Xymon Mailing List Archive search

Xymond Multi-source statuses

11 messages in this thread

list Rich Jones · Tue, 8 May 2018 17:14:56 +0100 · 
Hi all,

Another one of those things I keep meaning to ask but keep on forgetting...
I'm seeing under the xymond column the following:

Multi-source statuses
  xymon.url.com:cpu reported by 127.0.0.1 and xx.xxx.226.227
  xymon.url.com:disk reported by 127.0.0.1 and xx.xxx.226.227
  xymon.url.com:files reported by 127.0.0.1 and xx.xxx.226.227
  xymon.url.com:inode reported by 127.0.0.1 and xx.xxx.226.227
  xymon.url.com:memory reported by 127.0.0.1 and xx.xxx.226.227
  xymon.url.com:msgs reported by 127.0.0.1 and xx.xxx.226.227
  xymon.url.com:ports reported by 127.0.0.1 and xx.xxx.226.227
  xymon.url.com:procs reported by 127.0.0.1 and xx.xxx.226.227
  xymon.url.com:uptime reported by 127.0.0.1 and xx.xxx.226.227

Looking through the archive it makes sense, Xymon is receiving data from
two sources, which I guess it is, however the two IPs are localhost and the
server IP address.

I'm guessing this is likely to do with how the things are setup on the
server rather than Xymon itself (eg in /etc/hosts)?

Can someone point me in the right direction to resolve this? I'm running
Xymon 4.3.28

Cheers
list Jeremy Laidman · Fri, 11 May 2018 09:57:41 +1000 ·
▸ quoted from Rich Jones
On 9 May 2018 at 02:14, Rich Jones <user-6806fa693bf5@xymon.invalid> wrote:

Hi all,

Another one of those things I keep meaning to ask but keep on forgetting...
I'm seeing under the xymond column the following:

Multi-source statuses
  xymon.url.com:cpu reported by 127.0.0.1 and xx.xxx.226.227
  xymon.url.com:disk reported by 127.0.0.1 and xx.xxx.226.227
  xymon.url.com:files reported by 127.0.0.1 and xx.xxx.226.227
  xymon.url.com:inode reported by 127.0.0.1 and xx.xxx.226.227
  xymon.url.com:memory reported by 127.0.0.1 and xx.xxx.226.227
  xymon.url.com:msgs reported by 127.0.0.1 and xx.xxx.226.227
  xymon.url.com:ports reported by 127.0.0.1 and xx.xxx.226.227
  xymon.url.com:procs reported by 127.0.0.1 and xx.xxx.226.227
  xymon.url.com:uptime reported by 127.0.0.1 and xx.xxx.226.227

Looking through the archive it makes sense, Xymon is receiving data from
two sources, which I guess it is, however the two IPs are localhost and the
server IP address.

I'm guessing this is likely to do with how the things are setup on the
server rather than Xymon itself (eg in /etc/hosts)?

Can someone point me in the right direction to resolve this? I'm running
Xymon 4.3.28

It appears that the Xymon server is reporting to itself twice, using its
network IP address and the loopback address. The Xymon client that
generates the client data messages (from where these metrics come) will use
the $XYMSRV environment variable, and send to whatever IP address is
defined therein. Sometimes this is set to "0.0.0.0" which tells the Xymon
client to look at $XYMSERVERS as a list of multiple destinations. I suspect
you have XYMSERVERS="127.0.0.1 xx.xxx.226.227". On a Xymon server these
variables are is set in xymonserver.cfg.

J
list Rich Jones · Fri, 11 May 2018 12:43:24 +0100 · 
That makes a lot of sense indeed,
Checking xymonserver.cfg however seems to be correct:

XYMONSERVERHOSTNAME="my.xymon.url"
XYMONSERVERIP="**.***.226.227"
XYMONSERVEROS="linux"
XYMSRV="$XYMONSERVERIP"

I don't actually see XYMSERVERS in the xymonserver.cfg though


*Rich Jones* | Systems Developer
Corporation Pop
21-23 Shudehill
Manchester M4 2AF
0161 838 0808
www.corporationpop.co.uk
This email message (and any attached file) is intended only for the use of
the individual or entity to whom the sender intended it to be addressed and
may contain information that constitutes a trade secret, or that is
privileged, confidential or subject to copyright. No part of it may be
circulated, quoted, or reproduced without prior written approval from
Corporation Pop Ltd. The contents of this document are strictly
confidential and owned by Corporation Pop Ltd. Copyright © Corporation Pop
Ltd. All rights reserved. Corporation Pop is a limited company registered
in England + Wales. Company number 4869229. VAT number 533 8932 26.
▸ quoted from Jeremy Laidman

On 11 May 2018 at 00:57, Jeremy Laidman <user-0608abae5e7c@xymon.invalid> wrote:

On 9 May 2018 at 02:14, Rich Jones <user-6806fa693bf5@xymon.invalid> wrote:

Hi all,

Another one of those things I keep meaning to ask but keep on
forgetting...
I'm seeing under the xymond column the following:

Multi-source statuses
  xymon.url.com:cpu reported by 127.0.0.1 and xx.xxx.226.227
  xymon.url.com:disk reported by 127.0.0.1 and xx.xxx.226.227
  xymon.url.com:files reported by 127.0.0.1 and xx.xxx.226.227
  xymon.url.com:inode reported by 127.0.0.1 and xx.xxx.226.227
  xymon.url.com:memory reported by 127.0.0.1 and xx.xxx.226.227
  xymon.url.com:msgs reported by 127.0.0.1 and xx.xxx.226.227
  xymon.url.com:ports reported by 127.0.0.1 and xx.xxx.226.227
  xymon.url.com:procs reported by 127.0.0.1 and xx.xxx.226.227
  xymon.url.com:uptime reported by 127.0.0.1 and xx.xxx.226.227

Looking through the archive it makes sense, Xymon is receiving data from
two sources, which I guess it is, however the two IPs are localhost and the
server IP address.

I'm guessing this is likely to do with how the things are setup on the
server rather than Xymon itself (eg in /etc/hosts)?

Can someone point me in the right direction to resolve this? I'm running
Xymon 4.3.28

It appears that the Xymon server is reporting to itself twice, using its
network IP address and the loopback address. The Xymon client that
generates the client data messages (from where these metrics come) will use
the $XYMSRV environment variable, and send to whatever IP address is
defined therein. Sometimes this is set to "0.0.0.0" which tells the Xymon
client to look at $XYMSERVERS as a list of multiple destinations. I suspect
you have XYMSERVERS="127.0.0.1 xx.xxx.226.227". On a Xymon server these
variables are is set in xymonserver.cfg.

