proc tracking graph not working.

7 messages in this thread

list Paul Root · Thu, 4 Apr 2013 14:04:20 +0000 ·

Hi,
                So I have the following in my analisys.cfg (4.3.10):

HOST=iadccmp1,iadccmp2,apaccmp1,apaccmp2
FILE /usr/local/dat/naIpAddrs.txt yellow MTIME<3630
PROC sshd 1 300 yellow
PROC sshd 1 1000 red "TEXT=ssh daemon (sshd)" "TRACK=ssh daemon"

HOST=* EXHOST=iadccmp1,iadccmp2,apaccmp1,apaccmp2
PROC sshd 1 70 yellow
PROC sshd 1 100 red "TEXT=ssh daemon (sshd)"


                But I'm still not getting the graph tracking the number of connections.  Any ideas?

Paul.

list Japheth Cleaver · Thu, 4 Apr 2013 16:09:12 -0000 (UTC) ·

▸ quoted from Paul Root

Hi,
                So I have the following in my analisys.cfg (4.3.10):

HOST=iadccmp1,iadccmp2,apaccmp1,apaccmp2
FILE /usr/local/dat/naIpAddrs.txt yellow MTIME<3630
PROC sshd 1 300 yellow
PROC sshd 1 1000 red "TEXT=ssh daemon (sshd)" "TRACK=ssh daemon"

HOST=* EXHOST=iadccmp1,iadccmp2,apaccmp1,apaccmp2
PROC sshd 1 70 yellow
PROC sshd 1 100 red "TEXT=ssh daemon (sshd)"


                But I'm still not getting the graph tracking the number of
connections.  Any ideas?

Paul.

I believe the quotes need to be around the content, not the key, for the
TEXT and TRACK values... And IIRC (could be wrong) the TRACK needs to be a
space-less id, since it ends up in the name of the rrd file.

Can you run "xymoncmd xymond_client --dump-config" and paste the output?
It should help identify the problem here...


Regards,

-jc

list Paul Root · Thu, 4 Apr 2013 16:15:00 +0000 ·

I know for a fact that TEXT requires the quotes around the whole thing, as shown on line 303 of analysis.cfg, comments:

#	Example: Check that at least 5 "ssh" connections are established, but
#     not more than 10; warn but do not error; graph the connection count:
#     PORT "LOCAL=%([.:]22)$" state=ESTABLISHED min=5 max=20 color=yellow TRACK=        ssh "TEXT=SSH logins"


And I have the quotes around other TRACK entries that are working fine. It would be bad from a consistency standpoint to have TEXT and TRACK be different.

I'll check the dump-config.

Thanks,
Paul.

▸ quoted from Japheth Cleaver



-----Original Message-----
From: user-87556346d4af@xymon.invalid [mailto:user-87556346d4af@xymon.invalid] 
Sent: Thursday, April 04, 2013 11:09 AM
To: Root, Paul T
Cc: 'xymon at xymon.com'
Subject: Re: [Xymon] proc tracking graph not working.

Hi,
                So I have the following in my analisys.cfg (4.3.10):

HOST=iadccmp1,iadccmp2,apaccmp1,apaccmp2
FILE /usr/local/dat/naIpAddrs.txt yellow MTIME<3630 PROC sshd 1 300 
yellow PROC sshd 1 1000 red "TEXT=ssh daemon (sshd)" "TRACK=ssh 
daemon"

HOST=* EXHOST=iadccmp1,iadccmp2,apaccmp1,apaccmp2
PROC sshd 1 70 yellow
PROC sshd 1 100 red "TEXT=ssh daemon (sshd)"


                But I'm still not getting the graph tracking the 
number of connections.  Any ideas?

Paul.

I believe the quotes need to be around the content, not the key, for the TEXT and TRACK values... And IIRC (could be wrong) the TRACK needs to be a space-less id, since it ends up in the name of the rrd file.

Can you run "xymoncmd xymond_client --dump-config" and paste the output?
It should help identify the problem here...


