FS
Documentation
You are here
Search
 

Monitoring Sentries From the Console

This page was last modified 00:22, 2 May 2006.

From Documentation

(Difference between revisions)
Jump to: navigation, search
Revision as of 06:25, 28 April 2006
Daniels (Talk | contribs)

← Previous diff		 Current revision
Daniels (Talk | contribs)
(→Checking the host monitor status log)
Line 1: Line 1:
-This chapter covers how to open a console window; the layout of the console; and+This section covers how to open a console window; the layout of the console; and how to diagnose and respond to an event.
-how to diagnose and respond to an event.+ 
-Starting a Console+=== Starting a Console ===
To start a console window from a shell, run this command: To start a console window from a shell, run this command:
-cos sentinel+ 
-To start a console window from COSmanager, click the Sentinel button from+<code>cos sentinel</code>
-the COSmanager button bar:+ 
-Figure 7 — COSmanager button bar+To start a console window from COSmanager, click the Sentinel button from the COSmanager button bar:
-56 Monitoring Sentries From the Console+ 
-Sentinel3G displays the Desktop view, which is a top-level view of the sentries+Sentinel3G displays the Desktop view, which is a top-level view of the sentries and folders that you have access to. The Desktop view always contains the Host view folder, and typically also contains several other sentries and folders of particular interest.
-and folders that you have access to. The Desktop view always contains the Host+ 
-view folder, and typically also contains several other sentries and folders of particular+=== Console Toolbar ===
-interest.+The Toolbar provides shortcuts to the most common operations.
-Figure 8 — Example: Desktop view of console with user-defined folders+ 
-Console Toolbar+ Figure 9 — Console Toolbar
-The Toolbar provides shortcuts to the most common operations.+ 
-Figure 9 — Console Toolbar+=== Context Menu ===
-Browse console help+ 
-Show parent folder+
-Start/stop host monitor+
-Browse notes+
-about the selected+
-sentry or folder+
-Diagnose or+
-respond to alert+
-Change console view+
-View realtime sentry data+
-Disable/enable sentry+
-Disable/enable notification+
-Monitoring Sentries From the Console 57+
-Context Menu+
The context menu lists common menu options for the currently selected object. The context menu lists common menu options for the currently selected object.
-Figure 10 — A sample context menu+ 
-Changing the View+ Figure 10 — A sample context menu
-The standard view shows all the sentries that are visible to the user in the current+ 
-folder, whatever their current state. The console starts up in Desktop view. You can+=== Changing the View ===
-double-click a folder to open it, or change the view using the view buttons on the+The standard view shows all the sentries that are visible to the user in the current folder, whatever their current state. The console starts up in Desktop view. You can double-click a folder to open it, or change the view using the view buttons on the Toolbar or the options under the Go menu.
-Toolbar or the options under the Go menu.+ 
-The context menu is activated by+The context menu is activated by clicking with the secondary mouse button (usually the right button for right-handed users) on a sentry or folder, or on the background of the console window.
-clicking with the secondary+ 
-mouse button (usually the right+The context menu provides shortcuts to the most commonly used menu options for the selected object.
-button for right-handed users) on+ 
-a sentry or folder, or on the background+ Figure 11 — Changing the console view
-of the console window.+ 
-The context menu provides+Go > Desktop shows any top-level custom folders that have been added, plus the system folder to view sentries for a selected host (Host View).
-shortcuts to the most commonly+ 
-used menu options for the+Go > Hosts lists all hosts currently being monitored. You can then open a host folder to show the folders and sentries on that host.
-selected object+ 
-This example shows the context+Go > Abnormal sentries combines in a single window all the abnormal sentries in the current folder and all of its sub-folders. Abnormal sentries are those that are in a state other than normal or down. Use the Back button ( ) to return from Abnormal view.
-menu for the selected sentry.+ 
-58 Monitoring Sentries From the Console+=== Creating a New Folder ===
-Figure 11 — Changing the console view+You can create new folders containing selected sentries and folders. This is useful for grouping related sentries from different folders on various hosts. For example, a File Servers folder could contain sentries for filesystems only on hosts that are used
-Go > Desktop shows any top-level custom folders that have been added, plus the+
-system folder to view sentries for a selected host (Host View).+
-Go > Hosts lists all hosts currently being monitored. You can then open a host+
-folder to show the folders and sentries on that host.+
-Go > Abnormal sentries combines in a single window all the abnormal sentries+
-in the current folder and all of its sub-folders. Abnormal sentries are those that+
-are in a state other than normal or down. Use the Back button ( ) to return+
-from Abnormal view.+
-Creating a New Folder+
-You can create new folders containing selected sentries and folders. This is useful+
-for grouping related sentries from different folders on various hosts. For example, a+
-File Servers folder could contain sentries for filesystems only on hosts that are used+
as file servers. as file servers.
-1. In Desktop view, select Edit > New folder, or select New folder+ 
-from the context menu.+#In Desktop view, select Edit > New folder, or select New folder from the context menu.
-Go (to new view) menu+#Enter a name for the folder.
-Hosts view+#Enter a description. This will appear in the status line on the console when this folder is selected.
-Desktop view+#Choose an icon. If none of the existing icons is suitable you can add a new one. See Add Icons on page 154.
-Abnormal sentries view Up to the parent+#Enter the file name only (without the path) of a notes file in the Sentinel3G doc directory. These notes will be available from the console to operators when monitoring or responding to alerts relating to this folder.
