False Positive alerts on httpd monitoring

[Matthew Yeazel]

Matthew Yeazel [http://community.zenoss.org/people/myeazel] created the discussion

"Re: False Positive alerts on httpd monitoring"

To view the discussion, visit: http://community.zenoss.org/message/63875#63875

--------------------------------------------------------------
Did you ever find a solution to this? I just upgraded (through a fresh install) to 3.2.1 and we are experiencing the same issue. What is odd about our situation though is that only about half of the servers will do this. I ran around chasing the servers by deleting the process and clearing the alert and remodelling and got it down to about 20-30% of our servers but cannot figure out why it is doing it. Just curious, what do you have set in your snmpd.conf to monitor this process, if anything?
--------------------------------------------------------------

Reply to this message by replying to this email -or- go to the discussion on Zenoss Community
[http://community.zenoss.org/message/63875#63875]

Start a new discussion in zenoss-users by email
[discussions-community-forums-zenoss--***@community.zenoss.org] -or- at Zenoss Community
[http://community.zenoss.org/choose-container!input.jspa?contentType=1&containerType=14&container=2003]

[Shane Scott]

Shane Scott [http://community.zenoss.org/people/hackman238] created the discussion

"Re: False Positive alerts on httpd monitoring"

To view the discussion, visit: http://community.zenoss.org/message/64407#64407

--------------------------------------------------------------
Matt:

This is more reliable in v4.1.1, however, it still isn't 100%. Maybe a transform to qualify down events against an http service test first?

--Shane
--------------------------------------------------------------

Reply to this message by replying to this email -or- go to the discussion on Zenoss Community
[http://community.zenoss.org/message/64407#64407]

Start a new discussion in zenoss-users by email
[discussions-community-forums-zenoss--***@community.zenoss.org] -or- at Zenoss Community
[http://community.zenoss.org/choose-container!input.jspa?contentType=1&containerType=14&container=2003]

[Matthew Yeazel]

Matthew Yeazel [http://community.zenoss.org/people/myeazel] created the discussion

"Re: False Positive alerts on httpd monitoring"

To view the discussion, visit: http://community.zenoss.org/message/64418#64418

--------------------------------------------------------------
Thanks for the reply. I found that it was nearly 100% a false positive and we have other methods to determine when httpd is down so I just added a transform that drops events caused by the false-positive. Someday I will probably revisit this but for now, as long as I'm not getting 1000's of false positives a day, I'm happy. I will most likely upgrade to v4 as soon as its out of alpha or beta. Hopefully that will resolve some of my issues.
--------------------------------------------------------------

Reply to this message by replying to this email -or- go to the discussion on Zenoss Community
[http://community.zenoss.org/message/64418#64418]

Start a new discussion in zenoss-users by email
[discussions-community-forums-zenoss--***@community.zenoss.org] -or- at Zenoss Community
[http://community.zenoss.org/choose-container!input.jspa?contentType=1&containerType=14&container=2003]

[Shane Scott]

Shane Scott [http://community.zenoss.org/people/hackman238] created the discussion

"Re: False Positive alerts on httpd monitoring"

To view the discussion, visit: http://community.zenoss.org/message/64436#64436

--------------------------------------------------------------
Matt:

If anything can be said, Zenoss is persistent when persistence is unwanted. ;)

--Shane (Hackman238)
--------------------------------------------------------------

Reply to this message by replying to this email -or- go to the discussion on Zenoss Community
[http://community.zenoss.org/message/64436#64436]

Start a new discussion in zenoss-users by email
[discussions-community-forums-zenoss--***@community.zenoss.org] -or- at Zenoss Community
[http://community.zenoss.org/choose-container!input.jspa?contentType=1&containerType=14&container=2003]

[Chris Smith]

Chris Smith [http://community.zenoss.org/people/csmith] created the discussion

"Re: False Positive alerts on httpd monitoring"

To view the discussion, visit: http://community.zenoss.org/message/73500#73500

--------------------------------------------------------------
I've just implemented Zenoss 4.2.3 and I'm seeing this exact issue with one of our Windows servers. I can clearly see both instances of httpd running just fine but Zenoss does not agree. Does anyone have any insight? None of the posts I've read concerning this have resolved the issue.

Hoping the output of zenprocess on that device would shed some light but I'm not sure what I'm looking for.

2013-06-05 12:43:25,921 DEBUG zen.zenprocess: Starting PBDaemon initialization
2013-06-05 12:43:25,922 INFO zen.zenprocess: Connecting to localhost:8789
2013-06-05 12:43:25,923 DEBUG zen.pbclientfactory: Starting connection...
2013-06-05 12:43:25,923 DEBUG zen.zenprocess: Logging in as admin
2013-06-05 12:43:25,924 DEBUG zen.pbclientfactory: Connected
2013-06-05 12:43:25,924 DEBUG zen.pbclientfactory: Cancelling connect timeout
2013-06-05 12:43:25,924 DEBUG zen.pbclientfactory: Sending credentials
2013-06-05 12:43:25,927 DEBUG zen.pbclientfactory: Cancelling connect timeout
2013-06-05 12:43:25,927 INFO zen.zenprocess: Connected to ZenHub
2013-06-05 12:43:25,927 DEBUG zen.zenprocess: Setting up initial services: EventService, Products.ZenHub.services.ProcessConfig
2013-06-05 12:43:25,928 DEBUG zen.zenprocess: Chaining getInitialServices with d2
2013-06-05 12:43:25,928 DEBUG zen.pbclientfactory: pinging perspective
2013-06-05 12:43:25,930 DEBUG zen.zenprocess: Loaded service EventService from zenhub
2013-06-05 12:43:25,930 DEBUG zen.zenprocess: Loaded service Products.ZenHub.services.ProcessConfig from zenhub
2013-06-05 12:43:25,930 DEBUG zen.zenprocess: Queued event (total of 1) {'rcvtime': 1370457805.930604, 'severity': 0, 'component': 'zenprocess', 'agent': 'zenprocess', 'summary': 'started', 'manager': 'na-den-zen-01.meetingonecorp.local', 'device': 'localhost', 'eventClass': '/App/Start', 'monitor': 'localhost'}
2013-06-05 12:43:25,931 DEBUG zen.zenprocess: Sending 1 events, 0 perf events, 0 heartbeats
2013-06-05 12:43:25,931 DEBUG zen.zenprocess: Calling connected.
2013-06-05 12:43:25,932 DEBUG zen.collector.config: Heartbeat timeout set to 540s
2013-06-05 12:43:25,932 DEBUG zen.collector.scheduler: add task configLoader, <Products.ZenCollector.config.ConfigurationLoaderTask object at 0x5441a90> using 1200 second interval
2013-06-05 12:43:25,932 DEBUG zen.zenprocess: Performing periodic maintenance
2013-06-05 12:43:25,932 DEBUG zen.pbclientfactory: perspective ponged
2013-06-05 12:43:25,932 DEBUG zen.pbclientfactory: Cancelling ping timeout
2013-06-05 12:43:25,932 DEBUG zen.collector.scheduler: Task configLoader starting on 1200 second intervals
2013-06-05 12:43:25,933 DEBUG zen.collector.scheduler: Task configLoader changing state from IDLE to QUEUED
2013-06-05 12:43:25,934 DEBUG zen.collector.scheduler: Task configLoader changing state from QUEUED to RUNNING
2013-06-05 12:43:25,934 DEBUG zen.collector.config: configLoader gathering configuration
2013-06-05 12:43:25,934 DEBUG zen.collector.config: Fetching daemon configuration properties
2013-06-05 12:43:25,960 DEBUG zen.collector.scheduler: Task configLoader changing state from RUNNING to FETCHING_MISC_CONFIG
2013-06-05 12:43:25,960 DEBUG zen.zenprocess: Updated configCycleInterval preference to 360
2013-06-05 12:43:25,961 DEBUG zen.zenprocess: Changing config task interval from 20 to 360 minutes
2013-06-05 12:43:25,961 DEBUG zen.collector.scheduler: Stopping task configLoader, <Products.ZenCollector.config.ConfigurationLoaderTask object at 0x5441a90>
2013-06-05 12:43:25,961 DEBUG zen.collector.scheduler: call finished LoopingCall<1200>(CallableTask: configLoader, *(), **{}) : LoopingCall<1200>(CallableTask: configLoader, *(), **{})
2013-06-05 12:43:25,961 INFO zen.collector.scheduler: Detailed Task Statistics:
configLoader Current State: FETCHING_MISC_CONFIG Successful_Runs: 1 Failed_Runs: 0 Missed_Runs: 0


Detailed Task States:
configLoader State: RUNNING Total: 1 Total Elapsed: 0.0263 Min: 0.0263 Max: 0.0263 Mean: 0.0263 StdDev: 0.0000
configLoader State: QUEUED Total: 1 Total Elapsed: 0.0014 Min: 0.0014 Max: 0.0014 Mean: 0.0014 StdDev: 0.0000




2013-06-05 12:43:25,961 DEBUG zen.collector.config: Heartbeat timeout set to 540s
2013-06-05 12:43:25,962 DEBUG zen.collector.scheduler: add task configLoader, <Products.ZenCollector.config.ConfigurationLoaderTask object at 0x5513750> using 21600 second interval
2013-06-05 12:43:25,962 DEBUG zen.zenprocess: Updated defaultRRDCreateCommand preference to ('RRA:AVERAGE:0.5:1:600', 'RRA:AVERAGE:0.5:6:600', 'RRA:AVERAGE:0.5:24:600', 'RRA:AVERAGE:0.5:288:600', 'RRA:MAX:0.5:6:600', 'RRA:MAX:0.5:24:600', 'RRA:MAX:0.5:288:600')
2013-06-05 12:43:25,962 DEBUG zen.collector.config: Fetching threshold classes
2013-06-05 12:43:25,971 DEBUG zen.zenprocess: Loading classes ['Products.ZenModel.MinMaxThreshold', 'Products.ZenModel.ValueChangeThreshold']
2013-06-05 12:43:25,972 DEBUG zen.collector.config: Fetching collector thresholds
2013-06-05 12:43:26,021 DEBUG zen.thresholds: Updating threshold ('high event queue', ('localhost collector', ''))
2013-06-05 12:43:26,021 DEBUG zen.thresholds: Updating threshold ('zenmodeler cycle time', ('localhost collector', ''))
2013-06-05 12:43:26,021 DEBUG zen.collector.config: Fetching configurations
2013-06-05 12:43:26,033 ERROR zen.collector.config: Configuration for devicename unavailable -- is that the correct name?
2013-06-05 12:43:26,033 DEBUG zen.collector.scheduler: Task configLoader finished, result: 'Configuration loaded'
2013-06-05 12:43:26,034 DEBUG zen.collector.scheduler: In shutdown stage before
2013-06-05 12:43:26,034 DEBUG zen.collector.scheduler: Removing task configLoader
2013-06-05 12:43:26,034 DEBUG zen.collector.scheduler: tasks to clean set([<Products.ZenCollector.config.ConfigurationLoaderTask object at 0x5441a90>, <Products.ZenCollector.config.ConfigurationLoaderTask object at 0x5513750>])
2013-06-05 12:43:26,034 DEBUG zen.collector.scheduler: Cleanup on task configLoader <Products.ZenCollector.config.ConfigurationLoaderTask object at 0x5441a90>
2013-06-05 12:43:26,034 DEBUG zen.collector.scheduler: Scheduler._cleanupTaskComplete: result=None task.name=configLoader
2013-06-05 12:43:26,034 DEBUG zen.collector.scheduler: Cleanup on task configLoader <Products.ZenCollector.config.ConfigurationLoaderTask object at 0x5513750>
2013-06-05 12:43:26,034 DEBUG zen.collector.scheduler: Scheduler._cleanupTaskComplete: result=None task.name=configLoader
2013-06-05 12:43:26,035 DEBUG zen.zenprocess: Tried to stop reactor that was stopped
2013-06-05 12:43:26,035 INFO zen.zenprocess: Daemon CollectorDaemon shutting down
2013-06-05 12:43:26,037 DEBUG zen.zenprocess: Removing service EventService
2013-06-05 12:43:26,037 DEBUG zen.zenprocess: Removing service Products.ZenHub.services.ProcessConfig
2013-06-05 12:43:26,037 DEBUG zen.pbclientfactory: Lost connection to 127.0.0.1:8789 - [Failure instance: Traceback (failure with no frames): <class 'twisted.internet.error.ConnectionLost'>: Connection to the other side was lost in a non-clean fashion: Connection lost.
]
2013-06-05 12:43:26,037 DEBUG zen.collector.scheduler: In shutdown stage during
2013-06-05 12:43:26,037 DEBUG zen.collector.scheduler: In shutdown stage after
--------------------------------------------------------------

Reply to this message by replying to this email -or- go to the discussion on Zenoss Community
[http://community.zenoss.org/message/73500#73500]

Start a new discussion in zenoss-users at Zenoss Community
[http://community.zenoss.org/choose-container!input.jspa?contentType=1&containerType=14&container=2003]

[linkslice]

linkslice [http://community.zenoss.org/people/linkslice] created the discussion

"Re: False Positive alerts on httpd monitoring"

To view the discussion, visit: http://community.zenoss.org/message/73511#73511

--------------------------------------------------------------
Can you run this from the command line?

zenprocess run -v10 -d <devname> --showprocs --showrawtables
--------------------------------------------------------------

Reply to this message by replying to this email -or- go to the discussion on Zenoss Community
[http://community.zenoss.org/message/73511#73511]

Start a new discussion in zenoss-users at Zenoss Community
[http://community.zenoss.org/choose-container!input.jspa?contentType=1&containerType=14&container=2003]

[Chris Smith]

Chris Smith [http://community.zenoss.org/people/csmith] created the discussion

"Re: False Positive alerts on httpd monitoring"

To view the discussion, visit: http://community.zenoss.org/message/73505#73505

--------------------------------------------------------------
That gave a little more useful information. Is it a regex issue? I'm using the default for Apache.

