Where did my history go?

[mikeC79]

mikeC79 [http://community.zenoss.org/people/mikeC79] created the discussion

"Where did my history go?"

To view the discussion, visit: http://community.zenoss.org/message/67685#67685

--------------------------------------------------------------
I am running Zenoss core 3.2.1, and if I look at my event history, it only shows events as far back as 24 hours. I have the "first seen" date set to 1 week ago, and "Delete Historical Events Older Than (days)" is set to "0".

Am I missing something?
--------------------------------------------------------------

Reply to this message by replying to this email -or- go to the discussion on Zenoss Community
[http://community.zenoss.org/message/67685#67685]

Start a new discussion in zenoss-users by email
[discussions-community-forums-zenoss--***@community.zenoss.org] -or- at Zenoss Community
[http://community.zenoss.org/choose-container!input.jspa?contentType=1&containerType=14&container=2003]

[josh josh]

josh josh [http://community.zenoss.org/people/jdd0x01] created the discussion

"Re: Where did my history go?"

To view the discussion, visit: http://community.zenoss.org/message/67672#67672

--------------------------------------------------------------
Have alerts actually occurred for there to be a history for that particular device? Have you verified that all the severities for the events are checked for the machine's events in the viewer?

For what its worth, I have also noticied inconsistencies within the interface for viewing events as well. I have not tried to narrow down where in the code it is possibly wrong, however.
--------------------------------------------------------------

Reply to this message by replying to this email -or- go to the discussion on Zenoss Community
[http://community.zenoss.org/message/67672#67672]

Start a new discussion in zenoss-users by email
[discussions-community-forums-zenoss--***@community.zenoss.org] -or- at Zenoss Community
[http://community.zenoss.org/choose-container!input.jspa?contentType=1&containerType=14&container=2003]

[mikeC79]

mikeC79 [http://community.zenoss.org/people/mikeC79] created the discussion

"Re: Where did my history go?"

To view the discussion, visit: http://community.zenoss.org/message/67689#67689

--------------------------------------------------------------
I have had multiple critical alerts that occured over the weekend (two days ago)  and I did confirm that all severity levels are checked.
--------------------------------------------------------------

Reply to this message by replying to this email -or- go to the discussion on Zenoss Community
[http://community.zenoss.org/message/67689#67689]

Start a new discussion in zenoss-users by email
[discussions-community-forums-zenoss--***@community.zenoss.org] -or- at Zenoss Community
[http://community.zenoss.org/choose-container!input.jspa?contentType=1&containerType=14&container=2003]

[josh josh]

josh josh [http://community.zenoss.org/people/jdd0x01] created the discussion

"Re: Where did my history go?"

To view the discussion, visit: http://community.zenoss.org/message/67673#67673

--------------------------------------------------------------
Do you see those criticals in the events.history table in the Zenoss MySQL DB?
--------------------------------------------------------------

Reply to this message by replying to this email -or- go to the discussion on Zenoss Community
[http://community.zenoss.org/message/67673#67673]

Start a new discussion in zenoss-users by email
[discussions-community-forums-zenoss--***@community.zenoss.org] -or- at Zenoss Community
[http://community.zenoss.org/choose-container!input.jspa?contentType=1&containerType=14&container=2003]

[mikeC79]

mikeC79 [http://community.zenoss.org/people/mikeC79] created the discussion

"Re: Where did my history go?"

To view the discussion, visit: http://community.zenoss.org/message/67690#67690

--------------------------------------------------------------
I'd be happy to check, but I don't know how to go about looking for that.
--------------------------------------------------------------

Reply to this message by replying to this email -or- go to the discussion on Zenoss Community
[http://community.zenoss.org/message/67690#67690]

Start a new discussion in zenoss-users by email
[discussions-community-forums-zenoss--***@community.zenoss.org] -or- at Zenoss Community
[http://community.zenoss.org/choose-container!input.jspa?contentType=1&containerType=14&container=2003]

[josh josh]

josh josh [http://community.zenoss.org/people/jdd0x01] created the discussion

"Re: Where did my history go?"

To view the discussion, visit: http://community.zenoss.org/message/67674#67674

--------------------------------------------------------------
You would log into the shell via SSH where Zenoss is running. From there, as the zenoss user, run +mysql -uroot -p+ and put in your MySQL root password (you should have this from when you installed and setup the server). Once in you can do a +show databases;+ command to see what databases are listed. By default, Zenoss uses the events database. After that, type +use events;+ Running +show tables+ should get you a listing of the tables, look for the history table and type this: +select * from history where device = +'device'+ and firstTime > '2012-08-05' order by lastTime\G;+

Here are the commands step by step:
* Login to Zenoss server as zenoss user
* +mysql -uroot -p+ - put in your MySQL password
* +show databases;+
* ++use events; <- if your default Zenoss DB is events+
+
* +++show tables+;
++
* +++select * from history where device = 'device' and firstTime > '2012-08-04' order by lastTime\G;+
++

The last command should print out some lines showing you events that occurred on or after 8/4 through today for that specific device...+++
+++
--------------------------------------------------------------

Reply to this message by replying to this email -or- go to the discussion on Zenoss Community
[http://community.zenoss.org/message/67674#67674]

Start a new discussion in zenoss-users by email
[discussions-community-forums-zenoss--***@community.zenoss.org] -or- at Zenoss Community
[http://community.zenoss.org/choose-container!input.jspa?contentType=1&containerType=14&container=2003]

[mikeC79]

mikeC79 [http://community.zenoss.org/people/mikeC79] created the discussion

"Re: Where did my history go?"