-folder, or Back+#Click Accept to save the new folder. The next step is to copy selected sentries into the new folder.
-from Abnormal+#Start another console window containing some sentries you wish to copy: select the folder, then select Open in new window from the context menu.
-sentries view+#Select and copy the sentries: Ctrl-click or middle-click on a sentry to add it to the selection; Shift-click to add a range of sentries to the selection.
-Monitoring Sentries From the Console 59+#Click in the target folder and paste the sentries: select Paste from the context menu.
-2. Enter a name for the folder.+ 
-3. Enter a description. This will appear in the status line on the console when+==== To specify which roles can access a folder/sentry class ====
-this folder is selected.+
-4. Choose an icon. If none of the existing icons is suitable you can add a new+
-one. See Add Icons on page 154.+
-5. Enter the file name only (without the path) of a notes file in the+
-Sentinel3G doc directory. These notes will be available from the+
-console to operators when monitoring or responding to alerts relating to+
-this folder.+
-6. Click Accept to save the new folder.+
-The next step is to copy selected sentries into the new folder.+
-7. Start another console window containing some sentries you wish to copy:+
-select the folder, then select Open in new window from the context+
-menu.+
-8. Select and copy the sentries: Ctrl-click or middle-click on a sentry to add it+
-to the selection; Shift-click to add a range of sentries to the selection.+
-60 Monitoring Sentries From the Console+
-9. Click in the target folder and paste the sentries: select Paste from the+
-context menu.+
-To specify which roles can access a folder/sentry class+
You can restrict access to this folder to users who have specified roles. You can restrict access to this folder to users who have specified roles.
-1. Click the folder icon to highlight it., then select Edit > Access.+#Click the folder icon to highlight it., then select Edit > Access.
-2. Click and select one or more roles. This folder will only be visible to+#Click and select one or more roles. This folder will only be visible to Sentinel3G users who have been assigned at least one of these roles. Leave this field blank to make the folder visible to all Sentinel3G users.
-Sentinel3G users who have been assigned at least one of these roles.+#Click Accept to save the access details for the folder.
-Leave this field blank to make the folder visible to all Sentinel3G users.+ 
-3. Click Accept to save the access details for the folder.+==== To change details of a folder/sentry class ====
-To change details of a folder/sentry class+#Select the folder.
-1. Select the folder.+#Select Edit > Change. The Sentry/Class Details form opens.
-2. Select Edit > Change. The Sentry/Class Details form opens.+#Enter or change any of these fields. Which fields can be changed depends on whether the selected object is a system folder, user-defined folder, or host.
-3. Enter or change any of these fields. Which fields can be changed depends+ 
-on whether the selected object is a system folder, user-defined folder, or+;Name: You can change the name that is displayed under the icon. System folders cannot be renamed.
-host.+:This field is available for the Host View icon and user-defined folders.
-Action Mouse Keyboard+;Description: This will appear in the status line on the console when this folder is selected.
-Select a sentry click on it+;Icon: Choose a different icon to represent this folder on the console.
-Select a range of sentries click the first sentry then+;Notes: file Enter the file name only (without the path) of a notes file in the Sentinel3G doc directory. These notes will be available from the console to operators when monitoring or responding to alerts relating to this folder.
-Shift-click the last sentry+:This field is available for system folders.
-Add a sentry to the selection Ctrl-click or middle-click on it+ 
-Remove a sentry from the selection Ctrl-click on a selected sentry+
-Copy the selected sentries From the context menu or+
-Edit menu, select Copy+
-Shift-C+
-Paste the selected sentries in a new+
-folder+
-From the context menu or+
-Edit menu, select Paste+
-Shift-P+
-Remove a sentry from the folder From the context menu or+
-Edit menu, select Delete+
-Monitoring Sentries From the Console 61+
-Name You can change the name that is displayed under the icon. System+
-folders cannot be renamed.+
-This field is available for the Host View icon and user-defined+
-folders.+
-Description This will appear in the status line on the console when this folder+
-is selected.+
-Icon Choose a different icon to represent this folder on the console.+
-Notes file Enter the file name only (without the path) of a notes file in the+
-Sentinel3G doc directory. These notes will be available from+
-the console to operators when monitoring or responding to alerts+
-relating to this folder.+
-This field is available for system folders.+
Click Accept to save the changes. Click Accept to save the changes.
-To delete a user-defined folder/sentry class+ 
-Note Only user-defined folders can be deleted. A folder icon with the lock+==== To delete a user-defined folder/sentry class ====
-symbol is a system folder. It is required by Sentinel3G and cannot+Note Only user-defined folders can be deleted. A folder icon with the lock symbol is a system folder. It is required by Sentinel3G and cannot be deleted.
-be deleted.+ 
-1. In Desktop view, select the folder.+#In Desktop view, select the folder.
-2. Select Delete from the context menu.+#Select Delete from the context menu.
-62 Monitoring Sentries From the Console+ 
-Diagnosing an Event+=== Diagnosing an Event ===
-A event is usually first signified by a change in the sentry’s icon or that of its parent+A event is usually first signified by a change in the sentry’s icon or that of its parent folder (such as a change its color, or the appearance of an overlay icon). When a sentry indicates a possible problem, the console provides several ways to view more
-folder (such as a change its color, or the appearance of an overlay icon). When a sentry+
-indicates a possible problem, the console provides several ways to view more+
