From argus-03 at jeremykister.com Sat May 17 20:51:06 2014 From: argus-03 at jeremykister.com (Jeremy Kister) Date: Sat, 17 May 2014 20:51:06 -0400 Subject: Run Command When Service Down In-Reply-To: References: Message-ID: <537803FA.4030207@jeremykister.com> On 4/13/2014 9:37 AM, William Schroeder wrote: > Is it possible to run a command when a service is down (preferably if looks like just kicked the list. if you're still looking for a solution, you can use a notify method to kick off your code. it'll be triggered as soon as the object is "down". Method "somemethod" { qtime: 0 nolotsmsgs: yes command: /usr/local/script/somescript -a %R } Host "test1" { Service Ping { notifyalso: somemethod: # or, to also send an argument- #notifyalso: somemethod:someargument } } From wschroeder at expertnetworks.us Sat May 17 20:53:30 2014 From: wschroeder at expertnetworks.us (William Schroeder) Date: Sun, 18 May 2014 00:53:30 +0000 Subject: Run Command When Service Down In-Reply-To: <537803FA.4030207@jeremykister.com> References: <537803FA.4030207@jeremykister.com> Message-ID: That's what I ended up doing something similar. Oddly though I sent the emails that just came through a couple of months ago. The use of notifyalso is probably a better way than I did it. I'll change mine to that, thank you for the feedback. Will -----Original Message----- From: arguslist-bounces at tcp4me.com [mailto:arguslist-bounces at tcp4me.com] On Behalf Of Jeremy Kister Sent: Sunday, May 18, 2014 02:51 AM To: Discussion about Argus Subject: Re: Run Command When Service Down On 4/13/2014 9:37 AM, William Schroeder wrote: > Is it possible to run a command when a service is down (preferably if looks like just kicked the list. if you're still looking for a solution, you can use a notify method to kick off your code. it'll be triggered as soon as the object is "down". Method "somemethod" { qtime: 0 nolotsmsgs: yes command: /usr/local/script/somescript -a %R } Host "test1" { Service Ping { notifyalso: somemethod: # or, to also send an argument- #notifyalso: somemethod:someargument } } _______________________________________________ http://argus.tcp4me.com/ Arguslist at tcp4me.com http://www.tcp4me.com/mailman/listinfo/arguslist From wschroeder at expertnetworks.us Mon May 19 18:40:25 2014 From: wschroeder at expertnetworks.us (William Schroeder) Date: Mon, 19 May 2014 22:40:25 +0000 Subject: Overrides not suppressing notifies/multiple notifications Message-ID: <593a736a00f340bcb8193a8990fc936d@ES01.XNI.local> When I set an override it only overrides in the website (won't show that it's down there) but email notifications still go out as well as escalations. This started at some point after upgrading to 3.7 (the upgrade may not be related but I'm not sure). I took my large config and partially re-wrote it separating it out into smaller components and changing things. The issue went away but then after a few weeks returned. Additionally I receive 1-3 notifications for each thing that's down. I thought my disk space checks were because it was giving me a notification for each SNMP item (even though the check for total space used and total space are set to not notify), but it happens for some things on Ping. If anyone has any insight on either issue it would be GREATLY appreciated. I had to turn off the text escalations due to this and it causes extra emails giving me kickback from colleagues. I sent this a long time ago but I'm not sure if it went through to the list. Will From wschroeder at expertnetworks.us Thu May 22 09:59:36 2014 From: wschroeder at expertnetworks.us (William Schroeder) Date: Thu, 22 May 2014 13:59:36 +0000 Subject: Overrides not suppressing notifies/multiple notifications In-Reply-To: <593a736a00f340bcb8193a8990fc936d@ES01.XNI.local> References: <593a736a00f340bcb8193a8990fc936d@ES01.XNI.local> Message-ID: <227d685e60d045f1bcce90790f3d6c9a@ES01.XNI.local> I think I've reached a point where I may attempt to downgrade, to 3.6, to see if that will help the issue. Anyone have any gotchas in downgrading that would save me some trouble? I didn't see any documentation but I imagine I can save my configs, remove most of the files installed and reinstall it (and I have a snapshot just in case). Will -----Original Message----- From: