Alert based on a few devices

[vitaly_il]

vitaly_il [http://community.zenoss.org/people/vitaly_il] created the discussion

"Alert based on a few devices"

To view the discussion, visit: http://community.zenoss.org/message/63706#63706

--------------------------------------------------------------
I want to activate alert based on a combination of events from a few devices.
There are 3 application server, and there is some process which should run on *one* of them. I.e., if there no such process at all,  Zenoss should send alert.
Is there simple way to do this?
I can think only about some event transform, but I'm not sure....

TIA,
Vitaly
--------------------------------------------------------------

Reply to this message by replying to this email -or- go to the discussion on Zenoss Community
[http://community.zenoss.org/message/63706#63706]

Start a new discussion in zenoss-users by email
[discussions-community-forums-zenoss--***@community.zenoss.org] -or- at Zenoss Community
[http://community.zenoss.org/choose-container!input.jspa?contentType=1&containerType=14&container=2003]

[huoohuoo]

huoohuoo [http://community.zenoss.org/people/huoohuoo] created the discussion

"Re: Alert based on a few devices"

To view the discussion, visit: http://community.zenoss.org/message/63696#63696

--------------------------------------------------------------
you can get the process list from a sever by poll in snmpget action , it's host resource mibs, so you will look up process name , so you can determine it .
--------------------------------------------------------------

Reply to this message by replying to this email -or- go to the discussion on Zenoss Community
[http://community.zenoss.org/message/63696#63696]

Start a new discussion in zenoss-users by email
[discussions-community-forums-zenoss--***@community.zenoss.org] -or- at Zenoss Community
[http://community.zenoss.org/choose-container!input.jspa?contentType=1&containerType=14&container=2003]

[vitaly_il]

vitaly_il [http://community.zenoss.org/people/vitaly_il] created the discussion

"Re: Alert based on a few devices"

To view the discussion, visit: http://community.zenoss.org/message/63697#63697

--------------------------------------------------------------
thank you!
Probably I didn't explain myself well: I have no problem to detect if process if run on specific server [in fact, it is not a process, but some  jboss thread. I detect it   based on jboss logs].

My problem is to combine events from few servers - I need to be alerted if there is no such process at all. If this process presents on one device -  such alert should be cleared.
--------------------------------------------------------------

Reply to this message by replying to this email -or- go to the discussion on Zenoss Community
[http://community.zenoss.org/message/63697#63697]

Start a new discussion in zenoss-users by email
[discussions-community-forums-zenoss--***@community.zenoss.org] -or- at Zenoss Community
[http://community.zenoss.org/choose-container!input.jspa?contentType=1&containerType=14&container=2003]

[jmp242]

jmp242 [http://community.zenoss.org/people/jmp242] created the discussion

"Re: Alert based on a few devices"

To view the discussion, visit: http://community.zenoss.org/message/63700#63700

--------------------------------------------------------------
That's not really simple to do. You'll probably need to look at event transforms...

--
James Pulver
ZCA Member
LEPP Computer Group
Cornell University
--------------------------------------------------------------

Reply to this message by replying to this email -or- go to the discussion on Zenoss Community
[http://community.zenoss.org/message/63700#63700]

Start a new discussion in zenoss-users by email
[discussions-community-forums-zenoss--***@community.zenoss.org] -or- at Zenoss Community
[http://community.zenoss.org/choose-container!input.jspa?contentType=1&containerType=14&container=2003]

[vitaly_il]

vitaly_il [http://community.zenoss.org/people/vitaly_il] created the discussion

"Re: Alert based on a few devices"

To view the discussion, visit: http://community.zenoss.org/message/63707#63707

--------------------------------------------------------------
thank you!

BTW, interesting that opposite task - i.e. alert when at least one of devices has specific event - is trivial and can be done using simple "alerting rule" filter.  But I have no idea how to "invert" my task :-(
--------------------------------------------------------------

Reply to this message by replying to this email -or- go to the discussion on Zenoss Community
[http://community.zenoss.org/message/63707#63707]

Start a new discussion in zenoss-users by email
[discussions-community-forums-zenoss--***@community.zenoss.org] -or- at Zenoss Community
[http://community.zenoss.org/choose-container!input.jspa?contentType=1&containerType=14&container=2003]