Xymon Mailing List Archive search

configuration of bbwin clients in Hobbit

6 messages in this thread

list Anna Jonna Armannsdottir · Thu, 21 Aug 2008 19:43:10 +0000 ·
I want to monitor the size of the logfiles on windows servers. I want to put a line in hobbit-clients.cfg like this: 
FILE /var/log/messages SIZE>0 MTIME<604800 yellow

Does anybody have a clue about the name and paths of logfiles in Windows XP. 
in client local i want to put this:
[win32]
log:/var/log/messages:10240

Any clue, anybody? 
-- 
Kindest Regards, Anna Jonna Ármannsdóttir,       %&   A: Because people read from top to bottom.
Unix System Aministration, Computing Services,   %&   Q: Why is top posting bad?
University of Iceland.
list Robert P McGraw · Fri, 22 Aug 2008 07:53:11 -0400 ·
Anna,

I have not had good luck using class names so I have stayed with using host
name. Make sure that your hostname of the same class comes before the class
name. Ever which one it finds first that is the one it will use. So if you
have an empty class name and a host name of the same class comes after the
class name nothing will happen.


So here is my client-local.cfg I have 


[hostname.xxx.purdue.edu]
file:c:\Alligate\Digests\.Red_If_Digest_Did_Not_Run.txt
eventlog:Application
ignore information
ignore success
ignore message could not be scanned
ignore Error occurred in Scanning
eventlog:Security
ignore information
ignore success
ignore MAILRELAY Error Code: 0x0
eventlog:System
ignore information
ignore success

and my hobbit-client.cfg

HOST=hostname.xxx.purdue.edu
    UP 30m 1w
    LOAD 40.0 70.0
    DISK * 90 95
    FILE c:\Alligate\Digests\.Red_If_Digest_Did_Not_Run.txt red CTIME<100800
    LOG %.* %WARNING  COLOR=yellow
    LOG %.* %ERROR  COLOR=red
    PROC AGDigestSvc.exe  1 1
    PROC AgDomSvc.exe  1 1

In my use I have found that the epoch time is not calculated correctly. It
seems that it will take the local time to calculate GMT and not adjust for
the time zone.

I have document this in the BBWIN mail list.

Hope this helps.

Robert
quoted from Anna Jonna Armannsdottir

-----Original Message-----
From: Anna Jonna Armannsdottir [mailto:user-a8cde33204f6@xymon.invalid]
Sent: Thursday, August 21, 2008 3:43 PM
To: Hobbit user
Subject: [hobbit] configuration of bbwin clients in Hobbit


I want to monitor the size of the logfiles on windows servers.
I want to put a line in hobbit-clients.cfg like this:

FILE /var/log/messages SIZE>0 MTIME<604800 yellow

Does anybody have a clue about the name and paths of logfiles
in Windows XP.

in client local i want to put this:
[win32]
log:/var/log/messages:10240

Any clue, anybody?

--
Kindest Regards, Anna Jonna Ármannsdóttir,       %&   A: Because people
read from top to bottom.
Unix System Aministration, Computing Services,   %&   Q: Why is top
posting bad?
University of Iceland.

list Chris Strzelczyk · Thu, 28 Aug 2008 12:16:54 -0400 ·
Hello, I am having a really hard time getting Hobbit to ignore Windows error
log messages.  I searched the groups and can not find an answer that differs
from my setup.  Yet it does not work for me.

Also, does anyone have the CLASS=win32 feature to work.  Currently I am
filtering by hostnames, but I would like to filter by CLASS.  I have the
following in my files.

bb-hosts:
xxx.xxx.xxx.xxx   stfwin6 # COMMENT:"WINDOWS TESTING SERVER"

My client-local.cfg:

[stfwin6]
log:system
ignore TermServDevices

[win32]

My hobbit-clients.cfg:

HOST=stfwin6
        LOG %.* %WARNING  COLOR=yellow
        LOG %.* %ERROR  COLOR=yellow


In client-local.cfg I tried the log keyword as well as the eventlog keyword.

Thank You
-cs
quoted from Robert P McGraw
On Fri, Aug 22, 2008 at 7:53 AM, McGraw, Robert P <user-33cf07af04dd@xymon.invalid>wrote:
Anna,

I have not had good luck using class names so I have stayed with using host
name. Make sure that your hostname of the same class comes before the class
name. Ever which one it finds first that is the one it will use. So if you
have an empty class name and a host name of the same class comes after the
class name nothing will happen.


