[Xymon] Can't clear ghost clients - RESOLVED

[Kris Springer]

I still monitor the ghost machines.  I've just given them different names.
I just checked each host and the name defined in it's xymon client host file
matches the current server host file.  

 

I seem to have been able to fix the issues.  For each one I just added the
CLIENT: option into the server hosts.cfg file.

CLIENT:Buzzard

 

The xymon server seems to want the real hostname of each machine instead of
the name I'm defining in the client config file.  So, I guess a workaround
is to use the CLIENT: option.  I've had to use that also for some special
hosts that I have custom scripts running on.  If I didn't add the CLIENT:
option the data would not post to the server webpage.

 

Thank you.

------------------------------------------------

Kris Springer

 

=======================

 

From: Xymon [mailto:xymon-bounces at xymon.com] On Behalf Of Adam Goryachev
Sent: Tuesday, March 11, 2014 9:57 PM
To: xymon at xymon.com
Subject: Re: [Xymon] Can't clear ghost clients

 

On 12/03/14 15:04, Kris Springer wrote:

I've got 6 ghost clients listed on my server webpage.  I have a clean
hosts.cfg file that definitely does not contain any of the names in the
ghost list.  The ghost names are from many months ago when I first setup the
server.  I've since change the names.  I've attempted to clear the ghosts
using the following commands but it doesn't clear anything.  Buzzard is one
of the hostnames in question.

#cd /usr/lib/xymon/server/bin

#xymon 127.0.0.1 "drop Buzzard"

 

Anyone have a clue as to how to clear old ghosts and/or where to find the
pesky files that are causing it?


ghosts are there *because* you do not have them in your config file. They
are "generated" by clients reporting status with that name. You should be
able to determine where these reports are coming from based on the names
and/or source information on the ghost report. If the client stops
reporting, it will be removed from the ghost report after 5 minutes (I
assume this is actually the timeout value of the status which is usually 5
minutes).

Worst case, you can firewall port 1984 to block the incoming status reports,
or use tcpdump to determine where they are coming from.

Hope this is useful/helpful.

Regards,
Adam

-- 
Adam Goryachev Website Managers www.websitemanagers.com.au

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.xymon.com/pipermail/xymon/attachments/20140312/6058d1a1/attachment.html>