[***@na-den-zen-01 root]$ zenprocess run -v10 -d app-01 --showprocs --showrawtables
2013-06-05 15:31:51,803 DEBUG zen.zenprocess: Starting PBDaemon initialization
2013-06-05 15:31:51,804 INFO zen.zenprocess: Connecting to localhost:8789
2013-06-05 15:31:51,804 DEBUG zen.pbclientfactory: Starting connection...
2013-06-05 15:31:51,805 DEBUG zen.zenprocess: Logging in as admin
2013-06-05 15:31:51,805 DEBUG zen.pbclientfactory: Connected
2013-06-05 15:31:51,806 DEBUG zen.pbclientfactory: Cancelling connect timeout
2013-06-05 15:31:51,806 DEBUG zen.pbclientfactory: Sending credentials
2013-06-05 15:31:51,808 DEBUG zen.pbclientfactory: Cancelling connect timeout
2013-06-05 15:31:51,808 INFO zen.zenprocess: Connected to ZenHub
2013-06-05 15:31:51,808 DEBUG zen.zenprocess: Setting up initial services: EventService, Products.ZenHub.services.ProcessConfig
2013-06-05 15:31:51,808 DEBUG zen.zenprocess: Chaining getInitialServices with d2
2013-06-05 15:31:51,809 DEBUG zen.pbclientfactory: pinging perspective
2013-06-05 15:31:51,810 DEBUG zen.zenprocess: Loaded service EventService from zenhub
2013-06-05 15:31:51,811 DEBUG zen.zenprocess: Loaded service Products.ZenHub.services.ProcessConfig from zenhub
2013-06-05 15:31:51,811 DEBUG zen.zenprocess: Queued event (total of 1) {'rcvtime': 1370467911.811252, 'severity': 0, 'component': 'zenprocess', 'agent': 'zenprocess', 'summary': 'started', 'manager': 'na-den-zen-01.meetingonecorp.local', 'device': 'localhost', 'eventClass': '/App/Start', 'monitor': 'localhost'}
2013-06-05 15:31:51,811 DEBUG zen.zenprocess: Sending 1 events, 0 perf events, 0 heartbeats
2013-06-05 15:31:51,812 DEBUG zen.zenprocess: Calling connected.
2013-06-05 15:31:51,812 DEBUG zen.collector.config: Heartbeat timeout set to 540s
2013-06-05 15:31:51,812 DEBUG zen.collector.scheduler: add task configLoader, <Products.ZenCollector.config.ConfigurationLoaderTask object at 0x5c72a90> using 1200 second interval
2013-06-05 15:31:51,812 DEBUG zen.zenprocess: Performing periodic maintenance
2013-06-05 15:31:51,813 DEBUG zen.pbclientfactory: perspective ponged
2013-06-05 15:31:51,813 DEBUG zen.pbclientfactory: Cancelling ping timeout
2013-06-05 15:31:51,813 DEBUG zen.collector.scheduler: Task configLoader starting on 1200 second intervals
2013-06-05 15:31:51,813 DEBUG zen.collector.scheduler: Task configLoader changing state from IDLE to QUEUED
2013-06-05 15:31:51,814 DEBUG zen.collector.scheduler: Task configLoader changing state from QUEUED to RUNNING
2013-06-05 15:31:51,814 DEBUG zen.collector.config: configLoader gathering configuration
2013-06-05 15:31:51,815 DEBUG zen.collector.config: Fetching daemon configuration properties
2013-06-05 15:31:51,838 DEBUG zen.collector.scheduler: Task configLoader changing state from RUNNING to FETCHING_MISC_CONFIG
2013-06-05 15:31:51,839 DEBUG zen.zenprocess: Updated configCycleInterval preference to 360
2013-06-05 15:31:51,839 DEBUG zen.zenprocess: Changing config task interval from 20 to 360 minutes
2013-06-05 15:31:51,839 DEBUG zen.collector.scheduler: Stopping task configLoader, <Products.ZenCollector.config.ConfigurationLoaderTask object at 0x5c72a90>
2013-06-05 15:31:51,839 DEBUG zen.collector.scheduler: call finished LoopingCall<1200>(CallableTask: configLoader, *(), **{}) : LoopingCall<1200>(CallableTask: configLoader, *(), **{})
2013-06-05 15:31:51,839 INFO zen.collector.scheduler: Detailed Task Statistics:
configLoader Current State: FETCHING_MISC_CONFIG Successful_Runs: 1 Failed_Runs: 0 Missed_Runs: 0


Detailed Task States:
configLoader State: RUNNING Total: 1 Total Elapsed: 0.0243 Min: 0.0243 Max: 0.0243 Mean: 0.0243 StdDev: 0.0000
configLoader State: QUEUED Total: 1 Total Elapsed: 0.0013 Min: 0.0013 Max: 0.0013 Mean: 0.0013 StdDev: 0.0000




