v3.2.1 and disabling the alerting of an event (cleaning up false positives)

[me2]

me2 [http://community.zenoss.org/people/me2] created the discussion

"v3.2.1 and disabling the alerting of an event (cleaning up false positives)"

To view the discussion, visit: http://community.zenoss.org/message/63967#63967

--------------------------------------------------------------
how would I disable the alerting of

componet..........zenmodeler
event class......../cmd/fail/
connection was refused by the other side 111 connection refused.

I think this is the ssh client test but not 100 % sure.

I can either disable the polling or the alerting, whatever is easier.

I am still a newb and all help is appreciated?

thanks,

Jay...aka me2
--------------------------------------------------------------

Reply to this message by replying to this email -or- go to the discussion on Zenoss Community
[http://community.zenoss.org/message/63967#63967]

Start a new discussion in zenoss-users by email
[discussions-community-forums-zenoss--***@community.zenoss.org] -or- at Zenoss Community
[http://community.zenoss.org/choose-container!input.jspa?contentType=1&containerType=14&container=2003]

[jmp242]

jmp242 [http://community.zenoss.org/people/jmp242] created the discussion

"Re: v3.2.1 and disabling the alerting of an event (cleaning up false positives)"

To view the discussion, visit: http://community.zenoss.org/message/63987#63987

--------------------------------------------------------------
Well, what Device Class is this device in? It looks like you may be trying to use SSH to connect to this device, but don't have proper credentials or firewall rules etc...

--
James Pulver
ZCA Member
LEPP Computer Group
Cornell University
--------------------------------------------------------------

Reply to this message by replying to this email -or- go to the discussion on Zenoss Community
[http://community.zenoss.org/message/63987#63987]

Start a new discussion in zenoss-users by email
[discussions-community-forums-zenoss--***@community.zenoss.org] -or- at Zenoss Community
[http://community.zenoss.org/choose-container!input.jspa?contentType=1&containerType=14&container=2003]

[me2]

me2 [http://community.zenoss.org/people/me2] created the discussion

"Re: v3.2.1 and disabling the alerting of an event (cleaning up false positives)"

To view the discussion, visit: http://community.zenoss.org/message/64002#64002

--------------------------------------------------------------
I had it in discovered, and I thought I read in old support notes written by you or someone else that we shouldnt keep devices in discovered. So I moved them into a newly created class. I am waiting to see if the errors go away.

Yes there is a firewall infront and they are blocked because they dont need to find a listening service on tcp 22.

I am also wondering what the "gay snow flake alert " is for and will it go away. Not red so cant be too bad.

thanks for your response!
--------------------------------------------------------------

Reply to this message by replying to this email -or- go to the discussion on Zenoss Community
[http://community.zenoss.org/message/64002#64002]

Start a new discussion in zenoss-users by email
[discussions-community-forums-zenoss--***@community.zenoss.org] -or- at Zenoss Community
[http://community.zenoss.org/choose-container!input.jspa?contentType=1&containerType=14&container=2003]

[jmp242]

jmp242 [http://community.zenoss.org/people/jmp242] created the discussion

"Re: v3.2.1 and disabling the alerting of an event (cleaning up false positives)"

To view the discussion, visit: http://community.zenoss.org/message/63991#63991

--------------------------------------------------------------
Ok, well first, the gray snow flake isn't an alert - it just means it's a component template. Second, what modeling plugins and perf templates did you assign to the new Device Class?

--
James Pulver
ZCA Member
LEPP Computer Group
Cornell University
--------------------------------------------------------------

Reply to this message by replying to this email -or- go to the discussion on Zenoss Community
[http://community.zenoss.org/message/63991#63991]

Start a new discussion in zenoss-users by email
[discussions-community-forums-zenoss--***@community.zenoss.org] -or- at Zenoss Community
[http://community.zenoss.org/choose-container!input.jspa?contentType=1&containerType=14&container=2003]

[me2]

me2 [http://community.zenoss.org/people/me2] created the discussion

"Re: v3.2.1 and disabling the alerting of an event (cleaning up false positives)"

To view the discussion, visit: http://community.zenoss.org/message/64004#64004

--------------------------------------------------------------
ok, I am still a newb but learning.

My monitoring templates, carried over not because I was efficent in created them in one place or associated it with a class... but becuase when itially done a couple months ago I did it per device. As I grow I will figure out how to work more efficiently.

the modular plugins are ..4 selected
zenoss.snmp new device map
                           device map
                           interface map
                           routemap
--------------------------------------------------------------

Reply to this message by replying to this email -or- go to the discussion on Zenoss Community
[http://community.zenoss.org/message/64004#64004]

Start a new discussion in zenoss-users by email
[discussions-community-forums-zenoss--***@community.zenoss.org] -or- at Zenoss Community
[http://community.zenoss.org/choose-container!input.jspa?contentType=1&containerType=14&container=2003]

[jmp242]

jmp242 [http://community.zenoss.org/people/jmp242] created the discussion

"Re: v3.2.1 and disabling the alerting of an event (cleaning up false positives)"

To view the discussion, visit: http://community.zenoss.org/message/63992#63992

--------------------------------------------------------------
Ok... The question however is WHAT ARE the existing perf templates? Is one of them trying to use SSH?

--
James Pulver
ZCA Member
LEPP Computer Group
Cornell University
--------------------------------------------------------------

Reply to this message by replying to this email -or- go to the discussion on Zenoss Community
[http://community.zenoss.org/message/63992#63992]

Start a new discussion in zenoss-users by email
[discussions-community-forums-zenoss--***@community.zenoss.org] -or- at Zenoss Community
[http://community.zenoss.org/choose-container!input.jspa?contentType=1&containerType=14&container=2003]

[me2]

me2 [http://community.zenoss.org/people/me2] created the discussion

"Re: v3.2.1 and disabling the alerting of an event (cleaning up false positives)"

To view the discussion, visit: http://community.zenoss.org/message/64005#64005

--------------------------------------------------------------
one of them apparently was under discovered, it must have identified it as a unix box with listening ssh. Zenoss doesnt have access to this interface on tcp 22, and didnt need to ever monitor it. The initial issue was how to stop it from even trying.

Since moved out of discovered the issue is fine.
--------------------------------------------------------------

Reply to this message by replying to this email -or- go to the discussion on Zenoss Community
[http://community.zenoss.org/message/64005#64005]

Start a new discussion in zenoss-users by email
[discussions-community-forums-zenoss--***@community.zenoss.org] -or- at Zenoss Community
[http://community.zenoss.org/choose-container!input.jspa?contentType=1&containerType=14&container=2003]

[Shane Scott]

Shane Scott [http://community.zenoss.org/people/hackman238] created the discussion

"Re: v3.2.1 and disabling the alerting of an event (cleaning up false positives)"

To view the discussion, visit: http://community.zenoss.org/message/64162#64162

--------------------------------------------------------------
me2:

Highlight the item, click the gear icon -> Monitoring and uncheck the box -> Ok. Next click gear icon -> Locking -> Lock from updates. This will rpevent Zenoss from flipping it back on.

--Shane
--------------------------------------------------------------

Reply to this message by replying to this email -or- go to the discussion on Zenoss Community
[http://community.zenoss.org/message/64162#64162]

Start a new discussion in zenoss-users by email
[discussions-community-forums-zenoss--***@community.zenoss.org] -or- at Zenoss Community
[http://community.zenoss.org/choose-container!input.jspa?contentType=1&containerType=14&container=2003]