To view the discussion, visit: http://community.zenoss.org/message/67692#67692

--------------------------------------------------------------
Thanks for the detailed instructions!

I ran it, and I got "empty set". I reran the following on devices where there are current history events, and some of them returned info, and others nothing.

select * from history where device = 'DEVICENAME';
--------------------------------------------------------------

Reply to this message by replying to this email -or- go to the discussion on Zenoss Community
[http://community.zenoss.org/message/67692#67692]

Start a new discussion in zenoss-users by email
[discussions-community-forums-zenoss--***@community.zenoss.org] -or- at Zenoss Community
[http://community.zenoss.org/choose-container!input.jspa?contentType=1&containerType=14&container=2003]

[josh josh]

josh josh [http://community.zenoss.org/people/jdd0x01] created the discussion

"Re: Where did my history go?"

To view the discussion, visit: http://community.zenoss.org/message/67675#67675

--------------------------------------------------------------
No problem :)

Ah, this sounds like they were deleted. Did you acknowledge the events or delete them?
--------------------------------------------------------------

Reply to this message by replying to this email -or- go to the discussion on Zenoss Community
[http://community.zenoss.org/message/67675#67675]

Start a new discussion in zenoss-users by email
[discussions-community-forums-zenoss--***@community.zenoss.org] -or- at Zenoss Community
[http://community.zenoss.org/choose-container!input.jspa?contentType=1&containerType=14&container=2003]

[mikeC79]

mikeC79 [http://community.zenoss.org/people/mikeC79] created the discussion

"Re: Where did my history go?"

To view the discussion, visit: http://community.zenoss.org/message/67695#67695

--------------------------------------------------------------
I never deleted them, and they auto cleared when the problem was resolved. Thanks for your help. I'll keep an eye on it, and see what happens next time.
--------------------------------------------------------------

Reply to this message by replying to this email -or- go to the discussion on Zenoss Community
[http://community.zenoss.org/message/67695#67695]

Start a new discussion in zenoss-users by email
[discussions-community-forums-zenoss--***@community.zenoss.org] -or- at Zenoss Community
[http://community.zenoss.org/choose-container!input.jspa?contentType=1&containerType=14&container=2003]

[josh josh]

josh josh [http://community.zenoss.org/people/jdd0x01] created the discussion

"Re: Where did my history go?"

To view the discussion, visit: http://community.zenoss.org/message/67706#67706

--------------------------------------------------------------
Sounds good, sorry I couldnt be of more assistance. Once I get time I plan to research the loss of events because I have noticed it as well on certain events/devices - almost certain there is a bug in there somewhere.
--------------------------------------------------------------

Reply to this message by replying to this email -or- go to the discussion on Zenoss Community
[http://community.zenoss.org/message/67706#67706]

Start a new discussion in zenoss-users by email
[discussions-community-forums-zenoss--***@community.zenoss.org] -or- at Zenoss Community
[http://community.zenoss.org/choose-container!input.jspa?contentType=1&containerType=14&container=2003]

[jmp242]

jmp242 [http://community.zenoss.org/people/jmp242] created the discussion

"Re: Where did my history go?"

To view the discussion, visit: http://community.zenoss.org/message/67713#67713

--------------------------------------------------------------
Events are supposed to be cleaned up if you enable that, but by "older than x days" sort of setting. I don't delete events myself. Maybe a starting point to look for bugs?

--
James Pulver
ZCA Member
LEPP Computer Group
Cornell University
--------------------------------------------------------------

Reply to this message by replying to this email -or- go to the discussion on Zenoss Community
[http://community.zenoss.org/message/67713#67713]

Start a new discussion in zenoss-users by email
[discussions-community-forums-zenoss--***@community.zenoss.org] -or- at Zenoss Community
[http://community.zenoss.org/choose-container!input.jspa?contentType=1&containerType=14&container=2003]

[mikeC79]

mikeC79 [http://community.zenoss.org/people/mikeC79] created the discussion

"Re: Where did my history go?"

To view the discussion, visit: http://community.zenoss.org/message/67703#67703

--------------------------------------------------------------
Just to confirm, where do I make the settings change to "delete for older than X". I would prefer to keep all events based on the small size of our environment.

