. The sender disclaims that the content of this email constitutes an offer to enter into, or the acceptance of, any agreement; provided that the foregoing does not invalidate the binding effect of any digital or other electronic reproduction of a manual signature that is included in any attachment. From Galen.Johnson at sas.com Wed Apr 17 19:47:44 2013 From: Galen.Johnson at sas.com (Galen Johnson) Date: Wed, 17 Apr 2013 17:47:44 +0000 Subject: [Xymon] How to use xymond_rootlogin.pl (was RE: root login script) In-Reply-To: <508A72BA79410E498259B65610F6CFFB3177D7D5@DHREUSVXM02.danaher.org> References: <508A72BA79410E498259B65610F6CFFB3177D55D@DHREUSVXM02.danaher.org> <6A34302C7B62B54EB77F697809EFC81E4122CF4264@UMDEXMBX02.core.umdnj.edu>, <508A72BA79410E498259B65610F6CFFB3177D7D5@DHREUSVXM02.danaher.org> Message-ID: You may want to search the archives. I seem to recall Henrik putting it out there originally as an example...including explanations. =G= ________________________________________ From: xymon-bounces at xymon.com [xymon-bounces at xymon.com] on behalf of Morsiani, Massimo [massimo.morsiani at gilbarco.com] Sent: Wednesday, April 17, 2013 12:27 PM To: Novosielski, Ryan; 'xymon at xymon.com' Subject: [Xymon] How to use xymond_rootlogin.pl (was RE: root login script) Hi, I'm trying to run it on Xymon *itself*, but nothing happens... Henrik could you please explain me how to use your ext? Thanks in advance. Regards. Massimo Morsiani Information Technology Dept. ------ Gilbarco S.r.l. via de' Cattani, 220/G 50145 Firenze, Italy tel: +39-055-30941 fax: +39-055-318603 email: massimo.morsiani at gilbarco.com web: http://www.gilbarco.it  Please consider the environment before printing this e-mail -----Original Message----- From: Novosielski, Ryan [mailto:novosirj at umdnj.edu] Sent: mercoledì 17 aprile 2013 14:05 To: Morsiani, Massimo; 'xymon at xymon.com' Subject: Re: [Xymon] root login script What are you trying to do with this test. Wouldn't it normally be run on each client machine you're checking? In any case, my guess is another logfile is logging something about it (maybe xymond.log -- I forget the names off the top of my head). ----- Original Message ----- From: Morsiani, Massimo [mailto:massimo.morsiani at gilbarco.com] Sent: Wednesday, April 17, 2013 08:00 AM To: Novosielski, Ryan; 'xymon at xymon.com' Subject: RE: [Xymon] root login script Hi, I have tried to use "xymond_rootlogin.pl" but w/o any result. I have copied it in .../xymon/server/ext/ and I have added the following to tasks.cfg. [xymond_rootlogin] ENVFILE /usr/lib/xymon/server/etc/xymonserver.cfg NEEDS xymond CMD $XYMONHOME/ext/xymond_rootlogin.pl LOGFILE $XYMONSERVERLOGS/xymond_rootlogin.log INTERVAL 1m After these actions nothing happens that is no result at all (neither new login test, nor xymond_rootlogin.log file). Where am I wrong? Thanks in advance. Regards. Massimo Morsiani Information Technology Dept. ------ Gilbarco S.r.l. via de' Cattani, 220/G 50145 Firenze, Italy tel: +39-055-30941 fax: +39-055-318603 email: massimo.morsiani at gilbarco.com web: http://www.gilbarco.it ü Please consider the environment before printing this e-mail -----Original Message----- From: Novosielski, Ryan [mailto:novosirj at umdnj.edu] Sent: mercoledì 17 aprile 2013 13:14 To: Morsiani, Massimo; 'xymon at xymon.com' Subject: Re: [Xymon] root login script I can't imagine it would be much different than any other external client script. What is the real question? What have you tried? ----- Original Message ----- From: Morsiani, Massimo [mailto:massimo.morsiani at gilbarco.com] Sent: Wednesday, April 17, 2013 07:09 AM To: 'xymon at xymon.com' Subject: [Xymon] root login script Hi all, is there anyone that is using one script to check if root user is logged on Unix/Linux machines? Or is there anyone that is using "xymond_rootlogin.pl" and can explain me how to use it? Thanks in advance for the support. Regards. Massimo Morsiani Information Technology Dept. ------ Gilbarco S.r.l. via de' Cattani, 220/G 50145 Firenze, Italy tel: +39-055-30941 fax: +39-055-318603 email: massimo.morsiani at gilbarco.com web: http://www.gilbarco.it ü Please consider the environment before printing this e-mail Please be advised that this email may contain confidential information. If you are not the intended recipient, please notify us by email by replying to the sender and delete this message. The sender disclaims that the content of this email constitutes an offer to enter into, or the acceptance of, any agreement; provided that the foregoing does not invalidate the binding effect of any digital or other electronic reproduction of a manual signature that is included in any attachment. _______________________________________________ Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon Please be advised that this email may contain confidential information. If you are not the intended recipient, please notify us by email by replying to the sender and delete this message. The sender disclaims that the content of this email constitutes an offer to enter into, or the acceptance of, any agreement; provided that the foregoing does not invalidate the binding effect of any digital or other electronic reproduction of a manual signature that is included in any attachment. Please be advised that this email may contain confidential information. If you are not the intended recipient, please notify us by email by replying to the sender and delete this message. The sender disclaims that the content of this email constitutes an offer to enter into, or the acceptance of, any agreement; provided that the foregoing does not invalidate the binding effect of any digital or other electronic reproduction of a manual signature that is included in any attachment. _______________________________________________ Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon From novosirj at umdnj.edu Wed Apr 17 19:51:20 2013 From: novosirj at umdnj.edu (Novosielski, Ryan) Date: Wed, 17 Apr 2013 13:51:20 -0400 Subject: [Xymon] How to use xymond_rootlogin.pl (was RE: root login script) References: <508A72BA79410E498259B65610F6CFFB3177D55D@DHREUSVXM02.danaher.org> <6A34302C7B62B54EB77F697809EFC81E4122CF4264@UMDEXMBX02.core.umdnj.edu> <508A72BA79410E498259B65610F6CFFB3177D7D5@DHREUSVXM02.danaher.org> Message-ID: <6A34302C7B62B54EB77F697809EFC81E4122CF4267@UMDEXMBX02.core.umdnj.edu> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Massimo, I'm unfamiliar with this extension, but all of the extension scripts I've worked work essentially the same way -- you install the client and then add them to the client as per the documentation. Rehashing the documentation is not something I'm planning to do on the mailing list, but I'm happy to help if you read it and something is unclear. =R On 04/17/2013 12:27 PM, Morsiani, Massimo wrote: > Hi, > > I'm trying to run it on Xymon *itself*, but nothing happens... > > Henrik could you please explain me how to use your ext? Thanks in > advance. > > > Regards. > > Massimo Morsiani Information Technology Dept. ------ Gilbarco > S.r.l. via de' Cattani, 220/G 50145 Firenze, Italy tel: > +39-055-30941 fax: +39-055-318603 email: > massimo.morsiani at gilbarco.com web: http://www.gilbarco.it > >  Please consider the environment before printing this e-mail > > > > -----Original Message----- From: Novosielski, Ryan > [mailto:novosirj at umdnj.edu] Sent: mercoledì 17 aprile 2013 14:05 > To: Morsiani, Massimo; 'xymon at xymon.com' Subject: Re: [Xymon] root > login script > > What are you trying to do with this test. Wouldn't it normally be > run on each client machine you're checking? In any case, my guess > is another logfile is logging something about it (maybe xymond.log > -- I forget the names off the top of my head). > > > ----- Original Message ----- From: Morsiani, Massimo > [mailto:massimo.morsiani at gilbarco.com] Sent: Wednesday, April 17, > 2013 08:00 AM To: Novosielski, Ryan; 'xymon at xymon.com' > Subject: RE: [Xymon] root login script > > Hi, > > I have tried to use "xymond_rootlogin.pl" but w/o any result. > > I have copied it in .../xymon/server/ext/ and I have added the > following to tasks.cfg. > > [xymond_rootlogin] ENVFILE > /usr/lib/xymon/server/etc/xymonserver.cfg NEEDS xymond CMD > $XYMONHOME/ext/xymond_rootlogin.pl LOGFILE > $XYMONSERVERLOGS/xymond_rootlogin.log INTERVAL 1m > > After these actions nothing happens that is no result at all > (neither new login test, nor xymond_rootlogin.log file). > > Where am I wrong? Thanks in advance. > > > Regards. > > Massimo Morsiani Information Technology Dept. ------ Gilbarco > S.r.l. via de' Cattani, 220/G 50145 Firenze, Italy tel: > +39-055-30941 fax: +39-055-318603 email: > massimo.morsiani at gilbarco.com web: http://www.gilbarco.it > > ü Please consider the environment before printing this e-mail > > > > > -----Original Message----- From: Novosielski, Ryan > [mailto:novosirj at umdnj.edu] Sent: mercoledì 17 aprile 2013 13:14 > To: Morsiani, Massimo; 'xymon at xymon.com' Subject: Re: [Xymon] root > login script > > I can't imagine it would be much different than any other external > client script. What is the real question? What have you tried? > > > > ----- Original Message ----- From: Morsiani, Massimo > [mailto:massimo.morsiani at gilbarco.com] Sent: Wednesday, April 17, > 2013 07:09 AM To: 'xymon at xymon.com' Subject: > [Xymon] root login script > > Hi all, > > is there anyone that is using one script to check if root user is > logged on Unix/Linux machines? Or is there anyone that is using > "xymond_rootlogin.pl" and can explain me how to use it? Thanks in > advance for the support. > > > Regards. > > Massimo Morsiani Information Technology Dept. ------ Gilbarco > S.r.l. via de' Cattani, 220/G 50145 Firenze, Italy tel: > +39-055-30941 fax: +39-055-318603 email: > massimo.morsiani at gilbarco.com web: http://www.gilbarco.it > > ü Please consider the environment before printing this e-mail > > > > Please be advised that this email may contain confidential > information. If you are not the intended recipient, please notify > us by email by replying to the sender and delete this message. The > sender disclaims that the content of this email constitutes an > offer to enter into, or the acceptance of, any agreement; provided > that the foregoing does not invalidate the binding effect of any > digital or other electronic reproduction of a manual signature that > is included in any attachment. > _______________________________________________ Xymon mailing list > Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon > > Please be advised that this email may contain confidential > information. If you are not the intended recipient, please notify > us by email by replying to the sender and delete this message. The > sender disclaims that the content of this email constitutes an > offer to enter into, or the acceptance of, any agreement; provided > that the foregoing does not invalidate the binding effect of any > digital or other electronic reproduction of a manual signature that > is included in any attachment. > > Please be advised that this email may contain confidential > information. If you are not the intended recipient, please notify > us by email by replying to the sender and delete this message. The > sender disclaims that the content of this email constitutes an > offer to enter into, or the acceptance of, any agreement; provided > that the foregoing does not invalidate the binding effect of any > digital or other electronic reproduction of a manual signature that > is included in any attachment. > - -- - ---- _ _ _ _ ___ _ _ _ |Y#| | | |\/| | \ |\ | | |Ryan Novosielski - Sr. Systems Programmer |$&| |__| | | |__/ | \| _| |novosirj at umdnj.edu - 973/972.0922 (2-0922) \__/ Univ. of Med. and Dent.|IST/EI-Academic Svcs. - ADMC 450, Newark -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) Comment: Using GnuPG with undefined - http://www.enigmail.net/ iEYEARECAAYFAlFu4RMACgkQmb+gadEcsb6B+QCdFpZUWwymK7IP1qKQKLxL3tRK kKQAoNrOw3I5sGNpSLvQKK10llamystN =5BTY -----END PGP SIGNATURE----- From novosirj at umdnj.edu Wed Apr 17 19:54:26 2013 From: novosirj at umdnj.edu (Novosielski, Ryan) Date: Wed, 17 Apr 2013 13:54:26 -0400 Subject: [Xymon] How to use xymond_rootlogin.pl (was RE: root login script) References: <508A72BA79410E498259B65610F6CFFB3177D55D@DHREUSVXM02.danaher.org> <6A34302C7B62B54EB77F697809EFC81E4122CF4264@UMDEXMBX02.core.umdnj.edu> <508A72BA79410E498259B65610F6CFFB3177D7D5@DHREUSVXM02.danaher.org> <6A34302C7B62B54EB77F697809EFC81E4122CF4267@UMDEXMBX02.core.umdnj.edu> Message-ID: <6A34302C7B62B54EB77F697809EFC81E4122CF4269@UMDEXMBX02.core.umdnj.edu> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Actually, what you may be missing is that some external scripts are run on the server, or the machine doing the network tests (they tend to be scripts to test network services remotely). Most external scripts I think, however, run as part of the Xymon client (which is installed per machine). The internal tasks to check the disk space are an example, and any others that require commands to be run on each machine (as I'd guess this one does). It's in the documentation though. On 04/17/2013 01:51 PM, Novosielski, Ryan wrote: > Massimo, > > I'm unfamiliar with this extension, but all of the extension > scripts I've worked work essentially the same way -- you install > the client and then add them to the client as per the > documentation. Rehashing the documentation is not something I'm > planning to do on the mailing list, but I'm happy to help if you > read it and something is unclear. > > =R > > On 04/17/2013 12:27 PM, Morsiani, Massimo wrote: >> Hi, > >> I'm trying to run it on Xymon *itself*, but nothing happens... > >> Henrik could you please explain me how to use your ext? Thanks >> in advance. > > >> Regards. > >> Massimo Morsiani Information Technology Dept. ------ Gilbarco >> S.r.l. via de' Cattani, 220/G 50145 Firenze, Italy tel: >> +39-055-30941 fax: +39-055-318603 email: >> massimo.morsiani at gilbarco.com web: http://www.gilbarco.it > >>  Please consider the environment before printing this e-mail > > > >> -----Original Message----- From: Novosielski, Ryan >> [mailto:novosirj at umdnj.edu] Sent: mercoledì 17 aprile 2013 14:05 >> To: Morsiani, Massimo; 'xymon at xymon.com' Subject: Re: [Xymon] >> root login script > >> What are you trying to do with this test. Wouldn't it normally >> be run on each client machine you're checking? In any case, my >> guess is another logfile is logging something about it (maybe >> xymond.log -- I forget the names off the top of my head). > > >> ----- Original Message ----- From: Morsiani, Massimo >> [mailto:massimo.morsiani at gilbarco.com] Sent: Wednesday, April >> 17, 2013 08:00 AM To: Novosielski, Ryan; 'xymon at xymon.com' >> Subject: RE: [Xymon] root login script > >> Hi, > >> I have tried to use "xymond_rootlogin.pl" but w/o any result. > >> I have copied it in .../xymon/server/ext/ and I have added the >> following to tasks.cfg. > >> [xymond_rootlogin] ENVFILE >> /usr/lib/xymon/server/etc/xymonserver.cfg NEEDS xymond CMD >> $XYMONHOME/ext/xymond_rootlogin.pl LOGFILE >> $XYMONSERVERLOGS/xymond_rootlogin.log INTERVAL 1m > >> After these actions nothing happens that is no result at all >> (neither new login test, nor xymond_rootlogin.log file). > >> Where am I wrong? Thanks in advance. > > >> Regards. > >> Massimo Morsiani Information Technology Dept. ------ Gilbarco >> S.r.l. via de' Cattani, 220/G 50145 Firenze, Italy tel: >> +39-055-30941 fax: +39-055-318603 email: >> massimo.morsiani at gilbarco.com web: http://www.gilbarco.it > >> ü Please consider the environment before printing this e-mail > > > > >> -----Original Message----- From: Novosielski, Ryan >> [mailto:novosirj at umdnj.edu] Sent: mercoledì 17 aprile 2013 13:14 >> To: Morsiani, Massimo; 'xymon at xymon.com' Subject: Re: [Xymon] >> root login script > >> I can't imagine it would be much different than any other >> external client script. What is the real question? What have you >> tried? > > > >> ----- Original Message ----- From: Morsiani, Massimo >> [mailto:massimo.morsiani at gilbarco.com] Sent: Wednesday, April >> 17, 2013 07:09 AM To: 'xymon at xymon.com' >> Subject: [Xymon] root login script > >> Hi all, > >> is there anyone that is using one script to check if root user >> is logged on Unix/Linux machines? Or is there anyone that is >> using "xymond_rootlogin.pl" and can explain me how to use it? >> Thanks in advance for the support. > > >> Regards. > >> Massimo Morsiani Information Technology Dept. ------ Gilbarco >> S.r.l. via de' Cattani, 220/G 50145 Firenze, Italy tel: >> +39-055-30941 fax: +39-055-318603 email: >> massimo.morsiani at gilbarco.com web: http://www.gilbarco.it > >> ü Please consider the environment before printing this e-mail > > > >> Please be advised that this email may contain confidential >> information. If you are not the intended recipient, please >> notify us by email by replying to the sender and delete this >> message. The sender disclaims that the content of this email >> constitutes an offer to enter into, or the acceptance of, any >> agreement; provided that the foregoing does not invalidate the >> binding effect of any digital or other electronic reproduction of >> a manual signature that is included in any attachment. >> _______________________________________________ Xymon mailing >> list Xymon at xymon.com >> http://lists.xymon.com/mailman/listinfo/xymon > >> Please be advised that this email may contain confidential >> information. If you are not the intended recipient, please >> notify us by email by replying to the sender and delete this >> message. The sender disclaims that the content of this email >> constitutes an offer to enter into, or the acceptance of, any >> agreement; provided that the foregoing does not invalidate the >> binding effect of any digital or other electronic reproduction of >> a manual signature that is included in any attachment. > >> Please be advised that this email may contain confidential >> information. If you are not the intended recipient, please >> notify us by email by replying to the sender and delete this >> message. The sender disclaims that the content of this email >> constitutes an offer to enter into, or the acceptance of, any >> agreement; provided that the foregoing does not invalidate the >> binding effect of any digital or other electronic reproduction of >> a manual signature that is included in any attachment. > > > > _______________________________________________ Xymon mailing list > Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon > - -- - ---- _ _ _ _ ___ _ _ _ |Y#| | | |\/| | \ |\ | | |Ryan Novosielski - Sr. Systems Programmer |$&| |__| | | |__/ | \| _| |novosirj at umdnj.edu - 973/972.0922 (2-0922) \__/ Univ. of Med. and Dent.|IST/EI-Academic Svcs. - ADMC 450, Newark -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) Comment: Using GnuPG with undefined - http://www.enigmail.net/ iEYEARECAAYFAlFu4dIACgkQmb+gadEcsb4tbACgoO2Jepj017dIinb1ZPJBxdw5 7BcAoMKbuXHU7mKz8I+NpvMiBe0YiMvl =pxth -----END PGP SIGNATURE----- From cleaver at terabithia.org Wed Apr 17 21:12:24 2013 From: cleaver at terabithia.org (cleaver at terabithia.org) Date: Wed, 17 Apr 2013 19:12:24 -0000 (UTC) Subject: [Xymon] How to use xymond_rootlogin.pl (was RE: root login script) In-Reply-To: <6A34302C7B62B54EB77F697809EFC81E4122CF4269@UMDEXMBX02.core.umdnj.edu> References: <508A72BA79410E498259B65610F6CFFB3177D55D@DHREUSVXM02.danaher.org> <6A34302C7B62B54EB77F697809EFC81E4122CF4264@UMDEXMBX02.core.umdnj.edu> <508A72BA79410E498259B65610F6CFFB3177D7D5@DHREUSVXM02.danaher.org> <6A34302C7B62B54EB77F697809EFC81E4122CF4267@UMDEXMBX02.core.umdnj.edu> <6A34302C7B62B54EB77F697809EFC81E4122CF4269@UMDEXMBX02.core.umdnj.edu> Message-ID: <58443.199.91.139.248.1366225944.squirrel@mail.kkytbs.net> The xymond_rootlogin.pl script is an example of a server-side external script. It runs on the server at a single point and listens to the incoming "client" stream. When it sees relevant data, it then fires off a "status" command with details about that test. In this respect, it's identical to how xymond_client works, and an example of munging the raw data coming in in new and creative ways w/o having to modify the client reporter. >>> [xymond_rootlogin] >>> ENVFILE /usr/lib/xymon/server/etc/xymonserver.cfg >>> NEEDS xymond >>> CMD $XYMONHOME/ext/xymond_rootlogin.pl >>> LOGFILE $XYMONSERVERLOGS/xymond_rootlogin.log >>> INTERVAL 1m Change CMD to CMD xymond_channel --channel=client $XYMONHOME/ext/xymond_rootlogin.pl ...and remove the INTERVAL line. >From the perl source, you should start seeing "login" statuses show up as soon as the clients next report in. HTH, -jc > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > Actually, what you may be missing is that some external scripts are > run on the server, or the machine doing the network tests (they tend > to be scripts to test network services remotely). Most external > scripts I think, however, run as part of the Xymon client (which is > installed per machine). The internal tasks to check the disk space are > an example, and any others that require commands to be run on each > machine (as I'd guess this one does). It's in the documentation though. > > On 04/17/2013 01:51 PM, Novosielski, Ryan wrote: >> Massimo, >> >> I'm unfamiliar with this extension, but all of the extension >> scripts I've worked work essentially the same way -- you install >> the client and then add them to the client as per the >> documentation. Rehashing the documentation is not something I'm >> planning to do on the mailing list, but I'm happy to help if you >> read it and something is unclear. >> >> =R >> >> On 04/17/2013 12:27 PM, Morsiani, Massimo wrote: >>> Hi, >> >>> I'm trying to run it on Xymon *itself*, but nothing happens... >> >>> Henrik could you please explain me how to use your ext? Thanks >>> in advance. >> >> >>> Regards. >> >>> Massimo Morsiani Information Technology Dept. ------ Gilbarco >>> S.r.l. via de' Cattani, 220/G 50145 Firenze, Italy tel: >>> +39-055-30941 fax: +39-055-318603 email: >>> massimo.morsiani at gilbarco.com web: http://www.gilbarco.it >> >>>  Please consider the environment before printing this e-mail >> >> >> >>> -----Original Message----- From: Novosielski, Ryan >>> [mailto:novosirj at umdnj.edu] Sent: mercoledì 17 aprile 2013 14:05 >>> To: Morsiani, Massimo; 'xymon at xymon.com' Subject: Re: [Xymon] >>> root login script >> >>> What are you trying to do with this test. Wouldn't it normally >>> be run on each client machine you're checking? In any case, my >>> guess is another logfile is logging something about it (maybe >>> xymond.log -- I forget the names off the top of my head). >> >> >>> ----- Original Message ----- From: Morsiani, Massimo >>> [mailto:massimo.morsiani at gilbarco.com] Sent: Wednesday, April >>> 17, 2013 08:00 AM To: Novosielski, Ryan; 'xymon at xymon.com' >>> Subject: RE: [Xymon] root login script >> >>> Hi, >> >>> I have tried to use "xymond_rootlogin.pl" but w/o any result. >> >>> I have copied it in .../xymon/server/ext/ and I have added the >>> following to tasks.cfg. >> >>> [xymond_rootlogin] ENVFILE >>> /usr/lib/xymon/server/etc/xymonserver.cfg NEEDS xymond CMD >>> $XYMONHOME/ext/xymond_rootlogin.pl LOGFILE >>> $XYMONSERVERLOGS/xymond_rootlogin.log INTERVAL 1m >> >>> After these actions nothing happens that is no result at all >>> (neither new login test, nor xymond_rootlogin.log file). >> >>> Where am I wrong? Thanks in advance. >> >> >>> Regards. >> >>> Massimo Morsiani Information Technology Dept. ------ Gilbarco >>> S.r.l. via de' Cattani, 220/G 50145 Firenze, Italy tel: >>> +39-055-30941 fax: +39-055-318603 email: >>> massimo.morsiani at gilbarco.com web: http://www.gilbarco.it >> >>> ü Please consider the environment before printing this e-mail >> >> >> >> >>> -----Original Message----- From: Novosielski, Ryan >>> [mailto:novosirj at umdnj.edu] Sent: mercoledì 17 aprile 2013 13:14 >>> To: Morsiani, Massimo; 'xymon at xymon.com' Subject: Re: [Xymon] >>> root login script >> >>> I can't imagine it would be much different than any other >>> external client script. What is the real question? What have you >>> tried? >> >> >> >>> ----- Original Message ----- From: Morsiani, Massimo >>> [mailto:massimo.morsiani at gilbarco.com] Sent: Wednesday, April >>> 17, 2013 07:09 AM To: 'xymon at xymon.com' >>> Subject: [Xymon] root login script >> >>> Hi all, >> >>> is there anyone that is using one script to check if root user >>> is logged on Unix/Linux machines? Or is there anyone that is >>> using "xymond_rootlogin.pl" and can explain me how to use it? >>> Thanks in advance for the support. >> >> >>> Regards. >> >>> Massimo Morsiani Information Technology Dept. From Galen.Johnson at sas.com Wed Apr 17 22:06:54 2013 From: Galen.Johnson at sas.com (Galen Johnson) Date: Wed, 17 Apr 2013 20:06:54 +0000 Subject: [Xymon] How to use xymond_rootlogin.pl (was RE: root login script) In-Reply-To: <58443.199.91.139.248.1366225944.squirrel@mail.kkytbs.net> References: <508A72BA79410E498259B65610F6CFFB3177D55D@DHREUSVXM02.danaher.org> <6A34302C7B62B54EB77F697809EFC81E4122CF4264@UMDEXMBX02.core.umdnj.edu> <508A72BA79410E498259B65610F6CFFB3177D7D5@DHREUSVXM02.danaher.org> <6A34302C7B62B54EB77F697809EFC81E4122CF4267@UMDEXMBX02.core.umdnj.edu> <6A34302C7B62B54EB77F697809EFC81E4122CF4269@UMDEXMBX02.core.umdnj.edu>, <58443.199.91.139.248.1366225944.squirrel@mail.kkytbs.net> Message-ID: Here's a stupid question...is the script actually executable by xymon? at the very least r-x------? (more likely rwxr-xr-x) =G= NB: cut the ever-growing, unnecessary quoted content... From everett.vernon at gmail.com Thu Apr 18 02:13:44 2013 From: everett.vernon at gmail.com (Vernon Everett) Date: Thu, 18 Apr 2013 08:13:44 +0800 Subject: [Xymon] CLI Event Report Message-ID: Hi guys I know this has been asked before, and probably answered, but I can't seem to find it on the list. I would like to pull a list of past events for the last 24 hours (or 72 for Monday) of events using the CLI. Management is looking for the incident list, and pulling it out manually from the GUI every day offends my sense of laziness. (I believe it is morally wrong for you to do any repetitive task the computer is perfectly capable of doing for itself.) Thanks Vernon -- "Accept the challenges so that you can feel the exhilaration of victory" - General George Patton -------------- next part -------------- An HTML attachment was scrubbed... URL: From novosirj at umdnj.edu Thu Apr 18 03:17:17 2013 From: novosirj at umdnj.edu (Novosielski, Ryan) Date: Wed, 17 Apr 2013 21:17:17 -0400 Subject: [Xymon] CLI Event Report In-Reply-To: Message-ID: <6A34302C7B62B54EB77F697809EFC81E4122CF4278@UMDEXMBX02.core.umdnj.edu> Well, for one, you could do what the GUI form does and use wget or maybe curl on the command line pointed at the CGI script URL to get what you need (my guess is with http POST to select the 72 hours portion). I don't know if you could then choose HTML or something else (don't recall how it works). Otherwise I'd poke around in the section of the manual that deals with the reports for clues. Another place I'd look is the xymon command itself. "xymonboard" is the name of the command to send to get the current status, perhaps there's another for history? From: Vernon Everett [mailto:everett.vernon at gmail.com] Sent: Wednesday, April 17, 2013 08:13 PM To: Xymon mailinglist Subject: [Xymon] CLI Event Report Hi guys I know this has been asked before, and probably answered, but I can't seem to find it on the list. I would like to pull a list of past events for the last 24 hours (or 72 for Monday) of events using the CLI. Management is looking for the incident list, and pulling it out manually from the GUI every day offends my sense of laziness. (I believe it is morally wrong for you to do any repetitive task the computer is perfectly capable of doing for itself.) Thanks Vernon -- "Accept the challenges so that you can feel the exhilaration of victory" - General George Patton -------------- next part -------------- An HTML attachment was scrubbed... URL: From everett.vernon at gmail.com Thu Apr 18 04:52:21 2013 From: everett.vernon at gmail.com (Vernon Everett) Date: Thu, 18 Apr 2013 10:52:21 +0800 Subject: [Xymon] CLI Event Report In-Reply-To: <6A34302C7B62B54EB77F697809EFC81E4122CF4278@UMDEXMBX02.core.umdnj.edu> References: <6A34302C7B62B54EB77F697809EFC81E4122CF4278@UMDEXMBX02.core.umdnj.edu> Message-ID: Or even easier would be to do a find -mtime in the histlogs file, and parse them each separately to produce one-liners from the status line, but I was hoping there was something even simpler. If I do put a script together, I will pop it on the list, but I really don't want to reinvent the wheel. Cheers V On 18 April 2013 09:17, Novosielski, Ryan wrote: > Well, for one, you could do what the GUI form does and use wget or maybe > curl on the command line pointed at the CGI script URL to get what you need > (my guess is with http POST to select the 72 hours portion). I don't know > if you could then choose HTML or something else (don't recall how it > works). Otherwise I'd poke around in the section of the manual that deals > with the reports for clues. Another place I'd look is the xymon command > itself. "xymonboard" is the name of the command to send to get the current > status, perhaps there's another for history? > > > *From*: Vernon Everett [mailto:everett.vernon at gmail.com] > *Sent*: Wednesday, April 17, 2013 08:13 PM > *To*: Xymon mailinglist > *Subject*: [Xymon] CLI Event Report > > Hi guys > > I know this has been asked before, and probably answered, but I can't seem > to find it on the list. > I would like to pull a list of past events for the last 24 hours (or 72 > for Monday) of events using the CLI. > Management is looking for the incident list, and pulling it out manually > from the GUI every day offends my sense of laziness. (I believe it is > morally wrong for you to do any repetitive task the computer is perfectly > capable of doing for itself.) > > Thanks > Vernon > > -- > "Accept the challenges so that you can feel the exhilaration of victory" > - General George Patton > -- "Accept the challenges so that you can feel the exhilaration of victory" - General George Patton -------------- next part -------------- An HTML attachment was scrubbed... URL: From Phil.Crooker at orix.com.au Thu Apr 18 09:22:32 2013 From: Phil.Crooker at orix.com.au (Phil Crooker) Date: Thu, 18 Apr 2013 17:22:32 +1000 Subject: [Xymon] graphing problem In-Reply-To: <516E9141.2050105@sherwin.com> References: <516E8C1C020000C0000CEF27@vho64pn04.orix.com.au> <516E9141.2050105@sherwin.com> Message-ID: <51702BD8020000C0000CF11D@vho64pn04.orix.com.au> First, many thanks for everyone's help, I really appreciate it and it saves me a lot of time. Now, I followed Michael's directions, and the data was recorded in the rrd files. But no graphs. So, I then changed the DEF entries in graphs.cfg from GAUGE to AVERAGE as per Wim Nelis's advice and voila - they are there! I think I will change the colour scheme, though.... ;-) Many, many thanks, all, this is excellent. regards, Phil >>> The problem is most certainly that your data is coming in at 10 minute intervals. The RRD files are created to have a step of 300 seconds and a heartbeat of 600 seconds. This means that rrd expects a new data point every 300 seconds (5 minutes) and if it doesn't get a new data point withing 600 seconds (10 minutes) it considers the data junk and disregards it. Typically, this is set to be double the step, so if you miss one, its okay, but if you miss 2 it returns NaN (Not a Number), there is nothing to stop you from going larger. Since your data is coming in every 10 minutes, it is in violation of your heartbeat and the data is being ignored. I have asked around before and didn't get a solid answer as to if there is a better way to do it, but I have worked out a way to fix this. If there is a better way, please let me know! There are two places you need to tweak, first is in xymonserver.cfg. You need to fully define your NCV value for that RRD. You have: NCV_internet="google:GAUGE,businessspectator:GAUGE,bloomberg:GAUGE" When an rrd file is created it is in the following format: dataSourceName:dataSourceType:heartbeat:min_value:max_value So, your NCV value should be fully defined as: NCV_internet="google:GAUGE:1200:0:U,businessspectator:GAUGE:1200:0:U,bloomberg:GAUGE:1200:0:U This will create your 3 datasets, all of type GAUGE with a 1200 (double your 10 minute test) with a 0 for a minimum expected value and an "U"nlimited maximum value. Next, you need to set your rrddefinition.cfg to set the "step" to override the default 300 second value. Since your script runs every 10 minutes, it should be 600. To do this, put a "-s" parameter in your rrddefinition [internet] -s 600 RRA:AVERAGE:0.5:1:576 One thing to note, while you can change the heartbeat on the fly, the step is permanent. Once the file is created, changing your rrddefinition.cfg won't change the RRD file. As long as you are still in development, every time you make a change, just delete the rrd file and let xymon create a new one, it will set the step you have defined in rrddefinition.cfg. If you aren't in development and do not want to loose the data you currently have, the only option I know you have is to export the rrd using "rrdtool dump" to an XML file, manually edit the STEP of that file, then do an "rrdtool restore" to convert that XML back into an rrd. Here is a link to the rrd man page, its a good read. http://oss.oetiker.ch/rrdtool/doc/rrdgraph.en.html Michael Beatty On 04/16/2013 09:48 PM, Phil Crooker wrote: I'm a graphing newbie and can't get the graph to work. Could anyone please help? This is to measure internet latency, the test is called "internet". This is running over four hosts, so we should be getting four sets of graphs. The rrd file is created, but I just see NaN values, no data is being recorded. many thanks, Phil I've got the following data coming in from an ext script every 10 mintues: google : 0.15 businessspectator : 1.28 bloomberg : 0.05 ------------------------------------- I set this up as a gauge graph. Here is one of the entries: google GAUGE 600 NaN NaN U 0.0000000000e+00 172 ---------------------------------------------------- Here are the config files. in xymonserver.cfg: I added this to the GRAPHS string: internet=ncv and put in this line after that NCV_internet="google:GAUGE,businessspectator:GAUGE,bloomberg:GAUGE" ------------------------------------- graphs.cfg: [internet] TITLE Internet Latency YAXIS Seconds DEF:google=internet.rrd:google:GAUGE DEF:businessspectator=internet.rrd:businessspectator:GAUGE DEF:bloomberg=internet.rrd:bloomberg:GAUGE LINE2:google#00CCCC:Inode cache LINE2:businessspectator#FF0000:Dentry cache LINE2:bloomberg#00FF00:In COMMENT:Time to load home page in seconds.\n _______________________________________________ Xymon mailing listXymon at xymon.comhttp://lists.xymon.com/mailman/listinfo/xymon -------------- next part -------------- An HTML attachment was scrubbed... URL: From payalg at cdac.in Thu Apr 18 10:00:53 2013 From: payalg at cdac.in (Payal Gupta) Date: Thu, 18 Apr 2013 13:30:53 +0530 (IST) Subject: [Xymon] Server side external scripts not working Message-ID: <1694625257.72.1366272053596.JavaMail.open-xchange@webmail.cdac.in> Hi All, I am using xymon 4.3.10. I have a server side external script in ~xymon/server/ext/. I have added an entry for the script in ~xymon/server/etc/tasks.cfg as follows: [test] ENVFILE $XYMONHOME/etc/xymonserver.cfg CMD $XYMONHOME/ext/test LOGFILE $XYMONSERVERLOGS/test.log INTERVAL 6m I have made an entry for the same in hosts.cfg as well. In browser, a new column is updated with this test name but nothing is being shown other than a horizontal line. When i restarted the xymon server, i got this in my LOGFILE : 2013-04-17 16:14:02 Whoops ! Failed to send message (Connection failed) 2013-04-17 16:14:02 -> Could not connect to Xymon daemon at xymon-server-ip:1984 (Connection refused) 2013-04-17 16:14:02 -> Recipient 'xymon-server-ip', timeout 15 2013-04-17 16:14:02 -> 1st line: 'config hosts.cfg' 2013-04-17 16:14:02 Cannot load hosts.cfg from xymond, code 5 2013-04-17 16:14:02 Failed to load from xymond, reverting to file-load I am not able to understand the problem. Is there anything I had left? Thanks and Regards, Payal Gupta Project Engineer National PARAM Supercomputing Facility CDAC Pune Maharashtra ------------------------------------------------------------------------------------------------------------------------------- This e-mail is for the sole use of the intended recipient(s) and may contain confidential and privileged information. If you are not the intended recipient, please contact the sender by reply e-mail and destroy all copies and the original message. Any unauthorized review, use, disclosure, dissemination, forwarding, printing or copying of this email is strictly prohibited and appropriate legal action will be taken. ------------------------------------------------------------------------------------------------------------------------------- -------------- next part -------------- An HTML attachment was scrubbed... URL: From massimo.morsiani at gilbarco.com Thu Apr 18 10:30:06 2013 From: massimo.morsiani at gilbarco.com (Morsiani, Massimo) Date: Thu, 18 Apr 2013 08:30:06 +0000 Subject: [Xymon] How to use xymond_rootlogin.pl (was RE: root login script) In-Reply-To: <58443.199.91.139.248.1366225944.squirrel@mail.kkytbs.net> References: <508A72BA79410E498259B65610F6CFFB3177D55D@DHREUSVXM02.danaher.org> <6A34302C7B62B54EB77F697809EFC81E4122CF4264@UMDEXMBX02.core.umdnj.edu> <508A72BA79410E498259B65610F6CFFB3177D7D5@DHREUSVXM02.danaher.org> <6A34302C7B62B54EB77F697809EFC81E4122CF4267@UMDEXMBX02.core.umdnj.edu> <6A34302C7B62B54EB77F697809EFC81E4122CF4269@UMDEXMBX02.core.umdnj.edu> <58443.199.91.139.248.1366225944.squirrel@mail.kkytbs.net> Message-ID: <508A72BA79410E498259B65610F6CFFB3177E4F9@DHREUSVXM02.danaher.org> Hi, I have changed CMD line as suggested and it works now! > ROOT login active > red ROOT login detected! > root pts/0 Apr 18 10:22 (<... machine name ...>) Thank you so much for your support. Regards. Massimo Morsiani Information Technology Dept. ------ Gilbarco S.r.l. via de' Cattani, 220/G 50145 Firenze, Italy tel:    +39-055-30941 fax:    +39-055-318603 email:  massimo.morsiani at gilbarco.com web:    http://www.gilbarco.it  Please consider the environment before printing this e-mail -----Original Message----- From: cleaver at terabithia.org [mailto:cleaver at terabithia.org] Sent: mercoledì 17 aprile 2013 21:12 To: Morsiani, Massimo Cc: Xymon Email List Subject: Re: [Xymon] How to use xymond_rootlogin.pl (was RE: root login script) The xymond_rootlogin.pl script is an example of a server-side external script. It runs on the server at a single point and listens to the incoming "client" stream. When it sees relevant data, it then fires off a "status" command with details about that test. In this respect, it's identical to how xymond_client works, and an example of munging the raw data coming in in new and creative ways w/o having to modify the client reporter. >>> [xymond_rootlogin] >>> ENVFILE /usr/lib/xymon/server/etc/xymonserver.cfg >>> NEEDS xymond >>> CMD $XYMONHOME/ext/xymond_rootlogin.pl >>> LOGFILE $XYMONSERVERLOGS/xymond_rootlogin.log >>> INTERVAL 1m Change CMD to CMD xymond_channel --channel=client $XYMONHOME/ext/xymond_rootlogin.pl ...and remove the INTERVAL line. From the perl source, you should start seeing "login" statuses show up as soon as the clients next report in. HTH, -jc > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > Actually, what you may be missing is that some external scripts are > run on the server, or the machine doing the network tests (they tend > to be scripts to test network services remotely). Most external > scripts I think, however, run as part of the Xymon client (which is > installed per machine). The internal tasks to check the disk space are > an example, and any others that require commands to be run on each > machine (as I'd guess this one does). It's in the documentation though. > > On 04/17/2013 01:51 PM, Novosielski, Ryan wrote: >> Massimo, >> >> I'm unfamiliar with this extension, but all of the extension scripts >> I've worked work essentially the same way -- you install the client >> and then add them to the client as per the documentation. Rehashing >> the documentation is not something I'm planning to do on the mailing >> list, but I'm happy to help if you read it and something is unclear. >> >> =R >> >> On 04/17/2013 12:27 PM, Morsiani, Massimo wrote: >>> Hi, >> >>> I'm trying to run it on Xymon *itself*, but nothing happens... >> >>> Henrik could you please explain me how to use your ext? Thanks in >>> advance. >> >> >>> Regards. >> >>> Massimo Morsiani Information Technology Dept. ------ Gilbarco S.r.l. >>> via de' Cattani, 220/G 50145 Firenze, Italy tel: >>> +39-055-30941 fax: +39-055-318603 email: >>> massimo.morsiani at gilbarco.com web: http://www.gilbarco.it >> >>>  Please consider the environment before printing this e-mail >> >> >> >>> -----Original Message----- From: Novosielski, Ryan >>> [mailto:novosirj at umdnj.edu] Sent: mercoledì 17 aprile 2013 14:05 >>> To: Morsiani, Massimo; 'xymon at xymon.com' Subject: Re: [Xymon] root >>> login script >> >>> What are you trying to do with this test. Wouldn't it normally be >>> run on each client machine you're checking? In any case, my guess is >>> another logfile is logging something about it (maybe xymond.log -- I >>> forget the names off the top of my head). >> >> >>> ----- Original Message ----- From: Morsiani, Massimo >>> [mailto:massimo.morsiani at gilbarco.com] Sent: Wednesday, April 17, >>> 2013 08:00 AM To: Novosielski, Ryan; 'xymon at xymon.com' >>> Subject: RE: [Xymon] root login script >> >>> Hi, >> >>> I have tried to use "xymond_rootlogin.pl" but w/o any result. >> >>> I have copied it in .../xymon/server/ext/ and I have added the >>> following to tasks.cfg. >> >>> [xymond_rootlogin] ENVFILE >>> /usr/lib/xymon/server/etc/xymonserver.cfg NEEDS xymond CMD >>> $XYMONHOME/ext/xymond_rootlogin.pl LOGFILE >>> $XYMONSERVERLOGS/xymond_rootlogin.log INTERVAL 1m >> >>> After these actions nothing happens that is no result at all >>> (neither new login test, nor xymond_rootlogin.log file). >> >>> Where am I wrong? Thanks in advance. >> >> >>> Regards. >> >>> Massimo Morsiani Information Technology Dept. ------ Gilbarco S.r.l. >>> via de' Cattani, 220/G 50145 Firenze, Italy tel: >>> +39-055-30941 fax: +39-055-318603 email: >>> massimo.morsiani at gilbarco.com web: http://www.gilbarco.it >> >>> ü Please consider the environment before printing this e-mail >> >> >> >> >>> -----Original Message----- From: Novosielski, Ryan >>> [mailto:novosirj at umdnj.edu] Sent: mercoledì 17 aprile 2013 13:14 >>> To: Morsiani, Massimo; 'xymon at xymon.com' Subject: Re: [Xymon] root >>> login script >> >>> I can't imagine it would be much different than any other external >>> client script. What is the real question? What have you tried? >> >> >> >>> ----- Original Message ----- From: Morsiani, Massimo >>> [mailto:massimo.morsiani at gilbarco.com] Sent: Wednesday, April >>> 17, 2013 07:09 AM To: 'xymon at xymon.com' >>> Subject: [Xymon] root login script >> >>> Hi all, >> >>> is there anyone that is using one script to check if root user >>> is logged on Unix/Linux machines? Or is there anyone that is >>> using "xymond_rootlogin.pl" and can explain me how to use it? >>> Thanks in advance for the support. >> >> >>> Regards. >> >>> Massimo Morsiani Information Technology Dept. Please be advised that this email may contain confidential information. If you are not the intended recipient, please notify us by email by replying to the sender and delete this message. The sender disclaims that the content of this email constitutes an offer to enter into, or the acceptance of, any agreement; provided that the foregoing does not invalidate the binding effect of any digital or other electronic reproduction of a manual signature that is included in any attachment. From Paul.Root at CenturyLink.com Thu Apr 18 10:28:51 2013 From: Paul.Root at CenturyLink.com (Root, Paul T) Date: Thu, 18 Apr 2013 08:28:51 +0000 Subject: [Xymon] Server side external scripts not working In-Reply-To: <1694625257.72.1366272053596.JavaMail.open-xchange@webmail.cdac.in> References: <1694625257.72.1366272053596.JavaMail.open-xchange@webmail.cdac.in> Message-ID: Looks like you have an email address where a hostname/ip address should be. The “Could not connect to Xymon daemon at xymon-server-ip:1984 (Connection refused)” is kind of the giveaway. From: xymon-bounces at xymon.com [mailto:xymon-bounces at xymon.com] On Behalf Of Payal Gupta Sent: Thursday, April 18, 2013 3:01 AM To: xymon at xymon.com Subject: [Xymon] Server side external scripts not working Hi All, I am using xymon 4.3.10. I have a server side external script in ~xymon/server/ext/. I have added an entry for the script in ~xymon/server/etc/tasks.cfg as follows: [test] ENVFILE $XYMONHOME/etc/xymonserver.cfg CMD $XYMONHOME/ext/test LOGFILE $XYMONSERVERLOGS/test.log INTERVAL 6m I have made an entry for the same in hosts.cfg as well. In browser, a new column is updated with this test name but nothing is being shown other than a horizontal line. When i restarted the xymon server, i got this in my LOGFILE : 2013-04-17 16:14:02 Whoops ! Failed to send message (Connection failed) 2013-04-17 