TECHZEN Zenoss User Community ARCHIVE  

Drop "info" events?

Subject: Drop "info" events?
Author: [Not Specified]
Posted: 2015-07-29 15:43

Hi there.

I fail to see any use for informational events, specially for my networking devices, that generate TONS.

Would it make any sense (storage wise at least), to make a transform to drop those

If so, can anyone help me with such a transform I have a few transforms of my own, but very basic.

I might start with droping only those from networking, but "all" would be nice too, unless i am told not to do this for some reason.

I keep them hidden anyway, but i believe that the do take up some storage, and maybe cpu cicles



Subject: For now, i added:
Author: [Not Specified]
Posted: 2015-07-29 16:00

For now, i added:

if evt.severity == 2:
evt._action = "drop"

To the "status" event class.

I will look further into this, of course :P



Subject: I added another to /unknonw.
Author: [Not Specified]
Posted: 2015-07-30 07:06

I added another to /unknonw.



Subject: Thanks Jane.
Author: [Not Specified]
Posted: 2015-07-30 09:24

Thanks Jane.

For now, i am sure i will not be in that situation.

I do not get info from syslogs, and as far as i can see, i only drop events that are in the /status and /unknown classes, that come as info. I have mapped some events from a few devices that were "unknown" and "info" in the past.

I will look further into this tho.



Subject: I would recommend reading
Author: Andrew Kirch
Posted: 2015-07-30 10:41

I would recommend reading that entire whitepaper regardless. It has kept me from looking stupid on numerous occasions, and Jane will tell you that's a full time job.

Andrew Kirch

akirch@gvit.com

Need Zenoss support, consulting or custom development Look no further. Email or PM me!

Ready for Distributed Topology (collectors) for Zenoss 5 Coming May 1st from GoVanguard



Subject: yes yes, by looking further
Author: [Not Specified]
Posted: 2015-07-30 10:49

yes yes, by looking further into it, i meant just that.

I have already bookmarked it, pined the tab, and will read it XD



< Previous
viewing all available device info
  Next
OS Processes not being found
>