2013-06-05 15:31:51,839 DEBUG zen.collector.config: Heartbeat timeout set to 540s
2013-06-05 15:31:51,840 DEBUG zen.collector.scheduler: add task configLoader, <Products.ZenCollector.config.ConfigurationLoaderTask object at 0x5d42750> using 21600 second interval
2013-06-05 15:31:51,840 DEBUG zen.zenprocess: Updated defaultRRDCreateCommand preference to ('RRA:AVERAGE:0.5:1:600', 'RRA:AVERAGE:0.5:6:600', 'RRA:AVERAGE:0.5:24:600', 'RRA:AVERAGE:0.5:288:600', 'RRA:MAX:0.5:6:600', 'RRA:MAX:0.5:24:600', 'RRA:MAX:0.5:288:600')
2013-06-05 15:31:51,840 DEBUG zen.collector.config: Fetching threshold classes
2013-06-05 15:31:51,848 DEBUG zen.zenprocess: Loading classes ['Products.ZenModel.MinMaxThreshold', 'Products.ZenModel.ValueChangeThreshold']
2013-06-05 15:31:51,848 DEBUG zen.collector.config: Fetching collector thresholds
2013-06-05 15:31:51,856 DEBUG zen.thresholds: Updating threshold ('high event queue', ('localhost collector', ''))
2013-06-05 15:31:51,856 DEBUG zen.thresholds: Updating threshold ('zenmodeler cycle time', ('localhost collector', ''))
2013-06-05 15:31:51,856 DEBUG zen.collector.config: Fetching configurations
2013-06-05 15:31:51,878 DEBUG zen.zenprocess: updateDeviceConfigs: updatedConfigs=['app-01']
2013-06-05 15:31:51,878 DEBUG zen.zenprocess: Processing configuration for app-01
2013-06-05 15:31:51,879 DEBUG zen.zenprocess: ConfigListener: configuration app-01 added
2013-06-05 15:31:51,879 DEBUG zen.collector.tasks: splitting config DeviceProxy:app-01
2013-06-05 15:31:51,880 DEBUG zen.zenprocess: Tasks for config app-01: {'app-01': <__main__.ZenProcessTask object at 0x5dd0750>}
2013-06-05 15:31:51,880 DEBUG zen.collector.scheduler: add task app-01, <__main__.ZenProcessTask object at 0x5dd0750> using 180 second interval
2013-06-05 15:31:51,880 DEBUG zen.collector.scheduler: Task app-01 starting on 180 second intervals
2013-06-05 15:31:51,880 DEBUG zen.collector.scheduler: Task app-01 changing state from IDLE to QUEUED
2013-06-05 15:31:51,880 DEBUG zen.zenprocess: purgeOmittedDevices: deletedConfigs=
2013-06-05 15:31:51,881 DEBUG zen.collector.scheduler: Task configLoader finished, result: 'Configuration loaded'
2013-06-05 15:31:51,881 DEBUG zen.collector.scheduler: Task app-01 changing state from QUEUED to RUNNING
2013-06-05 15:31:51,881 DEBUG zen.collector.scheduler: Task app-01 changing state from RUNNING to CONNECTING
2013-06-05 15:31:51,882 DEBUG zen.twistedsnmp: AgentProxy._getCmdLineArgs: using google ipaddr on 192.168.148.140
2013-06-05 15:31:51,920 DEBUG zen.zenprocess: Opened proxy to app-01 [192.168.148.140]
2013-06-05 15:31:51,920 DEBUG zen.zenprocess: Scanning for processes from app-01 [192.168.148.140]
2013-06-05 15:31:51,920 DEBUG zen.collector.scheduler: Task app-01 changing state from CONNECTING to SCANNING_PROCESSES
2013-06-05 15:31:51,972 DEBUG zen.zenprocess: Queued event (total of 1) {'rcvtime': 1370467911.972474, 'monitor': 'localhost', 'agent': 'zenprocess', 'summary': 'Process table up for device app-01 - timeout cleared', 'manager': 'na-den-zen-01.meetingonecorp.local', 'eventGroup': 'Process', 'eventKey': 'table_scan_timeout', 'device': 'app-01', 'eventClass': '/Status/Snmp', 'severity': 0}
2013-06-05 15:31:51,972 DEBUG zen.collector.scheduler: Task app-01 changing state from SCANNING_PROCESSES to PARSING_TABLE_DATA
2013-06-05 15:31:51,973 INFO zen.zenprocess: NAMETABLE = {'.1.3.6.1.2.1.25.4.2.1.2.2648': 'tomcat6.exe', '.1.3.6.1.2.1.25.4.2.1.2.1112': 'msdtc.exe', '.1.3.6.1.2.1.25.4.2.1.2.2176': 'inetinfo.exe', '.1.3.6.1.2.1.25.4.2.1.2.3088': 'k2index.exe', '.1.3.6.1.2.1.25.4.2.1.2.1376': 'jrun.exe', '.1.3.6.1.2.1.25.4.2.1.2.2748': 'controld.exe', '.1.3.6.1.2.1.25.4.2.1.2.2572': 'snmp.exe', '.1.3.6.1.2.1.25.4.2.1.2.1276': 'solr.exe', '.1.3.6.1.2.1.25.4.2.1.2.4072': 'cdm.exe', '.1.3.6.1.2.1.25.4.2.1.2.3676': 'net_traffic.exe', '.1.3.6.1.2.1.25.4.2.1.2.792': 'svchost.exe', '.1.3.6.1.2.1.25.4.2.1.2.412': 'csrss.exe', '.1.3.6.1.2.1.25.4.2.1.2.4548': 'wmiprvse.exe', '.1.3.6.1.2.1.25.4.2.1.2.2292': 'controller.exe', '.1.3.6.1.2.1.25.4.2.1.2.1896': 'svchost.exe', '.1.3.6.1.2.1.25.4.2.1.2.3796': 'ntperf.exe', '.1.3.6.1.2.1.25.4.2.1.2.2296': 'NTRtScan.exe', '.1.3.6.1.2.1.25.4.2.1.2.740': 'svchost.exe', '.1.3.6.1.2.1.25.4.2.1.2.3232': 'TmListen.exe', '.1.3.6.1.2.1.25.4.2.1.2.3108': 'webblocker.exe', '.1.3.6.1.2.1.25.4.2.1.2.368': 'cbService.exe', '.1.3.6.1.2.1.25.4.2.1.2.4496': 'wmiprvse.exe', '.1.3.6.1.2.1.25.4.2.1.2.1292': 'CFDotNetsvc.exe', '.1.3.6.1.2.1.25.4.2.1.2.5720': 'dllhost.exe', '.1.3.6.1.2.1.25.4.2.1.2.4696': 'svchost.exe', '.1.3.6.1.2.1.25.4.2.1.2.1392': 'swagent.exe', '.1.3.6.1.2.1.25.4.2.1.2.360': 'smss.exe', '.1.3.6.1.2.1.25.4.2.1.2.1212': 'httpd.exe', '.1.3.6.1.2.1.25.4.2.1.2.1316': 'jrunsvc.exe', '.1.3.6.1.2.1.25.4.2.1.2.3180': 'processes.exe', '.1.3.6.1.2.1.25.4.2.1.2.2216': 'jqs.exe', '.1.3.6.1.2.1.25.4.2.1.2.2272': 'nimbus.exe', '.1.3.6.1.2.1.25.4.2.1.2.2888': 'k2server.exe', '.1.3.6.1.2.1.25.4.2.1.2.916': 'svchost.exe', '.1.3.6.1.2.1.25.4.2.1.2.3188': 'svchost.exe', '.1.3.6.1.2.1.25.4.2.1.2.6728': 'vssvc.exe', '.1.3.6.1.2.1.25.4.2.1.2.4468': 'svchost.exe', '.1.3.6.1.2.1.25.4.2.1.2.2676': 'vmtoolsd.exe', '.1.3.6.1.2.1.25.4.2.1.2.5020': 'logon.scr', '.1.3.6.1.2.1.25.4.2.1.2.888': 'svchost.exe', '.1.3.6.1.2.1.25.4.2.1.2.4028': 'cbVSCService11.exe', '.1.3.6.1.2.1.25.4.2.1.2.1736': 'k2admin.exe', '.1.3.6.1.2.1.25.4.2.1.2.1': 'System Idle Process', '.1.3.6.1.2.1.25.4.2.1.2.2816': 'hdb.exe', '.1.3.6.1.2.1.25.4.2.1.2.1692': 'swsoc.exe', '.1.3.6.1.2.1.25.4.2.1.2.4': 'System', '.1.3.6.1.2.1.25.4.2.1.2.1928': 'appservService.exe', '.1.3.6.1.2.1.25.4.2.1.2.684': 'vmacthlp.exe', '.1.3.6.1.2.1.25.4.2.1.2.1004': 'spoolsv.exe', '.1.3.6.1.2.1.25.4.2.1.2.484': 'services.exe', '.1.3.6.1.2.1.25.4.2.1.2.436': 'winlogon.exe', '.1.3.6.1.2.1.25.4.2.1.2.2696': 'spooler.exe', '.1.3.6.1.2.1.25.4.2.1.2.2956': 'ntevl.exe', '.1.3.6.1.2.1.25.4.2.1.2.5504': 'svchost.exe', '.1.3.6.1.2.1.25.4.2.1.2.1304': 'JNBDotNetSide.exe', '.1.3.6.1.2.1.25.4.2.1.2.1384': 'httpd.exe', '.1.3.6.1.2.1.25.4.2.1.2.844': 'svchost.exe', '.1.3.6.1.2.1.25.4.2.1.2.1300': 'java.exe', '.1.3.6.1.2.1.25.4.2.1.2.1324': 'java.exe', '.1.3.6.1.2.1.25.4.2.1.2.2544': 'svchost.exe', '.1.3.6.1.2.1.25.4.2.1.2.4372': 'CNTAoSMgr.exe', '.1.3.6.1.2.1.25.4.2.1.2.496': 'lsass.exe', '.1.3.6.1.2.1.25.4.2.1.2.3704': 'VMUpgradeHelper.exe', '.1.3.6.1.2.1.25.4.2.1.2.1684': 'swstrtr.exe'}
2013-06-05 15:31:51,974 INFO zen.zenprocess: PATHTABLE = {'.1.3.6.1.2.1.25.4.2.1.4.496': 'C:\\WINDOWS\\system32\\', '.1.3.6.1.2.1.25.4.2.1.4.1896': 'C:\\WINDOWS\\System32\\', '.1.3.6.1.2.1.25.4.2.1.4.2956': '', '.1.3.6.1.2.1.25.4.2.1.4.4372': 'C:\\Program Files\\Trend Micro\\OfficeScan Client\\', '.1.3.6.1.2.1.25.4.2.1.4.4696': 'C:\\WINDOWS\\System32\\', '.1.3.6.1.2.1.25.4.2.1.4.3796': '', '.1.3.6.1.2.1.25.4.2.1.4.1684': 'D:\\ColdFusion9\\db\\slserver54\\bin\\', '.1.3.6.1.2.1.25.4.2.1.4.6728': 'C:\\WINDOWS\\System32\\', '.1.3.6.1.2.1.25.4.2.1.4.1212': 'C:\\Program Files\\Apache Software Foundation\\Apache2.2\\bin\\', '.1.3.6.1.2.1.25.4.2.1.4.1316': 'D:\\ColdFusion9\\runtime\\bin\\', '.1.3.6.1.2.1.25.4.2.1.4.5504': 'C:\\WINDOWS\\System32\\', '.1.3.6.1.2.1.25.4.2.1.4.1376': '', '.1.3.6.1.2.1.25.4.2.1.4.1736': 'D:\\ColdFusion9\\verity\\k2\\_nti40\\bin\\', '.1.3.6.1.2.1.25.4.2.1.4.2292': '', '.1.3.6.1.2.1.25.4.2.1.4.4028': 'C:\\Program Files\\Cobian Backup 11\\', '.1.3.6.1.2.1.25.4.2.1.4.2176': 'C:\\WINDOWS\\system32\\inetsrv\\', '.1.3.6.1.2.1.25.4.2.1.4.3088': 'D:\\ColdFusion9\\verity\\k2\\_nti40\\bin\\', '.1.3.6.1.2.1.25.4.2.1.4.1276': 'D:\\ColdFusion9\\solr\\', '.1.3.6.1.2.1.25.4.2.1.4.2648': 'D:\\apache-tomcat-6.0.26\\bin\\', '.1.3.6.1.2.1.25.4.2.1.4.888': '', '.1.3.6.1.2.1.25.4.2.1.4.4496': 'C:\\WINDOWS\\system32\\wbem\\', '.1.3.6.1.2.1.25.4.2.1.4.436': '', '.1.3.6.1.2.1.25.4.2.1.4.844': '', '.1.3.6.1.2.1.25.4.2.1.4.1384': 'C:\\Program Files\\Apache Software Foundation\\Apache2.2\\bin\\', '.1.3.6.1.2.1.25.4.2.1.4.1112': '', '.1.3.6.1.2.1.25.4.2.1.4.2572': 'C:\\WINDOWS\\System32\\', '.1.3.6.1.2.1.25.4.2.1.4.2816': '', '.1.3.6.1.2.1.25.4.2.1.4.792': '', '.1.3.6.1.2.1.25.4.2.1.4.2888': 'D:\\ColdFusion9\\verity\\k2\\_nti40\\bin\\', '.1.3.6.1.2.1.25.4.2.1.4.3180': '', '.1.3.6.1.2.1.25.4.2.1.4.2696': '', '.1.3.6.1.2.1.25.4.2.1.4.412': 'C:\\WINDOWS\\system32\\', '.1.3.6.1.2.1.25.4.2.1.4.4072': '', '.1.3.6.1.2.1.25.4.2.1.4.484': 'C:\\WINDOWS\\system32\\', '.1.3.6.1.2.1.25.4.2.1.4.4': '', '.1.3.6.1.2.1.25.4.2.1.4.1': '', '.1.3.6.1.2.1.25.4.2.1.4.3704': 'C:\\Program Files\\VMware\\VMware Tools\\', '.1.3.6.1.2.1.25.4.2.1.4.2676': 'C:\\Program Files\\VMware\\VMware Tools\\', '.1.3.6.1.2.1.25.4.2.1.4.3232': 'C:\\Program Files\\Trend Micro\\OfficeScan Client\\', '.1.3.6.1.2.1.25.4.2.1.4.4548': '', '.1.3.6.1.2.1.25.4.2.1.4.1692': 'D:\\ColdFusion9\\db\\slserver54\\bin\\', '.1.3.6.1.2.1.25.4.2.1.4.5020': '', '.1.3.6.1.2.1.25.4.2.1.4.1324': 'D:\\ColdFusion9\\runtime\\jre\\bin\\', '.1.3.6.1.2.1.25.4.2.1.4.1300': '', '.1.3.6.1.2.1.25.4.2.1.4.2748': 'C:\\Program Files\\WatchGuard\\', '.1.3.6.1.2.1.25.4.2.1.4.1304': 'D:\\ColdFusion9\\jnbridge\\', '.1.3.6.1.2.1.25.4.2.1.4.2544': '', '.1.3.6.1.2.1.25.4.2.1.4.5720': 'C:\\WINDOWS\\system32\\', '.1.3.6.1.2.1.25.4.2.1.4.1004': 'C:\\WINDOWS\\system32\\', '.1.3.6.1.2.1.25.4.2.1.4.916': 'C:\\WINDOWS\\System32\\', '.1.3.6.1.2.1.25.4.2.1.4.3108': 'C:\\Program Files\\WatchGuard\\', '.1.3.6.1.2.1.25.4.2.1.4.3188': 'C:\\WINDOWS\\System32\\', '.1.3.6.1.2.1.25.4.2.1.4.3676': '', '.1.3.6.1.2.1.25.4.2.1.4.360': '\\SystemRoot\\System32\\', '.1.3.6.1.2.1.25.4.2.1.4.2296': 'C:\\Program Files\\Trend Micro\\OfficeScan Client\\', '.1.3.6.1.2.1.25.4.2.1.4.4468': 'C:\\WINDOWS\\System32\\', '.1.3.6.1.2.1.25.4.2.1.4.1928': 'D:\\glassfish\\lib\\', '.1.3.6.1.2.1.25.4.2.1.4.684': 'C:\\Program Files\\VMware\\VMware Tools\\', '.1.3.6.1.2.1.25.4.2.1.4.368': 'C:\\Program Files\\Cobian Backup 11\\', '.1.3.6.1.2.1.25.4.2.1.4.2272': 'C:\\Program Files\\NimBUS\\bin\\', '.1.3.6.1.2.1.25.4.2.1.4.1292': 'D:\\ColdFusion9\\jnbridge\\', '.1.3.6.1.2.1.25.4.2.1.4.2216': 'C:\\Program Files\\Java\\jre6\\bin\\', '.1.3.6.1.2.1.25.4.2.1.4.740': 'C:\\WINDOWS\\system32\\', '.1.3.6.1.2.1.25.4.2.1.4.1392': 'D:\\ColdFusion9\\db\\slserver54\\bin\\'}
2013-06-05 15:31:51,974 INFO zen.zenprocess: ARGSTABLE = {'.1.3.6.1.2.1.25.4.2.1.5.1684': '"ColdFusion 9 ODBC Server"', '.1.3.6.1.2.1.25.4.2.1.5.1376': '-nohup -ntservice "ColdFusion 9 Application Server-StartEvent" -startByNTService "coldfusion"', '.1.3.6.1.2.1.25.4.2.1.5.5720': '/Processid:{02D4B3F1-FD88-11D1-960D-00805FC79235}', '.1.3.6.1.2.1.25.4.2.1.5.1692': '"ColdFusion 9 ODBC Server"', '.1.3.6.1.2.1.25.4.2.1.5.2572': '', '.1.3.6.1.2.1.25.4.2.1.5.2292': '', '.1.3.6.1.2.1.25.4.2.1.5.4468': '-k swprv', '.1.3.6.1.2.1.25.4.2.1.5.1392': '"ColdFusion 9 ODBC Agent"', '.1.3.6.1.2.1.25.4.2.1.5.2676': '', '.1.3.6.1.2.1.25.4.2.1.5.1004': '', '.1.3.6.1.2.1.25.4.2.1.5.1316': '', '.1.3.6.1.2.1.25.4.2.1.5.4372': '', '.1.3.6.1.2.1.25.4.2.1.5.1896': '-k WinErr', '.1.3.6.1.2.1.25.4.2.1.5.2648': '//RS//Tomcat6', '.1.3.6.1.2.1.25.4.2.1.5.5504': '-k termsvcs', '.1.3.6.1.2.1.25.4.2.1.5.484': '', '.1.3.6.1.2.1.25.4.2.1.5.1212': ' -k runservice', '.1.3.6.1.2.1.25.4.2.1.5.1276': '-zglaxservice CF9Solr', '.1.3.6.1.2.1.25.4.2.1.5.2816': '', '.1.3.6.1.2.1.25.4.2.1.5.792': '', '.1.3.6.1.2.1.25.4.2.1.5.3232': '', '.1.3.6.1.2.1.25.4.2.1.5.3704': ' /service', '.1.3.6.1.2.1.25.4.2.1.5.3796': '', '.1.3.6.1.2.1.25.4.2.1.5.1292': '', '.1.3.6.1.2.1.25.4.2.1.5.1928': '"\\"D:\\glassfish\\bin\\asadmin.bat\\" start-domain --user admin domain1" "\\"D:\\glassfish\\bin\\asadmin.bat\\" stop-domain domain1\\"', '.1.3.6.1.2.1.25.4.2.1.5.1736': ' -cfg "D:\\ColdFusion9\\verity\\k2\\common\\verity.cfg" -ntstart 1', '.1.3.6.1.2.1.25.4.2.1.5.5020': '/s', '.1.3.6.1.2.1.25.4.2.1.5.4548': '', '.1.3.6.1.2.1.25.4.2.1.5.844': '', '.1.3.6.1.2.1.25.4.2.1.5.1112': '', '.1.3.6.1.2.1.25.4.2.1.5.2296': '', '.1.3.6.1.2.1.25.4.2.1.5.3676': '', '.1.3.6.1.2.1.25.4.2.1.5.2696': '', '.1.3.6.1.2.1.25.4.2.1.5.2748': '', '.1.3.6.1.2.1.25.4.2.1.5.4696': '-k tapisrv', '.1.3.6.1.2.1.25.4.2.1.5.1': '', '.1.3.6.1.2.1.25.4.2.1.5.3088': ' -ualias ColdFusionK2_indexserver1', '.1.3.6.1.2.1.25.4.2.1.5.1384': ' -d "C:/Program Files/Apache Software Foundation/Apache2.2" -f "C:\\Program Files\\Apache Software Foundation\\Apache2.2\\conf\\httpd', '.1.3.6.1.2.1.25.4.2.1.5.4': '', '.1.3.6.1.2.1.25.4.2.1.5.436': '', '.1.3.6.1.2.1.25.4.2.1.5.916': '-k netsvcs', '.1.3.6.1.2.1.25.4.2.1.5.1300': '', '.1.3.6.1.2.1.25.4.2.1.5.4496': '', '.1.3.6.1.2.1.25.4.2.1.5.1304': '', '.1.3.6.1.2.1.25.4.2.1.5.4072': '', '.1.3.6.1.2.1.25.4.2.1.5.2176': '', '.1.3.6.1.2.1.25.4.2.1.5.888': '', '.1.3.6.1.2.1.25.4.2.1.5.496': '', '.1.3.6.1.2.1.25.4.2.1.5.2544': '', '.1.3.6.1.2.1.25.4.2.1.5.3180': '', '.1.3.6.1.2.1.25.4.2.1.5.1324': ' -server -Xmx256m -XX:+AggressiveOpts -XX:+ScavengeBeforeFullGC -XX:-UseParallelGC -DSTOP.PORT=8079 -DSTOP.KEY=cfstop -Dsolr.sol', '.1.3.6.1.2.1.25.4.2.1.5.4028': '', '.1.3.6.1.2.1.25.4.2.1.5.2956': '', '.1.3.6.1.2.1.25.4.2.1.5.2888': ' -ualias ColdFusionK2_server1', '.1.3.6.1.2.1.25.4.2.1.5.368': '', '.1.3.6.1.2.1.25.4.2.1.5.2272': '', '.1.3.6.1.2.1.25.4.2.1.5.740': '-k DcomLaunch', '.1.3.6.1.2.1.25.4.2.1.5.6728': '', '.1.3.6.1.2.1.25.4.2.1.5.412': 'ObjectDirectory=\\Windows SharedSection=1024,3072,512 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserS', '.1.3.6.1.2.1.25.4.2.1.5.360': '', '.1.3.6.1.2.1.25.4.2.1.5.684': '', '.1.3.6.1.2.1.25.4.2.1.5.2216': ' -service -config "C:\\Program Files\\Java\\jre6\\lib\\deploy\\jqs\\jqs.conf"', '.1.3.6.1.2.1.25.4.2.1.5.3108': '', '.1.3.6.1.2.1.25.4.2.1.5.3188': '-k iissvcs'}
2013-06-05 15:31:51,976 INFO zen.zenprocess: #===== Processes on app-01:
1 System Idle Process
4 System
360 smss.exe
368 cbService.exe
412 csrss.exe ObjectDirectory=\Windows SharedSection=1024,3072,512 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserS
436 winlogon.exe
484 services.exe
496 lsass.exe
684 vmacthlp.exe
740 svchost.exe -k DcomLaunch
792 svchost.exe
844 svchost.exe
888 svchost.exe
916 svchost.exe -k netsvcs
1004 spoolsv.exe
1112 msdtc.exe
1212 httpd.exe -k runservice
1276 solr.exe -zglaxservice CF9Solr
1292 CFDotNetsvc.exe
1300 java.exe
1304 JNBDotNetSide.exe
1316 jrunsvc.exe
1324 java.exe -server -Xmx256m -XX:+AggressiveOpts -XX:+ScavengeBeforeFullGC -XX:-UseParallelGC -DSTOP.PORT=8079 -DSTOP.KEY=cfstop -Dsolr.sol
1376 jrun.exe -nohup -ntservice "ColdFusion 9 Application Server-StartEvent" -startByNTService "coldfusion"
1384 httpd.exe -d "C:/Program Files/Apache Software Foundation/Apache2.2" -f "C:\Program Files\Apache Software Foundation\Apache2.2\conf\httpd
1392 swagent.exe "ColdFusion 9 ODBC Agent"
1684 swstrtr.exe "ColdFusion 9 ODBC Server"
1692 swsoc.exe "ColdFusion 9 ODBC Server"
1736 k2admin.exe -cfg "D:\ColdFusion9\verity\k2\common\verity.cfg" -ntstart 1
1896 svchost.exe -k WinErr
1928 appservService.exe "\"D:\glassfish\bin\asadmin.bat\" start-domain --user admin domain1" "\"D:\glassfish\bin\asadmin.bat\" stop-domain domain1\"
2176 inetinfo.exe
2216 jqs.exe -service -config "C:\Program Files\Java\jre6\lib\deploy\jqs\jqs.conf"
2272 nimbus.exe
2292 controller.exe
2296 NTRtScan.exe
2544 svchost.exe
2572 snmp.exe
2648 tomcat6.exe //RS//Tomcat6
2676 vmtoolsd.exe
2696 spooler.exe
2748 controld.exe
2816 hdb.exe
2888 k2server.exe -ualias ColdFusionK2_server1
2956 ntevl.exe
3088 k2index.exe -ualias ColdFusionK2_indexserver1
3108 webblocker.exe
3180 processes.exe
3188 svchost.exe -k iissvcs
3232 TmListen.exe
3676 net_traffic.exe
3704 VMUpgradeHelper.exe /service
3796 ntperf.exe
4028 cbVSCService11.exe
4072 cdm.exe
4372 CNTAoSMgr.exe
4468 svchost.exe -k swprv
4496 wmiprvse.exe
4548 wmiprvse.exe
4696 svchost.exe -k tapisrv
5020 logon.scr /s
5504 svchost.exe -k termsvcs
5720 dllhost.exe /Processid:{02D4B3F1-FD88-11D1-960D-00805FC79235}
6728 vssvc.exe


