---

Subject:	Are you running on Ubuntu by
Author:	Andrew Kirch
Posted:	2015-04-07 09:39

Are you running on Ubuntu by chance

Andrew Kirch

akirch@gvit.com

Need Zenoss support, consulting or custom development Look no further. Email or PM me!

Ready for Distributed Topology (collectors) for Zenoss 5 Coming May 1st from GoVanguard

---

Subject:	centos 7
Author:	[Not Specified]
Posted:	2015-04-07 14:39

no, centos 7 with autodeploy

---

Subject:	redhat 7 localhost loopback
Author:	[Not Specified]
Posted:	2015-04-07 19:56

Hi all. I am having the same issue on a fresh install using the core-auto script. Be grateful for any assistance in correcting this issue. I cannot seem to find how to clear this unknown event. Thank you in advance.

Last updated at 2015-04-07 08:54:04 pm (America/New_York)
Status
Severity
Resource
Component
Event Class
Summary
First Seen
Last Seen
Count

localhost

/Unknown

2015-04-07 02:25:17 pm

2015-04-07 08:06:02 pm

3387
NO RESULTS

Resource: localhost
Component:
Event Class: /Unknown
Status: New
Message:
Event Management...
Device State...
DeviceClass
DeviceGroups
DevicePriority
Location
Systems
device
localhost
ipAddress
127.0.0.1
monitor
localhost
prodState
Event Data...
clearid
count
3260
firstTime
2015-04-07 02:25:17 pm
lastTime
2015-04-07 07:53:10 pm
ownerid
stateChange
2015-04-07 02:25:18 pm
Event Details...

manager

db1949dbb7b9

zenoss.device.ip_address

127.0.0.1
LOG

---

Subject:	other info
Author:	[Not Specified]
Posted:	2015-04-07 19:59

Sorry - should have mentioned zenoss core 5 - first time around, I thought it was the network scan function so when I reinstalled from scratch, I did not scan any networks but the localhost unknown event returned.

---

Subject:	no solution? transforms
Author:	[Not Specified]
Posted:	2015-04-08 13:05

looks like there is no solution to this constant alert. not sure if it is the right way, but i added a transform for /Unknown event class

evt._action = "drop"

maybe it is too broad

---

Subject:	that transform seems very
Author:	Andrew Kirch
Posted:	2015-04-10 02:36

that transform seems very dangerous :) I'm going to ask internally during business hours on this.

Andrew Kirch

akirch@gvit.com

Need Zenoss support, consulting or custom development Look no further. Email or PM me!

Ready for Distributed Topology (collectors) for Zenoss 5 Coming May 1st from GoVanguard

---

Subject:	I'm as well seeing the same
Author:	[Not Specified]
Posted:	2015-04-10 08:56

I'm as well seeing the same issue. Zenoss5 on CentOS7.

Resource: localhost
Component:
Event Class: /Unknown
Status: New
Message:
Event Management...
agent
zensyslog
component
dedupid
localhost||/Unknown|4|
eventClass
/Unknown
eventClassKey
eventClassMapping
eventGroup
syslog
eventKey
eventState
New
evid
0242ac11-006e-889a-11e4-dc6d20faf0af
facility
message
ntevid
priority
3
severity
4
summary
Device State...
DeviceClass
DeviceGroups
DevicePriority
Location
Systems
device
localhost
ipAddress
127.0.0.1
monitor
localhost
prodState
Event Data...
clearid
count
56480
firstTime
2015-04-06 09:56:37 am
lastTime
2015-04-10 08:54:25 am
ownerid
stateChange
2015-04-06 09:56:38 am
Event Details...

manager

99415a6f133b

zenoss.device.ip_address

127.0.0.1

---

Subject:	Ok, I've done some internal
Author:	Andrew Kirch
Posted:	2015-04-10 09:54

Ok, I've done some internal digging, this is a known issue, and a bug is open. https://jira.zenoss.com/browse/ZEN-15441

Andrew Kirch

akirch@gvit.com

Need Zenoss support, consulting or custom development Look no further. Email or PM me!

Ready for Distributed Topology (collectors) for Zenoss 5 Coming May 1st from GoVanguard

---

Subject:	Transform
Author:	[Not Specified]
Posted:	2015-05-28 12:39

Has anyone got a more targeted transform for these It's not a big deal but would be nice to suppress these messages until the fix comes out.

Thanks,
Allen

---

Subject:	Allen
Author:	Andrew Kirch
Posted:	2015-05-29 11:51

Allen

It shouldn't be hard to add more specific filtering if you go to the wiki and take a look at the examples.

Andrew Kirch

akirch@gvit.com

Need Zenoss support, consulting or custom development Look no further. Email or PM me!

Ready for Distributed Topology (collectors) for Zenoss 5 Coming May 1st from GoVanguard

---

Subject:	agreed! Thanks Allenb!
Author:	Andrew Kirch
Posted:	2015-06-03 10:29

agreed! Thanks Allenb!

Andrew Kirch

akirch@gvit.com

Need Zenoss support, consulting or custom development Look no further. Email or PM me!

Ready for Distributed Topology (collectors) for Zenoss 5 Coming May 1st from GoVanguard

---

Subject:	Thanks for the transform...
Author:	[Not Specified]
Posted:	2015-06-09 14:09

Thanks for the transform... Works for me too...

The event seems to be triggered by this log line:
2015-06-09 19:07:07,021 INFO zen.Syslog: No matching parser: ''

I wonder if anyone knows what is this about so maybe we can get to the root of the problem

---

Subject:	There is already a bug filed,
Author:	Andrew Kirch
Posted:	2015-06-10 13:00

There is already a bug filed, expect a fix in or before 5.1.

Andrew Kirch

akirch@gvit.com

Need Zenoss support, consulting or custom development Look no further. Email or PM me!

Ready for Distributed Topology (collectors) for Zenoss 5 Coming May 1st from GoVanguard