Some hidden HostMonitor options
Posted: Tue Sep 17, 2024 2:54 pm
There are some hidden HostMonitor options that might be useful (not complete list)
Tests related options
SSH test
If you need to enable old key exchange algorithms, such as diffie-hellman-group-exchange-sha1 you may add KeyExchangeAlgorithms line to the [SSH] section of hostmon.ini file (rma.ini file if RMA agent is used for the test) and restart HostMonitor (RMA agent). E.g.
[SSH]
KeyExchangeAlgorithms = curve25519-sha256,ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1
SSH test
If you need to enable old HMAC algorithms, such as hmac-sha1 or hmac-md5, add HMACAlgorithms line to the [SSH] section of hostmon.ini file and restart HostMonitor. E.g.
[SSH]
HMACAlgorithms=hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-md5
VMWare guest status test for VMWare ESXi
• HostMonitor also checks 'configstatus' parameter, e.g. HostMonitor can set Bad test status when duplicated MAC or IP address is detected.
You can disable this check by adding VMCheckConfigStatus=0 line to the [Misc] section of hostmon.ini file (HostMonitor restart is required)
• HostMonitor may display list of all guests with the "worst" (red, yellow, gray) status. To enable this option, you may add vmShowManyGuests=1 line to the [Misc] section of hostmon.ini file and restart HostMonitor
VM_guest_free_memory test for Microsoft Hyper-V
• HostMonitor can also use GuestAvailableMemory counter when available (on Windows Server 2022). In this case several counters are used for calculations because single GuestAvailableMemory counter does not tell the whole picture, it can show a lot of free memory while most of that "free" guest memory is actually paged to the disk by the hypervisor. However you can tell HostMonitor to only use GuestAvailableMemory counter (when available) by adding the hyperV_AlwaysCountMemoryPressure=0 line to the [Misc] section on hostmon.ini file (HostMonitor restart is required)
Shell Script test
Rare Windows bug could cause problems for Shell Script test method, as workaround we changed HostMonitor code. But if you need to use some very old script processors (like MS DOS program on Windows XP) then new version will not work for you unless you switch HostMonitor code to old mode: add ScriptsShortName=1 line into [Misc] section of hostmon.ini file and restart HostMonitor
URL and SOAP tests
You may tell HostMonitor to allow date expressions in "URL" and "Check contents" fields (the same kind of expressions you can use with file-related test methods, e.g. you may specify URL like http://www.webserv.com/script.php?date=%ddmmyyyy[-3d]%)
You may turn it on by inserting URL_AllowDateExpressions=1 line into [Misc] section of hostmon.ini file (you need to restart HostMonitor as well).
Without using this option tests will work as usually, process date variables like %dd%, %mm%, %yy% but does not allow expressions like %dd[-1d]%.
TLS related options for the following test methods:
• URL
• Certificate Expiration
• POP3, IMAP
• E-mail, Mail Relay
• LDAP
• FTPS
• HP iLO tests: Health, Temperature, Fans, Power, Disk status
• VMWare host related tests: Host status, CPU Usage, Free Memory, Datastore Space
• VMWare guest related tests: Guest status, CPU Usage, Free Memory, Free disk space
TLS modes
• Certificate Expiration test supports TLS 1.3 on Windows 7 and newer.
• Other tests require Windows 11 or Windows Server 2022 (just for TLS 1.3).
• By default only TLS 1.1, 1.2, 1.3 protocols are enabled (TLS 1.1 and 1.2 on older Windows systems)
• If you need to check some very old HP server (iLO2), you may enable TLS 1.0 using hostmon.ini option: add sslProto_HPiLO=10880 line into [Misc] section of hostmon.ini file and restart HostMonitor
• If you need to check some very old VMWare system (ESXi 5.0 or older), you may enable TLS 1.0 using hostmon.ini option: add sslProto_VMWare=10880 line into [Misc] section of hostmon.ini file and restart HostMonitor
• Similar options available for POP3, IMAP, LDAP, FTPS, Email, Mail Relay, URL tests
[Misc] section
sslProtocols option sets default TLS options for all methods, including URL;
then the following options may override TLS modes for specific test methods:
sslProto_POP3
sslProto_LDAP
sslProto_IMAP
sslProto_FTPS
sslProto_HPiLO
sslProto_VMWare
Possible values:
= 8192 - just TLS 1.3 enabled
= 10240 - TLS 1.2 and 1.3
= 10752 - TLS 1.1, 1.2, 1.3
= 10880 - TLS 1.0-1.3
Tests related options
SSH test
If you need to enable old key exchange algorithms, such as diffie-hellman-group-exchange-sha1 you may add KeyExchangeAlgorithms line to the [SSH] section of hostmon.ini file (rma.ini file if RMA agent is used for the test) and restart HostMonitor (RMA agent). E.g.