16:14:02 -> Could not connect to Xymon daemon at xymon-server-ip:1984 (Connection refused) 2013-04-17 16:14:02 -> Recipient 'xymon-server-ip', timeout 15 2013-04-17 16:14:02 -> 1st line: 'config hosts.cfg' 2013-04-17 16:14:02 Cannot load hosts.cfg from xymond, code 5 2013-04-17 16:14:02 Failed to load from xymond, reverting to file-load I am not able to understand the problem. Is there anything I had left? Thanks and Regards, Payal Gupta Project Engineer National PARAM Supercomputing Facility CDAC Pune Maharashtra ------------------------------------------------------------------------------------------------------------------------------- This e-mail is for the sole use of the intended recipient(s) and may contain confidential and privileged information. If you are not the intended recipient, please contact the sender by reply e-mail and destroy all copies and the original message. Any unauthorized review, use, disclosure, dissemination, forwarding, printing or copying of this email is strictly prohibited and appropriate legal action will be taken. ------------------------------------------------------------------------------------------------------------------------------- -------------- next part -------------- An HTML attachment was scrubbed... URL: From martin.flemming at desy.de Thu Apr 18 10:51:29 2013 From: martin.flemming at desy.de (Martin Flemming) Date: Thu, 18 Apr 2013 10:51:29 +0200 (CEST) Subject: [Xymon] Server side external scripts not working In-Reply-To: <1694625257.72.1366272053596.JavaMail.open-xchange@webmail.cdac.in> References: <1694625257.72.1366272053596.JavaMail.open-xchange@webmail.cdac.in> Message-ID: On Thu, 18 Apr 2013, Payal Gupta wrote: > I am using xymon 4.3.10. > I have a server side external script in ~xymon/server/ext/. > I have added an entry for the script in ~xymon/server/etc/tasks.cfg as follows: >   > [test]    ENVFILE $XYMONHOME/etc/xymonserver.cfg    CMD $XYMONHOME/ext/test    LOGFILE $XYMONSERVERLOGS/test.log    INTERVAL 6m Hopeing, it's a typo and you're entry looks like [test] ENVFILE $XYMONHOME/etc/xymonserver.cfg    CMD $XYMONHOME/ext/test LOGFILE $XYMONSERVERLOGS/test.log INTERVAL 6m   how looks your entry for this host in host.cfg and how looks the > 1st line: 'config hosts.cfg' 1st line in your hosts.cfg ? how looks your entry for xymond in your tasks.cfg ? by the way, you needn't restart the server, after 5 minutes it should run anyway ... cheers, martin > I have made an entry for the same in hosts.cfg as well. > In browser, a new column is updated with this test name but nothing is being shown other than a horizontal line. >   > When i restarted the xymon server, i got this in my LOGFILE : >   > 2013-04-17 16:14:02 Whoops ! Failed to send message (Connection failed) 2013-04-17 16:14:02 ->  Could not connect to Xymon daemon at xymon-server-ip:1984 (Connection > refused) 2013-04-17 16:14:02 ->  Recipient 'xymon-server-ip', timeout 15 2013-04-17 16:14:02 ->  1st line: 'config hosts.cfg' 2013-04-17 16:14:02 Cannot load > hosts.cfg from xymond, code 5 2013-04-17 16:14:02 Failed to load from xymond, reverting to file-load > I am not able to understand the problem. Is there anything I had left? >   > Thanks and Regards, >   > Payal Gupta > Project Engineer > National PARAM Supercomputing Facility > CDAC Pune > Maharashtra > > ------------------------------------------------------------------------------------------------------------------------------- > This e-mail is for the sole use of the intended recipient(s) and may > contain confidential and privileged information. If you are not the > intended recipient, please contact the sender by reply e-mail and destroy > all copies and the original message. Any unauthorized review, use, > disclosure, dissemination, forwarding, printing or copying of this email > is strictly prohibited and appropriate legal action will be taken. > ------------------------------------------------------------------------------------------------------------------------------- > 0 From Paul.Root at CenturyLink.com Thu Apr 18 11:52:27 2013 From: Paul.Root at CenturyLink.com (Root, Paul T) Date: Thu, 18 Apr 2013 09:52:27 +0000 Subject: [Xymon] Server side external scripts not working In-Reply-To: <440294378.95.1366278438521.JavaMail.open-xchange@webmail.cdac.in> References: <1694625257.72.1366272053596.JavaMail.open-xchange@webmail.cdac.in> <352483336.75.1366274550079.JavaMail.open-xchange@webmail.cdac.in> <440294378.95.1366278438521.JavaMail.open-xchange@webmail.cdac.in> Message-ID: The server has the hosts.cfg file, clients do not. It’s trying to access it. Without knowing what the script is doing, I can’t guess what’s happening. Don’t take the list out of your emails. I don’t know all the answers. Others might. From: Payal Gupta [mailto:payalg at cdac.in] Sent: Thursday, April 18, 2013 4:47 AM To: Root, Paul T Subject: RE: [Xymon] Server side external scripts not working Also for the local xymon client running on xymon server, the test is running fine. But not for the rest of the xymon clients. Not able to understand why? On April 18, 2013 at 2:30 PM "Root, Paul T" > wrote: Probably something in the xymonserver.cfg file. From: Payal Gupta [mailto:payalg at cdac.in] Sent: Thursday, April 18, 2013 3:43 AM To: Root, Paul T Subject: RE: [Xymon] Server side external scripts not working No, but i have not used any email address anywhere in my script. On April 18, 2013 at 1:58 PM "Root, Paul T" > wrote: Looks like you have an email address where a hostname/ip address should be. The “Could not connect to Xymon daemon at xymon-server-ip:1984 (Connection refused)” is kind of the giveaway. From: xymon-bounces at xymon.com [mailto:xymon-bounces at xymon.com] On Behalf Of Payal Gupta Sent: Thursday, April 18, 2013 3:01 AM To: xymon at xymon.com Subject: [Xymon] Server side external scripts not working Hi All, I am using xymon 4.3.10. I have a server side external script in ~xymon/server/ext/. I have added an entry for the script in ~xymon/server/etc/tasks.cfg as follows: [test] ENVFILE $XYMONHOME/etc/xymonserver.cfg CMD $XYMONHOME/ext/test LOGFILE $XYMONSERVERLOGS/test.log INTERVAL 6m I have made an entry for the same in hosts.cfg as well. In browser, a new column is updated with this test name but nothing is being shown other than a horizontal line. When i restarted the xymon server, i got this in my LOGFILE : 2013-04-17 16:14:02 Whoops ! Failed to send message (Connection failed) 2013-04-17 16:14:02 -> Could not connect to Xymon daemon at xymon-server-ip:1984 (Connection refused) 2013-04-17 16:14:02 -> Recipient 'xymon-server-ip', timeout 15 2013-04-17 16:14:02 -> 1st line: 'config hosts.cfg' 2013-04-17 16:14:02 Cannot load hosts.cfg from xymond, code 5 2013-04-17 16:14:02 Failed to load from xymond, reverting to file-load I am not able to understand the problem. Is there anything I had left? Thanks and Regards, Payal Gupta Project Engineer National PARAM Supercomputing Facility CDAC Pune Maharashtra ------------------------------------------------------------------------------------------------------------------------------- This e-mail is for the sole use of the intended recipient(s) and may contain confidential and privileged information. If you are not the intended recipient, please contact the sender by reply e-mail and destroy all copies and the original message. Any unauthorized review, use, disclosure, dissemination, forwarding, printing or copying of this email is strictly prohibited and appropriate legal action will be taken. ------------------------------------------------------------------------------------------------------------------------------- ------------------------------------------------------------------------------------------------------------------------------- This e-mail is for the sole use of the intended recipient(s) and may contain confidential and privileged information. If you are not the intended recipient, please contact the sender by reply e-mail and destroy all copies and the original message. Any unauthorized review, use, disclosure, dissemination, forwarding, printing or copying of this email is strictly prohibited and appropriate legal action will be taken. ------------------------------------------------------------------------------------------------------------------------------- ------------------------------------------------------------------------------------------------------------------------------- This e-mail is for the sole use of the intended recipient(s) and may contain confidential and privileged information. If you are not the intended recipient, please contact the sender by reply e-mail and destroy all copies and the original message. Any unauthorized review, use, disclosure, dissemination, forwarding, printing or copying of this email is strictly prohibited and appropriate legal action will be taken. ------------------------------------------------------------------------------------------------------------------------------- -------------- next part -------------- An HTML attachment was scrubbed... URL: From deepakdeore2004 at gmail.com Thu Apr 18 15:59:05 2013 From: deepakdeore2004 at gmail.com (deepak deore) Date: Thu, 18 Apr 2013 19:29:05 +0530 Subject: [Xymon] custom hostnames problem Message-ID: I have xymon clients with the weird name, i tried adding CLIENT:name as mentioned in http://lists.xymon.com/oldarchive/2005/07/msg00362.html, but still the new name is not appearing. 10.x.x.x diff-host-name-app01.example.com # noconn nofiles nobbd NOCOLUMNS:files CLASS:STG CLIENT:app01-stg but the new hostname is not coming. I know we can use MACHINEDOTS but that i dont want because for ping test we use custom script which fails if hostname after 10.x.x.x is changes as per MACHINEDOTS variable. -------------- next part -------------- An HTML attachment was scrubbed... URL: From mburger at bubbanfriends.org Thu Apr 18 16:49:46 2013 From: mburger at bubbanfriends.org (Mike Burger) Date: Thu, 18 Apr 2013 10:49:46 -0400 (EDT) Subject: [Xymon] custom hostnames problem In-Reply-To: References: Message-ID: <57197.209.43.25.133.1366296586.squirrel@www.bubbanfriends.org> What is the output of "hostname" on the clients? That is the information that should be after the IP address. Also, look in your ghost clients list under Reports...you'll see the proper name for the clients, there. -- Mike Burger http://www.bubbanfriends.org "It's always suicide-mission this, save-the-planet that. No one ever just stops by to say 'hi' anymore." --Colonel Jack O'Neill, SG1 > I have xymon clients with the weird name, i tried adding CLIENT:name as > mentioned in http://lists.xymon.com/oldarchive/2005/07/msg00362.html, but > still the new name is not appearing. > > 10.x.x.x diff-host-name-app01.example.com # noconn nofiles nobbd > NOCOLUMNS:files CLASS:STG CLIENT:app01-stg > > but the new hostname is not coming. I know we can use MACHINEDOTS but that > i dont want because for ping test we use custom script which fails if > hostname after 10.x.x.x is changes as per MACHINEDOTS variable. > _______________________________________________ > Xymon mailing list > Xymon at xymon.com > http://lists.xymon.com/mailman/listinfo/xymon > From deepakdeore2004 at gmail.com Thu Apr 18 17:44:12 2013 From: deepakdeore2004 at gmail.com (deepak deore) Date: Thu, 18 Apr 2013 21:14:12 +0530 Subject: [Xymon] custom hostnames problem In-Reply-To: <57197.209.43.25.133.1366296586.squirrel@www.bubbanfriends.org> References: <57197.209.43.25.133.1366296586.squirrel@www.bubbanfriends.org> Message-ID: Yes, I am using the same information which comes with the hostname command. I see one client in ghost report but that client is different one. On Thu, Apr 18, 2013 at 8:19 PM, Mike Burger wrote: > What is the output of "hostname" on the clients? > > That is the information that should be after the IP address. > > Also, look in your ghost clients list under Reports...you'll see the > proper name for the clients, there. > -- > Mike Burger > http://www.bubbanfriends.org > > "It's always suicide-mission this, save-the-planet that. No one ever just > stops by to say 'hi' anymore." --Colonel Jack O'Neill, SG1 > > > > I have xymon clients with the weird name, i tried adding CLIENT:name as > > mentioned in http://lists.xymon.com/oldarchive/2005/07/msg00362.html, > but > > still the new name is not appearing. > > > > 10.x.x.x diff-host-name-app01.example.com # noconn nofiles nobbd > > NOCOLUMNS:files CLASS:STG CLIENT:app01-stg > > > > but the new hostname is not coming. I know we can use MACHINEDOTS but > that > > i dont want because for ping test we use custom script which fails if > > hostname after 10.x.x.x is changes as per MACHINEDOTS variable. > > _______________________________________________ > > Xymon mailing list > > Xymon at xymon.com > > http://lists.xymon.com/mailman/listinfo/xymon > > > > -------------- next part -------------- An HTML attachment was scrubbed... URL: From sholmes42 at mac.com Thu Apr 18 21:18:32 2013 From: sholmes42 at mac.com (Steve Holmes) Date: Thu, 18 Apr 2013 15:18:32 -0400 Subject: [Xymon] differentiating host types in analysis.cfg Message-ID: I want to be able to differentiate in analysis.cfg between debian servers and debian containers (not being a debian familiar I don't know what the non container version would be called). I looked at CLASS: in the hosts.cfg man page and it says that is used for log-file monitoring, however, in the analysis.cfg man page it talks about using CLASS= as a host selector. Will it work? I haven't tried it, but will be doing so unless someone here says not to. Specifically I want to check for PROC ntpd on regular debian servers and on redhat, but not check for it on debian containers since it can't run on them. Debian servers and redhat servers both report their class as linux so If I can override that on the containers and make it something else I think I can do what I want. Thanks for any insight. Steve Purdue University -------------- next part -------------- An HTML attachment was scrubbed... URL: From jlaidman at rebel-it.com.au Fri Apr 19 06:52:31 2013 From: jlaidman at rebel-it.com.au (Jeremy Laidman) Date: Fri, 19 Apr 2013 14:52:31 +1000 Subject: [Xymon] root login script In-Reply-To: <508A72BA79410E498259B65610F6CFFB3177D423@DHREUSVXM02.danaher.org> References: <508A72BA79410E498259B65610F6CFFB3177D423@DHREUSVXM02.danaher.org> Message-ID: On 17 April 2013 21:09, Morsiani, Massimo wrote: > is there anyone that is using one script to check if root user is logged > on Unix/Linux machines? > Or is there anyone that is using "xymond_rootlogin.pl" and can explain me > how to use it? > Thanks in advance for the support. > IMHO, this script seems overkill, given what's now possible within Xymon these days. The "who" output is already available in the client data, and could be extracted and analysed server-side with something like: #!/bin/sh HOSTLIST=`xymongrep rootcheck` for HOSTNAME in $HOSTLIST; do WHO=`xymon localhost 'clientlog name.of.server section=who"` [ "$WHO" ] || continue # skip hosts without [who] if echo "$WHO" | grep "^root" >/dev/null; then MSG="status $HOSTNAME.root red root logins detected" else MSG="status $HOSTNAME.root green no root logins detected" fi xymon $XYMSRV "$MSG $WHO" done This just finds all the hosts.cfg entries with "rootcheck" present, and reports where "who" shows that root is logged in. This would be run from tasks.cfg. Another way to do this, without having to create and maintain an actual script file, is to use backticks to create a virtual log file entry in client-local.cfg, like so: log:`exec 2>/dev/null; { grep '^$' /tmp/who.log >/dev/null && >/tmp/who.log || echo "" >>/tmp/who.log; } && who >> /tmp/who.log && echo /tmp/who.log`:10240 This collects lines from a virtual logfile /tmp/who.log, that contains the who output. This allows you to monitor the who logfile with analysis.cfg, like so: HOST=* LOG /tmp/who.log %^root COLOR=red TEXT="Root login detected" This backticks scriptlet is a little complicated because it needs to make sure the virtual logfile size changes every time, otherwise Xymon's logfetch process might not detect any difference in the file and not report anything. J -------------- next part -------------- An HTML attachment was scrubbed... URL: From jlaidman at rebel-it.com.au Fri Apr 19 07:21:46 2013 From: jlaidman at rebel-it.com.au (Jeremy Laidman) Date: Fri, 19 Apr 2013 15:21:46 +1000 Subject: [Xymon] custom hostnames problem In-Reply-To: References: Message-ID: On 18 April 2013 23:59, deepak deore wrote: > I have xymon clients with the weird name, i tried adding CLIENT:name as > mentioned in http://lists.xymon.com/oldarchive/2005/07/msg00362.html, but > still the new name is not appearing. > > 10.x.x.x diff-host-name-app01.example.com # noconn nofiles nobbd > NOCOLUMNS:files CLASS:STG CLIENT:app01-stg > > but the new hostname is not coming. I know we can use MACHINEDOTS but that > i dont want because for ping test we use custom script which fails if > hostname after 10.x.x.x is changes as per MACHINEDOTS variable. > The CLIENT option lets you specify an alias that a client can use, but that doesn't rename the client name on the Xymon server. Whatever is the first entry after the IP address (before the has) will be used as the hostname in Xymon pages. If you want to change the display name, use NAME: instead. J -------------- next part -------------- An HTML attachment was scrubbed... URL: From oyvind.bjorge at telenor.com Fri Apr 19 13:39:56 2013 From: oyvind.bjorge at telenor.com (oyvind.bjorge at telenor.com) Date: Fri, 19 Apr 2013 11:39:56 +0000 Subject: [Xymon] Trunkated data from procs (OPEN) Message-ID: <439AC9D7C36C784597D2450F29AB0B5D4003559C@TNS-FBU-24-205.corp.telenor.no> I have a proc-test that is failing for one node because proc-test data is truncated. The server is configured with the default limit of 512K for (MAXMSG_CLIENT). Looking at the client_data for the active test, this is showing a complete ps-list, but it also seems like the total of client_data is over the limit of 512K. Looking at a historical test, it seem like the client_data is truncated at 512K and it matches the same spot in the ps-list. An obvious solution for this might be to increase the global parameter MAXMSG_CLIENT, but will be valid for all clients. Another possible solution, but not wanted, might be to change the client behavior to local handling. A third solution could be to reduce the amount of data sent by the client. Ex stop the netstat output, which for this client is quite long and something we don't generate alarms for today. Does anyone know if this is possible, and if so how? Anyone that has an better suggestion on how to solve this? Br, Øyvind -------------- next part -------------- An HTML attachment was scrubbed... URL: From Chris.Morris at rwe.com Fri Apr 19 13:46:04 2013 From: Chris.Morris at rwe.com (Chris.Morris at rwe.com) Date: Fri, 19 Apr 2013 12:46:04 +0100 Subject: [Xymon] Trunkated data from procs (OPEN) In-Reply-To: <439AC9D7C36C784597D2450F29AB0B5D4003559C@TNS-FBU-24-205.corp.telenor.no> References: <439AC9D7C36C784597D2450F29AB0B5D4003559C@TNS-FBU-24-205.corp.telenor.no> Message-ID: <61575C06CB38C242BE91633B98D6A750CDBD43@KFMEX39P.ud1.utility> You can stop the client sending that data (or any part of its output) by editing the ~/client/bin/xymonclient-.sh script and commenting out the relevant command section. ________________________________ From: xymon-bounces at xymon.com [mailto:xymon-bounces at xymon.com] On Behalf Of oyvind.bjorge at telenor.com Sent: 19 April 2013 12:40 To: xymon at xymon.com Subject: [Xymon] Trunkated data from procs (OPEN) I have a proc-test that is failing for one node because proc-test data is truncated. The server is configured with the default limit of 512K for (MAXMSG_CLIENT). Looking at the client_data for the active test, this is showing a complete ps-list, but it also seems like the total of client_data is over the limit of 512K. Looking at a historical test, it seem like the client_data is truncated at 512K and it matches the same spot in the ps-list. An obvious solution for this might be to increase the global parameter MAXMSG_CLIENT, but will be valid for all clients. Another possible solution, but not wanted, might be to change the client behavior to local handling. A third solution could be to reduce the amount of data sent by the client. Ex stop the netstat output, which for this client is quite long and something we don't generate alarms for today. Does anyone know if this is possible, and if so how? Anyone that has an better suggestion on how to solve this? Br, Øyvind **************************************************************************** The information contained in this email is intended only for the use of the intended recipient at the email address to which it has been addressed. If the reader of this message is not an intended recipient, you are hereby notified that you have received this document in error and that any review, dissemination or copying of the message or associated attachments is strictly prohibited. If you have received this email in error, please contact the sender by return email or call 01793 877777 and ask for the sender and then delete it immediately from your system.Please note that neither the RWE Group of Companies nor the sender accepts any responsibility for viruses and it is your responsibility to scan attachments (if any). ***************************************************************************** -------------- next part -------------- An HTML attachment was scrubbed... URL: From Nick at Pettefar.com Fri Apr 19 14:00:43 2013 From: Nick at Pettefar.com (Nick) Date: Fri, 19 Apr 2013 13:00:43 +0100 Subject: [Xymon] Xymon Log Retrieval Message-ID: Is there a doco anywhere explaining the log file retrieval mechanism? I want to use Xymon to fetch /etc/passwd files so that I can check for unwanted/unnoticed changes. Nick Dublin From oyvind.bjorge at telenor.com Fri Apr 19 14:15:52 2013 From: oyvind.bjorge at telenor.com (oyvind.bjorge at telenor.com) Date: Fri, 19 Apr 2013 12:15:52 +0000 Subject: [Xymon] Trunkated data from procs (OPEN) Message-ID: <439AC9D7C36C784597D2450F29AB0B5D40035646@TNS-FBU-24-205.corp.telenor.no> Thank you Chris! Øyvind From: Chris.Morris at rwe.com [mailto:Chris.Morris at rwe.com] Sent: 19. april 2013 13:46 To: Bjørge Øyvind; xymon at xymon.com Subject: RE: [Xymon] Trunkated data from procs (OPEN) You can stop the client sending that data (or any part of its output) by editing the ~/client/bin/xymonclient-.sh script and commenting out the relevant command section. ________________________________ From: xymon-bounces at xymon.com [mailto:xymon-bounces at xymon.com] On Behalf Of oyvind.bjorge at telenor.com Sent: 19 April 2013 12:40 To: xymon at xymon.com Subject: [Xymon] Trunkated data from procs (OPEN) I have a proc-test that is failing for one node because proc-test data is truncated. The server is configured with the default limit of 512K for (MAXMSG_CLIENT). Looking at the client_data for the active test, this is showing a complete ps-list, but it also seems like the total of client_data is over the limit of 512K. Looking at a historical test, it seem like the client_data is truncated at 512K and it matches the same spot in the ps-list. An obvious solution for this might be to increase the global parameter MAXMSG_CLIENT, but will be valid for all clients. Another possible solution, but not wanted, might be to change the client behavior to local handling. A third solution could be to reduce the amount of data sent by the client. Ex stop the netstat output, which for this client is quite long and something we don't generate alarms for today. Does anyone know if this is possible, and if so how? Anyone that has an better suggestion on how to solve this? Br, Øyvind **************************************************************************** The information contained in this email is intended only for the use of the intended recipient at the email address to which it has been addressed. If the reader of this message is not an intended recipient, you are hereby notified that you have received this document in error and that any review, dissemination or copying of the message or associated attachments is strictly prohibited. If you have received this email in error, please contact the sender by return email or call 01793 877777 and ask for the sender and then delete it immediately from your system.Please note that neither the RWE Group of Companies nor the sender accepts any responsibility for viruses and it is your responsibility to scan attachments (if any). ***************************************************************************** -------------- next part -------------- An HTML attachment was scrubbed... URL: From Galen.Johnson at sas.com Fri Apr 19 15:18:40 2013 From: Galen.Johnson at sas.com (Galen Johnson) Date: Fri, 19 Apr 2013 13:18:40 +0000 Subject: [Xymon] Xymon Log Retrieval In-Reply-To: References: Message-ID: Why not just use the Xymon client's built-in ability to test for file age and trigger an alert if it changes? =G= ________________________________________ From: xymon-bounces at xymon.com [xymon-bounces at xymon.com] on behalf of Nick [Nick at Pettefar.com] Sent: Friday, April 19, 2013 8:00 AM To: xymon at xymon.com Subject: [Xymon] Xymon Log Retrieval Is there a doco anywhere explaining the log file retrieval mechanism? I want to use Xymon to fetch /etc/passwd files so that I can check for unwanted/unnoticed changes. Nick Dublin _______________________________________________ Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon From Nick at Pettefar.com Fri Apr 19 15:53:35 2013 From: Nick at Pettefar.com (Nick Pettefar) Date: Fri, 19 Apr 2013 14:53:35 +0100 Subject: [Xymon] Xymon Log Retrieval In-Reply-To: References: Message-ID: Yes, that's what I've done but management want a copy of them for some reason or other... Regards, Nick Pettefar On 19 April 2013 14:18, Galen Johnson wrote: > Why not just use the Xymon client's built-in ability to test for file age and trigger an alert if it changes? > > =G= > > ________________________________________ > From: xymon-bounces at xymon.com [xymon-bounces at xymon.com] on behalf of Nick [Nick at Pettefar.com] > Sent: Friday, April 19, 2013 8:00 AM > To: xymon at xymon.com > Subject: [Xymon] Xymon Log Retrieval > > Is there a doco anywhere explaining the log file retrieval mechanism? > > I want to use Xymon to fetch /etc/passwd files so that I can check for unwanted/unnoticed changes. > > Nick > Dublin > _______________________________________________ > Xymon mailing list > Xymon at xymon.com > http://lists.xymon.com/mailman/listinfo/xymon > > From tlewick at apsaranetworks.com Fri Apr 19 17:05:19 2013 From: tlewick at apsaranetworks.com (taylor lewick) Date: Fri, 19 Apr 2013 10:05:19 -0500 Subject: [Xymon] snmp data question devmon/xymon Message-ID: <085301ce3d0f$4f535c30$edfa1490$@com> This post could also go to devmon, but I've noticed the devmon mailing list is basically just about inactive. I set up devmon for multinode, so that its using mysql as a backend database. Everything appears to be working, but I thought it would also store the actual polled snmp data in the table test_data. All of the tables are being populated but that one. Does anyone know how to get devmon to store not just the config (templates, hosts/devices, thresholds, etc) but also the polled snmp data into the mysql database? Thanks, Taylor -------------- next part -------------- An HTML attachment was scrubbed... URL: From deepakdeore2004 at gmail.com Fri Apr 19 20:18:06 2013 From: deepakdeore2004 at gmail.com (deepak deore) Date: Fri, 19 Apr 2013 23:48:06 +0530 Subject: [Xymon] custom script run interval Message-ID: I have a custom script setup on client side, which I want to run on every 24 hours and i don't want to change the default lifetime for other tests. Used below line but still after 30 mins it is going into purple. $BB $BBDISP "status+25h $MACHINE.$COLUMN $COLOR `date` `echo -e "Daily status: \ \n$(cat /tmp/status.log) "`" -------------- next part -------------- An HTML attachment was scrubbed... URL: From Paul.Root at CenturyLink.com Fri Apr 19 21:10:37 2013 From: Paul.Root at CenturyLink.com (Root, Paul T) Date: Fri, 19 Apr 2013 19:10:37 +0000 Subject: [Xymon] custom script run interval In-Reply-To: References: Message-ID: That should work. Works for me on many external scripts. $BB $BBDISP "status+1w $MACHINE.$TEST $COLOR `cat $StatusFile`" From: xymon-bounces at xymon.com [mailto:xymon-bounces at xymon.com] On Behalf Of deepak deore Sent: Friday, April 19, 2013 1:18 PM To: xymon at xymon.com Subject: [Xymon] custom script run interval I have a custom script setup on client side, which I want to run on every 24 hours and i don't want to change the default lifetime for other tests. Used below line but still after 30 mins it is going into purple. $BB $BBDISP "status+25h $MACHINE.$COLUMN $COLOR `date` `echo -e "Daily status: \ \n$(cat /tmp/status.log) "`" -------------- next part -------------- An HTML attachment was scrubbed... URL: From Michael.Beatty at sherwin.com Fri Apr 19 21:42:18 2013 From: Michael.Beatty at sherwin.com (Michael Beatty) Date: Fri, 19 Apr 2013 15:42:18 -0400 Subject: [Xymon] custom script run interval In-Reply-To: References: Message-ID: <51719E1A.1070301@sherwin.com> Your syntax is correct, it should work. Maybe echo the statement to the log file to see what exactly it is sending. Is it possible that you are calling the statement from more than one location and the other location doesn't have the 25h lifetime? Michael Beatty On 04/19/2013 02:18 PM, deepak deore wrote: > I have a custom script setup on client side, which I want to run on > every 24 hours and i don't want to change the default lifetime for > other tests. > > Used below line but still after 30 mins it is going into purple. > > $BB $BBDISP "status+25h $MACHINE.$COLUMN $COLOR `date` `echo -e "Daily > status: \ > \n$(cat /tmp/status.log) "`" > > > > _______________________________________________ > Xymon mailing list > Xymon at xymon.com > http://lists.xymon.com/mailman/listinfo/xymon -------------- next part -------------- An HTML attachment was scrubbed... URL: From novosirj at umdnj.edu Fri Apr 19 22:49:03 2013 From: novosirj at umdnj.edu (Novosielski, Ryan) Date: Fri, 19 Apr 2013 16:49:03 -0400 Subject: [Xymon] Xymon Log Retrieval References: Message-ID: <6A34302C7B62B54EB77F697809EFC81E4122CF428D@UMDEXMBX02.core.umdnj.edu> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Wouldn't the history logs serve? On 04/19/2013 09:54 AM, Nick Pettefar wrote: > Yes, that's what I've done but management want a copy of them for > some reason or other... > > Regards, > > Nick Pettefar > > > On 19 April 2013 14:18, Galen Johnson > wrote: >> Why not just use the Xymon client's built-in ability to test for >> file age and trigger an alert if it changes? >> >> =G= >> >> ________________________________________ From: >> xymon-bounces at xymon.com [xymon-bounces at xymon.com] on behalf of >> Nick [Nick at Pettefar.com] Sent: Friday, April 19, 2013 8:00 AM To: >> xymon at xymon.com Subject: [Xymon] Xymon Log Retrieval >> >> Is there a doco anywhere explaining the log file retrieval >> mechanism? >> >> I want to use Xymon to fetch /etc/passwd files so that I can >> check for unwanted/unnoticed changes. >> >> Nick Dublin _______________________________________________ Xymon >> mailing list Xymon at xymon.com >> http://lists.xymon.com/mailman/listinfo/xymon >> >> > _______________________________________________ Xymon mailing list > Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon > - -- - ---- _ _ _ _ ___ _ _ _ |Y#| | | |\/| | \ |\ | | |Ryan Novosielski - Sr. Systems Programmer |$&| |__| | | |__/ | \| _| |novosirj at umdnj.edu - 973/972.0922 (2-0922) \__/ Univ. of Med. and Dent.|IST/EI-Academic Svcs. - ADMC 450, Newark -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) Comment: Using GnuPG with undefined - http://www.enigmail.net/ iEYEARECAAYFAlFxrb8ACgkQmb+gadEcsb6X6wCeM7duQP6JB8b+nCJkIG1o0ht2 hlQAoN1rARNOvKttmj/AezG1jLM7dobZ =afbi -----END PGP SIGNATURE----- From deepakdeore2004 at gmail.com Sat Apr 20 09:21:03 2013 From: deepakdeore2004 at gmail.com (deepak deore) Date: Sat, 20 Apr 2013 12:51:03 +0530 Subject: [Xymon] custom script run interval In-Reply-To: <51719E1A.1070301@sherwin.com> References: <51719E1A.1070301@sherwin.com> Message-ID: for now i have setup below entry in clientlaunch.cfg, when i set it to 25h it goes purple, am I doing right? INTERVAL 25m On Sat, Apr 20, 2013 at 1:12 AM, Michael Beatty wrote: > Your syntax is correct, it should work. > > Maybe echo the statement to the log file to see what exactly it is sending. > > Is it possible that you are calling the statement from more than one > location and the other location doesn't have the 25h lifetime? > > > Michael Beatty > > > On 04/19/2013 02:18 PM, deepak deore wrote: > > I have a custom script setup on client side, which I want to run on > every 24 hours and i don't want to change the default lifetime for other > tests. > > Used below line but still after 30 mins it is going into purple. > > $BB $BBDISP "status+25h $MACHINE.$COLUMN $COLOR `date` `echo -e "Daily > status: \ > \n$(cat /tmp/status.log) "`" > > > > _______________________________________________ > Xymon mailing listXymon at xymon.comhttp://lists.xymon.com/mailman/listinfo/xymon > > > > > _______________________________________________ > Xymon mailing list > Xymon at xymon.com > http://lists.xymon.com/mailman/listinfo/xymon > > -------------- next part -------------- An HTML attachment was scrubbed... URL: From henrik at hswn.dk Sun Apr 21 15:42:25 2013 From: henrik at hswn.dk (=?ISO-8859-1?Q?Henrik_St=F8rner?=) Date: Sun, 21 Apr 2013 15:42:25 +0200 Subject: [Xymon] Xymon 4.3.11 released Message-ID: <5173ECC1.1070909@hswn.dk> Hi, I have just released version 4.3.11 of Xymon. This release fixes a critical bug, which has caused crashes and other unwanted behaviour of the xymond daemon. Upgrading your Xymon server is recommended. Full list of changes: * Fix wrong file permissions when installing * Linux client: Fix handling of root filesystem when mounted on "/dev/root" * trends webpage: Fix case where hostname disappears after zoom. * FreeBSD client: Memory patch for FreeBSD 8.0+ * xymond_alert: Fix problem with UNMATCHED rules triggering when there are actual recipients, but their alerts are suppressed due to a REPEAT setting not having expired. * xymond_rrd: Dont crash if called with an empty status/data message * xymond_channel: Report cause when channel-child exits/crashes * xymongen: Geneate an overview page with only reds (like non-green) * xymongen: Optionally define env. variable BOARDFILTER to select hosts/tests included in the generated pages * links: Add pdf, docx and odt as known document formats * Fix potential crashes after an alert cookie expired * Fix potential crash after deleting/renaming a host * Speedup loading of the hosts.cfg file, noticeable with very large hosts.cfg files (100.000+ hosts) Currently only the source archive is available. Binary packages will show up in a couple of days. Regards, Henrik From jlaidman at rebel-it.com.au Mon Apr 22 06:54:25 2013 From: jlaidman at rebel-it.com.au (Jeremy Laidman) Date: Mon, 22 Apr 2013 14:54:25 +1000 Subject: [Xymon] Xymon Log Retrieval In-Reply-To: References: Message-ID: On 19 April 2013 22:00, Nick wrote: > Is there a doco anywhere explaining the log file retrieval mechanism? > Log file retrieval configuration is documented in client-config.cfg. Analysis and reporting of log files is documented in analysis.cfg. The log file contents are processed by the logfetch binary, and the man page for that gives some information on how it does its thing. > I want to use Xymon to fetch /etc/passwd files so that I can check for > unwanted/unnoticed changes. > The problem with using the log retrieval mechanism is that it assumes that the file is a logfile, and only reports on new entries past the last time it checked. If an entry is changed, but the file doesn't change size, it won't report any change to the file. If an entry is added in the middle, rather than at the end, then logfetch will report the lines at the end and so you'll see the wrong values. You can trick logfetch into thinking that a file is a logfile that has been rotated by reducing its size, and it starts from the beginning of the file. The next run, you append to the file, so that it reports only the new stuff. Then you get it to cycle between the two states (new entries, rotated, new entries, rotated, etc). But you wouldn't want to do that on the actual passwd file! What you could do is to create a virtual file using backticks and manipulate its contents as you need, and to satisfy logfetch. It's a bit hackety but it only requires changes in a couple of config files on the Xymon server. For example, something like this in client-local.cfg: log:`if [ -f /tmp/pw.rep ]; then if grep '^[0-9]' /tmp/pw.rep | tail -n +3 | grep ^ >/dev/null; then cp /dev/null /tmp/pw.rep; fi; diff /tmp/pw.old /etc/passwd >> /tmp/pw.rep; else touch /tmp/pw.rep; fi; cp /etc/passwd /tmp/pw.old; echo /tmp/pw.rep`:2048 All this does is to create a copy of the password file pw.old, and any differences in the last time it was run are appended to a report file pw.rep, which is what's actually monitored. If the report file has 3 or more diffs appended, it gets emptied before the next report is added, to keep the file from growing too large. My analysis.cfg file can contain something like this: HOST=name.of.host LOG /tmp/pw.rep "%^>" COLOR="red" "TEXT=Account added to /etc/passwd" LOG /tmp/pw.rep "%^<" COLOR="yellow" "TEXT=Account removed from /etc/passwd" Note: untested. J -------------- next part -------------- An HTML attachment was scrubbed... URL: From Phil.Crooker at orix.com.au Mon Apr 22 07:57:40 2013 From: Phil.Crooker at orix.com.au (Phil Crooker) Date: Mon, 22 Apr 2013 15:57:40 +1000 Subject: [Xymon] Xymon Log Retrieval In-Reply-To: References: Message-ID: <51755DF4020000C0000CF346@vho64pn04.orix.com.au> If you want to monitor changes to the passwd/shadow file, one way would be to write an ext script. One can get around the OS recording changes to users by just editing the files directly, so this would be a bit more foolproof. You'd need be to keep a copy of the passwd file somewhere else (say the xymon server itself) and then do a diff against it. Something like: if scp $server:/etc/passwd $BBHOME/secret/$server.passwd.new then if diff $BBHOME/secret/$server.passwd.new $BBHOME/secret/$server.passwd.reference then COLOR=green else COLOR=red fi else COLOR=red fi cheers, Phil >>> Yes, that's what I've done but management want a copy of them for some reason or other... Regards, Nick Pettefar On 19 April 2013 14:18, Galen Johnson wrote: > Why not just use the Xymon client's built-in ability to test for file age and trigger an alert if it changes? > > =G= > > ________________________________________ > From: xymon-bounces at xymon.com [xymon-bounces at xymon.com] on behalf of Nick [Nick at Pettefar.com] > Sent: Friday, April 19, 2013 8:00 AM > To: xymon at xymon.com > Subject: [Xymon] Xymon Log Retrieval > > Is there a doco anywhere explaining the log file retrieval mechanism? > > I want to use Xymon to fetch /etc/passwd files so that I can check for unwanted/unnoticed changes. > > Nick > Dublin > _______________________________________________ > Xymon mailing list > Xymon at xymon.com > http://lists.xymon.com/mailman/listinfo/xymon > > _______________________________________________ Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon -------------- next part -------------- An HTML attachment was scrubbed... URL: From jlaidman at rebel-it.com.au Mon Apr 22 09:15:19 2013 From: jlaidman at rebel-it.com.au (Jeremy Laidman) Date: Mon, 22 Apr 2013 17:15:19 +1000 Subject: [Xymon] Xymon Log Retrieval In-Reply-To: References: Message-ID: On 22 April 2013 14:54, Jeremy Laidman wrote: > config files on the Xymon server. For example, something like this in > client-local.cfg: > > log:`if [ -f /tmp/pw.rep ]; then if grep '^[0-9]' /tmp/pw.rep | tail -n +3 > | grep ^ >/dev/null; then cp /dev/null /tmp/pw.rep; fi; diff /tmp/pw.old > /etc/passwd >> /tmp/pw.rep; else touch /tmp/pw.rep; fi; cp /etc/passwd > /tmp/pw.old; echo /tmp/pw.rep`:2048 > and > Note: untested. > This is now tested, and IMHO it works well. The only problem is that the "TEXT=" modifier in analysis.cfg doesn't seem to work at all, and I just get the text "Warnings in /tmp/pw.rep" instead. But it shows the accounts added or removed, which is the important thing. J -------------- next part -------------- An HTML attachment was scrubbed... URL: From ralphmitchell at gmail.com Mon Apr 22 12:53:29 2013 From: ralphmitchell at gmail.com (Ralph Mitchell) Date: Mon, 22 Apr 2013 06:53:29 -0400 Subject: [Xymon] Xymon Log Retrieval In-Reply-To: <51755DF4020000C0000CF346@vho64pn04.orix.com.au> References: <51755DF4020000C0000CF346@vho64pn04.orix.com.au> Message-ID: You might want to talk to your security people before copying the passed file to another system, and you *definitely* should not copy the shadow file. There are good reasons that file is readable only by root. Ralph Mitchell If you want to monitor changes to the passwd/shadow file, one way would be to write an ext script. One can get around the OS recording changes to users by just editing the files directly, so this would be a bit more foolproof. You'd need be to keep a copy of the passwd file somewhere else (say the xymon server itself) and then do a diff against it. Something like: if scp $server:/etc/passwd $BBHOME/secret/$server.passwd.new then if diff $BBHOME/secret/$server.passwd.new $BBHOME/secret/$server.passwd.reference then COLOR=green else COLOR=red fi else COLOR=red fi cheers, Phil >>> Yes, that's what I've done but management want a copy of them for some reason or other... Regards, Nick Pettefar On 19 April 2013 14:18, Galen Johnson wrote: > Why not just use the Xymon client's built-in ability to test for file age and trigger an alert if it changes? > > =G= > > ________________________________________ > From: xymon-bounces at xymon.com [xymon-bounces at xymon.com] on behalf of Nick [Nick at Pettefar.com] > Sent: Friday, April 19, 2013 8:00 AM > To: xymon at xymon.com > Subject: [Xymon] Xymon Log Retrieval > > Is there a doco anywhere explaining the log file retrieval mechanism? > > I want to use Xymon to fetch /etc/passwd files so that I can check for unwanted/unnoticed changes. > > Nick > Dublin > _______________________________________________ > Xymon mailing list > Xymon at xymon.com > http://lists.xymon.com/mailman/listinfo/xymon > > _______________________________________________ Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon _______________________________________________ Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon -------------- next part -------------- An HTML attachment was scrubbed... URL: From mailinglists at websitemanagers.com.au Mon Apr 22 13:45:35 2013 From: mailinglists at websitemanagers.com.au (Adam Goryachev) Date: Mon, 22 Apr 2013 21:45:35 +1000 Subject: [Xymon] Xymon Log Retrieval In-Reply-To: References: <51755DF4020000C0000CF346@vho64pn04.orix.com.au> Message-ID: <517522DF.4050705@websitemanagers.com.au> On 22/04/13 20:53, Ralph Mitchell wrote: > > You might want to talk to your security people before copying the > passed file to another system, and you *definitely* should not copy > the shadow file. There are good reasons that file is readable only by > root. > > Ralph Mitchell > > If you want to monitor changes to the passwd/shadow file, one > way would be to write an ext script. One can get around the OS > recording changes to users by just editing the files directly, so > this would be a bit more foolproof. > You'd need be to keep a copy of the passwd file somewhere else (say > the xymon server itself) and then do a diff against it. Something like: > I've been watching this thread, but maybe I missed it... Doesn't xymon allow to calculate the MD5 of a file and alert if it is modified..... I'm pretty sure this is a standard feature. Here it is: # - "MD5=md5sum", "SHA1=sha1sum", "RMD160=rmd160sum" trigger a warning # if the file checksum using the MD5, SHA1 or RMD160 message digest # algorithms do not match the one configured here. Note: The "file" # entry in the client-local.cfg file must specify which algorithm to use. Surely this would generate an appropriate alert if the file is modified... and continue to alert until the xymon config was updated with the new checksum. Regards, Adam -- Adam Goryachev Website Managers www.websitemanagers.com.au -------------- next part -------------- An HTML attachment was scrubbed... URL: From Michael.Beatty at sherwin.com Mon Apr 22 14:05:28 2013 From: Michael.Beatty at sherwin.com (Michael Beatty) Date: Mon, 22 Apr 2013 08:05:28 -0400 Subject: [Xymon] custom script run interval In-Reply-To: References: <51719E1A.1070301@sherwin.com> Message-ID: <51752788.2070003@sherwin.com> You are doing it right, it should work. Try disabling the alert in clientlaunch.cfg and sending the alert manually from the command line and see if it goes purple after 30 minutes? Michael Beatty On 04/20/2013 03:21 AM, deepak deore wrote: > for now i have setup below entry in clientlaunch.cfg, when i set it to > 25h it goes purple, am I doing right? > > INTERVAL 25m > > > On Sat, Apr 20, 2013 at 1:12 AM, Michael Beatty > > wrote: > > Your syntax is correct, it should work. > > Maybe echo the statement to the log file to see what exactly it is > sending. > > Is it possible that you are calling the statement from more than > one location and the other location doesn't have the 25h lifetime? > > Michael Beatty > > On 04/19/2013 02:18 PM, deepak deore wrote: >> I have a custom script setup on client side, which I want to run >> on every 24 hours and i don't want to change the default lifetime >> for other tests. >> >> Used below line but still after 30 mins it is going into purple. >> >> $BB $BBDISP "status+25h $MACHINE.