Can I do macro in hobbit-client.cfg like hobbit-alerts.cfg ?
list T.J. Yang
I am looking for following MACRO(R1) syntax to work in hobbit-client.cfg beside hobbit-alerts.cfg
$A=a.com|b.com
PROC sendmail 1 -1 red
$B=b1.com|b2.com
PROC syslog 1 -1 red
$ALL=$A|$B
PROC cron 1 -1 red
So all 4 machines will have cron process monitored beside group A have sendmail and group B have syslog processes monitored.
Is above syntax supported in hobbit-client.cfg ?
R1: http://www.hswn.dk/hobbit/help/manpages/man5/hobbit-alerts.cfg.5.html
T.J. Yang
Help yourself to FREE treats served up daily at the Messenger Café. Stop by today.
http://www.cafemessenger.com/info/info_sweetstuff2.html?ocid=TXT_TAGLM_OctWLtagline
list Trent Melcher
▸
On Tue, 2007-10-02 at 14:52 -0500, T.J. Yang wrote:
I am looking for following MACRO(R1) syntax to work in hobbit-client.cfg beside hobbit-alerts.cfg
$A=a.com|b.com
PROC sendmail 1 -1 red
$B=b1.com|b2.com
PROC syslog 1 -1 red
$ALL=$A|$B
PROC cron 1 -1 red
So all 4 machines will have cron process monitored beside group A have sendmail and group B have syslog processes monitored.
Is above syntax supported in hobbit-client.cfg ?
I asked this same question awhile back and never received an answer, but
I tries a couple different ways and never could get it to work.
------------my original post-------------
Can the same technique used in the hobbit-alerts.cfg for defining a
group of hosts be used in the hobbit-clients.cfg? Example:
$HG_NOTES=(athena|ids|isis).foo.com
HOST=%$HG_NOTES
PROC notes TRACK=notes "TEXT=Lotus Notes"
------------my original post-------------
Thanks
Trent
▸
R1: http://www.hswn.dk/hobbit/help/manpages/man5/hobbit-alerts.cfg.5.html T.J. Yang Help yourself to FREE treats served up daily at the Messenger Café. Stop by today. http://www.cafemessenger.com/info/info_sweetstuff2.html?ocid=TXT_TAGLM_OctWLtagline
list T.J. Yang
Glad to know I am not the only one has this need. I am using following work-around solution(IMHO) for now.
HOST=%(a|b).com
PROC sendmail 1 -1 red
PROC cron 1 -1 red
HOST=%(b1|b2).com
PROC syslog 1 -1 red
PROC cron 1 -1 red
T.J. Yang
▸
From: user-c65e78735b17@xymon.invalid To: user-ae9b8668bcde@xymon.invalid Date: Tue, 2 Oct 2007 15:40:57 -0500 Subject: Re: [hobbit] Can I do macro in hobbit-client.cfg like hobbit-alerts.cfg ? On Tue, 2007-10-02 at 14:52 -0500, T.J. Yang wrote:I am looking for following MACRO(R1) syntax to work in hobbit-client.cfg beside hobbit-alerts.cfg $A=a.com|b.com PROC sendmail 1 -1 red $B=b1.com|b2.com PROC syslog 1 -1 red $ALL=$A|$B PROC cron 1 -1 red So all 4 machines will have cron process monitored beside group A have sendmail and group B have syslog processes monitored. Is above syntax supported in hobbit-client.cfg ?I asked this same question awhile back and never received an answer, but I tries a couple different ways and never could get it to work. ------------my original post------------- Can the same technique used in the hobbit-alerts.cfg for defining a group of hosts be used in the hobbit-clients.cfg? Example: $HG_NOTES=(athena|ids|isis).foo.com HOST=%$HG_NOTES PROC notes TRACK=notes "TEXT=Lotus Notes" ------------my original post------------- Thanks TrentR1: http://www.hswn.dk/hobbit/help/manpages/man5/hobbit-alerts.cfg.5.html T.J. Yang Help yourself to FREE treats served up daily at the Messenger Café. Stop by today. http://www.cafemessenger.com/info/info_sweetstuff2.html?ocid=TXT_TAGLM_OctWLtagline
Boo! Scare away worms, viruses and so much more! Try Windows Live OneCare! http://onecare.live.com/standard/en-us/purchase/trial.aspx?s_cid=wl_hotmailnews
list Trent Melcher
▸
On Tue, 2007-10-02 at 16:29 -0500, T.J. Yang wrote:
Glad to know I am not the only one has this need. I am using following work-around solution(IMHO) for now.
