[Xymon] Frequent purple alerts

[Timothy Williams]

In my xymonclient_config.xml file I specify the logs to be generated in
C:\Logs <clientlogfile>c:\Logs\xymonclient.log</clientlogfile>. Yours may
be in folder with script.
Look at the xymonclient.log file which contains the transmission data. Look
for the size of the Sent file. If your buffers are set too low on Xymon
server, data file gets truncated, usually causing White, not purple.

2019-07-10 12:28:43.087  Sending to server
2019-07-10 12:28:43.087  Using "original" ASCII encoding
2019-07-10 12:28:43.087  Connecting to host 128.172.5.33
2019-07-10 12:28:43.103  Sent 54761 bytes to server
2019-07-10 12:28:43.309  Received 436 bytes from server

Tim Williams

On Wed, Jul 10, 2019 at 12:23 PM Jaime Kikpole via Xymon <xymon at xymon.com>
wrote:

>
>
>
> ---------- Forwarded message ----------
> From: Jaime Kikpole <jkikpole at cairodurham.org>
> To: "Root, Paul T" <Paul.Root at centurylink.com>
> Cc: "xymon at xymon.com" <xymon at xymon.com>
> Bcc:
> Date: Wed, 10 Jul 2019 12:21:42 -0400
> Subject: Re: Frequent purple alerts
> On Wed, Jul 10, 2019 at 11:44 AM Root, Paul T <Paul.Root at centurylink.com>
> wrote:
>
>> This could be the network is too congested.
>>
>
> That seems unlikely.  The Xymon server and clients are all on one of two
> VM clusters, so there aren't a lot of "hops" and the bandwidth is very high.
>
> The Xymon client is one of two AD controllers, named dir1 and dir2.  The
> one with purple alerts is dir2.  On dir1, we also have .1x authentication,
> but they're otherwise pretty much the same.  Their biggest difference is
> RAM:  8GB for dir1 and 4GB for dir2.  Do you think I should increase the
> RAM?  Other than leaving Task Manager open at all times and hoping to catch
> it as soon as the purple alert occurs, I'm not sure how to check if it's
> running out of RAM.
>
>
>
>> Or the computer is overloaded. Or even that it is sending messages that
>> are too big (a frequent Windows problem in my experience – log files get so
>> big).
>>
>>
> Any way to check on the log size?
>
>
>
>> Does it go purple for 1 minute, 5 minutes, 30 minutes?
>>
>
> I just looked at the log.  The purple alert durations are roughly 40
> minutes each during the last three occasions.
>
> If it helps, this server is an Active Directory domain controller, but it
> is one of two and the other one (a) has more stuff running on it, such as
> .1x authentication for our wifi and (b) isn't having this issue.
>
> Thanks for the advice!
>
>
>
>
> Jaime Kikpole
>
> Director of Technology & Innovations
> Cairo-Durham Central School District
> (518) 622-8543, x59500
> cairodurham.org <http://www.cairodurham.org>
>
> Technical Support:
> help at cairodurham.org
> go.cairodurham.org/techtips
>
> [image: Google Certified Educator, Level 1] [image: Google Certified
> Educator, Level 2]
>
>
>
> This electronic message and any attachment(s) may contain confidential or
> legally privileged information protected by law from further disclosure and
> is intended only for the individual or entity identified above as the
> addressee. If you are not the addressee (or the employee or agency
> responsible to deliver it to the addressee), or if this message has been
> addressed to you in error, you are hereby notified that you may not copy,
> forward, disclose or use any part of this message or any attachment(s).
> Please notify the sender immediately by return email or telephone and
> permanently delete this message and attachment(s) from your system.
>
>
> ---------- Forwarded message ----------
> From: Jaime Kikpole via Xymon <xymon at xymon.com>
> To: "Root, Paul T" <Paul.Root at centurylink.com>
> Cc: "xymon at xymon.com" <xymon at xymon.com>
> Bcc:
> Date: Wed, 10 Jul 2019 12:21:42 -0400
> Subject: Re: [Xymon] Frequent purple alerts
> _______________________________________________
> Xymon mailing list
> Xymon at xymon.com
> http://lists.xymon.com/mailman/listinfo/xymon
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.xymon.com/pipermail/xymon/attachments/20190710/931ddb30/attachment.html>