diff options
Diffstat (limited to 'abs')
| -rwxr-xr-x | abs/core/xymon/PKGBUILD | 15 | ||||
| -rw-r--r-- | abs/core/xymon/analysis.cfg | 445 | ||||
| -rw-r--r-- | abs/core/xymon/analysis.cfg.patch | 112 | ||||
| -rw-r--r-- | abs/core/xymon/xymon-server.rules | 3 |
4 files changed, 123 insertions, 452 deletions
diff --git a/abs/core/xymon/PKGBUILD b/abs/core/xymon/PKGBUILD index 787ce61..c619eaa 100755 --- a/abs/core/xymon/PKGBUILD +++ b/abs/core/xymon/PKGBUILD @@ -1,9 +1,9 @@ pkgbase=xymon pkgname=('xymonserver' 'xymonclient') pkgver=4.3.17 -pkgrel=23 +pkgrel=24 pkgdesc="Xymon is a system for monitoring of hosts and networks" -license="GPL" +license=('GPL') arch=('i686' 'x86_64') url="http://www.xymon.com/" source=("https://downloads.sourceforge.net/project/xymon/Xymon/$pkgver/$pkgbase-$pkgver.tar.gz" @@ -17,6 +17,7 @@ source=("https://downloads.sourceforge.net/project/xymon/Xymon/$pkgver/$pkgbase- 'hbnotes.py' 'hobbit-myth-orphan.sh' 'analysis.cfg' + 'analysis.cfg.patch' 'hbfunc.py' 'be.png' 'tuner.png' 'tv.png' 'hobbit-mem-myth.sh' @@ -58,6 +59,7 @@ build() { MANROOT=/usr/share/man \ BARS=all \ USENEWHIST=y \ + USEXYMONPING=n \ PIXELCOUNT=960 \ INSTALLBINDIR=/home/xymon/server/bin \ INSTALLETCDIR=/home/xymon/etc \ @@ -88,7 +90,6 @@ package_xymonserver(){ install -D -m755 ${srcdir}/xymon-smart.sh ${pkgdir}/home/xymon/server/ext/xymon-smart.sh install -D -m755 ${srcdir}/log_list.sh ${pkgdir}/home/xymon/client/bin/log_list.sh - install -m755 analysis.cfg ${pkgdir}/home/xymon/etc/analysis.cfg cat alerts.cfg >> ${pkgdir}/home/xymon/etc/alerts.cfg install -m755 hobbit_notify.sh ${pkgdir}/home/xymon/server/bin/hobbit_notify.sh @@ -115,6 +116,7 @@ package_xymonserver(){ cd ${pkgdir}/home/xymon/etc patch -p0 < ${srcdir}/graphs.cfg.diff || return 1 patch -p0 < ${srcdir}/xymonserver.cfg.diff || return 1 + patch -p0 < ${srcdir}/analysis.cfg.patch || return 1 patch -p3 < ${srcdir}/client-local.cfg.patch || return 1 patch -p3 < ${srcdir}/hosts.cfg.patch || return 1 @@ -127,7 +129,7 @@ package_xymonserver(){ echo "orphan;The <b>orphan</b> column shows the status of the find_orphans.py script.;" >> $COLDOC #fix permissions - chmod 775 ${pkgdir}/data/srv/httpd/htdocs/ + chmod 755 ${pkgdir}/data/srv/httpd/htdocs/ chmod 775 ${pkgdir}/data/srv/httpd/htdocs/xymon/ chmod 775 ${pkgdir}/data/srv/httpd/htdocs/xymon/notes/ chmod 775 ${pkgdir}/data/srv/httpd/htdocs/xymon/gifs/ @@ -170,7 +172,8 @@ md5sums=('d8d119a777e7b7204d1292fb27314312' 'b2f98ac0df013332deedc1efae0a270d' 'df77d1de72157d23a301a72288fbf7e5' '2a509d81ee1655130ce40bf970719e0a' - '166279c006c3ef7bf0c21537cf89fc83' + '4d594fba346b56e479d180162a0db44c' + '77fd7ab6ebbe72d14092ee53c5958f97' '80d9cfac86c6d96836e6f406e35e7cf5' 'd210c43fb9ee9ad6cd7648e0c2e0efea' '0c808fa12672289f86b0651545381308' @@ -188,6 +191,6 @@ md5sums=('d8d119a777e7b7204d1292fb27314312' '98e9242ae346f729b14cb195786571f2' '31ac5c1f6dcc9408b64c4107b325a9a6' 'c7178bbf384bbe86c318b60fef6faf10' - '2871c53627e9e125922118013a868a95' + 'e9dbff011e57861266d27dfdf465a4b3' 'cdfbca43dbae4ce0ca72dd002ec22af1' '606f535a49f32b35802ed9d46bd7d068') diff --git a/abs/core/xymon/analysis.cfg b/abs/core/xymon/analysis.cfg deleted file mode 100644 index 460d157..0000000 --- a/abs/core/xymon/analysis.cfg +++ /dev/null @@ -1,445 +0,0 @@ -# analysis.cfg - configuration file for clients reporting to Xymon -# -# This