information to help diagnose the extent and cause of the problem. information to help diagnose the extent and cause of the problem.
-The color of the sentry’s name and the color and type of its indicator icon show the+ 
-current state or severity.+The color of the sentry’s name and the color and type of its indicator icon show the current state or severity.
-See Overlays and Indicator Icons on page 16 for a full list of indicators and other overlay+ 
-icons and what they mean.+See [[Overlays and Indicator Icons]] for a full list of indicators and other overlay icons and what they mean.
-Indicator icon and+ 
-orange color show+
-that this sentry now+
-has a severity of+
-warning+
-‘Grey light bulb’ indicator+
-icon shows that this sentry+
-now has a severity of+
-disabled+
-Overlay shows that this+
-is an ‘information-only’+
-icon+
-Console text+
-Thermometer indicator+
-and colour give a rough+
-visual indication of+
-swap space percentage+
-and state.+
-Sentry is waiting for operator+
-acknowledgement+
-Monitoring Sentries From the Console 63+
Console text provides useful status information about the selected sentry. Console text provides useful status information about the selected sentry.
-If you notice a folder has gone from normal to a higher severity you can quickly find+ 
-the extent of the problem by clicking the button to view abnormal sentries.+If you notice a folder has gone from normal to a higher severity you can quickly find the extent of the problem by clicking the button to view abnormal sentries.
-View the sentry’s property sheet+ 
 +==== View the sentry’s property sheet ====
The Property sheet identifies the sentry and shows its current state and severity. The Property sheet identifies the sentry and shows its current state and severity.
-1. Select the sentry.+#Select the sentry.
-2. From the context menu, select Properties.+#From the context menu, select Properties.
-Figure 12 — Sample property sheet+ 
-If a sentry is in Failed state, it indicates a problem with the agent (usually that it+ Figure 12 — Sample property sheet
-failed to start or has never returned any valid data). Undefined state indicates that+ 
-the sentry does not match any of the defined states (in other words, none of the+If a sentry is in Failed state, it indicates a problem with the agent (usually that it failed to start or has never returned any valid data). Undefined state indicates that the sentry does not match any of the defined states (in other words, none of the states’ entry conditions evaluated as true).
-states’ entry conditions evaluated as true).+ 
-View the sentry log+==== View the sentry log ====
-The sentry log shows details such state changes, actions performed, and error or+The sentry log shows details such state changes, actions performed, and error or warning messages. You can use this log to check the recent history of the sentry leading up to the present alert.
-warning messages. You can use this log to check the recent history of the sentry+ 
-leading up to the present alert.+#Select the sentry.
-1. Select the sentry.+#Select Logs > Sentry log.
-2. Select Logs > Sentry log.+ 
-64 Monitoring Sentries From the Console+ Figure 13 — Sample sentry log
-Figure 13 — Sample sentry log+ 
-The most recent entries in the log are displayed in a scrollable window. New+The most recent entries in the log are displayed in a scrollable window. New entries appear at the bottom of the data as they are added to the log. You can scroll back through the log, or click Follow to return to the end of the log.
-entries appear at the bottom of the data as they are added to the log. You can+ 
-scroll back through the log, or click Follow to return to the end of the log.+==== View a graph associated with this sentry ====
-View a graph associated with this sentry+#Select the sentry.
-1. Select the sentry.+#Select Report > Realtime graph.
-2. Select Report > Realtime graph.+#If there is more than one graph, choose one.
-Monitoring Sentries From the Console 65+ 
-3. If there is more than one graph, choose one.+==== View the monitoring notes file ====
-View the monitoring notes file+#Select the sentry.
-1. Select the sentry.+#Select Help > Monitoring notes.
-2. Select Help > Monitoring notes.+ 
To add or edit the notes file, see Add a Monitoring Notes File on page 148. To add or edit the notes file, see Add a Monitoring Notes File on page 148.
-Select Realtime Graph+ 
-from the Report menu…+==== Generate historical reports ====
-… then choose the graph,+The console provides several options for showing the current state of sentries and variables. Sentinel3G also provides two detailed reports based on historical data.
-if there is more than one+ 
-… or click the Realtime+You can use these to analyse changes in the data leading up to an event, or look for trends in the amount of time sentries are spending out of their normal state. These reports can be saved on the Host Monitor host and recalled either from the console or the command line.
-Graph button…+ 
-Click the secondary mouse button (e.g. rightclick+The Service Level report summarizes state changes for selected sentries, based on data from the Event Manager log. It shows the proportion of time sentries have spent in each state.
-on a mouse configured for a right-handed+ 
-person) to show the context menu. The context+The Logged Data report extracts historical variable data for selected sentries from the sentry logs. It is like a version of the realtime graph option extended back in time.
-menu has options to change the appearance of+ 
-the graph, such as the axes and labels.+=== Responding to an Event ===
-To dismiss the graph, press F3 or Exit from+ 
-the context menu.+==== Running an action ====
-66 Monitoring Sentries From the Console+Actions are predefined responses associated with a sentry that may be invoked by an operator. Each action runs a command. Depending on its type, each action may display output in the form of a report, or may simply run the command to try to fix the
-Generate historical reports+
-The console provides several options for showing the current state of sentries and+
-variables. Sentinel3G also provides two detailed reports based on historical data.+
-You can use these to analyse changes in the data leading up to an event, or look for+
