Xymon Mailing List Archive search

Problem to check logs with Hobbit

22 messages in this thread

list L.M.J · Mon, 08 Sep 2008 15:37:20 +0200 · 
Hello,

  I've posted a couple of month but after hours & hours of tests, I still
can't check logs with Hobbit. I'm running a Hobbit server on Linux Ubuntu
and a Hobbit client with 'client side configuration' on Ubuntu or RHEL.

On my client computer called "Suspendisse" : 
    $ cat localclient.cfg
       ...
       # LOG
       LOG /var/log/messages MARK COLOR=RED
       ...
    $

For this example, I will go get a red alert when a "MARK" 
Then, on my Hobbit server called "Fusce" :
    $ cat hobbit-clients.cfg
       ...
       HOST=Suspendisse
       LOG /var/log/messages MARK COLOR=RED
       ...
    $

  That's what I've read on the Hobbit man page but it doesn't work. The log
doesn't appear on my Hobbit web pages. What I'm doing wrong ?

  Thanks by advance,
list Rolf Schrittenlocher · Mon, 08 Sep 2008 15:50:39 +0200 · 
Hi,

don't you need localclient.cfg on the server (who is a client, too) as well?

Regards
Rolf
▸ quoted from L.M.J
Hello,

  I've posted a couple of month but after hours & hours of tests, I still
can't check logs with Hobbit. I'm running a Hobbit server on Linux Ubuntu
and a Hobbit client with 'client side configuration' on Ubuntu or RHEL.

On my client computer called "Suspendisse" : 
    $ cat localclient.cfg
       ...
       # LOG
       LOG /var/log/messages MARK COLOR=RED
       ...
    $

For this example, I will go get a red alert when a "MARK" 
Then, on my Hobbit server called "Fusce" :
    $ cat hobbit-clients.cfg
       ...
       HOST=Suspendisse
       LOG /var/log/messages MARK COLOR=RED
       ...
    $

  That's what I've read on the Hobbit man page but it doesn't work. The log
doesn't appear on my Hobbit web pages. What I'm doing wrong ?

  Thanks by advance,


-- 

Mit freundlichen Gruessen
Rolf Schrittenlocher

Bitte beachten Sie die neue Emailadresse!

HeBIS-IT, Senckenberganlage 31, 60054 Frankfurt
Tel: (XX) XX - XXX XXXXX   Fax: (XX) XX XXX XXXXX
LBS: user-1e39a1813094@xymon.invalid
Persoenlich: user-ea9d95bffcf0@xymon.invalid
list L.M.J · Mon, 8 Sep 2008 18:06:33 +0200 · 
Le Mon, 08 Sep 2008 15:50:39 +0200,
▸ quoted from Rolf Schrittenlocher
Rolf Schrittenlocher <user-ea9d95bffcf0@xymon.invalid> a écrit :

Hi,

don't you need localclient.cfg on the server (who is a client, too) as well?

Regards
Rolf
Hello,

  I've posted a couple of month but after hours & hours of tests, I still
can't check logs with Hobbit. I'm running a Hobbit server on Linux Ubuntu
and a Hobbit client with 'client side configuration' on Ubuntu or RHEL.
Hi,

  you mean I have to add 
        HOST=Suspendisse
        LOG /var/log/messages MARK COLOR=RED
  also in my localclient.cfg of the Hobbit server client part? I don't see why but gonna try.

  Thanks!
list Nikesh Maharaj · Mon, 8 Sep 2008 21:06:43 +0200 · 
Hi all, 

Im looking for a fedora client with instructions on how to load.

Thanks
list Josh Luthman · Mon, 8 Sep 2008 15:27:59 -0400 · 
Fear Google and its outstanding ability to find things...

http://www.google.com/search?q=hobbit+fedora+client&ie=utf-8&oe=utf-8&aq=t&rls=org.mozilla:en-US:official&client=firefox-a

http://rpm.pbone.net/index.php3/stat/3/srodzaj/1/search/hobbit-client

Josh Luthman
Office: XXX-XXX-XXXX
Direct: XXX-XXX-XXXX
XXXX Wayne St
Suite XXXX
Troy, OH XXXXX

Those who don't understand UNIX are condemned to reinvent it, poorly.
--- Henry Spencer
▸ quoted from Nikesh Maharaj


On Mon, Sep 8, 2008 at 3:06 PM, Nikesh Maharaj <user-000aaf9a8455@xymon.invalid> wrote:

Hi all,

Im looking for a fedora client with instructions on how to load.