Im doing the same for now, it just gets ugly when you have 40 servers you need to define and could use the one rule to do it, and you have anywhere from 50 to 60 rules like this. Im trying to consolidate to make the file a little more manageable for other folks that arent as savy with this stuff. Trent
▸
HOST=%(a|b).com PROC sendmail 1 -1 red PROC cron 1 -1 red HOST=%(b1|b2).com PROC syslog 1 -1 red PROC cron 1 -1 red T.J. YangFrom: user-c65e78735b17@xymon.invalid To: user-ae9b8668bcde@xymon.invalid Date: Tue, 2 Oct 2007 15:40:57 -0500 Subject: Re: [hobbit] Can I do macro in hobbit-client.cfg like hobbit-alerts.cfg ? On Tue, 2007-10-02 at 14:52 -0500, T.J. Yang wrote:I am looking for following MACRO(R1) syntax to work in hobbit-client.cfg beside hobbit-alerts.cfg $A=a.com|b.com PROC sendmail 1 -1 red $B=b1.com|b2.com PROC syslog 1 -1 red $ALL=$A|$B PROC cron 1 -1 red So all 4 machines will have cron process monitored beside group A have sendmail and group B have syslog processes monitored. Is above syntax supported in hobbit-client.cfg ?I asked this same question awhile back and never received an answer, but I tries a couple different ways and never could get it to work. ------------my original post------------- Can the same technique used in the hobbit-alerts.cfg for defining a group of hosts be used in the hobbit-clients.cfg? Example: $HG_NOTES=(athena|ids|isis).foo.com HOST=%$HG_NOTES PROC notes TRACK=notes "TEXT=Lotus Notes" ------------my original post------------- Thanks TrentR1: http://www.hswn.dk/hobbit/help/manpages/man5/hobbit-alerts.cfg.5.html T.J. Yang Help yourself to FREE treats served up daily at the Messenger Café. Stop by today. http://www.cafemessenger.com/info/info_sweetstuff2.html?ocid=TXT_TAGLM_OctWLtaglineBoo! Scare away worms, viruses and so much more! Try Windows Live OneCare! http://onecare.live.com/standard/en-us/purchase/trial.aspx?s_cid=wl_hotmailnews
list T.J. Yang
▸
Glad to know I am not the only one has this need. I am using following work-around solution(IMHO) for now.
HOST=%(a|b).com
PROC sendmail 1 -1 red
PROC cron 1 -1 red
HOST=%(b1|b2).com
PROC syslog 1 -1 red
PROC cron 1 -1 red
T.J. Yang
▸
From: user-c65e78735b17@xymon.invalid To: user-ae9b8668bcde@xymon.invalid Date: Tue, 2 Oct 2007 15:40:57 -0500 Subject: Re: [hobbit] Can I do macro in hobbit-client.cfg like hobbit-alerts.cfg ? On Tue, 2007-10-02 at 14:52 -0500, T.J. Yang wrote:I am looking for following MACRO(R1) syntax to work in hobbit-client.cfg beside hobbit-alerts.cfg $A=a.com|b.com PROC sendmail 1 -1 red $B=b1.com|b2.com PROC syslog 1 -1 red $ALL=$A|$B PROC cron 1 -1 red So all 4 machines will have cron process monitored beside group A have sendmail and group B have syslog processes monitored. Is above syntax supported in hobbit-client.cfg ?I asked this same question awhile back and never received an answer, but I tries a couple different ways and never could get it to work. ------------my original post------------- Can the same technique used in the hobbit-alerts.cfg for defining a group of hosts be used in the hobbit-clients.cfg? Example: $HG_NOTES=(athena|ids|isis).foo.com HOST=%$HG_NOTES PROC notes TRACK=notes "TEXT=Lotus Notes" ------------my original post------------- Thanks TrentR1: http://www.hswn.dk/hobbit/help/manpages/man5/hobbit-alerts.cfg.5.html T.J. Yang Help yourself to FREE treats served up daily at the Messenger Café. Stop by today. http://www.cafemessenger.com/info/info_sweetstuff2.html?ocid=TXT_TAGLM_OctWLtagline
Windows Live Hotmail and Microsoft Office Outlook – together at last. Get it now. http://office.microsoft.com/en-us/outlook/HA102225181033.aspx?pid=CL100626971033
list Galen Johnson
Just curious but if you're going to require that cron be running on all your hosts, can't you just add it to your default at the bottom of the file and add exceptions to the host defs? (don't get me wrong, I do understand the need for nested macros...just asking for this particular example) =G=
▸
-----Original Message-----
From: Trent Melcher [mailto:user-c65e78735b17@xymon.invalid]
Sent: Tuesday, October 02, 2007 5:51 PM
To: user-ae9b8668bcde@xymon.invalid
Subject: RE: [hobbit] Can I do macro in hobbit-client.cfg likehobbit-alerts.cfg ?