-trends in the amount of time sentries are spending out of their normal state. These+
-reports can be saved on the Host Monitor host and recalled either from the console+
-or the command line.+
-The Service Level report summarizes state changes for selected sentries, based on+
-data from the Event Manager log. It shows the proportion of time sentries have+
-spent in each state.+
-The Logged Data report extracts historical variable data for selected sentries from+
-the sentry logs. It is like a version of the realtime graph option extended back in+
-time.+
-For more information, see Reports on page 73.+
-Responding to an Event+
-Running an action+
-Actions are predefined responses associated with a sentry that may be invoked by an+
-operator. Each action runs a command. Depending on its type, each action may display+
-output in the form of a report, or may simply run the command to try to fix the+
problem. problem.
-1. How you run an action depends on the number and type of the sentries and+ 
-how the action was configured.+#How you run an action depends on the number and type of the sentries and how the action was configured.
-• select a single sentry (or a single instance of a sentry).+#*select a single sentry (or a single instance of a sentry).
-• select multiple instances of a sentry. Note that selecting multiple sentries will+#*select multiple instances of a sentry. Note that selecting multiple sentries will only work with sentries that are in the same state and are of the same type.
-only work with sentries that are in the same state and are of the same type.+#*select the parent class folder, or click on the background of the console when in a class.
-• select the parent class folder, or click on the background of the console+#Select Sentry > Action.
-when in a class.+#If there is more than one action, choose one. Only the actions that are appropriate for the current state of the selected sentries will be shown.
-2. Select Sentry > Action.+#You may be asked at this point to enter your password (the password of your user account on this host) to confirm that you have the authority to run this action.
-Monitoring Sentries From the Console 67+ 
-3. If there is more than one action, choose one. Only the actions that are+The action is run. If the action is a report the output will be displayed in a browser.
-appropriate for the current state of the selected sentries will be shown.+ 
-4. You may be asked at this point to enter your password (the password of+==== Acknowledging an event ====
-your user account on this host) to confirm that you have the authority to+A sentry may request acknowledgement from an operator before changing to another state. This is usually done to confirm that the operator has been made aware of a probable “one-off ” incident before returning the sentry to normal state.
-run this action.+ 
-The action is run. If the action is a report the output will be displayed in a+If a sentry is waiting for acknowledgement this overlay icon will appear next to it.
-browser.+ 
-Acknowledging an event+You should check to see whether any monitoring notes have been provided to explain your options at this point, and what will happen next if the alert is acknowledged.
-A sentry may request acknowledgement from an operator before changing to+ 
-another state. This is usually done to confirm that the operator has been made aware+
-of a probable “one-off ” incident before returning the sentry to normal state.+
-If a sentry is waiting for acknowledgement this overlay icon will appear next to it.+
-You should check to see whether any monitoring notes have been provided to+
-explain your options at this point, and what will happen next if the alert is acknowledged.+
To acknowledge a waiting sentry: To acknowledge a waiting sentry:
-1. Select the sentry.+#Select the sentry.
-2. Select Sentry > Acknowledge. The sentry will change to the new+#Select Sentry > Acknowledge. The sentry will change to the new state.
-state.+ 
-68 Monitoring Sentries From the Console+==== Enable/disable a sentry ====
-Enable/disable a sentry+Disabling a sentry stops the state transitions from being processed. You can use this as a temporary way to suppress alerts and notifications, for example when an application or service is down for maintenance. Note that only the sentry is disabled — the agent is still running and its variables are still being set, so any history variables will still be collected.
-Disabling a sentry stops the state transitions from being processed. You can use this+ 
-as a temporary way to suppress alerts and notifications, for example when an application+#Select the sentry.
-or service is down for maintenance. Note that only the sentry is disabled—+#Select Sentry > Disable.
-the agent is still running and its variables are still being set, so any history variables+#Enter the reason why the sentry is being disabled, then click Accept. This message will be added to the sentry log for auditing purposes and to help other operators who might check the status of this sentry.
-will still be collected.+ 
-1. Select the sentry.+
-2. Select Sentry > Disable.+
-3. Enter the reason why the sentry is being disabled, then click Accept. This+
-message will be added to the sentry log for auditing purposes and to help+
-other operators who might check the status of this sentry.+
-The sentry changes to have the 'disabled’ color and overlay icon:+
To reenable the sentry: To reenable the sentry:
-1. Select the sentry.+#Select the sentry.
-2. Select Sentry > Enable.+#Select Sentry > Enable.
-Enable/disable notification for a sentry+ 
-Disabling notification for a sentry stops notification messages from being sent.+==== Enable/disable notification for a sentry ====
-Only notification is disabled—the agent is still running and its variables are still+Disabling notification for a sentry stops notification messages from being sent. Only notification is disabled—the agent is still running and its variables are still being set, so any history variables will still be collected and alerts will still be processed.
-being set, so any history variables will still be collected and alerts will still be processed.+ 
-1. Select the sentry.+#Select the sentry.