So here is my client-local.cfg I have


[hostname.xxx.purdue.edu]
file:c:\Alligate\Digests\.Red_If_Digest_Did_Not_Run.txt
eventlog:Application
ignore information
ignore success
ignore message could not be scanned
ignore Error occurred in Scanning
eventlog:Security
ignore information
ignore success
ignore MAILRELAY Error Code: 0x0
eventlog:System
ignore information
ignore success

and my hobbit-client.cfg

HOST=hostname.xxx.purdue.edu
   UP 30m 1w
   LOAD 40.0 70.0
   DISK * 90 95
   FILE c:\Alligate\Digests\.Red_If_Digest_Did_Not_Run.txt red CTIME<100800
   LOG %.* %WARNING  COLOR=yellow
   LOG %.* %ERROR  COLOR=red
   PROC AGDigestSvc.exe  1 1
   PROC AgDomSvc.exe  1 1

In my use I have found that the epoch time is not calculated correctly. It
seems that it will take the local time to calculate GMT and not adjust for
the time zone.

I have document this in the BBWIN mail list.

Hope this helps.

Robert

-----Original Message-----
From: Anna Jonna Armannsdottir [mailto:user-a8cde33204f6@xymon.invalid]
Sent: Thursday, August 21, 2008 3:43 PM
To: Hobbit user
Subject: [hobbit] configuration of bbwin clients in Hobbit


I want to monitor the size of the logfiles on windows servers.
I want to put a line in hobbit-clients.cfg like this:

FILE /var/log/messages SIZE>0 MTIME<604800 yellow

Does anybody have a clue about the name and paths of logfiles
in Windows XP.

in client local i want to put this:
[win32]
log:/var/log/messages:10240

Any clue, anybody?

--
Kindest Regards, Anna Jonna Ármannsdóttir,       %&   A: Because people
read from top to bottom.
Unix System Aministration, Computing Services,   %&   Q: Why is top
posting bad?
University of Iceland.

-- 

Chris Strzelczyk
GCS Real Estate
Real Estate Investment and Management
(XXX) XXX-XXXX
(XXX) XXX-XXXX (Business Hours Office Phone)
user-4cf29561ea2e@xymon.invalid
list Robert P McGraw · Thu, 28 Aug 2008 13:43:29 -0400 ·
This is working on my side. Also you can click on “Client data” at the
bottom of the hobbit we page to see the data that is being passed.

 
Here is a snippet of my client-loal.cfg. Be sure that your class [win32]
comes after your win32 hostname entry. It seems that which ever one if finds
first that is the one that is used so if [win32] is blank then nothing
happens. 

 
[mailrelay]
quoted from Chris Strzelczyk

file:c:\Alligate\Digests\.Red_If_Digest_Did_Not_Run.txt

eventlog:Application

ignore information

ignore success

ignore message could not be scanned

ignore Error occurred in Scanning

eventlog:Security

ignore information

ignore success

ignore MAILRELAY Error Code: 0x0

eventlog:System

ignore information

ignore success

 

[win32]

 
Here is a snippet of my  hobbit-clients.cfg. NOTE: be sure that the
[default] is at the end of the file.

 
#

HOST=mailrelay
quoted from Chris Strzelczyk

    UP 30m 1w

    LOAD 40.0 70.0

    DISK * 90 95

    FILE c:\Alligate\Digests\.Red_If_Digest_Did_Not_Run.txt red CTIME<100800

    LOG %.* %WARNING  COLOR=yellow

    LOG %.* %ERROR  COLOR=red

    PROC AGDigestSvc.exe  1 1

    PROC AgDomSvc.exe  1 1

  

Hope this helps.

 
Robert
quoted from Chris Strzelczyk

 
From: Chris Strzelczyk [mailto:user-d7a0467635ec@xymon.invalid] 
Sent: Thursday, August 28, 2008 12:17 PM
To: user-ae9b8668bcde@xymon.invalid
Subject: Re: [hobbit] configuration of bbwin clients in Hobbit

 
Hello, I am having a really hard time getting Hobbit to ignore Windows error
log messages.  I searched the groups and can not find an answer that differs
from my setup.  Yet it does not work for me.  