On Tue, 2007-10-02 at 16:29 -0500, T.J. Yang wrote:Glad to know I am not the only one has this need. I am using following work-around solution(IMHO) for now.
Im doing the same for now, it just gets ugly when you have 40 servers you need to define and could use the one rule to do it, and you have anywhere from 50 to 60 rules like this. Im trying to consolidate to make the file a little more manageable for other folks that arent as savy with this stuff. Trent
HOST=%(a|b).com PROC sendmail 1 -1 red PROC cron 1 -1 red HOST=%(b1|b2).com PROC syslog 1 -1 red PROC cron 1 -1 red T.J. YangFrom: user-c65e78735b17@xymon.invalid To: user-ae9b8668bcde@xymon.invalid Date: Tue, 2 Oct 2007 15:40:57 -0500 Subject: Re: [hobbit] Can I do macro in hobbit-client.cfg like hobbit-alerts.cfg ? On Tue, 2007-10-02 at 14:52 -0500, T.J. Yang wrote:I am looking for following MACRO(R1) syntax to work in hobbit-client.cfg beside hobbit-alerts.cfg $A=a.com|b.com PROC sendmail 1 -1 red $B=b1.com|b2.com PROC syslog 1 -1 red $ALL=$A|$B PROC cron 1 -1 red So all 4 machines will have cron process monitored beside group A have sendmail and group B have syslog processes monitored. Is above syntax supported in hobbit-client.cfg ?I asked this same question awhile back and never received an answer, but I tries a couple different ways and never could get it to work. ------------my original post------------- Can the same technique used in the hobbit-alerts.cfg for defining a group of hosts be used in the hobbit-clients.cfg? Example: $HG_NOTES=(athena|ids|isis).foo.com HOST=%$HG_NOTES PROC notes TRACK=notes "TEXT=Lotus Notes" ------------my original post------------- Thanks TrentR1: http://www.hswn.dk/hobbit/help/manpages/man5/hobbit-alerts.cfg.5.html T.J. Yang Help yourself to FREE treats served up daily at the Messenger Café. Stop by today. http://www.cafemessenger.com/info/info_sweetstuff2.html?ocid=TXT_TAGLM_OctWLtaglineBoo! Scare away worms, viruses and so much more! Try Windows Live OneCare! http://onecare.live.com/standard/en-us/purchase/trial.aspx?s_cid=wl_hotmailnews
list T.J. Yang
▸
Date: Tue, 2 Oct 2007 18:04:10 -0400 From: user-87f955643e3d@xymon.invalid To: user-ae9b8668bcde@xymon.invalid Subject: RE: [hobbit] Can I do macro in hobbit-client.cfg likehobbit-alerts.cfg ? Just curious but if you're going to require that cron be running on all your hosts, can't you just add it to your default at the bottom of the file and add exceptions to the host defs? (don't get me wrong, I do understand the need for nested macros...just asking for this particular example)
Agree with your point and excuse the bad example of using "cron". I should have use other process as example. tj
▸
=G= -----Original Message----- From: Trent Melcher [mailto:user-c65e78735b17@xymon.invalid] Sent: Tuesday, October 02, 2007 5:51 PM To: user-ae9b8668bcde@xymon.invalid Subject: RE: [hobbit] Can I do macro in hobbit-client.cfg likehobbit-alerts.cfg ? On Tue, 2007-10-02 at 16:29 -0500, T.J. Yang wrote:Glad to know I am not the only one has this need. I am using following work-around solution(IMHO) for now.Im doing the same for now, it just gets ugly when you have 40 servers you need to define and could use the one rule to do it, and you have anywhere from 50 to 60 rules like this. Im trying to consolidate to make the file a little more manageable for other folks that arent as savy with this stuff. TrentHOST=%(a|b).com PROC sendmail 1 -1 red PROC cron 1 -1 red HOST=%(b1|b2).com PROC syslog 1 -1 