Tag Info

Hot answers tagged

35

You can use auditing to find this. If not already available, install and enable auditing for your distro. set an audit watch on /etc/hosts /sbin/auditctl -w /etc/hosts -p war -k hosts-file -w watch /etc/hosts -p warx watch for write, attribute change, execute or read events -k hosts-file is a search key. Wait till the hosts file changes and then use ...


8

Somewhere in your NAGIOS config, you should have a definition of the command used to send email notifications. If it's anything like mine, this will say define command{ command_name notify-service-by-email command_line /usr/bin/printf "%b" "***** Nagios *****\n\nNotification Type: $NOTIFICATIONTYPE$\n\nService: $SERVICEDESC$\nHost: ...


6

Check out the following two projects: batsd batsd-dash batsd is a daemon for aggregating and storing statistics, while batsd-dash is a configurable dashboard the present the data you have stored in batsd. About batsd Batsd is a ruby-based daemon for aggregating and storing statistics. It targets "wireline" compatibility with Etsy's StatsD ...


6

The role of the Agent Monitoring is umbrella term for many functions. The function of an "agent" is essentially to make data available to the rest of the system. To put it in context, you might try to fit it into the model proposed by Dickson from his "Working theory of Monitoring" talk. So agents generally fit into "Sensing/Measurement" and maybe the ...


5

According to the docs, MRTG uses 1000 as the kilo multiplier by default. You can change it as follows: kilo[mem]: 1024


5

Load average is not bound to the maximum of the number of the compute units. The load average is a measurement of the number of processes running or waiting to run. If your load average is higher than the number of compute units, that means that there is a queue of processes waiting to run. Now, in your case, you show a graph of CPU utilization. All well ...


5

There is no need to add more clutter to your inbox by running a periodic script, and there is no need to create busywork for yourself by manually checking systems. Zabbix is already doing regular checks. If it's properly configured it's doing them every 5-15 minutes (which is more frequently than you could ever do them manually), and it's alerting you ...


5

SvW is not wrong in what (s)he writes, but you should also investigate the variable max_check_attempts, which defines how many checks a service has to fail before going HARD error and notifying. For some of my hair-trigger services, I have max_check_attempts 2 check_interval 2 retry_interval 1 which means ...


5

Take a look at this script: http://answers.google.com/answers/threadview/id/276934.html curl is a command-line utility to fetch a URL. The script checks the exit code ($? refers to the exit code of the most recent command in a shell script) and if it was anything other than 0, reports an error (an exit code of 0 generally refers to success). As ...


4

Well... The most simple script, I cam write: /usr/bin/wget "www.example.com" --timeout 30 -O - 2>/dev/null | grep "Normal operation string" || echo "The site is down" | /usr/bin/mail -v -s "Site is down" your@e-mail.address Add it to cron as: * * * * * /usr/bin/wget "www.example.com" --timeout 30 -O - 2>/dev/null | grep "Normal operation string" ...


4

Amazon now has an SNS notification service that supports SMS text messages: http://aws.amazon.com/sns/ I hope this will help someone who has found this question recently via a search engine. Create the SNS subscription in the "US East" region or you will not see the "SMS" option in the protocol dropdown. After doing this, the subscription will be ...


4

Configuring RSA/IMT board would allow you to monitor Hardware events. Configuring RSA II: Configure RSA Board *PDF IBM Director can as well be configured to forward events even without the usage of IBM Director Manager, but this requires Tivoli Monitoring to capture Director events.


4

You don't use Nginx for this. Rather, you use some sort of log processing package to watch the nginx error log for 504s and notify you when it sees one. Logstash is a very popular and very capable log processing package - it can be easily configured to consume messages out of your error log (using the file input), look for a certain error string (using the ...


4

This should be doable using a short shell script, and program status testing. Something like check program countCelery with path /usr/local/bin/countCelery.sh with timeout 600 seconds: if status != 0 alert with a shell script like: #!/bin/bash celery_count=$(pgrep -c Celery) if [[ $celery_count -gt 4 ]]; then exit 1 else: exit 0 fi


4

If you're running HP servers, use either the HP-specific build of ESXi or install the HP Management Agents Offline Bundle and offline tools bundle for ESXi after the fact. The bundles are also available here. This at least gives you some visibility into the system from the vSphere client perspective. It will detect drive and storage system health for ...


4

Process Monitor, also from SysInternals can do that: http://technet.microsoft.com/en-us/sysinternals/bb896645.aspx By default, the command line isn't shown, but if you right-click on the column headers and click on "Select Columns", you can add "Command Line" to the list of displayed columns. Edit: If you haven't ever used Process Monitor before, it ...


3

It would require modifying the client application, but you could add calls to it to post and watch calls to the server and count to the response. This would provide you with a means to establish baselines and establish machines that have a pattern of problems, or whether a machine or the application is, in-fact, unresponsive. Graphite is especially good ...


3

You can define a custom object variable, something like this: define host { use generic-host host_name server1 alias server1.gertvandijk.net address 10.1.2.3 _wan_address 1.2.3.4 } then call it as $_HOSTWAN_ADDRESS$ macro: define ...


3

Possibly change the email addresses for alerts to go to email->text gateways instead. IE: Verizon wireless is #######@vtext.com and AT&T is #######@mms.att.net. In fact, here is a list of SMS gateways: http://en.wikipedia.org/wiki/List_of_SMS_gateways


3

Ok, you have a couple of fundamental misunderstandings here. First, EC2 compute units are not analogous to the number of CPU cores. Rather, they're an abstracted representation of the relative CPU performance available. The m1.large has two CPU cores available. Second, when the load average number exceeds the number of cores available, generally speaking, ...


3

OK. Click on Services->SNMP, enable the SNMP server, set a community string, and Bob's your uncle.


3

I hate to directly contradict another poster, but NAGIOS can do exactly that: what you're looking for is referred to in the documentation as notification escalations. As the doco says, Notifications are escalated if and only if one or more escalation definitions matches the current notification that is being sent out. If a host or service ...


3

I don't there is one software that does it all. I'm very much a "if it ain't broke don't fix it" kind of guy, and only prefer to install security updates. For Windows WSUS gets it done, for Linux there are tools for each distribution's package management. It's also typical for my to setup a Nessus server and do some regular scans for vulnerabilities.


3

It might be a bit overkill for what you want but you could look into Nagios. It has a whole slew of features.


3

Going to have to disagree with the previous users. I'd recommend spacewalk: http://spacewalk.redhat.com/ It's the open source version of Red Hat Satellite Server. If you are not running Linux, please disregard.


3

You can define detailed configurations to tell Nagios every detail about the check for a service. Look up the check_interval and retry_interval config options, and while you are at it, learn about time periods in general.


3

There are two possible solutions I've found. Both are not optimal but work in my scenario: For every subservice, only check if the PID file exists and assume the service is online if the file exists. As before, the main service sympa depends on the subservices: check process sympa with pidfile /var/run/sympa/sympa.pid start program = ...


3

As I am a long time Munin user, I can give you few quick thoughts on using it: using a SSH tunnel (is that illegal as well?) to get behind the firewall. The obvious port forward, you mentioned. If you have SSH of the monitored machines already exposed, you can use Munin's SSH support to get to those. You can use one very light-weight node behind firewall, ...


2

Here https://www.safaribooksonline.com/library/view/cacti-08/9781849513920/ch10s05.html there is some documentation about installing and configure thold with some screenshots. I haven't never used it but I understand that you can only watch in the cacti homepage which treeshold has been reached. In my opinion cacti is a useful tool for capacity planning but ...



Only top voted, non community-wiki answers of a minimum length are eligible