-2. Select Sentry > Notification off.+#Select Sentry > Notification off.
 + 
The sentry changes to show the 'notification off ’ overlay icon: The sentry changes to show the 'notification off ’ overlay icon:
-Sentry in a disabled state…+ 
-… and after it has been reenabled+
-Monitoring Sentries From the Console 69+
To reenable notification for the sentry: To reenable notification for the sentry:
-1. Select the sentry.+#Select the sentry.
-2. Select Sentry > Notification on.+#Select Sentry > Notification on.
-Starting and Stopping the Host Monitor+ 
-Restarting the host monitor+=== Starting and Stopping the Host Monitor ===
-If the host monitor is not currently running on a particular host, you must restart it+==== Restarting the host monitor ====
-before you can monitor or configure sentries on that host. You must also restart the+If the host monitor is not currently running on a particular host, you must restart it before you can monitor or configure sentries on that host. You must also restart the host monitor to pick up the new settings after making changes to sentries or
-host monitor to pick up the new settings after making changes to sentries or+
Sentinel3G’s configuration tables. Sentinel3G’s configuration tables.
-1. From the console, select Monitor > Restart host monitor.+ 
-2. If you have not already selected which host to work with, Sentinel3G+#From the console, select Monitor > Restart host monitor.
-will ask you to choose one now.+#If you have not already selected which host to work with, Sentinel3G will ask you to choose one now.
-3. Click Accept to restart the host monitor. If the action was successful, the+#Click Accept to restart the host monitor. If the action was successful, the message Restart of Host Monitor on <host name>
-message Restart of Host Monitor on <host name>+successful will appear on the status line. If the action was not successful, see [[Checking the host monitor status log]].
-successful will appear on the status line. If the action was not+ 
-successful, see Checking the host monitor status log on page 69.+==== Checking the host monitor status log ====
-Checking the host monitor status log+The host monitor status log records status and error messages generated by sentries, agent programs and the Host Monitor itself. You can use this log to find problems with the configuration of sentries and agents.
-The host monitor status log records status and error messages generated by sentries,+ 
-agent programs and the Host Monitor itself. You can use this log to find problems+#From the console, select Logs > Host log.
-with the configuration of sentries and agents.+#:(If this option is disabled (greyed out) it mean no host is currently selected; go to Host View, select a host and try again.)
-1. From the console, select Logs > Host log.+ 
-Sentry with notification off…+The most recent entries in the log are displayed in a scrollable window. New entries appear at the bottom of the data as they are added to the log. You can scroll back through the log, or click Follow to return to the end of the log.
-… and after notification has+ 
-been reenabled+
-70 Monitoring Sentries From the Console+
-(If this option is disabled (greyed out) it mean no host is currently selected;+
-go to Host View, select a host and try again.)+
-The most recent entries in the log are displayed in a scrollable window. New+
-entries appear at the bottom of the data as they are added to the log. You can+
-scroll back through the log, or click Follow to return to the end of the log.+
To view the entire log: To view the entire log:
-1. From the console, select Monitor > Host configuration.+#From the console, select Monitor > Host configuration.
-2. From the ‘All Sentries’ window, select Hostmon > View log.+#From the ‘All Sentries’ window, select Hostmon > View log.
-Stopping the host monitor+ 
-1. From the console, select Monitor > Stop host monitor.+==== Stopping the host monitor ====
-2. Choose the host.+#From the console, select Monitor > Stop host monitor.
-3. Click Accept to stop the host monitor. If the action was successful, the+#Choose the host.
-message Stop Host Monitor on <host name> successful will+#Click Accept to stop the host monitor. If the action was successful, the message Stop Host Monitor on <host name> successful will
-appear on the status line. If the action was not successful, see Checking the+appear on the status line. If the action was not successful, see [[Checking the host monitor status log]].
-host monitor status log on page 69.+ 
A Host Monitor can also be stopped from a root shell: A Host Monitor can also be stopped from a root shell:
-1. Start a root shell.+#Start a root shell.
-2. Enter this command on Linux systems:+#Enter this command on Linux systems:
-/etc/rc.d/init.d/hostmon stop+ /etc/rc.d/init.d/hostmon stop
-Enter this command on Solaris and other UNIX systems:+#:Enter this command on Solaris and other UNIX systems:
-/etc/init.d/hostmon stop+ /etc/init.d/hostmon stop
-Viewing the event log+ 
-The event log contains error and status messages logged by the Event Manager process.+==== Viewing the event log ====
-It includes details such as times when the Event Manager was started or+The event log contains error and status messages logged by the Event Manager process.
-stopped, when host monitors connected or disconnected, and error or warning+ 
-messages generated by these processes. You can use this log to diagnose problems+It includes details such as times when the Event Manager was started or stopped, when host monitors connected or disconnected, and error or warning messages generated by these processes. You can use this log to diagnose problems with Sentinel3G.
-with Sentinel3G.+ 
-Monitoring Sentries From the Console 71+#Select Logs > Event log.
-1. Select Logs > Event log.+ 
-Figure 14 — Sample event log+The most recent entries in the log are displayed in a scrollable window. New entries appear at the bottom of the data as they are added to the log. You can scroll back through the log, or click Follow to return to the end of the log.
-The most recent entries in the log are displayed in a scrollable window. New+
-entries appear at the bottom of the data as they are added to the log. You can+
-scroll back through the log, or click Follow to return to the end of the log.+

