Xymon Mailing List Archive search

content tests

13 messages in this thread

list Charles Jones · Wed, 09 Aug 2006 16:13:24 -0700 ·
Is it possible to have the results of the HTTP test as well as the CONT test both displayed in the http status area?
In other words, "cont=http;http://www.foo.com/blah/;SUCCESS";

I'm not suggesting that the default be that way, I can think of many cases where it would be desirable to have a separate "http" and "content" columns. I'm just trying to have as few columns as possible :-)

-Charles
list Charles Jones · Wed, 09 Aug 2006 16:41:02 -0700 ·
FYI Just for fun I gave it a try (specifying the column name as "http"), and it appears to work - rather I get the content check in the http column, but the "normal" http status that shows the header and whatnot isn't there, so I'm guessing that hobbit just displays the last status type it received for that column.

Since the content check will still turn red and trigger an alert if http itself goes down, this may be all that I need. The only problem I could foresee is maybe someone could click the http status in between the times that the normal status is reported, and the content status is reported, so they would get just the normal status...due to the timing of that I doubt it would ever happen so I'm not too worried.

I'm open to any other suggestions or comments.

-Charles
quoted from Charles Jones

Charles Jones wrote:
Is it possible to have the results of the HTTP test as well as the CONT test both displayed in the http status area?
In other words, "cont=http;http://www.foo.com/blah/;SUCCESS";

I'm not suggesting that the default be that way, I can think of many cases where it would be desirable to have a separate "http" and "content" columns. I'm just trying to have as few columns as possible :-)
list Charles Jones · Wed, 09 Aug 2006 17:02:40 -0700 ·
Also while I'm mucking about with content checks, I have another question.  I added two content checks:

1.2.3.4    web-8  # ssh pulldata TRENDS:*,disk:disk|disk1 cont=http;http://prodsite.foo.com/monitor.php;SUCCESS cont=http;http://prodsite2.foo.com/amialiveornot.php;SUCCESS

When I check the http status, I see the first content check only. :


      Wed Aug 9 23:55:58 2006: Content OK

http://prodsite.foo.com/monitor.php - Testing URL <http://aqmt-prod.cisco.com/monitor.php>; yields:
SUCCESS


However, when I go to the "info" column, it shows that both URLs are being checked:

Checked with ping:Yes
Content checks: http://prodsite.foo.com/monitor.php <http://aqmt-prod.cisco.com/monitor.php>;  must return 'SUCCESS'
                             http://prodsite2.foo.com/amialiveornot.php <http://reports-prod.cisco.com/amialiveornot.php>;  must return 'SUCCESS'

How do I get both content checks to display in the http status area?
If this is not possible, will alerts still be sent if either content check fails?

-Charles
quoted from Charles Jones

Charles Jones wrote:
FYI Just for fun I gave it a try (specifying the column name as "http"), and it appears to work - rather I get the content check in the http column, but the "normal" http status that shows the header and whatnot isn't there, so I'm guessing that hobbit just displays the last status type it received for that column.

Since the content check will still turn red and trigger an alert if http itself goes down, this may be all that I need. The only problem I could foresee is maybe someone could click the http status in between the times that the normal status is reported, and the content status is reported, so they would get just the normal status...due to the timing of that I doubt it would ever happen so I'm not too worried.

I'm open to any other suggestions or comments.

-Charles

Charles Jones wrote:
Is it possible to have the results of the HTTP test as well as the CONT test both displayed in the http status area?
In other words, "cont=http;http://www.foo.com/blah/;SUCCESS";

I'm not suggesting that the default be that way, I can think of many cases where it would be desirable to have a separate "http" and "content" columns. I'm just trying to have as few columns as possible :-)
list Richard Leyton · Thu, 10 Aug 2006 11:41:52 +0100 ·
You're probably overwriting one with the other by naming them both  'http'. I'd suggest you use different heading names, or don't specify  any heading names at all, in which case (I think), it defaults to  cont/cont2/cont3/etc, ie.

1.2.3.4    web-8  # ssh pulldata TRENDS:*,disk:disk|disk1  cont=monitor;http://prodsite.foo.com/monitor.php;SUCCESS  cont=amialiveornot;http://prodsite2.foo.com/amialiveornot.php;SUCCESS

... perhaps even a separate group for content tests, if you think  it'd crowd things out too much, then use a combotest to check them  both or combine them in a meaningful way.