arguslist-bounces at tcp4me.com [mailto:arguslist-bounces at tcp4me.com] On Behalf Of William Schroeder Sent: Tuesday, May 20, 2014 00:40 AM To: 'arguslist at tcp4me.com' Subject: Overrides not suppressing notifies/multiple notifications When I set an override it only overrides in the website (won't show that it's down there) but email notifications still go out as well as escalations. This started at some point after upgrading to 3.7 (the upgrade may not be related but I'm not sure). I took my large config and partially re-wrote it separating it out into smaller components and changing things. The issue went away but then after a few weeks returned. Additionally I receive 1-3 notifications for each thing that's down. I thought my disk space checks were because it was giving me a notification for each SNMP item (even though the check for total space used and total space are set to not notify), but it happens for some things on Ping. If anyone has any insight on either issue it would be GREATLY appreciated. I had to turn off the text escalations due to this and it causes extra emails giving me kickback from colleagues. I sent this a long time ago but I'm not sure if it went through to the list. Will _______________________________________________ http://argus.tcp4me.com/ Arguslist at tcp4me.com http://www.tcp4me.com/mailman/listinfo/arguslist From shiemstra at h2.com Thu May 22 13:18:45 2014 From: shiemstra at h2.com (Scott Hiemstra) Date: Thu, 22 May 2014 13:18:45 -0400 Subject: Overrides not suppressing notifies/multiple notifications In-Reply-To: <227d685e60d045f1bcce90790f3d6c9a@ES01.XNI.local> References: <593a736a00f340bcb8193a8990fc936d@ES01.XNI.local> <227d685e60d045f1bcce90790f3d6c9a@ES01.XNI.local> Message-ID: <073C6B4DF1DDC8498449BE3F9575666D0479FA1CE80A@horus.h2.com> Will, Sorry for not replying before now but I have experienced a similar strange issue to the one you described with 3.7, the root cause of my issue didn't really have anything to do with Argus. I use DARP in failover mode, My issue was my master monitoring systems was IO busy and was going through the beginning stages of a drive failure. I kept getting strange notifications and the web interface didn't agree with what I was getting via notifies. It turned out that I was getting notified by my DARP slaves about things which were not actually down. I doubt this will turn out to be your issue but just be aware that the root cause may not be what it seems to be. As for downgrading from 3.7 to 3.6, I can't speak for those exact versions but I didn't have any issues going from argus-dev-20100109 to argus-dev-20090222 way back in the day. I don't even think I removed the old stuff but I was definitely more of a free spirit back then. Scott -----Original Message----- From: arguslist-bounces at tcp4me.com [mailto:arguslist-bounces at tcp4me.com] On Behalf Of William Schroeder Sent: Thursday, May 22, 2014 10:00 AM To: Discussion about Argus Subject: RE: Overrides not suppressing notifies/multiple notifications I think I've reached a point where I may attempt to downgrade, to 3.6, to see if that will help the issue. Anyone have any gotchas in downgrading that would save me some trouble? I didn't see any documentation but I imagine I can save my configs, remove most of the files installed and reinstall it (and I have a snapshot just in case). Will -----Original Message----- From: arguslist-bounces at tcp4me.com [mailto:arguslist-bounces at tcp4me.com] On Behalf Of William Schroeder Sent: Tuesday, May 20, 2014 00:40 AM To: 'arguslist at tcp4me.com' Subject: Overrides not suppressing notifies/multiple notifications When I set an override it only overrides in the website (won't show that it's down there) but email notifications still go out as well as escalations. This started at some point after upgrading to 3.7 (the upgrade may not be related but I'm not sure). I took my large config and partially re-wrote it separating it out into smaller components and changing things. The issue went away but then after a few weeks returned. Additionally I receive 1-3 notifications for each thing that's down. I thought my disk space checks were because it was giving me a notification for each SNMP item (even though the check for total space used and total