file is used by the xymond_client module, when it builds the -# cpu, disk, files, memory, msgs and procs status messages from the -# information reported by clients running on the monitored systems. -# -# This file must be installed on the Xymon server - client installations -# do not need this file. -# -# The file defines a series of rules: -# UP : Changes the "cpu" status when the system has rebooted recently, -# or when it has been running for too long. -# LOAD : Changes the "cpu" status according to the system load. -# CLOCK : Changes the "cpu" status if the client system clock is -# not synchronized with the clock of the Xymon server. -# DISK : Changes the "disk" status, depending on the amount of space -# used of filesystems. -# MEMPHYS: Changes the "memory" status, based on the percentage of real -# memory used. -# MEMACT : Changes the "memory" status, based on the percentage of "actual" -# memory used. Note: Not all systems report an "actual" value. -# MEMSWAP: Changes the "memory" status, based on the percentage of swap -# space used. -# PROC : Changes the "procs" status according to which processes were found -# in the "ps" listing from the client. -# LOG : Changes the "msgs" status according to entries in text-based logfiles. -# Note: The "client-local.cfg" file controls which logfiles the client will report. -# FILE : Changes the "files" status according to meta-data for files. -# Note: The "client-local.cfg" file controls which files the client will report. -# DIR : Changes the "files" status according to the size of a directory. -# Note: The "client-local.cfg" file controls which directories the client will report. -# PORT : Changes the "ports" status according to which tcp ports were found -# in the "netstat" listing from the client. -# DEFAULT: Set the default values that apply if no other rules match. -# -# All rules can be qualified so they apply only to certain hosts, or on certain -# times of the day (see below). -# -# Each type of rule takes a number of parameters: -# UP bootlimit toolonglimit -# The cpu status goes yellow if the system has been up for less than -# "bootlimit" time, or longer than "toolonglimit". The time is in -# minutes, or you can add h/d/w for hours/days/weeks - eg. "2h" for -# two hours, or "4w" for 4 weeks. -# Defaults: bootlimit=1h, toolonglimit=-1 (infinite). -# -# LOAD warnlevel paniclevel -# If the system load exceeds "warnlevel" or "paniclevel", the "cpu" -# status will go yellow or red, respectively. These are decimal -# numbers. -# Defaults: warnlevel=5.0, paniclevel=10.0 -# -# CLOCK maximum-offset -# If the system clock of the client differs from that of the Xymon -# server by more than "maximum-offset" seconds, then the CPU status -# column will go yellow. Note that the accuracy of this test is limited, -# since it is affected by the time it takes a client status report to -# go from the client to the Xymon server and be processed. You should -# therefore allow for a few seconds (5-10) of slack when you define -# your max. offset. -# It is not wise to use this test, unless your servers are synchronized -# to a common clock, e.g. through NTP. -# -# DISK filesystem warnlevel paniclevel -# DISK filesystem IGNORE -# If the utilization of "filesystem" is reported to exceed "warnlevel" -# or "paniclevel", the "disk" status will go yellow or