<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
<title></title>
</head>
<body bgcolor="#ffffff" text="#000000">
Maybe the best solution is to use bb-msgs.sh from Big Brother as an
external script, it works very well and it have a very simple
configuration, or not ?!<br>
<br>
<br>
<pre class="moz-signature" cols="72">Giovanni M. Frainer
</pre>
<br>
<br>
James Wade escreveu:
<blockquote cite="mid0da501c734d8$923f7100$6b2fb8a5@txaccess.net"
type="cite">
<meta http-equiv="Content-Type" content="text/html; ">
<meta name="Generator" content="Microsoft Word 11 (filtered medium)">
<!--[if !mso]>
<style>
v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style>
<![endif]--><o:SmartTagType
namespaceuri="urn:schemas-microsoft-com:office:smarttags" name="City">
<o:SmartTagType
namespaceuri="urn:schemas-microsoft-com:office:smarttags" name="place"><o:SmartTagType
namespaceuri="urn:schemas-microsoft-com:office:smarttags"
name="PersonName">
<!--[if !mso]>
<style>
st1\:*{behavior:url(#default#ieooui) }
</style>
<![endif]-->
<style>
<!--
/* Font Definitions */
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman";}
a:link, span.MsoHyperlink
{color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{color:blue;
text-decoration:underline;}
span.EmailStyle18
{mso-style-type:personal-reply;
font-family:Arial;
color:navy;}
@page Section1
{size:8.5in 11.0in;
margin:1.0in 1.25in 1.0in 1.25in;}
div.Section1
{page:Section1;}
-->
</style></o:SmartTagType></o:SmartTagType></o:SmartTagType>
<div class="Section1">
<p class="MsoNormal"><font color="navy" face="Arial" size="2"><span
style="font-size: 10pt; font-family: Arial; color: navy;">What about
red alerts? Is anyone using
anything?<o:p></o:p></span></font></p>
<p class="MsoNormal"><font color="navy" face="Arial" size="2"><span
style="font-size: 10pt; font-family: Arial; color: navy;"><o:p> </o:p></span></font></p>
<p class="MsoNormal"><font color="navy" face="Arial" size="2"><span
style="font-size: 10pt; font-family: Arial; color: navy;">Thanks <st1:City
w:st="on"><st1:place w:st="on">Gary</st1:place></st1:City> for the
information. Big Help…..<o:p></o:p></span></font></p>
<p class="MsoNormal"><font color="navy" face="Arial" size="2"><span
style="font-size: 10pt; font-family: Arial; color: navy;"><o:p> </o:p></span></font></p>
<p class="MsoNormal"><font color="navy" face="Arial" size="2"><span
style="font-size: 10pt; font-family: Arial; color: navy;">James<o:p></o:p></span></font></p>
<p class="MsoNormal"><font color="navy" face="Arial" size="2"><span
style="font-size: 10pt; font-family: Arial; color: navy;"><o:p> </o:p></span></font></p>
<div>
<div class="MsoNormal" style="text-align: center;" align="center"><font
face="Times New Roman" size="3"><span style="font-size: 12pt;">
<hr tabindex="-1" align="center" size="2" width="100%"></span></font></div>
<p class="MsoNormal"><b><font face="Tahoma" size="2"><span
style="font-size: 10pt; font-family: Tahoma; font-weight: bold;">From:</span></font></b><font
face="Tahoma" size="2"><span
style="font-size: 10pt; font-family: Tahoma;"> Gary Baluha
[<a class="moz-txt-link-freetext" href="mailto:gumby3203@gmail.com">mailto:gumby3203@gmail.com</a>] <br>
<b><span style="font-weight: bold;">Sent:</span></b> Wednesday,
January 10, 2007
9:39 AM<br>
<b><span style="font-weight: bold;">To:</span></b> <st1:PersonName
w:st="on"><a class="moz-txt-link-abbreviated" href="mailto:hobbit@hswn.dk">hobbit@hswn.dk</a></st1:PersonName><br>
<b><span style="font-weight: bold;">Subject:</span></b> Re: [hobbit]
/var/adm/messages, Not noifying</span></font><o:p></o:p></p>
</div>
<p class="MsoNormal"><font face="Times New Roman" size="3"><span
style="font-size: 12pt;"><o:p> </o:p></span></font></p>
<p class="MsoNormal" style="margin-bottom: 12pt;"><font
face="Times New Roman" size="3"><span style="font-size: 12pt;">Our
standard
/var/adm/messages check is below:<br>
LOG /var/adm/messages %(?-i)NOTICE|WARNING|Error
COLOR=yellow<br>
<br>
We use the (?-i) case-sensitive feature so we can edit the log files
and change