space are set to not notify), but it happens for some things on Ping. If anyone has any insight on either issue it would be GREATLY appreciated. I had to turn off the text escalations due to this and it causes extra emails giving me kickback from colleagues. I sent this a long time ago but I'm not sure if it went through to the list. Will _______________________________________________ http://argus.tcp4me.com/ Arguslist at tcp4me.com http://www.tcp4me.com/mailman/listinfo/arguslist _______________________________________________ http://argus.tcp4me.com/ Arguslist at tcp4me.com http://www.tcp4me.com/mailman/listinfo/arguslist From wschroeder at expertnetworks.us Thu May 22 13:24:44 2014 From: wschroeder at expertnetworks.us (William Schroeder) Date: Thu, 22 May 2014 17:24:44 +0000 Subject: Overrides not suppressing notifies/multiple notifications In-Reply-To: <073C6B4DF1DDC8498449BE3F9575666D0479FA1CE80A@horus.h2.com> References: <593a736a00f340bcb8193a8990fc936d@ES01.XNI.local> <227d685e60d045f1bcce90790f3d6c9a@ES01.XNI.local> <073C6B4DF1DDC8498449BE3F9575666D0479FA1CE80A@horus.h2.com> Message-ID: Scott, Thank you for the reply and information. While I don't have that same situation your info about it being an underlying problem outside of Argus has me thinking (and the info on the downgrade was helpful). It's only a single server but I am running an end of life version of FreeBSD on it (9.0-RELEASE). Realized this when I had trouble with transferring the 3.6 tgz from windows to the machine and it kept saying it was corrupt (tried to install wget and found they no longer support 9). Maybe I'll like up and just moving to 9.2 will solve my issues. Will -----Original Message----- From: arguslist-bounces at tcp4me.com [mailto:arguslist-bounces at tcp4me.com] On Behalf Of Scott Hiemstra Sent: Thursday, May 22, 2014 19:19 PM To: Discussion about Argus Subject: RE: Overrides not suppressing notifies/multiple notifications Will, Sorry for not replying before now but I have experienced a similar strange issue to the one you described with 3.7, the root cause of my issue didn't really have anything to do with Argus. I use DARP in failover mode, My issue was my master monitoring systems was IO busy and was going through the beginning stages of a drive failure. I kept getting strange notifications and the web interface didn't agree with what I was getting via notifies. It turned out that I was getting notified by my DARP slaves about things which were not actually down. I doubt this will turn out to be your issue but just be aware that the root cause may not be what it seems to be. As for downgrading from 3.7 to 3.6, I can't speak for those exact versions but I didn't have any issues going from argus-dev-20100109 to argus-dev-20090222 way back in the day. I don't even think I removed the old stuff but I was definitely more of a free spirit back then. Scott -----Original Message----- From: arguslist-bounces at tcp4me.com [mailto:arguslist-bounces at tcp4me.com] On Behalf Of William Schroeder Sent: Thursday, May 22, 2014 10:00 AM To: Discussion about Argus Subject: RE: Overrides not suppressing notifies/multiple notifications I think I've reached a point where I may attempt to downgrade, to 3.6, to see if that will help the issue. Anyone have any gotchas in downgrading that would save me some trouble? I didn't see any documentation but I imagine I can save my configs, remove most of the files installed and reinstall it (and I have a snapshot just in case). Will -----Original Message----- From: arguslist-bounces at tcp4me.com [mailto:arguslist-bounces at tcp4me.com] On Behalf Of William Schroeder Sent: Tuesday, May 20, 2014 00:40 AM To: 'arguslist at tcp4me.com' Subject: Overrides not suppressing notifies/multiple notifications When I set an override it only overrides in the website (won't show that it's down there) but email notifications still go out as well as escalations. This started at some point after upgrading to 3.7 (the upgrade may not be related but I'm not sure). I took my large config and partially re-wrote it separating it out into smaller components and changing things. The issue went away but then after a few weeks returned. Additionally I receive 1-3 notifications for each thing that's down. I thought