red, respectively. -# "warnlevel" and "paniclevel" are either the percentage used, or the -# space available as reported by the local "df" command on the host. -# For the latter type of check, the "warnlevel" must be followed by the -# letter "U", e.g. "1024U". -# The special keyword "IGNORE" causes this filesystem to be ignored -# completely, i.e. it will not appear in the "disk" status column and -# it will not be tracked in a graph. This is useful for e.g. removable -# devices, backup-disks and similar hardware. -# "filesystem" is the mount-point where the filesystem is mounted, e.g. -# "/usr" or "/home". A filesystem-name that begins with "%" is interpreted -# as a Perl-compatible regular expression; e.g. "%^/oracle.*/" will match -# any filesystem whose mountpoint begins with "/oracle". -# Defaults: warnlevel=90%, paniclevel=95% -# -# MEMPHYS warnlevel paniclevel -# MEMACT warnlevel paniclevel -# MEMSWAP warnlevel paniclevel -# If the memory utilization exceeds the "warnlevel" or "paniclevel", the -# "memory" status will change to yellow or red, respectively. -# Note: The words "PHYS", "ACT" and "SWAP" are also recognized. -# Defaults: MEMPHYS warnlevel=100 paniclevel=101 (i.e. it will never go red) -# MEMSWAP warnlevel=50 paniclevel=80 -# MEMACT warnlevel=90 paniclevel=97 -# -# PROC processname minimumcount maximumcount color [TRACK=id] [TEXT=displaytext] -# The "ps" listing sent by the client will be scanned for how many -# processes containing "processname" are running, and this is then -# matched against the min/max settings defined here. If the running -# count is outside the thresholds, the color of the "procs" status -# changes to "color". -# To check for a process that must NOT be running: Set minimum and -# maximum to 0. -# -# "processname" can be a simple string, in which case this string must -# show up in the "ps" listing as a command. The scanner will find -# a ps-listing of e.g. "/usr/sbin/cron" if you only specify "processname" -# as "cron". -# "processname" can also be a Perl-compatiable regular expression, e.g. -# "%java.*inst[0123]" can be used to find entries in the ps-listing for -# "java -Xmx512m inst2" and "java -Xmx256 inst3". In that case, -# "processname" must begin with "%" followed by the reg.expression. -# If "processname" contains whitespace (blanks or TAB), you must enclose -# the full string in double quotes - including the "%" if you use regular -# expression matching. E.g. -# PROC "%xymond_channel --channel=data.*xymond_rrd" 1 1 yellow -# or -# PROC "java -DCLASSPATH=/opt/java/lib" 2 5 -# -# You can have multiple "PROC" entries for the same host, all of the -# checks are merged into the "procs" status and the most severe -# check defines the color of the status. -# -# The TRACK=id option causes the number of processes found to be recorded -# in an RRD file, with "id" as part of the filename. This graph will then -# appear on the "procs" page as well as on the "trends" page. Note that -# "id" must be unique among the processes tracked for each host. -# -# The TEXT=displaytext option affects how the process appears on the -# "procs" status page. By default, the process is listed with the -# "processname" as identification, but if this is a regular expression -# it may be a bit difficult to understand. You can then use e.g. -# "TEXT=Apache" to make these processes appear with