configuration of bbwin clients in Hobbit
list Anna Jonna Armannsdottir
I want to monitor the size of the logfiles on windows servers. I want to put a line in hobbit-clients.cfg like this: FILE /var/log/messages SIZE>0 MTIME<604800 yellow Does anybody have a clue about the name and paths of logfiles in Windows XP. in client local i want to put this: [win32] log:/var/log/messages:10240 Any clue, anybody? -- Kindest Regards, Anna Jonna Ármannsdóttir, %& A: Because people read from top to bottom. Unix System Aministration, Computing Services, %& Q: Why is top posting bad? University of Iceland.
list Robert P McGraw
Anna,
I have not had good luck using class names so I have stayed with using host
name. Make sure that your hostname of the same class comes before the class
name. Ever which one it finds first that is the one it will use. So if you
have an empty class name and a host name of the same class comes after the
class name nothing will happen.
So here is my client-local.cfg I have
[hostname.xxx.purdue.edu]
file:c:\Alligate\Digests\.Red_If_Digest_Did_Not_Run.txt
eventlog:Application
ignore information
ignore success
ignore message could not be scanned
ignore Error occurred in Scanning
eventlog:Security
ignore information
ignore success
ignore MAILRELAY Error Code: 0x0
eventlog:System
ignore information
ignore success
and my hobbit-client.cfg
HOST=hostname.xxx.purdue.edu
UP 30m 1w
LOAD 40.0 70.0
DISK * 90 95
FILE c:\Alligate\Digests\.Red_If_Digest_Did_Not_Run.txt red CTIME<100800
LOG %.* %WARNING COLOR=yellow
LOG %.* %ERROR COLOR=red
PROC AGDigestSvc.exe 1 1
PROC AgDomSvc.exe 1 1
In my use I have found that the epoch time is not calculated correctly. It
seems that it will take the local time to calculate GMT and not adjust for
the time zone.
I have document this in the BBWIN mail list.
Hope this helps.
Robert
▸
-----Original Message----- From: Anna Jonna Armannsdottir [mailto:user-a8cde33204f6@xymon.invalid] Sent: Thursday, August 21, 2008 3:43 PM To: Hobbit user Subject: [hobbit] configuration of bbwin clients in Hobbit I want to monitor the size of the logfiles on windows servers. I want to put a line in hobbit-clients.cfg like this: FILE /var/log/messages SIZE>0 MTIME<604800 yellow Does anybody have a clue about the name and paths of logfiles in Windows XP. in client local i want to put this: [win32] log:/var/log/messages:10240 Any clue, anybody? -- Kindest Regards, Anna Jonna Ármannsdóttir, %& A: Because people read from top to bottom. Unix System Aministration, Computing Services, %& Q: Why is top posting bad? University of Iceland.
list Chris Strzelczyk
Hello, I am having a really hard time getting Hobbit to ignore Windows error
log messages. I searched the groups and can not find an answer that differs
from my setup. Yet it does not work for me.
Also, does anyone have the CLASS=win32 feature to work. Currently I am
filtering by hostnames, but I would like to filter by CLASS. I have the
following in my files.
bb-hosts:
xxx.xxx.xxx.xxx stfwin6 # COMMENT:"WINDOWS TESTING SERVER"
My client-local.cfg:
[stfwin6]
log:system
ignore TermServDevices
[win32]
My hobbit-clients.cfg:
HOST=stfwin6
LOG %.* %WARNING COLOR=yellow
LOG %.* %ERROR COLOR=yellow
In client-local.cfg I tried the log keyword as well as the eventlog keyword.