Regards,

-jc

list Paul Root · Thu, 4 Apr 2013 16:17:48 +0000 ·

Ok, So it is ignoring the TRACK:

$ ~xymon/server/bin/xymoncmd xymond_client --dump-config |grep iadccmp1
2013-04-04 11:15:50 Using default environment file /usr/lib64/xymon/server/etc/xymonserver.cfg
2013-04-04 11:15:50 Unknown token 'TRACK=ssh daemon' ignored at line 529
2013-04-04 11:15:50 Unknown token 'TRACK=sshd' ignored at line 1001
LOG /opt/netcool/omnibus/log/MNS_NFMS_GW.log MATCH=%Error:.*ObjectServerB: Reader component has failed COLOR=yellow HOST=iadccmp1,iadccmt1,iadccmd1,iadccmp2,apaccmp1,apaccmp2 (line: 508)
LOG /rendition/NA/server/log/jboss_wrapper.log MATCH=%OutOfMemory COLOR=red HOST=iadccmp1,iadccmt1,iadccmd1,iadccmp2,apaccmp1,apaccmp2 (line: 509)
LOG /rendition/NA/server/log/jboss_wrapper.log MATCH=%not able to connect to its database COLOR=red HOST=iadccmp1,iadccmt1,iadccmd1,iadccmp2,apaccmp1,apaccmp2 (line: 510)
PORT local=%([.:]443)$ state=LISTEN min=1 color=red HOST=iadccmp1,iadccmt1,iadccmd1,iadccmp2,apaccmp1,apaccmp2 TEXT=https (80) (line: 511)
PORT local=%([.:]8022)$ min=1 max=80 color=yellow TRACK=hpnassh HOST=iadccmp1,iadccmt1,iadccmd1,iadccmp2,apaccmp1,apaccmp2 TEXT=HPNA SSH  proxy (8022) (line: 513)
PROC "jre/bin/java -DTCMgmtEngine" 1 3 red HOST=iadccmp1,iadccmt1,iadccmd1,iadccmp2,apaccmp1,apaccmp2 (line: 515)
PROC "jre/bin/java -DTCMgmtEngine" 1 1 yellow HOST=iadccmp1,iadccmt1,iadccmd1,iadccmp2,apaccmp1,apaccmp2 TEXT=Mgmt Engine - Yellow (line: 516)
PROC "jre/bin/java -DTCSyslog" 1 1 red HOST=iadccmp1,iadccmt1,iadccmd1,iadccmp2,apaccmp1,apaccmp2 (line: 517)
LOG /rendition/NA/server/log/jboss_wrapper.log MATCH=OutOfMemoryError COLOR=red HOST=iadccmp1,iadccmt1,iadccmd1,iadccmp2,apaccmp1,apaccmp2 (line: 518)
LOG /rendition/NA/server/log/jboss_wrapper.log MATCH=not able to connect to its database COLOR=red HOST=iadccmp1,iadccmt1,iadccmd1,iadccmp2,apaccmp1,apaccmp2 (line: 519)
FILE /rendition/NA/jre/logging.rcx yellow mtime>600 HOST=iadccmp1,iadccmt1,iadccmd1,iadccmp2,apaccmp1,apaccmp2 (line: 520)
FILE /var/log/cron yellow mtime<3600 HOST=iadccmp1,iadccmt1,iadccmd1,iadccmp2,apaccmp1,apaccmp2 (line: 521)
DISK /opt/NASSoftware IGNORE HOST=iadccmp1,iadccmt1,iadccmd1,iadccmp2,apaccmp1,apaccmp2 (line: 522)
LOAD 18.00 25.00 HOST=iadccmp1,iadccmt1,iadccmd1,iadccmp2,apaccmp1,apaccmp2 (line: 523)
FILE /usr/local/dat/naIpAddrs.txt yellow mtime<3630 HOST=iadccmp1,iadccmp2,apaccmp1,apaccmp2 (line: 526)
PROC sshd 1 300 yellow HOST=iadccmp1,iadccmp2,apaccmp1,apaccmp2 (line: 528)
PROC sshd 1 1000 red HOST=iadccmp1,iadccmp2,apaccmp1,apaccmp2 TEXT=ssh daemon (sshd) (line: 529)
PROC sshd 1 70 yellow HOST=* EXHOST=iadccmp1,iadccmp2,apaccmp1,apaccmp2 (line: 1004)
PROC sshd 1 100 red HOST=* EXHOST=iadccmp1,iadccmp2,apaccmp1,apaccmp2 TEXT=ssh daemon (sshd) (line: 1005)