Current revision

This section covers how to open a console window; the layout of the console; and how to diagnose and respond to an event.

Contents

[edit]

Starting a Console

To start a console window from a shell, run this command:

cos sentinel

To start a console window from COSmanager, click the Sentinel button from the COSmanager button bar:

Sentinel3G displays the Desktop view, which is a top-level view of the sentries and folders that you have access to. The Desktop view always contains the Host view folder, and typically also contains several other sentries and folders of particular interest.

[edit]

Console Toolbar

The Toolbar provides shortcuts to the most common operations. 

Figure 9 — Console Toolbar
[edit]

Context Menu

The context menu lists common menu options for the currently selected object. 

Figure 10 — A sample context menu
[edit]

Changing the View

The standard view shows all the sentries that are visible to the user in the current folder, whatever their current state. The console starts up in Desktop view. You can double-click a folder to open it, or change the view using the view buttons on the Toolbar or the options under the Go menu.

The context menu is activated by clicking with the secondary mouse button (usually the right button for right-handed users) on a sentry or folder, or on the background of the console window.

The context menu provides shortcuts to the most commonly used menu options for the selected object. 

Figure 11 — Changing the console view

Go > Desktop shows any top-level custom folders that have been added, plus the system folder to view sentries for a selected host (Host View).

Go > Hosts lists all hosts currently being monitored. You can then open a host folder to show the folders and sentries on that host.

Go > Abnormal sentries combines in a single window all the abnormal sentries in the current folder and all of its sub-folders. Abnormal sentries are those that are in a state other than normal or down. Use the Back button ( ) to return from Abnormal view.

[edit]

Creating a New Folder

You can create new folders containing selected sentries and folders. This is useful for grouping related sentries from different folders on various hosts. For example, a File Servers folder could contain sentries for filesystems only on hosts that are used as file servers.

