[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Bigsister-general] Issue with generating events


Backup e-mail wrote on Tue, 13 Dec 2005 10:05:25 -0800 (PST):

> To simulate loss of connection it's easy, I just stop the SSH channel. Which I do and 
after about 10 min the light 
> goes from green to purple. I wait 20, 30, ...hours but no mail and no pager script is 
launched. As far as the 
> MONITORing station is concerned, the machine from whom does not receive is a DOWN 
machine, isn't that so? 

No, if you drop the ssh tunnel none of the tests will be affected by this, only the 
monitoring data stream will be stopped. F.i. if you monitor connection from the display 
machine to the monitoring machine (which I recommend) that test will stay green when you 
kill the ssh tunnel. All the tests which are done *on* the remote machine will go purple, 
that's all. Purple is not an alarm, it's the absence of "anything".

>  If that is so I thought the "down=yellow"directive will generate me an event, or I 
haven't understood the logic.

If you get a yellow or red alarm, yes. Did you get a yellow alarm?

 For 
> the moment I do not have Windows machine to monitor.

Ok, my question about Windows was just because there you have to set some additional
variables. I'm speculating, but as I said I don't think that purple will launch any mail. 
I'm using mail alerting only for some days so I can't tell this from experience. Purple 
is probably the lowest alarm state, because it's not based on any status information. As 
I said any test that you don't receive any more data will go purple after ten minutes or 
so. If you want to get yellow or red alarms, then use a test which can go yellow or red 
and test it. F.i. create a ping test to any of those machines from your display machine 
and then disallow pings with iptables.

BTW: your line length is extremely long, you should set this to under 80 characters per 
line.

Kai

-- 
Kai Schätzl, Berlin, Germany
Get your web at Conactive Internet Services: http://www.conactive.com





-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems?  Stop!  Download the new AJAX search engine that makes
searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
http://ads.osdn.com/?ad_id=7637&alloc_id=16865&op=click
_______________________________________________
Bigsister-general mailing list
suppressed
https://lists.sourceforge.net/lists/listinfo/bigsister-general


Mail converted by mhonarc 2.6.15
This archive provided courtesy of JSW4.NET, Internet Hosting Services for Small Business.