Also, does anyone have the CLASS=win32 feature to work.  Currently I am
filtering by hostnames, but I would like to filter by CLASS.  I have the
following in my files. 

bb-hosts:
xxx.xxx.xxx.xxx   stfwin6 # COMMENT:"WINDOWS TESTING SERVER"

My client-local.cfg:

[stfwin6]
log:system
ignore TermServDevices

[win32]

My hobbit-clients.cfg:

HOST=stfwin6
        LOG %.* %WARNING  COLOR=yellow
        LOG %.* %ERROR  COLOR=yellow


In client-local.cfg I tried the log keyword as well as the eventlog keyword.

Thank You
-cs

On Fri, Aug 22, 2008 at 7:53 AM, McGraw, Robert P <user-33cf07af04dd@xymon.invalid>
quoted from Chris Strzelczyk
wrote:

Anna,

I have not had good luck using class names so I have stayed with using host
name. Make sure that your hostname of the same class comes before the class
name. Ever which one it finds first that is the one it will use. So if you
have an empty class name and a host name of the same class comes after the
class name nothing will happen.


So here is my client-local.cfg I have


[hostname.xxx.purdue.edu]
file:c:\Alligate\Digests\.Red_If_Digest_Did_Not_Run.txt
eventlog:Application
ignore information
ignore success
ignore message could not be scanned
ignore Error occurred in Scanning
eventlog:Security
ignore information
ignore success
ignore MAILRELAY Error Code: 0x0
eventlog:System
ignore information
ignore success

and my hobbit-client.cfg

HOST=hostname.xxx.purdue.edu
   UP 30m 1w
   LOAD 40.0 70.0
   DISK * 90 95
   FILE c:\Alligate\Digests\.Red_If_Digest_Did_Not_Run.txt red CTIME<100800
   LOG %.* %WARNING  COLOR=yellow
   LOG %.* %ERROR  COLOR=red
   PROC AGDigestSvc.exe  1 1
   PROC AgDomSvc.exe  1 1

In my use I have found that the epoch time is not calculated correctly. It
seems that it will take the local time to calculate GMT and not adjust for
the time zone.

I have document this in the BBWIN mail list.

Hope this helps.

Robert

-----Original Message-----
From: Anna Jonna Armannsdottir [mailto:user-a8cde33204f6@xymon.invalid]
Sent: Thursday, August 21, 2008 3:43 PM
To: Hobbit user
Subject: [hobbit] configuration of bbwin clients in Hobbit


I want to monitor the size of the logfiles on windows servers.
I want to put a line in hobbit-clients.cfg like this:

FILE /var/log/messages SIZE>0 MTIME<604800 yellow

Does anybody have a clue about the name and paths of logfiles
in Windows XP.

in client local i want to put this:
[win32]
log:/var/log/messages:10240

Any clue, anybody?

--
Kindest Regards, Anna Jonna Ármannsdóttir,       %&   A: Because people
read from top to bottom.
Unix System Aministration, Computing Services,   %&   Q: Why is top
posting bad?
University of Iceland.

-- 
Chris Strzelczyk
GCS Real Estate
Real Estate Investment and Management
(XXX) XXX-XXXX
(XXX) XXX-XXXX (Business Hours Office Phone)
user-4cf29561ea2e@xymon.invalid
list Aaron Zink · Thu, 28 Aug 2008 10:49:50 -0700 ·
I could never get the ignore clause to work in for the event log either.  Let me know if you have any luck!

I had problems with [win32] until I noticed there was an example [win32] up at the top of the file in the examples which was overriding my settings... whoops.  I don't know if this applies to you.

My client-local.cfg looks like:

[win32]
eventlog:security
ignore .*success.*
eventlog:application
ignore BigBrotherHobbitClient
eventlog:eventlog_application
ignore BigBrotherHobbitClient
eventlog:system
ignore TermServDevices
ignore information
file:C:\Program Files\BBWin\bin\BBWin.exe:md5

None of the ignore statements work.


Aaron Zink
Manager, Corporate IT
eHarmony.com
XXX.XXX.XXXX
quoted from Chris Strzelczyk


-----Original Message-----
From: Chris Strzelczyk [mailto:user-d7a0467635ec@xymon.invalid]
Sent: Thursday, August 28, 2008 09:17
To: user-ae9b8668bcde@xymon.invalid
Subject: Re: [hobbit] configuration of bbwin clients in Hobbit

Hello, I am having a really hard time getting Hobbit to ignore Windows error log messages.  I searched the groups and can not find an answer that differs from my setup.  Yet it does not work for me.

