[Xymon] Depends tag working configuration

[Mario]

Hi JC,

Thanks for your comments.

Using non-numerical names for hosts produced the same results.

10.0.0.139 batman # http://paq depends=(http:superman/conn) testip
route:superman
10.0.0.137 superman # http://far testip

Results on your suggestion:

1)batman/http (Down) and superman/conn (Up) --> batman/http (red) (with or
without route:superman gives the same result)

2)batman/http (Down) and batman/conn (down) and superman/conn (Up) -->
batman/http (clear) and batman/conn (red)

Another variation:

10.0.0.139 batman # http://paq depends=(conn:superman/http) testip
route:superman
10.0.0.137 superman # http://far testip

1)batman/conn (Down) and superman/conn (Up) and superman/http (Up)-->
batman/conn (red)



My current challenge is because of the implementation of a network solution
called Ipanema:

>From the site to the data center we have two alternative routes: one
through the MPLS network and one through a DMVPN.
The Ipanema box decides based on rules which path the traffic takes, and
that is on host, port, time of the day, load on the link etc.
For ICMP traffic the network team have configured this in such a way that
only one of the two paths can be used.
If that is down then all ICMP traffic is blocked, even if there is an
alternative path still available.
That mean, if the path used for ICMP is down, we won’t be able to reach the
server using ICMP anymore, but UDP and TCP packages will be rerouted using
the one available link.

My challenge is to have Xymon to test the availability of a server
combining ICMP and TCP (maybe using depends).
We could discard the use of ICMP test and start to use only TCP or maybe
SNMP for availability.
But not use ICMP is something that I wouldn´t like to do.


My idea is that the conn test will alert only if we have a failure in two
tests: ICMP test + TCP test.

For example:
•    Server A is UP, icmp path is down. The result will be ICMP red AND TCP
green = conn test green.
•    Server A is DOWN, icmp path is down . The result will be ICMP red AND
TCP red = conn test red.
•    Server A is DOWN, icmp path is up. The result will be ICMP red AND TCP
red = conn test red.
•    Server A is UP, icmp path is up. The result will be ICMP green AND TCP
green = conn test green.







Thanks & Regards,
Mario








On Mon, Apr 4, 2016 at 8:19 PM, J.C. Cleaver <cleaver at terabithia.org> wrote:

>
> I believe the core issue is that ping (conn) testing is reconciled in a
> different manner from the standard TCP tests. The following should work
> for you. It should cause http on 6030 to keep from going red when 5030 is
> un-pingable:
>
> > 10.0.0.139  6030 # http://paq depends=(http:5030/conn) route:5030 testip
> > 10.0.0.137  5030 # http://fara testip
>
> If you don't have a specific reason to handle ICMP and TCP differently,
> you may find it easier to simply run 'noconn' on pure URL hits like this,
> especially if these are actually pointing to a common load balancer, or
> there's another interconnected dependency layer there.
>
> If this doesn't work, it's possible that there's something being
> mis-parsed, perhaps with all-numeric hostnames... :/ Would you be able to
> try the same setup with a different set of hosts and see if it works?
>
>
> I'll see if there's an easy way to have dependency apply in conn parsing
> as well, but this may be something that's easier to handle with a general
> revamp to dependency tracking as a 'host down' function centrally as
> discussed earlier.
>
>
> HTH,
> -jc
>
>
> On Mon, April 4, 2016 1:51 pm, Scot Kreienkamp wrote:
> > I have never tried the depends tag with conn test so I can’t comment on
> > whether it would work or not.  However, as it is a network test it should
> > to the best of my knowledge.
> >
> > In this scenario if the http://fara test is returning red and the
> > http://paq test returns red as well, then the http test on 6030 should
> > turn clear.  This is saying the 6030:HTTP test (http://paq) depends on
> the
> > success of the 5030:HTTP test (http://fara).  So if both fail then the
> > 6030:HTTP test should turn clear because the HTTP test on 6030 and 5030
> > have both failed.  The depends tag does nothing if the test it depends on
> > is green/OK status, so if the 5030:HTTP test (http://fara) is green/OK,
> > then 6030 will show it’s true unmodified status.
> >
> >
> >
> > Scot Kreienkamp  | Senior Systems Engineer | La-Z-Boy Corporate
> > One La-Z-Boy Drive | Monroe, Michigan 48162 | Office: 734-384-6403 | |
> > Mobile: 7349151444 | Email: Scot.Kreienkamp at la-z-boy.com
> > From: Mario [mailto:rower.master at gmail.com]
> > Sent: Monday, April 04, 2016 4:13 PM
> > To: Scot Kreienkamp <Scot.Kreienkamp at la-z-boy.com>
> > Cc: xymon at xymon.com
> > Subject: Re: [Xymon] Depends tag working configuration
> >
> > Scot,
> > My logic is confused now.
> > http test:
> > 10.0.0.139  6030 # http://paq depends=(http:5030/http) testip
> > 10.0.0.137  5030 # http://fara  testip
> > Stopping apache http://paq gives on xymon the correct clear status on
> > 6030/http:
> >
> > 6030 - http
> >
> > [clear]http://paq/ - Connection refused
> >
> >
> >
> > This test depends on the following test(s) that failed:
> >
> >
> >
> > 5030/http
> >
> >
> >
> >
> >
> >
> >
> > Seconds: 0.002152000
> >
> > In my head, changing http to conn on depends tag and "removing" 6030
> > network cable should produce a 6030/conn to go clear, considering
> > 5030/conn as up.
> > If both are down, ok, both goes red.
> > In my tests conn test doesn´t work with depends tag.
> >
> > Thanks & Regards,
> > Mario
> >
> >
> >
> >
> > On Mon, Apr 4, 2016 at 4:49 PM, Scot Kreienkamp
> > <Scot.Kreienkamp at la-z-boy.com<mailto:Scot.Kreienkamp at la-z-boy.com>>
> > wrote:
> > “In my example, when the conn test was failing on 6030 and as the conn
> > test was ok/up on 5030 then the correct status for 6030/conn should be
> > clear and not red, right?”
> >
> > No.  If the conn test on 5030 is OK then the conn test on 6030 should be
> > red if it is not pingable or green if it is.  The status on 6030:conn is
> > only modified if 6030:conn AND 5030:conn is red.
> > From: Mario
> > [mailto:rower.master at gmail.com<mailto:rower.master at gmail.com>]
> > Sent: Monday, April 04, 2016 3:45 PM
> > To: Scot Kreienkamp
> > <Scot.Kreienkamp at la-z-boy.com<mailto:Scot.Kreienkamp at la-z-boy.com>>
> > Cc:xymon at xymon.com<mailto:xymon at xymon.com>
> > Subject: Re: [Xymon] Depends tag working configuration
> >
> > Hello Scot,
> > Yes, I know the route tag and I already use it here for the upstream
> > cases.
> > But my necessity here is to have a dependency between some networks
> tests,
> > for example, conn/ssh, conn/smtp, conn/http.
> > In my example, when the conn test was failing on 6030 and as the conn
> test
> > was ok/up on 5030 then the correct status for 6030/conn should be clear
> > and not red, right?
> >
> > 10.0.0.139  6030 # http://paq depends=(conn:5030/conn) testip
> > 10.0.0.137  5030 # http://fara  testip
> >
> > I´ve made some tests and it seems that the depends tag do not works with
> > any conn configuration.
> > Does not matter the "position" on the tag, depends=(conn:5030/http),
> > depends=(http:5030/conn) or depends=(conn:5030/conn), any of this works.
> > I´ve read some old emails on the list with the same question on "depends
> > & conn" but without a solution.
> >
> > Thanks & regards,
> > Mario
> >
> >
> > On Mon, Apr 4, 2016 at 4:15 PM, Scot Kreienkamp
> > <Scot.Kreienkamp at la-z-boy.com<mailto:Scot.Kreienkamp at la-z-boy.com>>
> > wrote:
> > Mario,
> >
> > If I’m understanding your email correctly, you changed the IP on 6030 to