Thanks
list L.M.J · Tue, 09 Sep 2008 08:29:10 +0200 · 
Hello,

On Mon, 08 Sep 2008 15:50:39 +0200, Rolf Schrittenlocher
▸ quoted from L.M.J
<user-ea9d95bffcf0@xymon.invalid> wrote:
Hi,

don't you need localclient.cfg on the server (who is a client, too) as
well?

Regards
Rolf
I also added this on the localclient.cfg file from the server :
     $ cat localclient.cfg
        ...
        HOST=Suspendisse
        LOG /var/log/messages MARK COLOR=RED
        ...
     $

But I don't have any logs coming up in the Hobbit web interface : The
client did not report any logfile data
Where could be the problem? Anyone here check its log files without any
problem?
▸ quoted from Rolf Schrittenlocher


Hello,

  I've posted a couple of month but after hours & hours of tests, I
still
can't check logs with Hobbit. I'm running a Hobbit server on Linux
Ubuntu
and a Hobbit client with 'client side configuration' on Ubuntu or RHEL.

On my client computer called "Suspendisse" : 
    $ cat localclient.cfg
       ...
       # LOG
       LOG /var/log/messages MARK COLOR=RED
       ...
    $

For this example, I will go get a red alert when a "MARK" 
Then, on my Hobbit server called "Fusce" :
    $ cat hobbit-clients.cfg
       ...
       HOST=Suspendisse
       LOG /var/log/messages MARK COLOR=RED
       ...
    $

  That's what I've read on the Hobbit man page but it doesn't work. The
log doesn't appear 
on my Hobbit web pages. What I'm doing wrong ?
list Galen Johnson · Tue, 9 Sep 2008 09:38:37 -0400 · 
One of the behaviors of the log message monitor is it only sends logs if there is a problem.  I think they hang around for 30 minutes or so.  Not exactly clear if it is triggering and not sending.

=G=
▸ quoted from L.M.J

-----Original Message-----
From: L.M.J [mailto:user-78bb6d5d9024@xymon.invalid]
Sent: Tuesday, September 09, 2008 2:29 AM
To: user-ae9b8668bcde@xymon.invalid
Subject: Re: [hobbit] Problem to check logs with Hobbit


Hello,

On Mon, 08 Sep 2008 15:50:39 +0200, Rolf Schrittenlocher
<user-ea9d95bffcf0@xymon.invalid> wrote:
Hi,

don't you need localclient.cfg on the server (who is a client, too) as
well?

Regards
Rolf
I also added this on the localclient.cfg file from the server :
     $ cat localclient.cfg
        ...
        HOST=Suspendisse
        LOG /var/log/messages MARK COLOR=RED
        ...
     $

But I don't have any logs coming up in the Hobbit web interface : The
client did not report any logfile data
Where could be the problem? Anyone here check its log files without any
problem?


Hello,

  I've posted a couple of month but after hours & hours of tests, I
still
can't check logs with Hobbit. I'm running a Hobbit server on Linux
Ubuntu
and a Hobbit client with 'client side configuration' on Ubuntu or RHEL.

On my client computer called "Suspendisse" :
    $ cat localclient.cfg
       ...
       # LOG
       LOG /var/log/messages MARK COLOR=RED
       ...
    $

For this example, I will go get a red alert when a "MARK"
Then, on my Hobbit server called "Fusce" :
    $ cat hobbit-clients.cfg
       ...
       HOST=Suspendisse
       LOG /var/log/messages MARK COLOR=RED
       ...
    $

  That's what I've read on the Hobbit man page but it doesn't work. The
log doesn't appear
on my Hobbit web pages. What I'm doing wrong ?
list L.M.J · Tue, 9 Sep 2008 20:52:13 +0200 · 
Le Tue, 9 Sep 2008 09:38:37 -0400,
▸ quoted from Galen Johnson
Galen Johnson <user-87f955643e3d@xymon.invalid> a écrit :

One of the behaviors of the log message monitor is it only sends logs if there is a problem.  I think they
hang around for 30 minutes or so.  Not exactly clear if it is triggering and not sending.