Also, does anyone have the CLASS=win32 feature to work.  Currently I am filtering by hostnames, but I would like to filter by CLASS.  I have the following in my files.

bb-hosts:
xxx.xxx.xxx.xxx   stfwin6 # COMMENT:"WINDOWS TESTING SERVER"

My client-local.cfg:

[stfwin6]
log:system
ignore TermServDevices

[win32]

My hobbit-clients.cfg:

HOST=stfwin6
        LOG %.* %WARNING  COLOR=yellow
        LOG %.* %ERROR  COLOR=yellow


In client-local.cfg I tried the log keyword as well as the eventlog keyword.

Thank You
-cs

On Fri, Aug 22, 2008 at 7:53 AM, McGraw, Robert P <user-33cf07af04dd@xymon.invalid> wrote:


        Anna,

        I have not had good luck using class names so I have stayed with using host
        name. Make sure that your hostname of the same class comes before the class
        name. Ever which one it finds first that is the one it will use. So if you
        have an empty class name and a host name of the same class comes after the
        class name nothing will happen.


        So here is my client-local.cfg I have


        [hostname.xxx.purdue.edu]
        file:c:\Alligate\Digests\.Red_If_Digest_Did_Not_Run.txt
        eventlog:Application
        ignore information
        ignore success
        ignore message could not be scanned
        ignore Error occurred in Scanning
        eventlog:Security
        ignore information
        ignore success
        ignore MAILRELAY Error Code: 0x0
        eventlog:System
        ignore information
        ignore success

        and my hobbit-client.cfg

        HOST=hostname.xxx.purdue.edu
           UP 30m 1w
           LOAD 40.0 70.0
           DISK * 90 95
           FILE c:\Alligate\Digests\.Red_If_Digest_Did_Not_Run.txt red CTIME<100800
           LOG %.* %WARNING  COLOR=yellow
           LOG %.* %ERROR  COLOR=red
           PROC AGDigestSvc.exe  1 1
           PROC AgDomSvc.exe  1 1

        In my use I have found that the epoch time is not calculated correctly. It
        seems that it will take the local time to calculate GMT and not adjust for
        the time zone.

        I have document this in the BBWIN mail list.

        Hope this helps.

        Robert

-----Original Message-----
From: Anna Jonna Armannsdottir [mailto:user-a8cde33204f6@xymon.invalid]
Sent: Thursday, August 21, 2008 3:43 PM
To: Hobbit user
Subject: [hobbit] configuration of bbwin clients in Hobbit


I want to monitor the size of the logfiles on windows servers.
I want to put a line in hobbit-clients.cfg like this:

FILE /var/log/messages SIZE>0 MTIME<604800 yellow

Does anybody have a clue about the name and paths of logfiles
in Windows XP.

in client local i want to put this:
[win32]
log:/var/log/messages:10240

Any clue, anybody?

--
Kindest Regards, Anna Jonna Ármannsdóttir,       %&   A: Because people
read from top to bottom.
Unix System Aministration, Computing Services,   %&   Q: Why is top
posting bad?
University of Iceland.

--
Chris Strzelczyk
GCS Real Estate
Real Estate Investment and Management
(XXX) XXX-XXXX
(XXX) XXX-XXXX (Business Hours Office Phone)
user-4cf29561ea2e@xymon.invalid
list Chris Strzelczyk · Thu, 28 Aug 2008 14:35:46 -0400 ·
Still not working.

 My alert still turns red.  Do you know if there is any other configuration
in some other file that affects this behavior?  I even tried a different
string incase I was missing something in the first ignore string.  My
[win32] and [default] values are below my server definitions.  Not sure
where to go on this problem at this point.  ~ Thank You for your help.

I even tried to provied the same case as you:

My client-local.cfg:

[stfwin6]
eventlog:System
ignore TermServDevices
ignore Printer Driver required
quoted from Aaron Zink

[win32]

My hobbit-clients.cfg:

HOST=stfwin6
       LOG %.* %WARNING  COLOR=yellow
       LOG %.* %ERROR  COLOR=yellow


On Thu, Aug 28, 2008 at 1:49 PM, Aaron Zink <user-d721f5a4f642@xymon.invalid> wrote:
I could never get the ignore clause to work in for the event log either.
 Let me know if you have any luck!

I had problems with [win32] until I noticed there was an example [win32] up
at the top of the file in the examples which was overriding my settings...
whoops.  I don't know if this applies to you.