2013-06-05 15:31:51,976 DEBUG zen.zenprocess: Queued event (total of 2) {'rcvtime': 1370467911.976456, 'monitor': 'localhost', 'agent': 'zenprocess', 'summary': 'Process table up for device app-01', 'manager': 'na-den-zen-01.meetingonecorp.local', 'eventGroup': 'Process', 'eventKey': 'resource_mib', 'device': 'app-01', 'eventClass': '/Status/Snmp', 'severity': 0}
2013-06-05 15:31:51,978 DEBUG zen.zenprocess: Found process 1384 on httpd.exe af5f979fd45fdd80441276b75378f2db
2013-06-05 15:31:51,978 DEBUG zen.zenprocess: Found process 1212 on httpd.exe af5f979fd45fdd80441276b75378f2db
2013-06-05 15:31:51,979 DEBUG zen.zenprocess: Queued event (total of 3) {'rcvtime': 1370467911.979207, 'monitor': 'localhost', 'component': 'httpd.exe', 'agent': 'zenprocess', 'summary': 'Process up: httpd.exe', 'manager': 'na-den-zen-01.meetingonecorp.local', 'eventGroup': 'Process', 'eventKey': '/Processes/Apache/osProcessClasses/httpd', 'device': 'app-01', 'eventClass': '/Status/OSProcess', 'message': "Process up: httpd.exe\n Using regex '^[^ ]*httpd[^ /]*( |$)' with pid's [1384, 1212] ", 'severity': 0}
2013-06-05 15:31:51,979 DEBUG zen.zenprocess: (app-01) Process up: httpd.exe
Using regex '^[^ ]*httpd[^ /]*( |$)' with pid's [1384, 1212]
2013-06-05 15:31:51,979 DEBUG zen.zenprocess: Found new httpd.exe httpd.exe af5f979fd45fdd80441276b75378f2db pid 1384 on app-01
2013-06-05 15:31:51,979 DEBUG zen.zenprocess: Found new httpd.exe httpd.exe af5f979fd45fdd80441276b75378f2db pid 1212 on app-01
2013-06-05 15:31:51,980 DEBUG zen.zenprocess: Queued event (total of 4) {'rcvtime': 1370467911.98012, 'monitor': 'localhost', 'component': 'httpd.exe', 'agent': 'zenprocess', 'summary': 'Process not running: httpd.exe', 'manager': 'na-den-zen-01.meetingonecorp.local', 'eventGroup': 'Process', 'eventKey': '/Processes/Apache/osProcessClasses/httpd', 'device': 'app-01', 'eventClass': '/Status/OSProcess', 'message': "Process not running: httpd.exe\n   Using regex '^[^ ]*httpd[^ /]*( |$)' \n   All Processes have stopped since the last model occurred. Last Modification time (2013/06/05 12:52:29)", 'severity': 4}
2013-06-05 15:31:51,980 WARNING zen.zenprocess: (app-01) Process not running: httpd.exe
   Using regex '^[^ ]*httpd[^ /]*( |$)'
   All Processes have stopped since the last model occurred. Last Modification time (2013/06/05 12:52:29)
2013-06-05 15:31:51,981 DEBUG zen.RRDUtil: /opt/zenoss/perf/Devices/app-01/os/processes/httpd.exe 3ac26244af1a29c6ca9ee1e8cb5240c4/count_count.rrd: 0.0, @ N
2013-06-05 15:31:51,982 DEBUG zen.RRDUtil: /opt/zenoss/perf/Devices/app-01/os/processes/httpd.exe af5f979fd45fdd80441276b75378f2db/count_count.rrd: 2.0, @ N
2013-06-05 15:31:51,982 DEBUG zen.zenprocess: Queued event (total of 5) {'rcvtime': 1370467911.982584, 'monitor': 'localhost', 'agent': 'zenprocess', 'summary': 'Process table up for device app-01', 'manager': 'na-den-zen-01.meetingonecorp.local', 'eventGroup': 'Process', 'eventKey': None, 'device': 'app-01', 'eventClass': '/Status/Snmp', 'severity': 0}
2013-06-05 15:31:51,983 DEBUG zen.collector.scheduler: Task app-01 changing state from PARSING_TABLE_DATA to FETCH_PERF_DATA
2013-06-05 15:31:51,983 DEBUG zen.zenprocess: app-01 fetching oid(s) ['.1.3.6.1.2.1.25.5.1.1.1.1384', '.1.3.6.1.2.1.25.5.1.1.2.1384', '.1.3.6.1.2.1.25.5.1.1.1.1212', '.1.3.6.1.2.1.25.5.1.1.2.1212']
2013-06-05 15:31:51,986 DEBUG zen.collector.scheduler: Task app-01 changing state from FETCH_PERF_DATA to STORE_PERF_DATA
2013-06-05 15:31:51,986 DEBUG zen.zenprocess: There are 2 pids by the name httpd.exe af5f979fd45fdd80441276b75378f2db - httpd.exe
2013-06-05 15:31:51,987 DEBUG zen.RRDUtil: /opt/zenoss/perf/Devices/app-01/os/processes/httpd.exe af5f979fd45fdd80441276b75378f2db/cpu_cpu.rrd: 0L, @ N
2013-06-05 15:31:51,987 DEBUG zen.RRDUtil: /opt/zenoss/perf/Devices/app-01/os/processes/httpd.exe af5f979fd45fdd80441276b75378f2db/mem_mem.rrd: 35942400.0, @ N
2013-06-05 15:31:51,988 DEBUG zen.zenprocess: Device app-01 [192.168.148.140] scanned successfully
2013-06-05 15:31:51,988 DEBUG zen.collector.scheduler: Task app-01 finished, result: None
2013-06-05 15:31:51,989 DEBUG zen.collector.scheduler: Task app-01 changing state from STORE_PERF_DATA to IDLE
2013-06-05 15:31:51,989 INFO zen.zenprocess: 1 devices processed (4 datapoints)
2013-06-05 15:31:51,989 INFO zen.collector.scheduler: Tasks: 2 Successful_Runs: 1 Failed_Runs: 0 Missed_Runs: 0 Queued_Tasks: 0 Running_Tasks: 1
2013-06-05 15:31:51,989 DEBUG zen.collector.scheduler: In shutdown stage before
2013-06-05 15:31:51,990 DEBUG zen.collector.scheduler: Stopping running task app-01
2013-06-05 15:31:51,990 DEBUG zen.collector.scheduler: call finished LoopingCall<180>(CallableTask: app-01, *(), **{}) : LoopingCall<180>(CallableTask: app-01, *(), **{})
2013-06-05 15:31:51,990 DEBUG zen.collector.scheduler: Removing task app-01
2013-06-05 15:31:51,990 DEBUG zen.collector.scheduler: Removing task configLoader
2013-06-05 15:31:51,990 DEBUG zen.collector.scheduler: tasks to clean set([<Products.ZenCollector.config.ConfigurationLoaderTask object at 0x5c72a90>, <__main__.ZenProcessTask object at 0x5dd0750>, <Products.ZenCollector.config.ConfigurationLoaderTask object at 0x5d42750>])
2013-06-05 15:31:51,991 DEBUG zen.collector.scheduler: Cleanup on task configLoader <Products.ZenCollector.config.ConfigurationLoaderTask object at 0x5c72a90>
2013-06-05 15:31:51,991 DEBUG zen.collector.scheduler: Scheduler._cleanupTaskComplete: result=None task.name=configLoader
2013-06-05 15:31:51,991 DEBUG zen.collector.scheduler: Cleanup on task app-01 <__main__.ZenProcessTask object at 0x5dd0750>
2013-06-05 15:31:51,991 DEBUG zen.collector.scheduler: Scheduler._cleanupTaskComplete: result=None task.name=app-01
2013-06-05 15:31:51,991 DEBUG zen.collector.scheduler: Cleanup on task configLoader <Products.ZenCollector.config.ConfigurationLoaderTask object at 0x5d42750>
2013-06-05 15:31:51,992 DEBUG zen.collector.scheduler: Scheduler._cleanupTaskComplete: result=None task.name=configLoader
2013-06-05 15:31:51,992 DEBUG zen.zenprocess: Tried to stop reactor that was stopped
2013-06-05 15:31:51,992 INFO zen.zenprocess: Daemon CollectorDaemon shutting down
2013-06-05 15:31:51,993 DEBUG zen.zenprocess: Sending 5 events, 0 perf events, 0 heartbeats
2013-06-05 15:31:52,029 DEBUG zen.zenprocess: Removing service EventService
2013-06-05 15:31:52,030 DEBUG zen.zenprocess: Removing service Products.ZenHub.services.ProcessConfig
2013-06-05 15:31:52,030 DEBUG zen.pbclientfactory: Lost connection to 127.0.0.1:8789 - [Failure instance: Traceback (failure with no frames): <class 'twisted.internet.error.ConnectionLost'>: Connection to the other side was lost in a non-clean fashion: Connection lost.
]
2013-06-05 15:31:52,031 DEBUG zen.collector.scheduler: In shutdown stage during
2013-06-05 15:31:52,031 DEBUG zen.collector.scheduler: In shutdown stage after
--------------------------------------------------------------