J
list Paul Root · Fri, 11 May 2018 12:16:23 +0000 · 
The xymon server starts the xymon client on that machine.

Do you possibly start xymonclient separately as well?
▸ quoted from Rich Jones

From: Xymon <xymon-bounces at xymon.com> On Behalf Of Rich Jones
Sent: Friday, May 11, 2018 6:43 AM
To: xymon at xymon.com
Subject: Re: [Xymon] Xymond Multi-source statuses

That makes a lot of sense indeed,
Checking xymonserver.cfg however seems to be correct:

XYMONSERVERHOSTNAME="my.xymon.url"
XYMONSERVERIP="**.***.226.227"
XYMONSERVEROS="linux"
XYMSRV="$XYMONSERVERIP"

I don't actually see XYMSERVERS in the xymonserver.cfg though


Rich Jones | Systems Developer

Corporation Pop
21-23 Shudehill
Manchester M4 2AF
0161 838 0808


www.corporationpop.co.uk<http://www.corporationpop.co.uk/>;
▸ quoted from Rich Jones

This email message (and any attached file) is intended only for the use of the individual or entity to whom the sender intended it to be addressed and may contain information that constitutes a trade secret, or that is privileged, confidential or subject to copyright. No part of it may be circulated, quoted, or reproduced without prior written approval from Corporation Pop Ltd. The contents of this document are strictly confidential and owned by Corporation Pop Ltd. Copyright © Corporation Pop Ltd. All rights reserved. Corporation Pop is a limited company registered in England + Wales. Company number 4869229. VAT number 533 8932 26.


On 11 May 2018 at 00:57, Jeremy Laidman <user-0608abae5e7c@xymon.invalid<mailto:user-0608abae5e7c@xymon.invalid>> wrote:
On 9 May 2018 at 02:14, Rich Jones <user-6806fa693bf5@xymon.invalid<mailto:user-6806fa693bf5@xymon.invalid>> wrote:
Hi all,

Another one of those things I keep meaning to ask but keep on forgetting...
I'm seeing under the xymond column the following:
Multi-source statuses
  xymon.url.com:cpu reported by 127.0.0.1 and xx.xxx.226.227

  xymon.url.com<http://xymon.url.com>:disk reported by 127.0.0.1 and xx.xxx.226.227
  xymon.url.com<http://xymon.url.com>:files reported by 127.0.0.1 and xx.xxx.226.227
  xymon.url.com<http://xymon.url.com>:inode reported by 127.0.0.1 and xx.xxx.226.227
  xymon.url.com<http://xymon.url.com>:memory reported by 127.0.0.1 and xx.xxx.226.227
  xymon.url.com<http://xymon.url.com>:msgs reported by 127.0.0.1 and xx.xxx.226.227
  xymon.url.com<http://xymon.url.com>:ports reported by 127.0.0.1 and xx.xxx.226.227
  xymon.url.com<http://xymon.url.com>:procs reported by 127.0.0.1 and xx.xxx.226.227
  xymon.url.com<http://xymon.url.com>:uptime reported by 127.0.0.1 and xx.xxx.226.227
▸ quoted from Rich Jones

Looking through the archive it makes sense, Xymon is receiving data from two sources, which I guess it is, however the two IPs are localhost and the server IP address.

I'm guessing this is likely to do with how the things are setup on the server rather than Xymon itself (eg in /etc/hosts)?

Can someone point me in the right direction to resolve this? I'm running Xymon 4.3.28

It appears that the Xymon server is reporting to itself twice, using its network IP address and the loopback address. The Xymon client that generates the client data messages (from where these metrics come) will use the $XYMSRV environment variable, and send to whatever IP address is defined therein. Sometimes this is set to "0.0.0.0" which tells the Xymon client to look at $XYMSERVERS as a list of multiple destinations. I suspect you have XYMSERVERS="127.0.0.1 xx.xxx.226.227". On a Xymon server these variables are is set in xymonserver.cfg.

J



This communication is the property of CenturyLink and may contain confidential or privileged information. Unauthorized use of this communication is strictly prohibited and may be unlawful. If you have received this communication in error, please immediately notify the sender by reply e-mail and destroy all copies of the communication and any attachments.
list Rich Jones · Fri, 11 May 2018 13:22:36 +0100 · 
No, if I ever need to restart the server I manually start the server with
the following:

sudo su xymon
/usr/local/xymon/server/bin/xymon.sh start

Checking top only shows one instance of the xymond_client

I have just found the following in the server client xymonclient.cfg,
though I don't think that helps much
XYMSRV="**.***.226.227"
XYMSERVERS=""
▸ quoted from Paul Root

*Rich Jones* | Systems Developer
Corporation Pop
21-23 Shudehill
Manchester M4 2AF
0161 838 0808
www.corporationpop.co.uk
This email message (and any attached file) is intended only for the use of
the individual or entity to whom the sender intended it to be addressed and
may contain information that constitutes a trade secret, or that is
privileged, confidential or subject to copyright. No part of it may be
circulated, quoted, or reproduced without prior written approval from
Corporation Pop Ltd. The contents of this document are strictly
confidential and owned by Corporation Pop Ltd. Copyright © Corporation Pop
Ltd. All rights reserved. Corporation Pop is a limited company registered
in England + Wales. Company number 4869229. VAT number 533 8932 26.

On 11 May 2018 at 13:16, Root, Paul T <user-76fdb6883669@xymon.invalid> wrote:

The xymon server starts the xymon client on that machine.


Do you possibly start xymonclient separately as well?


*From:* Xymon <xymon-bounces at xymon.com> *On Behalf Of *Rich Jones
*Sent:* Friday, May 11, 2018 6:43 AM
*To:* xymon at xymon.com
*Subject:* Re: [Xymon] Xymond Multi-source statuses


That makes a lot of sense indeed,
Checking xymonserver.cfg however seems to be correct:

XYMONSERVERHOSTNAME="my.xymon.url"

XYMONSERVERIP="**.***.226.227"

XYMONSERVEROS="linux"

XYMSRV="$XYMONSERVERIP"

I don't actually see XYMSERVERS in the xymonserver.cfg though


*Rich Jones* | Systems Developer

Corporation Pop
21-23 Shudehill

<https://maps.google.com/?q=21-23+Shudehill+%0D%0AManchester+M4+2AF&entry=gmail&source=g>;
▸ quoted from Paul Root
Manchester M4 2AF
0161 838 0808

www.corporationpop.co.uk

This email message (and any attached file) is intended only for the use of
the individual or entity to whom the sender intended it to be addressed and
may contain information that constitutes a trade secret, or that is
privileged, confidential or subject to copyright. No part of it may be
circulated, quoted, or reproduced without prior written approval from
Corporation Pop Ltd. The contents of this document are strictly
confidential and owned by Corporation Pop Ltd. Copyright © Corporation Pop
Ltd. All rights reserved. Corporation Pop is a limited company registered
in England + Wales. Company number 4869229. VAT number 533 8932 26.