To answer your other question, *if* they are overwriting each other,  you'll perhaps wind up with a 'flip flop' of alerts going red, then  green. That said, I don't know for sure how Hobbit server side   status messages to the server as it moves through the various sytem  tests.

r.

--
Richard Leyton - user-787ca786c598@xymon.invalid
http://www.leyton.org
quoted from Charles Jones


On 10 Aug 2006, at 01:02, Charles Jones wrote:
Also while I'm mucking about with content checks, I have another  question.  I added two content checks:

1.2.3.4    web-8  # ssh pulldata TRENDS:*,disk:disk|disk1  cont=http;http://prodsite.foo.com/monitor.php;SUCCESS  cont=http;http://prodsite2.foo.com/amialiveornot.php;SUCCESS

When I check the http status, I see the first content check only. :

Wed Aug 9 23:55:58 2006: Content OK http://prodsite.foo.com/ monitor.php - Testing yields: SUCCESS
quoted from Charles Jones
However, when I go to the "info" column, it shows that both URLs  are being checked:

Checked with ping:Yes

Content checks: MailScanner has detected a possible fraud attempt  from "aqmt-prod.cisco.com" claiming to be http://prodsite.foo.com/ monitor.php  must return 'SUCCESS'
                             MailScanner has detected a possible  fraud attempt from "reports-prod.cisco.com" claiming to be http:// prodsite2.foo.com/amialiveornot.php  must return 'SUCCESS'
quoted from Charles Jones

How do I get both content checks to display in the http status area?
If this is not possible, will alerts still be sent if either  content check fails?

-Charles

Charles Jones wrote:
FYI Just for fun I gave it a try (specifying the column name as  "http"), and it appears to work - rather I get the content check  in the http column, but the "normal" http status that shows the  header and whatnot isn't there, so I'm guessing that hobbit just  displays the last status type it received for that column.

Since the content check will still turn red and trigger an alert  if http itself goes down, this may be all that I need. The only  problem I could foresee is maybe someone could click the http  status in between the times that the normal status is reported,  and the content status is reported, so they would get just the  normal status...due to the timing of that I doubt it would ever  happen so I'm not too worried.

I'm open to any other suggestions or comments.

-Charles

Charles Jones wrote:
Is it possible to have the results of the HTTP test as well as  the CONT test both displayed in the http status area?
In other words, "cont=http;http://www.foo.com/blah/;SUCCESS";

I'm not suggesting that the default be that way, I can think of  many cases where it would be desirable to have a separate "http"  and "content" columns. I'm just trying to have as few columns as  possible :-)
list Charles Jones · Thu, 10 Aug 2006 10:08:42 -0700 ·
Bleh. In addition to my other questions, I now have another.

I need to do a content check, on a proxy/vhost...is this possible?

In other words I have a host, web1 with IP 1.2.3.4, with apache running on port 8000. I need to do a vhost check against 1.2.3.4 with the hostname www.myhost.com, as well as doing a content check on the result.

So far I have been able to hit the vhost url via:
http://www.myhost.com:8000=1.2.3.4/some/test.php

And a content check via:
cont=http;http://www.myhost.com/some/test.php;SUCCESS   (no port specified for myhost.com because it goes through a load balancer on port 80...only way it will work since cont has no option to pass the vhost)

Is there a way to combine the two? I tried something like:
cont=http;http://www.myhost.com:8000=1.2.3.4/some/test.php;SUCCESS

But it didn't work. I didn't really expect it to but figured I would try before I asked :)

-Charles
quoted from Charles Jones

Charles Jones wrote:
Also while I'm mucking about with content checks, I have another question.  I added two content checks:

1.2.3.4    web-8  # ssh pulldata TRENDS:*,disk:disk|disk1 cont=http;http://prodsite.foo.com/monitor.php;SUCCESS cont=http;http://prodsite2.foo.com/amialiveornot.php;SUCCESS

When I check the http status, I see the first content check only. :


      Wed Aug 9 23:55:58 2006: Content OK

http://prodsite.foo.com/monitor.php - Testing URL <http://aqmt-prod.cisco.com/monitor.php>; yields:
SUCCESS
  
However, when I go to the "info" column, it shows that both URLs are being checked:

Checked with ping:Yes
Content checks: http://prodsite.foo.com/monitor.php <http://aqmt-prod.cisco.com/monitor.php>;  must return 'SUCCESS'
                             http://prodsite2.foo.com/amialiveornot.php <http://reports-prod.cisco.com/amialiveornot.php>;  must return 'SUCCESS'

How do I get both content checks to display in the http status area?
If this is not possible, will alerts still be sent if either content check fails?