  1. In Desktop view, select Edit > New folder, or select New folder from the context menu.
  2. Enter a name for the folder.
  3. Enter a description. This will appear in the status line on the console when this folder is selected.
  4. Choose an icon. If none of the existing icons is suitable you can add a new one. See Add Icons on page 154.
  5. Enter the file name only (without the path) of a notes file in the Sentinel3G doc directory. These notes will be available from the console to operators when monitoring or responding to alerts relating to this folder.
  6. Click Accept to save the new folder. The next step is to copy selected sentries into the new folder.
  7. Start another console window containing some sentries you wish to copy: select the folder, then select Open in new window from the context menu.
  8. Select and copy the sentries: Ctrl-click or middle-click on a sentry to add it to the selection; Shift-click to add a range of sentries to the selection.
  9. Click in the target folder and paste the sentries: select Paste from the context menu.
[edit]

To specify which roles can access a folder/sentry class

You can restrict access to this folder to users who have specified roles.

  1. Click the folder icon to highlight it., then select Edit > Access.
  2. Click and select one or more roles. This folder will only be visible to Sentinel3G users who have been assigned at least one of these roles. Leave this field blank to make the folder visible to all Sentinel3G users.
  3. Click Accept to save the access details for the folder.
[edit]

To change details of a folder/sentry class

  1. Select the folder.
  2. Select Edit > Change. The Sentry/Class Details form opens.
  3. Enter or change any of these fields. Which fields can be changed depends on whether the selected object is a system folder, user-defined folder, or host.
Name
You can change the name that is displayed under the icon. System folders cannot be renamed.
This field is available for the Host View icon and user-defined folders.
Description
This will appear in the status line on the console when this folder is selected.
Icon
Choose a different icon to represent this folder on the console.
Notes
file Enter the file name only (without the path) of a notes file in the Sentinel3G doc directory. These notes will be available from the console to operators when monitoring or responding to alerts relating to this folder.
This field is available for system folders.

Click Accept to save the changes.

[edit]

To delete a user-defined folder/sentry class

Note Only user-defined folders can be deleted. A folder icon with the lock symbol is a system folder. It is required by Sentinel3G and cannot be deleted.

  1. In Desktop view, select the folder.
  2. Select Delete from the context menu.
[edit]

Diagnosing an Event

A event is usually first signified by a change in the sentry’s icon or that of its parent folder (such as a change its color, or the appearance of an overlay icon). When a sentry indicates a possible problem, the console provides several ways to view more information to help diagnose the extent and cause of the problem.

The color of the sentry’s name and the color and type of its indicator icon show the current state or severity.

See Overlays and Indicator Icons for a full list of indicators and other overlay icons and what they mean.

Console text provides useful status information about the selected sentry.

If you notice a folder has gone from normal to a higher severity you can quickly find the extent of the problem by clicking the button to view abnormal sentries.

[edit]

View the sentry’s property sheet

The Property sheet identifies the sentry and shows its current state and severity.

  1. Select the sentry.
  2. From the context menu, select Properties. 
Figure 12 — Sample property sheet

If a sentry is in Failed state, it indicates a problem with the agent (usually that it failed to start or has never returned any valid data). Undefined state indicates that the sentry does not match any of the defined states (in other words, none of the states’ entry conditions evaluated as true).

[edit]

View the sentry log

The sentry log shows details such state changes, actions performed, and error or warning messages. You can use this log to check the recent history of the sentry leading up to the present alert.

  1. Select the sentry.
  2. Select Logs > Sentry log. 
Figure 13 — Sample sentry log

The most recent entries in the log are displayed in a scrollable window. New entries appear at the bottom of the data as they are added to the log. You can scroll back through the log, or click Follow to return to the end of the log.

[edit]

View a graph associated with this sentry

  1. Select the sentry.
  2. Select Report > Realtime graph.
  3. If there is more than one graph, choose one.
[edit]

View the monitoring notes file

  1. Select the sentry.
  2. Select Help > Monitoring notes.

To add or edit the notes file, see Add a Monitoring Notes File on page 148.

[edit]

Generate historical reports

The console provides several options for showing the current state of sentries and variables. Sentinel3G also provides two detailed reports based on historical data.

You can use these to analyse changes in the data leading up to an event, or look for trends in the amount of time sentries are spending out of their normal state. These reports can be saved on the Host Monitor host and recalled either from the console or the command line.

The Service Level report summarizes state changes for selected sentries, based on data from the Event Manager log. It shows the proportion of time sentries have spent in each state.

The Logged Data report extracts historical variable data for selected sentries from the sentry logs. It is like a version of the realtime graph option extended back in time.

[edit]

Responding to an Event

[edit]

Running an action

Actions are predefined responses associated with a sentry that may be invoked by an operator. Each action runs a command. Depending on its type, each action may display output in the form of a report, or may simply run the command to try to fix the problem.