Thank You
-cs
▸
On Fri, Aug 22, 2008 at 7:53 AM, McGraw, Robert P <user-33cf07af04dd@xymon.invalid>wrote:
Anna, I have not had good luck using class names so I have stayed with using host name. Make sure that your hostname of the same class comes before the class name. Ever which one it finds first that is the one it will use. So if you have an empty class name and a host name of the same class comes after the class name nothing will happen. So here is my client-local.cfg I have [hostname.xxx.purdue.edu] file:c:\Alligate\Digests\.Red_If_Digest_Did_Not_Run.txt eventlog:Application ignore information ignore success ignore message could not be scanned ignore Error occurred in Scanning eventlog:Security ignore information ignore success ignore MAILRELAY Error Code: 0x0 eventlog:System ignore information ignore success and my hobbit-client.cfg HOST=hostname.xxx.purdue.edu UP 30m 1w LOAD 40.0 70.0 DISK * 90 95 FILE c:\Alligate\Digests\.Red_If_Digest_Did_Not_Run.txt red CTIME<100800 LOG %.* %WARNING COLOR=yellow LOG %.* %ERROR COLOR=red PROC AGDigestSvc.exe 1 1 PROC AgDomSvc.exe 1 1 In my use I have found that the epoch time is not calculated correctly. It seems that it will take the local time to calculate GMT and not adjust for the time zone. I have document this in the BBWIN mail list. Hope this helps. Robert-----Original Message----- From: Anna Jonna Armannsdottir [mailto:user-a8cde33204f6@xymon.invalid] Sent: Thursday, August 21, 2008 3:43 PM To: Hobbit user Subject: [hobbit] configuration of bbwin clients in Hobbit I want to monitor the size of the logfiles on windows servers. I want to put a line in hobbit-clients.cfg like this: FILE /var/log/messages SIZE>0 MTIME<604800 yellow Does anybody have a clue about the name and paths of logfiles in Windows XP. in client local i want to put this: [win32] log:/var/log/messages:10240 Any clue, anybody? -- Kindest Regards, Anna Jonna Ármannsdóttir, %& A: Because people read from top to bottom. Unix System Aministration, Computing Services, %& Q: Why is top posting bad? University of Iceland.
--
Chris Strzelczyk
GCS Real Estate
Real Estate Investment and Management
(XXX) XXX-XXXX
(XXX) XXX-XXXX (Business Hours Office Phone)
user-4cf29561ea2e@xymon.invalid
list Robert P McGraw
This is working on my side. Also you can click on Client data at the bottom of the hobbit we page to see the data that is being passed. Here is a snippet of my client-loal.cfg. Be sure that your class [win32] comes after your win32 hostname entry. It seems that which ever one if finds first that is the one that is used so if [win32] is blank then nothing happens. [mailrelay]
▸
file:c:\Alligate\Digests\.Red_If_Digest_Did_Not_Run.txt
eventlog:Application
ignore information
ignore success
ignore message could not be scanned
ignore Error occurred in Scanning
eventlog:Security
ignore information
ignore success
ignore MAILRELAY Error Code: 0x0
eventlog:System
ignore information
ignore success
[win32]
Here is a snippet of my hobbit-clients.cfg. NOTE: be sure that the
[default] is at the end of the file.
#
HOST=mailrelay
▸
UP 30m 1w
LOAD 40.0 70.0
DISK * 90 95
FILE c:\Alligate\Digests\.Red_If_Digest_Did_Not_Run.txt red CTIME<100800
LOG %.* %WARNING COLOR=yellow
LOG %.* %ERROR COLOR=red
PROC AGDigestSvc.exe 1 1
PROC AgDomSvc.exe 1 1
Hope this helps.
Robert
▸
From: Chris Strzelczyk [mailto:user-d7a0467635ec@xymon.invalid]
Sent: Thursday, August 28, 2008 12:17 PM
To: user-ae9b8668bcde@xymon.invalid
Subject: Re: [hobbit] configuration of bbwin clients in Hobbit
Hello, I am having a really hard time getting Hobbit to ignore Windows error
log messages. I searched the groups and can not find an answer that differs
from my setup. Yet it does not work for me.
Also, does anyone have the CLASS=win32 feature to work. Currently I am
filtering by hostnames, but I would like to filter by CLASS. I have the
following in my files.
bb-hosts:
xxx.xxx.xxx.xxx stfwin6 # COMMENT:"WINDOWS TESTING SERVER"
My client-local.cfg:
[stfwin6]
log:system
ignore TermServDevices
[win32]
My hobbit-clients.cfg:
HOST=stfwin6
LOG %.* %WARNING COLOR=yellow
LOG %.* %ERROR COLOR=yellow
In client-local.cfg I tried the log keyword as well as the eventlog keyword.