On 11 May 2018 at 00:57, Jeremy Laidman <user-0608abae5e7c@xymon.invalid> wrote:

On 9 May 2018 at 02:14, Rich Jones <user-6806fa693bf5@xymon.invalid> wrote:

Hi all,

Another one of those things I keep meaning to ask but keep on forgetting...
I'm seeing under the xymond column the following:

Multi-source statuses

  xymon.url.com:cpu reported by 127.0.0.1 and xx.xxx.226.227

  xymon.url.com:disk reported by 127.0.0.1 and xx.xxx.226.227

  xymon.url.com:files reported by 127.0.0.1 and xx.xxx.226.227

  xymon.url.com:inode reported by 127.0.0.1 and xx.xxx.226.227

  xymon.url.com:memory reported by 127.0.0.1 and xx.xxx.226.227

  xymon.url.com:msgs reported by 127.0.0.1 and xx.xxx.226.227

  xymon.url.com:ports reported by 127.0.0.1 and xx.xxx.226.227

  xymon.url.com:procs reported by 127.0.0.1 and xx.xxx.226.227

  xymon.url.com:uptime reported by 127.0.0.1 and xx.xxx.226.227

Looking through the archive it makes sense, Xymon is receiving data from
two sources, which I guess it is, however the two IPs are localhost and the
server IP address.

I'm guessing this is likely to do with how the things are setup on the
server rather than Xymon itself (eg in /etc/hosts)?

Can someone point me in the right direction to resolve this? I'm running
Xymon 4.3.28


It appears that the Xymon server is reporting to itself twice, using its
network IP address and the loopback address. The Xymon client that
generates the client data messages (from where these metrics come) will use
the $XYMSRV environment variable, and send to whatever IP address is
defined therein. Sometimes this is set to "0.0.0.0" which tells the Xymon
client to look at $XYMSERVERS as a list of multiple destinations. I suspect
you have XYMSERVERS="127.0.0.1 xx.xxx.226.227". On a Xymon server these
variables are is set in xymonserver.cfg.


J


This communication is the property of CenturyLink and may contain
confidential or privileged information. Unauthorized use of this
communication is strictly prohibited and may be unlawful. If you have
received this communication in error, please immediately notify the sender
by reply e-mail and destroy all copies of the communication and any
attachments.
list Paul Root · Fri, 11 May 2018 12:26:55 +0000 · 
What processes do you have running owned by xymon?

What is in your tasks.cfg file?
▸ quoted from Rich Jones

From: Xymon <xymon-bounces at xymon.com> On Behalf Of Rich Jones
Sent: Friday, May 11, 2018 7:23 AM
To: xymon at xymon.com
Subject: Re: [Xymon] Xymond Multi-source statuses

No, if I ever need to restart the server I manually start the server with the following:
sudo su xymon
/usr/local/xymon/server/bin/xymon.sh start

Checking top only shows one instance of the xymond_client

I have just found the following in the server client xymonclient.cfg, though I don't think that helps much
XYMSRV="**.***.226.227"
XYMSERVERS=""

Rich Jones | Systems Developer

Corporation Pop
21-23 Shudehill
Manchester M4 2AF
0161 838 0808

www.corporationpop.co.uk<http://www.corporationpop.co.uk/>;

This email message (and any attached file) is intended only for the use of the individual or entity to whom the sender intended it to be addressed and may contain information that constitutes a trade secret, or that is privileged, confidential or subject to copyright. No part of it may be circulated, quoted, or reproduced without prior written approval from Corporation Pop Ltd. The contents of this document are strictly confidential and owned by Corporation Pop Ltd. Copyright © Corporation Pop Ltd. All rights reserved. Corporation Pop is a limited company registered in England + Wales. Company number 4869229. VAT number 533 8932 26.


On 11 May 2018 at 13:16, Root, Paul T <user-76fdb6883669@xymon.invalid<mailto:user-76fdb6883669@xymon.invalid>> wrote:
The xymon server starts the xymon client on that machine.

Do you possibly start xymonclient separately as well?

From: Xymon <xymon-bounces at xymon.com<mailto:xymon-bounces at xymon.com>> On Behalf Of Rich Jones
Sent: Friday, May 11, 2018 6:43 AM
To: xymon at xymon.com<mailto:xymon at xymon.com>
Subject: Re: [Xymon] Xymond Multi-source statuses

That makes a lot of sense indeed,
Checking xymonserver.cfg however seems to be correct:
XYMONSERVERHOSTNAME="my.xymon.url"
XYMONSERVERIP="**.***.226.227"
XYMONSERVEROS="linux"
XYMSRV="$XYMONSERVERIP"

I don't actually see XYMSERVERS in the xymonserver.cfg though


Rich Jones | Systems Developer

Corporation Pop

21-23 Shudehill<https://maps.google.com/?q=21-23+Shudehill+%0D%0AManchester+M4+2AF&entry=gmail&source=g>;
▸ quoted from Rich Jones
Manchester M4 2AF
0161 838 0808

www.corporationpop.co.uk<http://www.corporationpop.co.uk/>;

This email message (and any attached file) is intended only for the use of the individual or entity to whom the sender intended it to be addressed and may contain information that constitutes a trade secret, or that is privileged, confidential or subject to copyright. No part of it may be circulated, quoted, or reproduced without prior written approval from Corporation Pop Ltd. The contents of this document are strictly confidential and owned by Corporation Pop Ltd. Copyright © Corporation Pop Ltd. All rights reserved. Corporation Pop is a limited company registered in England + Wales. Company number 4869229. VAT number 533 8932 26.


