On Mar 10, 2016, at 5:00 AM, xymon-request at xymon.com wrote:
Send Xymon mailing list submissions to
To subscribe or unsubscribe via the World Wide Web, visit
or, via email, send a message with subject or body 'help' to
You can reach the person managing the list at
When replying, please edit your Subject line so it is more specific
than "Re: Contents of Xymon digest..."
Today's Topics:
1. PORTS and STATE syntax (Boldt, David)
2. Re: jmxstat (Andy Smith)
3. The testip option does not seem to be honored by the http
test (Shawn Heisey)
4. Re: The testip option does not seem to be honored by the http
test (John Thurston)
5. How to change the refresh time for acknowledgements (john boris)
6. Re: How to change the refresh time for acknowledgements
(Ryan Novosielski)
7. Re: How to change the refresh time for acknowledgements
(Ryan Novosielski)
8. Re: How to change the refresh time for acknowledgements
(john boris)
9. Re: jmxstat (Galen Johnson)
10. Always purple history after time shift on server - how to fix
(Andrey Chervonets)
Message: 1
Date: Wed, 9 Mar 2016 09:09:16 -0500
From: "Boldt, David" <user-945c7be1b8e4@xymon.invalid>
To: <xymon at xymon.com>
Subject: [Xymon] PORTS and STATE syntax
Message-ID:
<user-8dd397f479b7@xymon.invalid>
Content-Type: text/plain; charset="UTF-8"
I'm not successful filtering on the connection state associated with a port.
None of the syntax variations I have tried have been successful.
If I remove the STATE specifier, matches are found.
There are multiple hosts connecting to the same port:
ESTAB 0 0 10.160.8.130:61617 10.160.8.132:57765
ESTAB 0 0 10.160.8.130:61617 10.160.8.132:57766
ESTAB 0 0 10.160.8.130:61617 10.160.8.132:57768
ESTAB 0 0 10.160.8.130:61617 10.160.8.133:45096
ESTAB 0 0 10.160.8.130:61617 10.160.8.133:45104
ESTAB 0 0 10.160.8.130:61617 10.160.8.133:45107
ESTAB 0 0 10.160.8.130:61617 130.118.4.2:36141
ESTAB 0 0 10.160.8.130:61617 130.118.4.2:36150
ESTAB 0 0 10.160.8.130:61617 130.118.4.2:36151
ESTAB 0 0 10.160.8.130:61617 136.177.16.3:34320
ESTAB 0 0 10.160.8.130:61617 136.177.16.3:34321
ESTAB 0 0 10.160.8.130:61617 136.177.16.3:34324
ESTAB 0 0 10.160.8.130:61617 137.227.240.32:50726
ESTAB 0 0 10.160.8.130:61617 137.227.240.32:50727
ESTAB 0 0 10.160.8.130:61617 137.227.240.32:50729
LISTEN 0 0 *:61617 *:*
I've set up several port monitoring specifications, but none of them
match the state (the first example where no state is specified
succeeds):
PORT LOCAL=%[:](61617) REMOTE=%10.160.8.132 MIN=3 MAX=3 COLOR=yellow
TEXT=ActiveMQ-DHCP
PORT LOCAL=%[:](61617) REMOTE=%10.160.8.133 STATE=ESTABLISHED MIN=3
MAX=3 COLOR=yellow TEXT=ActiveMQ-nsp.er
PORT LOCAL=%[:](61617) REMOTE=%136.177.16.3 STATE=ESTAB MIN=3 MAX=3
COLOR=yellow TEXT=ActiveMQ-ns.cr
PORT LOCAL=%[:](61617) REMOTE=%137.227.240.32 STATE=%ESTAB MIN=3 MAX=3
COLOR=yellow TEXT=ActiveMQ-ns.er
PORT LOCAL=%[:](61617) REMOTE=%130.118.4.2 STATE=%ESTAB* MIN=3
MAX=3 COLOR=yellow TEXT=ActiveMQ-ns.wr
Note: On this server netstat does not exist and ss is being used,.
Observation: Discovering the syntax for REMOTE was trial and error.
Specifying the IP address alone did not work, and I found no examples
for the type of filtering above.
--
-- David Boldt
<user-945c7be1b8e4@xymon.invalid>
"Discovery consists of seeing what everybody has seen and thinking
what nobody has thought."
