/var/adm/messages, Not noifying
list James Wade
Hello All, Since I move everything over to hobbit, the messages monitoring seems to have changed. I get no alerts on /var/adm/messages file anymore. We just had a database server crater, and the /var/adm/messages file was full of VCS errors. I'm also not getting notified of SCSI errors I've seen on other machines. Am I missing something? Should I have configured something else? Thanks.James
list Gary Baluha
Two config files need to be modified in Hobbit for log-file alerting: 1) client-local.cfg, which controls _which files_ will be parsed for alerting 2) hobbit-clients.cfg, which controls _how_ the logs will be parsed There is a section in the Hobbit help files which explain how to set these two files up. Please post the contents of these files if you're still having problems. It took me a little trial-and-error to get log alerting to work right, but once I got it set up, it's a piece of cake to any anything new.
▸
Hello All,Since I move everything over to hobbit, the messages monitoring seems to have changed. I get no alerts on /var/adm/messages file anymore. We just had a database server crater, and the /var/adm/messages file was full of VCS errors. I'm also not getting notified of SCSI errors I've seen on other machines. Am I missing something? Should I have configured something else? Thanks…James
list Henrik Størner
▸
On Tue, Jan 09, 2007 at 01:46:12PM -0600, James Wade wrote:
Since I move everything over to hobbit, the messages monitoring seems to have changed. I get no alerts on /var/adm/messages file anymore.
When you say "everything" - do you mean the Big Brother/Hobbit server, or did you also swap out the client side installations ? If you've switched clients, then the log file monitoring setup is quite different from what you have in BB. With the Hobbit client, all of the configuration is done on the Hobbit server; you need to add an entry to the client-local.cfg file to define which logfiles you want data from (the /var/adm/messages is in the default setup, so that should be OK), AND you must configure the hobbit-clients.cfg file with the strings (or rather, regex patterns) you want to look for in the logfiles. If you're still running the BB clients on your servers and your "msgs" column actually went red, then it must be a problem with the alert setup. Check the current alert setup for each host - you can see it on the "info" column webpage for each host - and make sure there's an alert defined for the "msgs" status. If not, then you must define one in the hobbit-alerts.cfg file. Regards, Henrik
list James Wade
I swapped out both the Client and Server. Totally Hobbit now. I added a default to monitor all clients /var/adm/messages which it is doing. I checked and see that I didn't configure any default in the hobbit-clients.cfg Can you recommend a general setting for all systems? A default... Thanks....James
▸
-----Original Message-----
From: Henrik Stoerner [mailto:user-ce4a2c883f75@xymon.invalid]
Sent: Tuesday, January 09, 2007 3:44 PM
To: user-ae9b8668bcde@xymon.invalid
Subject: Re: [hobbit] /var/adm/messages, Not noifying
On Tue, Jan 09, 2007 at 01:46:12PM -0600, James Wade wrote:
Since I move everything over to hobbit, the messages monitoring seems to have changed. I get no alerts on /var/adm/messages file anymore.
When you say "everything" - do you mean the Big Brother/Hobbit server, or did you also swap out the client side installations ? If you've switched clients, then the log file monitoring setup is quite different from what you have in BB. With the Hobbit client, all of the configuration is done on the Hobbit server; you need to add an entry to the client-local.cfg file to define which logfiles you want data from (the /var/adm/messages is in the default setup, so that should be OK), AND you must configure the hobbit-clients.cfg file with the strings (or rather, regex patterns) you want to look for in the logfiles. If you're still running the BB clients on your servers and your "msgs" column actually went red, then it must be a problem with the alert setup. Check the current alert setup for each host - you can see it on the "info" column webpage for each host - and make sure there's an alert defined for the "msgs" status. If not, then you must define one in the hobbit-alerts.cfg file. Regards, Henrik
list James Wade
What is everyone else putting in the hobbit-clients.cfg for monitoring /var/adm/messages... I'm looking for an overall default. Thanks....James
▸
-----Original Message-----
From: James Wade [mailto:user-659655b2ea05@xymon.invalid]
Sent: Tuesday, January 09, 2007 5:21 PM
To: user-ae9b8668bcde@xymon.invalid
Subject: RE: [hobbit] /var/adm/messages, Not noifying
I swapped out both the Client and Server. Totally Hobbit now.
I added a default to monitor all clients /var/adm/messages
which it is doing.
I checked and see that I didn't configure any default in the
hobbit-clients.cfg
Can you recommend a general setting for all systems?
A default...
Thanks....James
-----Original Message-----
From: Henrik Stoerner [mailto:user-ce4a2c883f75@xymon.invalid]
Sent: Tuesday, January 09, 2007 3:44 PM
To: user-ae9b8668bcde@xymon.invalid
Subject: Re: [hobbit] /var/adm/messages, Not noifying
On Tue, Jan 09, 2007 at 01:46:12PM -0600, James Wade wrote:
Since I move everything over to hobbit, the messages monitoring seems to have changed. I get no alerts on /var/adm/messages file anymore.
