<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:st1="urn:schemas-microsoft-com:office:smarttags" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv=Content-Type content="text/html; charset=us-ascii">
<meta name=Generator content="Microsoft Word 11 (filtered medium)">
<!--[if !mso]>
<style>
v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style>
<![endif]-->
<title>Re: [hobbit] Need help determining why alerts didn't come</title>
<o:SmartTagType namespaceuri="urn:schemas-microsoft-com:office:smarttags"
name="PersonName"/>
<!--[if !mso]>
<style>
st1\:*{behavior:url(#default#ieooui) }
</style>
<![endif]-->
<style>
<!--
/* Font Definitions */
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:"Lucida Grande";
panose-1:0 0 0 0 0 0 0 0 0 0;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman";}
a:link, span.MsoHyperlink
{color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{color:blue;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-reply;
font-family:Arial;
color:navy;}
@page Section1
{size:8.5in 11.0in;
margin:1.0in 1.25in 1.0in 1.25in;}
div.Section1
{page:Section1;}
-->
</style>
</head>
<body lang=EN-US link=blue vlink=blue>
<div class=Section1>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>Tom – <o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>I don’t have a bbsys.local file, but
I did find a similar command in the hobbitserver.cfg. The setting there
is as similar to as you suggested:<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>DF="/bin/df -Pk"<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>Also, to Greg’s points earlier, I
took the hierarchy out of the picture for now. I’m looking at the info
and config reports now.<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>- Brian<o:p></o:p></span></font></p>
<div>
<div class=MsoNormal align=center style='text-align:center'><font size=3
face="Times New Roman"><span style='font-size:12.0pt'>
<hr size=2 width="100%" align=center tabindex=-1>
</span></font></div>
<p class=MsoNormal><b><font size=2 face=Tahoma><span style='font-size:10.0pt;
font-family:Tahoma;font-weight:bold'>From:</span></font></b><font size=2
face=Tahoma><span style='font-size:10.0pt;font-family:Tahoma'> Tom Callahan
[mailto:CallahanT@tessco.com] <br>
<b><span style='font-weight:bold'>Sent:</span></b> Friday, November 07, 2008
10:27 AM<br>
<b><span style='font-weight:bold'>To:</span></b> <st1:PersonName w:st="on">hobbit@hswn.dk</st1:PersonName><br>
<b><span style='font-weight:bold'>Subject:</span></b> Re: [hobbit] Need help
determining why alerts didn't come</span></font><o:p></o:p></p>
</div>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'><o:p> </o:p></span></font></p>
<p class=MsoNormal style='margin-bottom:12.0pt'><font size=2
face="Lucida Grande"><span style='font-size:11.0pt;font-family:"Lucida Grande"'>I’ve
noticed inability to correctly parse “df” if you have long device
names (think device-mapper).<br>
<br>
My solution was to change DF=”df –k” in bbsys.local to DF=”df
–k –P” for POSIX mode.<br>
<br>
Try that and see if it helps?<br>
<br>
<br>
On 11/7/08 9:52 AM, "Bouchard, Brian" <<a
href="Brian-Bouchard@idexx.com">Brian-Bouchard@idexx.com</a>> wrote:</span></font><o:p></o:p></p>
<p class=MsoNormal style='margin-bottom:12.0pt'><font size=2 face=Arial><span
style='font-size:10.0pt;font-family:Arial'>Hello Hobbit Gurus,<br>
<br>
I am seeking help determining why we recently received only some alerts that
were configured on a given server.<br>
<br>
<br>
<br>
In my hobbit-clients.cfg file I have multiple sections of relevance:<br>
<br>
#######################################################<br>
# generic checks for all WebLogic Servers<br>
#######################################################<br>
HOST= applesauce,gravy,enchilada,chips<br>
DISK *
95 97<br>
PROC dsmcad 1 -1 yellow<br>
FILE
"%/wls_domains/.*/jrockit..*.dump" NOEXIST red<br>
#######################################################<br>
# specific checks for applesauce<br>
#######################################################<br>
HOST=applesauce<br>
LOG /var/log/messages
"%(?-i)SERIOUS_CRITICAL" COLOR=yellow<br>
PROC "weblogic.Name=" 3 3
red TEXT=TOTAL_WEBLOGIC_PROCESSES<br>
PROC
"weblogic.Name=prod_alsb_01" 1 1 red TEXT=PROD_ALSB_01<br>
PROC "weblogic.Name=prod_ccs_wli_01"
1 1 red TEXT=PROD_CCS_WLI_01<br>
PROC
"weblogic.Name=prod_ccs_aldsp_01" 1 1 red TEXT=PROD_CCS_ALDSP_01<br>
<br>
<br>
So, a couple of questions:<br>
<br>
1)</span></font><font size=2><span style='font-size:10.0pt'>
</span></font><font size=2 face=Arial><span
style='font-size:10.0pt;font-family:Arial'>Is it valid to have different alerts
for the same HOST in the hobbit-clients.cfg like this? It seemed to work
in some instances, but I should ask before moving forward…<br>
<br>
</span></font><font size=2 face="Lucida Grande"><span style='font-size:11.0pt;
font-family:"Lucida Grande"'><br>
</span></font><font size=2 face=Arial><span style='font-size:10.0pt;font-family:
Arial'>2)</span></font><font size=2><span style='font-size:10.0pt'>
</span></font><font size=2 face=Arial><span
style='font-size:10.0pt;font-family:Arial'>Yesterday, I received the alerts
with TEXT= “TOTAL_WEBLOGIC_PROCESSES” and
“PROD_ALSB_01” when I logged onto the server, I found the
filesystem this process was running on was 100% used, which caused this process
to die. I cleaned up a bunch of log files, and restarted the process and
all was good… BUT… Why didn’t I receive the alert that
the DISK was more than 97% full. I checked the history for the disk usage,
and it had been over 95% for at least 6 hours prior to the process going down.
Also, the check for the “jrockit” file did not kick off when
that file was create (after the filesystem was at 100%) I need to
determine why we weren’t warned on the disk space issue before our
production application came down.<br>
<br>
</span></font><font size=2 face="Lucida Grande"><span style='font-size:11.0pt;
font-family:"Lucida Grande"'><br>
</span></font><font size=2 face=Arial><span style='font-size:10.0pt;font-family:
Arial'>3)</span></font><font size=2><span style='font-size:10.0pt'>
</span></font><font size=2 face=Arial><span
style='font-size:10.0pt;font-family:Arial'>One other thing I noticed was that
the IP address for this server was incorrect in the bb-hosts file. I
assume that’s an issue, but I’m not sure why we got some expected
alerts and not others. Also, I updated this entry in the bb-hosts file to
the correct IP, and cycled the hobbit server, but I am still not receiving the
alert on the jrockit file, which is still out there.<br>
<br>
Any help is appreciated. I’m relatively new to Hobbit, so its
completely within the realm of possibility that I don’t have any of this
set up correctly. Please feel free to correct me on anything that looks out of
whack.<br>
<br>
- Brian</span></font><o:p></o:p></p>
</div>
</body>
</html>