hobbit color-changing issue 🔗 link

Hello,

I have a small hobbit issue.
I want hobbit to go red every time the word "/evicted/" shows up in /var/log/messages on some hosts. So the part in /hobbit-clients.cfg/ is as follows:

        HOST=%cn4[3-6]*-hp
        PROC    "%syslogd" 1 1 red
        PROC    "%/usr/sbin/nscd" 1 red
        PROC    "%iscsid" 2 2 red
        LOAD    16.5 20.0
        LOG     %/var/log/messages %(?-i)evicted|Oops|ALERT|NOTICE COLOR=red
        LOG     %/var/log/messages %(?-i)LustreError|WARNING|FAILED|kernel|failing|ILLEGAL COLOR=yellow


The Part in client-local.cfg:

          [cn44-hp]
          log:/var/log/messages:10240
          ignore MARK
          trigger ALERT
          trigger .*(dumping log to)|(evicted).*
          file:/var/log/messages

The Issue:
Every time I put the word "/evicted/" manually in the messages file, hobbit will go red for about 15 minutes. That's fine. If I put a second line with the word "/kernel/" in the messages file, a second (yellow) line appears in the mesgs column. That's also fine.  Hobbit is still red, but stays that way only for about 15 minutes. After the 15 minutes, it changes to yellow and the "/evicted/" warning is gone. It stays yellow for another 15 minutes, and then it turns green.

The messages file is really small (under 10 KByte) and not much is being written in it. That's why hobbit must stay red all the time!?!

I searched for the number 900 in server/etc, but nothing matches (exept some proxy configuration).
Does anyone have an Idea what or where the problem could be?
Greetings
Georgi

Hello,

I have a small hobbit issue.
I want hobbit to go red every time the word "/evicted/" shows up in /var/log/messages on some hosts. So the part in /hobbit-clients.cfg/ is as follows:

       HOST=%cn4[3-6]*-hp
       PROC    "%syslogd" 1 1 red
       PROC    "%/usr/sbin/nscd" 1 red
       PROC    "%iscsid" 2 2 red
       LOAD    16.5 20.0
       LOG     %/var/log/messages %(?-i)evicted|Oops|ALERT|NOTICE COLOR=red
       LOG     %/var/log/messages %(?-i)LustreError|WARNING|FAILED|kernel|failing|ILLEGAL COLOR=yellow


The Part in client-local.cfg:

         [cn44-hp]
         log:/var/log/messages:10240
         ignore MARK
         trigger ALERT
         trigger .*(dumping log to)|(evicted).*
         file:/var/log/messages

The Issue:
Every time I put the word "/evicted/" manually in the messages file, hobbit will go red for about 15 minutes. That's fine. If I put a second line with the word "/kernel/" in the messages file, a second (yellow) line appears in the mesgs column. That's also fine.  Hobbit is still red, but stays that way only for about 15 minutes. After the 15 minutes, it changes to yellow and the "/evicted/" warning is gone. It stays yellow for another 15 minutes, and then it turns green.

The messages file is really small (under 10 KByte) and not much is being written in it. That's why hobbit must stay red all the time!?!

I searched for the number 900 in server/etc, but nothing matches (exept some proxy configuration).
Does anyone have an Idea what or where the problem could be?
Greetings
Georgi

Hello,

I have a small hobbit issue.
I want hobbit to go red every time the word "/evicted/" shows up in /var/log/messages on some hosts. So the part in /hobbit-clients.cfg/ is as follows:

      HOST=%cn4[3-6]*-hp
      PROC    "%syslogd" 1 1 red
      PROC    "%/usr/sbin/nscd" 1 red
      PROC    "%iscsid" 2 2 red
      LOAD    16.5 20.0
      LOG     %/var/log/messages %(?-i)evicted|Oops|ALERT|NOTICE COLOR=red
      LOG     %/var/log/messages %(?-i)LustreError|WARNING|FAILED|kernel|failing|ILLEGAL COLOR=yellow


The Part in client-local.cfg:

        [cn44-hp]
        log:/var/log/messages:10240
        ignore MARK
        trigger ALERT
        trigger .*(dumping log to)|(evicted).*
        file:/var/log/messages

The Issue:
Every time I put the word "/evicted/" manually in the messages file, hobbit will go red for about 15 minutes. That's fine. If I put a second line with the word "/kernel/" in the messages file, a second (yellow) line appears in the mesgs column. That's also fine.  Hobbit is still red, but stays that way only for about 15 minutes. After the 15 minutes, it changes to yellow and the "/evicted/" warning is gone. It stays yellow for another 15 minutes, and then it turns green.

