<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:st1="urn:schemas-microsoft-com:office:smarttags" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv=Content-Type content="text/html; charset=us-ascii">
<meta name=Generator content="Microsoft Word 11 (filtered medium)">
<!--[if !mso]>
<style>
v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style>
<![endif]--><o:SmartTagType
namespaceuri="urn:schemas-microsoft-com:office:smarttags" name="PersonName"/>
<!--[if !mso]>
<style>
st1\:*{behavior:url(#default#ieooui) }
</style>
<![endif]-->
<style>
<!--
/* Font Definitions */
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:Verdana;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman";}
a:link, span.MsoHyperlink
{color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal;
font-family:Arial;
color:windowtext;}
span.EmailStyle18
{mso-style-type:personal-reply;
font-family:Arial;
color:navy;}
@page Section1
{size:8.5in 11.0in;
margin:1.0in 1.25in 1.0in 1.25in;}
div.Section1
{page:Section1;}
-->
</style>
</head>
<body lang=EN-US link=blue vlink=purple>
<div class=Section1>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>Ok, I removed the hierarchy as suggested,
Greg.<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>Then I added a line to my applesauce
server so the hobbit-clients.cfg now has the following:<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>HOST=applesauce<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>
LOG /var/log/messages "%(?-i)SERIOUS_CRITICAL" COLOR=yellow<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'> PROC
"weblogic.Name=" 3 3 red TEXT=TOTAL_WEBLOGIC_PROCESSES<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'> PROC
"weblogic.Name=prod_alsb_01" 1 1 red TEXT=PROD_ALSB_01<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'> PROC
"weblogic.Name=prod_ccs_wli_01" 1 1 red TEXT=PROD_CCS_WLI_01<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'> PROC
"weblogic.Name=prod_ccs_aldsp_01" 1 1 red TEXT=PROD_CCS_ALDSP_01<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'> DISK
/wls_domains 40 97<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>Looking at the disk page for this server
on hobbit, the page is still green, and I see the following:<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'>/dev/mapper/vg00-lvol10 9289080 5718512
3098712 65% /wls_domains<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'>When I run the config report for this server I see the following for
disk:<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'><o:p> </o:p></span></font></p>
<table class=MsoNormalTable border=0 cellspacing=5 cellpadding=0>
<tr>
<td valign=top style='padding:2.25pt 2.25pt 2.25pt 2.25pt'>
<p class=MsoNormal><font size=3 face="Times New Roman"><span
style='font-size:12.0pt'>disk<o:p></o:p></span></font></p>
</td>
<td valign=top style='padding:2.25pt 2.25pt 2.25pt 2.25pt'>
<p class=MsoNormal><font size=3 face="Times New Roman"><span
style='font-size:12.0pt'>No<o:p></o:p></span></font></p>
</td>
<td valign=top style='padding:2.25pt 2.25pt 2.25pt 2.25pt'>
<p class=MsoNormal><font size=3 face="Times New Roman"><span
style='font-size:12.0pt'>-/-/-<o:p></o:p></span></font></p>
</td>
<td valign=top style='padding:2.25pt 2.25pt 2.25pt 2.25pt'>
<p class=MsoNormal><font size=3 face="Times New Roman"><span
style='font-size:12.0pt'>Default limits: Yellow 90% full, Red 95% full<o:p></o:p></span></font></p>
<font size=3 face="Times New Roman"><span style='font-size:12.0pt;font-family:
"Times New Roman"'><br clear=all style='page-break-before:always'>
</span></font>
<p class=MsoNormal><font size=3 face="Times New Roman"><span
style='font-size:12.0pt'>/wls_appl<br clear=all style='page-break-before:
always'>
<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=3 face="Times New Roman"><span
style='font-size:12.0pt'>/var<o:p></o:p></span></font></p>
<font size=3 face="Times New Roman"><span style='font-size:12.0pt;font-family:
"Times New Roman"'><br clear=all style='page-break-before:always'>
</span></font>
<p class=MsoNormal><font size=3 face="Times New Roman"><span
style='font-size:12.0pt'>/boot<o:p></o:p></span></font></p>
<font size=3 face="Times New Roman"><span style='font-size:12.0pt;font-family:
"Times New Roman"'><br clear=all style='page-break-before:always'>
</span></font>
<p class=MsoNormal><font size=3 face="Times New Roman"><span
style='font-size:12.0pt'>/wls_logs<o:p></o:p></span></font></p>
<font size=3 face="Times New Roman"><span style='font-size:12.0pt;font-family:
"Times New Roman"'><br clear=all style='page-break-before:always'>
</span></font>
<p class=MsoNormal><font size=3 face="Times New Roman"><span
style='font-size:12.0pt'>/wls_domains<o:p></o:p></span></font></p>