the name "Apache" -# instead. -# -# Defaults: mincount=1, maxcount=-1 (unlimited), color="red". -# Note: No processes are checked by default. -# -# Example: Check that "cron" is running: -# PROC cron -# Example: Check that at least 5 "httpd" processes are running, but -# not more than 20: -# PROC httpd 5 20 -# -# LOG filename match-pattern [COLOR=color] [IGNORE=ignore-pattern] [TEXT=displaytext] -# In the "client-local.cfg" file, you can list any number of files -# that the client will collect log data from. These are sent to the -# Xymon server together with the other client data, and you can then -# choose how to analyze the log data with LOG entries. -# -# ************ IMPORTANT *************** -# To monitor a logfile, you *MUST* configure both client-local.cfg -# and analysis.cfg. If you configure only the client-local.cfg -# file, the client will collect the log data and you can view it in -# the "client data" display, but it will not affect the color of the -# "msgs" status. On the other hand, if you configure only the -# analysis.cfg file, then there will be no log data to inspect, -# and you will not see any updates of the "msgs" status either. -# -# "filename" is a filename or pattern. The set of files reported by -# the client is matched against "filename", and if they match then -# this LOG entry is processed against the data from a file. -# -# "match-pattern": The log data is matched against this pattern. If -# there is a match, this log file causes a status change to "color". -# -# "ignore-pattern": The log data that matched "match-pattern" is also -# matched against "ignore-pattern". If the data matches the "ignore-pattern", -# this line of data does not affect the status color. In other words, -# the "ignore-pattern" can be used to refine the strings which cause -# a match. -# Note: The "ignore-pattern" is optional. -# -# "color": The color which this match will trigger. -# Note: "color" is optional, if omitted then "red" will be used. -# -# Example: Go yellow if the text "WARNING" shows up in any logfile. -# LOG %.* WARNING COLOR=yellow -# -# Example: Go red if the text "I/O error" or "read error" appears. -# LOG %/var/(adm|log)/messages %(I/O|read).error COLOR=red -# -# FILE filename [color] [things to check] [TRACK] -# NB: The files you wish to monitor must be listed in a "file:..." -# entry in the client-local.cfg file, in order for the client to -# report any data about them. -# -# "filename" is a filename or pattern. The set of files reported by -# the client is matched against "filename", and if they match then -# this FILE entry is processed against the data from that file. -# -# [things to check] can be one or more of the following: -# - "NOEXIST" triggers a warning if the file exists. By default, -# a warning is triggered for files that have a FILE entry, but -# which do not exist. -# - "TYPE=type" where "type" is one of "file", "dir", "char", "block", -# "fifo", or "socket". Triggers warning if the file is not of the -# specified type. -# - "OWNERID=owner" and "GROUPID=group" triggers a warning if the owner -# or group does not match what is listed here. "owner" and "group" is -# specified either with the numeric uid/gid, or the user/group name. -# - "MODE=mode" triggers a warning if the file permissions are not -# as listed. "mode" is written in the standard octal