[Xymon] Xymond Multi-source statuses

Rich Jones rich at corporationpop.co.uk
Fri May 11 14:40:51 CEST 2018


I do have a few custom scripts in my tasks.cfg, nothing that would really
affect it though I wouldn't think..

# "storestatus" saves status-logs in text- and html-format, like the old
Big Brother
# daemon does. Unless you are using add-ons that directly access the
log-files, you
# will not need to run this module, and it is recommended that you keep it
disabled
/usr/local/xymon/server/bin/xymoncmd /usr/local/xymon/server/ext/wpscan.sh#
since storing the raw logs on disk can cause a significant load on your
server.
[storestatus]
        DISABLED
        ENVFILE /usr/local/xymon/server/etc/xymonserver.cfg
        NEEDS xymond
        CMD xymond_channel --channel=status
--log=$XYMONSERVERLOGS/status.log xymond_filestore --status --html

# "storedata" saves information sent using the BB "data" protocol, like the
old Big Brother
# daemon does. Unless you are using add-ons that directly access the
data-files, you
# will not need to run this module, and it is recommended that you keep it
disabled
# since storing the raw data on disk can cause a significant load on your
Xymon server.
# RRD graphs uses data-files, but since RRD is handled by the xymond_rrd
module, you do
# not need to run the "storedata" module to get RRD graphs.
[storedata]
        DISABLED
        ENVFILE /usr/local/xymon/server/etc/xymonserver.cfg
        NEEDS xymond
        CMD xymond_channel --channel=data   --log=$XYMONSERVERLOGS/data.log
xymond_filestore --data

# "storeenadis" updates the files used to indicate that a host or test has
been enabled or disabled.
# Unless you are running server side scripts that look at these files, you
do not need this.
[storeenadis]
        DISABLED
        ENVFILE /usr/local/xymon/server/etc/xymonserver.cfg
        NEEDS xymond
        CMD xymond_channel --channel=enadis
--log=$XYMONSERVERLOGS/enadis.log xymond_filestore --enadis

# "storenotes" saves web note-files, that are sent using the BB "notes"
protocol. This is
# disabled by default; if you use the Big Brother "notes" protocol, then
you should enable this.
[storenotes]
        DISABLED
        ENVFILE /usr/local/xymon/server/etc/xymonserver.cfg
        NEEDS xymond
        CMD xymond_channel --channel=notes
--log=$XYMONSERVERLOGS/notes.log xymond_filestore --notes


[wpscan]
        ENVFILE /usr/local/xymon/server/etc/xymonserver.cfg
        CMD /usr/local/xymon/server/ext/wpscan.sh
        LOGFILE $XYMONSERVERLOGS/wpscan.log
        CRONDATE 0 10 * * 2

[observatory]
        ENVFILE /usr/local/xymon/server/etc/xymonserver.cfg
        CMD /usr/local/xymon/server/ext/observatory.sh
        LOGFILE $XYMONSERVERLOGS/observatory.log
        CRONDATE 0 10 * * 3

[sslcert2]
        ENVFILE /usr/local/xymon/server/etc/xymonserver.cfg
        CMD /usr/local/xymon/server/ext/ssl-fix-xymon.sh
        LOGFILE $XYMONSERVERLOGS/ssl-fix-xymon.log
        INTERVAL 1d



*Rich Jones* | Systems Developer
Corporation Pop
21-23 Shudehill
Manchester M4 2AF
0161 838 0808
www.corporationpop.co.uk
This email message (and any attached file) is intended only for the use of
the individual or entity to whom the sender intended it to be addressed and
may contain information that constitutes a trade secret, or that is
privileged, confidential or subject to copyright. No part of it may be
circulated, quoted, or reproduced without prior written approval from
Corporation Pop Ltd. The contents of this document are strictly
confidential and owned by Corporation Pop Ltd. Copyright © Corporation Pop
Ltd. All rights reserved. Corporation Pop is a limited company registered
in England + Wales. Company number 4869229. VAT number 533 8932 26.

On 11 May 2018 at 13:26, Root, Paul T <Paul.Root at centurylink.com> wrote:

> What processes do you have running owned by xymon?
>
>
>
> What is in your tasks.cfg file?
>
>
>
> *From:* Xymon <xymon-bounces at xymon.com> *On Behalf Of *Rich Jones
> *Sent:* Friday, May 11, 2018 7:23 AM
>
> *To:* xymon at xymon.com
> *Subject:* Re: [Xymon] Xymond Multi-source statuses
>
>
>
> No, if I ever need to restart the server I manually start the server with
> the following:
>
> sudo su xymon
>
> /usr/local/xymon/server/bin/xymon.sh start
>
> Checking top only shows one instance of the xymond_client
>
> I have just found the following in the server client xymonclient.cfg,
> though I don't think that helps much
>
> XYMSRV="**.***.226.227"
>
> XYMSERVERS=""
>
>
> *Rich Jones* | Systems Developer
>
> Corporation Pop
> 21-23 Shudehill
> <https://maps.google.com/?q=21-23+Shudehill+%0D%0AManchester+M4+2AF&entry=gmail&source=g>
> Manchester M4 2AF
> 0161 838 0808
>
> www.corporationpop.co.uk
>
> This email message (and any attached file) is intended only for the use of
> the individual or entity to whom the sender intended it to be addressed and
> may contain information that constitutes a trade secret, or that is
> privileged, confidential or subject to copyright. No part of it may be
> circulated, quoted, or reproduced without prior written approval from
> Corporation Pop Ltd. The contents of this document are strictly
> confidential and owned by Corporation Pop Ltd. Copyright © Corporation Pop
> Ltd. All rights reserved. Corporation Pop is a limited company registered
> in England + Wales. Company number 4869229. VAT number 533 8932 26.
>
>
>
> On 11 May 2018 at 13:16, Root, Paul T <Paul.Root at centurylink.com> wrote:
>
> The xymon server starts the xymon client on that machine.
>
>
>
> Do you possibly start xymonclient separately as well?
>
>
>
> *From:* Xymon <xymon-bounces at xymon.com> *On Behalf Of *Rich Jones
> *Sent:* Friday, May 11, 2018 6:43 AM
> *To:* xymon at xymon.com
> *Subject:* Re: [Xymon] Xymond Multi-source statuses
>
>
>
> That makes a lot of sense indeed,
> Checking xymonserver.cfg however seems to be correct:
>
> XYMONSERVERHOSTNAME="my.xymon.url"
>
> XYMONSERVERIP="**.***.226.227"
>
> XYMONSERVEROS="linux"
>
> XYMSRV="$XYMONSERVERIP"
>
> I don't actually see XYMSERVERS in the xymonserver.cfg though
>
>
>
>
> *Rich Jones* | Systems Developer
>
> Corporation Pop
> 21-23 Shudehill
> <https://maps.google.com/?q=21-23+Shudehill+%0D%0AManchester+M4+2AF&entry=gmail&source=g>
> Manchester M4 2AF
> 0161 838 0808
>
> www.corporationpop.co.uk
>
> This email message (and any attached file) is intended only for the use of
> the individual or entity to whom the sender intended it to be addressed and
> may contain information that constitutes a trade secret, or that is
> privileged, confidential or subject to copyright. No part of it may be
> circulated, quoted, or reproduced without prior written approval from
> Corporation Pop Ltd. The contents of this document are strictly
> confidential and owned by Corporation Pop Ltd. Copyright © Corporation Pop
> Ltd. All rights reserved. Corporation Pop is a limited company registered
> in England + Wales. Company number 4869229. VAT number 533 8932 26.
>
>
>
> On 11 May 2018 at 00:57, Jeremy Laidman <jeremy at laidman.org> wrote:
>
> On 9 May 2018 at 02:14, Rich Jones <rich at corporationpop.co.uk> wrote:
>
> Hi all,
>
> Another one of those things I keep meaning to ask but keep on forgetting...
> I'm seeing under the xymond column the following:
>
> Multi-source statuses
>
>   xymon.url.com:cpu reported by 127.0.0.1 and xx.xxx.226.227
>
>   xymon.url.com:disk reported by 127.0.0.1 and xx.xxx.226.227
>
>   xymon.url.com:files reported by 127.0.0.1 and xx.xxx.226.227
>
>   xymon.url.com:inode reported by 127.0.0.1 and xx.xxx.226.227
>
>   xymon.url.com:memory reported by 127.0.0.1 and xx.xxx.226.227
>
>   xymon.url.com:msgs reported by 127.0.0.1 and xx.xxx.226.227
>
>   xymon.url.com:ports reported by 127.0.0.1 and xx.xxx.226.227
>
>   xymon.url.com:procs reported by 127.0.0.1 and xx.xxx.226.227
>
>   xymon.url.com:uptime reported by 127.0.0.1 and xx.xxx.226.227
>
> Looking through the archive it makes sense, Xymon is receiving data from
> two sources, which I guess it is, however the two IPs are localhost and the
> server IP address.
>
> I'm guessing this is likely to do with how the things are setup on the
> server rather than Xymon itself (eg in /etc/hosts)?
>
> Can someone point me in the right direction to resolve this? I'm running
> Xymon 4.3.28
>
>
>
> It appears that the Xymon server is reporting to itself twice, using its
> network IP address and the loopback address. The Xymon client that
> generates the client data messages (from where these metrics come) will use
> the $XYMSRV environment variable, and send to whatever IP address is
> defined therein. Sometimes this is set to "0.0.0.0" which tells the Xymon
> client to look at $XYMSERVERS as a list of multiple destinations. I suspect
> you have XYMSERVERS="127.0.0.1 xx.xxx.226.227". On a Xymon server these
> variables are is set in xymonserver.cfg.
>
>
>
> J
>
>
>
>
>
> This communication is the property of CenturyLink and may contain
> confidential or privileged information. Unauthorized use of this
> communication is strictly prohibited and may be unlawful. If you have
> received this communication in error, please immediately notify the sender
> by reply e-mail and destroy all copies of the communication and any
> attachments.
>
>
> This communication is the property of CenturyLink and may contain
> confidential or privileged information. Unauthorized use of this
> communication is strictly prohibited and may be unlawful. If you have
> received this communication in error, please immediately notify the sender
> by reply e-mail and destroy all copies of the communication and any
> attachments.
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.xymon.com/pipermail/xymon/attachments/20180511/37bc949f/attachment.html>


More information about the Xymon mailing list