  1. How you run an action depends on the number and type of the sentries and how the action was configured.
    • select a single sentry (or a single instance of a sentry).
    • select multiple instances of a sentry. Note that selecting multiple sentries will only work with sentries that are in the same state and are of the same type.
    • select the parent class folder, or click on the background of the console when in a class.
  2. Select Sentry > Action.
  3. If there is more than one action, choose one. Only the actions that are appropriate for the current state of the selected sentries will be shown.
  4. You may be asked at this point to enter your password (the password of your user account on this host) to confirm that you have the authority to run this action.

The action is run. If the action is a report the output will be displayed in a browser.

[edit]

Acknowledging an event

A sentry may request acknowledgement from an operator before changing to another state. This is usually done to confirm that the operator has been made aware of a probable “one-off ” incident before returning the sentry to normal state.

If a sentry is waiting for acknowledgement this overlay icon will appear next to it.

You should check to see whether any monitoring notes have been provided to explain your options at this point, and what will happen next if the alert is acknowledged.

To acknowledge a waiting sentry:

  1. Select the sentry.
  2. Select Sentry > Acknowledge. The sentry will change to the new state.
[edit]

Enable/disable a sentry

Disabling a sentry stops the state transitions from being processed. You can use this as a temporary way to suppress alerts and notifications, for example when an application or service is down for maintenance. Note that only the sentry is disabled — the agent is still running and its variables are still being set, so any history variables will still be collected.

  1. Select the sentry.
  2. Select Sentry > Disable.
  3. Enter the reason why the sentry is being disabled, then click Accept. This message will be added to the sentry log for auditing purposes and to help other operators who might check the status of this sentry.

To reenable the sentry:

  1. Select the sentry.
  2. Select Sentry > Enable.
[edit]

Enable/disable notification for a sentry

Disabling notification for a sentry stops notification messages from being sent. Only notification is disabled—the agent is still running and its variables are still being set, so any history variables will still be collected and alerts will still be processed.

  1. Select the sentry.
  2. Select Sentry > Notification off.

The sentry changes to show the 'notification off ’ overlay icon:

To reenable notification for the sentry:

  1. Select the sentry.
  2. Select Sentry > Notification on.
[edit]

Starting and Stopping the Host Monitor

[edit]

Restarting the host monitor

If the host monitor is not currently running on a particular host, you must restart it before you can monitor or configure sentries on that host. You must also restart the host monitor to pick up the new settings after making changes to sentries or Sentinel3G’s configuration tables.

  1. From the console, select Monitor > Restart host monitor.
  2. If you have not already selected which host to work with, Sentinel3G will ask you to choose one now.
  3. Click Accept to restart the host monitor. If the action was successful, the message Restart of Host Monitor on <host name>

successful will appear on the status line. If the action was not successful, see Checking the host monitor status log.

[edit]

Checking the host monitor status log

The host monitor status log records status and error messages generated by sentries, agent programs and the Host Monitor itself. You can use this log to find problems with the configuration of sentries and agents.

  1. From the console, select Logs > Host log.
    (If this option is disabled (greyed out) it mean no host is currently selected; go to Host View, select a host and try again.)

The most recent entries in the log are displayed in a scrollable window. New entries appear at the bottom of the data as they are added to the log. You can scroll back through the log, or click Follow to return to the end of the log.

To view the entire log:

  1. From the console, select Monitor > Host configuration.
  2. From the ‘All Sentries’ window, select Hostmon > View log.
[edit]

Stopping the host monitor

  1. From the console, select Monitor > Stop host monitor.
  2. Choose the host.
  3. Click Accept to stop the host monitor. If the action was successful, the message Stop Host Monitor on <host name> successful will

appear on the status line. If the action was not successful, see Checking the host monitor status log.

A Host Monitor can also be stopped from a root shell:

  1. Start a root shell.
  2. Enter this command on Linux systems: 
/etc/rc.d/init.d/hostmon stop
  1. Enter this command on Solaris and other UNIX systems: 
/etc/init.d/hostmon stop
[edit]

Viewing the event log

The event log contains error and status messages logged by the Event Manager process.

It includes details such as times when the Event Manager was started or stopped, when host monitors connected or disconnected, and error or warning messages generated by these processes. You can use this log to diagnose problems with Sentinel3G.

  1. Select Logs > Event log.

The most recent entries in the log are displayed in a scrollable window. New entries appear at the bottom of the data as they are added to the log. You can scroll back through the log, or click Follow to return to the end of the log.

Retrieved from "https://documentation.fs.com.au/index.php/Monitoring_Sentries_From_the_Console"
Home : About : Contact Us : Site Map : Terms of Use
All trademarks and registered trademarks of products mentioned in this web site are recognised by Functional Software. Site content and images © 1997-2021 Functional Software