Reply to this message by replying to this email -or- go to the discussion on Zenoss Community
[http://community.zenoss.org/message/73505#73505]

Start a new discussion in zenoss-users at Zenoss Community
[http://community.zenoss.org/choose-container!input.jspa?contentType=1&containerType=14&container=2003]

[linkslice]

linkslice [http://community.zenoss.org/people/linkslice] created the discussion

"Re: False Positive alerts on httpd monitoring"

To view the discussion, visit: http://community.zenoss.org/message/73512#73512

--------------------------------------------------------------
This part is interesting:

2013-06-05 15:31:51,979 DEBUG zen.zenprocess: Found new httpd.exe httpd.exe af5f979fd45fdd80441276b75378f2db pid 1384 on app-01
2013-06-05 15:31:51,979 DEBUG zen.zenprocess: Found new httpd.exe httpd.exe af5f979fd45fdd80441276b75378f2db pid 1212 on app-01

That means the running processes have different pids than when first modeled.  Which is normally fine.

Try to delete the httpd processes and remodel.
--------------------------------------------------------------

Reply to this message by replying to this email -or- go to the discussion on Zenoss Community
[http://community.zenoss.org/message/73512#73512]

Start a new discussion in zenoss-users at Zenoss Community
[http://community.zenoss.org/choose-container!input.jspa?contentType=1&containerType=14&container=2003]

[Chris Smith]

Chris Smith [http://community.zenoss.org/people/csmith] created the discussion

"Re: False Positive alerts on httpd monitoring"

To view the discussion, visit: http://community.zenoss.org/message/73510#73510

--------------------------------------------------------------
I had done that before my original post and even deleted and discovered / remodeled the device before. However for troubleshooting sake I removed both httpd process for this device this morning and remodeled. The alarm came back instantly. Here is the latest zenprocess output:



2013-06-06 08:11:54,363 DEBUG zen.zenprocess: Starting PBDaemon initialization
2013-06-06 08:11:54,363 INFO zen.zenprocess: Connecting to localhost:8789
2013-06-06 08:11:54,364 DEBUG zen.pbclientfactory: Starting connection...
2013-06-06 08:11:54,364 DEBUG zen.zenprocess: Logging in as admin
2013-06-06 08:11:54,365 DEBUG zen.pbclientfactory: Connected
2013-06-06 08:11:54,365 DEBUG zen.pbclientfactory: Cancelling connect timeout
2013-06-06 08:11:54,366 DEBUG zen.pbclientfactory: Sending credentials
2013-06-06 08:11:54,368 DEBUG zen.pbclientfactory: Cancelling connect timeout
2013-06-06 08:11:54,368 INFO zen.zenprocess: Connected to ZenHub
2013-06-06 08:11:54,368 DEBUG zen.zenprocess: Setting up initial services: EventService, Products.ZenHub.services.ProcessConfig
2013-06-06 08:11:54,369 DEBUG zen.zenprocess: Chaining getInitialServices with d2
2013-06-06 08:11:54,369 DEBUG zen.pbclientfactory: pinging perspective
2013-06-06 08:11:54,371 DEBUG zen.zenprocess: Loaded service EventService from zenhub
2013-06-06 08:11:54,371 DEBUG zen.zenprocess: Loaded service Products.ZenHub.services.ProcessConfig from zenhub
2013-06-06 08:11:54,371 DEBUG zen.zenprocess: Queued event (total of 1) {'rcvtime': 1370527914.371423, 'severity': 0, 'component': 'zenprocess', 'agent': 'zenprocess', 'summary': 'started', 'manager': 'na-den-zen-01.meetingonecorp.local', 'device': 'localhost', 'eventClass': '/App/Start', 'monitor': 'localhost'}
2013-06-06 08:11:54,371 DEBUG zen.zenprocess: Sending 1 events, 0 perf events, 0 heartbeats
2013-06-06 08:11:54,372 DEBUG zen.zenprocess: Calling connected.
2013-06-06 08:11:54,372 DEBUG zen.collector.config: Heartbeat timeout set to 540s
2013-06-06 08:11:54,372 DEBUG zen.collector.scheduler: add task configLoader, <Products.ZenCollector.config.ConfigurationLoaderTask object at 0x4ebfa90> using 1200 second interval
2013-06-06 08:11:54,373 DEBUG zen.zenprocess: Performing periodic maintenance
2013-06-06 08:11:54,373 DEBUG zen.pbclientfactory: perspective ponged
2013-06-06 08:11:54,373 DEBUG zen.pbclientfactory: Cancelling ping timeout
2013-06-06 08:11:54,373 DEBUG zen.collector.scheduler: Task configLoader starting on 1200 second intervals
2013-06-06 08:11:54,373 DEBUG zen.collector.scheduler: Task configLoader changing state from IDLE to QUEUED
2013-06-06 08:11:54,375 DEBUG zen.collector.scheduler: Task configLoader changing state from QUEUED to RUNNING
2013-06-06 08:11:54,375 DEBUG zen.collector.config: configLoader gathering configuration
2013-06-06 08:11:54,375 DEBUG zen.collector.config: Fetching daemon configuration properties
2013-06-06 08:11:54,392 DEBUG zen.collector.scheduler: Task configLoader changing state from RUNNING to FETCHING_MISC_CONFIG
2013-06-06 08:11:54,392 DEBUG zen.zenprocess: Updated configCycleInterval preference to 360
2013-06-06 08:11:54,393 DEBUG zen.zenprocess: Changing config task interval from 20 to 360 minutes
2013-06-06 08:11:54,393 DEBUG zen.collector.scheduler: Stopping task configLoader, <Products.ZenCollector.config.ConfigurationLoaderTask object at 0x4ebfa90>
2013-06-06 08:11:54,393 DEBUG zen.collector.scheduler: call finished LoopingCall<1200>(CallableTask: configLoader, *(), **{}) : LoopingCall<1200>(CallableTask: configLoader, *(), **{})
2013-06-06 08:11:54,393 INFO zen.collector.scheduler: Detailed Task Statistics:
configLoader Current State: FETCHING_MISC_CONFIG Successful_Runs: 1 Failed_Runs: 0 Missed_Runs: 0


Detailed Task States:
configLoader State: RUNNING Total: 1 Total Elapsed: 0.0174 Min: 0.0174 Max: 0.0174 Mean: 0.0174 StdDev: 0.0000
configLoader State: QUEUED Total: 1 Total Elapsed: 0.0014 Min: 0.0014 Max: 0.0014 Mean: 0.0014 StdDev: 0.0000