WARNING to wARNING (or such) to quiet specific alerts that pop up and
are taken
care of (instead of waiting for Hobbit to just read in more log data
until
these errors "scroll by"). <br>
<br>
Of course, some of our hosts have different tests, based on what we're
looking
for. It really depends on what sort of errors you are interested in
catching that will determine what you want to look for. But the above
should catch most errors Solaris will detect (such as non-correctable
ECC
errors/etc). <o:p></o:p></span></font></p>
<div>
<p class="MsoNormal"><span class="gmailquote"><font
face="Times New Roman" size="3"><span style="font-size: 12pt;">On
1/10/07, <b><span style="font-weight: bold;">James
Wade</span></b> <<a href="mailto:jkwade@futurefrontiers.com">jkwade@futurefrontiers.com</a>>
wrote:</span></font></span><o:p></o:p></p>
<p class="MsoNormal" style="margin-bottom: 12pt;"><font
face="Times New Roman" size="3"><span style="font-size: 12pt;">What is
everyone else
putting in the hobbit-clients.cfg<br>
for monitoring /var/adm/messages... I'm looking for an<br>
overall default.<br>
<br>
Thanks....James<br>
<br>
-----Original Message-----<br>
From: James Wade [mailto: <a href="mailto:jkwade@futurefrontiers.com">jkwade@futurefrontiers.com</a>]<br>
Sent: Tuesday, January 09, 2007 5:21 PM<br>
To: <a href="mailto:hobbit@hswn.dk">hobbit@hswn.dk</a><br>
Subject: RE: [hobbit] /var/adm/messages, Not noifying <br>
<br>
I swapped out both the Client and Server. Totally Hobbit now.<br>
<br>
I added a default to monitor all clients /var/adm/messages<br>
which it is doing.<br>
<br>
I checked and see that I didn't configure any default in the <br>
hobbit-clients.cfg<br>
<br>
Can you recommend a general setting for all systems?<br>
A default...<br>
<br>
Thanks....James<br>
<br>
-----Original Message-----<br>
From: Henrik Stoerner [mailto:<a href="mailto:henrik@hswn.dk">
henrik@hswn.dk</a>]<br>
Sent: Tuesday, January 09, 2007 3:44 PM<br>
To: <a href="mailto:hobbit@hswn.dk">hobbit@hswn.dk</a><br>
Subject: Re: [hobbit] /var/adm/messages, Not noifying<br>
<br>
On Tue, Jan 09, 2007 at 01:46:12PM -0600, James Wade wrote: <br>
<br>
> Since I move everything over to hobbit, the messages monitoring<br>
> seems to have changed. I get no alerts on /var/adm/messages file<br>
> anymore.<br>
<br>
When you say "everything" - do you mean the Big Brother/Hobbit
server, <br>
or did you also swap out the client side installations ?<br>
<br>
If you've switched clients, then the log file monitoring setup is<br>
quite different from what you have in BB. With the Hobbit client,<br>
all of the configuration is done on the Hobbit server; you need to <br>
add an entry to the client-local.cfg file to define which logfiles<br>
you want data from (the /var/adm/messages is in the default setup,<br>
so that should be OK), AND you must configure the hobbit-clients.cfg<br>
file with the strings (or rather, regex patterns) you want to look for <br>
in the logfiles.<br>
<br>
If you're still running the BB clients on your servers and your
"msgs"<br>
column actually went red, then it must be a problem with the alert
setup.<br>
Check the current alert setup for each host - you can see it on the <br>
"info" column webpage for each host - and make sure there's an alert<br>
defined for the "msgs" status. If not, then you must define one in
the<br>
hobbit-alerts.cfg file.<br>
<br>
<br>
Regards,<br>
Henrik<br>
<br>
<br>
To unsubscribe from the hobbit list, send an e-mail to<br>
<a href="mailto:hobbit-unsubscribe@hswn.dk">hobbit-unsubscribe@hswn.dk</a><br>
<br>
<br>
<br>
<br>
<br>
<br>
<br>
To unsubscribe from the hobbit list, send an e-mail to <br>
<a href="mailto:hobbit-unsubscribe@hswn.dk">hobbit-unsubscribe@hswn.dk</a><br>
<br>
<br>
<br>
<br>
<br>
<br>
<br>
To unsubscribe from the hobbit list, send an e-mail to<br>
<a href="mailto:hobbit-unsubscribe@hswn.dk">hobbit-unsubscribe@hswn.dk
</a><br>
<br>
<o:p></o:p></span></font></p>
</div>
<p class="MsoNormal"><font face="Times New Roman" size="3"><span
style="font-size: 12pt;"><o:p> </o:p></span></font></p>
</div>
</blockquote>
</body>
</html>