red PROC cron 1 -1 red T.J. YangFrom: user-c65e78735b17@xymon.invalid To: user-ae9b8668bcde@xymon.invalid Date: Tue, 2 Oct 2007 15:40:57 -0500 Subject: Re: [hobbit] Can I do macro in hobbit-client.cfg like hobbit-alerts.cfg ? On Tue, 2007-10-02 at 14:52 -0500, T.J. Yang wrote:I am looking for following MACRO(R1) syntax to work in hobbit-client.cfg beside hobbit-alerts.cfg $A=a.com|b.com PROC sendmail 1 -1 red $B=b1.com|b2.com PROC syslog 1 -1 red $ALL=$A|$B PROC cron 1 -1 red So all 4 machines will have cron process monitored beside group A have sendmail and group B have syslog processes monitored. Is above syntax supported in hobbit-client.cfg ?I asked this same question awhile back and never received an answer, but I tries a couple different ways and never could get it to work. ------------my original post------------- Can the same technique used in the hobbit-alerts.cfg for defining a group of hosts be used in the hobbit-clients.cfg? Example: $HG_NOTES=(athena|ids|isis).foo.com HOST=%$HG_NOTES PROC notes TRACK=notes "TEXT=Lotus Notes" ------------my original post------------- Thanks TrentR1: http://www.hswn.dk/hobbit/help/manpages/man5/hobbit-alerts.cfg.5.html T.J. Yang Help yourself to FREE treats served up daily at the Messenger Café. Stop by today. http://www.cafemessenger.com/info/info_sweetstuff2.html?ocid=TXT_TAGLM_OctWLtaglineBoo! Scare away worms, viruses and so much more! Try Windows Live OneCare! http://onecare.live.com/standard/en-us/purchase/trial.aspx?s_cid=wl_hotmailnews
Climb to the top of the charts! Play Star Shuffle: the word scramble challenge with star power. http://club.live.com/star_shuffle.aspx?icid=starshuffle_wlmailtextlink_oct
list Darren Cotton
I've modified hobbitlaunch.cfg and bb-hosts as follows:
[bbnet]
ENVFILE /usr/lib/hobbit/server/etc/hobbitserver.cfg
NEEDS hobbitd
CMD bbtest-net --report --ping --checkresponse --dns=ip
LOGFILE $BBSERVERLOGS/bb-network.log
INTERVAL 5m
page network1 Network Connectivity
group-compress <H3>Network Connectivity</H3>
0.0.0.0 .default. # testip
172.17.1.3 HSRP-INTERN2 #
172.17.1.2 HSRP-INTERN1 #
...
but using tcp dump I still see an excessive number of DNS queries some of
which are causing errors in my firewall
Firewall log:
Internal error: unexpected server response (UDP: 212.56.224.20
/53->212.56.225.37/10107) received
TCPDump:
10:38:52.631724 IP hobbit2.domain.com.33026 > dns1.domain.com.domain:
44021+ PTR? xxx.xxx.xxx.xxx.in-addr.arpa. (44)
10:38:52.633077 IP dns1.domain.com.domain > hobbit2.domain.com.33026:
44021 1/2/0 (112)
10:38:52.773900 IP hobbit2.domain.com.33026 > dns1.domain.com.domain:
30144+ PTR? xxx.xxx.xxx.xxx.in-addr.arpa. (41)
10:38:52.775239 IP dns1.domain.com.domain > hobbit2.domain.com.33026:
30144 NXDomain 0/1/0 (118)
10:38:52.839587 IP hobbit2.domain.com.33026 > dns1.domain.com.domain:
36245+ PTR? xxx.xxx.xxx.xxx.in-addr.arpa. (42)
10:38:52.841468 IP dns1.domain.com.domain > hobbit2.domain.com.33026:
36245 NXDomain 0/1/0 (119)
10:38:52.863323 IP hobbit2.domain.com.33026 > dns1.domain.com.domain:
56659+ PTR? xxx.xxx.xxx.xxx.in-addr.arpa. (43)
10:38:52.864689 IP dns1.domain.com.domain > hobbit2.domain.com.33026:
56659 NXDomain 0/1/0 (120)
10:38:52.884812 IP hobbit2.domain.com.33026 > dns1.domain.com.domain:
22309+ PTR? xxx.xxx.xxx.xxx.in-addr.arpa. (42)
10:38:52.886169 IP dns1.domain.com.domain > hobbit2.domain.com.33026:
22309 NXDomain 0/1/0 (119)
10:38:52.979260 IP hobbit2.domain.com.33026 > dns1.domain.com.domain:
57782+ PTR? xxx.xxx.xxx.xxx.in-addr.arpa. (44)
10:38:52.982108 IP dns1.domain.com.domain > hobbit2.domain.com.33026:
57782* 1/3/3 (194)
10:38:52.995493 IP hobbit2.domain.com.33026 > dns1.domain.com.domain:
25046+ PTR? xxx.xxx.xxx.xxx.in-addr.arpa. (40)
10:38:52.996348 IP dns1.domain.com.domain > hobbit2.domain.com.33026:
25046 NXDomain 0/1/0 (117)
10:38:53.007502 IP hobbit2.domain.com.33026 > dns1.domain.com.domain:
50164+ PTR? xxx.xxx.xxx.xxx.in-addr.arpa. (44)
10:38:53.008591 IP dns1.domain.com.domain > hobbit2.domain.com.33026:
50164 NXDomain* 0/1/0 (113)
10:38:53.120913 IP hobbit2.domain.com.33026 > dns1.domain.com.domain:
8474+ PTR? xxx.xxx.xxx.xxx.in-addr.arpa. (44)
10:38:53.122267 IP dns1.domain.com.domain > hobbit2.domain.com.33026:
8474* 1/3/3 (188)
Anyone any ideas?
DISCLAIMER:
This e-mail contains proprietary information some or all of which may be legally privileged. It is for the intended recipient only. If an addressing or transmission error has misdirected this e-mail, please notify the author by replying to this e-mail. If you are not the intended recipient you must not use, disclose, distribute, copy, print, or rely on this e-mail.
list Henrik Størner
▸
On Wed, Oct 03, 2007 at 11:14:01AM +0200, user-326ea6859343@xymon.invalid wrote:
I've modified hobbitlaunch.cfg and bb-hosts as follows:
[bbnet]
ENVFILE /usr/lib/hobbit/server/etc/hobbitserver.cfg
NEEDS hobbitd
CMD bbtest-net --report --ping --checkresponse --dns=ip
LOGFILE $BBSERVERLOGS/bb-network.log
INTERVAL 5m
but using tcp dump I still see an excessive number of DNS queries some of
which are causing errors in my firewallAny http checks in your bb-hosts file ? These will use DNS, regardless of --dns=ip or testip settings. If you don't want that, use the "http://www.foo.com=1.2.3.4/"; syntax (see bb-hosts(5)). Also, hosts with an IP of "0.0.0.0" (or other invalid IP adresses) will trigger a DNS lookup. Regards, Henrik
list Darren Cotton
http checks are ok using dns. I am sure it is the 0.0.0.0 addresses causing
some of my problems.
Therefore for the hosts configured with 0.0.0.0 etc.. should I put a real
value in the bb-hosts instead with the noconn/noping option to stop the dns
queries?
Darren
user-ce4a2c883f75@xymon.invalid
(Henrik Stoerner)
To
03/10/2007 12:57 user-ae9b8668bcde@xymon.invalid
cc
Please respond to Subject
user-ae9b8668bcde@xymon.invalid Re: [hobbit] Hobbit DNS queries
▸
On Wed, Oct 03, 2007 at 11:14:01AM +0200, user-326ea6859343@xymon.invalid
wrote:I've modified hobbitlaunch.cfg and bb-hosts as follows:
[bbnet]
ENVFILE /usr/lib/hobbit/server/etc/hobbitserver.cfg
NEEDS hobbitd
CMD bbtest-net --report --ping --checkresponse --dns=ip
LOGFILE $BBSERVERLOGS/bb-network.log
INTERVAL 5m
but using tcp dump I still see an excessive number of DNS queries some of
which are causing errors in my firewallAny http checks in your bb-hosts file ? These will use DNS, regardless of --dns=ip or testip settings. If you don't want that, use the "http://www.foo.com=1.2.3.4/"; syntax (see bb-hosts(5)). Also, hosts with an IP of "0.0.0.0" (or other invalid IP adresses) will trigger a DNS lookup. Regards, Henrik DISCLAIMER: This e-mail contains proprietary information some or all of which may be legally privileged. It is for the intended recipient only. If an addressing or transmission error has misdirected this e-mail, please notify the author by replying to this e-mail. If you are not the intended recipient you must not use, disclose, distribute, copy, print, or rely on this e-mail.