I checked again this morning, and as of 8:30am, the oldest event is from yesterday at 4am.
--------------------------------------------------------------

Reply to this message by replying to this email -or- go to the discussion on Zenoss Community
[http://community.zenoss.org/message/67703#67703]

Start a new discussion in zenoss-users by email
[discussions-community-forums-zenoss--***@community.zenoss.org] -or- at Zenoss Community
[http://community.zenoss.org/choose-container!input.jspa?contentType=1&containerType=14&container=2003]

[dpetzel]

dpetzel [http://community.zenoss.org/people/dpetzel] created the discussion

"Re: Where did my history go?"

To view the discussion, visit: http://community.zenoss.org/message/67705#67705

--------------------------------------------------------------
Events --> Event Manager --> Delete Historical Events Older Than (days)

Setting to 0 should prevent items from being deleted
--------------------------------------------------------------

Reply to this message by replying to this email -or- go to the discussion on Zenoss Community
[http://community.zenoss.org/message/67705#67705]

Start a new discussion in zenoss-users by email
[discussions-community-forums-zenoss--***@community.zenoss.org] -or- at Zenoss Community
[http://community.zenoss.org/choose-container!input.jspa?contentType=1&containerType=14&container=2003]

[mikeC79]

mikeC79 [http://community.zenoss.org/people/mikeC79] created the discussion

"Re: Where did my history go?"

To view the discussion, visit: http://community.zenoss.org/message/67721#67721

--------------------------------------------------------------
ok, if that's the only spot, then I should be good as I have it set to "0".
--------------------------------------------------------------

Reply to this message by replying to this email -or- go to the discussion on Zenoss Community
[http://community.zenoss.org/message/67721#67721]

Start a new discussion in zenoss-users by email
[discussions-community-forums-zenoss--***@community.zenoss.org] -or- at Zenoss Community
[http://community.zenoss.org/choose-container!input.jspa?contentType=1&containerType=14&container=2003]

[mikeC79]

mikeC79 [http://community.zenoss.org/people/mikeC79] created the discussion

"Re: Where did my history go?"

To view the discussion, visit: http://community.zenoss.org/message/67723#67723

--------------------------------------------------------------
I started playing with the first seen and last seen dates, and my older events started to come up. The problem is, they dont seem to correlate with the dates chosen. I would expect that any events inbetween my first seen and last seen would show, is this correct?
Loading Image... Loading Image...
--------------------------------------------------------------

Reply to this message by replying to this email -or- go to the discussion on Zenoss Community
[http://community.zenoss.org/message/67723#67723]

Start a new discussion in zenoss-users by email
[discussions-community-forums-zenoss--***@community.zenoss.org] -or- at Zenoss Community
[http://community.zenoss.org/choose-container!input.jspa?contentType=1&containerType=14&container=2003]

[mikeC79]

mikeC79 [http://community.zenoss.org/people/mikeC79] created the discussion

"Re: Where did my history go?"

To view the discussion, visit: http://community.zenoss.org/message/67724#67724

--------------------------------------------------------------
I jsut reread the manual and my understanding of the date fields was incorrect. ( http://community.zenoss.org/docs/DOC-10689 http://community.zenoss.org/docs/DOC-10689)

I simple cleared all filters and all of my events showed up. Sorry for the misunderstanding, but thank you to all of you that helped.
--------------------------------------------------------------

Reply to this message by replying to this email -or- go to the discussion on Zenoss Community
[http://community.zenoss.org/message/67724#67724]

Start a new discussion in zenoss-users by email
[discussions-community-forums-zenoss--***@community.zenoss.org] -or- at Zenoss Community
[http://community.zenoss.org/choose-container!input.jspa?contentType=1&containerType=14&container=2003]

[josh josh]

josh josh [http://community.zenoss.org/people/jdd0x01] created the discussion

"Re: Where did my history go?"

To view the discussion, visit: http://community.zenoss.org/message/67717#67717

--------------------------------------------------------------
Actually thats logically correct...

You are looking at all events where they were first seen on 7/29 or later and all events who were last seen on 7/31 or later. Thats how the logic appears to work..
--------------------------------------------------------------

Reply to this message by replying to this email -or- go to the discussion on Zenoss Community
[http://community.zenoss.org/message/67717#67717]

Start a new discussion in zenoss-users by email
[discussions-community-forums-zenoss--***@community.zenoss.org] -or- at Zenoss Community
[http://community.zenoss.org/choose-container!input.jspa?contentType=1&containerType=14&container=2003]

[josh josh]

josh josh [http://community.zenoss.org/people/jdd0x01] created the discussion

"Re: Where did my history go?"

To view the discussion, visit: http://community.zenoss.org/message/67718#67718

--------------------------------------------------------------
Ah yeah, cool that you found this, I needed this as well ;)
--------------------------------------------------------------

Reply to this message by replying to this email -or- go to the discussion on Zenoss Community
[http://community.zenoss.org/message/67718#67718]

Start a new discussion in zenoss-users by email
[discussions-community-forums-zenoss--***@community.zenoss.org] -or- at Zenoss Community
[http://community.zenoss.org/choose-container!input.jspa?contentType=1&containerType=14&container=2003]