On 11 May 2018 at 00:57, Jeremy Laidman <user-0608abae5e7c@xymon.invalid<mailto:user-0608abae5e7c@xymon.invalid>> wrote:
On 9 May 2018 at 02:14, Rich Jones <user-6806fa693bf5@xymon.invalid<mailto:user-6806fa693bf5@xymon.invalid>> wrote:
Hi all,

Another one of those things I keep meaning to ask but keep on forgetting...
I'm seeing under the xymond column the following:
Multi-source statuses
  xymon.url.com:cpu reported by 127.0.0.1 and xx.xxx.226.227
  xymon.url.com<http://xymon.url.com>:disk reported by 127.0.0.1 and xx.xxx.226.227
  xymon.url.com<http://xymon.url.com>:files reported by 127.0.0.1 and xx.xxx.226.227
  xymon.url.com<http://xymon.url.com>:inode reported by 127.0.0.1 and xx.xxx.226.227
  xymon.url.com<http://xymon.url.com>:memory reported by 127.0.0.1 and xx.xxx.226.227
  xymon.url.com<http://xymon.url.com>:msgs reported by 127.0.0.1 and xx.xxx.226.227
  xymon.url.com<http://xymon.url.com>:ports reported by 127.0.0.1 and xx.xxx.226.227
  xymon.url.com<http://xymon.url.com>:procs reported by 127.0.0.1 and xx.xxx.226.227
  xymon.url.com<http://xymon.url.com>:uptime reported by 127.0.0.1 and xx.xxx.226.227

Looking through the archive it makes sense, Xymon is receiving data from two sources, which I guess it is, however the two IPs are localhost and the server IP address.

I'm guessing this is likely to do with how the things are setup on the server rather than Xymon itself (eg in /etc/hosts)?

Can someone point me in the right direction to resolve this? I'm running Xymon 4.3.28

It appears that the Xymon server is reporting to itself twice, using its network IP address and the loopback address. The Xymon client that generates the client data messages (from where these metrics come) will use the $XYMSRV environment variable, and send to whatever IP address is defined therein. Sometimes this is set to "0.0.0.0" which tells the Xymon client to look at $XYMSERVERS as a list of multiple destinations. I suspect you have XYMSERVERS="127.0.0.1 xx.xxx.226.227". On a Xymon server these variables are is set in xymonserver.cfg.

J


This communication is the property of CenturyLink and may contain confidential or privileged information. Unauthorized use of this communication is strictly prohibited and may be unlawful. If you have received this communication in error, please immediately notify the sender by reply e-mail and destroy all copies of the communication and any attachments.

This communication is the property of CenturyLink and may contain confidential or privileged information. Unauthorized use of this communication is strictly prohibited and may be unlawful. If you have received this communication in error, please immediately notify the sender by reply e-mail and destroy all copies of the communication and any attachments.
list Rich Jones · Fri, 11 May 2018 13:40:51 +0100 · 
I do have a few custom scripts in my tasks.cfg, nothing that would really
affect it though I wouldn't think..

# "storestatus" saves status-logs in text- and html-format, like the old
Big Brother
# daemon does. Unless you are using add-ons that directly access the
log-files, you
# will not need to run this module, and it is recommended that you keep it
disabled
/usr/local/xymon/server/bin/xymoncmd /usr/local/xymon/server/ext/wpscan.sh#
since storing the raw logs on disk can cause a significant load on your
server.
[storestatus]
        DISABLED
        ENVFILE /usr/local/xymon/server/etc/xymonserver.cfg
        NEEDS xymond
        CMD xymond_channel --channel=status
--log=$XYMONSERVERLOGS/status.log xymond_filestore --status --html

# "storedata" saves information sent using the BB "data" protocol, like the
old Big Brother
# daemon does. Unless you are using add-ons that directly access the
data-files, you
# will not need to run this module, and it is recommended that you keep it
disabled
# since storing the raw data on disk can cause a significant load on your
Xymon server.
# RRD graphs uses data-files, but since RRD is handled by the xymond_rrd
module, you do
# not need to run the "storedata" module to get RRD graphs.
[storedata]
        DISABLED
        ENVFILE /usr/local/xymon/server/etc/xymonserver.cfg
        NEEDS xymond
        CMD xymond_channel --channel=data   --log=$XYMONSERVERLOGS/data.log
xymond_filestore --data

# "storeenadis" updates the files used to indicate that a host or test has
been enabled or disabled.
# Unless you are running server side scripts that look at these files, you
do not need this.
[storeenadis]
        DISABLED
        ENVFILE /usr/local/xymon/server/etc/xymonserver.cfg
        NEEDS xymond
        CMD xymond_channel --channel=enadis
--log=$XYMONSERVERLOGS/enadis.log xymond_filestore --enadis

# "storenotes" saves web note-files, that are sent using the BB "notes"
protocol. This is
# disabled by default; if you use the Big Brother "notes" protocol, then
you should enable this.
[storenotes]
        DISABLED
        ENVFILE /usr/local/xymon/server/etc/xymonserver.cfg
        NEEDS xymond
        CMD xymond_channel --channel=notes
--log=$XYMONSERVERLOGS/notes.log xymond_filestore --notes


[wpscan]
        ENVFILE /usr/local/xymon/server/etc/xymonserver.cfg
        CMD /usr/local/xymon/server/ext/wpscan.sh
        LOGFILE $XYMONSERVERLOGS/wpscan.log
        CRONDATE 0 10 * * 2

[observatory]
        ENVFILE /usr/local/xymon/server/etc/xymonserver.cfg
        CMD /usr/local/xymon/server/ext/observatory.sh
        LOGFILE $XYMONSERVERLOGS/observatory.log
        CRONDATE 0 10 * * 3

[sslcert2]
        ENVFILE /usr/local/xymon/server/etc/xymonserver.cfg
        CMD /usr/local/xymon/server/ext/ssl-fix-xymon.sh
        LOGFILE $XYMONSERVERLOGS/ssl-fix-xymon.log
        INTERVAL 1d
▸ quoted from Paul Root


*Rich Jones* | Systems Developer
Corporation Pop
21-23 Shudehill
Manchester M4 2AF
0161 838 0808
www.corporationpop.co.uk
This email message (and any attached file) is intended only for the use of
the individual or entity to whom the sender intended it to be addressed and
may contain information that constitutes a trade secret, or that is
privileged, confidential or subject to copyright. No part of it may be
circulated, quoted, or reproduced without prior written approval from
Corporation Pop Ltd. The contents of this document are strictly
confidential and owned by Corporation Pop Ltd. Copyright © Corporation Pop
Ltd. All rights reserved. Corporation Pop is a limited company registered
in England + Wales. Company number 4869229. VAT number 533 8932 26.