-Charles

Charles Jones wrote:
FYI Just for fun I gave it a try (specifying the column name as "http"), and it appears to work - rather I get the content check in the http column, but the "normal" http status that shows the header and whatnot isn't there, so I'm guessing that hobbit just displays the last status type it received for that column.

Since the content check will still turn red and trigger an alert if http itself goes down, this may be all that I need. The only problem I could foresee is maybe someone could click the http status in between the times that the normal status is reported, and the content status is reported, so they would get just the normal status...due to the timing of that I doubt it would ever happen so I'm not too worried.

I'm open to any other suggestions or comments.

-Charles

Charles Jones wrote:
Is it possible to have the results of the HTTP test as well as the CONT test both displayed in the http status area?
In other words, "cont=http;http://www.foo.com/blah/;SUCCESS";

I'm not suggesting that the default be that way, I can think of many cases where it would be desirable to have a separate "http" and "content" columns. I'm just trying to have as few columns as possible :-)
list Henrik Størner · Thu, 10 Aug 2006 22:52:39 +0200 ·
quoted from Charles Jones
On Wed, Aug 09, 2006 at 04:13:24PM -0700, Charles Jones wrote:
Is it possible to have the results of the HTTP test as well as the CONT test both displayed in the http status area?
In other words, "cont=http;http://www.foo.com/blah/;SUCCESS";
No.

The "http" status and the "cont" status are generated separately. If you do what you suggest, you'll end up with an "http" status being
overwritten in a split second by a "cont" status. Will appear to work
fine, unless your content check fails while the http server is still
running - then you'll have a status that goes red-green-red-green...
with changes happening within a second.
I'm not suggesting that the default be that way, I can think of many cases where it would be desirable to have a separate "http" and "content" columns. I'm just trying to have as few columns as possible :-)
Use "group-only" to remove those columns you dont want to see.


Henrik
list Henrik Størner · Thu, 10 Aug 2006 22:56:15 +0200 ·
quoted from Charles Jones
On Thu, Aug 10, 2006 at 10:08:42AM -0700, Charles Jones wrote:
Is there a way to combine the two? I tried something like:
cont=http;http://www.myhost.com:8000=1.2.3.4/some/test.php;SUCCESS
cont=mycontent;http://www.myhost.com=1.2.3.4:8000/some/test.php;SUCCESS

should work just fine. "www.myhost.com" is just the Host: header that
Hobbit sends to with the http request; the above test connects to IP
1.2.3.4 on port 8000.

And stop that madness about putting the content check into the http column.


Henrik
list Charles Jones · Thu, 10 Aug 2006 14:06:39 -0700 ·
quoted from Henrik Størner
Henrik Stoerner wrote:
On Thu, Aug 10, 2006 at 10:08:42AM -0700, Charles Jones wrote:
  
Is there a way to combine the two? I tried something like:
cont=http;http://www.myhost.com:8000=1.2.3.4/some/test.php;SUCCESS
    
cont=mycontent;http://www.myhost.com=1.2.3.4:8000/some/test.php;SUCCESS

should work just fine. "www.myhost.com" is just the Host: header that
Hobbit sends to with the http request; the above test connects to IP
1.2.3.4 on port 8000.
  
Hmm it seems to only work if I specify the port along with myhost.com as I showed in my example.  When I tried using =1.2.3.4:8000, the status result would give an error about not being able to connect to the IP or something.  That was with an older snapshot though. I will try again and report the result.
And stop that madness about putting the content check into the http column.
  
LOL...Yes sir :-)  The only other question I have is, how do I get 2 content checks to show? When I specify more than one, it only shows the result of the first one (although both are shown in the info column so I assume alerts would still work for each).
list Henrik Størner · Thu, 10 Aug 2006 23:10:39 +0200 ·
quoted from Charles Jones
On Thu, Aug 10, 2006 at 02:06:39PM -0700, Charles Jones wrote:
And stop that madness about putting the content check into the http column.
 LOL...Yes sir :-)  The only other question I have is, how do I get 2 content checks to show? When I specify more than one, it only shows the result of the first one (although both are shown in the info column so I assume alerts would still work for each).
Provided you don't force them into the same column, they should show up
a "content1" and "content2" status columns. Or whatever you name them.