=G=
Hi,

 I've especially specify "MARK" in red color in /var/log/messages. I know this MARK come each 30min.
 I still can't monitor any logs with Hobbit :-/

  Best regards
list Tom Kauffman · Tue, 9 Sep 2008 15:39:59 -0400 · 
Start with the basics -

As the hobbit user on "Suspendisse", try "less /var/log/messages" to see if the hobbit client can even read the log (I don't know Ubuntu, but RHEL and SUSE both set /var/log/messages to mode 640 by default).

You won't need the 'localclient.cfg' entry on the hobbit server - that only applies to the hobbit client running on the server. But you WILL need a rule in hobbit-alerts.cfg on the server if you want to be alerted when the condition comes up.
▸ quoted from L.M.J

-----Original Message-----
From: L.M.J [mailto:user-78bb6d5d9024@xymon.invalid]
Sent: Monday, September 08, 2008 9:37 AM
To: user-ae9b8668bcde@xymon.invalid
Subject: [hobbit] Problem to check logs with Hobbit


Hello,

  I've posted a couple of month but after hours & hours of tests, I still
can't check logs with Hobbit. I'm running a Hobbit server on Linux Ubuntu
and a Hobbit client with 'client side configuration' on Ubuntu or RHEL.

On my client computer called "Suspendisse" :
    $ cat localclient.cfg
       ...
       # LOG
       LOG /var/log/messages MARK COLOR=RED
       ...
    $

For this example, I will go get a red alert when a "MARK"
Then, on my Hobbit server called "Fusce" :
    $ cat hobbit-clients.cfg
       ...
       HOST=Suspendisse
       LOG /var/log/messages MARK COLOR=RED
       ...
    $

  That's what I've read on the Hobbit man page but it doesn't work. The log
doesn't appear on my Hobbit web pages. What I'm doing wrong ?

  Thanks by advance,
list L.M.J · Wed, 10 Sep 2008 06:42:05 +0200 · 
Le Tue, 9 Sep 2008 15:39:59 -0400,
▸ quoted from Tom Kauffman
"Kauffman, Tom" <user-3feba9e60a8b@xymon.invalid> a écrit :

Start with the basics -

As the hobbit user on "Suspendisse", try "less /var/log/messages" to see if the hobbit client can even read
the log (I don't know Ubuntu, but RHEL and SUSE both set /var/log/messages to mode 640 by default).

You won't need the 'localclient.cfg' entry on the hobbit server - that only applies to the hobbit client
running on the server. But you WILL need a rule in hobbit-alerts.cfg on the server if you want to be
alerted when the condition comes up.
Hello Tom,

  I've already checked this : the Hobbit user on "Suspendisse" can read the "/var/log/messages" file. Gonna
remove the lines I've added on the Hobbit server. Gonna put a trigger on hobbit-alerts.cfg and see. I will
keep you in touch
list L.M.J · Wed, 10 Sep 2008 17:42:10 +0200 · 
Hi once again
▸ quoted from Tom Kauffman
Hello,

  I've posted a couple of month but after hours & hours of tests, I still
can't check logs with Hobbit. I'm running a Hobbit server on Linux Ubuntu
and a Hobbit client with 'client side configuration' on Ubuntu or RHEL.

On my client computer called "Suspendisse" : 
    $ cat localclient.cfg
       ...
       # LOG
       LOG /var/log/messages MARK COLOR=RED
       ...
    $ 
 I re-up this topic because I can't find a way to monitor any log files with Hobbit on any clients (Linux,
AIX, Solaris) Is there an example somewhere I can follow (I already man'ed and google'd).

  Thanks by advance
list T.J. Yang · Wed, 10 Sep 2008 11:01:20 -0500 · 
I will post an example on existing hobbit FAQ mediawiki site.

http://en.wikibooks.org/wiki/System_Monitoring_with_Hobbit/Other_Docs/FAQ#How_do_I_monitor_logs.3F_I_have_added_LOG_.2Fpath.2Fto.2Fmy.2Flogfile_WARNING_COLOR.3Dyellow_to_hobbitclient.cfg_but_still_nothing_happens.


