TECHZEN Zenoss User Community ARCHIVE  

Event and Clear the same event

Subject: Event and Clear the same event
Author: R S
Posted: 2015-02-18 16:45

Reaching out to the experts here. I'm running 4.2.3 and recently installed a n AvTech 3E monitor. Using the guide I found here I can monitor the built in temperature probe and graph it, along with thresholds etc.

http://musingsysadmin.com/2014/10/temperature-monitoring-with-zenoss/

However, I've got another sensor attached that has the ability to detect water. The snmp trigger is detected as unknown, so I have re-classified the event so that it makes more sense when the email alert is delivered. Instead of unknown event class and event message of snmp trap room-alert-3e-snmp-trap. If water is no longer present the device doesn't seem to be able to clear the event, instead another event of "water detected" is sent. I did a test of deleting my event re-class and transform, but it reacts the same.

I am somewhat of a noob with Zenoss, be kind.



Subject: Water sensor
Author: [Not Specified]
Posted: 2015-02-19 08:07

Hi,

We don't have a water sensor hooked up to ours, but perhaps I can point you in the right direction. What MIB OID are you seeing when the sensor is triggered and when it clears

Thanks

Steve
http://musingsysadmin.com



Subject: valuechange threshold
Author: [Not Specified]
Posted: 2015-02-19 11:04

You might want to try with the RRD for the datapoint set to ABSOLUTE and add a 'valuechange' threshold for the monitor. See it that gives you the behaviour that you're looking for.

Steve
http://musingsysadmin.com



Subject: Umm...
Author: R S
Posted: 2015-02-19 12:30

Umm...

Sorry, sorta lost

I should add a new data source called switch-sen1, add a new data point switch-sen1 with an OID of 1.3.6.1.4.1.20916.1.9.0.2

Then edit the data point RRD type to absolute, and add a threshold for that data point with a ValueChange Type



Subject: Yup
Author: [Not Specified]
Posted: 2015-02-19 12:47

Yes, thats it exactly. Looking at the OID behaviour and how absolute and valuechange are supposed to work it might just do exactly what you're looking for.
Unfortunately I don't have a switch type sensor for the 3E to be able to test with.

Steve
http://musingsysadmin.com



Subject: So I tested that. I do not
Author: R S
Posted: 2015-02-19 14:17

So I tested that. I do not get any alert from the threshold I setup, but I am still getting the same severity 3 alert in Zenoss. And it doesn't clear itself automatically



Subject: OK, so looking at the AvTech
Author: R S
Posted: 2015-02-19 14:35

OK, so looking at the AvTech mib in zenoss.....the OID reported in my messages is a trap OID



Subject: MIB
Author: [Not Specified]
Posted: 2015-02-20 08:57

The imported MIB OID for switch-sen1 on my system shows as 1.3.6.1.4.1.20916.1.9.1.2.1 which returns a 0 or 1 if it's open or closed.
Are you able to try with this OID

Steve
http://musingsysadmin.com



Subject: Ok, managed to get it...
Author: [Not Specified]
Posted: 2015-02-20 11:50

Ok, managed to get it setup as a min/max threshold with a max of 0 with a savaged CAT 6 as my sensor :)

http://musingsysadmin.com/wp-content/uploads/2015/02/water_sensor1.png
http://musingsysadmin.com/wp-content/uploads/2015/02/water_sensor2.png
http://musingsysadmin.com/wp-content/uploads/2015/02/water_sensor3.png

which gives an alert like...
http://musingsysadmin.com/wp-content/uploads/2015/02/water_sensor4.png

Steve
http://musingsysadmin.com



Subject: Still no dice. The event is
Author: R S
Posted: 2015-02-20 15:16

Still no dice. The event is still generated using the trap OID and not the switch-sen OID. Here's what I'm looking at...

https://drive.google.com/file/d/0B2bBIURzbxB4T3ptc0RDQ3liSmM/viewusp=sh...
https://drive.google.com/file/d/0B2bBIURzbxB4ZE9laU9kWGFlTG8/viewusp=sh...
https://drive.google.com/file/d/0B2bBIURzbxB4TGZ5MEpVcUFGTEU/viewusp=sh...

Alert
https://drive.google.com/file/d/0B2bBIURzbxB4eU1PV1dXemxZcHM/viewusp=sh...



Subject: SNMP Trap Sending
Author: [Not Specified]
Posted: 2015-02-23 07:27

From the looks of the alert it's the SNMP sending trap. If you have your Zenoss configured in your SNMP Sending Trap location remove it and just let Zenoss poll the SNMP itself.

http://musingsysadmin.com/wp-content/uploads/2015/02/3E_SNMP.png

Steve
http://musingsysadmin.com



Subject: ahh yes, I'll give that a try
Author: R S
Posted: 2015-02-23 09:46

ahh yes, I'll give that a try. However, the threshold as setup by your example is MinMax Threshold. However, instead of 0 being the max shouldn't I set 0 as the minimum, with no Max specified

The reading for the switch sensor (0 = OPEN, 1 = CLOSED).



Subject: Actually I set the minimum
Author: R S
Posted: 2015-02-23 11:19

Actually I set the minimum value as 1, so when water is detected and the sensor reads 0 it still sents out an event.



< Previous
Failed to create ZODB session database error
  Next
Datasource Command Timeout Clears my NRPE events! [SOLVED]
>