$COLUMN $COLOR `date` `echo -e >> "Daily status: \ >> \n$(cat /tmp/status.log) "`" >> >> >> >> _______________________________________________ >> Xymon mailing list >> Xymon at xymon.com >> http://lists.xymon.com/mailman/listinfo/xymon > > > > _______________________________________________ > Xymon mailing list > Xymon at xymon.com > http://lists.xymon.com/mailman/listinfo/xymon > > -------------- next part -------------- An HTML attachment was scrubbed... URL: From everett.vernon at gmail.com Mon Apr 22 15:20:54 2013 From: everett.vernon at gmail.com (Vernon Everett) Date: Mon, 22 Apr 2013 21:20:54 +0800 Subject: [Xymon] Xymon Log Retrieval In-Reply-To: <517522DF.4050705@websitemanagers.com.au> References: <51755DF4020000C0000CF346@vho64pn04.orix.com.au> <517522DF.4050705@websitemanagers.com.au> Message-ID: Hi guys There are a number of issue with what you propose. Firstly, /etc/shadow is readable by root only. Unless you are running Xymonas root, (which is very bad) or doing some interesting things with sudo or wrapper scripts, there is no way Xymon can checksum /etc/shadow. But lets assume you have overcome the read issue in some way, and are now doing a check-sum of /etc/shadow..... Besides picking up new users, it will also alert whenever somebody changes their password or whenever an account is locked and/or reactivated I company I worked for (very briefly) used tripwire to monitor /etc/shadow, "for security" and we had to log in and reset the tripwire every time some sod changed their password. Complete waste of time. If you want to keep tabs on your list of users, you are better off just checking /etc/passwd, and leave /etc/shadow alone. It's probably the most protected file in the Unix file system, and probably the least likely to me modified by a hacker, unless they have access to a userID. Consider the paradox of /etc/passwd and /etc/shadow. The most protected file is /etc/shadow, but any user can modify it. The /etc/passwd file is a very "open" file, readable by all, but writable by only a very select few. Trust me, if you have more than a handful of users, doing a checksum on /etc/shadow will only bring you pain and suffering. If you don't want to use checksums, have a known list of users and/or userIDs, then you can always write a quick script to check your list against the usernames ( cut -d: -f1 /etc/passwd) or the userIDs ( cut -d: -f3 /etc/passwd) or both (cut -d: -f1,3 /etc/passwd) I would suggest you sort both lists first though. Cheers Vernon On 22 April 2013 19:45, Adam Goryachev wrote: > On 22/04/13 20:53, Ralph Mitchell wrote: > > You might want to talk to your security people before copying the passed > file to another system, and you *definitely* should not copy the shadow > file. There are good reasons that file is readable only by root. > > Ralph Mitchell > If you want to monitor changes to the passwd/shadow file, one way would > be to write an ext script. One can get around the OS recording changes to > users by just editing the files directly, so this would be a bit more > foolproof. > You'd need be to keep a copy of the passwd file somewhere else (say the > xymon server itself) and then do a diff against it. Something like: > > > I've been watching this thread, but maybe I missed it... > > Doesn't xymon allow to calculate the MD5 of a file and alert if it is > modified..... I'm pretty sure this is a standard feature. Here it is: > # - "MD5=md5sum", "SHA1=sha1sum", "RMD160=rmd160sum" trigger a > warning > # if the file checksum using the MD5, SHA1 or RMD160 message > digest > # algorithms do not match the one configured here. Note: The > "file" > # entry in the client-local.cfg file must specify which > algorithm to use. > > Surely this would generate an appropriate alert if the file is modified... > and continue to alert until the xymon config was updated with the new > checksum. > > Regards, > Adam > > -- > Adam Goryachev > Website Managerswww.websitemanagers.com.au > > > _______________________________________________ > Xymon mailing list > Xymon at xymon.com > http://lists.xymon.com/mailman/listinfo/xymon > > -- "Accept the challenges so that you can feel the exhilaration of victory" - General George Patton -------------- next part -------------- An HTML attachment was scrubbed... URL: From mailinglists at websitemanagers.com.au Mon Apr 22 16:29:05 2013 From: mailinglists at websitemanagers.com.au (Adam Goryachev) Date: Tue, 23 Apr 2013 00:29:05 +1000 Subject: [Xymon] Xymon Log Retrieval In-Reply-To: References: <51755DF4020000C0000CF346@vho64pn04.orix.com.au> <517522DF.4050705@websitemanagers.com.au> Message-ID: <51754931.30306@websitemanagers.com.au> On 22/04/13 23:20, Vernon Everett wrote: > Hi guys > > There are a number of issue with what you propose. > Firstly, /etc/shadow is readable by root only. Unless you are running > Xymon as root, (which is very bad) or doing some interesting things with > sudo or wrapper scripts, there is no way Xymon can checksum /etc/shadow. Actually, I thought the original request was only in relation to /etc/passwd... Though you are right about /etc/shadow needing special permissions for read access... > But lets assume you have overcome the read issue in some way, and are > now doing a check-sum of /etc/shadow..... > Besides picking up new users, it will also alert whenever somebody > changes their password or whenever an account is locked and/or reactivated I suppose it depends on the size of the company, and the type of system you are using. For me, every server I manage, I'm the *only* admin, therefore I know everything that *should* be happening (well, I should know)... In addition, I'm the only one that actually changes passwords, creates users, etc, since all the actual users only have access via FTP, or POP3, or SMB, etc... ie, they don't get shell access, don't get any method to change their own password (actually, I lie, the POP users can use a web interface to change their POP password, but they aren't users in /etc/passwd anyway). So, in my case, it could be helpful to be made aware of any changes to the /etc/passwd file (and even /etc/shadow assuming I could find a way to resolve the read access for xymon without compromising security) > I company I worked for (very briefly) used tripwire to monitor > /etc/shadow, "for security" and we had to log in and reset the tripwire > every time some sod changed their password. > Complete waste of time. It is, until one of those times it was someone who had compromised the system. However, the question is would you even know the difference between an illegal user modifying a user password (or an admin password) or even adding a new account? Especially if this is a common occurrence, then you are unlikely to even check properly, assuming it is just "normal" for the alarm to go off, and react by logging in, update the tripwire DB and carry on... > If you want to keep tabs on your list of users, you are better off just > checking /etc/passwd, and leave /etc/shadow alone. It's probably the > most protected file in the Unix file system, and probably the least > likely to me modified by a hacker, unless they have access to a userID. I agree.... also /etc/passwd is the "low fruit". It adds some tangible security (possibly, see above), and it is easy to do. > Consider the paradox of /etc/passwd and /etc/shadow. > The most protected file is /etc/shadow, but any user can modify it. > The /etc/passwd file is a very "open" file, readable by all, but > writable by only a very select few. Not really, see chfn or even chsh, both allow a normal user write access to /etc/passwd. > Trust me, if you have more than a handful of users, doing a checksum on > /etc/shadow will only bring you pain and suffering. I'd limit that to shell users perhaps... really it will depend on your environment. > If you don't want to use checksums, have a known list of users and/or > userIDs, then you can always write a quick script to check your list > against the usernames ( cut -d: -f1 /etc/passwd) or the userIDs ( cut > -d: -f3 /etc/passwd) or both (cut -d: -f1,3 /etc/passwd) > I would suggest you sort both lists first though. Another good option.... Like I said, the built-in checksum against /etc/passwd is really easy to implement without any real issues. Regards, Adam -- Adam Goryachev Website Managers www.websitemanagers.com.au From p3yeung at gmail.com Mon Apr 22 21:04:10 2013 From: p3yeung at gmail.com (P3) Date: Mon, 22 Apr 2013 12:04:10 -0700 Subject: [Xymon] wrong values in RRD Message-ID: I am using xymon 4.3.10. My xymon client sends 2 values to the xymon server, disk_free = 10404175872 disk_free_limit = 1000000000 The values displayed on the dashboard are correct. But xymon server stores a negative value for disk_free and zero for disk_free_limit. How can I make xymon stores the proper value to RRD? diskfree DERIVE 600 NaN NaN 10404155392 -6.7819016393e+04 0 diskfreelimit DERIVE 600 NaN NaN 1000000000 0.0000000000e+00 0 Thanks P3 -------------- next part -------------- An HTML attachment was scrubbed... URL: From henrik at hswn.dk Mon Apr 22 21:53:44 2013 From: henrik at hswn.dk (=?ISO-8859-1?Q?Henrik_St=F8rner?=) Date: Mon, 22 Apr 2013 21:53:44 +0200 Subject: [Xymon] wrong values in RRD In-Reply-To: References: Message-ID: <51759548.9000905@hswn.dk> On 22-04-2013 21:04, P3 wrote: > I am using xymon 4.3.10. > > My xymon client sends 2 values to the xymon server, > > disk_free = 10404175872 > disk_free_limit = 1000000000 > > The values displayed on the dashboard are correct. But xymon server > stores a negative value for disk_free and zero for disk_free_limit. How > can I make xymon stores the proper value to RRD? > > > diskfree > DERIVE DERIVE is used only for counters like "bytes sent" - i.e. counters that continuously go up. Items such as "disk free" can go up and down; you must use the GAUGE type in RRD for those. Regards, Henrik From jlaidman at rebel-it.com.au Tue Apr 23 02:19:10 2013 From: jlaidman at rebel-it.com.au (Jeremy Laidman) Date: Tue, 23 Apr 2013 10:19:10 +1000 Subject: [Xymon] Xymon Log Retrieval In-Reply-To: References: Message-ID: On 22 April 2013 17:15, Jeremy Laidman wrote: > On 22 April 2013 14:54, Jeremy Laidman wrote: > >> config files on the Xymon server. For example, something like this in >> client-local.cfg: >> >> log:`if [ -f /tmp/pw.rep ]; then if grep '^[0-9]' /tmp/pw.rep | tail -n >> +3 | grep ^ >/dev/null; then cp /dev/null /tmp/pw.rep; fi; diff /tmp/pw.old >> /etc/passwd >> /tmp/pw.rep; else touch /tmp/pw.rep; fi; cp /etc/passwd >> /tmp/pw.old; echo /tmp/pw.rep`:2048 >> > Updated to work with non-GNU tail (eg on Solaris): log:`if [ -f /tmp/pw.rep ]; then if grep '^[0-9]' /tmp/pw.rep | tail +3 | grep ^ >/dev/null; then cp /dev/null /tmp/pw.rep; fi; diff /tmp/pw.old /etc/passwd >> /tmp/pw.rep; else touch /tmp/pw.rep; fi; cp /etc/passwd /tmp/pw.old; echo /tmp/pw.rep`:2048 J -------------- next part -------------- An HTML attachment was scrubbed... URL: From everett.vernon at gmail.com Tue Apr 23 04:42:28 2013 From: everett.vernon at gmail.com (Vernon Everett) Date: Tue, 23 Apr 2013 10:42:28 +0800 Subject: [Xymon] New monitoring script on Xmonton - db_cpu.ksh In-Reply-To: References: <5131C300.8080304@cominder.eu> Message-ID: Hi all Made some updates to the db_cpu script. It can now cope with the situation where there are no databases running. Previously, it would simply exit if it found nothing. Now it reports it, and can trigger an alert if you configure it so. Regards Vernon On 7 March 2013 08:50, Vernon Everett wrote: > Hi all > > I have updated this script to fix Andrey's reported bug. > I have also added an option to use sar for calculating %Idle, after Nick > reminded me that top is not part of a standard install. > > Regards > Vernon > > > On 2 March 2013 20:08, Vernon Everett wrote: > >> A good catch, and something I didn't consider. >> All our databases instances have very different names, so the scenario >> you describe just never occurred to me. >> I will have a look at fixing this one when I get back to the office on >> Tuesday. (Monday is a public holiday here) >> However, if anybody wants to suggest a fix, or even update the code, go >> for it. >> >> Regards >> Vernon >> >> >> >> On 2 March 2013 17:14, Andrey Chervonets wrote: >> >>> Good news. >>> >>> Had reviewed the script. There may be one problem in that lines: >>> -- >>> for PROC in $(ps -efa | grep $DB | awk '{ print $2 }') >>> -- >>> You do just grep, but imagine there may be instances like: >>> MYDB >>> MYDB1 >>> MYDB12 >>> or NOMYDB >>> So it will count MYDB numbers for MYDB1, MYDB12 and NOMYDB too >>> >>> We should make grepping more intelligent, because oracle processes may >>> be listed like: >>> ora_j000_MYDB >>> oracleMYDB (LOCAL=NO) >>> ora_ckpt_MYDB >>> and so on >>> >>> >>> Best regards, >>> >>> Andrey Chervonets >>> ---------------------- >>> CoMinder Ltd. >>> http://www.cominder.eu/ >>> Mobile: +371 26517848 >>> Fax: +371 66066346 >>> >>> >>> >>> On 01.03.2013 13:00, xymon-request at xymon.com wrote: >>> >>>> Message: 10 >>>> Date: Fri, 1 Mar 2013 14:40:58 +0800 >>>> From: Vernon Everett >>>> > >>>> To: Xymon mailinglist >>>> Subject: [Xymon] New monitoring script on Xmonton >>>> Message-ID: >>>> >>> gmail.com >>>> > >>>> Content-Type: text/plain; charset="iso-8859-1" >>>> >>>> Hi all >>>> >>>> I have just put something together to monitor Oracle database CPU usage. >>>> http://www.xymonton.org/**monitors:db_cpu.ksh >>>> >>> >>> ______________________________**_________________ >>> Xymon mailing list >>> Xymon at xymon.com >>> http://lists.xymon.com/**mailman/listinfo/xymon >>> >> >> >> >> -- >> "Accept the challenges so that you can feel the exhilaration of victory" >> - General George Patton >> > > > > -- > "Accept the challenges so that you can feel the exhilaration of victory" > - General George Patton > -- "Accept the challenges so that you can feel the exhilaration of victory" - General George Patton -------------- next part -------------- An HTML attachment was scrubbed... URL: From henrik at hswn.dk Tue Apr 23 07:44:47 2013 From: henrik at hswn.dk (=?ISO-8859-1?Q?Henrik_St=F8rner?=) Date: Tue, 23 Apr 2013 07:44:47 +0200 Subject: [Xymon] Xymon 4.3.11 released In-Reply-To: <201304222103.r3ML3mn5010027@emunix.emich.edu> References: <201304222103.r3ML3mn5010027@emunix.emich.edu> Message-ID: <51761FCF.9060902@hswn.dk> Hi Matt, absolutely correct - and an embarassingly silly bug. This patch should cure it - I'll have to do a 4.3.12 release for this, so you may want to wait for that. Thanks for reporting it. Regards, Henrik On 22-04-2013 23:03, Matt Goebel wrote: > > Hopefuly I have done this correctly. Let me know if I need to > do something else. > > This GDB was configured as "sparc-sun-solaris2.10". > For bug reporting instructions, please see: > ... > Reading symbols from /data/src/xymon/xymon-4.3.11/xymongen/xymongen...done. > [New LWP 1] > [Thread debugging using libthread_db enabled] > [New Thread 1 (LWP 1)] > Core was generated by `./xymongen'. > Program terminated with signal 6, Aborted. > #0 0xfeecebd4 in _lwp_kill () from /lib/libc.so.1 > (gdb) bt > #0 0xfeecebd4 in _lwp_kill () from /lib/libc.so.1 > #1 0xfee67bb8 in raise () from /lib/libc.so.1 > #2 0xfee429f8 in abort () from /lib/libc.so.1 > #3 0x00031cc0 in sigsegv_handler (signum=11) at sig.c:57 > #4 > #5 0xfee32d50 in strlen () from /lib/libc.so.1 > #6 0xfee9f4a0 in _ndoprnt () from /lib/libc.so.1 > #7 0xfeea1870 in sprintf () from /lib/libc.so.1 > #8 0x0001b754 in load_state (sumhead=0x62a30 ) at loaddata.c:512 > #9 0x00016228 in main (argc=1, argv=0xffbffccc) at xymongen.c:592 > > Thanks, > Matt > > And now a bit of polka music by "=?ISO-8859-1?Q?Henrik_St=F8rner?=" >> >> Hi Matt, >> >> if you could provide me with a trace of where it dumps core, then I >> would very much like to track it down. >> >> You need the 'gdb' tool to get the stacktrace, see >> http://www.xymon.com/xymon/help/known-issues.html#bugreport >> >> >> Thanks, >> Henrik >> >> >> On 22-04-2013 17:38, Matt Goebel wrote: >>> >>> Hi, >>> >>> Not sure where I should post this, but I upgraded to 4.3.11 today >>> on Solaris 10 sparc and everything works great except for xymongen >>> which coredumps. I ended up using the 4.3.10 binary for xymongen >>> to get everything working again. >>> >>> Thanks, >>> Matt >>> >>> And now a bit of polka music by "=?ISO-8859-1?Q?Henrik_St=F8rner?=" >>>> >>>> Hi, >>>> >>>> I have just released version 4.3.11 of Xymon. This release fixes a >>>> critical bug, which has caused crashes and other unwanted behaviour of >>>> the xymond daemon. >>>> >>>> Upgrading your Xymon server is recommended. >>>> >>>> >>>> Full list of changes: >>>> >>>> * Fix wrong file permissions when installing >>>> * Linux client: Fix handling of root filesystem when mounted on >>>> "/dev/root" >>>> * trends webpage: Fix case where hostname disappears after zoom. >>>> * FreeBSD client: Memory patch for FreeBSD 8.0+ >>>> * xymond_alert: Fix problem with UNMATCHED rules triggering when >>>> there are actual recipients, but their alerts are suppressed due >>>> to a REPEAT setting not having expired. >>>> * xymond_rrd: Dont crash if called with an empty status/data message >>>> * xymond_channel: Report cause when channel-child exits/crashes >>>> * xymongen: Geneate an overview page with only reds (like non-green) >>>> * xymongen: Optionally define env. variable BOARDFILTER to select >>>> hosts/tests included in the generated pages >>>> * links: Add pdf, docx and odt as known document formats >>>> * Fix potential crashes after an alert cookie expired >>>> * Fix potential crash after deleting/renaming a host >>>> * Speedup loading of the hosts.cfg file, noticeable with very >>>> large hosts.cfg files (100.000+ hosts) >>>> >>>> >>>> Currently only the source archive is available. Binary packages will >>>> show up in a couple of days. >>>> >>>> >>>> Regards, >>>> Henrik >>>> _______________________________________________ >>>> Xymon mailing list >>>> Xymon at xymon.com >>>> http://lists.xymon.com/mailman/listinfo/xymon >>>> >>> >>> >> > > -------------- next part -------------- A non-text attachment was scrubbed... Name: xymongen-4311.diff Type: text/x-diff Size: 732 bytes Desc: not available URL: From henrik at hswn.dk Tue Apr 23 10:42:28 2013 From: henrik at hswn.dk (=?ISO-8859-1?Q?Henrik_St=F8rner?=) Date: Tue, 23 Apr 2013 10:42:28 +0200 Subject: [Xymon] Xymon 4.3.11 released In-Reply-To: <51761FCF.9060902@hswn.dk> References: <201304222103.r3ML3mn5010027@emunix.emich.edu> <51761FCF.9060902@hswn.dk> Message-ID: <51764974.3050007@hswn.dk> On 23-04-2013 07:44, Henrik Størner wrote: > absolutely correct - and an embarassingly silly bug. This patch should > cure it Hmm ... how many mistakes can you make in one line of code? Too many, it seems - at least this version compiles. Patch on top of 4.3.11. Regards, Henrik -------------- next part -------------- A non-text attachment was scrubbed... Name: xymongen-4311-v2.diff Type: text/x-diff Size: 1070 bytes Desc: not available URL: From deepakdeore2004 at gmail.com Tue Apr 23 16:22:37 2013 From: deepakdeore2004 at gmail.com (deepak deore) Date: Tue, 23 Apr 2013 19:52:37 +0530 Subject: [Xymon] custom script run interval In-Reply-To: <51752788.2070003@sherwin.com> References: <51719E1A.1070301@sherwin.com> <51752788.2070003@sherwin.com> Message-ID: Whenever I am confident about the configuration which doesn't work, then I restart xymon server. And which did the trick here :-) This is the 3rd time I restarted xymon server and it did the trick always if there are no problem with the configuration. So looks like xymon goes mad while the things are tested very frequently. On Mon, Apr 22, 2013 at 5:35 PM, Michael Beatty wrote: > You are doing it right, it should work. > > Try disabling the alert in clientlaunch.cfg and sending the alert manually > from the command line and see if it goes purple after 30 minutes? > > > > Michael Beatty > > > On 04/20/2013 03:21 AM, deepak deore wrote: > > for now i have setup below entry in clientlaunch.cfg, when i set it to > 25h it goes purple, am I doing right? > > INTERVAL 25m > > > On Sat, Apr 20, 2013 at 1:12 AM, Michael Beatty < > Michael.Beatty at sherwin.com> wrote: > >> Your syntax is correct, it should work. >> >> Maybe echo the statement to the log file to see what exactly it is >> sending. >> >> Is it possible that you are calling the statement from more than one >> location and the other location doesn't have the 25h lifetime? >> >> Michael Beatty >> >> >> On 04/19/2013 02:18 PM, deepak deore wrote: >> >> I have a custom script setup on client side, which I want to run on >> every 24 hours and i don't want to change the default lifetime for other >> tests. >> >> Used below line but still after 30 mins it is going into purple. >> >> $BB $BBDISP "status+25h $MACHINE.