Xymon say "No port checks defined", but it configure to check in analysis 🔗 link

Hello 

On my x-www-browser i have 
   xymon-cgi/svcstatus.sh?HOST=totomysql02&SERVICE=ports

says : "No port checks defined" and "WARNING: Flapping status"

On xymon server's analysis.cfg 
HOST=totomysql02
        PROC /usr/sbin/mysqld     1 1
        PORT "LOCAL=%([.:]3306)$" state=LISTEN TEXT=mysql3306$


My conf seem ok (still in xymon server) 
/usr/lib/xymon/server/bin/xymond_client --dump-config | grep
vdmztoptmysql02 | grep 3306 

PORT local=%([.:]3306)$ state=LISTEN min=1 color=red HOST=totomysql02
TEXT=mysql3306 (line: 390)


on xymon server's /var/log/xymon/xymond.log
2020-01-23 15:45:59.822981 Flapping detected for totomysql02:ports - 5
changes in 600 seconds


1/ why "Flapping detected" 
2/ why still "No port checks defined"


--

Mail non conforme ? la netiquette
(https://fr.wikipedia.org/wiki/Netiquette)

Cordialement,
Gr?gory Bulot
Coaxis Hosting 0825 82 82 57

Is your port check above the DEFAULT?  Can you share your config file?

Flapping means it's gone up/down a handful of times in a finite amount of
time (I can't remember the numbers).  Not sure how that would apply with a
lack of port check though.

Josh Luthman
Office: XXX-XXX-XXXX
Direct: XXX-XXX-XXXX
XXXX Wayne St
Suite XXXX
Troy, OH XXXXX

On Thu, Jan 23, 2020 at 10:38 AM <user-ba12ef048dd6@xymon.invalid> wrote:

Le Thu, 23 Jan 2020 11:58:32 -0500,
Josh Luthman <user-4c45a83f15cb@xymon.invalid> a ?crit :

Is your port check above the DEFAULT?  Can you share your config file?

Yes, i'm using includedir analysis.d at the end of analysis.cfg

tail -2  analysis.cfg ; cat analysis.d/xxxxx-prod-pool1.cfg | grep -v
-e "^$" -e "#" 

directory analysis.d

HOST=zzzredis01
        PORT "LOCAL=%([.:]6379)$" state=LISTEN TEXT=redis02
        PROC /usr/bin/redis-server
HOST=zzzmysql02
        PROC mysqld     1 1
        PORT LOCAL=%[\.:]3306 STATE=LISTEN min=1 TEXT=mysql3306

On Thu, 2020-01-23 at 16:31 +0100, user-ba12ef048dd6@xymon.invalid wrote:

Hi,

If Xymon is processing the client data netstat output, then I suspect the '$'
in your regex above is causing the problem. The netstat output includes other
info after the port number, but your regex is saying it should be the end of
the line.


John.

--
John Horne | Senior Operations Analyst | Technology and Information Services
University of Plymouth | Drake Circus | Plymouth | Devon | PL4 8AA | UK
[http://www.plymouth.ac.uk/images/email_footer.gif]<http://www.plymouth.ac.uk/worldclass>;

This email and any files with it are confidential and intended solely for the use of the recipient to whom it is addressed. If you are not the intended recipient then copying, distribution or other use of the information contained is strictly prohibited and you should not rely on it. If you have received this email in error please let the sender know immediately and delete it from your system(s). Internet emails are not necessarily secure. While we take every care, University of Plymouth accepts no responsibility for viruses and it is your responsibility to scan emails and their attachments. University of Plymouth does not accept responsibility for any changes made after it was sent. Nothing in this email or its attachments constitutes an order for goods or services unless accompanied by an official order form.

Le Fri, 24 Jan 2020 12:48:06 +0000,
John Horne <user-e95f1ec2f147@xymon.invalid> a ?crit :

I've already try a simple check, but nothing better, this one not more :


PORT LOCAL=%[\.:]3306 STATE=LISTEN min=1 TEXT=mysql3306

By the way, i'll try procs also, and it's the same trouble :

PROC mysqld     1 1
  WARNING: Flapping status
  "clear" No process checks defined

strange !

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


Resending to list

On 27.01.2020 17:33, Torsten Richter wrote:

- From my POV there are 2 opportunities why this happens:

1. You have a second XYmon server which has no checks defined for that
host and intermittently sends this erroneous data to your primary server.

2. The client message is too big and does not contain ALL data.
This can happen e.g. if there is a very long process listing sent with
the client data.
When the checks turn to clear just click on the "Client data" link
available on each check page of a server OR on the "clientlog" check for
that server and check if the message is complete.
A complete message would start with the line:

[collector:]

and end with 4 lines with time information like:

[clock]
epoch: 1580142177.579044
local: 2020-01-27 17:22:57 CET
UTC: 2020-01-27 16:22:57 GMT

If those 4 lines are missing then your message is too big to be
transferred and processed and you'll need to tweak some settings in
xymonserver.cfg like MAXMSG or MAXLINE.

Also, if you have the check "xymond" for your XYmon server check if that
check changed the color when the other checks were flapping to clear.

Regards,
Torsten

- -- 
+---------------------------------------------------------+

| E-mail  : user-c862b499d9fa@xymon.invalid			  |
|							  |
| Homepage: http://www.richter-it.net/			  |
+---------------------------------------------------------+
Download my public key from:
http://keys.gnupg.net/pks/lookup?search=0x899093AC&op=get
-----BEGIN PGP SIGNATURE-----

iF0EARECAB0WIQQJ3zkARmUgZ5/ufuPsOWbGiZCTrAUCXi8UuQAKCRDsOWbGiZCT
rMEUAKDb3cqv2Ib/7Nyf9lfwo9ewBeHsAgCgraI3q48cFzJdj41DjDZrlTIeRqE=
=gLZK
-----END PGP SIGNATURE-----

Le Mon, 27 Jan 2020 17:33:02 +0100,
Torsten Richter <user-c862b499d9fa@xymon.invalid> a ?crit :

2. The client message is too big and does not contain ALL data.

The name of the test is clientlog for me.

the test is clear, and it seems ok : 
...
[clientversion]
Xymon version 4.3.28
[clock]
epoch: 1580219164.418498
local: 2020-01-28 14:46:04 CET
UTC: 2020-01-28 13:46:04 GMT

-- 
--

Mail non conforme ? la netiquette
(https://fr.wikipedia.org/wiki/Netiquette)

Cordialement,
Gr?gory Bulot
Coaxis Hosting 0825 82 82 57

Hello, 

Le Mon, 27 Jan 2020 17:33:02 +0100,
Torsten Richter <user-c862b499d9fa@xymon.invalid> a ?crit :

You'll be probably right for this point. I've forgotten this 2nd one
because is "outside " :-/


Surprised by this conflict, but after reflexion, the answer,
"flapping" is logic.

I've been waiting for 20 minutes after sync analysis, flapping still
goes (probably, i have to wait more), but checks are ok inside procs
and ports !!


--

Mail non conforme ? la netiquette
(https://fr.wikipedia.org/wiki/Netiquette)