Uptime and Log File Monitoring

Uptime and Log File Monitoring
Prev	Chapter 6. Appendix B: Reference Implementations	Next

The Uptime and Log File Monitoring (ULFM) Reference Implementation monitors:

uptime: captures days up and load averages after every 15 seconds from /usr/bin/uptime output. It generates two notifications–when up days is less than 30 days and when the 15 minutes load average is less than 1. Note that the notification for up days is generated only once per day because up days gets updated only once per day. The notification criteria were chosen specifically so that they generate alerts.
System log (/var/log/messages): automatically generates a notification when it detect a GT.M error in the system log.
Authentication log (/var/log/auth.log): automatically generates a notification when it detects a login failure in the authentication log.

The following table contains information about all files that are a part of the ULFM Reference Implementation. You can view these files from the configs subdirectory of your InfoHub distribution where they reside or download them from the links in the table. You can also click to download all files of the ULFM Reference Implementation together or open directly from http://tinco.pair.com/bhaskar/gtm/applications/infohub/ULFM_RI.zip.

Component	Name	Description
InfoHub Main Configuration File	`SimpleMonitor.conf`	The InfoHub configuration file used to configure the ULFM Reference Implementation. For uptime, it defines InfoDict Items `Load01`, `Load05`, and `Load15` to store load averages, and `Days` to store up days. There are two subscriptions–`PatchMe` to send a notification when `Days` is greater than 30 and `DontBeLazy` to send a notification when `Load15` is less than 1. For log files, it defines an InfoDict Item called `Anything` to hold the value of line read from each log file. For this item, it defines two subscriptions–`AuthFail` to send an alert when `Anything` contains ([) "Fail" and `GTMError` to send an alert when `Anything`contains ([) "%GTM-E".
FileLine Gleaner	`LogFileGleaner.m`	A simple FileLine gleaner program that reads every line of the /var/log/messages and /var/log/auth.log and returns value in the form of 9999:line_read_value. Note that 9999 is the InfoDict Id for `msg`. PreExpr gets invoked before processing the log file and defines configuration options and PostExpr gets invoked after completion of log file processing and removes configuration options defined in PreExpr.
PipeLine Gleaner	`UptimeGleaner.m`	A simple PipeLine gleaner program for the `uptime` command. It returns values in the multiples of <key>:<value> in the form of `3030400:Days :3030401:Load:3030405:Load5:3030415:Load15` for every line read from the `uptime` output. PreExpr gets invoked prior before processing `uptime` and defines configuration options. PostExpr gets invoked after completion of `uptime`processing and removes configuration options defined in PreExpr. InfoHub invokes the UptimeGleaner every 15 seconds.

To install the ULFM Reference Implementation, perform the following steps:

Install InfoHub and create an InfoHub database. For more information, refer to Installing InfoHub.
From the samples directory copy SimpleMonitor.conf to the configs directory.
Execute the following command to load the SimpleMonitor.conf configuration file and start InfoHub.
```
$ $gtm_dist/mumps -run InfoHub --action=configure --file=$ihsrcdir/configs/SimpleMonitor.conf
```
```
$ $gtm_dist/mumps -run InfoHub --action=start
```
For more information, refer to Loading a Configuration File and Starting an InfoHub.
Install the FIS GT.M SNMP Plugin. For installation instructions and prerequisites, refer to Installing the SNMP Plugin.
Execute the following command to start the SNMP Plugin using Subscriber Id 404. Note that the SNMP Subscriber Descriptor (entry starting with Subscriber:) in SimpleMonitor.conf specifies 404 as the Subscriber Id for uptime notifications and 503 as Subscriber Id for log file notifications.
```
$ $gtm_dist/mumps -run IHsnmp --action=start --plugin=404
```
For more information, refer to Starting the SNMP Plugin.
Execute the following commands to check the status of InfoHub and the SNMP Plugin:
```
$ $gtm_dist/mumps -run InfoHub --action=status 
```
```
$ $gtm_dist/mumps -run IHsnmp --action=status --plugin=404
```
For more information, refer to Monitoring an InfoHub and Monitoring the SNMP Plugin.
Congratulations! Your ULFM Reference Implementation is now installed .

The following illustration shows how the ULFM Reference Implementation sets up an InfoHub framework for monitoring.

ULFM Reference Implementation setup

Related Information:

Prev	Up	Next
FileLineSyslogGleaner Operation	Home	Chapter 7. Appendix C: Error Messages