notation, e.g. -# "644" for the rw-r--r-- permissions. -# - "SIZE<max.size" and "SIZE>min.size" triggers a warning it the file -# size is greater than "max.size" or less than "min.size", respectively. -# You can append "K" (KB), "M" (MB), "G" (GB) or "T" (TB) to the size. -# If there is no such modifier, KB is assumed. -# E.g. to warn if a file grows larger than 1MB (1024 KB): "SIZE<1M". -# - "SIZE=size" triggers a warning it the file size is not what is listed. -# - "MTIME>min.mtime" and "MTIME<max.mtime" checks how long ago the file -# was last modified (in seconds). E.g. to check if a file was updated -# within the past 10 minutes (600 seconds): "MTIME<600". Or to check -# that a file has NOT been updated in the past 24 hours: "MTIME>86400". -# - "MTIME=timestamp" checks if a file was last modified at "timestamp". -# "timestamp" is a unix epoch time (seconds since midnight Jan 1 1970 UTC). -# - "CTIME>min.ctime", "CTIME<max.ctime", "CTIME=timestamp" acts as the -# mtime checks, but for the ctime timestamp (when the files' directory -# entry was last changed, eg. by chown, chgrp or chmod). -# - "MD5=md5sum", "SHA1=sha1sum", "RMD160=rmd160sum" trigger a warning -# if the file checksum using the MD5, SHA1 or RMD160 message digest -# algorithms do not match the one configured here. Note: The "file" -# entry in the client-local.cfg file must specify which algorithm to use. -# -# "TRACK" causes the size of this file to be tracked in an RRD file, and -# shown on the graph on the "files" display. -# -# Example: Check that the /var/log/messages file is not empty and was updated -# within the past 10 minutes, and go yellow if either fails: -# FILE /var/log/messages SIZE>0 MTIME<600 yellow -# -# Example: Check the timestamp, size and SHA-1 hash of the /bin/sh program: -# FILE /bin/sh MTIME=1128514608 SIZE=645140 SHA1=5bd81afecf0eb93849a2fd9df54e8bcbe3fefd72 -# -# DIR directory [color] [SIZE<maxsize] [SIZE>minsize] [TRACK] -# NB: The directories you wish to monitor must be listed in a "dir:..." -# entry in the client-local.cfg file, in order for the client to -# report any data about them. -# -# "directory" is a filename or pattern. The set of directories reported by -# the client is matched against "directory", and if they match then -# this DIR entry is processed against the data for that directory. -# -# "SIZE<maxsize" and "SIZE>minsize" defines the size limits that the -# directory must stay within. If it goes outside these limits, a warning -# will trigger. Note the Xymon uses the raw number reported by the -# local "du" command on the client. This is commonly KB, but it may be -# disk blocks which are often 512 bytes. -# -# "TRACK" causes the size of this directory to be tracked in an RRD file, -# and shown on the graph on the "files" display. -# -# PORT [LOCAL=addr] [EXLOCAL=addr] [REMOTE=addr] [EXREMOTE=addr] [STATE=state] [EXSTATE=state] [MIN=mincount] [MAX=maxcount] [COLOR=color] [TRACK=id] [TEXT=displaytext] -# The "netstat" listing sent by the client will be scanned for how many -# sockets match the criteria listed. -# "addr" is a (partial) address specification in the format used on -# the output from netstat. This is typically "10.0.0.1:80" for the IP -# 10.0.0.1, port 80. Or "*:80" for any local address, port 80. -# NB: The Xymon clients normally report only the numeric data for -# IP-adresses and