[Xymon] [External] Re: Linux load question

[Rothlisberger, John R.]

Defaults are similar (not below 25 anyway).

So, it’s it because there are multiple cpu’s?  Is there some setting that I could use?

Or, is there a way to find the exact value/setting that Xymon is using to change this to red?  The CPU graph shows that the total cpu % doesn’t really go above 30%.

Thanks,
John

From: Galen Johnson [mailto:solitaryr at gmail.com]
Sent: Thursday, March 8, 2018 9:12 AM
To: Rothlisberger, John R. <john.r.rothlisberger at accenture.com>
Cc: xymon >> xymon at xymon.com <xymon at xymon.com>
Subject: [External] Re: [Xymon] Linux load question

Any chance you have another entry that could be overriding that setting?  Or maybe it's not matching he entry and falling aback to default?
=G=

On Thu, Mar 8, 2018 at 8:24 AM, Rothlisberger, John R. <john.r.rothlisberger at accenture.com<mailto:john.r.rothlisberger at accenture.com>> wrote:
I have a linux server which is alerting on a high load but the load average is lower than my threshold.  My question, why is it going red?

Analysis.cfg
HOST=serverA
        LOAD    89.0 90.0

Here are the top results – I expect that the alert should be triggered by the load average of 21.75 which is far lower than the thresholds.
top - 07:58:55 up 17 days, 19:31, 20 users,  load average: 21.75, 25.16, 25.32
...

But, there is a single process using a ton of cpu on one of the multiple cores – is this factoring into the alert?  If so, why is it not documented?
   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
121978 user1+    20   0 46.839g 0.040t  50388 S  2774 17.2  18504:34 python

Thanks,
John
Upcoming PTO:
_____________________________________________________________________
John Rothlisberger
IT Strategy, Infrastructure & Security - Technology Growth Platform
TGP for Business Process Outsourcing
Accenture
312.693.3136<tel:(312)%20693-3136> office
_____________________________________________________________________


________________________________

This message is for the designated recipient only and may contain privileged, proprietary, or otherwise confidential information. If you have received it in error, please notify the sender immediately and delete the original. Any other use of the e-mail by you is prohibited. Where allowed by local law, electronic communications with Accenture and its affiliates, including e-mail and instant messaging (including content), may be scanned by our systems for the purposes of information security and assessment of internal compliance with Accenture policy.
______________________________________________________________________________________

www.accenture.com<http://www.accenture.com>

_______________________________________________
Xymon mailing list
Xymon at xymon.com<mailto:Xymon at xymon.com>
http://lists.xymon.com/mailman/listinfo/xymon<https://urldefense.proofpoint.com/v2/url?u=http-3A__lists.xymon.com_mailman_listinfo_xymon&d=DwMFaQ&c=eIGjsITfXP_y-DLLX0uEHXJvU8nOHrUK8IrwNKOtkVU&r=u6KtIBCRNAeN-AbgJjdZe5zZJVFEfq04dnWD-hYNPL_fxJIIFncbL8W6k0NMJtuq&m=nPb4F0YxwL3y_9ixuqS-zT1T9JME5nt2RQyOnIjlXo4&s=sUOhIPd6_ZFkbXlaIALnrXBaieOgc4ROg3cUMd6PYkk&e=>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.xymon.com/pipermail/xymon/attachments/20180309/162b7af0/attachment.html>