[Xymon] Linux load question

[Larry Bonham]

John,

You can test that with:

./bin/xymoncmd xymond_alert --test serverA load

And confirm that the alerts.cfg line you think is handling it really is.

Also the LOAD check is looking at the 5 minute load.  Not the 1 minute.  So in your example it is triggering at 25.16.  Which still isn’t the level you wanted.

Larry

From: Xymon [mailto:xymon-bounces at xymon.com] On Behalf Of Galen Johnson
Sent: Thursday, March 8, 2018 9:12 AM
To: Rothlisberger, John R.
Cc: xymon >> xymon at xymon.com
Subject: Re: [Xymon] Linux load question

Any chance you have another entry that could be overriding that setting?  Or maybe it's not matching he entry and falling aback to default?
=G=

On Thu, Mar 8, 2018 at 8:24 AM, Rothlisberger, John R. <john.r.rothlisberger at accenture.com<mailto:john.r.rothlisberger at accenture.com>> wrote:
I have a linux server which is alerting on a high load but the load average is lower than my threshold.  My question, why is it going red?

Analysis.cfg
HOST=serverA
        LOAD    89.0 90.0

Here are the top results – I expect that the alert should be triggered by the load average of 21.75 which is far lower than the thresholds.
top - 07:58:55 up 17 days, 19:31, 20 users,  load average: 21.75, 25.16, 25.32
...

But, there is a single process using a ton of cpu on one of the multiple cores – is this factoring into the alert?  If so, why is it not documented?
   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
121978 user1+    20   0 46.839g 0.040t  50388 S  2774 17.2  18504:34 python

Thanks,
John
Upcoming PTO:
_____________________________________________________________________
John Rothlisberger
IT Strategy, Infrastructure & Security - Technology Growth Platform
TGP for Business Process Outsourcing
Accenture
312.693.3136 office
_____________________________________________________________________


________________________________

This message is for the designated recipient only and may contain privileged, proprietary, or otherwise confidential information. If you have received it in error, please notify the sender immediately and delete the original. Any other use of the e-mail by you is prohibited. Where allowed by local law, electronic communications with Accenture and its affiliates, including e-mail and instant messaging (including content), may be scanned by our systems for the purposes of information security and assessment of internal compliance with Accenture policy.
______________________________________________________________________________________

www.accenture.com<http://www.accenture.com>

_______________________________________________
Xymon mailing list
Xymon at xymon.com<mailto:Xymon at xymon.com>
http://lists.xymon.com/mailman/listinfo/xymon


________________________________

CONFIDENTIALITY NOTICE:
This electronic mail message is intended exclusively for
recipient to which it is addressed. The contents of this message
and any attachments may contain confidential and privileged
information. Any unauthorized review, use, print, storage, copy,
disclosure or distribution is strictly prohibited. If you have
received this message in error, please advise the sender
immediately by replying to the message's sender and delete all
copies of this message and its attachments without disclosing
the contents to anyone, or using the contents for any purpose.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.xymon.com/pipermail/xymon/attachments/20180308/1b2099a3/attachment.html>