client-local.cfg an powershell client
list Lukas Kohl
Hello, I am a little bit confused right now, maybe you guys can help me. Right now, I have a bunch of windows Servers, which report their status via Zacks Powershell client to my Xymon Server [4.3.17]. Since the netstat Graphs are not working properly, I tweaked the code a little bit, and changed the collector OS from powershell to bbwin: was (HOST.OS CLASS): [collector:] client myserver.powershell powershell XymonPS is (HOST.OS CLASS): [collector:] client myserver.bbwin powershell XymonPS This worked, and now I can see the netstat trends. In order to get all the client logfiles, I added a new section in the client.local.cfg: [os=bbwin] eventlogswanted:*:10240:Warning,Critical,Error clientversion:2.05:http://xymonserver/psclient/ eventlog:system:10240 Unfortunately the rules won't get applied. I also tried it without the OS= prefix, which doesn't work either. Regarding the manpage it should work: https://www.xymon.com/help/manpages/man5/client-local.cfg.5.html Do you have any Idea, whats wrong here ? P.s.: If anyone is interested in the netstat Code, I can post it here. Kind regards, Lukas Kohl ERGO Direkt Versicherungen Systembetrieb 2 Karl-Martell-Straße 60 90344 Nürnberg Deutschland Tel.: +XX-XXX-XXX-XXXX www.ergodirekt.de Blog: http://blog.ergodirekt.de Facebook: www.facebook.com/ERGODirekt Google+: www.google.com/+ergodirekt Twitter: www.twitter.com/ERGODirekt YouTube: www.youtube.com/ERGODirekt ERGO Direkt Lebensversicherung AG · Amtsgericht Fürth HRB 2787 · UST-ID-Nr. DE159593454 ERGO Direkt Versicherung AG · Amtsgericht Fürth HRB 2934 · UST-ID-Nr. DE159593438 ERGO Direkt Krankenversicherung AG · Amtsgericht Fürth HRB 4694 · UST-ID-Nr. DE159593446 Vorsitzender der Aufsichtsräte der ERGO Direkt Lebensversicherung AG und der ERGO Direkt Krankenversicherung AG: Dr. Clemens Muth Vorsitzender des Aufsichtsrats der ERGO Direkt Versicherung AG: Christian Diedrich Vorstände: Dr. Daniel von Borries (Vorsitzender), Ralf Hartmann, Dr. Jörg Stoffels · Sitz: Fürth Karl-Martell-Straße 60 · 90344 Nürnberg · Internet: ergodirekt.de UniCredit Bank AG - HypoVereinsbank Kto.-Nr.: 66 071 430 · BLZ 700 202 70 IBAN: DE63 7002 0270 0066 0714 30 · BIC: HYVEDEMM
list Japheth Cleaver
Hi, I believe the latest version of Powershell sends the correct info by default, and 4.3.19 fixed the incorrect netstat processing from PS (https://sourceforge.net/p/xymon/code/7609/); I'd suggest updating on both. Have you tried using [class=powershell] in client-local.cfg? I'm curious if that would actually work, there. If not, can you flip xymond into debug mode (send a -USR2 signal to toggle) during a client submission from this box? That should let us see what record it's sending back. Regards, -jc
▸
On Tue, November 17, 2015 12:07 am, Lukas Kohl wrote:Hello, I am a little bit confused right now, maybe you guys can help me. Right now, I have a bunch of windows Servers, which report their status via Zacks Powershell client to my Xymon Server [4.3.17]. Since the netstat Graphs are not working properly, I tweaked the code a little bit, and changed the collector OS from powershell to bbwin: was (HOST.OS CLASS): [collector:] client myserver.powershell powershell XymonPS is (HOST.OS CLASS): [collector:] client myserver.bbwin powershell XymonPS This worked, and now I can see the netstat trends. In order to get all the client logfiles, I added a new section in the client.local.cfg: [os=bbwin] eventlogswanted:*:10240:Warning,Critical,Error clientversion:2.05:http://xymonserver/psclient/ eventlog:system:10240 Unfortunately the rules won't get applied. I also tried it without the OS= prefix, which doesn't work either. Regarding the manpage it should work: https://www.xymon.com/help/manpages/man5/client-local.cfg.5.html Do you have any Idea, whats wrong here ? P.s.: If anyone is interested in the netstat Code, I can post it here. Kind regards, Lukas Kohl ERGO Direkt Versicherungen Systembetrieb 2 Karl-Martell-Straße 60 90344 Nürnberg Deutschland Tel.: +XX-XXX-XXX-XXXX www.ergodirekt.de Blog: http://blog.ergodirekt.de Facebook: www.facebook.com/ERGODirekt Google+: www.google.com/+ergodirekt Twitter: www.twitter.com/ERGODirekt YouTube: www.youtube.com/ERGODirekt ERGO Direkt Lebensversicherung AG · Amtsgericht Fürth HRB 2787 · UST-ID-Nr. DE159593454 ERGO Direkt Versicherung AG · Amtsgericht Fürth HRB 2934 · UST-ID-Nr. DE159593438 ERGO Direkt Krankenversicherung AG · Amtsgericht Fürth HRB 4694 · UST-ID-Nr. DE159593446 Vorsitzender der Aufsichtsräte der ERGO Direkt Lebensversicherung AG und der ERGO Direkt Krankenversicherung AG: Dr. Clemens Muth Vorsitzender des Aufsichtsrats der ERGO Direkt Versicherung AG: Christian Diedrich Vorstände: Dr. Daniel von Borries (Vorsitzender), Ralf Hartmann, Dr. Jörg Stoffels · Sitz: Fürth Karl-Martell-Straße 60 · 90344 Nürnberg · Internet: ergodirekt.de UniCredit Bank AG - HypoVereinsbank Kto.-Nr.: 66 071 430 · BLZ 700 202 70 IBAN: DE63 7002 0270 0066 0714 30 · BIC: HYVEDEMM
list Lukas Kohl
Hello Japheth, thanks for your suggestion with Xymon 4.3.19, I will give it a try. class=powershell works as expected, the client almost immediately got the new config. This is the snippet from Debug mode: 2015-11-17 14:38:41 -> do_message/1 (78555 bytes): client myserver.bbwin powershell XymonPS Is it possible, that the [powershell] entry had precedence over [os=bbwin] ? [os=bbwin] eventlogswanted:*:10240:Warning,Critical,Error clientversion:2.05:http://zyklop.qv.de/psclient/ eventlog:system:10240 [sub] clientversion:2.04:http://zyklop.qv.de/psclient/ [powershell] eventlogswanted:*:10240:Warning,Critical,Error clientversion:2.04:http://zyklop.qv.de/psclient/ eventlog:system:10240 Maybe Xymon searched for a class named powershell, and found the last entry (if class has precedence over os). I did some research, and it seems like os= is generally not working. [os=powershell] had also no effect. P.s.: --merge-clientlocal is not activated
▸
Kind regards,
Lukas Kohl
ERGO Direkt Versicherungen
Systembetrieb 2
Karl-Martell-Straße 60
90344 Nürnberg
Deutschland
Tel.: +XX-XXX-XXX-XXXX
Von: "J.C. Cleaver" <user-87556346d4af@xymon.invalid>
An: "Lukas Kohl" <user-cd4357c4ac57@xymon.invalid>
Kopie: xymon at xymon.com
Datum: 17.11.2015 14:23
Betreff: [SPAM] Re: [Xymon] client-local.cfg an powershell client
▸
Hi, I believe the latest version of Powershell sends the correct info by default, and 4.3.19 fixed the incorrect netstat processing from PS (https://sourceforge.net/p/xymon/code/7609/); I'd suggest updating on both. Have you tried using [class=powershell] in client-local.cfg? I'm curious if that would actually work, there. If not, can you flip xymond into debug mode (send a -USR2 signal to toggle) during a client submission from this box? That should let us see what record it's sending back. Regards, -jc On Tue, November 17, 2015 12:07 am, Lukas Kohl wrote:
Hello, I am a little bit confused right now, maybe you guys can help me. Right now, I have a bunch of windows Servers, which report their status via Zacks Powershell client to my Xymon Server [4.3.17]. Since the netstat Graphs are not working properly, I tweaked the code a little bit, and changed the collector OS from powershell to bbwin: was (HOST.OS CLASS): [collector:] client myserver.powershell powershell XymonPS is (HOST.OS CLASS): [collector:] client myserver.bbwin powershell XymonPS This worked, and now I can see the netstat trends. In order to get all the client logfiles, I added a new section in the client.local.cfg: [os=bbwin] eventlogswanted:*:10240:Warning,Critical,Error clientversion:2.05:http://xymonserver/psclient/ eventlog:system:10240 Unfortunately the rules won't get applied. I also tried it without the
OS=
prefix, which doesn't work either. Regarding the manpage it should work: https://www.xymon.com/help/manpages/man5/client-local.cfg.5.html Do you have any Idea, whats wrong here ? P.s.: If anyone is interested in the netstat Code, I can post it here. Kind regards, Lukas Kohl ERGO Direkt Versicherungen Systembetrieb 2 Karl-Martell-Straße 60 90344 Nürnberg Deutschland Tel.: +XX-XXX-XXX-XXXX www.ergodirekt.de Blog: http://blog.ergodirekt.de Facebook: www.facebook.com/ERGODirekt Google+: www.google.com/+ergodirekt Twitter: www.twitter.com/ERGODirekt YouTube: www.youtube.com/ERGODirekt ERGO Direkt Lebensversicherung AG · Amtsgericht Fürth HRB 2787 · UST-ID-Nr. DE159593454 ERGO Direkt Versicherung AG · Amtsgericht Fürth HRB 2934 · UST-ID-Nr. DE159593438 ERGO Direkt Krankenversicherung AG · Amtsgericht Fürth HRB 4694 · UST-ID-Nr. DE159593446 Vorsitzender der Aufsichtsräte der ERGO Direkt Lebensversicherung AG und der ERGO Direkt Krankenversicherung AG: Dr. Clemens Muth Vorsitzender des Aufsichtsrats der ERGO Direkt Versicherung AG:
Christian
Diedrich Vorstände: Dr. Daniel von Borries (Vorsitzender), Ralf Hartmann, Dr.
Jörg
Stoffels · Sitz: Fürth Karl-Martell-Straße 60 · 90344 Nürnberg · Internet: ergodirekt.de UniCredit Bank AG - HypoVereinsbank Kto.-Nr.: 66 071 430 · BLZ 700 202
70
IBAN: DE63 7002 0270 0066 0714 30 · BIC: HYVEDEMM
www.ergodirekt.de Blog: http://blog.ergodirekt.de Facebook: www.facebook.com/ERGODirekt Google+: www.google.com/+ergodirekt Twitter: www.twitter.com/ERGODirekt YouTube: www.youtube.com/ERGODirekt ERGO Direkt Lebensversicherung AG · Amtsgericht Fürth HRB 2787 · UST-ID-Nr. DE159593454 ERGO Direkt Versicherung AG · Amtsgericht Fürth HRB 2934 · UST-ID-Nr. DE159593438 ERGO Direkt Krankenversicherung AG · Amtsgericht Fürth HRB 4694 · UST-ID-Nr. DE159593446 Vorsitzender der Aufsichtsräte der ERGO Direkt Lebensversicherung AG und der ERGO Direkt Krankenversicherung AG: Dr. Clemens Muth Vorsitzender des Aufsichtsrats der ERGO Direkt Versicherung AG: Christian Diedrich Vorstände: Dr. Daniel von Borries (Vorsitzender), Ralf Hartmann, Dr. Jörg Stoffels · Sitz: Fürth Karl-Martell-Straße 60 · 90344 Nürnberg · Internet: ergodirekt.de UniCredit Bank AG - HypoVereinsbank Kto.-Nr.: 66 071 430 · BLZ 700 202 70 IBAN: DE63 7002 0270 0066 0714 30 · BIC: HYVEDEMM
list Lukas Kohl
Hello again, sorry, os= is working for powershell. I was a little bit confused by the new class=powershell entry ;-) I prefixed now all custom entries in my client-local.cfg, and things work as expected: [class=sub] clientversion:2.04:http://zyklop.qv.de/psclient/ [os=bbwin] eventlogswanted:*:10240:Warning,Critical,Error clientversion:2.05:http://zyklop.qv.de/psclient/ eventlog:system:10240 [os=powershell] eventlogswanted:*:10240:Warning,Critical,Error clientversion:2.04:http://zyklop.qv.de/psclient/ eventlog:system:10240 Without this prefixes, things can very messy and complicated.... Thank you !