▸ quoted from Paul Root



-----Original Message-----
From: user-87556346d4af@xymon.invalid [mailto:user-87556346d4af@xymon.invalid] 
Sent: Thursday, April 04, 2013 11:09 AM
To: Root, Paul T
Cc: 'xymon at xymon.com'
Subject: Re: [Xymon] proc tracking graph not working.

Hi,
                So I have the following in my analisys.cfg (4.3.10):

HOST=iadccmp1,iadccmp2,apaccmp1,apaccmp2
FILE /usr/local/dat/naIpAddrs.txt yellow MTIME<3630 PROC sshd 1 300 
yellow PROC sshd 1 1000 red "TEXT=ssh daemon (sshd)" "TRACK=ssh 
daemon"

HOST=* EXHOST=iadccmp1,iadccmp2,apaccmp1,apaccmp2
PROC sshd 1 70 yellow
PROC sshd 1 100 red "TEXT=ssh daemon (sshd)"


                But I'm still not getting the graph tracking the 
number of connections.  Any ideas?

Paul.

I believe the quotes need to be around the content, not the key, for the TEXT and TRACK values... And IIRC (could be wrong) the TRACK needs to be a space-less id, since it ends up in the name of the rrd file.

Can you run "xymoncmd xymond_client --dump-config" and paste the output?
It should help identify the problem here...


Regards,

-jc

list Paul Root · Thu, 4 Apr 2013 16:24:01 +0000 ·

Looks like TRACK has to come before TEXT.

▸ quoted from Paul Root


-----Original Message-----
From: xymon-bounces at xymon.com [mailto:xymon-bounces at xymon.com] On Behalf Of Root, Paul T
Sent: Thursday, April 04, 2013 11:18 AM
To: 'user-87556346d4af@xymon.invalid'
Cc: 'xymon at xymon.com'
Subject: Re: [Xymon] proc tracking graph not working.

Ok, So it is ignoring the TRACK:

$ ~xymon/server/bin/xymoncmd xymond_client --dump-config |grep iadccmp1
2013-04-04 11:15:50 Using default environment file /usr/lib64/xymon/server/etc/xymonserver.cfg
2013-04-04 11:15:50 Unknown token 'TRACK=ssh daemon' ignored at line 529
2013-04-04 11:15:50 Unknown token 'TRACK=sshd' ignored at line 1001 LOG /opt/netcool/omnibus/log/MNS_NFMS_GW.log MATCH=%Error:.*ObjectServerB: Reader component has failed COLOR=yellow HOST=iadccmp1,iadccmt1,iadccmd1,iadccmp2,apaccmp1,apaccmp2 (line: 508) LOG /rendition/NA/server/log/jboss_wrapper.log MATCH=%OutOfMemory COLOR=red HOST=iadccmp1,iadccmt1,iadccmd1,iadccmp2,apaccmp1,apaccmp2 (line: 509) LOG /rendition/NA/server/log/jboss_wrapper.log MATCH=%not able to connect to its database COLOR=red HOST=iadccmp1,iadccmt1,iadccmd1,iadccmp2,apaccmp1,apaccmp2 (line: 510) PORT local=%([.:]443)$ state=LISTEN min=1 color=red HOST=iadccmp1,iadccmt1,iadccmd1,iadccmp2,apaccmp1,apaccmp2 TEXT=https (80) (line: 511) PORT local=%([.:]8022)$ min=1 max=80 color=yellow TRACK=hpnassh HOST=iadccmp1,iadccmt1,iadccmd1,iadccmp2,apaccmp1,apaccmp2 TEXT=HPNA SSH  proxy (8022) (line: 513) PROC "jre/bin/java -DTCMgmtEngine" 1 3 red HOST=iadccmp1,iadccmt1,iadccmd1,iadccmp2,apaccmp1,apaccmp2 (line: 515) PROC "jre/bin/java -DTCMgmtEngine" 1 1 yellow HOST=iadccmp1,iadccmt1,iadccmd1,iadccmp2,apaccmp1,apaccmp2 TEXT=Mgmt Engine - Yellow (line: 516) PROC "jre/bin/java -DTCSyslog" 1 1 red HOST=iadccmp1,iadccmt1,iadccmd1,iadccmp2,apaccmp1,apaccmp2 (line: 517) LOG /rendition/NA/server/log/jboss_wrapper.log MATCH=OutOfMemoryError COLOR=red HOST=iadccmp1,iadccmt1,iadccmd1,iadccmp2,apaccmp1,apaccmp2 (line: 518) LOG /rendition/NA/server/log/jboss_wrapper.log MATCH=not able to connect to its database COLOR=red HOST=iadccmp1,iadccmt1,iadccmd1,iadccmp2,apaccmp1,apaccmp2 (line: 519) FILE /rendition/NA/jre/logging.rcx yellow mtime>600 HOST=iadccmp1,iadccmt1,iadccmd1,iadccmp2,apaccmp1,apaccmp2 (line: 520) FILE /var/log/cron yellow mtime<3600 HOST=iadccmp1,iadccmt1,iadccmd1,iadccmp2,apaccmp1,apaccmp2 (line: 521) DISK /opt/NASSoftware IGNORE HOST=iadccmp1,iadccmt1,iadccmd1,iadccmp2,apaccmp1,apaccmp2 (line: 522) LOAD 18.00 25.00 HOST=iadccmp1,iadccmt1,iadccmd1,iadccmp2,apaccmp1,apaccmp2 (line: 523) FILE /usr/local/dat/naIpAddrs.txt yellow mtime<3630 HOST=iadccmp1,iadccmp2,apaccmp1,apaccmp2 (line: 526) PROC sshd 1 300 yellow HOST=iadccmp1,iadccmp2,apaccmp1,apaccmp2 (line: 528) PROC sshd 1 1000 red HOST=iadccmp1,iadccmp2,apaccmp1,apaccmp2 TEXT=ssh daemon (sshd) (line: 529) PROC sshd 1 70 yellow HOST=* EXHOST=iadccmp1,iadccmp2,apaccmp1,apaccmp2 (line: 1004) PROC sshd 1 100 red HOST=* EXHOST=iadccmp1,iadccmp2,apaccmp1,apaccmp2 TEXT=ssh daemon (sshd) (line: 1005)


-----Original Message-----
From: user-87556346d4af@xymon.invalid [mailto:user-87556346d4af@xymon.invalid]
Sent: Thursday, April 04, 2013 11:09 AM
To: Root, Paul T
Cc: 'xymon at xymon.com'
Subject: Re: [Xymon] proc tracking graph not working.

Hi,
                So I have the following in my analisys.cfg (4.3.10):

HOST=iadccmp1,iadccmp2,apaccmp1,apaccmp2
FILE /usr/local/dat/naIpAddrs.txt yellow MTIME<3630 PROC sshd 1 300 
yellow PROC sshd 1 1000 red "TEXT=ssh daemon (sshd)" "TRACK=ssh 
daemon"

HOST=* EXHOST=iadccmp1,iadccmp2,apaccmp1,apaccmp2
PROC sshd 1 70 yellow
PROC sshd 1 100 red "TEXT=ssh daemon (sshd)"


                But I'm still not getting the graph tracking the 
number of connections.  Any ideas?