On 11 May 2018 at 13:26, Root, Paul T <user-76fdb6883669@xymon.invalid> wrote:

What processes do you have running owned by xymon?


What is in your tasks.cfg file?


*From:* Xymon <xymon-bounces at xymon.com> *On Behalf Of *Rich Jones
*Sent:* Friday, May 11, 2018 7:23 AM

*To:* xymon at xymon.com
*Subject:* Re: [Xymon] Xymond Multi-source statuses


No, if I ever need to restart the server I manually start the server with
the following:

sudo su xymon

/usr/local/xymon/server/bin/xymon.sh start

Checking top only shows one instance of the xymond_client

I have just found the following in the server client xymonclient.cfg,
though I don't think that helps much

XYMSRV="**.***.226.227"

XYMSERVERS=""


*Rich Jones* | Systems Developer

Corporation Pop
21-23 Shudehill
<https://maps.google.com/?q=21-23+Shudehill+%0D%0AManchester+M4+2AF&entry=gmail&source=g>;
Manchester M4 2AF
0161 838 0808

www.corporationpop.co.uk

This email message (and any attached file) is intended only for the use of
the individual or entity to whom the sender intended it to be addressed and
may contain information that constitutes a trade secret, or that is
privileged, confidential or subject to copyright. No part of it may be
circulated, quoted, or reproduced without prior written approval from
Corporation Pop Ltd. The contents of this document are strictly
confidential and owned by Corporation Pop Ltd. Copyright © Corporation Pop
Ltd. All rights reserved. Corporation Pop is a limited company registered
in England + Wales. Company number 4869229. VAT number 533 8932 26.


On 11 May 2018 at 13:16, Root, Paul T <user-76fdb6883669@xymon.invalid> wrote:

The xymon server starts the xymon client on that machine.


Do you possibly start xymonclient separately as well?


*From:* Xymon <xymon-bounces at xymon.com> *On Behalf Of *Rich Jones
*Sent:* Friday, May 11, 2018 6:43 AM
*To:* xymon at xymon.com
*Subject:* Re: [Xymon] Xymond Multi-source statuses


That makes a lot of sense indeed,
Checking xymonserver.cfg however seems to be correct:

XYMONSERVERHOSTNAME="my.xymon.url"

XYMONSERVERIP="**.***.226.227"

XYMONSERVEROS="linux"

XYMSRV="$XYMONSERVERIP"

I don't actually see XYMSERVERS in the xymonserver.cfg though


*Rich Jones* | Systems Developer

Corporation Pop
21-23 Shudehill
<https://maps.google.com/?q=21-23+Shudehill+%0D%0AManchester+M4+2AF&entry=gmail&source=g>;
Manchester M4 2AF
0161 838 0808

www.corporationpop.co.uk

This email message (and any attached file) is intended only for the use of
the individual or entity to whom the sender intended it to be addressed and
may contain information that constitutes a trade secret, or that is
privileged, confidential or subject to copyright. No part of it may be
circulated, quoted, or reproduced without prior written approval from
Corporation Pop Ltd. The contents of this document are strictly
confidential and owned by Corporation Pop Ltd. Copyright © Corporation Pop
Ltd. All rights reserved. Corporation Pop is a limited company registered
in England + Wales. Company number 4869229. VAT number 533 8932 26.


On 11 May 2018 at 00:57, Jeremy Laidman <user-0608abae5e7c@xymon.invalid> wrote:

On 9 May 2018 at 02:14, Rich Jones <user-6806fa693bf5@xymon.invalid> wrote:

Hi all,

Another one of those things I keep meaning to ask but keep on forgetting...
I'm seeing under the xymond column the following:

Multi-source statuses

  xymon.url.com:cpu reported by 127.0.0.1 and xx.xxx.226.227

  xymon.url.com:disk reported by 127.0.0.1 and xx.xxx.226.227

  xymon.url.com:files reported by 127.0.0.1 and xx.xxx.226.227

  xymon.url.com:inode reported by 127.0.0.1 and xx.xxx.226.227

  xymon.url.com:memory reported by 127.0.0.1 and xx.xxx.226.227

  xymon.url.com:msgs reported by 127.0.0.1 and xx.xxx.226.227

  xymon.url.com:ports reported by 127.0.0.1 and xx.xxx.226.227

  xymon.url.com:procs reported by 127.0.0.1 and xx.xxx.226.227

  xymon.url.com:uptime reported by 127.0.0.1 and xx.xxx.226.227

Looking through the archive it makes sense, Xymon is receiving data from
two sources, which I guess it is, however the two IPs are localhost and the
server IP address.

I'm guessing this is likely to do with how the things are setup on the
server rather than Xymon itself (eg in /etc/hosts)?

Can someone point me in the right direction to resolve this? I'm running
Xymon 4.3.28


It appears that the Xymon server is reporting to itself twice, using its
network IP address and the loopback address. The Xymon client that
generates the client data messages (from where these metrics come) will use
the $XYMSRV environment variable, and send to whatever IP address is
defined therein. Sometimes this is set to "0.0.0.0" which tells the Xymon
client to look at $XYMSERVERS as a list of multiple destinations. I suspect
you have XYMSERVERS="127.0.0.1 xx.xxx.226.227". On a Xymon server these
variables are is set in xymonserver.cfg.


J


This communication is the property of CenturyLink and may contain
confidential or privileged information. Unauthorized use of this
communication is strictly prohibited and may be unlawful. If you have
received this communication in error, please immediately notify the sender
by reply e-mail and destroy all copies of the communication and any
attachments.


This communication is the property of CenturyLink and may contain
confidential or privileged information. Unauthorized use of this
communication is strictly prohibited and may be unlawful. If you have
received this communication in error, please immediately notify the sender
by reply e-mail and destroy all copies of the communication and any
attachments.
list Rich Jones · Mon, 14 May 2018 14:04:17 +0100 · 
Just taking another look at this now and I think I may have found the issue.