[SSH]
KeyExchangeAlgorithms = curve25519-sha256,ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1
SSH test
If you need to enable old HMAC algorithms, such as hmac-sha1 or hmac-md5, add HMACAlgorithms line to the [SSH] section of hostmon.ini file and restart HostMonitor. E.g.
[SSH]
HMACAlgorithms=hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-md5
VMWare guest status test for VMWare ESXi
• HostMonitor also checks 'configstatus' parameter, e.g. HostMonitor can set Bad test status when duplicated MAC or IP address is detected.
You can disable this check by adding VMCheckConfigStatus=0 line to the [Misc] section of hostmon.ini file (HostMonitor restart is required)
• HostMonitor may display list of all guests with the "worst" (red, yellow, gray) status. To enable this option, you may add vmShowManyGuests=1 line to the [Misc] section of hostmon.ini file and restart HostMonitor
VM_guest_free_memory test for Microsoft Hyper-V
• HostMonitor can also use GuestAvailableMemory counter when available (on Windows Server 2022). In this case several counters are used for calculations because single GuestAvailableMemory counter does not tell the whole picture, it can show a lot of free memory while most of that "free" guest memory is actually paged to the disk by the hypervisor. However you can tell HostMonitor to only use GuestAvailableMemory counter (when available) by adding the hyperV_AlwaysCountMemoryPressure=0 line to the [Misc] section on hostmon.ini file (HostMonitor restart is required)
Shell Script test
Rare Windows bug could cause problems for Shell Script test method, as workaround we changed HostMonitor code. But if you need to use some very old script processors (like MS DOS program on Windows XP) then new version will not work for you unless you switch HostMonitor code to old mode: add ScriptsShortName=1 line into [Misc] section of hostmon.ini file and restart HostMonitor
URL and SOAP tests
You may tell HostMonitor to allow date expressions in "URL" and "Check contents" fields (the same kind of expressions you can use with file-related test methods, e.g. you may specify URL like http://www.webserv.com/script.php?date=%ddmmyyyy[-3d]%)
You may turn it on by inserting URL_AllowDateExpressions=1 line into [Misc] section of hostmon.ini file (you need to restart HostMonitor as well).
Without using this option tests will work as usually, process date variables like %dd%, %mm%, %yy% but does not allow expressions like %dd[-1d]%.
TLS related options for the following test methods:
• URL
• Certificate Expiration
• POP3, IMAP
• E-mail, Mail Relay
• LDAP
• FTPS
• HP iLO tests: Health, Temperature, Fans, Power, Disk status
• VMWare host related tests: Host status, CPU Usage, Free Memory, Datastore Space
• VMWare guest related tests: Guest status, CPU Usage, Free Memory, Free disk space
TLS modes
• Certificate Expiration test supports TLS 1.3 on Windows 7 and newer.
• Other tests require Windows 11 or Windows Server 2022 (just for TLS 1.3).
• By default only TLS 1.1, 1.2, 1.3 protocols are enabled (TLS 1.1 and 1.2 on older Windows systems)
• If you need to check some very old HP server (iLO2), you may enable TLS 1.0 using hostmon.ini option: add sslProto_HPiLO=10880 line into [Misc] section of hostmon.ini file and restart HostMonitor
• If you need to check some very old VMWare system (ESXi 5.0 or older), you may enable TLS 1.0 using hostmon.ini option: add sslProto_VMWare=10880 line into [Misc] section of hostmon.ini file and restart HostMonitor
• Similar options available for POP3, IMAP, LDAP, FTPS, Email, Mail Relay, URL tests
[Misc] section
sslProtocols option sets default TLS options for all methods, including URL;
then the following options may override TLS modes for specific test methods:
sslProto_POP3
sslProto_LDAP
sslProto_IMAP
sslProto_FTPS
sslProto_HPiLO
sslProto_VMWare
Possible values:
= 8192 - just TLS 1.3 enabled
= 10240 - TLS 1.2 and 1.3
= 10752 - TLS 1.1, 1.2, 1.3
= 10880 - TLS 1.0-1.3