2013-06-06 08:11:54,393 DEBUG zen.collector.config: Heartbeat timeout set to 540s
2013-06-06 08:11:54,393 DEBUG zen.collector.scheduler: add task configLoader, <Products.ZenCollector.config.ConfigurationLoaderTask object at 0x4f8f750> using 21600 second interval
2013-06-06 08:11:54,394 DEBUG zen.zenprocess: Updated defaultRRDCreateCommand preference to ('RRA:AVERAGE:0.5:1:600', 'RRA:AVERAGE:0.5:6:600', 'RRA:AVERAGE:0.5:24:600', 'RRA:AVERAGE:0.5:288:600', 'RRA:MAX:0.5:6:600', 'RRA:MAX:0.5:24:600', 'RRA:MAX:0.5:288:600')
2013-06-06 08:11:54,394 DEBUG zen.collector.config: Fetching threshold classes
2013-06-06 08:11:54,398 DEBUG zen.zenprocess: Loading classes ['Products.ZenModel.MinMaxThreshold', 'Products.ZenModel.ValueChangeThreshold']
2013-06-06 08:11:54,399 DEBUG zen.collector.config: Fetching collector thresholds
2013-06-06 08:11:54,407 DEBUG zen.thresholds: Updating threshold ('high event queue', ('localhost collector', ''))
2013-06-06 08:11:54,407 DEBUG zen.thresholds: Updating threshold ('zenmodeler cycle time', ('localhost collector', ''))
2013-06-06 08:11:54,407 DEBUG zen.collector.config: Fetching configurations
2013-06-06 08:11:54,419 DEBUG zen.zenprocess: updateDeviceConfigs: updatedConfigs=['app-01']
2013-06-06 08:11:54,419 DEBUG zen.zenprocess: Processing configuration for app-01
2013-06-06 08:11:54,419 DEBUG zen.zenprocess: ConfigListener: configuration app-01 added
2013-06-06 08:11:54,420 DEBUG zen.collector.tasks: splitting config DeviceProxy:app-01
2013-06-06 08:11:54,421 DEBUG zen.zenprocess: Tasks for config app-01: {'app-01': <__main__.ZenProcessTask object at 0x501d750>}
2013-06-06 08:11:54,421 DEBUG zen.collector.scheduler: add task app-01, <__main__.ZenProcessTask object at 0x501d750> using 180 second interval
2013-06-06 08:11:54,421 DEBUG zen.collector.scheduler: Task app-01 starting on 180 second intervals
2013-06-06 08:11:54,421 DEBUG zen.collector.scheduler: Task app-01 changing state from IDLE to QUEUED
2013-06-06 08:11:54,422 DEBUG zen.zenprocess: purgeOmittedDevices: deletedConfigs=
2013-06-06 08:11:54,422 DEBUG zen.collector.scheduler: Task configLoader finished, result: 'Configuration loaded'
2013-06-06 08:11:54,422 DEBUG zen.collector.scheduler: Task app-01 changing state from QUEUED to RUNNING
2013-06-06 08:11:54,422 DEBUG zen.collector.scheduler: Task app-01 changing state from RUNNING to CONNECTING
2013-06-06 08:11:54,422 DEBUG zen.twistedsnmp: AgentProxy._getCmdLineArgs: using google ipaddr on 192.168.148.140
2013-06-06 08:11:54,461 DEBUG zen.zenprocess: Opened proxy to app-01 [192.168.148.140]
2013-06-06 08:11:54,462 DEBUG zen.zenprocess: Scanning for processes from app-01 [192.168.148.140]
2013-06-06 08:11:54,462 DEBUG zen.collector.scheduler: Task app-01 changing state from CONNECTING to SCANNING_PROCESSES
2013-06-06 08:11:54,524 DEBUG zen.zenprocess: Queued event (total of 1) {'rcvtime': 1370527914.524341, 'monitor': 'localhost', 'agent': 'zenprocess', 'summary': 'Process table up for device app-01 - timeout cleared', 'manager': 'na-den-zen-01.meetingonecorp.local', 'eventGroup': 'Process', 'eventKey': 'table_scan_timeout', 'device': 'app-01', 'eventClass': '/Status/Snmp', 'severity': 0}
2013-06-06 08:11:54,524 DEBUG zen.collector.scheduler: Task app-01 changing state from SCANNING_PROCESSES to PARSING_TABLE_DATA
2013-06-06 08:11:54,524 INFO zen.zenprocess: NAMETABLE = {'.1.3.6.1.2.1.25.4.2.1.2.2648': 'tomcat6.exe', '.1.3.6.1.2.1.25.4.2.1.2.1112': 'msdtc.exe', '.1.3.6.1.2.1.25.4.2.1.2.2176': 'inetinfo.exe', '.1.3.6.1.2.1.25.4.2.1.2.3088': 'k2index.exe', '.1.3.6.1.2.1.25.4.2.1.2.1376': 'jrun.exe', '.1.3.6.1.2.1.25.4.2.1.2.7108': 'w3wp.exe', '.1.3.6.1.2.1.25.4.2.1.2.2748': 'controld.exe', '.1.3.6.1.2.1.25.4.2.1.2.2572': 'snmp.exe', '.1.3.6.1.2.1.25.4.2.1.2.1276': 'solr.exe', '.1.3.6.1.2.1.25.4.2.1.2.4072': 'cdm.exe', '.1.3.6.1.2.1.25.4.2.1.2.3676': 'net_traffic.exe', '.1.3.6.1.2.1.25.4.2.1.2.792': 'svchost.exe', '.1.3.6.1.2.1.25.4.2.1.2.412': 'csrss.exe', '.1.3.6.1.2.1.25.4.2.1.2.4548': 'wmiprvse.exe', '.1.3.6.1.2.1.25.4.2.1.2.2292': 'controller.exe', '.1.3.6.1.2.1.25.4.2.1.2.1896': 'svchost.exe', '.1.3.6.1.2.1.25.4.2.1.2.3796': 'ntperf.exe', '.1.3.6.1.2.1.25.4.2.1.2.2296': 'NTRtScan.exe', '.1.3.6.1.2.1.25.4.2.1.2.740': 'svchost.exe', '.1.3.6.1.2.1.25.4.2.1.2.3232': 'TmListen.exe', '.1.3.6.1.2.1.25.4.2.1.2.3108': 'webblocker.exe', '.1.3.6.1.2.1.25.4.2.1.2.368': 'cbService.exe', '.1.3.6.1.2.1.25.4.2.1.2.4496': 'wmiprvse.exe', '.1.3.6.1.2.1.25.4.2.1.2.1292': 'CFDotNetsvc.exe', '.1.3.6.1.2.1.25.4.2.1.2.5720': 'dllhost.exe', '.1.3.6.1.2.1.25.4.2.1.2.4696': 'svchost.exe', '.1.3.6.1.2.1.25.4.2.1.2.1392': 'swagent.exe', '.1.3.6.1.2.1.25.4.2.1.2.360': 'smss.exe', '.1.3.6.1.2.1.25.4.2.1.2.1212': 'httpd.exe', '.1.3.6.1.2.1.25.4.2.1.2.1316': 'jrunsvc.exe', '.1.3.6.1.2.1.25.4.2.1.2.3180': 'processes.exe', '.1.3.6.1.2.1.25.4.2.1.2.2216': 'jqs.exe', '.1.3.6.1.2.1.25.4.2.1.2.2272': 'nimbus.exe', '.1.3.6.1.2.1.25.4.2.1.2.2888': 'k2server.exe', '.1.3.6.1.2.1.25.4.2.1.2.916': 'svchost.exe', '.1.3.6.1.2.1.25.4.2.1.2.3188': 'svchost.exe', '.1.3.6.1.2.1.25.4.2.1.2.6728': 'vssvc.exe', '.1.3.6.1.2.1.25.4.2.1.2.4468': 'svchost.exe', '.1.3.6.1.2.1.25.4.2.1.2.2676': 'vmtoolsd.exe', '.1.3.6.1.2.1.25.4.2.1.2.5020': 'logon.scr', '.1.3.6.1.2.1.25.4.2.1.2.888': 'svchost.exe', '.1.3.6.1.2.1.25.4.2.1.2.4028': 'cbVSCService11.exe', '.1.3.6.1.2.1.25.4.2.1.2.1736': 'k2admin.exe', '.1.3.6.1.2.1.25.4.2.1.2.1': 'System Idle Process', '.1.3.6.1.2.1.25.4.2.1.2.2816': 'hdb.exe', '.1.3.6.1.2.1.25.4.2.1.2.1692': 'swsoc.exe', '.1.3.6.1.2.1.25.4.2.1.2.4': 'System', '.1.3.6.1.2.1.25.4.2.1.2.1928': 'appservService.exe', '.1.3.6.1.2.1.25.4.2.1.2.684': 'vmacthlp.exe', '.1.3.6.1.2.1.25.4.2.1.2.1004': 'spoolsv.exe', '.1.3.6.1.2.1.25.4.2.1.2.484': 'services.exe', '.1.3.6.1.2.1.25.4.2.1.2.436': 'winlogon.exe', '.1.3.6.1.2.1.25.4.2.1.2.2696': 'spooler.exe', '.1.3.6.1.2.1.25.4.2.1.2.2956': 'ntevl.exe', '.1.3.6.1.2.1.25.4.2.1.2.5504': 'svchost.exe', '.1.3.6.1.2.1.25.4.2.1.2.6992': 'wmiapsrv.exe', '.1.3.6.1.2.1.25.4.2.1.2.1304': 'JNBDotNetSide.exe', '.1.3.6.1.2.1.25.4.2.1.2.1384': 'httpd.exe', '.1.3.6.1.2.1.25.4.2.1.2.844': 'svchost.exe', '.1.3.6.1.2.1.25.4.2.1.2.1300': 'java.exe', '.1.3.6.1.2.1.25.4.2.1.2.1324': 'java.exe', '.1.3.6.1.2.1.25.4.2.1.2.2544': 'svchost.exe', '.1.3.6.1.2.1.25.4.2.1.2.4372': 'CNTAoSMgr.exe', '.1.3.6.1.2.1.25.4.2.1.2.496': 'lsass.exe', '.1.3.6.1.2.1.25.4.2.1.2.3704': 'VMUpgradeHelper.exe', '.1.3.6.1.2.1.25.4.2.1.2.1684': 'swstrtr.exe'}
2013-06-06 08:11:54,525 INFO zen.zenprocess: PATHTABLE = {'.1.3.6.1.2.1.25.4.2.1.4.496': 'C:\\WINDOWS\\system32\\', '.1.3.6.1.2.1.25.4.2.1.4.1896': 'C:\\WINDOWS\\System32\\', '.1.3.6.1.2.1.25.4.2.1.4.2956': '', '.1.3.6.1.2.1.25.4.2.1.4.4372': 'C:\\Program Files\\Trend Micro\\OfficeScan Client\\', '.1.3.6.1.2.1.25.4.2.1.4.4696': 'C:\\WINDOWS\\System32\\', '.1.3.6.1.2.1.25.4.2.1.4.3796': '', '.1.3.6.1.2.1.25.4.2.1.4.1684': 'D:\\ColdFusion9\\db\\slserver54\\bin\\', '.1.3.6.1.2.1.25.4.2.1.4.6728': 'C:\\WINDOWS\\System32\\', '.1.3.6.1.2.1.25.4.2.1.4.1212': 'C:\\Program Files\\Apache Software Foundation\\Apache2.2\\bin\\', '.1.3.6.1.2.1.25.4.2.1.4.1316': 'D:\\ColdFusion9\\runtime\\bin\\', '.1.3.6.1.2.1.25.4.2.1.4.5504': 'C:\\WINDOWS\\System32\\', '.1.3.6.1.2.1.25.4.2.1.4.1376': '', '.1.3.6.1.2.1.25.4.2.1.4.1736': 'D:\\ColdFusion9\\verity\\k2\\_nti40\\bin\\', '.1.3.6.1.2.1.25.4.2.1.4.2292': '', '.1.3.6.1.2.1.25.4.2.1.4.4028': 'C:\\Program Files\\Cobian Backup 11\\', '.1.3.6.1.2.1.25.4.2.1.4.2176': 'C:\\WINDOWS\\system32\\inetsrv\\', '.1.3.6.1.2.1.25.4.2.1.4.3088': 'D:\\ColdFusion9\\verity\\k2\\_nti40\\bin\\', '.1.3.6.1.2.1.25.4.2.1.4.1276': 'D:\\ColdFusion9\\solr\\', '.1.3.6.1.2.1.25.4.2.1.4.2648': 'D:\\apache-tomcat-6.0.26\\bin\\', '.1.3.6.1.2.1.25.4.2.1.4.888': '', '.1.3.6.1.2.1.25.4.2.1.4.4496': 'C:\\WINDOWS\\system32\\wbem\\', '.1.3.6.1.2.1.25.4.2.1.4.436': '', '.1.3.6.1.2.1.25.4.2.1.4.844': '', '.1.3.6.1.2.1.25.4.2.1.4.1384': 'C:\\Program Files\\Apache Software Foundation\\Apache2.2\\bin\\', '.1.3.6.1.2.1.25.4.2.1.4.1112': '', '.1.3.6.1.2.1.25.4.2.1.4.2572': 'C:\\WINDOWS\\System32\\', '.1.3.6.1.2.1.25.4.2.1.4.2816': '', '.1.3.6.1.2.1.25.4.2.1.4.792': '', '.1.3.6.1.2.1.25.4.2.1.4.2888': 'D:\\ColdFusion9\\verity\\k2\\_nti40\\bin\\', '.1.3.6.1.2.1.25.4.2.1.4.7108': 'c:\\windows\\system32\\inetsrv\\', '.1.3.6.1.2.1.25.4.2.1.4.3180': '', '.1.3.6.1.2.1.25.4.2.1.4.2696': '', '.1.3.6.1.2.1.25.4.2.1.4.412': 'C:\\WINDOWS\\system32\\', '.1.3.6.1.2.1.25.4.2.1.4.4072': '', '.1.3.6.1.2.1.25.4.2.1.4.484': 'C:\\WINDOWS\\system32\\', '.1.3.6.1.2.1.25.4.2.1.4.6992': 'C:\\WINDOWS\\system32\\wbem\\', '.1.3.6.1.2.1.25.4.2.1.4.4': '', '.1.3.6.1.2.1.25.4.2.1.4.1': '', '.1.3.6.1.2.1.25.4.2.1.4.3704': 'C:\\Program Files\\VMware\\VMware Tools\\', '.1.3.6.1.2.1.25.4.2.1.4.2676': 'C:\\Program Files\\VMware\\VMware Tools\\', '.1.3.6.1.2.1.25.4.2.1.4.3232': 'C:\\Program Files\\Trend Micro\\OfficeScan Client\\', '.1.3.6.1.2.1.25.4.2.1.4.4548': '', '.1.3.6.1.2.1.25.4.2.1.4.1692': 'D:\\ColdFusion9\\db\\slserver54\\bin\\', '.1.3.6.1.2.1.25.4.2.1.4.5020': '', '.1.3.6.1.2.1.25.4.2.1.4.1324': 'D:\\ColdFusion9\\runtime\\jre\\bin\\', '.1.3.6.1.2.1.25.4.2.1.4.1300': '', '.1.3.6.1.2.1.25.4.2.1.4.2748': 'C:\\Program Files\\WatchGuard\\', '.1.3.6.1.2.1.25.4.2.1.4.1304': 'D:\\ColdFusion9\\jnbridge\\', '.1.3.6.1.2.1.25.4.2.1.4.2544': '', '.1.3.6.1.2.1.25.4.2.1.4.5720': 'C:\\WINDOWS\\system32\\', '.1.3.6.1.2.1.25.4.2.1.4.1004': 'C:\\WINDOWS\\system32\\', '.1.3.6.1.2.1.25.4.2.1.4.916': 'C:\\WINDOWS\\System32\\', '.1.3.6.1.2.1.25.4.2.1.4.3108': 'C:\\Program Files\\WatchGuard\\', '.1.3.6.1.2.1.25.4.2.1.4.3188': 'C:\\WINDOWS\\System32\\', '.1.3.6.1.2.1.25.4.2.1.4.3676': '', '.1.3.6.1.2.1.25.4.2.1.4.360': '\\SystemRoot\\System32\\', '.1.3.6.1.2.1.25.4.2.1.4.2296': 'C:\\Program Files\\Trend Micro\\OfficeScan Client\\', '.1.3.6.1.2.1.25.4.2.1.4.4468': 'C:\\WINDOWS\\System32\\', '.1.3.6.1.2.1.25.4.2.1.4.1928': 'D:\\glassfish\\lib\\', '.1.3.6.1.2.1.25.4.2.1.4.684': 'C:\\Program Files\\VMware\\VMware Tools\\', '.1.3.6.1.2.1.25.4.2.1.4.368': 'C:\\Program Files\\Cobian Backup 11\\', '.1.3.6.1.2.1.25.4.2.1.4.2272': 'C:\\Program Files\\NimBUS\\bin\\', '.1.3.6.1.2.1.25.4.2.1.4.1292': 'D:\\ColdFusion9\\jnbridge\\', '.1.3.6.1.2.1.25.4.2.1.4.2216': 'C:\\Program Files\\Java\\jre6\\bin\\', '.1.3.6.1.2.1.25.4.2.1.4.740': 'C:\\WINDOWS\\system32\\', '.1.3.6.1.2.1.25.4.2.1.4.1392': 'D:\\ColdFusion9\\db\\slserver54\\bin\\'}
2013-06-06 08:11:54,525 INFO zen.zenprocess: ARGSTABLE = {'.1.3.6.1.2.1.25.4.2.1.5.1684': '"ColdFusion 9 ODBC Server"', '.1.3.6.1.2.1.25.4.2.1.5.1376': '-nohup -ntservice "ColdFusion 9 Application Server-StartEvent" -startByNTService "coldfusion"', '.1.3.6.1.2.1.25.4.2.1.5.5720': '/Processid:{02D4B3F1-FD88-11D1-960D-00805FC79235}', '.1.3.6.1.2.1.25.4.2.1.5.1692': '"ColdFusion 9 ODBC Server"', '.1.3.6.1.2.1.25.4.2.1.5.2572': '', '.1.3.6.1.2.1.25.4.2.1.5.2292': '', '.1.3.6.1.2.1.25.4.2.1.5.6992': '', '.1.3.6.1.2.1.25.4.2.1.5.4468': '-k swprv', '.1.3.6.1.2.1.25.4.2.1.5.1392': '"ColdFusion 9 ODBC Agent"', '.1.3.6.1.2.1.25.4.2.1.5.2676': '', '.1.3.6.1.2.1.25.4.2.1.5.1004': '', '.1.3.6.1.2.1.25.4.2.1.5.1316': '', '.1.3.6.1.2.1.25.4.2.1.5.4372': '', '.1.3.6.1.2.1.25.4.2.1.5.1896': '-k WinErr', '.1.3.6.1.2.1.25.4.2.1.5.2648': '//RS//Tomcat6', '.1.3.6.1.2.1.25.4.2.1.5.5504': '-k termsvcs', '.1.3.6.1.2.1.25.4.2.1.5.484': '', '.1.3.6.1.2.1.25.4.2.1.5.1212': ' -k runservice', '.1.3.6.1.2.1.25.4.2.1.5.1276': '-zglaxservice CF9Solr', '.1.3.6.1.2.1.25.4.2.1.5.2816': '', '.1.3.6.1.2.1.25.4.2.1.5.7108': '-a \\\\.\\pipe\\iisipm9237b1a7-d636-41a7-a16a-8ab48a33c0aa -t 20 -ap "DefaultAppPool"', '.1.3.6.1.2.1.25.4.2.1.5.792': '', '.1.3.6.1.2.1.25.4.2.1.5.3232': '', '.1.3.6.1.2.1.25.4.2.1.5.3704': ' /service', '.1.3.6.1.2.1.25.4.2.1.5.3796': '', '.1.3.6.1.2.1.25.4.2.1.5.1292': '', '.1.3.6.1.2.1.25.4.2.1.5.1928': '"\\"D:\\glassfish\\bin\\asadmin.bat\\" start-domain --user admin domain1" "\\"D:\\glassfish\\bin\\asadmin.bat\\" stop-domain domain1\\"', '.1.3.6.1.2.1.25.4.2.1.5.1736': ' -cfg "D:\\ColdFusion9\\verity\\k2\\common\\verity.cfg" -ntstart 1', '.1.3.6.1.2.1.25.4.2.1.5.5020': '/s', '.1.3.6.1.2.1.25.4.2.1.5.4548': '', '.1.3.6.1.2.1.25.4.2.1.5.844': '', '.1.3.6.1.2.1.25.4.2.1.5.1112': '', '.1.3.6.1.2.1.25.4.2.1.5.2296': '', '.1.3.6.1.2.1.25.4.2.1.5.3676': '', '.1.3.6.1.2.1.25.4.2.1.5.2696': '', '.1.3.6.1.2.1.25.4.2.1.5.2748': '', '.1.3.6.1.2.1.25.4.2.1.5.4696': '-k tapisrv', '.1.3.6.1.2.1.25.4.2.1.5.1': '', '.1.3.6.1.2.1.25.4.2.1.5.3088': ' -ualias ColdFusionK2_indexserver1', '.1.3.6.1.2.1.25.4.2.1.5.1384': ' -d "C:/Program Files/Apache Software Foundation/Apache2.2" -f "C:\\Program Files\\Apache Software Foundation\\Apache2.2\\conf\\httpd', '.1.3.6.1.2.1.25.4.2.1.5.4': '', '.1.3.6.1.2.1.25.4.2.1.5.436': '', '.1.3.6.1.2.1.25.4.2.1.5.916': '-k netsvcs', '.1.3.6.1.2.1.25.4.2.1.5.1300': '', '.1.3.6.1.2.1.25.4.2.1.5.4496': '', '.1.3.6.1.2.1.25.4.2.1.5.1304': '', '.1.3.6.1.2.1.25.4.2.1.5.4072': '', '.1.3.6.1.2.1.25.4.2.1.5.2176': '', '.1.3.6.1.2.1.25.4.2.1.5.888': '', '.1.3.6.1.2.1.25.4.2.1.5.496': '', '.1.3.6.1.2.1.25.4.2.1.5.2544': '', '.1.3.6.1.2.1.25.4.2.1.5.3180': '', '.1.3.6.1.2.1.25.4.2.1.5.1324': ' -server -Xmx256m -XX:+AggressiveOpts -XX:+ScavengeBeforeFullGC -XX:-UseParallelGC -DSTOP.PORT=8079 -DSTOP.KEY=cfstop -Dsolr.sol', '.1.3.6.1.2.1.25.4.2.1.5.4028': '', '.1.3.6.1.2.1.25.4.2.1.5.2956': '', '.1.3.6.1.2.1.25.4.2.1.5.2888': ' -ualias ColdFusionK2_server1', '.1.3.6.1.2.1.25.4.2.1.5.368': '', '.1.3.6.1.2.1.25.4.2.1.5.2272': '', '.1.3.6.1.2.1.25.4.2.1.5.740': '-k DcomLaunch', '.1.3.6.1.2.1.25.4.2.1.5.6728': '', '.1.3.6.1.2.1.25.4.2.1.5.412': 'ObjectDirectory=\\Windows SharedSection=1024,3072,512 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserS', '.1.3.6.1.2.1.25.4.2.1.5.360': '', '.1.3.6.1.2.1.25.4.2.1.5.684': '', '.1.3.6.1.2.1.25.4.2.1.5.2216': ' -service -config "C:\\Program Files\\Java\\jre6\\lib\\deploy\\jqs\\jqs.conf"', '.1.3.6.1.2.1.25.4.2.1.5.3108': '', '.1.3.6.1.2.1.25.4.2.1.5.3188': '-k iissvcs'}
2013-06-06 08:11:54,526 INFO zen.zenprocess: #===== Processes on app-01:
1 System Idle Process
4 System
360 smss.exe
368 cbService.exe
412 csrss.exe ObjectDirectory=\Windows SharedSection=1024,3072,512 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserS
436 winlogon.exe
484 services.exe
496 lsass.exe
684 vmacthlp.exe
740 svchost.exe -k DcomLaunch
792 svchost.exe
844 svchost.exe
888 svchost.exe
916 svchost.exe -k netsvcs
1004 spoolsv.exe
1112 msdtc.exe
1212 httpd.exe -k runservice
1276 solr.exe -zglaxservice CF9Solr
1292 CFDotNetsvc.exe
1300 java.exe
1304 JNBDotNetSide.exe
1316 jrunsvc.exe
1324 java.exe -server -Xmx256m -XX:+AggressiveOpts -XX:+ScavengeBeforeFullGC -XX:-UseParallelGC -DSTOP.PORT=8079 -DSTOP.KEY=cfstop -Dsolr.sol
1376 jrun.exe -nohup -ntservice "ColdFusion 9 Application Server-StartEvent" -startByNTService "coldfusion"
1384 httpd.exe -d "C:/Program Files/Apache Software Foundation/Apache2.2" -f "C:\Program Files\Apache Software Foundation\Apache2.2\conf\httpd
1392 swagent.exe "ColdFusion 9 ODBC Agent"
1684 swstrtr.exe "ColdFusion 9 ODBC Server"
1692 swsoc.exe "ColdFusion 9 ODBC Server"
1736 k2admin.exe -cfg "D:\ColdFusion9\verity\k2\common\verity.cfg" -ntstart 1
1896 svchost.exe -k WinErr
1928 appservService.exe "\"D:\glassfish\bin\asadmin.bat\" start-domain --user admin domain1" "\"D:\glassfish\bin\asadmin.bat\" stop-domain domain1\"
2176 inetinfo.exe
2216 jqs.exe -service -config "C:\Program Files\Java\jre6\lib\deploy\jqs\jqs.conf"
2272 nimbus.exe
2292 controller.exe
2296 NTRtScan.exe
2544 svchost.exe
2572 snmp.exe
2648 tomcat6.exe //RS//Tomcat6
2676 vmtoolsd.exe
2696 spooler.exe
2748 controld.exe
2816 hdb.exe
2888 k2server.exe -ualias ColdFusionK2_server1
2956 ntevl.exe
3088 k2index.exe -ualias ColdFusionK2_indexserver1
3108 webblocker.exe
3180 processes.exe
3188 svchost.exe -k iissvcs
3232 TmListen.exe
3676 net_traffic.exe
3704 VMUpgradeHelper.exe /service
3796 ntperf.exe
4028 cbVSCService11.exe
4072 cdm.exe
4372 CNTAoSMgr.exe
4468 svchost.exe -k swprv
4496 wmiprvse.exe
4548 wmiprvse.exe
4696 svchost.exe -k tapisrv
5020 logon.scr /s
5504 svchost.exe -k termsvcs
5720 dllhost.exe /Processid:{02D4B3F1-FD88-11D1-960D-00805FC79235}
6728 vssvc.exe
6992 wmiapsrv.exe
7108 w3wp.exe -a \\.\pipe\iisipm9237b1a7-d636-41a7-a16a-8ab48a33c0aa -t 20 -ap "DefaultAppPool"


