[Xymon] Disk space test ignored

[Scot Kreienkamp]

Scot Kreienkamp  | Senior Systems Engineer | La-Z-Boy Corporate
One La-Z-Boy Drive | Monroe, Michigan 48162 |  Office: 734-384-6403 |  |  Mobile: 7349151444 | Email: Scot.Kreienkamp at la-z-boy.com
> -----Original Message-----
> From: J.C. Cleaver [mailto:cleaver at terabithia.org]
> Sent: Tuesday, April 05, 2016 10:46 PM
> To: Scot Kreienkamp
> Cc: xymon at xymon.com
> Subject: Re: [Xymon] Disk space test ignored
>
>
>
> On Tue, April 5, 2016 12:14 pm, Scot Kreienkamp wrote:
> > Hi everyone,
> >
> > I recently upgraded from 4.3.21 to the Terabithia RPM's for 4.3.27.  I
> > copied this config file verbatim (except for server name) from my old
> > server to my new server:
> >
> >
> > HOST=innocent.in.hq
> >         PORT "LOCAL=%([.:]80)$" MIN=1  TRACK=WWW "TEXT=80-WWW"
> >         PORT "LOCAL=%([.:]55000)$" MIN=0 color=red TRACK=RPC_Clients
> > "TEXT=55000-RPC Client Access Sessions"
> >         SVC MSExchangeADTopology status=started
> >         SVC MSExchangeIS status=started
> >         SVC MSExchangeMailboxAssistants status=started
> >         SVC MSExchangeRPC status=started
> >         SVC MSExchangeSA status=started
> >         DISK J 15728640U 10485760U
> >         DISK L 15728640U 10485760U
> >         DISK M 15728640U 10485760U
> >         DISK N 15728640U 10485760U
> >         DISK S 15728640U 10485760U
> >         DISK T 15728640U 10485760U
> >         DISK %^(1|2|3|4|5|6|7|8|9|0).* IGNORE
> >
> >
> > However, the disk tests are now alerting on 95% full disk instead of on 10
> > gigs remaining space:
> > M (95% used) has reached the PANIC level (95%)
> >
> > To further troubleshoot I commented out all the disk lines and added this
> > entry:
> > DISK * 15728640U 10485760U
> >
> > That didn't make any difference, the disk is still alerting for 95% full.
> > It is parsing and applying the configuration because the port and SVC
> > information is showing up in the web, so I can't understand why the disk
> > test isn't working.
> >
> >
> > This is a key feature for us as we have many servers with multi-terabyte
> > drives, so alerting at percentages doesn't work nearly as well.  The
> > client has not been touched, only the server.
> >
> > Anyone have any ideas?
> >
>
>
> Some possibilities:
>
> Did you wait for xymond_client to reload analysis.cfg after the change?
> Alternatively, did you remove/reorder the DISK sections or comment them
> out in place? It's possible the catchall entry wasn't applied and what was
> actually alerting was the default DISK section.
>
> Can you run xymond_client --dump-config after the change to see what's
> happening?
>
>
> -jc


I commented them out in place and put the catchall entry directly above it.


I ran the dump and grep'd for the server name.  Here are the matching lines:

PORT local=%([.:]80)$ min=1 color=red TRACK=WWW HOST=innocent2.in.hq,innocent.in.hq TEXT=80-WWW (line: 468)
PORT local=%([.:]55000)$ min=0 color=red TRACK=RPC_Clients HOST=innocent2.in.hq,innocent.in.hq TEXT=55000-RPC Client Access Sessions (line: 469)
SVC MSExchangeADTopology status=started color=red HOST=innocent2.in.hq,innocent.in.hq (line: 470)
SVC MSExchangeIS status=started color=red HOST=innocent2.in.hq,innocent.in.hq (line: 471)
SVC MSExchangeMailboxAssistants status=started color=red HOST=innocent2.in.hq,innocent.in.hq (line: 472)
SVC MSExchangeRPC status=started color=red HOST=innocent2.in.hq,innocent.in.hq (line: 473)
SVC MSExchangeSA status=started color=red HOST=innocent2.in.hq,innocent.in.hq (line: 474)
DISK * 15728640U 10485760U 0 -1 red HOST=innocent2.in.hq,innocent.in.hq (line: 475)
DISK %^(1|2|3|4|5|6|7|8|9|0).* IGNORE HOST=innocent2.in.hq,innocent.in.hq (line: 482)


It appears to be understanding the config correctly, but it's still alerting on the percentage:
M (96% used) has reached the PANIC level (95%)
Filesystem    1K-blocks         Used        Avail  Capacity  Mounted    Label      Summary(Total\Avail GB)
M            2115137532   2032580452     82557080        96% /FIXED/M:\ Ret_Mail   2017.15\78.73


Thanks JC!



This message is intended only for the individual or entity to which it is addressed.  It may contain privileged, confidential information which is exempt from disclosure under applicable laws.  If you are not the intended recipient, you are strictly prohibited from disseminating or distributing this information (other than to the intended recipient) or copying this information.  If you have received this communication in error, please notify us immediately by e-mail or by telephone at the above number. Thank you.