On the server performing a locate xymonclient.cfg results in two versions
of the file in the following locations:
    /etc/xymon/xymonclient.cfg
    /usr/local/xymon/client/etc/xymonclient.cfg

The first in the list (/etc/xymon/xymonclient.cfg) contains the following
at the top:
    # Environment settings for the Xymon client.
    include /etc/default/xymon-client

So, if I look at the include referenced (/etc/default/xymon-client)
    # Environment settings for the Xymon client.
    XYMONSERVERS="127.0.0.1"

Looking at the second in the list (
/usr/local/xymon/client/etc/xymonclient.cfg)
    # Environment settings for the Xymon client.
    XYMSRV="34.251.226.227"
    XYMSERVERS=""

So, it looks like I have two clients sending info about the server to the
server?
Any idea which I should remove?
▸ quoted from Rich Jones


*Rich Jones* | Systems Developer
Corporation Pop
21-23 Shudehill
Manchester M4 2AF
0161 838 0808
www.corporationpop.co.uk
This email message (and any attached file) is intended only for the use of
the individual or entity to whom the sender intended it to be addressed and
may contain information that constitutes a trade secret, or that is
privileged, confidential or subject to copyright. No part of it may be
circulated, quoted, or reproduced without prior written approval from
Corporation Pop Ltd. The contents of this document are strictly
confidential and owned by Corporation Pop Ltd. Copyright © Corporation Pop
Ltd. All rights reserved. Corporation Pop is a limited company registered
in England + Wales. Company number 4869229. VAT number 533 8932 26.

On 11 May 2018 at 00:57, Jeremy Laidman <user-0608abae5e7c@xymon.invalid> wrote:

On 9 May 2018 at 02:14, Rich Jones <user-6806fa693bf5@xymon.invalid> wrote:

Hi all,

Another one of those things I keep meaning to ask but keep on
forgetting...
I'm seeing under the xymond column the following:

Multi-source statuses
  xymon.url.com:cpu reported by 127.0.0.1 and xx.xxx.226.227
  xymon.url.com:disk reported by 127.0.0.1 and xx.xxx.226.227
  xymon.url.com:files reported by 127.0.0.1 and xx.xxx.226.227
  xymon.url.com:inode reported by 127.0.0.1 and xx.xxx.226.227
  xymon.url.com:memory reported by 127.0.0.1 and xx.xxx.226.227
  xymon.url.com:msgs reported by 127.0.0.1 and xx.xxx.226.227
  xymon.url.com:ports reported by 127.0.0.1 and xx.xxx.226.227
  xymon.url.com:procs reported by 127.0.0.1 and xx.xxx.226.227
  xymon.url.com:uptime reported by 127.0.0.1 and xx.xxx.226.227

Looking through the archive it makes sense, Xymon is receiving data from
two sources, which I guess it is, however the two IPs are localhost and the
server IP address.

I'm guessing this is likely to do with how the things are setup on the
server rather than Xymon itself (eg in /etc/hosts)?

Can someone point me in the right direction to resolve this? I'm running
Xymon 4.3.28

It appears that the Xymon server is reporting to itself twice, using its
network IP address and the loopback address. The Xymon client that
generates the client data messages (from where these metrics come) will use
the $XYMSRV environment variable, and send to whatever IP address is
defined therein. Sometimes this is set to "0.0.0.0" which tells the Xymon
client to look at $XYMSERVERS as a list of multiple destinations. I suspect
you have XYMSERVERS="127.0.0.1 xx.xxx.226.227". On a Xymon server these
variables are is set in xymonserver.cfg.

J
list Galen Johnson · Mon, 14 May 2018 13:09:58 +0000 · 
At first glance, I would say you have both the RPM and the source compiled versions installed and running.  Personally, I would go with the RPMs unless there are specific compile-time needs.  It might be worth backing up your configs and re-installing.


=G=
▸ quoted from Rich Jones


From: Xymon <xymon-bounces at xymon.com> on behalf of Rich Jones <user-6806fa693bf5@xymon.invalid>
Sent: Monday, May 14, 2018 9:04 AM
To: Jeremy Laidman
Cc: xymon at xymon.com
Subject: Re: [Xymon] Xymond Multi-source statuses



EXTERNAL
▸ quoted from Rich Jones

Just taking another look at this now and I think I may have found the issue.

On the server performing a locate xymonclient.cfg results in two versions of the file in the following locations:
    /etc/xymon/xymonclient.cfg
    /usr/local/xymon/client/etc/xymonclient.cfg

The first in the list (/etc/xymon/xymonclient.cfg) contains the following at the top:
    # Environment settings for the Xymon client.
    include /etc/default/xymon-client

So, if I look at the include referenced (/etc/default/xymon-client)
    # Environment settings for the Xymon client.
    XYMONSERVERS="127.0.0.1"

Looking at the second in the list (/usr/local/xymon/client/etc/xymonclient.cfg)
    # Environment settings for the Xymon client.
    XYMSRV="34.251.226.227"
    XYMSERVERS=""

So, it looks like I have two clients sending info about the server to the server?
Any idea which I should remove?


Rich Jones | Systems Developer
Corporation Pop
21-23 Shudehill
Manchester M4 2AF
0161 838 0808
www.corporationpop.co.uk<http://www.corporationpop.co.uk/>;
This email message (and any attached file) is intended only for the use of the individual or entity to whom the sender intended it to be addressed and may contain information that constitutes a trade secret, or that is privileged, confidential or subject to copyright. No part of it may be circulated, quoted, or reproduced without prior written approval from Corporation Pop Ltd. The contents of this document are strictly confidential and owned by Corporation Pop Ltd. Copyright © Corporation Pop Ltd. All rights reserved. Corporation Pop is a limited company registered in England + Wales. Company number 4869229. VAT number 533 8932 26.


On 11 May 2018 at 00:57, Jeremy Laidman <user-0608abae5e7c@xymon.invalid<mailto:user-0608abae5e7c@xymon.invalid>> wrote:
On 9 May 2018 at 02:14, Rich Jones <user-6806fa693bf5@xymon.invalid<mailto:user-6806fa693bf5@xymon.invalid>> wrote:
Hi all,

Another one of those things I keep meaning to ask but keep on forgetting...
I'm seeing under the xymond column the following:

Multi-source statuses
  xymon.url.com:cpu reported by 127.0.0.1 and xx.xxx.226.227
  xymon.url.com<http://xymon.url.com>:disk reported by 127.0.0.1 and xx.xxx.226.227
  xymon.url.com<http://xymon.url.com>:files reported by 127.0.0.1 and xx.xxx.226.227
  xymon.url.com<http://xymon.url.com>:inode reported by 127.0.0.1 and xx.xxx.226.227
  xymon.url.com<http://xymon.url.com>:memory reported by 127.0.0.1 and xx.xxx.226.227
  xymon.url.com<http://xymon.url.com>:msgs reported by 127.0.0.1 and xx.xxx.226.227
  xymon.url.com<http://xymon.url.com>:ports reported by 127.0.0.1 and xx.xxx.226.227
  xymon.url.com<http://xymon.url.com>:procs reported by 127.0.0.1 and xx.xxx.226.227
  xymon.url.com<http://xymon.url.com>:uptime reported by 127.0.0.1 and xx.xxx.226.227

Looking through the archive it makes sense, Xymon is receiving data from two sources, which I guess it is, however the two IPs are localhost and the server IP address.