<font size=3 face="Times New Roman"><span style='font-size:12.0pt;font-family:
"Times New Roman"'><br clear=all style='page-break-before:always'>
</span></font>
<p class=MsoNormal><font size=3 face="Times New Roman"><span
style='font-size:12.0pt'>/opt<br clear=all style='page-break-before:always'>
<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=3 face="Times New Roman"><span
style='font-size:12.0pt'>/usr<br clear=all style='page-break-before:always'>
<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=3 face="Times New Roman"><span
style='font-size:12.0pt'>/root<br clear=all style='page-break-before:always'>
<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=3 face="Times New Roman"><span
style='font-size:12.0pt'>/dev<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=3 face="Times New Roman"><span
style='font-size:12.0pt'>/shm<br clear=all style='page-break-before:always'>
<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=3 face="Times New Roman"><span
style='font-size:12.0pt'>/home<br clear=all style='page-break-before:always'>
<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=3 face="Times New Roman"><span
style='font-size:12.0pt'>/tmp<o:p></o:p></span></font></p>
</td>
</tr>
</table>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'>I assume this is saying all of these disks are only going to go yellow
on 90% full., and red on 95% full? If this is the case, we clearly have
something set up incorrectly. If I am misunderstanding the report, please
let me know.<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>
<div>
<div class=MsoNormal align=center style='text-align:center'><font size=3
face="Times New Roman"><span style='font-size:12.0pt'>
<hr size=2 width="100%" align=center tabindex=-1>
</span></font></div>
<p class=MsoNormal><b><font size=2 face=Tahoma><span style='font-size:10.0pt;
font-family:Tahoma;font-weight:bold'>From:</span></font></b><font size=2
face=Tahoma><span style='font-size:10.0pt;font-family:Tahoma'> Hubbard, Greg L
[mailto:greg.hubbard@eds.com] <br>
<b><span style='font-weight:bold'>Sent:</span></b> Friday, November 07, 2008
10:14 AM<br>
<b><span style='font-weight:bold'>To:</span></b> <st1:PersonName w:st="on">hobbit@hswn.dk</st1:PersonName><br>
<b><span style='font-weight:bold'>Subject:</span></b> RE: [hobbit] Need help
determining why alerts didn't come</span></font><o:p></o:p></p>
</div>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 color=blue face=Verdana><span style='font-size:
10.0pt;font-family:Verdana;color:blue'>You can always look at the page behind
the "info" button for applesauce to see how the alert rules were
interpreted. You can also run an event configuration report.</span></font><o:p></o:p></p>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'> <o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=blue face=Verdana><span style='font-size:
10.0pt;font-family:Verdana;color:blue'>Personally, I would not try to be too
clever in any of the Hobbit configuration files unless the documentation
provides a specific example of "cleverness." I would explicitly
list what I want for each host, and not assume that I can set up a hierarchy of
parameters using multiple definitions. Over the past year or so there
have been a number of posts from people who are misled by their own assumptions
that "Hobbit works this way because I want/need it to work this way."</span></font><o:p></o:p></p>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'> <o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=blue face=Verdana><span style='font-size:
10.0pt;font-family:Verdana;color:blue'>GLH</span></font><o:p></o:p></p>
<blockquote style='margin-top:5.0pt;margin-right:0in;margin-bottom:5.0pt'>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'><o:p> </o:p></span></font></p>
<div class=MsoNormal align=center style='text-align:center'><font size=3
face="Times New Roman"><span style='font-size:12.0pt'>
<hr size=2 width="100%" align=center tabIndex=-1>
</span></font></div>
<p class=MsoNormal style='margin-bottom:12.0pt'><b><font size=2 face=Tahoma><span
style='font-size:10.0pt;font-family:Tahoma;font-weight:bold'>From:</span></font></b><font
size=2 face=Tahoma><span style='font-size:10.0pt;font-family:Tahoma'> Bouchard,
Brian [mailto:Brian-Bouchard@idexx.com] <br>
<b><span style='font-weight:bold'>Sent:</span></b> Friday, November 07, 2008
8:52 AM<br>
<b><span style='font-weight:bold'>To:</span></b> <st1:PersonName w:st="on">hobbit@hswn.dk</st1:PersonName><br>
<b><span style='font-weight:bold'>Subject:</span></b> [hobbit] Need help
determining why alerts didn't come</span></font><o:p></o:p></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>Hello Hobbit Gurus,<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>I am seeking help determining why we recently received only
