Zenoss Events must be closed manually, Auto Clear not working

[Luiz Maia]

Luiz Maia [http://community.zenoss.org/people/lcm] created the discussion

"Zenoss Events must be closed manually, Auto Clear not working"

To view the discussion, visit: http://community.zenoss.org/message/70465#70465

--------------------------------------------------------------
Hi guys,

some infos first:

|   Software Component Versions  | |     |
     

| Zenoss (http://www.zenoss.com) | Zenoss 3.1.0 |
| OS (http://www.tldp.org) | Linux (i686) 2.6.18 (Linux negro 2.6.18-308.8.2.el5 #1 SMP Tue Jun 12 09:57:26 EDT 2012 i686) |
| Zope (http://www.zope.org) | Zope 2.12.1 |
| Python (http://www.python.org) | Python 2.6.2ts |
| Database (http://www.mysql.com) | MySQL 5.0.95 (Ver 5.0.95) |
| RRD (http://oss.oetiker.ch/rrdtool) | RRDtool 1.3.9 |
| Twisted (http:///twistedmatrix.com/trac) | Twisted 8.1.0 |
| NetSnmp (http://net-snmp.sourceforge.net) | NetSnmp 5.3.2 |
| PyNetSnmp (http://www.zenoss.com) | PyNetSnmp 0.28.14 |
| WMI (http://www.zenoss.com) | Wmi 1.3.13 |


About 15 days ago i was trying to ger a availability report, but my DB was huge so it takes hours to collect this information. Reading this forum and wiki i do some mysql tune and used a tool to remove old and not important events from mysql, so i think i messe up my zenoss. :(

My events don't get clear, i can ping throw zenoss interface but my critical event(ping) keeps on list and the device status is DOWN. I need to manually close the event to get the device UP.

Any clues?

Thanks,

Luiz Maia
--------------------------------------------------------------

Reply to this message by replying to this email -or- go to the discussion on Zenoss Community
[http://community.zenoss.org/message/70465#70465]

Start a new discussion in zenoss-users by email
[discussions-community-forums-zenoss--***@community.zenoss.org] -or- at Zenoss Community
[http://community.zenoss.org/choose-container!input.jspa?contentType=1&containerType=14&container=2003]

[Luiz Maia]

Luiz Maia [http://community.zenoss.org/people/lcm] created the discussion

"Re: Zenoss Events must be closed manually, Auto Clear not working"

To view the discussion, visit: http://community.zenoss.org/message/70466#70466

--------------------------------------------------------------
More infos:
|
| Device: |   OD-CFTV-01 (http://10.1.1.100:8080/zport/dmd/Devices/Ping/devices/10.1.1.73/devicedetail)  |
| Component: |   |
| Event Class: |   /Status/Ping (http://10.1.1.100:8080/zport/dmd/Events/Status/Ping)  |
| Status: | 0 |
| Start Time: | 2012/12/11 17:28:48.000 |
| Stop Time: | 2012/12/11 17:28:48.000 |
| Count: | 1 |
|
|
Hide details |
|
| prodState | 1000 |
| stateChange | 2012/12/11 17:29:23.000 |
| facility | unknown |
| eventClassKey |
|
| agent | zenping |
| dedupid | 10.1.1.73||/Status/Ping||5|ip 10.1.1.73 is down |
| manager | negro |
| Location | /Odonto |
| ownerid |
|
| firstTime | 2012/12/11 17:28:48.000 |
| eventClass | /Status/Ping |
| message | ip 10.1.1.73 is down |
| DevicePriority | 3 |
| suppid |
|
| monitor | localhost |
| priority | -1 |
| DeviceClass | /Ping |
| eventState | 0 |
| evid | 77315a54-2f3c-494e-8677-880dc5694d4b |
| eventClassMapping |
|
| component |
|
| clearid | 98fa8d32-aed8-42af-bd74-8c90e78b0182 |
| DeviceGroups | | |
| eventGroup | Ping |
| device | 10.1.1.73 |
| severity | 5 |
| count | 1 |
| ntevid | 0 |
| summary | ip 10.1.1.73 is down |
| eventKey |
|
| lastTime | 2012/12/11 17:28:48.000 |
| ipAddress | 10.1.1.73 |
| Systems | | |
|
|
----
h2. LOG
|
|
|
| | | ++ |
| ++ |
| ++ | | ++ |
| ++ |
| ++ |
|
|
|
| 2012/12/11 17:29:23.000 admin said: | auto cleared |
|