When you say "everything" - do you mean the Big Brother/Hobbit server, or did you also swap out the client side installations ? If you've switched clients, then the log file monitoring setup is quite different from what you have in BB. With the Hobbit client, all of the configuration is done on the Hobbit server; you need to add an entry to the client-local.cfg file to define which logfiles you want data from (the /var/adm/messages is in the default setup, so that should be OK), AND you must configure the hobbit-clients.cfg file with the strings (or rather, regex patterns) you want to look for in the logfiles. If you're still running the BB clients on your servers and your "msgs" column actually went red, then it must be a problem with the alert setup. Check the current alert setup for each host - you can see it on the "info" column webpage for each host - and make sure there's an alert defined for the "msgs" status. If not, then you must define one in the hobbit-alerts.cfg file. Regards, Henrik
list Gary Baluha
Our standard /var/adm/messages check is below: LOG /var/adm/messages %(?-i)NOTICE|WARNING|Error COLOR=yellow We use the (?-i) case-sensitive feature so we can edit the log files and change WARNING to wARNING (or such) to quiet specific alerts that pop up and are taken care of (instead of waiting for Hobbit to just read in more log data until these errors "scroll by"). Of course, some of our hosts have different tests, based on what we're looking for. It really depends on what sort of errors you are interested in catching that will determine what you want to look for. But the above should catch most errors Solaris will detect (such as non-correctable ECC errors/etc).
▸
On 1/10/07, James Wade <user-659655b2ea05@xymon.invalid> wrote:What is everyone else putting in the hobbit-clients.cfg for monitoring /var/adm/messages... I'm looking for an overall default. Thanks....James -----Original Message----- From: James Wade [mailto:user-659655b2ea05@xymon.invalid] Sent: Tuesday, January 09, 2007 5:21 PM To: user-ae9b8668bcde@xymon.invalid Subject: RE: [hobbit] /var/adm/messages, Not noifying I swapped out both the Client and Server. Totally Hobbit now. I added a default to monitor all clients /var/adm/messages which it is doing. I checked and see that I didn't configure any default in the hobbit-clients.cfg Can you recommend a general setting for all systems? A default... Thanks....James -----Original Message----- From: Henrik Stoerner [mailto:user-ce4a2c883f75@xymon.invalid] Sent: Tuesday, January 09, 2007 3:44 PM To: user-ae9b8668bcde@xymon.invalid Subject: Re: [hobbit] /var/adm/messages, Not noifying On Tue, Jan 09, 2007 at 01:46:12PM -0600, James Wade wrote:Since I move everything over to hobbit, the messages monitoring seems to have changed. I get no alerts on /var/adm/messages file anymore.When you say "everything" - do you mean the Big Brother/Hobbit server, or did you also swap out the client side installations ? If you've switched clients, then the log file monitoring setup is quite different from what you have in BB. With the Hobbit client, all of the configuration is done on the Hobbit server; you need to add an entry to the client-local.cfg file to define which logfiles you want data from (the /var/adm/messages is in the default setup, so that should be OK), AND you must configure the hobbit-clients.cfg file with the strings (or rather, regex patterns) you want to look for in the logfiles. If you're still running the BB clients on your servers and your "msgs" column actually went red, then it must be a problem with the alert setup. Check the current alert setup for each host - you can see it on the "info" column webpage for each host - and make sure there's an alert defined for the "msgs" status. If not, then you must define one in the hobbit-alerts.cfg file. Regards, Henrik
list James Wade
What about red alerts? Is anyone using anything? Thanks Gary for the information. Big Help... James
▸
From: Gary Baluha [mailto:user-ae3e15c22de1@xymon.invalid]
Sent: Wednesday, January 10, 2007 9:39 AM
To: user-ae9b8668bcde@xymon.invalid
Subject: Re: [hobbit] /var/adm/messages, Not noifying
Our standard /var/adm/messages check is below:
LOG /var/adm/messages %(?-i)NOTICE|WARNING|Error COLOR=yellow
We use the (?-i) case-sensitive feature so we can edit the log files and
change WARNING to wARNING (or such) to quiet specific alerts that pop up and
are taken care of (instead of waiting for Hobbit to just read in more log
data until these errors "scroll by").
Of course, some of our hosts have different tests, based on what we're
looking for. It really depends on what sort of errors you are interested in
catching that will determine what you want to look for. But the above
should catch most errors Solaris will detect (such as non-correctable ECC
errors/etc).
On 1/10/07, James Wade <user-659655b2ea05@xymon.invalid> wrote:
What is everyone else putting in the hobbit-clients.cfg
for monitoring /var/adm/messages... I'm looking for an
overall default.
Thanks....James
-----Original Message-----
From: James Wade [mailto: user-659655b2ea05@xymon.invalid]
Sent: Tuesday, January 09, 2007 5:21 PM
To: user-ae9b8668bcde@xymon.invalid
Subject: RE: [hobbit] /var/adm/messages, Not noifying
I swapped out both the Client and Server. Totally Hobbit now.