Paul.

I believe the quotes need to be around the content, not the key, for the TEXT and TRACK values... And IIRC (could be wrong) the TRACK needs to be a space-less id, since it ends up in the name of the rrd file.

Can you run "xymoncmd xymond_client --dump-config" and paste the output?
It should help identify the problem here...


Regards,

-jc

list Paul Root · Thu, 4 Apr 2013 16:41:15 +0000 ·

Yep, that did it TRACK must come before TEXT.

▸ quoted from Paul Root


-----Original Message-----
From: Root, Paul T 
Sent: Thursday, April 04, 2013 11:24 AM
To: Root, Paul T; 'user-87556346d4af@xymon.invalid'
Cc: 'xymon at xymon.com'
Subject: RE: [Xymon] proc tracking graph not working.

Looks like TRACK has to come before TEXT.

-----Original Message-----
From: xymon-bounces at xymon.com [mailto:xymon-bounces at xymon.com] On Behalf Of Root, Paul T
Sent: Thursday, April 04, 2013 11:18 AM
To: 'user-87556346d4af@xymon.invalid'
Cc: 'xymon at xymon.com'
Subject: Re: [Xymon] proc tracking graph not working.

Ok, So it is ignoring the TRACK:

$ ~xymon/server/bin/xymoncmd xymond_client --dump-config |grep iadccmp1
2013-04-04 11:15:50 Using default environment file /usr/lib64/xymon/server/etc/xymonserver.cfg
2013-04-04 11:15:50 Unknown token 'TRACK=ssh daemon' ignored at line 529
2013-04-04 11:15:50 Unknown token 'TRACK=sshd' ignored at line 1001 LOG /opt/netcool/omnibus/log/MNS_NFMS_GW.log MATCH=%Error:.*ObjectServerB: Reader component has failed COLOR=yellow HOST=iadccmp1,iadccmt1,iadccmd1,iadccmp2,apaccmp1,apaccmp2 (line: 508) LOG /rendition/NA/server/log/jboss_wrapper.log MATCH=%OutOfMemory COLOR=red HOST=iadccmp1,iadccmt1,iadccmd1,iadccmp2,apaccmp1,apaccmp2 (line: 509) LOG /rendition/NA/server/log/jboss_wrapper.log MATCH=%not able to connect to its database COLOR=red HOST=iadccmp1,iadccmt1,iadccmd1,iadccmp2,apaccmp1,apaccmp2 (line: 510) PORT local=%([.:]443)$ state=LISTEN min=1 color=red HOST=iadccmp1,iadccmt1,iadccmd1,iadccmp2,apaccmp1,apaccmp2 TEXT=https (80) (line: 511) PORT local=%([.:]8022)$ min=1 max=80 color=yellow TRACK=hpnassh HOST=iadccmp1,iadccmt1,iadccmd1,iadccmp2,apaccmp1,apaccmp2 TEXT=HPNA SSH  proxy (8022) (line: 513) PROC "jre/bin/java -DTCMgmtEngine" 1 3 red HOST=iadccmp1,iadccmt1,iadccmd1,iadccmp2,apaccmp1,apaccmp2 (line: 515) PROC "jre/bin/java -DTCMgmtEngine" 1 1 yellow HOST=iadccmp1,iadccmt1,iadccmd1,iadccmp2,apaccmp1,apaccmp2 TEXT=Mgmt Engine - Yellow (line: 516) PROC "jre/bin/java -DTCSyslog" 1 1 red HOST=iadccmp1,iadccmt1,iadccmd1,iadccmp2,apaccmp1,apaccmp2 (line: 517) LOG /rendition/NA/server/log/jboss_wrapper.log MATCH=OutOfMemoryError COLOR=red HOST=iadccmp1,iadccmt1,iadccmd1,iadccmp2,apaccmp1,apaccmp2 (line: 518) LOG /rendition/NA/server/log/jboss_wrapper.log MATCH=not able to connect to its database COLOR=red HOST=iadccmp1,iadccmt1,iadccmd1,iadccmp2,apaccmp1,apaccmp2 (line: 519) FILE /rendition/NA/jre/logging.rcx yellow mtime>600 HOST=iadccmp1,iadccmt1,iadccmd1,iadccmp2,apaccmp1,apaccmp2 (line: 520) FILE /var/log/cron yellow mtime<3600 HOST=iadccmp1,iadccmt1,iadccmd1,iadccmp2,apaccmp1,apaccmp2 (line: 521) DISK /opt/NASSoftware IGNORE HOST=iadccmp1,iadccmt1,iadccmd1,iadccmp2,apaccmp1,apaccmp2 (line: 522) LOAD 18.00 25.00 HOST=iadccmp1,iadccmt1,iadccmd1,iadccmp2,apaccmp1,apaccmp2 (line: 523) FILE /usr/local/dat/naIpAddrs.txt yellow mtime<3630 HOST=iadccmp1,iadccmp2,apaccmp1,apaccmp2 (line: 526) PROC sshd 1 300 yellow HOST=iadccmp1,iadccmp2,apaccmp1,apaccmp2 (line: 528) PROC sshd 1 1000 red HOST=iadccmp1,iadccmp2,apaccmp1,apaccmp2 TEXT=ssh daemon (sshd) (line: 529) PROC sshd 1 70 yellow HOST=* EXHOST=iadccmp1,iadccmp2,apaccmp1,apaccmp2 (line: 1004) PROC sshd 1 100 red HOST=* EXHOST=iadccmp1,iadccmp2,apaccmp1,apaccmp2 TEXT=ssh daemon (sshd) (line: 1005)


