exhost question

8 messages in this thread

list Bill Perez · Fri, 21 Jul 2006 09:04:49 -0400 ·

Hello,

Could someone let me know how I can use 2 different domain names when
excluding hosts in the hobbit-alerts.cfg?  Example:
exhost=%(server).test.com %(server).abc.intra.  I tried to use a comma and
space between the 2 domain names but it isn't taking it.

Thanks in advance for any info

list Henrik Størner · Fri, 21 Jul 2006 16:54:49 +0200 ·

▸ quoted from Bill Perez

On Fri, Jul 21, 2006 at 09:04:49AM -0400, Bill Perez wrote:

Could someone let me know how I can use 2 different domain names when
excluding hosts in the hobbit-alerts.cfg?  Example:
exhost=%(server).test.com %(server).abc.intra.  I tried to use a comma and
space between the 2 domain names but it isn't taking it.

How about
  exhost=%server.(test.com|abc.intra)


Regards,
Henrik

list Bill Perez · Fri, 21 Jul 2006 13:23:02 -0400 ·

How about
exhost=%server.(test.com|abc.intra)

The server names are actually different. so it's server1.test.com
server2.abc.intra and another server doesn't have a domain name specified.
Any other ideas?

▸ quoted from Henrik Størner


On 7/21/06, Henrik Stoerner <user-ce4a2c883f75@xymon.invalid> wrote:

On Fri, Jul 21, 2006 at 09:04:49AM -0400, Bill Perez wrote:

Could someone let me know how I can use 2 different domain names when
excluding hosts in the hobbit-alerts.cfg?  Example:
exhost=%(server).test.com %(server).abc.intra.  I tried to use a comma
and
space between the 2 domain names but it isn't taking it.

How about
exhost=%server.(test.com|abc.intra)


Regards,
Henrik

list David Gore · Fri, 21 Jul 2006 20:22:19 +0000 ·


Bill Perez wrote:

How about
exhost=%server.(test.com|abc.intra)

The server names are actually different. so it's server1.test.com <http://server1.test.com>; server2.abc.intra and another server doesn't have a domain name specified.  Any other ideas?

▸ quoted from Bill Perez


On 7/21/06, *Henrik Stoerner* <user-ce4a2c883f75@xymon.invalid <mailto:user-ce4a2c883f75@xymon.invalid>> wrote:

    On Fri, Jul 21, 2006 at 09:04:49AM -0400, Bill Perez wrote:

Could someone let me know how I can use 2 different domain names
    when
excluding hosts in the hobbit-alerts.cfg?  Example:
exhost=%(server).test.com %(server).abc.intra.  I tried to use a
    comma and
space between the 2 domain names but it isn't taking it.

    How about
    exhost=%server.(test.com|abc.intra)


    Regards,
    Henrik

The host names are separated by commas.  Here is our rule, but it uses a macro.

$HOSTS_EXCLUDED=server1.test.com,server2.abc.intra

EXHOST=$HOSTS_EXCLUDED EXSERVICE=$SERVICES_EXCLUDED COLOR=red
        IGNORE HOST=* SERVICE=%(tl1am|^se$) TIME=*:0200:1200

Perhaps make sure there are no spaces after the commas or equals sign?  Looking at Henrik's example, I suppose EXHOST is not case sensitive, although ours is all uppercase.

Run this to make sure your config looks ok:

bin/bbcmd hobbitd_alert --dump-config

list Nicolas Lienard · Sun, 23 Jul 2006 04:43:46 +0200 (CEST) ·

Hi,

Hobbit client : hobbit-4.2-beta-20060605
OS: FreeBSD 6.1

I configured on hobbit server the client-local.cfg for freebsd:

[freebsd]
log:/var/log/messages:10240
log:/var/log/maillog:10240
file:/usr/local/bin/bash:md5"

and the hobbit-clients.cfg :

HOST=baldo
     FILE /usr/local/bin/bash MD5=e457ec5b7884437c7ce266e5827a4a43
     LOG /var/log/messages diff-bkp-mx-dom red

but it doesn't work, the status of FILES is:

red /usr/local/bin/bash
File has MD5 hash (No MD5 data)  - should be e457ec5b7884437c7ce266e5827a4a43

On client-data information, there is this section:

[file:/usr/local/bin/bash]
type:100000 (file)
mode:755 (-rwxr-xr-x)
linkcount:1
owner:0 (root)
group:0 (wheel)
size:594692
clock:1153621952 (2006/07/23-04:32:32)
atime:1153620827 (2006/07/23-04:13:47)
ctime:1150500756 (2006/06/17-01:32:36)
mtime:1145695494 (2006/04/22-10:44:54)


it seems it doesn t manage to do the md5 check.

here the way i use to get the md5 of the file:

# md5 /usr/local/bin/bash
MD5 (/usr/local/bin/bash) = e457ec5b7884437c7ce266e5827a4a43


thanks in advance.
Regards,
Nicolas

list Henrik Størner · Sun, 23 Jul 2006 08:42:29 +0200 ·

▸ quoted from Nicolas Lienard

On Sun, Jul 23, 2006 at 04:43:46AM +0200, Nicolas wrote:

Hi,

Hobbit client : hobbit-4.2-beta-20060605
OS: FreeBSD 6.1

I configured on hobbit server the client-local.cfg for freebsd:

[freebsd]
log:/var/log/messages:10240
log:/var/log/maillog:10240
file:/usr/local/bin/bash:md5"

Is that a direct cut-and-paste ? If it is, try removing that 
double-quote character after the 'md5'.

▸ quoted from Nicolas Lienard

On client-data information, there is this section:

[file:/usr/local/bin/bash]
type:100000 (file)
mode:755 (-rwxr-xr-x)
linkcount:1
owner:0 (root)
group:0 (wheel)
size:594692
clock:1153621952 (2006/07/23-04:32:32)
atime:1153620827 (2006/07/23-04:13:47)
ctime:1150500756 (2006/06/17-01:32:36)
mtime:1145695494 (2006/04/22-10:44:54)

it seems it doesn t manage to do the md5 check.

Right, which leads me to suspect a configuration error.
Also, could you check if the ~hobbit/client/tmp/logfetch.cfg file
on the client contains the correct entries ? They should be
identical to the [freebsd] section you have in client-local.cfg


Regards,
Henrik

list Nicolas Lienard · Sun, 23 Jul 2006 14:57:48 +0200 (CEST) ·

▸ quoted from Henrik Størner

Is that a direct cut-and-paste ? If it is, try removing that
double-quote character after the 'md5'.

oh yes, you are right !! i won t configure hobbit the night next time. :-)


Sorry and thanks  !

Nicolas

list Bill Perez · Tue, 25 Jul 2006 08:35:14 -0400 ·

Thanks for your reply David, this helped to get my issue resolved.

▸ quoted from David Gore


On 7/21/06, David Gore <user-3e5761c68b56@xymon.invalid> wrote:


Bill Perez wrote:

How about
exhost=%server.(test.com|abc.intra)

The server names are actually different. so it's server1.test.com
<http://server1.test.com>; server2.abc.intra and another server doesn't
have a domain name specified.  Any other ideas?

On 7/21/06, *Henrik Stoerner* <user-ce4a2c883f75@xymon.invalid <mailto:user-ce4a2c883f75@xymon.invalid>>
wrote:

    On Fri, Jul 21, 2006 at 09:04:49AM -0400, Bill Perez wrote:

Could someone let me know how I can use 2 different domain names
    when
excluding hosts in the hobbit-alerts.cfg?  Example:
exhost=%(server).test.com %(server).abc.intra.  I tried to use a
    comma and
space between the 2 domain names but it isn't taking it.

    How about
    exhost=%server.(test.com|abc.intra)


    Regards,
    Henrik

The host names are separated by commas.  Here is our rule, but it uses a
macro.

$HOSTS_EXCLUDED=server1.test.com,server2.abc.intra

EXHOST=$HOSTS_EXCLUDED EXSERVICE=$SERVICES_EXCLUDED COLOR=red
       IGNORE HOST=* SERVICE=%(tl1am|^se$) TIME=*:0200:1200

Perhaps make sure there are no spaces after the commas or equals sign?
Looking at Henrik's example, I suppose EXHOST is not case sensitive,
although ours is all uppercase.

Run this to make sure your config looks ok:

bin/bbcmd hobbitd_alert --dump-config

exhost question 🔗 link

exhost question