Regards,
Henrik
list Charles Jones · Thu, 10 Aug 2006 14:21:34 -0700 ·
quoted from Henrik Størner
Henrik Stoerner wrote:
On Thu, Aug 10, 2006 at 02:06:39PM -0700, Charles Jones wrote:
  
And stop that madness about putting the content check into the http column.
       
LOL...Yes sir :-)  The only other question I have is, how do I get 2 content checks to show? When I specify more than one, it only shows the result of the first one (although both are shown in the info column so I assume alerts would still work for each).
    
Provided you don't force them into the same column, they should show up
a "content1" and "content2" status columns. Or whatever you name them.
  
Aww...but when you define multiple http checks for a single host, it puts all of those into the same column, it would be nice to have the content checks do the same. I guess another option is I could create a "web" sub page and list the individual websites with dedicated cont columns.
list Henrik Størner · Thu, 10 Aug 2006 23:24:27 +0200 ·
quoted from Charles Jones
On Thu, Aug 10, 2006 at 02:21:34PM -0700, Charles Jones wrote:
Henrik Stoerner wrote:
On Thu, Aug 10, 2006 at 02:06:39PM -0700, Charles Jones wrote:
And stop that madness about putting the content check into the http >>>column.
LOL...Yes sir :-)  The only other question I have is, how do I get 2 >>content checks to show? When I specify more than one, it only shows the >>result of the first one (although both are shown in the info column so I >>assume alerts would still work for each).
Provided you don't force them into the same column, they should show up
a "content1" and "content2" status columns. Or whatever you name them.
 Aww...but when you define multiple http checks for a single host, it puts all of those into the same column, it would be nice to have the content checks do the same. I guess another option is I could create a "web" sub page and list the individual websites with dedicated cont columns.
The problem is that the content check includes the actual webpage data.
Trying to stuff one webpage inside another can result in a pretty
awful looking status page. Doing that with two or more webpages is
just too bizarre to actually work.

Yes, I know you can probably get it right by using HTML <DIV> or
<OBJECT> tags to embed one page inside another. Unfortunately, not
all browser can handle those.


Regards,
Henrik
list Charles Jones · Thu, 10 Aug 2006 14:30:48 -0700 ·
quoted from Henrik Størner
Henrik Stoerner wrote:
On Thu, Aug 10, 2006 at 02:21:34PM -0700, Charles Jones wrote:
  
Henrik Stoerner wrote:
    
On Thu, Aug 10, 2006 at 02:06:39PM -0700, Charles Jones wrote:
       
And stop that madness about putting the content check into the http column.

               
LOL...Yes sir :-)  The only other question I have is, how do I get 2 content checks to show? When I specify more than one, it only shows the result of the first one (although both are shown in the info column so I assume alerts would still work for each).
           
Provided you don't force them into the same column, they should show up
a "content1" and "content2" status columns. Or whatever you name them.
       
Aww...but when you define multiple http checks for a single host, it puts all of those into the same column, it would be nice to have the content checks do the same. I guess another option is I could create a "web" sub page and list the individual websites with dedicated cont columns.
    
The problem is that the content check includes the actual webpage data.
Trying to stuff one webpage inside another can result in a pretty
awful looking status page. Doing that with two or more webpages is
just too bizarre to actually work.

Yes, I know you can probably get it right by using HTML <DIV> or
<OBJECT> tags to embed one page inside another. Unfortunately, not
all browser can handle those.
  
If you are doing a content check, you already know what you are looking for, so why include the contents of the page at all? Maybe we could only show the contents of the page if the content check fails, which would likely just show a  small footprint database or php error.

Just thinking out loud.  Thanks for answering my questions today.  Please also answer the one I sent yesterday about how to send you a donation for all your hard work :)

-Charles
list Henrik Størner · Thu, 10 Aug 2006 23:34:14 +0200 ·
quoted from Charles Jones
On Thu, Aug 10, 2006 at 02:30:48PM -0700, Charles Jones wrote:
If you are doing a content check, you already know what you are looking for, so why include the contents of the page at all?
Because when you're arguing with someone if the website was OK at
5 AM in the morning, it's pretty convincing to pull up the history log
and just go "see, this is what it looked like at 05:08 AM".

Been there, done that - worked like a charm :-)
Just thinking out loud.  Thanks for answering my questions today.  Please also answer the one I sent yesterday about how to send you a donation for all your hard work :)
I will, just need to re-stock that wishlist first :-))


Regards,
Henrik