I'm guessing this is likely to do with how the things are setup on the server rather than Xymon itself (eg in /etc/hosts)?

Can someone point me in the right direction to resolve this? I'm running Xymon 4.3.28

It appears that the Xymon server is reporting to itself twice, using its network IP address and the loopback address. The Xymon client that generates the client data messages (from where these metrics come) will use the $XYMSRV environment variable, and send to whatever IP address is defined therein. Sometimes this is set to "0.0.0.0" which tells the Xymon client to look at $XYMSERVERS as a list of multiple destinations. I suspect you have XYMSERVERS="127.0.0.1 xx.xxx.226.227". On a Xymon server these variables are is set in xymonserver.cfg.

J
list Rich Jones · Mon, 14 May 2018 14:13:49 +0100 · 
Yeah, I think I have some idea what has happened.
I think possibly this is to do with having the hobbit-plugins add ons
installed, I have a vague memory of having an issue installing these
through apt due to having a latest build of xymon (ie not from apt repos),
so I think somewhere along the way the client also got installed through
apt, even though it was build from source with the server.

I will remove the apt version I think, providing it doesnt kill the hobbit
plugins.
Will update as I go...
▸ quoted from Galen Johnson

*Rich Jones* | Systems Developer
Corporation Pop
21-23 Shudehill
Manchester M4 2AF
0161 838 0808
www.corporationpop.co.uk
This email message (and any attached file) is intended only for the use of
the individual or entity to whom the sender intended it to be addressed and
may contain information that constitutes a trade secret, or that is
privileged, confidential or subject to copyright. No part of it may be
circulated, quoted, or reproduced without prior written approval from
Corporation Pop Ltd. The contents of this document are strictly
confidential and owned by Corporation Pop Ltd. Copyright © Corporation Pop
Ltd. All rights reserved. Corporation Pop is a limited company registered
in England + Wales. Company number 4869229. VAT number 533 8932 26.

On 14 May 2018 at 14:09, Galen Johnson <user-87f955643e3d@xymon.invalid> wrote:

At first glance, I would say you have both the RPM and the source compiled
versions installed and running.  Personally, I would go with the RPMs
unless there are specific compile-time needs.  It might be worth backing up
your configs and re-installing.


=G=


*From:* Xymon <xymon-bounces at xymon.com> on behalf of Rich Jones <
user-6806fa693bf5@xymon.invalid>
*Sent:* Monday, May 14, 2018 9:04 AM
*To:* Jeremy Laidman
*Cc:* xymon at xymon.com
*Subject:* Re: [Xymon] Xymond Multi-source statuses


*EXTERNAL*
Just taking another look at this now and I think I may have found the
issue.

On the server performing a locate xymonclient.cfg results in two versions
of the file in the following locations:
    /etc/xymon/xymonclient.cfg
    /usr/local/xymon/client/etc/xymonclient.cfg

The first in the list (/etc/xymon/xymonclient.cfg) contains the following
at the top:
    # Environment settings for the Xymon client.
    include /etc/default/xymon-client

So, if I look at the include referenced (/etc/default/xymon-client)
    # Environment settings for the Xymon client.
    XYMONSERVERS="127.0.0.1"


Looking at the second in the list (/usr/local/xymon/client/etc/
xymonclient.cfg)
▸ quoted from Galen Johnson
    # Environment settings for the Xymon client.
    XYMSRV="34.251.226.227"
    XYMSERVERS=""

So, it looks like I have two clients sending info about the server to the
server?
Any idea which I should remove?


*Rich Jones* | Systems Developer
Corporation Pop
21-23 Shudehill
<https://maps.google.com/?q=21-23+Shudehill+%0D%0AManchester+M4+2AF&entry=gmail&source=g>;
Manchester M4 2AF
0161 838 0808
www.corporationpop.co.uk
This email message (and any attached file) is intended only for the use of
the individual or entity to whom the sender intended it to be addressed and
may contain information that constitutes a trade secret, or that is
privileged, confidential or subject to copyright. No part of it may be
circulated, quoted, or reproduced without prior written approval from
Corporation Pop Ltd. The contents of this document are strictly
confidential and owned by Corporation Pop Ltd. Copyright © Corporation Pop
Ltd. All rights reserved. Corporation Pop is a limited company registered
in England + Wales. Company number 4869229. VAT number 533 8932 26.

On 11 May 2018 at 00:57, Jeremy Laidman <user-0608abae5e7c@xymon.invalid> wrote:

On 9 May 2018 at 02:14, Rich Jones <user-6806fa693bf5@xymon.invalid> wrote:

Hi all,

Another one of those things I keep meaning to ask but keep on
forgetting...
I'm seeing under the xymond column the following:

Multi-source statuses
  xymon.url.com:cpu reported by 127.0.0.1 and xx.xxx.226.227
  xymon.url.com:disk reported by 127.0.0.1 and xx.xxx.226.227
  xymon.url.com:files reported by 127.0.0.1 and xx.xxx.226.227
  xymon.url.com:inode reported by 127.0.0.1 and xx.xxx.226.227
  xymon.url.com:memory reported by 127.0.0.1 and xx.xxx.226.227
  xymon.url.com:msgs reported by 127.0.0.1 and xx.xxx.226.227
  xymon.url.com:ports reported by 127.0.0.1 and xx.xxx.226.227
  xymon.url.com:procs reported by 127.0.0.1 and xx.xxx.226.227
  xymon.url.com:uptime reported by 127.0.0.1 and xx.xxx.226.227

Looking through the archive it makes sense, Xymon is receiving data from
two sources, which I guess it is, however the two IPs are localhost and the
server IP address.

I'm guessing this is likely to do with how the things are setup on the
server rather than Xymon itself (eg in /etc/hosts)?

Can someone point me in the right direction to resolve this? I'm running
Xymon 4.3.28

It appears that the Xymon server is reporting to itself twice, using its
network IP address and the loopback address. The Xymon client that
generates the client data messages (from where these metrics come) will use
the $XYMSRV environment variable, and send to whatever IP address is
defined therein. Sometimes this is set to "0.0.0.0" which tells the Xymon
client to look at $XYMSERVERS as a list of multiple destinations. I suspect
you have XYMSERVERS="127.0.0.1 xx.xxx.226.227". On a Xymon server these
variables are is set in xymonserver.cfg.