some alerts that were configured on a given server.<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>In my hobbit-clients.cfg file I have multiple sections of
relevance:<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>#######################################################<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'># generic checks for all WebLogic Servers<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>#######################################################<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>HOST= applesauce,gravy,enchilada,chips<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>
DISK * 95 97<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'> PROC dsmcad 1 -1
yellow<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'> FILE
"%/wls_domains/.*/jrockit..*.dump" NOEXIST red<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>#######################################################<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'># specific checks for applesauce<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>#######################################################<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>HOST=applesauce<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'> LOG
/var/log/messages "%(?-i)SERIOUS_CRITICAL" COLOR=yellow<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'> PROC
"weblogic.Name=" 3 3 red TEXT=TOTAL_WEBLOGIC_PROCESSES<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'> PROC
"weblogic.Name=prod_alsb_01" 1 1 red TEXT=PROD_ALSB_01<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'> PROC
"weblogic.Name=prod_ccs_wli_01" 1 1 red TEXT=PROD_CCS_WLI_01<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'> PROC
"weblogic.Name=prod_ccs_aldsp_01" 1 1 red TEXT=PROD_CCS_ALDSP_01<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>So, a couple of questions:<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal style='mso-margin-top-alt:0in;margin-right:0in;margin-bottom:
12.0pt;margin-left:.5in;text-indent:-.25in'><font size=2 face=Arial><span
style='font-size:10.0pt;font-family:Arial'>1)</span></font><font size=1><span
style='font-size:7.0pt'> </span></font><font
size=2 face=Arial><span style='font-size:10.0pt;font-family:Arial'>Is it valid
to have different alerts for the same HOST in the hobbit-clients.cfg like
this? It seemed to work in some instances, but I should ask before moving
forward…<o:p></o:p></span></font></p>
<p class=MsoNormal style='mso-margin-top-alt:0in;margin-right:0in;margin-bottom:
12.0pt;margin-left:.5in;text-indent:-.25in'><font size=2 face=Arial><span
style='font-size:10.0pt;font-family:Arial'>2)</span></font><font size=1><span
style='font-size:7.0pt'> </span></font><font
size=2 face=Arial><span style='font-size:10.0pt;font-family:Arial'>Yesterday, I
received the alerts with TEXT= “TOTAL_WEBLOGIC_PROCESSES” and
“PROD_ALSB_01” when I logged onto the server, I found the
filesystem this process was running on was 100% used, which caused this process
to die. I cleaned up a bunch of log files, and restarted the process and
all was good… BUT… Why didn’t I receive the alert that
the DISK was more than 97% full. I checked the history for the disk
usage, and it had been over 95% for at least 6 hours prior to the process going
down. Also, the check for the “jrockit” file did not kick off
when that file was create (after the filesystem was at 100%) I need
to determine why we weren’t warned on the disk space issue before our
production application came down.<o:p></o:p></span></font></p>
<p class=MsoNormal style='margin-left:.5in;text-indent:-.25in'><font size=2
face=Arial><span style='font-size:10.0pt;font-family:Arial'>3)</span></font><font
size=1><span style='font-size:7.0pt'> </span></font><font
size=2 face=Arial><span style='font-size:10.0pt;font-family:Arial'>One other
thing I noticed was that the IP address for this server was incorrect in the
bb-hosts file. I assume that’s an issue, but I’m not sure why
we got some expected alerts and not others. Also, I updated this entry in
the bb-hosts file to the correct IP, and cycled the hobbit server, but I am
still not receiving the alert on the jrockit file, which is still out there.<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>Any help is appreciated. I’m relatively new to
Hobbit, so its completely within the realm of possibility that I don’t
have any of this set up correctly. Please feel free to correct me on anything
that looks out of whack.<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>- Brian<o:p></o:p></span></font></p>
</blockquote>
</div>
</body>
</html>