T.J. Yang
▸ quoted from L.M.J
Date: Wed, 10 Sep 2008 17:42:10 +0200
From: user-78bb6d5d9024@xymon.invalid
To: user-ae9b8668bcde@xymon.invalid
Subject: Re: [hobbit] Problem to check logs with Hobbit

Hi once again

Hello,

  I've posted a couple of month but after hours & hours of tests, I still
can't check logs with Hobbit. I'm running a Hobbit server on Linux Ubuntu
and a Hobbit client with 'client side configuration' on Ubuntu or RHEL.

On my client computer called "Suspendisse" : 
    $ cat localclient.cfg
       ...
       # LOG
       LOG /var/log/messages MARK COLOR=RED
       ...
    $ 
 I re-up this topic because I can't find a way to monitor any log files with Hobbit on any clients (Linux,
AIX, Solaris) Is there an example somewhere I can follow (I already man'ed and google'd).

  Thanks by advance
See how Windows connects the people, information, and fun that are part of your life.
http://clk.atdmt.com/MRT/go/msnnkwxp1020093175mrt/direct/01/
list Tom Kauffman · Wed, 10 Sep 2008 13:34:46 -0400 · 
On your hobbit server -

1) set up etc/client-local.cfg to reference the logs you want AND any exclusions. For AIX, I have:
[aix]
log:/var/log/syslog:10240
        ignore 3004-004
        ignore 3004-035
        ignore 3004
log:/var/log/console.log:10240
log:/var/log/dsmsched.log:10240

2) set up etc/hobbit-clients.cfg to create your alerting criteria. For AIX, I've got these set:
HOST=%.*
          LOG /var/log/syslog %.*crit.su.*to.root red
        LOG /var/log/syslog %.*crit.su   yellow
        LOG %/var/(adm|log)/console.log %.*not.responding.still.trying yellow


Change client-local.cfg first. Allow 15 to 20 minutes for this to propagate to the client; look for a file called logfetch.<hostname>.cfg in client/tmp. This should match your entries in client-local.cfg.

Once the logs sart coming in, play with the client-local.cfg and a test system, to track what you're interested in.

Tom
▸ quoted from L.M.J

-----Original Message-----
From: L.M.J [mailto:user-78bb6d5d9024@xymon.invalid]
Sent: Wednesday, September 10, 2008 11:42 AM
To: user-ae9b8668bcde@xymon.invalid
Subject: Re: [hobbit] Problem to check logs with Hobbit

Hi once again

Hello,

  I've posted a couple of month but after hours & hours of tests, I still
can't check logs with Hobbit. I'm running a Hobbit server on Linux Ubuntu
and a Hobbit client with 'client side configuration' on Ubuntu or RHEL.

On my client computer called "Suspendisse" :
    $ cat localclient.cfg
       ...
       # LOG
       LOG /var/log/messages MARK COLOR=RED
       ...
    $
 I re-up this topic because I can't find a way to monitor any log files with Hobbit on any clients (Linux,
AIX, Solaris) Is there an example somewhere I can follow (I already man'ed and google'd).

  Thanks by advance
list L.M.J · Wed, 10 Sep 2008 21:06:22 +0200 · 
Le Wed, 10 Sep 2008 13:34:46 -0400,
▸ quoted from Tom Kauffman
"Kauffman, Tom" <user-3feba9e60a8b@xymon.invalid> a écrit :

On your hobbit server -

1) set up etc/client-local.cfg to reference the logs you want AND any exclusions. For AIX, I have:
[aix]
log:/var/log/syslog:10240
        ignore 3004-004
        ignore 3004-035
        ignore 3004
log:/var/log/console.log:10240
log:/var/log/dsmsched.log:10240

2) set up etc/hobbit-clients.cfg to create your alerting criteria. For AIX, I've got these set:
HOST=%.*
          LOG /var/log/syslog %.*crit.su.*to.root red
        LOG /var/log/syslog %.*crit.su   yellow
        LOG %/var/(adm|log)/console.log %.*not.responding.still.trying yellow


Change client-local.cfg first. Allow 15 to 20 minutes for this to propagate to the client; look for a file
called logfetch.<hostname>.cfg in client/tmp. This should match your entries in client-local.cfg.