my disk space checks were because it was giving me a notification for each SNMP item (even though the check for total space used and total space are set to not notify), but it happens for some things on Ping. If anyone has any insight on either issue it would be GREATLY appreciated. I had to turn off the text escalations due to this and it causes extra emails giving me kickback from colleagues. I sent this a long time ago but I'm not sure if it went through to the list. Will _______________________________________________ http://argus.tcp4me.com/ Arguslist at tcp4me.com http://www.tcp4me.com/mailman/listinfo/arguslist _______________________________________________ http://argus.tcp4me.com/ Arguslist at tcp4me.com http://www.tcp4me.com/mailman/listinfo/arguslist _______________________________________________ http://argus.tcp4me.com/ Arguslist at tcp4me.com http://www.tcp4me.com/mailman/listinfo/arguslist From shiemstra at h2.com Thu May 22 14:18:54 2014 From: shiemstra at h2.com (Scott Hiemstra) Date: Thu, 22 May 2014 14:18:54 -0400 Subject: Thanks for amny versions Message-ID: <073C6B4DF1DDC8498449BE3F9575666D0479FA1CE80B@horus.h2.com> Just happened to realize during my last reply that I have been using Argus since late version 1 or early version 2 and I haven't really experienced any real issues with it, that's over 12 years. I may have missed a couple of 3.x.x versions but I seem to have most in my local source repository. There have of course been little speed bumps and learning curve problems but it pretty consistently works well. I Guess that should proceed here now: http://argus.tcp4me.com/contrib.html :) Thanks Jeff. Scott From wschroeder at expertnetworks.us Mon May 26 19:08:16 2014 From: wschroeder at expertnetworks.us (William Schroeder) Date: Mon, 26 May 2014 23:08:16 +0000 Subject: Overrides not suppressing notifies/multiple notifications In-Reply-To: References: <593a736a00f340bcb8193a8990fc936d@ES01.XNI.local> <227d685e60d045f1bcce90790f3d6c9a@ES01.XNI.local> <073C6B4DF1DDC8498449BE3F9575666D0479FA1CE80A@horus.h2.com> Message-ID: <73043b0518ac4e50af4e9e31aa07cdbe@ES01.XNI.local> Scott, Time will tell for sure but tests are looking promising that the issue is resolved. Your reference to having similar problems but the cause being something not directly related to Argus was very helpful. To not get too lengthy I rebuilt the server (using the latest OS, patches, and ports) and everything is testing exactly as it should now. In trying to update the current I believe there may have been something that got messed up on the server somehow. Will -----Original Message----- From: arguslist-bounces at tcp4me.com [mailto:arguslist-bounces at tcp4me.com] On Behalf Of William Schroeder Sent: Thursday, May 22, 2014 19:25 PM To: Discussion about Argus Subject: RE: Overrides not suppressing notifies/multiple notifications Scott, Thank you for the reply and information. While I don't have that same situation your info about it being an underlying problem outside of Argus has me thinking (and the info on the downgrade was helpful). It's only a single server but I am running an end of life version of FreeBSD on it (9.0-RELEASE). Realized this when I had trouble with transferring the 3.6 tgz from windows to the machine and it kept saying it was corrupt (tried to install wget and found they no longer support 9). Maybe I'll like up and just moving to 9.2 will solve my issues. Will -----Original Message----- From: arguslist-bounces at tcp4me.com [mailto:arguslist-bounces at tcp4me.com] On Behalf Of Scott Hiemstra Sent: Thursday, May 22, 2014 19:19 PM To: Discussion about Argus Subject: RE: Overrides not suppressing notifies/multiple notifications Will, Sorry for not replying before now but I have experienced a similar strange issue to the one you described with 3.7, the root cause of my issue didn't really have anything to do with Argus. I use DARP in failover mode, My issue was my master monitoring systems was IO busy and was going through the beginning stages of a drive failure. I kept getting strange notifications and the web interface didn't agree with what I was getting via notifies. It turned out that I was getting notified by my DARP slaves about things which were not actually down. I doubt this will