> > a non-pingable address, correct?  If so, then you are performing your
> test
> > incorrectly.  The tag you posted means that 6030 depends on 5030, but to
> > test it you changed the IP on 6030 only.  To test it with the tag you
> > posted, 5030 and 6030 must BOTH be non-pingable.  In that scenario the
> > conn test on 6030 should change to clear.
> >
> > Also, if you only want a connectivity test then you may be looking at the
> > wrong tag.  Look up the route tag that goes in hosts.cfg and see if that
> > will give you what you want.
> > From: Mario
> > [mailto:rower.master at gmail.com<mailto:rower.master at gmail.com>]
> > Sent: Monday, April 04, 2016 3:09 PM
> > To: Scot Kreienkamp
> > <Scot.Kreienkamp at la-z-boy.com<mailto:Scot.Kreienkamp at la-z-boy.com>>;
> > xymon at xymon.com<mailto:xymon at xymon.com>
> > Subject: Re: [Xymon] Depends tag working configuration
> >
> > Hi Scot,
> > Thanks for your help.
> > I´ve used your example and the dependency worked using the http test.
> > So then, I´ve changed the depends tag configuration to use the conn test
> > and this didn't work.
> > First test (worked as expected!):
> > - Stopping apache on "6030" the result was a clear status on 6030/http as
> > 5030/http was up.
> >
> > 0.0.0.0  6030 # http://paq depends=(http:5030/http) noconn
> > 0.0.0.0  5030 # http://fara  noconn
> >
> > Second test (connectivity configuration on depends): This test didn´t
> > work.
> > - I´ve changed the IP from 6030 to a non pingable IP and let an
> > available/online IP on "5030" and the depends tag didn´t work.
> > 10.0.0.139  6030 # http://paq depends=(conn:5030/conn) testip
> > 10.0.0.137  5030 # http://fara  testip
> > Do you have a dependency configuration based on connectivity test working
> > on your system?
> >
> > Thanks & Regards,
> > Mario
> >
> >
> >
> >
> >
> >
> >
> > On Mon, Mar 28, 2016 at 4:45 PM, Scot Kreienkamp
> > <Scot.Kreienkamp at la-z-boy.com<mailto:Scot.Kreienkamp at la-z-boy.com>>
> > wrote:
> > Sure.  Here is a working config:
> >
> >
> > 0.0.0.0    6030 # http:// 6030:8090/Main/ depends=(http:5030/http)
> > 0.0.0.0  5030 # http://5030
> >
> > So I’ve defined an HTTP test on 5030 and 6030, and set the HTTP test
> > result on 6030 to depend on the HTTP test on 5030.  In my case, 5030 is
> > the DB server and serves up a web page if the database is up.  If the
> > database is down there’s no way the HTTP test will succeed on 6030, so I
> > don’t really care if 6030 is alerting me in that case.
> >
> > If you have any more trouble it would be helpful to see your
> > configuration.  I saw you mention ICMP earlier… keep in mind that
> > depends sets a test dependent on another test, so if you want ICMP you
> > have to set it to depend on the conn test.  You can’t use ICMP in the
> > depends.  It has to be a column name.
> > From: Xymon
> > [mailto:xymon-bounces at xymon.com<mailto:xymon-bounces at xymon.com>] On
> Behalf
> > Of Mario
> >
> > Sent: Monday, March 28, 2016 3:04 PM
> > To:xymon at xymon.com<mailto:xymon at xymon.com>
> > Subject: Re: [Xymon] Depends tag working configuration
> >
> > Hi,
> > Thanks, Scot.
> > Yes, that´s what I´m doing here.
> > The test configuration was done with only core network tests and that are
> > directly running on the core server and it´s not working.
> > Do you have this configuration working on your server? Could you share
> > it?
> > Thanks & Regards,
> > Mario
> >
> >
> >
> >
> >
> >
> >
> >
> >
> > On Mon, Mar 28, 2016 at 3:43 PM, Scot Kreienkamp
> > <Scot.Kreienkamp at la-z-boy.com<mailto:Scot.Kreienkamp at la-z-boy.com>>
> > wrote:
> > The depends tag works, but only for tests done by the core network tester
> > itself.  It will not work on any external tests.
> > From: Xymon
> > [mailto:xymon-bounces at xymon.com<mailto:xymon-bounces at xymon.com>] On
> Behalf
> > Of Mario
> > Sent: Monday, March 28, 2016 2:41 PM
> > To:xymon at xymon.com<mailto:xymon at xymon.com>
> > Subject: [Xymon] Depends tag working configuration
> >
> > Hi All,
> > I´m trying to make the "depends=" hosts.cfg tag to work on Xymon version
> > 4.3.24.
> > Reading some old threads here, it became not clear to me if this
> > configuration tag currently works or not.
> > Has someone here have the depends tag working?
> > I know I can use the route tag, but my intention it´s to use another
> > network protocol and not ICMP for the dependency.
> >
> >
> > Thanks & Regards,
> > Mario
> >
> >
> >
> > This message is intended only for the individual or entity to which it is
> > addressed.  It may contain privileged, confidential information which is
> > exempt from disclosure under applicable laws.  If you are not the
> intended
> > recipient, you are strictly prohibited from disseminating or distributing
> > this information (other than to the intended recipient) or copying this
> > information.  If you have received this communication in error, please
> > notify us immediately by e-mail or by telephone at the above number.
> Thank
> > you.
> >
> >
> >
> >
> > _______________________________________________
> > Xymon mailing list
> > Xymon at xymon.com
> > http://lists.xymon.com/mailman/listinfo/xymon
> >
>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.xymon.com/pipermail/xymon/attachments/20160405/a1c46b04/attachment.html>