The messages file is really small (under 10 KByte) and not much is being written in it. That's why hobbit must stay red all the time!?!

I searched for the number 900 in server/etc, but nothing matches (exept some proxy configuration).
Does anyone have an Idea what or where the problem could be?
Greetings
Georgi

Hello,

I have a small hobbit issue.
I want hobbit to go red every time the word "/evicted/" shows up in /var/log/messages on some hosts. So the part in /hobbit-clients.cfg/ is as follows:

      HOST=%cn4[3-6]*-hp
      PROC    "%syslogd" 1 1 red
      PROC    "%/usr/sbin/nscd" 1 red
      PROC    "%iscsid" 2 2 red
      LOAD    16.5 20.0
      LOG     %/var/log/messages %(?-i)evicted|Oops|ALERT|NOTICE COLOR=red
      LOG     %/var/log/messages %(?-i)LustreError|WARNING|FAILED|kernel|failing|ILLEGAL COLOR=yellow


The Part in client-local.cfg:

        [cn44-hp]
        log:/var/log/messages:10240
        ignore MARK
        trigger ALERT
        trigger .*(dumping log to)|(evicted).*
        file:/var/log/messages

The Issue:
Every time I put the word "/evicted/" manually in the messages file, hobbit will go red for about 15 minutes. That's fine. If I put a second line with the word "/kernel/" in the messages file, a second (yellow) line appears in the mesgs column. That's also fine.  Hobbit is still red, but stays that way only for about 15 minutes. After the 15 minutes, it changes to yellow and the "/evicted/" warning is gone. It stays yellow for another 15 minutes, and then it turns green.

The messages file is really small (under 10 KByte) and not much is being written in it. That's why hobbit must stay red all the time!?!

I searched for the number 900 in server/etc, but nothing matches (exept some proxy configuration).
Does anyone have an Idea what or where the problem could be?
Greetings
Georgi

At the top of the client-local.cfg file it says: 
"The Hobbit Client will only report back entries generated in the past 30
minutes..."

Are you sure its only 15 minutes and not 30 minutes?  I can't find anything
in either the client-local.cfg nor the hobbit-clients.cfg which controls the
time associated with what messages will be processed.

       .....Bruce


-----Original Message-----
From: user-1bb1421e74fd@xymon.invalid
[mailto:user-1bb1421e74fd@xymon.invalid] Sent: Monday, March 17, 2008 9:09 AM
To: user-ae9b8668bcde@xymon.invalid
Subject: [hobbit] hobbit color-changing issue

Hello,

I have a small hobbit issue.
I want hobbit to go red every time the word "/evicted/" shows up in /var/log/messages on some hosts. So the part in /hobbit-clients.cfg/ is as follows:

      HOST=%cn4[3-6]*-hp
      PROC    "%syslogd" 1 1 red
      PROC    "%/usr/sbin/nscd" 1 red
      PROC    "%iscsid" 2 2 red
      LOAD    16.5 20.0
      LOG     %/var/log/messages %(?-i)evicted|Oops|ALERT|NOTICE COLOR=red
      LOG     %/var/log/messages %(?-i)LustreError|WARNING|FAILED|kernel|failing|ILLEGAL COLOR=yellow


The Part in client-local.cfg:

        [cn44-hp]
        log:/var/log/messages:10240
        ignore MARK
        trigger ALERT
        trigger .*(dumping log to)|(evicted).*
        file:/var/log/messages

The Issue:
Every time I put the word "/evicted/" manually in the messages file, hobbit will go red for about 15 minutes. That's fine. If I put a second line with the word "/kernel/" in the messages file, a second (yellow) line appears in the mesgs column. That's also fine.  Hobbit is still red, but stays that way only for about 15 minutes. After the 15 minutes, it changes to yellow and the "/evicted/" warning is gone. It stays yellow for another 15 minutes, and then it turns green.

The messages file is really small (under 10 KByte) and not much is being written in it. That's why hobbit must stay red all the time!?!

I searched for the number 900 in server/etc, but nothing matches (exept some proxy configuration).
Does anyone have an Idea what or where the problem could be?
Greetings
Georgi

Note: The information contained in this message may be privileged and
confidential and protected from disclosure. If the reader of this message is
not the intended recipient, or an employee or agent responsible for
delivering this message to the intended recipient, you are hereby notified
that any dissemination, distribution or copying of this communication is
strictly prohibited. If you have received this communication in error,
please notify us immediately by replying to the message and deleting it from
your computer. Thank you. Fellowes, Inc.