False Alarm
list Gautier Begin
Hello, Since last Thuesday, we encourter false alarms on procs and disk tests. It seems as real alarms are attributed to a wrong hostname because in the attached data, we see that the xymon agent process is configured for an other hostname. Cordialement, Regards,Mit freundlichen Grüßen, Gautier BEGIN Admin and Tools Team CSC Computer Sciences Luxembourg S.A. 12D Impasse Drosbach L-1882 Luxembourg Global Outsourcing Service | p:+352 24 834 276 | m:+352 621 229 172 | user-083785ae1711@xymon.invalid | www.csc.com CSC • This is a PRIVATE message. If you are not the intended recipient, please delete without copying and kindly advise us by e-mail of the mistake in delivery. NOTE: Regardless of content, this e-mail shall not operate to bind CSC to any order or other contract unless pursuant to explicit written agreement or government initiative expressly permitting the use of e-mail for such purpose • CSC Computer Sciences SAS • Registered Office: Immeuble Le Balzac, 10 Place des Vosges, 92072 Paris La Défense Cedex, France • Registered in France: RCS Nanterre B 315 268 664
list Jeremy Laidman
▸
On Wed, Mar 28, 2012 at 12:25 AM, Gautier Begin <user-083785ae1711@xymon.invalid> wrote:
Since last Thuesday, we encourter false alarms on procs and disk tests. It seems as real alarms are attributed to a wrong hostname because in the attached data, we see that the xymon agent process is configured for an other hostname.
On the client, do you have a file in /tmp (or $XYMONTMP) called "msg.<name-of-host>.txt"? Does the filename match the hostname? Does the contents show the correct hostname?
list Gautier Begin
Jeremy, Yes, all files in the tmp directory match the hostname of the machine. It seems as the mismatch is coming from the hobbitd on the server. The false alarm is coming up just one time then wanishes.
▸
Cordialement, Regards,Mit freundlichen Grüßen,
Gautier BEGIN
Admin and Tools Team
CSC Computer Sciences Luxembourg S.A.
12D Impasse Drosbach
L-1882 Luxembourg
Global Outsourcing Service | p:+352 24 834 276 | m:+352 621 229 172 | user-083785ae1711@xymon.invalid | www.csc.com
CSC • This is a PRIVATE message. If you are not the intended recipient, please delete without copying and kindly advise us by e-mail of the mistake in delivery. NOTE: Regardless of content, this e-mail shall not operate to bind CSC to any order or other contract unless pursuant to explicit written agreement or government initiative expressly permitting the use of e-mail for such purpose
• CSC Computer Sciences SAS • Registered Office: Immeuble Le Balzac, 10 Place des Vosges, 92072 Paris La Défense Cedex, France • Registered in France: RCS Nanterre B 315 268 664
From: Jeremy Laidman <user-71895fb2e44c@xymon.invalid>
To: Gautier Begin/LUX/CSC at CSC
Cc: xymon at xymon.com
Date: 03/28/2012 04:49 AM
Subject: Re: [Xymon] False Alarm
On Wed, Mar 28, 2012 at 12:25 AM, Gautier Begin <user-083785ae1711@xymon.invalid> wrote:Since last Thuesday, we encourter false alarms on procs and disk tests.
It
seems as real alarms are attributed to a wrong hostname because in the attached data, we see that the xymon agent process is configured for an other hostname.
On the client, do you have a file in /tmp (or $XYMONTMP) called "msg.<name-of-host>.txt"? Does the filename match the hostname? Does the contents show the correct hostname?