I added a default to monitor all clients /var/adm/messages
which it is doing.
I checked and see that I didn't configure any default in the
hobbit-clients.cfg
Can you recommend a general setting for all systems?
A default...
Thanks....James
-----Original Message-----
From: Henrik Stoerner [mailto: user-ce4a2c883f75@xymon.invalid <mailto:user-ce4a2c883f75@xymon.invalid> ]
Sent: Tuesday, January 09, 2007 3:44 PM
To: user-ae9b8668bcde@xymon.invalid
Subject: Re: [hobbit] /var/adm/messages, Not noifying
On Tue, Jan 09, 2007 at 01:46:12PM -0600, James Wade wrote:
Since I move everything over to hobbit, the messages monitoring seems to have changed. I get no alerts on /var/adm/messages file anymore.
When you say "everything" - do you mean the Big Brother/Hobbit server, or did you also swap out the client side installations ? If you've switched clients, then the log file monitoring setup is quite different from what you have in BB. With the Hobbit client, all of the configuration is done on the Hobbit server; you need to add an entry to the client-local.cfg file to define which logfiles you want data from (the /var/adm/messages is in the default setup, so that should be OK), AND you must configure the hobbit-clients.cfg file with the strings (or rather, regex patterns) you want to look for in the logfiles. If you're still running the BB clients on your servers and your "msgs" column actually went red, then it must be a problem with the alert setup. Check the current alert setup for each host - you can see it on the "info" column webpage for each host - and make sure there's an alert defined for the "msgs" status. If not, then you must define one in the hobbit-alerts.cfg file. Regards, Henrik
list Giovanni - Consultor Redix
Giovanni M. Frainer
▸
James Wade escreveu:
What about red alerts? Is anyone using anything?
Thanks Gary for the information. Big Help…..
James
From: Gary Baluha [mailto:user-ae3e15c22de1@xymon.invalid]
Sent: Wednesday, January 10, 2007 9:39 AM
To: user-ae9b8668bcde@xymon.invalid
Subject: Re: [hobbit] /var/adm/messages, Not noifying
Our standard /var/adm/messages check is below:
LOG /var/adm/messages %(?-i)NOTICE|WARNING|Error COLOR=yellow
We use the (?-i) case-sensitive feature so we can edit the log files and change WARNING to wARNING (or such) to quiet specific alerts that pop up and are taken care of (instead of waiting for Hobbit to just read in more log data until these errors "scroll by").
Of course, some of our hosts have different tests, based on what we're looking for. It really depends on what sort of errors you are interested in catching that will determine what you want to look for. But the above should catch most errors Solaris will detect (such as non-correctable ECC errors/etc).On 1/10/07, James Wade <user-659655b2ea05@xymon.invalid> wrote:
What is everyone else putting in the hobbit-clients.cfg
for monitoring /var/adm/messages... I'm looking for an
overall default.
Thanks....James
-----Original Message-----
From: James Wade [mailto: user-659655b2ea05@xymon.invalid]
Sent: Tuesday, January 09, 2007 5:21 PM
To: user-ae9b8668bcde@xymon.invalid
Subject: RE: [hobbit] /var/adm/messages, Not noifying
I swapped out both the Client and Server. Totally Hobbit now.
I added a default to monitor all clients /var/adm/messages
which it is doing.
I checked and see that I didn't configure any default in the
hobbit-clients.cfg
Can you recommend a general setting for all systems?
A default...
Thanks....James
-----Original Message-----
From: Henrik Stoerner [mailto: user-ce4a2c883f75@xymon.invalid]
Sent: Tuesday, January 09, 2007 3:44 PM
To: user-ae9b8668bcde@xymon.invalid
Subject: Re: [hobbit] /var/adm/messages, Not noifying
On Tue, Jan 09, 2007 at 01:46:12PM -0600, James Wade wrote:
> Since I move everything over to hobbit, the messages monitoring
> seems to have changed. I get no alerts on /var/adm/messages file
> anymore.
When you say "everything" - do you mean the Big Brother/Hobbit server,
or did you also swap out the client side installations ?
If you've switched clients, then the log file monitoring setup is
quite different from what you have in BB. With the Hobbit client,
all of the configuration is done on the Hobbit server; you need to
add an entry to the client-local.cfg file to define which logfiles
you want data from (the /var/adm/messages is in the default setup,
so that should be OK), AND you must configure the hobbit-clients.cfg
file with the strings (or rather, regex patterns) you want to look for
in the logfiles.
If you're still running the BB clients on your servers and your "msgs"
column actually went red, then it must be a problem with the alert setup.
Check the current alert setup for each host - you can see it on the
"info" column webpage for each host - and make sure there's an alert
defined for the "msgs" status. If not, then you must define one in the
hobbit-alerts.cfg file.
Regards,
Henrik