$COLUMN $COLOR `date` `echo -e "Daily >> status: \ >> \n$(cat /tmp/status.log) "`" >> >> >> >> _______________________________________________ >> Xymon mailing listXymon at xymon.comhttp://lists.xymon.com/mailman/listinfo/xymon >> >> >> >> >> _______________________________________________ >> Xymon mailing list >> Xymon at xymon.com >> http://lists.xymon.com/mailman/listinfo/xymon >> >> > > > -------------- next part -------------- An HTML attachment was scrubbed... URL: From minaqva at hotmail.com Wed Apr 24 10:15:28 2013 From: minaqva at hotmail.com (Milana Malkic) Date: Wed, 24 Apr 2013 10:15:28 +0200 Subject: [Xymon] xymon mail service Message-ID: Hello, I installed xymon server and xymon clients and everything works fine. Now I want to get mail notification when something goes wrong. I've added the following lines to my /home/xymon/server/etc/alerts.cfg, but I don't get any mails. HOST=host1 at domain1.com SERVICE=cpu,disk,memory,conn MAIL minaqva at hotmail.com REPEAT=20 RECOVERED In the /var/log/xymon/notifications.log I found : Tue Apr 23 08:17:53 2013 host1 at domain1.com.cpu (173.254.244.156) minaqva at hotmail.com[23] 1366719473 200 Tue Apr 23 08:37:56 2013 host1. at domain1.com.cpu (173.254.244.156) minaqva at hotmail.com[23] 1366720676 200 4449 I've done some researching and I found out that I need to setup mail server on the same machine where is xymon server. I don't know how to do that to work well with xymon, or what mail address should I put in alerts.cfg. I also don't know what mail server is required for xymon. Please help me. -------------- next part -------------- An HTML attachment was scrubbed... URL: From Martin.Ward at colt.net Wed Apr 24 12:08:07 2013 From: Martin.Ward at colt.net (Ward, Martin) Date: Wed, 24 Apr 2013 10:08:07 +0000 Subject: [Xymon] xymon mail service In-Reply-To: References: Message-ID: <15605_1366798088_5177AF08_15605_4770_1_B5A10A424126084EAFB73DBB47C48DE0911A384D@ULVMCTMMAI002.INTERNAL.COLT.NET> This is more of a generic problem, how to set up a mail server. At the least we would need to know what UNIX you are using (Solaris, RHEL, HP-UX) and what, if any, mail software you have installed (sendmail, Postfix, Qmail). |\/| -- Martin Ward Manager, Technical Services Service Operations DDI:+44 (0) 20 7863 5218 / Fax: +44 (0)20 7863 9999 / www.colt.net Colt Technology Services, Unit 12, Powergate Business Park, Volt Avenue, Park Royal, London, NW10 6PW, UK. Help reduce your carbon footprint | Think before you print. Registered in England and Wales, registered number 02452736, VAT number GB 645 4205 50 From: xymon-bounces at xymon.com [mailto:xymon-bounces at xymon.com] On Behalf Of Milana Malkic Sent: 24 April 2013 09:15 To: xymon at xymon.com Subject: [Xymon] xymon mail service Hello, I installed xymon server and xymon clients and everything works fine. Now I want to get mail notification when something goes wrong. I've added the following lines to my /home/xymon/server/etc/alerts.cfg, but I don't get any mails. HOST=host1 at domain1.com SERVICE=cpu,disk,memory,conn MAIL minaqva at hotmail.com REPEAT=20 RECOVERED In the /var/log/xymon/notifications.log I found : Tue Apr 23 08:17:53 2013 host1 at domain1.com.cpu (173.254.244.156) minaqva at hotmail.com[23] 1366719473 200 Tue Apr 23 08:37:56 2013 host1. at domain1.com.cpu (173.254.244.156) minaqva at hotmail.com[23] 1366720676 200 4449 I've done some researching and I found out that I need to setup mail server on the same machine where is xymon server. I don't know how to do that to work well with xymon, or what mail address should I put in alerts.cfg. I also don't know what mail server is required for xymon. Please help me. [Colt Disclaimer] This email is from an entity of the Colt group of companies. Colt Group S.A., K2 Building, Forte 1, 2a rue Albert Borschette, L-1246 Luxembourg, R.C.S. B115679. Corporate and contact information for our entities can be found at http://colt.net/uk/en/Colt-Group-of-Companies/index.htm. Internet communications are not secure and Colt does not accept responsibility for the accurate transmission of this message. Content of this email or its attachments is not legally or contractually binding unless expressly previously agreed in writing by Colt -------------- next part -------------- An HTML attachment was scrubbed... URL: From A.Chervonets at cominder.eu Wed Apr 24 13:46:36 2013 From: A.Chervonets at cominder.eu (Andrey Chervonets) Date: Wed, 24 Apr 2013 14:46:36 +0300 Subject: [Xymon] xymon mail service In-Reply-To: References: Message-ID: You need just regular sendmail working on the host. If You can send e-mail from OS with mail or mails - then it should work for XyMon too (sometimes You may also need to adjust sendmail configuration for masquarading, SMTP gateway etc). Contact Your system administrator or check web for "how to setup sendmail on linux or unix". Best regards, Andrey Chervonets ---------------------- SIA CoMinder http://www.cominder.eu/ -------------- next part -------------- An HTML attachment was scrubbed... URL: From minaqva at hotmail.com Wed Apr 24 16:36:12 2013 From: minaqva at hotmail.com (Milana Malkic) Date: Wed, 24 Apr 2013 16:36:12 +0200 Subject: [Xymon] xymon mail service In-Reply-To: References: , Message-ID: I am using Centos 5.7, and I have postfix installed. So, I need to configure postfix and create a mail account via postfix. That mail account I have to put in alerts.cfg. I hope that I understood you well. If I am wrong please correct me. To: xymon at xymon.com From: A.Chervonets at cominder.eu Date: Wed, 24 Apr 2013 14:46:36 +0300 Subject: Re: [Xymon] xymon mail service You need just regular sendmail working on the host. If You can send e-mail from OS with mail or mails - then it should work for XyMon too (sometimes You may also need to adjust sendmail configuration for masquarading, SMTP gateway etc). Contact Your system administrator or check web for "how to setup sendmail on linux or unix". Best regards, Andrey Chervonets ---------------------- SIA CoMinder http://www.cominder.eu/ _______________________________________________ Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon -------------- next part -------------- An HTML attachment was scrubbed... URL: From A.Chervonets at cominder.eu Wed Apr 24 16:53:20 2013 From: A.Chervonets at cominder.eu (Andrey Chervonets) Date: Wed, 24 Apr 2013 17:53:20 +0300 Subject: [Xymon] xymon mail service In-Reply-To: References: , Message-ID: I have never used the postfix, but per postfix authors words " It is .... mail server that started life.... as an alternative to the widely-used Sendmail program." So this should work. Just try to test if You can send e-mail from OS with mail (or other) program then this should work. echo " test body" | mail -s " test subject " yourmail at yourdomain.com I suppose XyMon Server just tries to send mail using OS tools (like mail) or using direct communication over local 25 port. Just try and check XyMon logs for any problem. Best regards, Andrey Chervonets ---------------------- SIA CoMinder http://www.cominder.eu/ From: Milana Malkic To: Andrey Chervonets , "xymon at xymon.com" , "Martin.Ward at colt.net" , Date: 24.04.2013 17:37 Subject: RE: [Xymon] xymon mail service I am using Centos 5.7, and I have postfix installed. So, I need to configure postfix and create a mail account via postfix. That mail account I have to put in alerts.cfg. I hope that I understood you well. If I am wrong please correct me. To: xymon at xymon.com From: A.Chervonets at cominder.eu Date: Wed, 24 Apr 2013 14:46:36 +0300 Subject: Re: [Xymon] xymon mail service You need just regular sendmail working on the host. If You can send e-mail from OS with mail or mails - then it should work for XyMon too (sometimes You may also need to adjust sendmail configuration for masquarading, SMTP gateway etc). Contact Your system administrator or check web for "how to setup sendmail on linux or unix". _______________________________________________ Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon -------------- next part -------------- An HTML attachment was scrubbed... URL: From Martin.Ward at colt.net Wed Apr 24 18:15:33 2013 From: Martin.Ward at colt.net (Ward, Martin) Date: Wed, 24 Apr 2013 16:15:33 +0000 Subject: [Xymon] xymon mail service In-Reply-To: References: , Message-ID: <14486_1366820135_51780526_14486_3021_1_B5A10A424126084EAFB73DBB47C48DE0911A3CA0@ULVMCTMMAI002.INTERNAL.COLT.NET> Check if Postfix is running at all: $ ps -ef|grep postfix You will need to configure the main.cf file of Postfix to get it working but first, do you know what your smarthost is? If your Xymon server has full access to the Internet then there is no need but if not then you will need to route emails to a machine that knows how to deliver them. Your network admins should know this. This page give examples of Postfix configurations, I would recommend the "Postfix on a null client" and set the "relayhost" to whatever your smarthost server is. |\/| -- Martin Ward Manager, Technical Services Service Operations DDI:+44 (0) 20 7863 5218 / Fax: +44 (0)20 7863 9999 / www.colt.net Colt Technology Services, Unit 12, Powergate Business Park, Volt Avenue, Park Royal, London, NW10 6PW, UK. Help reduce your carbon footprint | Think before you print. Registered in England and Wales, registered number 02452736, VAT number GB 645 4205 50 From: Milana Malkic [mailto:minaqva at hotmail.com] Sent: 24 April 2013 15:36 To: Andrey Chervonets; xymon at xymon.com; Ward, Martin Subject: RE: [Xymon] xymon mail service I am using Centos 5.7, and I have postfix installed. So, I need to configure postfix and create a mail account via postfix. That mail account I have to put in alerts.cfg. I hope that I understood you well. If I am wrong please correct me. ________________________________ To: xymon at xymon.com From: A.Chervonets at cominder.eu Date: Wed, 24 Apr 2013 14:46:36 +0300 Subject: Re: [Xymon] xymon mail service You need just regular sendmail working on the host. If You can send e-mail from OS with mail or mails - then it should work for XyMon too (sometimes You may also need to adjust sendmail configuration for masquarading, SMTP gateway etc). Contact Your system administrator or check web for "how to setup sendmail on linux or unix". Best regards, Andrey Chervonets ---------------------- SIA CoMinder http://www.cominder.eu/ _______________________________________________ Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon [Colt Disclaimer] This email is from an entity of the Colt group of companies. Colt Group S.A., K2 Building, Forte 1, 2a rue Albert Borschette, L-1246 Luxembourg, R.C.S. B115679. Corporate and contact information for our entities can be found at http://colt.net/uk/en/Colt-Group-of-Companies/index.htm. Internet communications are not secure and Colt does not accept responsibility for the accurate transmission of this message. Content of this email or its attachments is not legally or contractually binding unless expressly previously agreed in writing by Colt -------------- next part -------------- An HTML attachment was scrubbed... URL: From bewhite at fellowes.com Wed Apr 24 17:20:53 2013 From: bewhite at fellowes.com (White, Bruce) Date: Wed, 24 Apr 2013 10:20:53 -0500 Subject: [Xymon] xymon mail service In-Reply-To: References: , Message-ID: <1ABE07FDD59C3943B32FC5FBD550746602058779@vmmsitmx01.fellowes-na.com> Also, since you are trying to send emails to a @hotmail account, even if you get postfix to accept html from Xymon, you will still need to get those emails to an email server that can talk with other email servers on the internet. That is the only way you'll get mail from your Xymon server all the way to Hotmail. .....Bruce From: xymon-bounces at xymon.com [mailto:xymon-bounces at xymon.com] On Behalf Of Andrey Chervonets Sent: Wednesday, April 24, 2013 9:53 AM To: Milana Malkic Cc: xymon at xymon.com Subject: Re: [Xymon] xymon mail service I have never used the postfix, but per postfix authors words " It is .... mail server that started life.... as an alternative to the widely-used Sendmail program." So this should work. Just try to test if You can send e-mail from OS with mail (or other) program then this should work. echo " test body" | mail -s " test subject " yourmail at yourdomain.com I suppose XyMon Server just tries to send mail using OS tools (like mail) or using direct communication over local 25 port. Just try and check XyMon logs for any problem. Best regards, Andrey Chervonets ---------------------- SIA CoMinder http://www.cominder.eu/ From: Milana Malkic To: Andrey Chervonets , "xymon at xymon.com" , "Martin.Ward at colt.net" , Date: 24.04.2013 17:37 Subject: RE: [Xymon] xymon mail service   Bruce White Senior Enterprise Systems Engineer | Phone: 1-630-671-5169 | Fax: 630-893-1648 | bewhite at fellowes.com | http://www.fellowes.com/       Disclaimer: The information contained in this message may be privileged and confidential and protected from disclosure. If the reader of this message is not the intended recipient or an employee or agent responsible for delivering this message to the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited. If you have received this communication in error, please notify us immediately by replying to the message and deleting it from your computer. Thank you. Fellowes, Inc.   ________________________________ I am using Centos 5.7, and I have postfix installed. So, I need to configure postfix and create a mail account via postfix. That mail account I have to put in alerts.cfg. I hope that I understood you well. If I am wrong please correct me. ________________________________ To: xymon at xymon.com From: A.Chervonets at cominder.eu Date: Wed, 24 Apr 2013 14:46:36 +0300 Subject: Re: [Xymon] xymon mail service You need just regular sendmail working on the host. If You can send e-mail from OS with mail or mails - then it should work for XyMon too (sometimes You may also need to adjust sendmail configuration for masquarading, SMTP gateway etc). Contact Your system administrator or check web for "how to setup sendmail on linux or unix". _______________________________________________ Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon -------------- next part -------------- An HTML attachment was scrubbed... URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: fellbrand1.jpg Type: image/jpeg Size: 3463 bytes Desc: fellbrand1.jpg URL: From deepakdeore2004 at gmail.com Wed Apr 24 19:04:20 2013 From: deepakdeore2004 at gmail.com (deepak deore) Date: Wed, 24 Apr 2013 22:34:20 +0530 Subject: [Xymon] custom script run interval In-Reply-To: References: <51719E1A.1070301@sherwin.com> <51752788.2070003@sherwin.com> Message-ID: and how do I set this custom script to run on a specific time? eg. I want to run it at 12:00 PM every day Right now it is running after 24 hours but not at the time I want, On Tue, Apr 23, 2013 at 7:52 PM, deepak deore wrote: > Whenever I am confident about the configuration which doesn't work, then I > restart xymon server. And which did the trick here :-) > > This is the 3rd time I restarted xymon server and it did the trick always > if there are no problem with the configuration. > > So looks like xymon goes mad while the things are tested very frequently. > > > > On Mon, Apr 22, 2013 at 5:35 PM, Michael Beatty < > Michael.Beatty at sherwin.com> wrote: > >> You are doing it right, it should work. >> >> Try disabling the alert in clientlaunch.cfg and sending the alert >> manually from the command line and see if it goes purple after 30 minutes? >> >> >> >> Michael Beatty >> >> >> On 04/20/2013 03:21 AM, deepak deore wrote: >> >> for now i have setup below entry in clientlaunch.cfg, when i set it to >> 25h it goes purple, am I doing right? >> >> INTERVAL 25m >> >> >> On Sat, Apr 20, 2013 at 1:12 AM, Michael Beatty < >> Michael.Beatty at sherwin.com> wrote: >> >>> Your syntax is correct, it should work. >>> >>> Maybe echo the statement to the log file to see what exactly it is >>> sending. >>> >>> Is it possible that you are calling the statement from more than one >>> location and the other location doesn't have the 25h lifetime? >>> >>> Michael Beatty >>> >>> >>> On 04/19/2013 02:18 PM, deepak deore wrote: >>> >>> I have a custom script setup on client side, which I want to run on >>> every 24 hours and i don't want to change the default lifetime for other >>> tests. >>> >>> Used below line but still after 30 mins it is going into purple. >>> >>> $BB $BBDISP "status+25h $MACHINE.$COLUMN $COLOR `date` `echo -e "Daily >>> status: \ >>> \n$(cat /tmp/status.log) "`" >>> >>> >>> >>> _______________________________________________ >>> Xymon mailing listXymon at xymon.comhttp://lists.xymon.com/mailman/listinfo/xymon >>> >>> >>> >>> >>> _______________________________________________ >>> Xymon mailing list >>> Xymon at xymon.com >>> http://lists.xymon.com/mailman/listinfo/xymon >>> >>> >> >> >> > -------------- next part -------------- An HTML attachment was scrubbed... URL: From sholmes42 at mac.com Wed Apr 24 19:14:11 2013 From: sholmes42 at mac.com (Steve Holmes) Date: Wed, 24 Apr 2013 13:14:11 -0400 Subject: [Xymon] custom script run interval In-Reply-To: References: <51719E1A.1070301@sherwin.com> <51752788.2070003@sherwin.com> Message-ID: On Wed, Apr 24, 2013 at 1:04 PM, deepak deore wrote: > and how do I set this custom script to run on a specific time? > eg. I want to run it at 12:00 PM every day > > Right now it is running after 24 hours but not at the time I want, > > > > Use cron with xymoncmd instead of running out of clientlaunch.cfg. Steve > On Tue, Apr 23, 2013 at 7:52 PM, deepak deore wrote: > >> Whenever I am confident about the configuration which doesn't work, then >> I restart xymon server. And which did the trick here :-) >> >> This is the 3rd time I restarted xymon server and it did the trick always >> if there are no problem with the configuration. >> >> So looks like xymon goes mad while the things are tested very frequently. >> >> >> >> On Mon, Apr 22, 2013 at 5:35 PM, Michael Beatty < >> Michael.Beatty at sherwin.com> wrote: >> >>> You are doing it right, it should work. >>> >>> Try disabling the alert in clientlaunch.cfg and sending the alert >>> manually from the command line and see if it goes purple after 30 minutes? >>> >>> >>> >>> Michael Beatty >>> >>> >>> On 04/20/2013 03:21 AM, deepak deore wrote: >>> >>> for now i have setup below entry in clientlaunch.cfg, when i set it to >>> 25h it goes purple, am I doing right? >>> >>> INTERVAL 25m >>> >>> >>> On Sat, Apr 20, 2013 at 1:12 AM, Michael Beatty < >>> Michael.Beatty at sherwin.com> wrote: >>> >>>> Your syntax is correct, it should work. >>>> >>>> Maybe echo the statement to the log file to see what exactly it is >>>> sending. >>>> >>>> Is it possible that you are calling the statement from more than one >>>> location and the other location doesn't have the 25h lifetime? >>>> >>>> Michael Beatty >>>> >>>> >>>> On 04/19/2013 02:18 PM, deepak deore wrote: >>>> >>>> I have a custom script setup on client side, which I want to run on >>>> every 24 hours and i don't want to change the default lifetime for other >>>> tests. >>>> >>>> Used below line but still after 30 mins it is going into purple. >>>> >>>> $BB $BBDISP "status+25h $MACHINE.$COLUMN $COLOR `date` `echo -e >>>> "Daily status: \ >>>> \n$(cat /tmp/status.log) "`" >>>> >>>> >>>> >>>> _______________________________________________ >>>> Xymon mailing listXymon at xymon.comhttp://lists.xymon.com/mailman/listinfo/xymon >>>> >>>> >>>> >>>> >>>> _______________________________________________ >>>> Xymon mailing list >>>> Xymon at xymon.com >>>> http://lists.xymon.com/mailman/listinfo/xymon >>>> >>>> >>> >>> >>> >> > > _______________________________________________ > Xymon mailing list > Xymon at xymon.com > http://lists.xymon.com/mailman/listinfo/xymon > > -- If they give you ruled paper, write the other way. -Juan Ramon Jimenez, poet, Nobel Prize in literature (1881-1958) I prayed for freedom for twenty years, but received no answer until I prayed with my legs. -Frederick Douglass, Former slave, abolitionist, editor, and orator (1817-1895) -------------- next part -------------- An HTML attachment was scrubbed... URL: From lebarber at gmail.com Wed Apr 24 19:48:54 2013 From: lebarber at gmail.com (Larry Barber) Date: Wed, 24 Apr 2013 12:48:54 -0500 Subject: [Xymon] custom script run interval In-Reply-To: References: <51719E1A.1070301@sherwin.com> <51752788.2070003@sherwin.com> Message-ID: Also the 'CRONDATE' entry for tasks.cfg: The CRONDATE keyword is used for tasks that must run at regular intervals or at a specific time. The time specification is identical to the one used by cron in crontab(5) entries, i.e. a sequence of numbers for minute, hour, day-of-month, month and day-of-week. Three-letter abbreviations in english can be used for the month and day-of-week fields. An aster- isk is a wildcard. So in the example above, this job would run once a month, at 4:30 AM on the 1st day of the month. Thanks, Larry Barber On Wed, Apr 24, 2013 at 12:14 PM, Steve Holmes wrote: > > On Wed, Apr 24, 2013 at 1:04 PM, deepak deore wrote: > >> and how do I set this custom script to run on a specific time? >> eg. I want to run it at 12:00 PM every day >> >> Right now it is running after 24 hours but not at the time I want, >> >> >> >> > Use cron with xymoncmd instead of running out of clientlaunch.cfg. > > Steve > > > >> On Tue, Apr 23, 2013 at 7:52 PM, deepak deore wrote: >> >>> Whenever I am confident about the configuration which doesn't work, then >>> I restart xymon server. And which did the trick here :-) >>> >>> This is the 3rd time I restarted xymon server and it did the trick >>> always if there are no problem with the configuration. >>> >>> So looks like xymon goes mad while the things are tested very frequently. >>> >>> >>> >>> On Mon, Apr 22, 2013 at 5:35 PM, Michael Beatty < >>> Michael.Beatty at sherwin.com> wrote: >>> >>>> You are doing it right, it should work. >>>> >>>> Try disabling the alert in clientlaunch.cfg and sending the alert >>>> manually from the command line and see if it goes purple after 30 minutes? >>>> >>>> >>>> >>>> Michael Beatty >>>> >>>> >>>> On 04/20/2013 03:21 AM, deepak deore wrote: >>>> >>>> for now i have setup below entry in clientlaunch.cfg, when i set it >>>> to 25h it goes purple, am I doing right? >>>> >>>> INTERVAL 25m >>>> >>>> >>>> On Sat, Apr 20, 2013 at 1:12 AM, Michael Beatty < >>>> Michael.Beatty at sherwin.com> wrote: >>>> >>>>> Your syntax is correct, it should work. >>>>> >>>>> Maybe echo the statement to the log file to see what exactly it is >>>>> sending. >>>>> >>>>> Is it possible that you are calling the statement from more than one >>>>> location and the other location doesn't have the 25h lifetime? >>>>> >>>>> Michael Beatty >>>>> >>>>> >>>>> On 04/19/2013 02:18 PM, deepak deore wrote: >>>>> >>>>> I have a custom script setup on client side, which I want to run on >>>>> every 24 hours and i don't want to change the default lifetime for other >>>>> tests. >>>>> >>>>> Used below line but still after 30 mins it is going into purple. >>>>> >>>>> $BB $BBDISP "status+25h $MACHINE.