J
list Rich Jones · Mon, 14 May 2018 15:23:57 +0100 · 
Right so,

I have solved the issue by uninstalling the client through apt, which of
course removed hobbit-plugins.
Now I have no warnings on the multi-source statuses, though I now only get
the default monitors, we do use the additions from the hobbit-plugins
package.

If I build the server manually to get the latest version of the server
software, this builds the client also.
However to have hobbit-plugins working, I need to install this through apt
which enforces the xymon-client package as a requirement.

Is it possible to build the xymon server without the client?

If not, is it possible (and how) do I install the hobbit-plugins packages
manually?

Cheers
▸ quoted from Rich Jones


On 14 May 2018 at 14:13, Rich Jones <user-6806fa693bf5@xymon.invalid> wrote:

Yeah, I think I have some idea what has happened.
I think possibly this is to do with having the hobbit-plugins add ons
installed, I have a vague memory of having an issue installing these
through apt due to having a latest build of xymon (ie not from apt repos),
so I think somewhere along the way the client also got installed through
apt, even though it was build from source with the server.

I will remove the apt version I think, providing it doesnt kill the hobbit
plugins.
Will update as I go...

*Rich Jones* | Systems Developer
Corporation Pop
21-23 Shudehill
Manchester M4 2AF
0161 838 0808
www.corporationpop.co.uk
This email message (and any attached file) is intended only for the use of
the individual or entity to whom the sender intended it to be addressed and
may contain information that constitutes a trade secret, or that is
privileged, confidential or subject to copyright. No part of it may be
circulated, quoted, or reproduced without prior written approval from
Corporation Pop Ltd. The contents of this document are strictly
confidential and owned by Corporation Pop Ltd. Copyright © Corporation Pop
Ltd. All rights reserved. Corporation Pop is a limited company registered
in England + Wales. Company number 4869229. VAT number 533 8932 26.

On 14 May 2018 at 14:09, Galen Johnson <user-87f955643e3d@xymon.invalid> wrote:

At first glance, I would say you have both the RPM and the source
compiled versions installed and running.  Personally, I would go with the
RPMs unless there are specific compile-time needs.  It might be worth
backing up your configs and re-installing.


=G=


*From:* Xymon <xymon-bounces at xymon.com> on behalf of Rich Jones <
user-6806fa693bf5@xymon.invalid>
*Sent:* Monday, May 14, 2018 9:04 AM
*To:* Jeremy Laidman
*Cc:* xymon at xymon.com
*Subject:* Re: [Xymon] Xymond Multi-source statuses


*EXTERNAL*
Just taking another look at this now and I think I may have found the
issue.

On the server performing a locate xymonclient.cfg results in two versions
of the file in the following locations:
    /etc/xymon/xymonclient.cfg
    /usr/local/xymon/client/etc/xymonclient.cfg

The first in the list (/etc/xymon/xymonclient.cfg) contains the
following at the top:
    # Environment settings for the Xymon client.
    include /etc/default/xymon-client

So, if I look at the include referenced (/etc/default/xymon-client)
    # Environment settings for the Xymon client.
    XYMONSERVERS="127.0.0.1"


Looking at the second in the list (/usr/local/xymon/client/etc/x
ymonclient.cfg)
▸ quoted from Rich Jones
    # Environment settings for the Xymon client.
    XYMSRV="34.251.226.227"
    XYMSERVERS=""

So, it looks like I have two clients sending info about the server to the
server?
Any idea which I should remove?


*Rich Jones* | Systems Developer
Corporation Pop
21-23 Shudehill
<https://maps.google.com/?q=21-23+Shudehill+%0D%0AManchester+M4+2AF&entry=gmail&source=g>;
Manchester M4 2AF
0161 838 0808
www.corporationpop.co.uk
This email message (and any attached file) is intended only for the use
of the individual or entity to whom the sender intended it to be addressed
and may contain information that constitutes a trade secret, or that is
privileged, confidential or subject to copyright. No part of it may be
circulated, quoted, or reproduced without prior written approval from
Corporation Pop Ltd. The contents of this document are strictly
confidential and owned by Corporation Pop Ltd. Copyright © Corporation Pop
Ltd. All rights reserved. Corporation Pop is a limited company registered
in England + Wales. Company number 4869229. VAT number 533 8932 26.

On 11 May 2018 at 00:57, Jeremy Laidman <user-0608abae5e7c@xymon.invalid> wrote:

On 9 May 2018 at 02:14, Rich Jones <user-6806fa693bf5@xymon.invalid> wrote:

Hi all,

Another one of those things I keep meaning to ask but keep on
forgetting...
I'm seeing under the xymond column the following:

Multi-source statuses
  xymon.url.com:cpu reported by 127.0.0.1 and xx.xxx.226.227
  xymon.url.com:disk reported by 127.0.0.1 and xx.xxx.226.227
  xymon.url.com:files reported by 127.0.0.1 and xx.xxx.226.227
  xymon.url.com:inode reported by 127.0.0.1 and xx.xxx.226.227
  xymon.url.com:memory reported by 127.0.0.1 and xx.xxx.226.227
  xymon.url.com:msgs reported by 127.0.0.1 and xx.xxx.226.227
  xymon.url.com:ports reported by 127.0.0.1 and xx.xxx.226.227
  xymon.url.com:procs reported by 127.0.0.1 and xx.xxx.226.227
  xymon.url.com:uptime reported by 127.0.0.1 and xx.xxx.226.227

Looking through the archive it makes sense, Xymon is receiving data
from two sources, which I guess it is, however the two IPs are localhost
and the server IP address.

I'm guessing this is likely to do with how the things are setup on the
server rather than Xymon itself (eg in /etc/hosts)?

Can someone point me in the right direction to resolve this? I'm
running Xymon 4.3.28

It appears that the Xymon server is reporting to itself twice, using its
network IP address and the loopback address. The Xymon client that
generates the client data messages (from where these metrics come) will use
the $XYMSRV environment variable, and send to whatever IP address is
defined therein. Sometimes this is set to "0.0.0.0" which tells the Xymon
client to look at $XYMSERVERS as a list of multiple destinations. I suspect
you have XYMSERVERS="127.0.0.1 xx.xxx.226.227". On a Xymon server these
variables are is set in xymonserver.cfg.

J