My client-local.cfg looks like:

[win32]
eventlog:security
ignore .*success.*
eventlog:application
ignore BigBrotherHobbitClient
eventlog:eventlog_application
ignore BigBrotherHobbitClient
eventlog:system
ignore TermServDevices
ignore information
file:C:\Program Files\BBWin\bin\BBWin.exe:md5

None of the ignore statements work.


Aaron Zink
Manager, Corporate IT
eHarmony.com
XXX.XXX.XXXX


-----Original Message-----
From: Chris Strzelczyk [mailto:user-d7a0467635ec@xymon.invalid]
Sent: Thursday, August 28, 2008 09:17
To: user-ae9b8668bcde@xymon.invalid
 Subject: Re: [hobbit] configuration of bbwin clients in Hobbit

Hello, I am having a really hard time getting Hobbit to ignore Windows
error log messages.  I searched the groups and can not find an answer that
differs from my setup.  Yet it does not work for me.

Also, does anyone have the CLASS=win32 feature to work.  Currently I am
filtering by hostnames, but I would like to filter by CLASS.  I have the
following in my files.

bb-hosts:
xxx.xxx.xxx.xxx   stfwin6 # COMMENT:"WINDOWS TESTING SERVER"

My client-local.cfg:

[stfwin6]
log:system
ignore TermServDevices

[win32]

My hobbit-clients.cfg:

HOST=stfwin6
       LOG %.* %WARNING  COLOR=yellow
       LOG %.* %ERROR  COLOR=yellow


In client-local.cfg I tried the log keyword as well as the eventlog
keyword.

Thank You
-cs

On Fri, Aug 22, 2008 at 7:53 AM, McGraw, Robert P <user-33cf07af04dd@xymon.invalid>
wrote:


       Anna,

       I have not had good luck using class names so I have stayed with
using host
       name. Make sure that your hostname of the same class comes before
the class
       name. Ever which one it finds first that is the one it will use. So
if you
       have an empty class name and a host name of the same class comes
after the
       class name nothing will happen.


       So here is my client-local.cfg I have


       [hostname.xxx.purdue.edu]
       file:c:\Alligate\Digests\.Red_If_Digest_Did_Not_Run.txt
       eventlog:Application
       ignore information
       ignore success
       ignore message could not be scanned
       ignore Error occurred in Scanning
       eventlog:Security
       ignore information
       ignore success
       ignore MAILRELAY Error Code: 0x0
       eventlog:System
       ignore information
       ignore success

       and my hobbit-client.cfg

       HOST=hostname.xxx.purdue.edu
          UP 30m 1w
          LOAD 40.0 70.0
          DISK * 90 95
          FILE c:\Alligate\Digests\.Red_If_Digest_Did_Not_Run.txt red
CTIME<100800
          LOG %.* %WARNING  COLOR=yellow
          LOG %.* %ERROR  COLOR=red
          PROC AGDigestSvc.exe  1 1
          PROC AgDomSvc.exe  1 1

       In my use I have found that the epoch time is not calculated
correctly. It
       seems that it will take the local time to calculate GMT and not
adjust for
       the time zone.

       I have document this in the BBWIN mail list.

       Hope this helps.

       Robert

-----Original Message-----
From: Anna Jonna Armannsdottir [mailto:user-a8cde33204f6@xymon.invalid]
Sent: Thursday, August 21, 2008 3:43 PM
To: Hobbit user
Subject: [hobbit] configuration of bbwin clients in Hobbit


I want to monitor the size of the logfiles on windows servers.
I want to put a line in hobbit-clients.cfg like this:

FILE /var/log/messages SIZE>0 MTIME<604800 yellow

Does anybody have a clue about the name and paths of logfiles
in Windows XP.

in client local i want to put this:
[win32]
log:/var/log/messages:10240

Any clue, anybody?

--
Kindest Regards, Anna Jonna Ármannsdóttir,       %&   A: Because
people
read from top to bottom.
Unix System Aministration, Computing Services,   %&   Q: Why is
top
posting bad?
University of Iceland.

--
Chris Strzelczyk
GCS Real Estate
Real Estate Investment and Management
(XXX) XXX-XXXX
(XXX) XXX-XXXX (Business Hours Office Phone)
user-4cf29561ea2e@xymon.invalid

-- 
Chris Strzelczyk
GCS Real Estate
Real Estate Investment and Management
(XXX) XXX-XXXX
(XXX) XXX-XXXX (Business Hours Office Phone)
user-4cf29561ea2e@xymon.invalid