$COLUMN $COLOR `date` `echo -e >>>>> "Daily status: \ >>>>> \n$(cat /tmp/status.log) "`" >>>>> >>>>> >>>>> >>>>> _______________________________________________ >>>>> Xymon mailing listXymon at xymon.comhttp://lists.xymon.com/mailman/listinfo/xymon >>>>> >>>>> >>>>> >>>>> >>>>> _______________________________________________ >>>>> Xymon mailing list >>>>> Xymon at xymon.com >>>>> http://lists.xymon.com/mailman/listinfo/xymon >>>>> >>>>> >>>> >>>> >>>> >>> >> >> _______________________________________________ >> Xymon mailing list >> Xymon at xymon.com >> http://lists.xymon.com/mailman/listinfo/xymon >> >> > > > -- > If they give you ruled paper, write the other way. -Juan Ramon Jimenez, > poet, Nobel Prize in literature (1881-1958) > > I prayed for freedom for twenty years, but received no answer until I > prayed with my legs. -Frederick Douglass, Former slave, abolitionist, > editor, and orator (1817-1895) > > _______________________________________________ > Xymon mailing list > Xymon at xymon.com > http://lists.xymon.com/mailman/listinfo/xymon > > -------------- next part -------------- An HTML attachment was scrubbed... URL: From ragonlan at gmail.com Tue Apr 23 13:33:05 2013 From: ragonlan at gmail.com (Raul GN) Date: Tue, 23 Apr 2013 13:33:05 +0200 Subject: [Xymon] Rare shape in graphs. Message-ID: Hi all, Recently I've included 2 new host to monitor in xymon but from time to time response times are quite high (2 o 3 seconds). Shape in graphs draws ups and downs in a very recognisable manner: [image: Inline image 1] [image: Inline image 2] Testing the host (a windows server) with telnet for hours (Perl script) doesn't shows this responses times (always fewer than 1 second). Does anyone knows where could be the problem? Is it a xymon server problem or it may be in the remote server? I think it is in the remote server but I couldn't demonstrate it and than curious graphs doesn't help clarifying it. -------------- next part -------------- An HTML attachment was scrubbed... URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: image.png Type: image/png Size: 50179 bytes Desc: not available URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: image.png Type: image/png Size: 40105 bytes Desc: not available URL: From abdelahad.thaifa at lotsys.com Thu Apr 25 09:54:38 2013 From: abdelahad.thaifa at lotsys.com (Abdelahad Thaifa) Date: Thu, 25 Apr 2013 07:54:38 +0000 Subject: [Xymon] error : can't get eventlog file path Message-ID: <31216DEC24CB7542979082AC94CE761F1F30A8@FRMAIL02.Lotsys.corp> Hi, I monitor some windows OS with bbwin client, eventlog file who have a space character can't be found, for example "internet explorer". Here is the output error in msgs tab : internet explorer error : can't get eventlog file path 0 events since 15820 days (0.00 events/day) current size is 0 kb (max size is set to 0 kb) retention is set to : Overwrite events as needed - key management service Have you an idea to resolve this problem? Thank you ------------------------------------------------------------------------------------------------------------------- Ce message et les pièces jointes associées sont confidentiels et à l'attention exclusive des destinataires. Si vous avez reçu ce message par erreur, merci d'avertir l'administrateur de la messagerie: postmaster at lotsys.com This email and files transmitted with it are confidential and intended solely for the use of the individual to whom they are addressed. If you have received this email in error, please notify the system manager: postmaster at lotsys.com ------------------------------------------------------------------------------------------------------------------- -------------- next part -------------- An HTML attachment was scrubbed... URL: From minaqva at hotmail.com Thu Apr 25 16:26:46 2013 From: minaqva at hotmail.com (Milana Malkic) Date: Thu, 25 Apr 2013 16:26:46 +0200 Subject: [Xymon] xymon mail service In-Reply-To: <14486_1366820135_51780526_14486_3021_1_B5A10A424126084EAFB73DBB47C48DE0911A3CA0@ULVMCTMMAI002.INTERNAL.COLT.NET> References: , , , <14486_1366820135_51780526_14486_3021_1_B5A10A424126084EAFB73DBB47C48DE0911A3CA0@ULVMCTMMAI002.INTERNAL.COLT.NET> Message-ID: Thank you very much. This was very helpful to me. I will try to make this work and I will post the results. Regards Milana From: Martin.Ward at colt.net To: minaqva at hotmail.com; a.chervonets at cominder.eu; xymon at xymon.com Subject: RE: [Xymon] xymon mail service Date: Wed, 24 Apr 2013 16:15:33 +0000 Check if Postfix is running at all: $ ps –ef|grep postfix You will need to configure the main.cf file of Postfix to get it working but first, do you know what your smarthost is? If your Xymon server has full access to the Internet then there is no need but if not then you will need to route emails to a machine that knows how to deliver them. Your network admins should know this. This page give examples of Postfix configurations, I would recommend the “Postfix on a null client” and set the “relayhost” to whatever your smarthost server is. |\/| -- Martin Ward Manager, Technical Services Service Operations DDI:+44 (0) 20 7863 5218 / Fax: +44 (0)20 7863 9999 / www.colt.net Colt Technology Services, Unit 12, Powergate Business Park, Volt Avenue, Park Royal, London, NW10 6PW, UK. Help reduce your carbon footprint | Think before you print. Registered in England and Wales, registered number 02452736, VAT number GB 645 4205 50 From: Milana Malkic [mailto:minaqva at hotmail.com] Sent: 24 April 2013 15:36 To: Andrey Chervonets; xymon at xymon.com; Ward, Martin Subject: RE: [Xymon] xymon mail service I am using Centos 5.7, and I have postfix installed. So, I need to configure postfix and create a mail account via postfix. That mail account I have to put in alerts.cfg. I hope that I understood you well. If I am wrong please correct me. To: xymon at xymon.com From: A.Chervonets at cominder.eu Date: Wed, 24 Apr 2013 14:46:36 +0300 Subject: Re: [Xymon] xymon mail service You need just regular sendmail working on the host. If You can send e-mail from OS with mail or mails - then it should work for XyMon too (sometimes You may also need to adjust sendmail configuration for masquarading, SMTP gateway etc). Contact Your system administrator or check web for "how to setup sendmail on linux or unix". Best regards, Andrey Chervonets ---------------------- SIA CoMinder http://www.cominder.eu/ _______________________________________________ Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon [Colt Disclaimer] This email is from an entity of the Colt group of companies. Colt Group S.A., K2 Building, Forte 1, 2a rue Albert Borschette, L-1246 Luxembourg, R.C.S. B115679. Corporate and contact information for our entities can be found at http://colt.net/uk/en/Colt-Group-of-Companies/index.htm. Internet communications are not secure and Colt does not accept responsibility for the accurate transmission of this message. Content of this email or its attachments is not legally or contractually binding unless expressly previously agreed in writing by Colt -------------- next part -------------- An HTML attachment was scrubbed... URL: From deepakdeore2004 at gmail.com Thu Apr 25 19:35:12 2013 From: deepakdeore2004 at gmail.com (deepak deore) Date: Thu, 25 Apr 2013 23:05:12 +0530 Subject: [Xymon] how to get the alias (diff hostname than the actual) in mail alert? Message-ID: we are using NAME for the odd hostnames on amazon EC2, NAME:server01-prod But when we get the mail alerts, the actual servername comes which is confusing, how can we set the same name of the host in mail which is set in NAME option in hosts.cfg. Thanks, Deepak -------------- next part -------------- An HTML attachment was scrubbed... URL: From Paul.Root at CenturyLink.com Thu Apr 25 19:50:01 2013 From: Paul.Root at CenturyLink.com (Root, Paul T) Date: Thu, 25 Apr 2013 17:50:01 +0000 Subject: [Xymon] how to get the alias (diff hostname than the actual) in mail alert? In-Reply-To: References: Message-ID: --hostname on the command line of the runclient.sh script. From: xymon-bounces at xymon.com [mailto:xymon-bounces at xymon.com] On Behalf Of deepak deore Sent: Thursday, April 25, 2013 12:35 PM To: xymon at xymon.com Subject: [Xymon] how to get the alias (diff hostname than the actual) in mail alert? we are using NAME for the odd hostnames on amazon EC2, NAME:server01-prod But when we get the mail alerts, the actual servername comes which is confusing, how can we set the same name of the host in mail which is set in NAME option in hosts.cfg. Thanks, Deepak -------------- next part -------------- An HTML attachment was scrubbed... URL: From lebarber at gmail.com Thu Apr 25 19:58:05 2013 From: lebarber at gmail.com (Larry Barber) Date: Thu, 25 Apr 2013 12:58:05 -0500 Subject: [Xymon] how to get the alias (diff hostname than the actual) in mail alert? In-Reply-To: References: Message-ID: It's better to put the name you want to refer to a system as in the hosts.cfg name field and then use the CLIENT: directive to map what the machine thinks its name is to what you want to call it. You can switch things over to using CLIENT easily enough if there aren't too many hosts using NAME. Simply edit hosts.cfg, moving the entry behind NAME to the name field, deleting NAME and adding CLIENT. Then use the rename command in xymon to move all the history over. Thanks, Larry Barber On Thu, Apr 25, 2013 at 12:50 PM, Root, Paul T wrote: > --hostname on the command line of the runclient.sh script.**** > > ** ** > > *From:* xymon-bounces at xymon.com [mailto:xymon-bounces at xymon.com] *On > Behalf Of *deepak deore > *Sent:* Thursday, April 25, 2013 12:35 PM > *To:* xymon at xymon.com > *Subject:* [Xymon] how to get the alias (diff hostname than the actual) > in mail alert?**** > > ** ** > > we are using NAME for the odd hostnames on amazon EC2,**** > > ** ** > > NAME:server01-prod**** > > ** ** > > But when we get the mail alerts, the actual servername comes which is > confusing, how can we set the same name of the host in mail which is set in > NAME option in hosts.cfg.**** > > ** ** > > Thanks,**** > > Deepak**** > > _______________________________________________ > Xymon mailing list > Xymon at xymon.com > http://lists.xymon.com/mailman/listinfo/xymon > > -------------- next part -------------- An HTML attachment was scrubbed... URL: From giovanni.mf at gmail.com Fri Apr 26 15:11:34 2013 From: giovanni.mf at gmail.com (Giovanni M.) Date: Fri, 26 Apr 2013 10:11:34 -0300 Subject: [Xymon] Include FILE in analysis.cfg Message-ID: Hi! It is possible to use the directive "include FILE" in analysis.cfg? I'm already using it in hosts.cfg but would be very useful to use in analysis.cfg as well, since its very easy to this file get very big. Maybe some patch available. Thank you -------------- next part -------------- An HTML attachment was scrubbed... URL: From martin.flemming at desy.de Fri Apr 26 15:15:22 2013 From: martin.flemming at desy.de (Martin Flemming) Date: Fri, 26 Apr 2013 15:15:22 +0200 (CEST) Subject: [Xymon] Include FILE in analysis.cfg In-Reply-To: References: Message-ID: On Fri, 26 Apr 2013, Giovanni M. wrote: > Hi! > > It is possible to use the directive "include FILE" in analysis.cfg? > > I'm already using it in hosts.cfg but would be very useful to use in analysis.cfg as well, since its very easy > to this file get very big. > Maybe some patch available. > Yes, it's possible and also the directory-directive :-) e.g. directory includes/analysis/services cheers, Martin From cleaver at terabithia.org Fri Apr 26 15:29:04 2013 From: cleaver at terabithia.org (cleaver at terabithia.org) Date: Fri, 26 Apr 2013 13:29:04 -0000 (UTC) Subject: [Xymon] Include FILE in analysis.cfg In-Reply-To: References: Message-ID: <53498.72.192.173.6.1366982944.squirrel@mail.kkytbs.net> Side note: The directive must have a space after the word (not a tab). Regards, -jc > On Fri, 26 Apr 2013, Giovanni M. wrote: > >> Hi! >> >> It is possible to use the directive "include FILE" in analysis.cfg? >> >> I'm already using it in hosts.cfg but would be very useful to use in >> analysis.cfg as well, since its very easy >> to this file get very big. >> Maybe some patch available. >> > > Yes, it's possible and > also the directory-directive :-) > > e.g. > directory includes/analysis/services > > > cheers, > > Martin > _______________________________________________ > Xymon mailing list > Xymon at xymon.com > http://lists.xymon.com/mailman/listinfo/xymon > From martin.flemming at desy.de Fri Apr 26 16:16:46 2013 From: martin.flemming at desy.de (Martin Flemming) Date: Fri, 26 Apr 2013 16:16:46 +0200 (CEST) Subject: [Xymon] Include FILE in analysis.cfg In-Reply-To: <53498.72.192.173.6.1366982944.squirrel@mail.kkytbs.net> References: <53498.72.192.173.6.1366982944.squirrel@mail.kkytbs.net> Message-ID: Hmm, good to know :-) thanks martin On Fri, 26 Apr 2013, cleaver at terabithia.org wrote: > Side note: The directive must have a space after the word (not a tab). > > Regards, > -jc > > >> On Fri, 26 Apr 2013, Giovanni M. wrote: >> >>> Hi! >>> >>> It is possible to use the directive "include FILE" in analysis.cfg? >>> >>> I'm already using it in hosts.cfg but would be very useful to use in >>> analysis.cfg as well, since its very easy >>> to this file get very big. >>> Maybe some patch available. >>> >> >> Yes, it's possible and >> also the directory-directive :-) >> >> e.g. >> directory includes/analysis/services >> >> >> cheers, >> >> Martin >> _______________________________________________ >> Xymon mailing list >> Xymon at xymon.com >> http://lists.xymon.com/mailman/listinfo/xymon >> > > > Gruss Martin Flemming ______________________________________________________ Martin Flemming DESY / IT office : Building 2b / 008a Notkestr. 85 phone : 040 - 8998 - 4667 22603 Hamburg mail : martin.flemming at desy.de ______________________________________________________ From abdelahad.thaifa at lotsys.com Fri Apr 26 16:20:55 2013 From: abdelahad.thaifa at lotsys.com (Abdelahad Thaifa) Date: Fri, 26 Apr 2013 14:20:55 +0000 Subject: [Xymon] error : can't get eventlog file path In-Reply-To: <31216DEC24CB7542979082AC94CE761F1F30A8@FRMAIL02.Lotsys.corp> References: <31216DEC24CB7542979082AC94CE761F1F30A8@FRMAIL02.Lotsys.corp> Message-ID: <31216DEC24CB7542979082AC94CE761F1F435F@FRMAIL02.Lotsys.corp> Hi all, Nobody have a solution to my problem please ?? Cordially De : xymon-bounces at xymon.com [mailto:xymon-bounces at xymon.com] De la part de Abdelahad Thaifa Envoyé : jeudi 25 avril 2013 09:55 À : xymon at xymon.com Objet : [Xymon] error : can't get eventlog file path Hi, I monitor some windows OS with bbwin client, eventlog file who have a space character can't be found, for example "internet explorer". Here is the output error in msgs tab : internet explorer error : can't get eventlog file path 0 events since 15820 days (0.00 events/day) current size is 0 kb (max size is set to 0 kb) retention is set to : Overwrite events as needed - key management service Have you an idea to resolve this problem? Thank you ------------------------------------------------------------------------------------------------------------------- Ce message et les pièces jointes associées sont confidentiels et à l'attention exclusive des destinataires. Si vous avez reçu ce message par erreur, merci d'avertir l'administrateur de la messagerie: postmaster at lotsys.com This email and files transmitted with it are confidential and intended solely for the use of the individual to whom they are addressed. If you have received this email in error, please notify the system manager: postmaster at lotsys.com ------------------------------------------------------------------------------------------------------------------- -------------- next part -------------- An HTML attachment was scrubbed... URL: From john.r.rothlisberger at accenture.com Fri Apr 26 17:53:10 2013 From: john.r.rothlisberger at accenture.com (john.r.rothlisberger at accenture.com) Date: Fri, 26 Apr 2013 15:53:10 +0000 Subject: [Xymon] error : can't get eventlog file path In-Reply-To: <31216DEC24CB7542979082AC94CE761F1F435F@FRMAIL02.Lotsys.corp> References: <31216DEC24CB7542979082AC94CE761F1F30A8@FRMAIL02.Lotsys.corp> <31216DEC24CB7542979082AC94CE761F1F435F@FRMAIL02.Lotsys.corp> Message-ID: <81A323A3CB510F4DA8D93D0C3F29E48616F3DEDE@048-CH1MPN1-133.048d.mgd.msft.net> I assume your Xymon server is *nix. Use "\s" in place of the spaces to match: In analysis.cfg LOG %eventlog_applicatoin* %Auto\sAnnotate\serror\s#4500\swhile\sprocessing\snode Thanks, John Upcoming PTO: None _____________________________________________________________________ John Rothlisberger IT Strategy, Infrastructure & Security - Technology Growth Platform TGP for Business Process Outsourcing Accenture 312.693.3136 office _____________________________________________________________________ From: xymon-bounces at xymon.com [mailto:xymon-bounces at xymon.com] On Behalf Of Abdelahad Thaifa Sent: Friday, April 26, 2013 9:21 AM To: xymon at xymon.com Subject: Re: [Xymon] error : can't get eventlog file path Hi all, Nobody have a solution to my problem please ?? Cordially De : xymon-bounces at xymon.com [mailto:xymon-bounces at xymon.com] De la part de Abdelahad Thaifa Envoyé : jeudi 25 avril 2013 09:55 À : xymon at xymon.com Objet : [Xymon] error : can't get eventlog file path Hi, I monitor some windows OS with bbwin client, eventlog file who have a space character can't be found, for example "internet explorer". Here is the output error in msgs tab : internet explorer error : can't get eventlog file path 0 events since 15820 days (0.00 events/day) current size is 0 kb (max size is set to 0 kb) retention is set to : Overwrite events as needed - key management service Have you an idea to resolve this problem? Thank you ------------------------------------------------------------------------------------------------------------------- Ce message et les pièces jointes associées sont confidentiels et à l'attention exclusive des destinataires. Si vous avez reçu ce message par erreur, merci d'avertir l'administrateur de la messagerie: postmaster at lotsys.com This email and files transmitted with it are confidential and intended solely for the use of the individual to whom they are addressed. If you have received this email in error, please notify the system manager: postmaster at lotsys.com ------------------------------------------------------------------------------------------------------------------- ________________________________ This message is for the designated recipient only and may contain privileged, proprietary, or otherwise confidential information. If you have received it in error, please notify the sender immediately and delete the original. Any other use of the e-mail by you is prohibited. Where allowed by local law, electronic communications with Accenture and its affiliates, including e-mail and instant messaging (including content), may be scanned by our systems for the purposes of information security and assessment of internal compliance with Accenture policy. ______________________________________________________________________________________ www.accenture.com -------------- next part -------------- An HTML attachment was scrubbed... URL: From abdelahad.thaifa at lotsys.com Fri Apr 26 18:02:14 2013 From: abdelahad.thaifa at lotsys.com (Abdelahad Thaifa) Date: Fri, 26 Apr 2013 16:02:14 +0000 Subject: [Xymon] error : can't get eventlog file path In-Reply-To: <81A323A3CB510F4DA8D93D0C3F29E48616F3DEDE@048-CH1MPN1-133.048d.mgd.msft.net> References: <31216DEC24CB7542979082AC94CE761F1F30A8@FRMAIL02.Lotsys.corp> <31216DEC24CB7542979082AC94CE761F1F435F@FRMAIL02.Lotsys.corp> <81A323A3CB510F4DA8D93D0C3F29E48616F3DEDE@048-CH1MPN1-133.048d.mgd.msft.net> Message-ID: <31216DEC24CB7542979082AC94CE761F1F4480@FRMAIL02.Lotsys.corp> Yes, my server is Linux system. I forgot to say that my xymon version is 4.2.3 version, so I don't have a file analysis.cfg, and my bbwin client is in local mode. Thanks for help Cordialement [cid:image001.png at 01CE42A8.2E210D20] Abdelahad THAIFA Admistrateur systèmes Tél. direct : +33 (0)1 41 44 88 22 | Fax: +33 (0)1 41 44 39 39 E-mail : abdelahad.thaifa at lotsys.com Pensons à l'environnement : n'imprimons nos messages que si nécessaire et en recto verso De : john.r.rothlisberger at accenture.com [mailto:john.r.rothlisberger at accenture.com] Envoyé : vendredi 26 avril 2013 17:53 À : xymon at xymon.com; Abdelahad Thaifa Objet : RE: error : can't get eventlog file path I assume your Xymon server is *nix. Use "\s" in place of the spaces to match: In analysis.cfg LOG %eventlog_applicatoin* %Auto\sAnnotate\serror\s#4500\swhile\sprocessing\snode Thanks, John Upcoming PTO: None _____________________________________________________________________ John Rothlisberger IT Strategy, Infrastructure & Security - Technology Growth Platform TGP for Business Process Outsourcing Accenture 312.693.3136 office _____________________________________________________________________ From: xymon-bounces at xymon.com [mailto:xymon-bounces at xymon.com] On Behalf Of Abdelahad Thaifa Sent: Friday, April 26, 2013 9:21 AM To: xymon at xymon.com Subject: Re: [Xymon] error : can't get eventlog file path Hi all, Nobody have a solution to my problem please ?? Cordially De : xymon-bounces at xymon.com [mailto:xymon-bounces at xymon.com] De la part de Abdelahad Thaifa Envoyé : jeudi 25 avril 2013 09:55 À : xymon at xymon.com Objet : [Xymon] error : can't get eventlog file path Hi, I monitor some windows OS with bbwin client, eventlog file who have a space character can't be found, for example "internet explorer". Here is the output error in msgs tab : internet explorer error : can't get eventlog file path 0 events since 15820 days (0.00 events/day) current size is 0 kb (max size is set to 0 kb) retention is set to : Overwrite events as needed - key management service Have you an idea to resolve this problem? Thank you ------------------------------------------------------------------------------------------------------------------- Ce message et les pièces jointes associées sont confidentiels et à l'attention exclusive des destinataires. Si vous avez reçu ce message par erreur, merci d'avertir l'administrateur de la messagerie: postmaster at lotsys.com This email and files transmitted with it are confidential and intended solely for the use of the individual to whom they are addressed. If you have received this email in error, please notify the system manager: postmaster at lotsys.com ------------------------------------------------------------------------------------------------------------------- ________________________________ This message is for the designated recipient only and may contain privileged, proprietary, or otherwise confidential information. If you have received it in error, please notify the sender immediately and delete the original. Any other use of the e-mail by you is prohibited. Where allowed by local law, electronic communications with Accenture and its affiliates, including e-mail and instant messaging (including content), may be scanned by our systems for the purposes of information security and assessment of internal compliance with Accenture policy. ______________________________________________________________________________________ www.accenture.com -------------- next part -------------- An HTML attachment was scrubbed... URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: image001.png Type: image/png Size: 7704 bytes Desc: image001.png URL: From stef.coene at docum.org Fri Apr 26 20:13:43 2013 From: stef.coene at docum.org (Stef Coene) Date: Fri, 26 Apr 2013 20:13:43 +0200 Subject: [Xymon] Rare shape in graphs. In-Reply-To: References: Message-ID: <12454894.690u67Gp8y@scne> On Tuesday 23 April 2013 13:33:05 Raul GN wrote: > Hi all, > Recently I've included 2 new host to monitor in xymon but