▸
Lukas Kohl
ERGO Direkt Versicherungen
Systembetrieb 2
Karl-Martell-Straße 60
90344 Nürnberg
Deutschland
Tel.: +XX-XXX-XXX-XXXX
Von: Lukas Kohl <user-cd4357c4ac57@xymon.invalid>
An: "J.C. Cleaver" <user-87556346d4af@xymon.invalid>
Kopie: xymon at xymon.com
Datum: 17.11.2015 16:09
Betreff: [SPAM] Re: [Xymon] client-local.cfg an powershell client
Gesendet von: "Xymon" <xymon-bounces at xymon.com>
▸
Hello Japheth, thanks for your suggestion with Xymon 4.3.19, I will give it a try. class=powershell works as expected, the client almost immediately got the new config. This is the snippet from Debug mode: 2015-11-17 14:38:41 -> do_message/1 (78555 bytes): client myserver.bbwin powershell XymonPS Is it possible, that the [powershell] entry had precedence over [os=bbwin] ? [os=bbwin] eventlogswanted:*:10240:Warning,Critical,Error clientversion:2.05:http://zyklop.qv.de/psclient/ eventlog:system:10240 [sub] clientversion:2.04:http://zyklop.qv.de/psclient/ [powershell] eventlogswanted:*:10240:Warning,Critical,Error clientversion:2.04:http://zyklop.qv.de/psclient/ eventlog:system:10240 Maybe Xymon searched for a class named powershell, and found the last entry (if class has precedence over os). I did some research, and it seems like os= is generally not working. [os=powershell] had also no effect. P.s.: --merge-clientlocal is not activated Kind regards, Lukas Kohl ERGO Direkt Versicherungen Systembetrieb 2 Karl-Martell-Straße 60 90344 Nürnberg Deutschland Tel.: +XX-XXX-XXX-XXXX Von: "J.C. Cleaver" <user-87556346d4af@xymon.invalid> An: "Lukas Kohl" <user-cd4357c4ac57@xymon.invalid> Kopie: xymon at xymon.com Datum: 17.11.2015 14:23 Betreff: [SPAM] Re: [Xymon] client-local.cfg an powershell client Hi, I believe the latest version of Powershell sends the correct info by default, and 4.3.19 fixed the incorrect netstat processing from PS (https://sourceforge.net/p/xymon/code/7609/); I'd suggest updating on both. Have you tried using [class=powershell] in client-local.cfg? I'm curious if that would actually work, there. If not, can you flip xymond into debug mode (send a -USR2 signal to toggle) during a client submission from this box? That should let us see what record it's sending back. Regards, -jc On Tue, November 17, 2015 12:07 am, Lukas Kohl wrote:
Hello, I am a little bit confused right now, maybe you guys can help me. Right now, I have a bunch of windows Servers, which report their status via Zacks Powershell client to my Xymon Server [4.3.17]. Since the netstat Graphs are not working properly, I tweaked the code a little bit, and changed the collector OS from powershell to bbwin: was (HOST.OS CLASS): [collector:] client myserver.powershell powershell XymonPS is (HOST.OS CLASS): [collector:] client myserver.bbwin powershell XymonPS This worked, and now I can see the netstat trends. In order to get all the client logfiles, I added a new section in the client.local.cfg: [os=bbwin] eventlogswanted:*:10240:Warning,Critical,Error clientversion:2.05:http://xymonserver/psclient/ eventlog:system:10240 Unfortunately the rules won't get applied. I also tried it without the
OS=
prefix, which doesn't work either. Regarding the manpage it should work: https://www.xymon.com/help/manpages/man5/client-local.cfg.5.html Do you have any Idea, whats wrong here ? P.s.: If anyone is interested in the netstat Code, I can post it here. Kind regards, Lukas Kohl ERGO Direkt Versicherungen Systembetrieb 2 Karl-Martell-Straße 60 90344 Nürnberg Deutschland Tel.: +XX-XXX-XXX-XXXX www.ergodirekt.de Blog: http://blog.ergodirekt.de Facebook: www.facebook.com/ERGODirekt Google+: www.google.com/+ergodirekt Twitter: www.twitter.com/ERGODirekt YouTube: www.youtube.com/ERGODirekt ERGO Direkt Lebensversicherung AG · Amtsgericht Fürth HRB 2787 · UST-ID-Nr. DE159593454 ERGO Direkt Versicherung AG · Amtsgericht Fürth HRB 2934 · UST-ID-Nr. DE159593438 ERGO Direkt Krankenversicherung AG · Amtsgericht Fürth HRB 4694 · UST-ID-Nr. DE159593446 Vorsitzender der Aufsichtsräte der ERGO Direkt Lebensversicherung AG und der ERGO Direkt Krankenversicherung AG: Dr. Clemens Muth Vorsitzender des Aufsichtsrats der ERGO Direkt Versicherung AG:
Christian
Diedrich Vorstände: Dr. Daniel von Borries (Vorsitzender), Ralf Hartmann, Dr.