Thank You
-cs
On Fri, Aug 22, 2008 at 7:53 AM, McGraw, Robert P <user-33cf07af04dd@xymon.invalid>
▸
wrote:
Anna,
I have not had good luck using class names so I have stayed with using host
name. Make sure that your hostname of the same class comes before the class
name. Ever which one it finds first that is the one it will use. So if you
have an empty class name and a host name of the same class comes after the
class name nothing will happen.
So here is my client-local.cfg I have
[hostname.xxx.purdue.edu]
file:c:\Alligate\Digests\.Red_If_Digest_Did_Not_Run.txt
eventlog:Application
ignore information
ignore success
ignore message could not be scanned
ignore Error occurred in Scanning
eventlog:Security
ignore information
ignore success
ignore MAILRELAY Error Code: 0x0
eventlog:System
ignore information
ignore success
and my hobbit-client.cfg
HOST=hostname.xxx.purdue.edu
UP 30m 1w
LOAD 40.0 70.0
DISK * 90 95
FILE c:\Alligate\Digests\.Red_If_Digest_Did_Not_Run.txt red CTIME<100800
LOG %.* %WARNING COLOR=yellow
LOG %.* %ERROR COLOR=red
PROC AGDigestSvc.exe 1 1
PROC AgDomSvc.exe 1 1
In my use I have found that the epoch time is not calculated correctly. It
seems that it will take the local time to calculate GMT and not adjust for
the time zone.
I have document this in the BBWIN mail list.
Hope this helps.
Robert
-----Original Message----- From: Anna Jonna Armannsdottir [mailto:user-a8cde33204f6@xymon.invalid] Sent: Thursday, August 21, 2008 3:43 PM To: Hobbit user Subject: [hobbit] configuration of bbwin clients in Hobbit I want to monitor the size of the logfiles on windows servers. I want to put a line in hobbit-clients.cfg like this: FILE /var/log/messages SIZE>0 MTIME<604800 yellow Does anybody have a clue about the name and paths of logfiles in Windows XP. in client local i want to put this: [win32] log:/var/log/messages:10240 Any clue, anybody? -- Kindest Regards, Anna Jonna Ármannsdóttir, %& A: Because people read from top to bottom. Unix System Aministration, Computing Services, %& Q: Why is top posting bad? University of Iceland.
-- Chris Strzelczyk GCS Real Estate Real Estate Investment and Management (XXX) XXX-XXXX (XXX) XXX-XXXX (Business Hours Office Phone) user-4cf29561ea2e@xymon.invalid
list Aaron Zink
I could never get the ignore clause to work in for the event log either. Let me know if you have any luck! I had problems with [win32] until I noticed there was an example [win32] up at the top of the file in the examples which was overriding my settings... whoops. I don't know if this applies to you. My client-local.cfg looks like: [win32] eventlog:security ignore .*success.* eventlog:application ignore BigBrotherHobbitClient eventlog:eventlog_application ignore BigBrotherHobbitClient eventlog:system ignore TermServDevices ignore information file:C:\Program Files\BBWin\bin\BBWin.exe:md5 None of the ignore statements work. Aaron Zink Manager, Corporate IT eHarmony.com XXX.XXX.XXXX
▸
-----Original Message-----
From: Chris Strzelczyk [mailto:user-d7a0467635ec@xymon.invalid]
Sent: Thursday, August 28, 2008 09:17
To: user-ae9b8668bcde@xymon.invalid
Subject: Re: [hobbit] configuration of bbwin clients in Hobbit
Hello, I am having a really hard time getting Hobbit to ignore Windows error log messages. I searched the groups and can not find an answer that differs from my setup. Yet it does not work for me.
