Re: [Bigsister-general] Issue with generating events

[Backup e-mail <suppressed>]

Kai you're right: as far as alarming is concerned only green yellow and red
are involved, documentation says.

I've progressed the situation a bit.
Previously I had the agents only on the monitored machines.
Now I have installed the agent also on the display machine, which allowed me
to insert the following <ping> health-checks in the display machine's uxmon-net file:

MACHINE-A(A)  ping
MACHINE-B(B)  ping
MACHINE-C(C)  ping

Now in my <All-Hosts> web page a new column shows: <conn>.
The only problem is that the lights are always red.

I've checked that any non-privileged account on the display machine is enabled
to issue <ping> command, therefore I don't think that's the problem.
I've even created the uxmon-asroot file, still the lights stay red.
Nevertheless when I click on any of the <conn> column red lights it displays
the reason of the fa ilure as <udp-ping FAILURE>.

Any idea?
[I've also tried with %Autoconn, but the situation did not improve]

 

Costantino

Kai Schaetzl <suppressed> wrote:

> Backup e-mail wrote on Tue, 13 Dec 2005 10:05:25 -0800 (PST):
>
> > To simulate loss of connection it's easy, I just stop the SSH channel. Which I do and 
> after about 10 min the light 
> > goes from green to purple. I wait 20, 30, ...hours but no mail and no pager script is 
> launched. As far as the 
> > MONITORing station is concerned, the machine from whom does not receive is a DOWN 
> machine, isn't that so? 
>
> No, if you drop the ssh tunnel none of the tests will be affected by this, only the 
> monitoring data stream will be stopped. F.i. if you monitor connection from the display 
> machine to the monitori
>  ng
>  machine (which I recommend) that test will stay green when you 
> kill the ssh tunnel. All the tests which are done *on* the remote machine will go purple, 
> that's all. Purple is not an alarm, it's the absence of "anything".
>
> > If that is so I thought the "down=yellow"directive will generate me an event, or I 
> haven't understood the logic.
>
> If you get a yellow or red alarm, yes. Did you get a yellow alarm?
>
> For 
> > the moment I do not have Windows machine to monitor.
>
> Ok, my question about Windows was just because there you have to set some additional
> variables. I'm speculating, but as I said I don't think that purple will launch any mail. 
> I'm using mail alerting only for some days so I can't tell this from experience. Purple 
> is probably the lowest alarm state, because it's not based on any status information. As 
> I said any test that you don't receive any more data will go purple after ten minutes or 
> so. If you want t
>  o get
>  yellow or red alarms, then use a test which can go yellow or red 
> and test it. F.i. create a ping test to any of those machines from your display machine 
> and then disallow pings with iptables.
>
> BTW: your line length is extremely long, you should set this to under 80 characters per 
> line.
>
> Kai
>
> -- 
> Kai Schätzl, Berlin, Germany
> Get your web at Conactive Internet Services: http://www.conactive.com
>
>
>
>
>
> -------------------------------------------------------
> This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
> for problems? Stop! Download the new AJAX search engine that makes
> searching your log files as easy as surfing the web. DOWNLOAD SPLUNK!
> http://ads.osdn.com/?ad_id=7637&alloc_id=16865&op=click
> _______________________________________________
> Bigsister-general mailing
>  list
> suppressed
> https://lists.sourceforge.net/lists/listinfo/bigsister-general

---

Yahoo! Shopping
 
Find Great Deals on Holiday Gifts at Yahoo! Shopping