[Xymon] files external wth server side processing?

[Scot Kreienkamp]

David,

The only difference I could find after a few hours of trying different things is that your "dir:" entry is lower case.  Apparently BBWin will only accept that line if it is lower case, when I tried that with mine it started working.

Also I noticed a typo in a few other lines in my analysis.cfg that were causing errors, so thank for sending your config.  That helped immensely.

Scot Kreienkamp
skreien at la-z-boy.com

From: David Baldwin [mailto:david.baldwin at ausport.gov.au]
Sent: Monday, March 05, 2012 6:08 PM
To: Scot Kreienkamp
Cc: xymon at xymon.com
Subject: Re: [Xymon] files external wth server side processing?

Scot,
Hey everyone…

Since the BBWin client does not do files checking,
But it does... Following works for me:

client-local.cfg
[win32]
dir:C:\Windows\Temp
log:c:\WINDOWS\WindowsUpdate.log:20480

clients.cfg
CLASS=win32
        DIR C:\Windows\Temp yellow SIZE<200000 TRACK=C-Windows-Temp
        DIR C:\Windows\Temp red SIZE<500000
        LOAD 90 97 # Load thresholds are in %
        PORT LOCAL=%(\*|::|0.0.0.0):135 STATE=%LISTEN "TEXT=epmap listener"
        PORT LOCAL=%.*:135 STATE=ESTABLISHED MIN=0 TRACK=epmap "TEXT=epmap connection"
        PORT REMOTE=%[.:]389 STATE=%ESTABLISHED MIN=0 TRACK=LDAPc "TEXT=LDAP client connection"
        PORT LOCAL=%(\*|::|0.0.0.0):445$ STATE=%LISTEN "TEXT=NTDS listener"
        PORT LOCAL=%.*:445$ MIN=0 STATE=%ESTABLISHED TRACK=NTDS "TEXT=NTDS connection"
        PORT LOCAL=%(\*|::|0.0.0.0):3389 STATE=%LISTEN "TEXT=RDP listener"
        PORT LOCAL=%[.:]3389 STATE=%ESTABLISHED MIN=0 TRACK=RDP "TEXT=RDP connection"
        PROC System 1 -1
        SVC "%[Ee]ventlog" startup=automatic status=started
        SVC "Schedule" startup=%.* status=started COLOR=yellow
        SVC "SNMP" startup=automatic status=started
        SVC "%(?i)Winmgmt" startup=%.* status=started COLOR=yellow
        SVC "W32Time" startup=%.* status=started
        LOG "%.*WindowsUpdate.log"  "%FATAL" COLOR=red
        LOG "%.*WindowsUpdate.log"  "%WARNING" COLOR=yellow IGNORE="%Cached cookie has expired or new PID is available"


if I make an external that submits files and directory information the same as the client would, would the Xymon server process it server side?  Or would I need to do a full client side check?
It would be nice to be able to have BBWin run a script that included extra sections in the client report.

You can kind of get away with having alternating multiple client reports with different info, preferably mutually exclusive sections - the client channel listener converts various sections into status reports - if a section is missing then it just doesn't generate any update. The "Client data" link will be a bit random depending on what is the most recently received report.

David.


IE, I send in a message like so:
client TEST01.bbwin win32
[dir:D:\test]
14888 D:\test

Will that be processed in the server side channels?  I'm trying to avoid doing a full client side check so I can make this as generic as possible for use with BBWin in central mode.

Thanks!

Scot Kreienkamp
skreien at la-z-boy.com<mailto:skreien at la-z-boy.com>




--

David Baldwin - Senior Systems Administrator (Datacentres + Networks)

Information and Communication Technology Services

Australian Sports Commission          http://ausport.gov.au

Tel 02 62147830 Fax 02 62141830       PO Box 176 Belconnen ACT 2616

david.baldwin at ausport.gov.au<mailto:david.baldwin at ausport.gov.au>          Leverrier Street Bruce ACT 2617

________________________________
Keep up to date with what's happening in Australian sport visit www.ausport.gov.au<http://www.ausport.gov.au>

This message is intended for the addressee named and may contain confidential and privileged information. If you are not the intended recipient please note that any form of distribution, copying or use of this communication or the information in it is strictly prohibited and may be unlawful. If you receive this message in error, please delete it and notify the sender.
________________________________



This message is intended only for the individual or entity to which it is addressed. It may contain privileged, confidential information which is exempt from disclosure under applicable laws. If you are not the intended recipient, please note that you are strictly prohibited from disseminating or distributing this information (other than to the intended recipient) or copying this information. If you have received this communication in error, please notify us immediately by e-mail or by telephone at the above number. Thank you.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.xymon.com/pipermail/xymon/attachments/20120306/b65483fd/attachment.html>