Once the logs sart coming in, play with the client-local.cfg and a test system, to track what you're
interested in.

Tom

Thanks both to Tom & T.J. Yang, I will try this out tomorrow
list Jon Boede · Wed, 10 Sep 2008 16:26:54 -0500 · 
Anybody else using bbwin (0.11) and seeing that it reports CPU much 
higher than what Windows says the CPU load is?

Personally, I'm inclined to believe that Windows is getting it wrong, 
but I'm biased.  :-)
list Josh Luthman · Wed, 10 Sep 2008 17:47:20 -0400 · 
I am running a 1982 version of the BB client on one Windows box and it is
reporting load to my $newname4hobbit.  Are you comparing load to load or
CPU% to load?
▸ signature
Josh Luthman
Office: XXX-XXX-XXXX
Direct: XXX-XXX-XXXX
XXXX Wayne St
Suite XXXX
Troy, OH XXXXX

Those who don't understand UNIX are condemned to reinvent it, poorly.
--- Henry Spencer
▸ quoted from Jon Boede
On Wed, Sep 10, 2008 at 5:26 PM, Jon Boede <user-68c969ba1bfa@xymon.invalid> wrote:

 Anybody else using bbwin (0.11) and seeing that it reports CPU much higher
than what Windows says the CPU load is?

Personally, I'm inclined to believe that Windows is getting it wrong, but
I'm biased.  :-)
list Jon Boede · Wed, 10 Sep 2008 16:55:55 -0500 · 
The BBWIN cpu component reports cpu usage as load... for example, if cpu0 is 4% and cpu1 is 6% then it reports load=5%, the average of the two.

The thing is, that we've been watching the cpu utilization with the Windows tools and it never shows either cpu hitting 100% (more like maybe 70% max) even though bbwin frequently goes red, hitting 99 and 100%.
▸ quoted from Josh Luthman

Josh Luthman wrote:
I am running a 1982 version of the BB client on one Windows box and it is reporting load to my $newname4hobbit.  Are you comparing load to load or CPU% to load?

Josh Luthman
Office: XXX-XXX-XXXX
Direct: XXX-XXX-XXXX
XXXX Wayne St
Suite XXXX
Troy, OH XXXXX

Those who don't understand UNIX are condemned to reinvent it, poorly.
--- Henry Spencer


On Wed, Sep 10, 2008 at 5:26 PM, Jon Boede <user-68c969ba1bfa@xymon.invalid <mailto:user-68c969ba1bfa@xymon.invalid>> wrote:

    Anybody else using bbwin (0.11) and seeing that it reports CPU
    much higher than what Windows says the CPU load is?

    Personally, I'm inclined to believe that Windows is getting it
    wrong, but I'm biased.  :-)
list Josh Luthman · Wed, 10 Sep 2008 18:10:43 -0400 · 
My Windows server is next door to unused so 4 load is could be a percentage
or the *nix variant.
I do know that *nix load is NOT a % - this may be the same situation with
the BBWin client.
▸ signature

Josh Luthman
Office: XXX-XXX-XXXX
Direct: XXX-XXX-XXXX
XXXX Wayne St
Suite XXXX
Troy, OH XXXXX

Those who don't understand UNIX are condemned to reinvent it, poorly.
--- Henry Spencer
▸ quoted from Jon Boede
On Wed, Sep 10, 2008 at 5:55 PM, Jon Boede <user-68c969ba1bfa@xymon.invalid> wrote:

 The BBWIN cpu component reports cpu usage as load... for example, if cpu0
is 4% and cpu1 is 6% then it reports load=5%, the average of the two.

The thing is, that we've been watching the cpu utilization with the Windows
tools and it never shows either cpu hitting 100% (more like maybe 70% max)
even though bbwin frequently goes red, hitting 99 and 100%.


Josh Luthman wrote:

I am running a 1982 version of the BB client on one Windows box and it is
reporting load to my $newname4hobbit.  Are you comparing load to load or
CPU% to load?
Josh Luthman
Office: XXX-XXX-XXXX
Direct: XXX-XXX-XXXX
XXXX Wayne St
Suite XXXX
Troy, OH XXXXX

Those who don't understand UNIX are condemned to reinvent it, poorly.
--- Henry Spencer


On Wed, Sep 10, 2008 at 5:26 PM, Jon Boede <user-68c969ba1bfa@xymon.invalid> wrote:

Anybody else using bbwin (0.11) and seeing that it reports CPU much higher
than what Windows says the CPU load is?