list Larry Barber
Is it possible you have two different hosts reporting under the same name? If your reports are coming in more frequently than every five minutes (check alert history) then you likely have two different machines reporting the same name. Thanks, Larry Barber
▸
On Wed, Mar 28, 2012 at 1:42 AM, Gautier Begin <user-083785ae1711@xymon.invalid> wrote:
Jeremy, Yes, all files in the tmp directory match the hostname of the machine. It seems as the mismatch is coming from the hobbitd on the server. The false alarm is coming up just one time then wanishes. Cordialement, Regards,Mit freundlichen Grüßen, Gautier BEGIN Admin and Tools Team CSC Computer Sciences Luxembourg S.A. 12D Impasse Drosbach L-1882 Luxembourg Global Outsourcing Service | p:+352 24 834 276 | m:+352 621 229 172 | user-083785ae1711@xymon.invalid | www.csc.com CSC • This is a PRIVATE message. If you are not the intended recipient, please delete without copying and kindly advise us by e-mail of the mistake in delivery. NOTE: Regardless of content, this e-mail shall not operate to bind CSC to any order or other contract unless pursuant to explicit written agreement or government initiative expressly permitting the use of e-mail for such purpose • CSC Computer Sciences SAS • Registered Office: Immeuble Le Balzac, 10 Place des Vosges, 92072 Paris La Défense Cedex, France • Registered in France: RCS Nanterre B 315 268 664 From: Jeremy Laidman <user-71895fb2e44c@xymon.invalid> To: Gautier Begin/LUX/CSC at CSC Cc: xymon at xymon.com Date: 03/28/2012 04:49 AM Subject: Re: [Xymon] False Alarm On Wed, Mar 28, 2012 at 12:25 AM, Gautier Begin <user-083785ae1711@xymon.invalid> wrote:Since last Thuesday, we encourter false alarms on procs and disk tests.Itseems as real alarms are attributed to a wrong hostname because in the attached data, we see that the xymon agent process is configured for an other hostname.On the client, do you have a file in /tmp (or $XYMONTMP) called "msg.<name-of-host>.txt"? Does the filename match the hostname? Does the contents show the correct hostname?
list Ryan Novosielski
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Even better than that, check the history and check both the good and bad status messages, and make sure at the bottom that they are coming from the same IP address.
▸
On 03/28/2012 01:17 PM, Larry Barber wrote:Is it possible you have two different hosts reporting under the same
name? If your reports are coming in more frequently than every five
minutes (check alert history) then you likely have two different
machines reporting the same name.
Thanks,
Larry Barber
On Wed, Mar 28, 2012 at 1:42 AM, Gautier Begin <user-083785ae1711@xymon.invalid
<mailto:user-083785ae1711@xymon.invalid>> wrote:
Jeremy,
Yes, all files in the tmp directory match the hostname of the
machine. It seems as the mismatch is coming from the hobbitd on the
server.
The false alarm is coming up just one time then wanishes.
Cordialement, Regards,Mit freundlichen Grüßen,
Gautier BEGIN
Admin and Tools Team
CSC Computer Sciences Luxembourg S.A.
12D Impasse Drosbach
L-1882 Luxembourg
Global Outsourcing Service | p:+352 24 834 276<tel:%2B352%2024%20834%20276> | m:+352 621 229 172 <tel:%2B352%20621%20229%20172> | user-083785ae1711@xymon.invalid <mailto:user-083785ae1711@xymon.invalid> | www.csc.com <http://www.csc.com>;
▸
CSC • This is a PRIVATE message. If you are not the intended recipient, please delete without copying and kindly advise us by e-mail of the mistake in delivery. NOTE: Regardless of content, this e-mail shall not operate to bind CSC to any order or other contract unless pursuant to explicit written agreement or government initiative expressly permitting the use of e-mail for such purpose • CSC Computer Sciences SAS • Registered Office: Immeuble Le Balzac, 10 Place des Vosges, 92072 Paris La Défense Cedex, France • Registered in France: RCS Nanterre B 315 268 664 From: Jeremy Laidman <user-71895fb2e44c@xymon.invalid To: Gautier Begin/LUX/CSC at CSC Cc: xymon at xymon.com <mailto:xymon at xymon.com> Date: 03/28/2012 04:49 AM Subject: Re: [Xymon] False Alarm On Wed, Mar 28, 2012 at 12:25 AM, Gautier Begin <user-083785ae1711@xymon.invalid <mailto:user-083785ae1711@xymon.invalid>> wrote:Since last Thuesday, we encourter false alarms on procs and disk tests. It seems as real alarms are attributed to a wrong hostname because in the attached data, we see that the xymon agent process is configured for an other hostname.On the client, do you have a file in /tmp (or $XYMONTMP) called "msg.<name-of-host>.txt"? Does the filename match the hostname? Does the contents show the correct hostname?