from time to > time response times are quite high (2 o 3 seconds). Shape in graphs draws > ups and downs in a very recognisable manner: > > [image: Inline image 1] > [image: Inline image 2] > > Testing the host (a windows server) with telnet for hours (Perl script) > doesn't shows this responses times (always fewer than 1 second). Does > anyone knows where could be the problem? Is it a xymon server problem or it > may be in the remote server? I think it is in the remote server but I > couldn't demonstrate it and than curious graphs doesn't help clarifying it. I see the same on some tests, mosts of them ping. I never figured out why this is happening..... Stef From srinivas.dasari1 at wipro.com Sat Apr 27 06:43:13 2013 From: srinivas.dasari1 at wipro.com (srinivas.dasari1 at wipro.com) Date: Sat, 27 Apr 2013 04:43:13 +0000 Subject: [Xymon] Rare shape in graphs. In-Reply-To: <12454894.690u67Gp8y@scne> References: <12454894.690u67Gp8y@scne> Message-ID: Hi All, I want to install xymon in my desktop from scratch, can you please send any document for it? Thanks, Srinivas -----Original Message----- From: xymon-bounces at xymon.com [mailto:xymon-bounces at xymon.com] On Behalf Of Stef Coene Sent: Friday, April 26, 2013 11:44 PM To: xymon at xymon.com Subject: Re: [Xymon] Rare shape in graphs. On Tuesday 23 April 2013 13:33:05 Raul GN wrote: > Hi all, > Recently I've included 2 new host to monitor in xymon but from time > to time response times are quite high (2 o 3 seconds). Shape in graphs > draws ups and downs in a very recognisable manner: > > [image: Inline image 1] > [image: Inline image 2] > > Testing the host (a windows server) with telnet for hours (Perl > script) doesn't shows this responses times (always fewer than 1 > second). Does anyone knows where could be the problem? Is it a xymon > server problem or it may be in the remote server? I think it is in > the remote server but I couldn't demonstrate it and than curious graphs doesn't help clarifying it. I see the same on some tests, mosts of them ping. I never figured out why this is happening..... Stef _______________________________________________ Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon Please do not print this email unless it is absolutely necessary. The information contained in this electronic message and any attachments to this message are intended for the exclusive use of the addressee(s) and may contain proprietary, confidential or privileged information. If you are not the intended recipient, you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately and destroy all copies of this message and any attachments. WARNING: Computer viruses can be transmitted via email. The recipient should check this email and any attachments for the presence of viruses. The company accepts no liability for any damage caused by any virus transmitted by this email. www.wipro.com From josh at imaginenetworksllc.com Sat Apr 27 17:19:38 2013 From: josh at imaginenetworksllc.com (Josh Luthman) Date: Sat, 27 Apr 2013 11:19:38 -0400 Subject: [Xymon] Rare shape in graphs. In-Reply-To: References: <12454894.690u67Gp8y@scne> Message-ID: Please create a new thread for a new topic from now on. http://en.wikibooks.org/wiki/System_Monitoring_with_Xymon/Administration_Guide/Compiling_on_CentOS Josh Luthman Office: 937-552-2340 Direct: 937-552-2343 1100 Wayne St Suite 1337 Troy, OH 45373 On Sat, Apr 27, 2013 at 12:43 AM, wrote: > Hi All, > > I want to install xymon in my desktop from scratch, can you please send > any document for it? > > Thanks, > Srinivas > > -----Original Message----- > From: xymon-bounces at xymon.com [mailto:xymon-bounces at xymon.com] On Behalf > Of Stef Coene > Sent: Friday, April 26, 2013 11:44 PM > To: xymon at xymon.com > Subject: Re: [Xymon] Rare shape in graphs. > > On Tuesday 23 April 2013 13:33:05 Raul GN wrote: > > Hi all, > > Recently I've included 2 new host to monitor in xymon but from time > > to time response times are quite high (2 o 3 seconds). Shape in graphs > > draws ups and downs in a very recognisable manner: > > > > [image: Inline image 1] > > [image: Inline image 2] > > > > Testing the host (a windows server) with telnet for hours (Perl > > script) doesn't shows this responses times (always fewer than 1 > > second). Does anyone knows where could be the problem? Is it a xymon > > server problem or it may be in the remote server? I think it is in > > the remote server but I couldn't demonstrate it and than curious graphs > doesn't help clarifying it. > I see the same on some tests, mosts of them ping. I never figured out why > this is happening..... > > > Stef > _______________________________________________ > Xymon mailing list > Xymon at xymon.com > http://lists.xymon.com/mailman/listinfo/xymon > > Please do not print this email unless it is absolutely necessary. > > The information contained in this electronic message and any attachments > to this message are intended for the exclusive use of the addressee(s) and > may contain proprietary, confidential or privileged information. If you are > not the intended recipient, you should not disseminate, distribute or copy > this e-mail. Please notify the sender immediately and destroy all copies of > this message and any attachments. > > WARNING: Computer viruses can be transmitted via email. The recipient > should check this email and any attachments for the presence of viruses. > The company accepts no liability for any damage caused by any virus > transmitted by this email. > > www.wipro.com > _______________________________________________ > Xymon mailing list > Xymon at xymon.com > http://lists.xymon.com/mailman/listinfo/xymon > -------------- next part -------------- An HTML attachment was scrubbed... URL: From jlaidman at rebel-it.com.au Mon Apr 29 06:55:57 2013 From: jlaidman at rebel-it.com.au (Jeremy Laidman) Date: Mon, 29 Apr 2013 14:55:57 +1000 Subject: [Xymon] Rare shape in graphs. In-Reply-To: References: Message-ID: On 23 April 2013 21:33, Raul GN wrote: > Hi all, > Recently I've included 2 new host to monitor in xymon but from time to > time response times are quite high (2 o 3 seconds). Shape in graphs draws > ups and downs in a very recognisable manner: > I believe this is a result of quantization and interpolation when RRD stores the results, and it shows up when RRD creates the graphs. It also seems more pronounced when the metrics are whole-numbers, such as clock offset. It's also more obvious for really small numbers. Here's a graph of mine that shows an interesting repeating diamond shape. [image: Inline images 1] (But your multi-coloured "Connection Times" graph is far prettier.) This took me a while to understand what's going on, and I still don't quite get it. But by way of an example, let's say that the clock offset (error) of a host is 2.333 seconds relative to the Xymon server. But let's say the quantization causes RRD to accept only whole numbers (I'm stretching the truth here for demonstration purposes). The numbers will come in as 2.333, 2.333, 2.333, but RRD will store them as 2, 2, 3, 2, 2, 3. So you end up with a repeating pattern (a spike every 3rd sample) that really doesn't exist, and is related to the way RRD stores, consolidates and retrieves numbers. This pattern is easily detected by our brain vision circuitry. Of course, RRD can indeed store floating point numbers, but when you have really small variations in numbers (many decimal places), RRD has to round the numbers at some point, and this gives the same effect. Also, the number of decimal places required to avoid such effects is increased when you do averaging and interpolation. Interpolation, the way I see it, is as follows. When RRD gets a value of 7 at 3:05:00 and a value of 8 at 3:10:01, it doesn't store "8" for the second value, because it didn't come in exactly 5 minutes after the first value. Instead, RRD removes one second's worth from the value, because it has to store the second value at 3:10:00. If it took 301 seconds to go from 7 to 8, then RRD will calculate that the value after 300 seconds would have been around 7.996... So if your sampling jumps around a little earlier and later, in a regular manner, you may see an interpolation artefact that matches that variation. Typically, xymonnet performs its checks in the same order every time, and earlier checks might delay later checks very slightly, just enough to push the sample timestamp into the next whole second, causing an interpolation artefact. Because the ordering is not randomised, the artefacts are consistent and recognisable as patterns in the graphs. It could be that, by adding "--shuffle" to the call to xymonnet, the artefacts will no longer form a recognisable pattern. While I don't fully understand what's going on, I think it's safe to say that it's not a problem with either Xymon or the servers being tested, but is a result of how RRD does its thing. J -------------- next part -------------- An HTML attachment was scrubbed... URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: image.png Type: image/png Size: 32976 bytes Desc: not available URL: From A.Chervonets at cominder.eu Mon Apr 29 08:54:01 2013 From: A.Chervonets at cominder.eu (Andrey Chervonets) Date: Mon, 29 Apr 2013 09:54:01 +0300 Subject: [Xymon] Web UI security - how to implement access filter per group/host In-Reply-To: References: Message-ID: Good day! Now web-page is protected at web-server (Apache) level only. I see we can protect exact directory and may be file/script like: http://host:port/xymon/p_cominder/p_cominder.html so we can allow some users see only some group pages. But this does not protect direct metric links like: http://host:port/xymon-cgi/svcstatus.sh?HOST=miminos.cominder.eu&SERVICE=disk if I know other (not my) host name I can get this information event I am not in group of that host. And also at non-green Systems report user see ALL non-green hosts http://host:port/xymon/nongreen.html Question: Does XyMon team have plans to implement groups/pages protection? Or may be somebody know how to protect it with current version? At present moment the only idea I see to have XyMon web UI as backgroud service and have foreground application with it's own authorisation - which will then request background XyMon service/web-page, filter out only what is required and return results to end user based on user's permissions and groups. It will take time, but I can write such application. But, as result we have 2 applications instead of one. May be there is more simple solution? Best regards, Andrey Chervonets ---------------------- SIA CoMinder http://www.cominder.eu/ -------------- next part -------------- An HTML attachment was scrubbed... URL: From henrik at hswn.dk Mon Apr 29 10:16:54 2013 From: henrik at hswn.dk (henrik at hswn.dk) Date: Mon, 29 Apr 2013 10:16:54 +0200 Subject: [Xymon] Web UI security - how to implement access filter per group/host In-Reply-To: References: Message-ID: <09eacf9c1d973f555a9ea9592f73676e@bach.hswn.dk> On Mon, 29 Apr 2013 09:54:01 +0300, Andrey Chervonets wrote: > Question: > Does XyMon team have plans to implement groups/pages protection? > > Or may be somebody know how to protect it with current version? It isn't a top issue on my priority list. On my own site, I use Apache to grant/deny access to the pre-generated html-pages - but if you know the hostname, then it is trivial to construct a URL that will fetch the status of any host. The easiest way to modify the current system is to add some security checks in the CGI shell-script wrappers, so that they check access based on the REMOTE_USER environment-variable that Apache provides when you require authentication for a web user. A simple example I use is that external users have a username which is an e-mail address - so the username contains a '@'. These users should not have access to the enable/disable scripts. So I wrote a small program to check if REMOTE_USER includes a '@', and if it doesn't then it just prints out an HTML page with status 403 (Access denied). If access is OK, then it invokes the enable/disable program in the usual way. The access-check program is then invoked first in the "enadis.sh" wrapper. Regards, Henrik From henrik at hswn.dk Mon Apr 29 11:51:22 2013 From: henrik at hswn.dk (henrik at hswn.dk) Date: Mon, 29 Apr 2013 11:51:22 +0200 Subject: [Xymon] Web UI security - how to implement access filter per group/host In-Reply-To: <09eacf9c1d973f555a9ea9592f73676e@bach.hswn.dk> References: <09eacf9c1d973f555a9ea9592f73676e@bach.hswn.dk> Message-ID: On Mon, 29 Apr 2013 10:16:54 +0200, wrote: > On Mon, 29 Apr 2013 09:54:01 +0300, Andrey Chervonets > wrote: > >> Question: >> Does XyMon team have plans to implement groups/pages protection? > > The easiest way to modify the current system is to add some security > checks in the CGI shell-script wrappers, so that they check access based on > the REMOTE_USER environment-variable that Apache provides when you require > authentication for a web user. Almost forgot there is a mechanism for this in place for some of the CGI scripts in Xymon. See the xymonwebaccess(5) man-page, also available at http://www.xymon.com/xymon/help/manpages/man5/xymonwebaccess.5.html Regards, Henrik From minaqva at hotmail.com Mon Apr 29 13:22:14 2013 From: minaqva at hotmail.com (Milana Malkic) Date: Mon, 29 Apr 2013 13:22:14 +0200 Subject: [Xymon] xymon mail service In-Reply-To: References: , , , <14486_1366820135_51780526_14486_3021_1_B5A10A424126084EAFB73DBB47C48DE0911A3CA0@ULVMCTMMAI002.INTERNAL.COLT.NET>, Message-ID: Hello, this is what I have done about xymon mail service: I installed QMAIL, following the steps from http://lifewithqmail.org/lwq.html. Next, I installed mailx, and add my e-mail address in alerts.cfg in /home/xymon/server/etc folder. Now I get alerts when something happens to servers. Thank you for your help Regards Milana From: minaqva at hotmail.com To: martin.ward at colt.net; a.chervonets at cominder.eu; xymon at xymon.com Subject: RE: [Xymon] xymon mail service Date: Thu, 25 Apr 2013 16:26:46 +0200 Thank you very much. This was very helpful to me. I will try to make this work and I will post the results. Regards Milana From: Martin.Ward at colt.net To: minaqva at hotmail.com; a.chervonets at cominder.eu; xymon at xymon.com Subject: RE: [Xymon] xymon mail service Date: Wed, 24 Apr 2013 16:15:33 +0000 Check if Postfix is running at all: $ ps –ef|grep postfix You will need to configure the main.cf file of Postfix to get it working but first, do you know what your smarthost is? If your Xymon server has full access to the Internet then there is no need but if not then you will need to route emails to a machine that knows how to deliver them. Your network admins should know this. This page give examples of Postfix configurations, I would recommend the “Postfix on a null client” and set the “relayhost” to whatever your smarthost server is. |\/| -- Martin Ward Manager, Technical Services Service Operations DDI:+44 (0) 20 7863 5218 / Fax: +44 (0)20 7863 9999 / www.colt.net Colt Technology Services, Unit 12, Powergate Business Park, Volt Avenue, Park Royal, London, NW10 6PW, UK. Help reduce your carbon footprint | Think before you print. Registered in England and Wales, registered number 02452736, VAT number GB 645 4205 50 From: Milana Malkic [mailto:minaqva at hotmail.com] Sent: 24 April 2013 15:36 To: Andrey Chervonets; xymon at xymon.com; Ward, Martin Subject: RE: [Xymon] xymon mail service I am using Centos 5.7, and I have postfix installed. So, I need to configure postfix and create a mail account via postfix. That mail account I have to put in alerts.cfg. I hope that I understood you well. If I am wrong please correct me. To: xymon at xymon.com From: A.Chervonets at cominder.eu Date: Wed, 24 Apr 2013 14:46:36 +0300 Subject: Re: [Xymon] xymon mail service You need just regular sendmail working on the host. If You can send e-mail from OS with mail or mails - then it should work for XyMon too (sometimes You may also need to adjust sendmail configuration for masquarading, SMTP gateway etc). Contact Your system administrator or check web for "how to setup sendmail on linux or unix". Best regards, Andrey Chervonets ---------------------- SIA CoMinder http://www.cominder.eu/ _______________________________________________ Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon [Colt Disclaimer] This email is from an entity of the Colt group of companies. Colt Group S.A., K2 Building, Forte 1, 2a rue Albert Borschette, L-1246 Luxembourg, R.C.S. B115679. Corporate and contact information for our entities can be found at http://colt.net/uk/en/Colt-Group-of-Companies/index.htm. Internet communications are not secure and Colt does not accept responsibility for the accurate transmission of this message. Content of this email or its attachments is not legally or contractually binding unless expressly previously agreed in writing by Colt -------------- next part -------------- An HTML attachment was scrubbed... URL: From A.Chervonets at cominder.eu Mon Apr 29 14:50:27 2013 From: A.Chervonets at cominder.eu (Andrey Chervonets) Date: Mon, 29 Apr 2013 15:50:27 +0300 Subject: [Xymon] Web UI security - how to implement access filter per group/host In-Reply-To: References: Message-ID: I am not very familiar with CGI, but knowing that it is possible we can do it. Thanks a lot! Best regards, Andrey Chervonets ---------------------- SIA CoMinder http://www.cominder.eu/ xymon-bounces at xymon.com wrote on 29.04.2013 13:00:01: > Subject: Re: [Xymon] Web UI security - how to implement access filter per group/host > ... > > The easiest way to modify the current system is to add some security > checks in the CGI shell-script wrappers, so that they check access based on > the REMOTE_USER environment-variable that Apache provides when you require > authentication for a web user... > > > Regards, > Henrik -------------- next part -------------- An HTML attachment was scrubbed... URL: From minaqva at hotmail.com Tue Apr 30 11:04:48 2013 From: minaqva at hotmail.com (Milana Malkic) Date: Tue, 30 Apr 2013 11:04:48 +0200 Subject: [Xymon] CONN status clear on only one host Message-ID: Hello, I am using xymon server on Centos 5.7 machine for monitoring 15 Centos machines. On every machine there is xymon client installed. Everything works fine, except on one machine host1 at domain1.com (Centos 6.0) conn status shows white face, but the message is Service conn on host1 at domain1.com is OK (up). Also, if I try fping host1 at domain1.com, from the machine with xymon server, I get: host1 at domain1.com is alive. All other services (cpu,memory,procs..) shows green face. Thank you for your help Milana -------------- next part -------------- An HTML attachment was scrubbed... URL: From deepakdeore2004 at gmail.com Tue Apr 30 13:54:24 2013 From: deepakdeore2004 at gmail.com (deepak deore) Date: Tue, 30 Apr 2013 17:24:24 +0530 Subject: [Xymon] graph coming into DERIVE formant instead of GAUGE Message-ID: I see $rrdtool dump IdAp.rrd|grep type is DERIVE and so no graphs is coming on browser. Below is the file configurations. client send the data in NCV format, eg. ApacheIdleThread: 50 xymonserver.cfg: - if_load=devmon,*IdAp=ncv*,temp=devmon,paging,mdc,mdchitpct,cics,dsa,getvis,maxuser,nparts,xymongen,xymonnet,xymonproxy,xymond" NCV_IdAp="ApacheIdleThread:GAUGE" graphs.cfg: - [IdAp] TITLE Apache Idlethrd info YAXIS Idlethreads DEF:ApacheIdleThread=IdAp.rrd:ApacheIdleThread:AVERAGE LINE1:ApacheIdleThread#44CCAA:ApacheIdleThread GPRINT:ApacheIdleThread:LAST:Idle Threads \: %5.1lf%s (cur) GPRINT:ApacheIdleThread:MAX: \: %5.1lf%s (max) GPRINT:ApacheIdleThread:MIN: \: %5.1lf%s (min) GPRINT:ApacheIdleThread:AVERAGE: \: %5.1lf%s (avg)\n -------------- next part -------------- An HTML attachment was scrubbed... URL: From minaqva at hotmail.com Tue Apr 30 14:17:58 2013 From: minaqva at hotmail.com (Milana Malkic) Date: Tue, 30 Apr 2013 14:17:58 +0200 Subject: [Xymon] CONN status clear on only one host In-Reply-To: <20392.209.43.25.133.1367323649.squirrel@www.bubbanfriends.org> References: , <20392.209.43.25.133.1367323649.squirrel@www.bubbanfriends.org> Message-ID: Client hostname, fqdn, and client name in the /home/xymon/server/etc/hosts.cfg is the same. When these things don't match, client is not sending updates, but these things are correct and I get updates for CPU and everything else, just conn is clear. When I power off client, I get message System critical when I qo on conn page and it says System ping failure, but still, the face is white. I'm afraid of missing some important alerts because of that. > Date: Tue, 30 Apr 2013 08:07:29 -0400 > Subject: Re: [Xymon] CONN status clear on only one host > From: mburger at bubbanfriends.org > To: minaqva at hotmail.com > CC: xymon at xymon.com > > > Hello, > > > > I am using xymon server on Centos 5.7 machine for monitoring 15 Centos > > machines. On every machine there is xymon client installed. > > Everything works fine, except on one machine host1 at domain1.com (Centos > > 6.0) conn status shows white face, but the message is > > Service conn on host1 at domain1.com is OK (up). > > > > Also, if I try fping host1 at domain1.com, from the machine with xymon > > server, I get: > > host1 at domain1.com is alive. > > > > > > All other services (cpu,memory,procs..) shows green face. > > > > > > Thank you for your help > > > > Milana > > Is your host really defined as "host1 at (@) domain1.com"? > -- > Mike Burger > http://www.bubbanfriends.org > > "It's always suicide-mission this, save-the-planet that. No one ever just > stops by to say 'hi' anymore." --Colonel Jack O'Neill, SG1 -------------- next part -------------- An HTML attachment was scrubbed... URL: From mburger at bubbanfriends.org Tue Apr 30 14:07:29 2013 From: mburger at bubbanfriends.org (Mike Burger) Date: Tue, 30 Apr 2013 08:07:29 -0400 (EDT) Subject: [Xymon] CONN status clear on only one host In-Reply-To: References: Message-ID: <20392.209.43.25.133.1367323649.squirrel@www.bubbanfriends.org> > Hello, > > I am using xymon server on Centos 5.7 machine for monitoring 15 Centos > machines. On every machine there is xymon client installed. > Everything works fine, except on one machine host1 at domain1.com (Centos > 6.0) conn status shows white face, but the message is > Service conn on host1 at domain1.com is OK (up). > > Also, if I try fping host1 at domain1.com, from the machine with xymon > server, I get: > host1 at domain1.com is alive. > > > All other services (cpu,memory,procs..) shows green face. > > > Thank you for your help > > Milana Is your host really defined as "host1 at (@) domain1.com"? -- Mike Burger http://www.bubbanfriends.org "It's always suicide-mission this, save-the-planet that. No one ever just stops by to say 'hi' anymore." --Colonel Jack O'Neill, SG1