port-numbers, so you must specify the port -# number (e.g. "80") instead of the service name ("www"). -# "state" causes only the sockets in the specified state to be included; -# it is usually LISTEN or ESTABLISHED. -# The socket count is then matched against the min/max settings defined -# here. If the count is outside the thresholds, the color of the "ports" -# status changes to "color". -# To check for a socket that must NOT exist: Set minimum and -# maximum to 0. -# -# "addr" and "state" can be a simple strings, in which case these string must -# show up in the "netstat" at the appropriate column. -# "addr" and "state" can also be a Perl-compatiable regular expression, e.g. -# "LOCAL=%(:80|:443)" can be used to find entries in the netstat local port for -# both http (port 80) and https (port 443). In that case, portname or state must -# begin with "%" followed by the reg.expression. -# -# The TRACK=id option causes the number of sockets found to be recorded -# in an RRD file, with "id" as part of the filename. This graph will then -# appear on the "ports" page as well as on the "trends" page. Note that -# "id" must be unique among the ports tracked for each host. -# -# The TEXT=displaytext option affects how the port appears on the -# "ports" status page. By default, the port is listed with the -# local/remote/state rules as identification, but this may be somewhat -# difficult to understand. You can then use e.g. "TEXT=Secure Shell" to make -# these ports appear with the name "Secure Shell" instead. -# -# Defaults: state="LISTEN", mincount=1, maxcount=-1 (unlimited), color="red". -# Note: No ports are checked by default. -# -# Example: Check that there is someone listening on the https port: -# PORT "LOCAL=%([.:]443)$" state=LISTEN TEXT=https -# -# Example: Check that at least 5 "ssh" connections are established, but -# not more than 10; warn but do not error; graph the connection count: -# PORT "LOCAL=%([.:]22)$" state=ESTABLISHED min=5 max=20 color=yellow TRACK=ssh "TEXT=SSH logins" -# -# Example: Check that ONLY ports 22, 80 and 443 are open for incoming connections: -# PORT STATE=LISTEN LOCAL=%0.0.0.0[.:].* EXLOCAL=%[.:](22|80|443)$ MAX=0 "TEXT=Bad listeners" -# -# -# To apply rules to specific hosts, you can use the "HOST=", "EXHOST=", "PAGE=" -# "EXPAGE=", "CLASS=" or "EXCLASS=" qualifiers. (These act just as in the -# alerts.cfg file). -# -# Hostnames are either a comma-separated list of hostnames (from the hosts.cfg file), -# "*" to indicate "all hosts", or a Perl-compatible regular expression. -# E.g. "HOST=dns.foo.com,www.foo.com" identifies two specific hosts; -# "HOST=%www.*.foo.com EXHOST=www-test.foo.com" matches all hosts with a name -# beginning with "www", except the "www-test" host. -# "PAGE" and "EXPAGE" match the hostnames against the page on where they are -# located in the hosts.cfg file, via the hosts' page/subpage/subparent -# directives. This can be convenient to pick out all hosts on a specific page. -# -# Rules can be dependant on time-of-day, using the standard Xymon syntax -# (the hosts.cfg(5) about the NKTIME parameter). E.g. "TIME=W:0800:2200" -# applied to a rule will make this rule active only on week-days between -# 8AM and 10PM. -# -# You can also associate a GROUP id with a rule. The group-id is passed to -# the alert module, which can then use it to control who