- -- - ---- _ _ _ _ ___ _ _ _
|Y#| | | |\/| | \ |\ | | |Ryan Novosielski - Sr. Systems Programmer |$&| |__| | | |__/ | \| _| |user-ae4522577e16@xymon.invalid - 973/972.0922 (2-0922) \__/ Univ. of Med. and Dent.|IST/EI-Academic Svcs. - ADMC 450, Newark -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAk9zUhYACgkQmb+gadEcsb4aEACfaLoVav10jQZGSXbNUSthNCaQ 2AkAn31WN3+E4PIE6mxpT8Hqz7XLnMdq =aYzl -----END PGP SIGNATURE-----
list Gautier Begin
Larry, Sorry Larry, but it's not. What's curious is that raw data are correctly registered (rrd, data history ...) but alarms .
▸
Cordialement, Regards,Mit freundlichen Grüßen,
Gautier BEGIN
Admin and Tools Team
CSC Computer Sciences Luxembourg S.A.
12D Impasse Drosbach
L-1882 Luxembourg
Global Outsourcing Service | p:+352 24 834 276 | m:+352 621 229 172 | user-083785ae1711@xymon.invalid | www.csc.com
CSC • This is a PRIVATE message. If you are not the intended recipient, please delete without copying and kindly advise us by e-mail of the mistake in delivery. NOTE: Regardless of content, this e-mail shall not operate to bind CSC to any order or other contract unless pursuant to explicit written agreement or government initiative expressly permitting the use of e-mail for such purpose
• CSC Computer Sciences SAS • Registered Office: Immeuble Le Balzac, 10 Place des Vosges, 92072 Paris La Défense Cedex, France • Registered in France: RCS Nanterre B 315 268 664
From: Larry Barber <user-6ef9c2864140@xymon.invalid>
To: Gautier Begin/LUX/CSC at CSC
Cc: Jeremy Laidman <user-71895fb2e44c@xymon.invalid>, xymon at xymon.com
Date: 03/28/2012 07:15 PM
Subject: Re: [Xymon] False Alarm
Is it possible you have two different hosts reporting under the same name? If your reports are coming in more frequently than every five minutes (check alert history) then you likely have two different machines reporting the same name.
Thanks,
Larry Barber
On Wed, Mar 28, 2012 at 1:42 AM, Gautier Begin <user-083785ae1711@xymon.invalid> wrote:
Jeremy,
Yes, all files in the tmp directory match the hostname of the machine. It seems as the mismatch is coming from the hobbitd on the server. The false alarm is coming up just one time then wanishes.
Cordialement, Regards,Mit freundlichen Grüßen,
Gautier BEGIN
Admin and Tools Team
CSC Computer Sciences Luxembourg S.A.
12D Impasse Drosbach
L-1882 Luxembourg
Global Outsourcing Service | p:+352 24 834 276 | m:+352 621 229 172 | user-083785ae1711@xymon.invalid | www.csc.com
CSC • This is a PRIVATE message. If you are not the intended recipient, please delete without copying and kindly advise us by e-mail of the mistake in delivery. NOTE: Regardless of content, this e-mail shall not operate to bind CSC to any order or other contract unless pursuant to explicit written agreement or government initiative expressly permitting the use of e-mail for such purpose
• CSC Computer Sciences SAS • Registered Office: Immeuble Le Balzac, 10 Place des Vosges, 92072 Paris La Défense Cedex, France • Registered in France: RCS Nanterre B 315 268 664
From: Jeremy Laidman <user-71895fb2e44c@xymon.invalid> To: Gautier Begin/LUX/CSC at CSC Cc: xymon at xymon.com Date: 03/28/2012 04:49 AM Subject: Re: [Xymon] False Alarm
On Wed, Mar 28, 2012 at 12:25 AM, Gautier Begin <user-083785ae1711@xymon.invalid> wrote:Since last Thuesday, we encourter false alarms on procs and disk tests.
It
seems as real alarms are attributed to a wrong hostname because in the attached data, we see that the xymon agent process is configured for an other hostname.
On the client, do you have a file in /tmp (or $XYMONTMP) called "msg.<name-of-host>.txt"? Does the filename match the hostname? Does the contents show the correct hostname?