Expected strings (Capacity and Mounted) not found in df output
list Robert Manocchia
I am getting the following alert from hobbit 4.2.0: yellow Fri Jun 8 10:53:36 EDT 2007 - Filesystems NOT ok &red Expected strings (Capacity and Mounted) not found in df output When I look at the output from the client the df output is missing. This is happening sporadically. Other times it reports the df output fine. Any ideas. Robert Manocchia UNIX System Administrator IDEXX Laboratories XXX XXX-XXXX EMail user-615a9b935f98@xymon.invalid
list Greg L Hubbard
See if your client output is getting truncated because of the max message setting. You will see complaints about this on the Hobbit server, but I forget whether it is in the hobbitd test or what.
▸
From: Manocchia, Robert [mailto:user-615a9b935f98@xymon.invalid]
Sent: Friday, June 08, 2007 10:03 AM
To: 'user-ae9b8668bcde@xymon.invalid'
Subject: [hobbit] Expected strings (Capacity and Mounted) not
found in df output
I am getting the following alert from hobbit 4.2.0:
yellow Fri Jun 8 10:53:36 EDT 2007 - Filesystems NOT ok
&red Expected strings (Capacity and Mounted) not found in df
output
When I look at the output from the client the df output is
missing. This is happening sporadically. Other times it reports the df
output fine.
Any ideas.
Robert Manocchia
UNIX System Administrator
IDEXX Laboratories
XXX XXX-XXXX
EMail user-615a9b935f98@xymon.invalid
list Robert Manocchia
I checked the hobbitserver.cfg file on the server and found the following parm: BBMAXMSGSPERCOMBO="100" Is this what you were referring to.
▸
Robert Manocchia
UNIX System Administrator
IDEXX Laboratories
XXX XXX-XXXX
EMail user-615a9b935f98@xymon.invalid
-----Original Message-----
From: Hubbard, Greg L [mailto:user-d970b5e56ec9@xymon.invalid]
Sent: Friday, June 08, 2007 11:13 AM
To: user-ae9b8668bcde@xymon.invalid
Subject: RE: [hobbit] Expected strings (Capacity and Mounted) not found in
df output
See if your client output is getting truncated because of the max message
setting. You will see complaints about this on the Hobbit server, but I
forget whether it is in the hobbitd test or what.
From: Manocchia, Robert [mailto:user-615a9b935f98@xymon.invalid]
Sent: Friday, June 08, 2007 10:03 AM
To: 'user-ae9b8668bcde@xymon.invalid'
Subject: [hobbit] Expected strings (Capacity and Mounted) not found in df
output
I am getting the following alert from hobbit 4.2.0:
yellow Fri Jun 8 10:53:36 EDT 2007 - Filesystems NOT ok
&red Expected strings (Capacity and Mounted) not found in df output
When I look at the output from the client the df output is missing. This is
happening sporadically. Other times it reports the df output fine.
Any ideas.
Robert Manocchia
UNIX System Administrator
IDEXX Laboratories
XXX XXX-XXXX
EMail user-615a9b935f98@xymon.invalid
list Matthew Epp
I've researched this problem through the list archives, and haven't found an easy solution for this yet. Basically, we have a application that dumps roughly 25k of data into a log file every SECOND. Now, I'm trying to figure out if the client-local.cfg is able to do what I think the man page says.
It states that if you use a TRIGGER line, that the Hobbit client will parse and only match against lines that are in the trigger, and only send those to the server. Is that correct? If so, shouldn't it not matter that there's a lot of data being added to the log itself, as it's not all getting sent?
The other issue is, with the settings for this application, the log file ends up rotating every 10 minutes. This means that there is a chance of missing a match, if the file rotates in between polling cycles. How can I increase the interval of log file checking?
I thought if maybe I added an IGNORE line, and dumped all of the extraneous data, maybe then the server could handle it. But it doesn't seem to be paying any attention to it.
My client-local.cfg looks like this:
[server01]
log:/var/adm/messages:10240
log:/logs/http/http:10240
ignore General\sInformation|Account\sNotice|Account\sInformation
trigger DSA\sis\sbusy
And hobbit-clients.cfg:
HOST=%^server01
LOG /logs/http/http %DSA\sis\sbusy COLOR=red
list Jim Smith
This might help: # logcheck.sh: Log file checker # Written by Craig Rowland <user-6e76e105b212@xymon.invalid> # # This file needs the program logtail.c to run Jim Smith SVHS Little Rock
▸
-----Original Message-----
From: Matthew Epp [mailto:user-c07bdcff406c@xymon.invalid] Sent: Friday, June 08, 2007 2:37 PM
To: user-ae9b8668bcde@xymon.invalid
Subject: [hobbit] Dealing with large log files
I've researched this problem through the list archives, and haven't found an easy solution for this yet. Basically, we have a application that dumps roughly 25k of data into a log file every SECOND. Now, I'm trying to figure out if the client-local.cfg is able to do what I think the man page says.
It states that if you use a TRIGGER line, that the Hobbit client will parse and only match against lines that are in the trigger, and only send those to the server. Is that correct? If so, shouldn't it not matter that there's a lot of data being added to the log itself, as it's
not all getting sent?
The other issue is, with the settings for this application, the log file
ends up rotating every 10 minutes. This means that there is a chance of missing a match, if the file rotates in between polling cycles. How can I increase the interval of log file checking?
I thought if maybe I added an IGNORE line, and dumped all of the extraneous data, maybe then the server could handle it. But it doesn't seem to be paying any attention to it.
My client-local.cfg looks like this:
[server01]
log:/var/adm/messages:10240
log:/logs/http/http:10240
ignore General\sInformation|Account\sNotice|Account\sInformation
trigger DSA\sis\sbusy
And hobbit-clients.cfg:
HOST=%^server01
LOG /logs/http/http %DSA\sis\sbusy COLOR=red
NOTICE: This email contains confidential or proprietary information which may be legally privileged. It is intended only for the named recipient(s). If an addressing error has misdirected the email, please notify the author by replying to this message. If you are not the named recipient, you are not authorized to use, disclose, distribute, copy, print or rely on this email, and should immediately delete it from your computer system.
list Robert Manocchia
I tried looking at this but cannot find out where this setting is. Does anyone know where it could be.
▸
Robert Manocchia
UNIX System Administrator
IDEXX Laboratories
XXX XXX-XXXX
EMail user-615a9b935f98@xymon.invalid
-----Original Message-----
▸
From: Hubbard, Greg L [mailto:user-d970b5e56ec9@xymon.invalid]
Sent: Friday, June 08, 2007 11:13 AM
To: user-ae9b8668bcde@xymon.invalid
Subject: RE: [hobbit] Expected strings (Capacity and Mounted) not found in
df output
See if your client output is getting truncated because of the max message
setting. You will see complaints about this on the Hobbit server, but I
forget whether it is in the hobbitd test or what.
From: Manocchia, Robert [mailto:user-615a9b935f98@xymon.invalid]
Sent: Friday, June 08, 2007 10:03 AM
To: 'user-ae9b8668bcde@xymon.invalid'
Subject: [hobbit] Expected strings (Capacity and Mounted) not found in df
output
I am getting the following alert from hobbit 4.2.0:
yellow Fri Jun 8 10:53:36 EDT 2007 - Filesystems NOT ok
&red Expected strings (Capacity and Mounted) not found in df output
When I look at the output from the client the df output is missing. This is
happening sporadically. Other times it reports the df output fine.
Any ideas.
Robert Manocchia
UNIX System Administrator
IDEXX Laboratories
XXX XXX-XXXX
EMail user-615a9b935f98@xymon.invalid