gets an alert when -# a failure occurs. E.g. the following associates the "httpd" process check -# with the "web" group, and the "sshd" check with the "admins" group: -# PROC httpd ?5 GROUP=web -# PROC sshd 1 GROUP=admins -# In the alerts.cfg file, you could then have rules like -# GROUP=web -# MAIL webmaster@foo.com -# GROUP=admins -# MAIL root@foo.com -# -# Qualifiers must be placed after each rule, e.g. -# LOAD 8.0 12.0 HOST=db.foo.com TIME=*:0800:1600 -# -# If you have multiple rules that you want to apply the same qualifiers to, -# you can write the qualifiers *only* on one line, followed by the rules. E.g. -# HOST=%db.*.foo.com TIME=W:0800:1600 -# LOAD 8.0 12.0 -# DISK /db 98 100 -# PROC mysqld 1 -# will apply the three rules to all of the "db" hosts on week-days between 8AM -# and 4PM. This can be combined with per-rule qualifiers, in which case the -# per-rule qualifier overrides the general qualifier; e.g. -# HOST=%.*.foo.com -# LOAD 7.0 12.0 HOST=bax.foo.com -# LOAD 3.0 8.0 -# will result in the load-limits being 7.0/12.0 for the "bax.foo.com" host, -# and 3.0/8.0 for all other foo.com hosts. -# -# The special DEFAULT section can modify the built-in defaults - this must -# be placed at the end of the file. - - -HOST=_MASTERBACKEND_ - PROC sshd 1 - PROC lighttpd - PROC xymond - PROC crond - PROC mysql - PROC mythbackend - PROC msg_daemon.py - DISK %^/cdrom.* IGNORE - DISK %^/mnt.* IGNORE - DISK %^/media.* IGNORE - DISK * 95 99 - PORT "LOCAL=%([.:]80)$" state=LISTEN TEXT=http - PORT "LOCAL=%([.:]1337)$" state=LISTEN TEXT=cgi - PORT "LOCAL=%([.:]22)$" state=LISTEN TEXT=ssh - -HOST=_MASTERFRONTEND_ - PROC mythfrontend 1 5 yellow - PROC sshd 1 - PROC lighttpd - PROC xymond - PROC crond - PROC mysql - PROC mythbackend - PROC msg_daemon.py - DISK %^/cdrom.* IGNORE - DISK %^/mnt.* IGNORE - DISK %^/media.* IGNORE - DISK * 95 99 - PORT "LOCAL=%([.:]80)$" state=LISTEN TEXT=http - PORT "LOCAL=%([.:]1337)$" state=LISTEN TEXT=cgi - PORT "LOCAL=%([.:]22)$" state=LISTEN TEXT=ssh - - - -HOST=_FRONTEND_ - PROC sshd 1 - PROC crond - PROC mythfrontend 1 5 yellow - PROC msg_daemon.py - PORT "LOCAL=%([.:]22)$" state=LISTEN TEXT=ssh - -HOST=_SLAVEBACKEND_ - PROC sshd 1 - PROC crond - PROC mythbackend - DISK %^/cdrom.* IGNORE - DISK %^/mnt.* IGNORE - DISK %^/media.* IGNORE - DISK * 95 99 - PORT "LOCAL=%([.:]22)$" state=LISTEN TEXT=ssh - -HOST=_SLAVEFRONTEND_ - PROC sshd 1 - PROC lighttpd - PROC hobbitd - PROC crond - PROC mythbackend - PROC mythfrontend 1 5 yellow - PROC msg_daemon.py - DISK %^/cdrom.* IGNORE - DISK %^/mnt.* IGNORE - DISK %^/media.* IGNORE - DISK * 95 99 - PORT "LOCAL=%([.:]22)$" state=LISTEN TEXT=ssh - - -HOST=_STANDALONE_ - PROC mythfrontend 1 5 yellow - PROC sshd 1 - PROC lighttpd - PROC xymond - PROC crond - PROC mysql - PROC mythbackend - PROC msg_daemon.py - DISK %^/cdrom.* IGNORE - DISK %^/mnt.* IGNORE - DISK %^/media.* IGNORE - DISK * 95 99 - PORT "LOCAL=%([.:]80)$" state=LISTEN TEXT=http - PORT "LOCAL=%([.:]1337)$" state=LISTEN TEXT=cgi - PORT "LOCAL=%([.:]22)$" state=LISTEN TEXT=ssh - -DEFAULT - # These are the built-in defaults. - UP 1h - LOAD 5.0 10.0 - DISK %^/cdrom.* IGNORE - DISK %^/mnt.* IGNORE - DISK %^/media.