2013-06-06 08:11:54,526 DEBUG zen.zenprocess: Queued event (total of 2) {'rcvtime': 1370527914.526754, 'monitor': 'localhost', 'agent': 'zenprocess', 'summary': 'Process table up for device app-01', 'manager': 'na-den-zen-01.meetingonecorp.local', 'eventGroup': 'Process', 'eventKey': 'resource_mib', 'device': 'app-01', 'eventClass': '/Status/Snmp', 'severity': 0}
2013-06-06 08:11:54,528 DEBUG zen.zenprocess: Found process 1384 on httpd.exe af5f979fd45fdd80441276b75378f2db
2013-06-06 08:11:54,528 DEBUG zen.zenprocess: Found process 1212 on httpd.exe af5f979fd45fdd80441276b75378f2db
2013-06-06 08:11:54,528 DEBUG zen.zenprocess: Queued event (total of 3) {'rcvtime': 1370527914.52862, 'monitor': 'localhost', 'component': 'httpd.exe', 'agent': 'zenprocess', 'summary': 'Process up: httpd.exe', 'manager': 'na-den-zen-01.meetingonecorp.local', 'eventGroup': 'Process', 'eventKey': '/Processes/Apache/osProcessClasses/httpd', 'device': 'app-01', 'eventClass': '/Status/OSProcess', 'message': "Process up: httpd.exe\n Using regex '^[^ ]*httpd[^ /]*( |$)' with pid's [1384, 1212] ", 'severity': 0}
2013-06-06 08:11:54,528 DEBUG zen.zenprocess: (app-01) Process up: httpd.exe
Using regex '^[^ ]*httpd[^ /]*( |$)' with pid's [1384, 1212]
2013-06-06 08:11:54,528 DEBUG zen.zenprocess: Found new httpd.exe httpd.exe af5f979fd45fdd80441276b75378f2db pid 1384 on app-01
2013-06-06 08:11:54,528 DEBUG zen.zenprocess: Found new httpd.exe httpd.exe af5f979fd45fdd80441276b75378f2db pid 1212 on app-01
2013-06-06 08:11:54,529 DEBUG zen.zenprocess: Queued event (total of 4) {'rcvtime': 1370527914.52909, 'monitor': 'localhost', 'component': 'httpd.exe', 'agent': 'zenprocess', 'summary': 'Process not running: httpd.exe', 'manager': 'na-den-zen-01.meetingonecorp.local', 'eventGroup': 'Process', 'eventKey': '/Processes/Apache/osProcessClasses/httpd', 'device': 'app-01', 'eventClass': '/Status/OSProcess', 'message': "Process not running: httpd.exe\n   Using regex '^[^ ]*httpd[^ /]*( |$)' \n   All Processes have stopped since the last model occurred. Last Modification time (2013/06/06 08:09:00)", 'severity': 4}
2013-06-06 08:11:54,529 WARNING zen.zenprocess: (app-01) Process not running: httpd.exe
   Using regex '^[^ ]*httpd[^ /]*( |$)'
   All Processes have stopped since the last model occurred. Last Modification time (2013/06/06 08:09:00)
2013-06-06 08:11:54,529 DEBUG zen.RRDUtil: /opt/zenoss/perf/Devices/app-01/os/processes/httpd.exe 3ac26244af1a29c6ca9ee1e8cb5240c4/count_count.rrd: 0.0, @ N
2013-06-06 08:11:54,530 DEBUG zen.RRDUtil: /opt/zenoss/perf/Devices/app-01/os/processes/httpd.exe af5f979fd45fdd80441276b75378f2db/count_count.rrd: 2.0, @ N
2013-06-06 08:11:54,530 DEBUG zen.zenprocess: Queued event (total of 5) {'rcvtime': 1370527914.530382, 'monitor': 'localhost', 'agent': 'zenprocess', 'summary': 'Process table up for device app-01', 'manager': 'na-den-zen-01.meetingonecorp.local', 'eventGroup': 'Process', 'eventKey': None, 'device': 'app-01', 'eventClass': '/Status/Snmp', 'severity': 0}
2013-06-06 08:11:54,530 DEBUG zen.collector.scheduler: Task app-01 changing state from PARSING_TABLE_DATA to FETCH_PERF_DATA
2013-06-06 08:11:54,530 DEBUG zen.zenprocess: app-01 fetching oid(s) ['.1.3.6.1.2.1.25.5.1.1.1.1384', '.1.3.6.1.2.1.25.5.1.1.2.1384', '.1.3.6.1.2.1.25.5.1.1.1.1212', '.1.3.6.1.2.1.25.5.1.1.2.1212']
2013-06-06 08:11:54,533 DEBUG zen.collector.scheduler: Task app-01 changing state from FETCH_PERF_DATA to STORE_PERF_DATA
2013-06-06 08:11:54,534 DEBUG zen.zenprocess: There are 2 pids by the name httpd.exe af5f979fd45fdd80441276b75378f2db - httpd.exe
2013-06-06 08:11:54,534 DEBUG zen.RRDUtil: /opt/zenoss/perf/Devices/app-01/os/processes/httpd.exe af5f979fd45fdd80441276b75378f2db/cpu_cpu.rrd: 0L, @ N
2013-06-06 08:11:54,534 DEBUG zen.RRDUtil: /opt/zenoss/perf/Devices/app-01/os/processes/httpd.exe af5f979fd45fdd80441276b75378f2db/mem_mem.rrd: 35942400.0, @ N
2013-06-06 08:11:54,534 DEBUG zen.zenprocess: Device app-01 [192.168.148.140] scanned successfully
2013-06-06 08:11:54,535 DEBUG zen.collector.scheduler: Task app-01 finished, result: None
2013-06-06 08:11:54,535 DEBUG zen.collector.scheduler: Task app-01 changing state from STORE_PERF_DATA to IDLE
2013-06-06 08:11:54,535 INFO zen.zenprocess: 1 devices processed (4 datapoints)
2013-06-06 08:11:54,535 INFO zen.collector.scheduler: Tasks: 2 Successful_Runs: 1 Failed_Runs: 0 Missed_Runs: 0 Queued_Tasks: 0 Running_Tasks: 1
2013-06-06 08:11:54,535 DEBUG zen.collector.scheduler: In shutdown stage before
2013-06-06 08:11:54,535 DEBUG zen.collector.scheduler: Stopping running task app-01
2013-06-06 08:11:54,535 DEBUG zen.collector.scheduler: call finished LoopingCall<180>(CallableTask: app-01, *(), **{}) : LoopingCall<180>(CallableTask: app-01, *(), **{})
2013-06-06 08:11:54,536 DEBUG zen.collector.scheduler: Removing task app-01
2013-06-06 08:11:54,536 DEBUG zen.collector.scheduler: Removing task configLoader
2013-06-06 08:11:54,536 DEBUG zen.collector.scheduler: tasks to clean set([<Products.ZenCollector.config.ConfigurationLoaderTask object at 0x4ebfa90>, <__main__.ZenProcessTask object at 0x501d750>, <Products.ZenCollector.config.ConfigurationLoaderTask object at 0x4f8f750>])
2013-06-06 08:11:54,536 DEBUG zen.collector.scheduler: Cleanup on task configLoader <Products.ZenCollector.config.ConfigurationLoaderTask object at 0x4ebfa90>
2013-06-06 08:11:54,536 DEBUG zen.collector.scheduler: Scheduler._cleanupTaskComplete: result=None task.name=configLoader
2013-06-06 08:11:54,536 DEBUG zen.collector.scheduler: Cleanup on task app-01 <__main__.ZenProcessTask object at 0x501d750>
2013-06-06 08:11:54,536 DEBUG zen.collector.scheduler: Scheduler._cleanupTaskComplete: result=None task.name=app-01
2013-06-06 08:11:54,536 DEBUG zen.collector.scheduler: Cleanup on task configLoader <Products.ZenCollector.config.ConfigurationLoaderTask object at 0x4f8f750>
2013-06-06 08:11:54,536 DEBUG zen.collector.scheduler: Scheduler._cleanupTaskComplete: result=None task.name=configLoader
2013-06-06 08:11:54,537 DEBUG zen.zenprocess: Tried to stop reactor that was stopped
2013-06-06 08:11:54,537 INFO zen.zenprocess: Daemon CollectorDaemon shutting down
2013-06-06 08:11:54,537 DEBUG zen.zenprocess: Sending 5 events, 0 perf events, 0 heartbeats
2013-06-06 08:11:54,557 DEBUG zen.zenprocess: Removing service EventService
2013-06-06 08:11:54,557 DEBUG zen.zenprocess: Removing service Products.ZenHub.services.ProcessConfig
2013-06-06 08:11:54,557 DEBUG zen.pbclientfactory: Lost connection to 127.0.0.1:8789 - [Failure instance: Traceback (failure with no frames): <class 'twisted.internet.error.ConnectionLost'>: Connection to the other side was lost in a non-clean fashion: Connection lost.
]
2013-06-06 08:11:54,557 DEBUG zen.collector.scheduler: In shutdown stage during
2013-06-06 08:11:54,557 DEBUG zen.collector.scheduler: In shutdown stage after
--------------------------------------------------------------

