[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
NK allevents log
- To: hobbit (at) hswn.dk
- Subject: NK allevents log
- From: Brian Lynch <brianlynch (at) gmail.com>
- Date: Sat, 7 May 2005 19:13:46 -0700
- Domainkey-signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:from:reply-to:to:subject:mime-version:content-type; b=NUYB8XnNFamHHus8ailhirZOmLMMwf5MUb0Y1I4YpDLlSqJae4t+taQpj5CGxOnRxvRPwkscg0tCUloA6NpxNRSeG7piTMkawUolCEOV7YWkj3QdtcuYlrPuUIzLk7ob9CA14LbYh7Y2mntDac/13ODjKiVwNTxIUtb9MlA9UGQ=
Henrik,
Would it be possible to create a log of only NK events? We currently use
bbgen views to present a limited view to our NOC (via the bbgen ignore
strings) and then use a custom php program to parse the allevents log and
only pick out events that would have shown up on their view. We use this as
a metric to track successful escalation of alerts. I'm considering switching
to the NK model, but it would require a more complex program to identify NK
alerts. Any thoughts?
Thanks,
Brian
PS. Switching live to clustered hobbit in 2 weeks! Thanks for all your hard
work!