-----Original Message-----
From: user-87556346d4af@xymon.invalid [mailto:user-87556346d4af@xymon.invalid]
Sent: Thursday, April 04, 2013 11:09 AM
To: Root, Paul T
Cc: 'xymon at xymon.com'
Subject: Re: [Xymon] proc tracking graph not working.

Hi,
                So I have the following in my analisys.cfg (4.3.10):

HOST=iadccmp1,iadccmp2,apaccmp1,apaccmp2
FILE /usr/local/dat/naIpAddrs.txt yellow MTIME<3630 PROC sshd 1 300 
yellow PROC sshd 1 1000 red "TEXT=ssh daemon (sshd)" "TRACK=ssh 
daemon"

HOST=* EXHOST=iadccmp1,iadccmp2,apaccmp1,apaccmp2
PROC sshd 1 70 yellow
PROC sshd 1 100 red "TEXT=ssh daemon (sshd)"


                But I'm still not getting the graph tracking the 
number of connections.  Any ideas?

Paul.

I believe the quotes need to be around the content, not the key, for the TEXT and TRACK values... And IIRC (could be wrong) the TRACK needs to be a space-less id, since it ends up in the name of the rrd file.

Can you run "xymoncmd xymond_client --dump-config" and paste the output?
It should help identify the problem here...


Regards,

-jc

list Japheth Cleaver · Thu, 4 Apr 2013 16:54:13 -0000 (UTC) ·

▸ quoted from Paul Root

I know for a fact that TEXT requires the quotes around the whole thing, as
shown on line 303 of analysis.cfg, comments:

#	Example: Check that at least 5 "ssh" connections are established, but
#     not more than 10; warn but do not error; graph the connection count:
#     PORT "LOCAL=%([.:]22)$" state=ESTABLISHED min=5 max=20 color=yellow
TRACK=        ssh "TEXT=SSH logins"


And I have the quotes around other TRACK entries that are working fine. It
would be bad from a consistency standpoint to have TEXT and TRACK be
different.

I'll check the dump-config.

Thanks,
Paul.


D'oh! I'm definitely wrong here then... :)

-jc

proc tracking graph not working. 🔗 link

proc tracking graph not working.