Zenoss ZenTech Community — Thread

TECHZEN Zenoss User Community

ARCHIVE

Paid Consulting Assistance Request

Subject:	Paid Consulting Assistance Request
Author:	S A
Posted:	2020-01-09 13:14

Folks,

Is anyone interested in earning some consulting income to help me configure some "fit and finish" issues were having with using Zenoss Core in our environment?

Background:

We have the Zenoss Core VM deployed.
All devices are in the system.
A combination of Syslog, WinRM, and SNMPv3 is being used to collect data.
I have email alerting turned on for Critical Events and Disk Space
I have Auto Windows Services being monitored except for a few that don't run all of the time.

Now I'm looking to tackle some issues / goals that will get thing locked down a bit more:

I'd like to monitor for Windows Events to track failed logon attempts and account lock outs. I know this can be done with a custom template but I'm not very experienced at building them. I'd like to track and deduplicate these events. E.g. One user has 65 failed failed logon attempts to the Exchange server because they changed their password but didn't update it on the iPhone, etc. That should show up as one event with a count of 65. Then email the admins that it has occurred, but not once per attempt. Otherwise it degrades into log spam.

Also I need a report of this that's emailed to a distribution list daily. It's someone's job to review this manually and then archive the report.

I'd like to monitor for disk space a little differently. Currently the system lets me know when disk utilization is at 90%. That's great. I'd like to alert again at 95% as an Error and 97% as Critical. Also it would be great to find a way to deal with disk space issues on small and large drives. 10% on a 20 GB drive isn't much room, but 10% on a 2 TB drive is a lot of room. Any ideas on more elegant ways to stay on top of this?

Any tips or ideas on what to monitor beyond the basics? Best practices that you've deployed that maybe we're not thinking of?

I tend to be good at the Architect, Engineer, and Deploy end of IT, I need help with the Operate and Maintain end. I have Zenoss setup at several clients (and growing) so there's an opportunity for some periodic work.

Finally, before you mention it, I know that there is a paid version of Zenoss, but it's outside the range (and requirements) of the folks I'm working with. Most clients have a couple hundred managed devices. They just want to know before the end users when problems occur and they don't have any of the "Big Systems" that the Enterprise version supports. So Zenoss Core suits them very well. I just want to put a little more polish on it than they get out of the box.

Let me know if you're interested and we can work something out.

Thanks,

Steve

------------------------------
S A
------------------------------

Subject:	RE: Paid Consulting Assistance Request
Author:	Andrew Kirch
Posted:	2020-01-09 15:26

The disk space thing is easy. No need to charge you for that one! Create cProps (Custom Properties) under / for the values you want to monitor for.
For your alerts create a series of thresholds that look something like this:
Name: cFileSystemWarn
Type: int
Value: 80
This change will be saved to this path:
/

(these can be overridden further down the tree)
Now create alerts in your various component templates. Go to Advanced > Monitoring Templates, and select the component templates (FileSystem) you want to edit. Create Thresholds with values similar to the following:
float(here.cFileSystemCrit)

Do this for each severity you want.

------------------------------
Andrew Kirch
AWS Principle Architect
ECS Tuning
------------------------------

Subject:	RE: Paid Consulting Assistance Request
Author:	Jane Curry
Posted:	2020-01-10 04:15

Hi Steve,
I may be able to help you with this but very stretched for time. I think, if you are interested, then we should discuss off-line as this is not a sales & services site. You might also have a look at my Multiple Thresholds tip on the wiki site - http://wiki.zenoss.org/MultipleThresholds .
Cheers,
Jane

------------------------------
Jane Curry
Skills 1st United Kingdom
jane.curry@skills-1st.co.uk
------------------------------

Previous
upgrade ISO's

Next
Add mib with zenmib missing keepMiddleZeros parameter