Personally, I'm inclined to believe that Windows is getting it wrong, but
I'm biased.  :-)
list L.M.J · Sat, 13 Sep 2008 07:58:04 +0200 ·
▸ quoted from L.M.J
Le Wed, 10 Sep 2008 13:34:46 -0400,
"Kauffman, Tom" <user-3feba9e60a8b@xymon.invalid> a écrit :
On your hobbit server -

1) set up etc/client-local.cfg to reference the logs you want AND any exclusions. For AIX, I have:
[aix]
log:/var/log/syslog:10240
        ignore 3004-004
        ignore 3004-035
        ignore 3004
log:/var/log/console.log:10240
log:/var/log/dsmsched.log:10240

2) set up etc/hobbit-clients.cfg to create your alerting criteria. For AIX, I've got these set:
HOST=%.*
          LOG /var/log/syslog %.*crit.su.*to.root red
        LOG /var/log/syslog %.*crit.su   yellow
        LOG %/var/(adm|log)/console.log %.*not.responding.still.trying yellow


Change client-local.cfg first. Allow 15 to 20 minutes for this to propagate to the client; look for a file
called logfetch.<hostname>.cfg in client/tmp. This should match your entries in client-local.cfg.

Once the logs sart coming in, play with the client-local.cfg and a test system, to track what you're
interested in.

Hi & thanks once again for you tutorial but that's crazy, I still can't see any log reported to the server!
I'm monitoring oracle & mysql databases, Netapp filers, DNS, DHCP, smtp, imap, firewall via devmons, SAP via
CheckMySAP plugin, a lot processes on 4 different OS, etc... but I'm incapable to monitor a nasty log
file :-/ 
 Is there some well-know bugs about this issue? I'm using Hobbit 4.2.0 without allinonepatch.

  Thanks for any help

    Best regards,

      LMJ
list Tom Kauffman · Mon, 15 Sep 2008 09:35:46 -0400 · 
There are a number of critical fixes in the allinone patch, and I think logging may have been one of them.

The other thing to try is to set up a specific entry for your client in etc/client-local.cfg -

Like this, for my amazon system:

[amazon]
log:/var/log/syslog:10240
         ignore 3004-004
         ignore 3004-035
         ignore 3004
log:/var/log/console.log:10240
log:/var/log/dsmsched.log:10240
file:/usr/edi/cron.backup

If the logfetch.<hostname>.cfg file is not showing up in the client/tmp directory, then the hobbit client is not pulling it from the server and you won't see any logs.

Also, to my knowledge, this does NOT work for systems still running the Big Brother client.
▸ quoted from L.M.J

Tom

-----Original Message-----
From: L.M.J [mailto:user-78bb6d5d9024@xymon.invalid]
Sent: Saturday, September 13, 2008 1:58 AM
To: user-ae9b8668bcde@xymon.invalid
Subject: Re: [hobbit] Problem to check logs with Hobbit

Le Wed, 10 Sep 2008 13:34:46 -0400,
"Kauffman, Tom" <user-3feba9e60a8b@xymon.invalid> a écrit :
On your hobbit server -

1) set up etc/client-local.cfg to reference the logs you want AND any exclusions. For AIX, I have:
[aix]
log:/var/log/syslog:10240
        ignore 3004-004
        ignore 3004-035
        ignore 3004
log:/var/log/console.log:10240
log:/var/log/dsmsched.log:10240

2) set up etc/hobbit-clients.cfg to create your alerting criteria. For AIX, I've got these set:
HOST=%.*
          LOG /var/log/syslog %.*crit.su.*to.root red
        LOG /var/log/syslog %.*crit.su   yellow
        LOG %/var/(adm|log)/console.log %.*not.responding.still.trying yellow


Change client-local.cfg first. Allow 15 to 20 minutes for this to propagate to the client; look for a file
called logfetch.<hostname>.cfg in client/tmp. This should match your entries in client-local.cfg.

Once the logs sart coming in, play with the client-local.cfg and a test system, to track what you're
interested in.