turn out to be your issue but just be aware that the root cause may not be what it seems to be. As for downgrading from 3.7 to 3.6, I can't speak for those exact versions but I didn't have any issues going from argus-dev-20100109 to argus-dev-20090222 way back in the day. I don't even think I removed the old stuff but I was definitely more of a free spirit back then. Scott -----Original Message----- From: arguslist-bounces at tcp4me.com [mailto:arguslist-bounces at tcp4me.com] On Behalf Of William Schroeder Sent: Thursday, May 22, 2014 10:00 AM To: Discussion about Argus Subject: RE: Overrides not suppressing notifies/multiple notifications I think I've reached a point where I may attempt to downgrade, to 3.6, to see if that will help the issue. Anyone have any gotchas in downgrading that would save me some trouble? I didn't see any documentation but I imagine I can save my configs, remove most of the files installed and reinstall it (and I have a snapshot just in case). Will -----Original Message----- From: arguslist-bounces at tcp4me.com [mailto:arguslist-bounces at tcp4me.com] On Behalf Of William Schroeder Sent: Tuesday, May 20, 2014 00:40 AM To: 'arguslist at tcp4me.com' Subject: Overrides not suppressing notifies/multiple notifications When I set an override it only overrides in the website (won't show that it's down there) but email notifications still go out as well as escalations. This started at some point after upgrading to 3.7 (the upgrade may not be related but I'm not sure). I took my large config and partially re-wrote it separating it out into smaller components and changing things. The issue went away but then after a few weeks returned. Additionally I receive 1-3 notifications for each thing that's down. I thought my disk space checks were because it was giving me a notification for each SNMP item (even though the check for total space used and total space are set to not notify), but it happens for some things on Ping. If anyone has any insight on either issue it would be GREATLY appreciated. I had to turn off the text escalations due to this and it causes extra emails giving me kickback from colleagues. I sent this a long time ago but I'm not sure if it went through to the list. Will _______________________________________________ http://argus.tcp4me.com/ Arguslist at tcp4me.com http://www.tcp4me.com/mailman/listinfo/arguslist _______________________________________________ http://argus.tcp4me.com/ Arguslist at tcp4me.com http://www.tcp4me.com/mailman/listinfo/arguslist _______________________________________________ http://argus.tcp4me.com/ Arguslist at tcp4me.com http://www.tcp4me.com/mailman/listinfo/arguslist _______________________________________________ http://argus.tcp4me.com/ Arguslist at tcp4me.com http://www.tcp4me.com/mailman/listinfo/arguslist From wschroeder at expertnetworks.us Wed May 28 20:11:10 2014 From: wschroeder at expertnetworks.us (William Schroeder) Date: Thu, 29 May 2014 00:11:10 +0000 Subject: Overrides not suppressing notifies/multiple notifications References: <593a736a00f340bcb8193a8990fc936d@ES01.XNI.local> <227d685e60d045f1bcce90790f3d6c9a@ES01.XNI.local> <073C6B4DF1DDC8498449BE3F9575666D0479FA1CE80A@horus.h2.com> Message-ID: Spoke too soon, some notifications are sending two and the overrides don't appear to be doing any good. Is anyone else out there using FreeBSD 9 or 10 and Argus 3.7? Will -----Original Message----- From: William Schroeder Sent: Tuesday, May 27, 2014 01:08 AM To: Discussion about Argus Subject: RE: Overrides not suppressing notifies/multiple notifications Scott, Time will tell for sure but tests are looking promising that the issue is resolved. Your reference to having similar problems but the cause being something not directly related to Argus was very helpful. To not get too lengthy I rebuilt the server (using the latest OS, patches, and ports) and everything is testing exactly as it should now. In trying to update the current I believe there may have been something that got messed up on the server somehow. Will -----Original Message----- From: arguslist-bounces at tcp4me.com [mailto:arguslist-bounces at tcp4me.com] On Behalf Of William Schroeder Sent: Thursday, May 22, 2014 19:25 PM To: Discussion about Argus Subject: RE: Overrides