--Albert Szent-Gyorgyi (1893 - 1986)
Message: 2
Date: Wed, 9 Mar 2016 16:36:44 +0000
From: Andy Smith <user-982f5f6d4d28@xymon.invalid>
To: Galen Johnson <user-87f955643e3d@xymon.invalid>, "xymon at xymon.com"
<xymon at xymon.com>
Subject: Re: [Xymon] jmxstat
Message-ID:
<CAFz9LfvL-9XVo5BOui2oDy4XXqRPmajP-yhAyfEfrObzxB6Y=user-4e0f9cdb28f9@xymon.invalid>
Content-Type: text/plain; charset=UTF-8
---------- Forwarded message ----------From: Galen Johnson <user-87f955643e3d@xymon.invalid>
Date: 9 March 2016 at 00:26
Subject: [Possible Spam] [Xymon] jmxstat
To: "xymon at xymon.com" <xymon at xymon.com>
Hey,
I don't think this is specific to jmxstat but I'm trying to implement. I'm getting the > following in apache log when I hit the page:
Setup error: Service GCInfo has a graph GCInfo, but no graph-definition,...
However, the definition does exist and I can view the graphs if I select a different > > service and change the name in the URL. RRDs are being created.
Anyone else run into this and overcome it?
thanks
Not seen that before, but just check for me please, is GCInfo mentioned in
both TEST2RRD and GRAPHS in xymonserver.cfg?
--
Andy
Message: 3
Date: Wed, 9 Mar 2016 10:53:08 -0700
From: Shawn Heisey <user-5d0d01dba542@xymon.invalid>
To: xymon at xymon.com
Subject: [Xymon] The testip option does not seem to be honored by the
http test
Message-ID: <user-fe60cb80d9f4@xymon.invalid>
Content-Type: text/plain; charset=utf-8
I have the following in my hosts.cfg file:
10.100.2.131 fourqueens.REDACTED.com # testip ssh
mgmt=10.2.6.131[http,https,ssh] https://megaagency.REDACTED.com
delayred=http:10
10.100.2.132 fitzgeralds.REDACTED.com # testip ssh
mgmt=10.2.6.132[http,https,ssh] https://megaagency.REDACTED.com
delayred=http:10
The "mgmt" option controls a custom server-side script we wrote that
verifies reachability of the out-of-band server management (Dell DRAC in
this case).
I had expected the "testip" option to force the https URL test to be
sent directly to the server, not the DNS address (which is a load
balancer), but I can see the load balancer cookie in the response and
requests in the load balancer's log.
Is there any way to get the intended behavior?
The server is running 4.3.23 with the patch to fix http response code
interpretation.
Thanks,
Shawn
Message: 4
Date: Wed, 09 Mar 2016 09:00:09 -0900
From: John Thurston <user-ce4d79d99bab@xymon.invalid>
To: xymon at xymon.com
Subject: Re: [Xymon] The testip option does not seem to be honored by
the http test
Message-ID: <user-ac139826d993@xymon.invalid>
Content-Type: text/plain; CHARSET=US-ASCII; format=flowed
On 3/9/2016 8:53 AM, Shawn Heisey wrote:
- snip -
I had expected the "testip" option to force the https URL test to be
sent directly to the server, not the DNS address (which is a load
balancer), but I can see the load balancer cookie in the response and
requests in the load balancer's log.
The TESTIP controls the behavior of the CONN test. To make the HTTP test
use an IP address instead of resolving the name, use the following syntax:
http://www.sample.com=1.2.3.4/index.html
From the hosts.cfg man page:
Testing sites by IP-address
xymonnet ignores the "testip" tag normally used to force a test to use the IP-address from the hosts.cfg file instead of the hostname, when it performs http and https tests.
The reason for this is that it interacts badly with virtual hosts, especially if these are IP-based as is common with https-websites.
Instead the IP-address to connect to can be overridden by specifying it as:
http://www.sample.com=1.2.3.4/index.html
The "=1.2.3.4" will case xymonnet to run the test against the IP-address "1.2.3.4", but still trying to access a virtual website with the name "www.sample.com".
The "=ip.address.of.host" must be the last part of the hostname, so if you need to combine this with e.g. an explicit port number, it should be done as
http://www.sample.com:3128=1.2.3.4/index.html
--
Do things because you should, not just because you can.
John Thurston XXX-XXX-XXXX
user-ce4d79d99bab@xymon.invalid
Enterprise Technology Services
Department of Administration
State of Alaska
Message: 5
Date: Wed, 9 Mar 2016 13:03:13 -0500
From: john boris <user-4c4526e52252@xymon.invalid>
To: xymon at xymon.com
Subject: [Xymon] How to change the refresh time for acknowledgements
Message-ID:
<CAOk1TCyYkPqGEVNE=6eXDfOwpxd=user-f499fba55512@xymon.invalid>
Content-Type: text/plain; charset="utf-8"
How can you change the response time when you acknowledge an issue so that
it shows up as a check and you don't get pinged repeatedly. It looks like
it takes about 5 minutes for the acknowledgement to take place.
--
John J. Boris, Sr.