I found this on event info, right up says "auto cleared", but its not cleared.
any clues?
--------------------------------------------------------------

Reply to this message by replying to this email -or- go to the discussion on Zenoss Community
[http://community.zenoss.org/message/70466#70466]

Start a new discussion in zenoss-users by email
[discussions-community-forums-zenoss--***@community.zenoss.org] -or- at Zenoss Community
[http://community.zenoss.org/choose-container!input.jspa?contentType=1&containerType=14&container=2003]

[Luiz Maia]

Luiz Maia [http://community.zenoss.org/people/lcm] created the discussion

"Re: Zenoss Events must be closed manually, Auto Clear not working"

To view the discussion, visit: http://community.zenoss.org/message/70450#70450

--------------------------------------------------------------
i apreciate some help here, please?
--------------------------------------------------------------

Reply to this message by replying to this email -or- go to the discussion on Zenoss Community
[http://community.zenoss.org/message/70450#70450]

Start a new discussion in zenoss-users by email
[discussions-community-forums-zenoss--***@community.zenoss.org] -or- at Zenoss Community
[http://community.zenoss.org/choose-container!input.jspa?contentType=1&containerType=14&container=2003]

[jmp242]

jmp242 [http://community.zenoss.org/people/jmp242] created the discussion

"Re: Zenoss Events must be closed manually, Auto Clear not working"

To view the discussion, visit: http://community.zenoss.org/message/70508#70508

--------------------------------------------------------------
Is there any clear event? I would see if there is an event that shows the device up, maybe in device history. Usually something not autoclearing is due to a problem with correlating the clear event with the problem event.

If no clear event shows up AT ALL, then something weird is going on - check transforms etc.

--
James Pulver
ZCA Member
LEPP Computer Group
Cornell University
--------------------------------------------------------------

Reply to this message by replying to this email -or- go to the discussion on Zenoss Community
[http://community.zenoss.org/message/70508#70508]

Start a new discussion in zenoss-users by email
[discussions-community-forums-zenoss--***@community.zenoss.org] -or- at Zenoss Community
[http://community.zenoss.org/choose-container!input.jspa?contentType=1&containerType=14&container=2003]

[Luiz Maia]

Luiz Maia [http://community.zenoss.org/people/lcm] created the discussion

"Re: Zenoss Events must be closed manually, Auto Clear not working"

To view the discussion, visit: http://community.zenoss.org/message/70701#70701

--------------------------------------------------------------
thanks for the answer,

i can't see a clear event throw zenoss interface, so i did a select on mysql:

+SELECT * FROM events.history+
+where history.severity=0 ;+

this command returned NO lines, so i don't have a clear event on my history database.

do you know how can idiscover the problem?
--------------------------------------------------------------

Reply to this message by replying to this email -or- go to the discussion on Zenoss Community
[http://community.zenoss.org/message/70701#70701]

Start a new discussion in zenoss-users by email
[discussions-community-forums-zenoss--***@community.zenoss.org] -or- at Zenoss Community
[http://community.zenoss.org/choose-container!input.jspa?contentType=1&containerType=14&container=2003]

[Luiz Maia]

Luiz Maia [http://community.zenoss.org/people/lcm] created the discussion

"Re: Zenoss Events must be closed manually, Auto Clear not working"