Jörg
Stoffels · Sitz: Fürth Karl-Martell-Straße 60 · 90344 Nürnberg · Internet: ergodirekt.de UniCredit Bank AG - HypoVereinsbank Kto.-Nr.: 66 071 430 · BLZ 700 202
70
IBAN: DE63 7002 0270 0066 0714 30 · BIC: HYVEDEMM
www.ergodirekt.de Blog: http://blog.ergodirekt.de Facebook: www.facebook.com/ERGODirekt Google+: www.google.com/+ergodirekt Twitter: www.twitter.com/ERGODirekt YouTube: www.youtube.com/ERGODirekt ERGO Direkt Lebensversicherung AG · Amtsgericht Fürth HRB 2787 · UST-ID-Nr. DE159593454 ERGO Direkt Versicherung AG · Amtsgericht Fürth HRB 2934 · UST-ID-Nr. DE159593438 ERGO Direkt Krankenversicherung AG · Amtsgericht Fürth HRB 4694 · UST-ID-Nr. DE159593446 Vorsitzender der Aufsichtsräte der ERGO Direkt Lebensversicherung AG und der ERGO Direkt Krankenversicherung AG: Dr. Clemens Muth Vorsitzender des Aufsichtsrats der ERGO Direkt Versicherung AG: Christian Diedrich Vorstände: Dr. Daniel von Borries (Vorsitzender), Ralf Hartmann, Dr. Jörg Stoffels · Sitz: Fürth Karl-Martell-Straße 60 · 90344 Nürnberg · Internet: ergodirekt.de UniCredit Bank AG - HypoVereinsbank Kto.-Nr.: 66 071 430 · BLZ 700 202 70 IBAN: DE63 7002 0270 0066 0714 30 · BIC: HYVEDEMM www.ergodirekt.de Blog: http://blog.ergodirekt.de Facebook: www.facebook.com/ERGODirekt Google+: www.google.com/+ergodirekt Twitter: www.twitter.com/ERGODirekt YouTube: www.youtube.com/ERGODirekt ERGO Direkt Lebensversicherung AG · Amtsgericht Fürth HRB 2787 · UST-ID-Nr. DE159593454 ERGO Direkt Versicherung AG · Amtsgericht Fürth HRB 2934 · UST-ID-Nr. DE159593438 ERGO Direkt Krankenversicherung AG · Amtsgericht Fürth HRB 4694 · UST-ID-Nr. DE159593446 Vorsitzender der Aufsichtsräte der ERGO Direkt Lebensversicherung AG und der ERGO Direkt Krankenversicherung AG: Dr. Clemens Muth Vorsitzender des Aufsichtsrats der ERGO Direkt Versicherung AG: Christian Diedrich Vorstände: Dr. Daniel von Borries (Vorsitzender), Ralf Hartmann, Dr. Jörg Stoffels · Sitz: Fürth Karl-Martell-Straße 60 · 90344 Nürnberg · Internet: ergodirekt.de UniCredit Bank AG - HypoVereinsbank Kto.-Nr.: 66 071 430 · BLZ 700 202 70 IBAN: DE63 7002 0270 0066 0714 30 · BIC: HYVEDEMM
list Japheth Cleaver
▸
On Tue, November 17, 2015 7:35 am, Lukas Kohl wrote:
Hello again, sorry, os= is working for powershell. I was a little bit confused by the new class=powershell entry ;-)
Ahh, good to hear!
▸
class=powershell works as expected, the client almost immediately got the new config. This is the snippet from Debug mode: 2015-11-17 14:38:41 -> do_message/1 (78555 bytes): client myserver.bbwin powershell XymonPS Is it possible, that the [powershell] entry had precedence over [os=bbwin] ?
I prefixed now all custom entries in my client-local.cfg, and things work as expected:
Yes, taken from the man page, https://xymon.com/help/manpages/man5/client-local.cfg.5.html: By default, xymond will look for a matching entry by matching the client hostname, classname or operating system name against the section expressions. Hostname matches are used first, then classname matches, then OS matches. The first match found is the one that is returned to the client. So the OS match was being overridden by the class match. OS is seen more as a backstop default, while "CLASS:" gets to be administrator-defined into a grouping that might be more appropriate for your org. Regards, -jc