Also, does anyone have the CLASS=win32 feature to work. Currently I am filtering by hostnames, but I would like to filter by CLASS. I have the following in my files.
bb-hosts:
xxx.xxx.xxx.xxx stfwin6 # COMMENT:"WINDOWS TESTING SERVER"
My client-local.cfg:
[stfwin6]
log:system
ignore TermServDevices
[win32]
My hobbit-clients.cfg:
HOST=stfwin6
LOG %.* %WARNING COLOR=yellow
LOG %.* %ERROR COLOR=yellow
In client-local.cfg I tried the log keyword as well as the eventlog keyword.
Thank You
-cs
On Fri, Aug 22, 2008 at 7:53 AM, McGraw, Robert P <user-33cf07af04dd@xymon.invalid> wrote:
Anna,
I have not had good luck using class names so I have stayed with using host
name. Make sure that your hostname of the same class comes before the class
name. Ever which one it finds first that is the one it will use. So if you
have an empty class name and a host name of the same class comes after the
class name nothing will happen.
So here is my client-local.cfg I have
[hostname.xxx.purdue.edu]
file:c:\Alligate\Digests\.Red_If_Digest_Did_Not_Run.txt
eventlog:Application
ignore information
ignore success
ignore message could not be scanned
ignore Error occurred in Scanning
eventlog:Security
ignore information
ignore success
ignore MAILRELAY Error Code: 0x0
eventlog:System
ignore information
ignore success
and my hobbit-client.cfg
HOST=hostname.xxx.purdue.edu
UP 30m 1w
LOAD 40.0 70.0
DISK * 90 95
FILE c:\Alligate\Digests\.Red_If_Digest_Did_Not_Run.txt red CTIME<100800
LOG %.* %WARNING COLOR=yellow
LOG %.* %ERROR COLOR=red
PROC AGDigestSvc.exe 1 1
PROC AgDomSvc.exe 1 1
In my use I have found that the epoch time is not calculated correctly. It
seems that it will take the local time to calculate GMT and not adjust for
the time zone.
I have document this in the BBWIN mail list.
Hope this helps.
Robert
-----Original Message----- From: Anna Jonna Armannsdottir [mailto:user-a8cde33204f6@xymon.invalid] Sent: Thursday, August 21, 2008 3:43 PM To: Hobbit user Subject: [hobbit] configuration of bbwin clients in Hobbit I want to monitor the size of the logfiles on windows servers. I want to put a line in hobbit-clients.cfg like this: FILE /var/log/messages SIZE>0 MTIME<604800 yellow Does anybody have a clue about the name and paths of logfiles in Windows XP. in client local i want to put this: [win32] log:/var/log/messages:10240 Any clue, anybody? -- Kindest Regards, Anna Jonna Ármannsdóttir, %& A: Because people read from top to bottom. Unix System Aministration, Computing Services, %& Q: Why is top posting bad? University of Iceland.
-- Chris Strzelczyk GCS Real Estate Real Estate Investment and Management (XXX) XXX-XXXX (XXX) XXX-XXXX (Business Hours Office Phone) user-4cf29561ea2e@xymon.invalid
list Chris Strzelczyk
Still not working. My alert still turns red. Do you know if there is any other configuration in some other file that affects this behavior? I even tried a different string incase I was missing something in the first ignore string. My [win32] and [default] values are below my server definitions. Not sure where to go on this problem at this point. ~ Thank You for your help. I even tried to provied the same case as you: My client-local.cfg: [stfwin6] eventlog:System ignore TermServDevices ignore Printer Driver required
▸
[win32]
My hobbit-clients.cfg:
HOST=stfwin6
LOG %.* %WARNING COLOR=yellow
LOG %.* %ERROR COLOR=yellow
On Thu, Aug 28, 2008 at 1:49 PM, Aaron Zink <user-d721f5a4f642@xymon.invalid> wrote:
I could never get the ignore clause to work in for the event log either. Let me know if you have any luck! I had problems with [win32] until I noticed there was an example [win32] up at the top of the file in the examples which was overriding my settings... whoops. I don't know if this applies to you. My client-local.cfg looks like: [win32] eventlog:security ignore .*success.* eventlog:application ignore BigBrotherHobbitClient eventlog:eventlog_application ignore BigBrotherHobbitClient eventlog:system ignore TermServDevices ignore information file:C:\Program Files\BBWin\bin\BBWin.exe:md5 None of the ignore statements work. Aaron Zink Manager, Corporate IT eHarmony.com XXX.XXX.XXXX -----Original Message----- From: Chris Strzelczyk [mailto:user-d7a0467635ec@xymon.invalid] Sent: Thursday, August 28, 2008 09:17 To: user-ae9b8668bcde@xymon.invalid Subject: Re: [hobbit] configuration of bbwin clients in Hobbit Hello, I am having a really hard time getting Hobbit to ignore Windows error log messages. I searched the groups and can not find an answer that differs from my setup. Yet it does not work for me. Also, does anyone have the CLASS=win32 feature to work. Currently I am filtering by hostnames, but I would like to filter by CLASS. I have the following in my files. bb-hosts: xxx.xxx.xxx.xxx stfwin6 # COMMENT:"WINDOWS TESTING SERVER" My client-local.cfg: [stfwin6] log:system ignore TermServDevices [win32] My hobbit-clients.cfg: HOST=stfwin6 LOG %.* %WARNING COLOR=yellow LOG %.* %ERROR COLOR=yellow In client-local.cfg I tried the log keyword as well as the eventlog keyword. Thank You -cs On Fri, Aug 22, 2008 at 7:53 AM, McGraw, Robert P <user-33cf07af04dd@xymon.invalid> wrote: Anna, I have not had good luck using class names so I have stayed with using host name. Make sure that your hostname of the same class comes before the class name. Ever which one it finds first that is the one it will use. So if you have an empty class name and a host name of the same class comes after the class name nothing will happen. So here is my client-local.cfg I have [hostname.xxx.purdue.edu] file:c:\Alligate\Digests\.Red_If_Digest_Did_Not_Run.txt eventlog:Application ignore information ignore success ignore message could not be scanned ignore Error occurred in Scanning eventlog:Security ignore information ignore success ignore MAILRELAY Error Code: 0x0 eventlog:System ignore information ignore success and my hobbit-client.cfg HOST=hostname.xxx.purdue.edu UP 30m 1w LOAD 40.0 70.0 DISK * 90 95 FILE c:\Alligate\Digests\.Red_If_Digest_Did_Not_Run.txt red CTIME<100800 LOG %.* %WARNING COLOR=yellow LOG %.* %ERROR COLOR=red PROC AGDigestSvc.exe 1 1 PROC AgDomSvc.exe 1 1 In my use I have found that the epoch time is not calculated correctly. It seems that it will take the local time to calculate GMT and not adjust for the time zone. I have document this in the BBWIN mail list. Hope this helps. Robert-----Original Message----- From: Anna Jonna Armannsdottir [mailto:user-a8cde33204f6@xymon.invalid] Sent: Thursday, August 21, 2008 3:43 PM To: Hobbit user Subject: [hobbit] configuration of bbwin clients in Hobbit I want to monitor the size of the logfiles on windows servers. I want to put a line in hobbit-clients.cfg like this: FILE /var/log/messages SIZE>0 MTIME<604800 yellow Does anybody have a clue about the name and paths of logfiles in Windows XP. in client local i want to put this: [win32] log:/var/log/messages:10240 Any clue, anybody? -- Kindest Regards, Anna Jonna Ármannsdóttir, %& A: Because people read from top to bottom. Unix System Aministration, Computing Services, %& Q: Why is top posting bad? University of Iceland.-- Chris Strzelczyk GCS Real Estate Real Estate Investment and Management (XXX) XXX-XXXX (XXX) XXX-XXXX (Business Hours Office Phone) user-4cf29561ea2e@xymon.invalid
-- Chris Strzelczyk GCS Real Estate Real Estate Investment and Management (XXX) XXX-XXXX (XXX) XXX-XXXX (Business Hours Office Phone) user-4cf29561ea2e@xymon.invalid