To view the discussion, visit: http://community.zenoss.org/message/70702#70702

--------------------------------------------------------------
i've checker the Transform button on events an have nothing inside, no one line.

anything else?
--------------------------------------------------------------

Reply to this message by replying to this email -or- go to the discussion on Zenoss Community
[http://community.zenoss.org/message/70702#70702]

Start a new discussion in zenoss-users by email
[discussions-community-forums-zenoss--***@community.zenoss.org] -or- at Zenoss Community
[http://community.zenoss.org/choose-container!input.jspa?contentType=1&containerType=14&container=2003]

[Luiz Maia]

Luiz Maia [http://community.zenoss.org/people/lcm] created the discussion

"Re: Zenoss Events must be closed manually, Auto Clear not working"

To view the discussion, visit: http://community.zenoss.org/message/70703#70703

--------------------------------------------------------------
more info, i've checked logs and found this:
2012-12-26 16:20:15,742 INFO zen.ZenActions: Processed 0 commands in 0.000049
2012-12-26 16:20:15,787 INFO zen.Events: Invalid statement: DELETE FROM status WHERE clearid IS NOT NULL
2012-12-26 16:20:15,787 ERROR zen.Events: (1062, "Duplicate entry 'c44f6c17-0943-4e04-b55b-3fcae59aa630' for key 1")
2012-12-26 16:20:15,787 ERROR zen.ZenActions: unexpected exception
Traceback (most recent call last):
  File "/opt/zenoss/Products/ZenEvents/zenactions.py", line 636, in runCycle
    self.mainbody()
  File "/opt/zenoss/Products/ZenEvents/zenactions.py", line 629, in mainbody
    self.heartbeatEvents()
  File "/opt/zenoss/Products/ZenEvents/zenactions.py", line 573, in heartbeatEvents
    severity=Event.Clear))
  File "/opt/zenoss/Products/ZenEvents/zenactions.py", line 677, in sendEvent
    self.dmd.ZenEventManager.sendEvent(evt)
  File "/opt/zenoss/Products/ZenEvents/MySqlSendEvent.py", line 151, in sendEvent
    evid = self.doSendEvent(event)
  File "/opt/zenoss/Products/ZenEvents/MySqlSendEvent.py", line 209, in doSendEvent
    execute(curs, delete)
  File "/opt/zenoss/Products/ZenEvents/MySqlSendEvent.py", line 51, in execute
    raise ex
IntegrityError: (1062, "Duplicate entry 'c44f6c17-0943-4e04-b55b-3fcae59aa630' for key 1")
--------------------------------------------------------------

Reply to this message by replying to this email -or- go to the discussion on Zenoss Community
[http://community.zenoss.org/message/70703#70703]

Start a new discussion in zenoss-users by email
[discussions-community-forums-zenoss--***@community.zenoss.org] -or- at Zenoss Community
[http://community.zenoss.org/choose-container!input.jspa?contentType=1&containerType=14&container=2003]

[Luiz Maia]

Luiz Maia [http://community.zenoss.org/people/lcm] created the discussion

"Re: Zenoss Events must be closed manually, Auto Clear not working"

To view the discussion, visit: http://community.zenoss.org/message/70704#70704

--------------------------------------------------------------
Guys,

I think the problem is solved.

i saw on status tables the evid 'c44f6c17-0943-4e04-b55b-3fcae59aa630' but i cant delete it, so i found a trigger on this tables, this trigger create a event o history tables. so i found a event on history table with the same evid. I deleted this event on history tables than the event on status table.

now my events get auto cleared.

thaks!
--------------------------------------------------------------

Reply to this message by replying to this email -or- go to the discussion on Zenoss Community
[http://community.zenoss.org/message/70704#70704]

Start a new discussion in zenoss-users by email
[discussions-community-forums-zenoss--***@community.zenoss.org] -or- at Zenoss Community
[http://community.zenoss.org/choose-container!input.jspa?contentType=1&containerType=14&container=2003]