TECHZEN Zenoss User Community ARCHIVE  

Unknown Event

Subject: Unknown Event
Author: [Not Specified]
Posted: 2015-05-15 02:29

I have a unknown event for localhost that keeps incrementing for a unknown reason.

Not sure where it is coming from as I have no 127.0.0.1/localhost device.

Event details:

Resource: localhost
Component:
Event Class: /Unknown
Status: New
Message:

agent
zensyslog
component
dedupid
localhost||/Unknown|4|
eventClass
/Unknown
eventClassKey
eventClassMapping
eventGroup
syslog
eventKey
eventState
New
evid
0242ac11-0082-bf4f-11e4-fa432d7c6fe7
facility
message
ntevid
priority
3
severity
4
summary
Device State...
DeviceClass
DeviceGroups
DevicePriority
Location
Systems
device
localhost
ipAddress
127.0.0.1
monitor
localhost

Maybe someone can help me as how I can get rid of this

Brand new 14.04 installation, on Zenoss 5.0.2.



Subject: hi,
Author: Andrew Kirch
Posted: 2015-05-15 10:22

hi,

it's a known issue, I filed a bug and it's in the queue to be addressed, it should be fixed in, or before 5.1. You can drop the event with a transform if needed.

Andrew Kirch

akirch@gvit.com

Need Zenoss support, consulting or custom development Look no further. Email or PM me!

Ready for Distributed Topology (collectors) for Zenoss 5 Coming May 1st from GoVanguard



Subject: Thanks, just wanted to
Author: [Not Specified]
Posted: 2015-05-18 03:56

Thanks, just wanted to confirm if it was a bug.

I have created a transform for now to delete the event.



Subject: please share the transform in
Author: Andrew Kirch
Posted: 2015-05-20 01:07

please share the transform in the thread, thanks!

Andrew Kirch

akirch@gvit.com

Need Zenoss support, consulting or custom development Look no further. Email or PM me!

Ready for Distributed Topology (collectors) for Zenoss 5 Coming May 1st from GoVanguard



Subject: Very simple fix:
Author: [Not Specified]
Posted: 2015-05-20 08:58

Very simple fix:

Added the following under the event transforms for /unknown

evt._action = "drop"



Subject: that may get other events you
Author: Andrew Kirch
Posted: 2015-05-20 13:21

that may get other events you might care about.

Andrew Kirch

akirch@gvit.com

Need Zenoss support, consulting or custom development Look no further. Email or PM me!

Ready for Distributed Topology (collectors) for Zenoss 5 Coming May 1st from GoVanguard



Subject: I really don't mind all
Author: [Not Specified]
Posted: 2015-05-21 01:44

I really don't mind all /unknown events dropping.



< Previous
ZenOss serviced don't start as expected
  Next
LDAP group name is gibberish
>