Reply to this message by replying to this email -or- go to the discussion on Zenoss Community
[http://community.zenoss.org/message/73510#73510]

Start a new discussion in zenoss-users at Zenoss Community
[http://community.zenoss.org/choose-container!input.jspa?contentType=1&containerType=14&container=2003]

[linkslice]

linkslice [http://community.zenoss.org/people/linkslice] created the discussion

"Re: False Positive alerts on httpd monitoring"

To view the discussion, visit: http://community.zenoss.org/message/73517#73517

--------------------------------------------------------------
uhm, wow, ok.

<full guessing mode=on>
try deleting the httpd process again, then from the command line run:
zenchkrels -r -x1 --dataroot=/zport/dmd/Devices/Server/Windows (or whatever devices class it's located in)

then remodel and try again.
--------------------------------------------------------------

Reply to this message by replying to this email -or- go to the discussion on Zenoss Community
[http://community.zenoss.org/message/73517#73517]

Start a new discussion in zenoss-users at Zenoss Community
[http://community.zenoss.org/choose-container!input.jspa?contentType=1&containerType=14&container=2003]

[linkslice]

linkslice [http://community.zenoss.org/people/linkslice] created the discussion

"Re: False Positive alerts on httpd monitoring"

To view the discussion, visit: http://community.zenoss.org/message/73518#73518

--------------------------------------------------------------
Also might deleting the zenprocess .pickle files and restart zenprocess.
--------------------------------------------------------------

Reply to this message by replying to this email -or- go to the discussion on Zenoss Community
[http://community.zenoss.org/message/73518#73518]

Start a new discussion in zenoss-users at Zenoss Community
[http://community.zenoss.org/choose-container!input.jspa?contentType=1&containerType=14&container=2003]

[Chris Smith]

Chris Smith [http://community.zenoss.org/people/csmith] created the discussion

"Re: False Positive alerts on httpd monitoring"

To view the discussion, visit: http://community.zenoss.org/message/73535#73535

--------------------------------------------------------------
Are there multiple zenprocess pickle files? I only found /opt/zenoss/var/zenprocess_counters.pickle

Also the command before that did not work for me. Was I supposed to change the dataroot part of the command?


[***@na-den-zen-01 root]$ zenchkrels -r -x1 --dataroot=/zport/dmd/Devices/Server/Windows
Usage: CheckRelations.py [options]


CheckRelations.py: error: no such option: --dataroot
--------------------------------------------------------------

Reply to this message by replying to this email -or- go to the discussion on Zenoss Community
[http://community.zenoss.org/message/73535#73535]

Start a new discussion in zenoss-users at Zenoss Community
[http://community.zenoss.org/choose-container!input.jspa?contentType=1&containerType=14&container=2003]

[linkslice]

linkslice [http://community.zenoss.org/people/linkslice] created the discussion

"Re: False Positive alerts on httpd monitoring"

To view the discussion, visit: http://community.zenoss.org/message/73523#73523

--------------------------------------------------------------
I'm on enterprise and so it might be different.
[***@zenoss ~]$ ls /opt/zenoss/perf/Daemons/localhost/zenprocess*.pickle
/opt/zenoss/perf/Daemons/localhost/zenprocess-getConfigNames.pickle  /opt/zenoss/perf/Daemons/localhost/zenprocess-threshold-classes.pickle
/opt/zenoss/perf/Daemons/localhost/zenprocess-properties.pickle      /opt/zenoss/perf/Daemons/localhost/zenprocess-thresholds.pickle

try running without the dataroot option then.  It could take awhile depending on how many devices you have.  What version are you on?
--------------------------------------------------------------

Reply to this message by replying to this email -or- go to the discussion on Zenoss Community
[http://community.zenoss.org/message/73523#73523]

Start a new discussion in zenoss-users at Zenoss Community
[http://community.zenoss.org/choose-container!input.jspa?contentType=1&containerType=14&container=2003]

[Chris Smith]

Chris Smith [http://community.zenoss.org/people/csmith] created the discussion

"Re: False Positive alerts on httpd monitoring"

To view the discussion, visit: http://community.zenoss.org/message/73536#73536

--------------------------------------------------------------
Running fresh install of 4.2.3. Looks like Enterprise is definitely different I have no zenprocess pickle files under /opt/zenoss/perf/Daemons/localhost/

zenchkrels -r -x1 completed and there was only a single file on the entire drive that matched zenprocess*pickle. I went ahead and moved /opt/zenoss/var/zenprocess_counters.pickle to my home directory and Zenoss recreated it.


I remodeled my server but once again and for a few minutes everything was clear...both processes showed as running! Then I got another alert stating one of the instances was down >.<
--------------------------------------------------------------

Reply to this message by replying to this email -or- go to the discussion on Zenoss Community
[http://community.zenoss.org/message/73536#73536]

Start a new discussion in zenoss-users at Zenoss Community
[http://community.zenoss.org/choose-container!input.jspa?contentType=1&containerType=14&container=2003]

[linkslice]

linkslice [http://community.zenoss.org/people/linkslice] created the discussion

"Re: False Positive alerts on httpd monitoring"

To view the discussion, visit: http://community.zenoss.org/message/73689#73689

--------------------------------------------------------------
I installed Core and got the same behavior.  When I changed Ignore Parameters when modeling to yes, and remodeled the device it went away and now behaves.
--------------------------------------------------------------

Reply to this message by replying to this email -or- go to the discussion on Zenoss Community
[http://community.zenoss.org/message/73689#73689]

Start a new discussion in zenoss-users at Zenoss Community
[http://community.zenoss.org/choose-container!input.jspa?contentType=1&containerType=14&container=2003]

[Chris Smith]

Chris Smith [http://community.zenoss.org/people/csmith] created the discussion

"Re: False Positive alerts on httpd monitoring"

To view the discussion, visit: http://community.zenoss.org/message/73746#73746

--------------------------------------------------------------
Thanks linkslice that resolved my issue. I was under the impression Ignore Parameters should be off when monitoring multiple instances of the same process. How would we verify it is monitoring them as 2 separate PIDs?
--------------------------------------------------------------

Reply to this message by replying to this email -or- go to the discussion on Zenoss Community
[http://community.zenoss.org/message/73746#73746]

Start a new discussion in zenoss-users at Zenoss Community
[http://community.zenoss.org/choose-container!input.jspa?contentType=1&containerType=14&container=2003]