On Tue, 30 Aug 2005 23:06:45 +0200, Thomas Aeby <suppressed> wrote:
On Tue, 2005-08-30 at 21:21 +0200, Peter Varlien wrote:I have a couple of situations where the originating host from syslogd's (and thus the syslog monitor's) point of view isn't the system I want to report certain events on.I'm curious. Wouldn't in your case the node nameinsyslog=nameinbigsister syntax for telling Big Sister how it should translate single host names in the log be sufficient?
<snip>
Best regards, Tom
Well, one example is emailed alerts from the Oracle Management Server. The account that gets these has a procmail recipe that calls logger, to submit them to syslog. (So I can take advantage of the nice features of the logfile monitor: remembering that it has aleady seen a message, correlating "clears" with remembered messages, etc.) In this case, "nameinsyslog" will always be the machine that receives the emailed alerts, whereas I want to report them under the name of the Oracle DB instance, which is in the middle of the message string. You see?
We are monitoring a number of things about each of something like 50 Oracle instances, the aforementioned alerts, filesystem space, etc. BigSister sees each instance as a separate system, so we can apply different event generator rules, depending on whether a particular DB is expected to run 24x7 (actually 23x7, we are allowed a one-hour backup window) or 8x5 or whatever.
Peter -- Peter Værlien Fritz Aabakkens vei 17, 7072 Heimdal, Norway Telephone: 917 69 384, E-Mail: suppressed http://varlien.home.online.no ------------------------------------------------------- SF.Net email is Sponsored by the Better Software Conference & EXPO September 19-22, 2005 * San Francisco, CA * Development Lifecycle Practices Agile & Plan-Driven Development * Managing Projects & Teams * Testing & QA Security * Process Improvement & Measurement * http://www.sqe.com/bsce5sf _______________________________________________ Bigsister-general mailing list suppressed https://lists.sourceforge.net/lists/listinfo/bigsister-general
Mail converted by mhonarc 2.6.15
This archive provided courtesy of JSW4.NET, Internet Hosting Services for Small Business.