* IGNORE - DISK * 99 100 - MEMPHYS 100 101 - MEMSWAP 50 80 - MEMACT 90 97 - diff --git a/abs/core/xymon/analysis.cfg.patch b/abs/core/xymon/analysis.cfg.patch new file mode 100644 index 0000000..3539ae3 --- /dev/null +++ b/abs/core/xymon/analysis.cfg.patch @@ -0,0 +1,112 @@ +--- analysis.cfg.orig 2017-01-18 19:50:46.758666909 +0000 ++++ analysis.cfg 2017-01-18 20:01:50.480263760 +0000 +@@ -353,12 +353,108 @@ + # to all hosts, add a new section with "HOSTS=*" + + ++HOST=_MASTERBACKEND_ ++ PROC sshd 1 ++ PROC lighttpd ++ PROC xymond ++ PROC crond ++ PROC mysql ++ PROC mythbackend ++ PROC msg_daemon.py ++ DISK %^/cdrom.* IGNORE ++ DISK %^/mnt.* IGNORE ++ DISK %^/media.* IGNORE ++ DISK * 95 99 ++ INODE %^/cdrom.* IGNORE ++ INODE %^/mnt.* IGNORE ++ INODE %^/media.* IGNORE ++ PORT "LOCAL=%([.:]80)$" state=LISTEN TEXT=http ++ PORT "LOCAL=%([.:]1337)$" state=LISTEN TEXT=cgi ++ PORT "LOCAL=%([.:]22)$" state=LISTEN TEXT=ssh ++ ++HOST=_MASTERFRONTEND_ ++ PROC mythfrontend 1 5 yellow ++ PROC sshd 1 ++ PROC lighttpd ++ PROC xymond ++ PROC crond ++ PROC mysql ++ PROC mythbackend ++ PROC msg_daemon.py ++ DISK %^/cdrom.* IGNORE ++ DISK %^/mnt.* IGNORE ++ DISK %^/media.* IGNORE ++ DISK * 95 99 ++ INODE %^/cdrom.* IGNORE ++ INODE %^/mnt.* IGNORE ++ INODE %^/media.* IGNORE ++ PORT "LOCAL=%([.:]80)$" state=LISTEN TEXT=http ++ PORT "LOCAL=%([.:]1337)$" state=LISTEN TEXT=cgi ++ PORT "LOCAL=%([.:]22)$" state=LISTEN TEXT=ssh ++ ++HOST=_FRONTEND_ ++ PROC sshd 1 ++ PROC crond ++ PROC mythfrontend 1 5 yellow ++ PROC msg_daemon.py ++ PORT "LOCAL=%([.:]22)$" state=LISTEN TEXT=ssh ++ ++HOST=_SLAVEBACKEND_ ++ PROC sshd 1 ++ PROC crond ++ PROC mythbackend ++ DISK %^/cdrom.* IGNORE ++ DISK %^/mnt.* IGNORE ++ DISK %^/media.* IGNORE ++ DISK * 95 99 ++ INODE %^/cdrom.* IGNORE ++ INODE %^/mnt.* IGNORE ++ INODE %^/media.* IGNORE ++ PORT "LOCAL=%([.:]22)$" state=LISTEN TEXT=ssh ++ ++HOST=_SLAVEFRONTEND_ ++ PROC sshd 1 ++ PROC lighttpd ++ PROC hobbitd ++ PROC crond ++ PROC mythbackend ++ PROC mythfrontend 1 5 yellow ++ PROC msg_daemon.py ++ DISK %^/cdrom.* IGNORE ++ DISK %^/mnt.* IGNORE ++ DISK %^/media.* IGNORE ++ DISK * 95 99 ++ INODE %^/cdrom.* IGNORE ++ INODE %^/mnt.* IGNORE ++ INODE %^/media.* IGNORE ++ PORT "LOCAL=%([.:]22)$" state=LISTEN TEXT=ssh ++ ++HOST=_STANDALONE_ ++ PROC mythfrontend 1 5 yellow ++ PROC sshd 1 ++ PROC lighttpd ++ PROC xymond ++ PROC crond ++ PROC mysql ++ PROC mythbackend ++ PROC msg_daemon.py ++ DISK %^/cdrom.* IGNORE ++ DISK %^/mnt.* IGNORE ++ DISK %^/media.* IGNORE ++ DISK * 95 99 ++ INODE %^/cdrom.* IGNORE ++ INODE %^/mnt.* IGNORE ++ INODE %^/media.* IGNORE ++ PORT "LOCAL=%([.:]80)$" state=LISTEN TEXT=http ++ PORT "LOCAL=%([.:]1337)$" state=LISTEN TEXT=cgi ++ PORT "LOCAL=%([.:]22)$" state=LISTEN TEXT=ssh ++ + DEFAULT + # These are the built-in defaults. You should only modify these + # lines, not add new ones (no PROC, DISK, LOG ... lines). + UP 1h + LOAD 5.0 10.0 +- DISK * 90 95 ++ DISK * 95 99 + INODE * 70 90 + MEMPHYS 100 101 + MEMSWAP 50 80 diff --git a/abs/core/xymon/xymon-server.rules b/abs/core/xymon/xymon-server.rules index e4c515b..40b81af 100644 --- a/abs/core/xymon/xymon-server.rules +++ b/abs/core/xymon/xymon-server.rules @@ -1,7 +1,8 @@ #These rules are used by xymon-server nobody ALL = NOPASSWD:/usr/bin/certmaster-ca nobody ALL = NOPASSWD:/usr/bin/smartctl +nobody ALL = NOPASSWD:/usr/bin/fping http ALL = NOPASSWD:/usr/LH/bin/lh_system_backup_job http ALL = NOPASSWD:/usr/LH/bin/lh_system_restore_job -http ALL = NOPASSWD:/sbin/sv +http ALL = NOPASSWD:/usr/bin/sv |