not suppressing notifies/multiple notifications Scott, Thank you for the reply and information. While I don't have that same situation your info about it being an underlying problem outside of Argus has me thinking (and the info on the downgrade was helpful). It's only a single server but I am running an end of life version of FreeBSD on it (9.0-RELEASE). Realized this when I had trouble with transferring the 3.6 tgz from windows to the machine and it kept saying it was corrupt (tried to install wget and found they no longer support 9). Maybe I'll like up and just moving to 9.2 will solve my issues. Will -----Original Message----- From: arguslist-bounces at tcp4me.com [mailto:arguslist-bounces at tcp4me.com] On Behalf Of Scott Hiemstra Sent: Thursday, May 22, 2014 19:19 PM To: Discussion about Argus Subject: RE: Overrides not suppressing notifies/multiple notifications Will, Sorry for not replying before now but I have experienced a similar strange issue to the one you described with 3.7, the root cause of my issue didn't really have anything to do with Argus. I use DARP in failover mode, My issue was my master monitoring systems was IO busy and was going through the beginning stages of a drive failure. I kept getting strange notifications and the web interface didn't agree with what I was getting via notifies. It turned out that I was getting notified by my DARP slaves about things which were not actually down. I doubt this will turn out to be your issue but just be aware that the root cause may not be what it seems to be. As for downgrading from 3.7 to 3.6, I can't speak for those exact versions but I didn't have any issues going from argus-dev-20100109 to argus-dev-20090222 way back in the day. I don't even think I removed the old stuff but I was definitely more of a free spirit back then. Scott -----Original Message----- From: arguslist-bounces at tcp4me.com [mailto:arguslist-bounces at tcp4me.com] On Behalf Of William Schroeder Sent: Thursday, May 22, 2014 10:00 AM To: Discussion about Argus Subject: RE: Overrides not suppressing notifies/multiple notifications I think I've reached a point where I may attempt to downgrade, to 3.6, to see if that will help the issue. Anyone have any gotchas in downgrading that would save me some trouble? I didn't see any documentation but I imagine I can save my configs, remove most of the files installed and reinstall it (and I have a snapshot just in case). Will -----Original Message----- From: arguslist-bounces at tcp4me.com [mailto:arguslist-bounces at tcp4me.com] On Behalf Of William Schroeder Sent: Tuesday, May 20, 2014 00:40 AM To: 'arguslist at tcp4me.com' Subject: Overrides not suppressing notifies/multiple notifications When I set an override it only overrides in the website (won't show that it's down there) but email notifications still go out as well as escalations. This started at some point after upgrading to 3.7 (the upgrade may not be related but I'm not sure). I took my large config and partially re-wrote it separating it out into smaller components and changing things. The issue went away but then after a few weeks returned. Additionally I receive 1-3 notifications for each thing that's down. I thought my disk space checks were because it was giving me a notification for each SNMP item (even though the check for total space used and total space are set to not notify), but it happens for some things on Ping. If anyone has any insight on either issue it would be GREATLY appreciated. I had to turn off the text escalations due to this and it causes extra emails giving me kickback from colleagues. I sent this a long time ago but I'm not sure if it went through to the list. Will _______________________________________________ http://argus.tcp4me.com/ Arguslist at tcp4me.com http://www.tcp4me.com/mailman/listinfo/arguslist _______________________________________________ http://argus.tcp4me.com/ Arguslist at tcp4me.com http://www.tcp4me.com/mailman/listinfo/arguslist _______________________________________________ http://argus.tcp4me.com/ Arguslist at tcp4me.com http://www.tcp4me.com/mailman/listinfo/arguslist _______________________________________________ http://argus.tcp4me.com/ Arguslist at tcp4me.com http://www.tcp4me.com/mailman/listinfo/arguslist