Hi & thanks once again for you tutorial but that's crazy, I still can't see any log reported to the server!
I'm monitoring oracle & mysql databases, Netapp filers, DNS, DHCP, smtp, imap, firewall via devmons, SAP via
CheckMySAP plugin, a lot processes on 4 different OS, etc... but I'm incapable to monitor a nasty log
file :-/
 Is there some well-know bugs about this issue? I'm using Hobbit 4.2.0 without allinonepatch.

  Thanks for any help

    Best regards,

      LMJ
list Tom Kauffman · Mon, 15 Sep 2008 13:58:17 -0400 · 
I checked - the allinone patch has significant changes for logfetch.c, the client-side program that processes the log file.
▸ quoted from Tom Kauffman

Tom

-----Original Message-----
From: L.M.J [mailto:user-78bb6d5d9024@xymon.invalid]
Sent: Saturday, September 13, 2008 1:58 AM
To: user-ae9b8668bcde@xymon.invalid
Subject: Re: [hobbit] Problem to check logs with Hobbit

Le Wed, 10 Sep 2008 13:34:46 -0400,
"Kauffman, Tom" <user-3feba9e60a8b@xymon.invalid> a écrit :
On your hobbit server -

1) set up etc/client-local.cfg to reference the logs you want AND any exclusions. For AIX, I have:
[aix]
log:/var/log/syslog:10240
        ignore 3004-004
        ignore 3004-035
        ignore 3004
log:/var/log/console.log:10240
log:/var/log/dsmsched.log:10240

2) set up etc/hobbit-clients.cfg to create your alerting criteria. For AIX, I've got these set:
HOST=%.*
          LOG /var/log/syslog %.*crit.su.*to.root red
        LOG /var/log/syslog %.*crit.su   yellow
        LOG %/var/(adm|log)/console.log %.*not.responding.still.trying yellow


Change client-local.cfg first. Allow 15 to 20 minutes for this to propagate to the client; look for a file
called logfetch.<hostname>.cfg in client/tmp. This should match your entries in client-local.cfg.

Once the logs sart coming in, play with the client-local.cfg and a test system, to track what you're
interested in.

Hi & thanks once again for you tutorial but that's crazy, I still can't see any log reported to the server!
I'm monitoring oracle & mysql databases, Netapp filers, DNS, DHCP, smtp, imap, firewall via devmons, SAP via
CheckMySAP plugin, a lot processes on 4 different OS, etc... but I'm incapable to monitor a nasty log
file :-/
 Is there some well-know bugs about this issue? I'm using Hobbit 4.2.0 without allinonepatch.

  Thanks for any help

    Best regards,

      LMJ
list L.M.J · Wed, 24 Sep 2008 18:18:06 +0200 · 
Le Wed, 10 Sep 2008 21:06:22 +0200,
▸ quoted from L.M.J
"L.M.J" <user-78bb6d5d9024@xymon.invalid> a écrit :

Le Wed, 10 Sep 2008 13:34:46 -0400,
"Kauffman, Tom" <user-3feba9e60a8b@xymon.invalid> a écrit :

On your hobbit server -

1) set up etc/client-local.cfg to reference the logs you want AND any exclusions. For AIX, I have:
[aix]
log:/var/log/syslog:10240
        ignore 3004-004
        ignore 3004-035
        ignore 3004
log:/var/log/console.log:10240
log:/var/log/dsmsched.log:10240

2) set up etc/hobbit-clients.cfg to create your alerting criteria. For AIX, I've got these set:
HOST=%.*
          LOG /var/log/syslog %.*crit.su.*to.root red
        LOG /var/log/syslog %.*crit.su   yellow
        LOG %/var/(adm|log)/console.log %.*not.responding.still.trying yellow


Change client-local.cfg first. Allow 15 to 20 minutes for this to propagate to the client; look for a file
called logfetch.<hostname>.cfg in client/tmp. This should match your entries in client-local.cfg.

Once the logs sart coming in, play with the client-local.cfg and a test system, to track what you're
interested in.

Tom

Thanks both to Tom & T.J. Yang, I will try this out tomorrow
Hi once again,

  I can't still check logs with hobbit. Could anyone tell me what i'm missing or a tutorial somewhere, it
will be please!

  Thanks