4. Report Setting Function
4.3. Destination Setting
4.3.1. Changing the Setting of Destination IDs
Change the setting of Destination IDs registered in the list.
Select the Destination ID you want to change from "ID Name" on the [Destination ID Setting] screen and press [Modify...] to open the [ID Setting] screen. The setting steps are different by the report methods.
[Setting Method]
Press [Address...] and [Schedule...] to set where and when to report.
1) While modifying the settings, you cannot modify "ID" and "Method.” (read only) 2) When "Manager (SNMP)" has been selected as the "Method,” even if [Address...] is
pressed, the address setting screen is not displayed because it is not necessary to set the address.
Address Setting when Manager (TCP_IP In-Band) is used as a report method
When [Address...] is pressed when "Manager (TCP_IP In-Band)" has been selected as the "Method" on the [ID Setting] screen, the [Manager (TCP_IP In-Band) Setting] screen opens.
Port Number
The port number used for the communication between sockets can be set.
For this number, the value must be the same for Server Management Agent and Server Management Manager.
(The default value is 31134 for both of Server Management Agent and Server Management Manager.) Do not change the value as long as the default value works.
If the default value does not work, set the port number in the range of 6001 to 65535.
When you press [Default], the port number will be set to the default value (31134).
If a modification is made, be sure to also modify the setting for Server Management Manager. This modification is made in the following manner on the server in which Server Management Manager is installed.
[How to modify]
1. Click the "Setting" - "Base Setting" menu on Alert Manager. The [Base Setting]
dialog box appears.
2. Select "Receive from Agent (TCP/IP)" and click [Configure...]. The [Receive from Agent (TCP/IP) Setting] dialog box appears.
3. Set the port number in the "Port Number" field on the [Receive from Agent(TCP/IP) Setting] dialog box.
[ok]
Settings are saved and this screen closes.
[cancel]
This screen closes without saving changes.
Address Setting when Manager (TCP_IP Out-of-Band) is used as a report method
When [Address...] is pressed when "Manager (TCP_IP Out-of-Band)" has been selected as the "Method" on the [ID Setting] screen, the [Manager (TCP_IP Out-of -Band) Setting] screen opens.
IP Address (or Host Name)
Set IP address (or Host Name) of Server Management Manager.
Select Remote Access Service Entry
Set the Phone Number, the User, and the Password.
Port Number
The port number used for the communication between sockets can be set.
For this number, the value must be the same for Server Management Agent and Server Management Manager.
(The default value is 31134 for both of Server Management Agent and Server Management Manager.) Do not change the value as long as the default value works.
If the default value does not work, set the port number in the range of 6001 to 65535.
When you press [Default], the port number will be set to default value (31134).
If a modification is made, be sure to also modify the setting for Server Management Manager. This modification is made in the following manner on the server in which Server Management Manager is installed.
[How to modify]
1. Click the "Setting" - "Base Setting" menu on Alert Manager. The [Base Setting]
dialog box appears.
2. Select "Receive from Agent (TCP/IP)" and click [Configure...]. The [Receive from Agent (TCP/IP) Setting] dialog box appears.
3. Set the port number in the "Port Number" field on the [Receive from Agent(TCP/IP) Setting] dialog box.
[ok]
Settings are saved and this screen closes.
[cancel]
This screen closes without saving changes.
Schedule Setting
Set the report Schedule for each Destination ID.
Retry Interval Set the retry interval.
The range is 1 to 30 minutes. The default value is 5 minutes.
Reporting Expiration Time Set the maximum retry time.
The range is 0 to 240 hours. The default value is 72 hours.
If you set 0 hour, no report is reported.
Reporting Time Table
Set the reportable time periods. Only the alerts that occur during the reportable time are reported.
It is possible to specify a time period of 1 hour.
The default value is 24 hours.
An alert that occurs outside the reportable time is not reported immediately. When the reportable time comes, it is reported.
(The event is reserved until then.) [ok]
Settings are saved and this screen closes.
[cancel]
This screen closes without saving changes.
4.3.2. Adding Destination IDs
Add Destination IDs to the list. The setting steps differ by the report methods.
[Setting Method]
1. Input an ID name.
2. Select a report method. (Select using the "UP/DOWN" arrow keys.) 3. Press [Address...] to set the address on the displayed screen.
4. Press [Schedule...] to set the report schedule on the displayed screen.
5. Press [ok].
When "Manager (SNMP)" has been selected as the "Method,” even if the [Address...]
button is pressed, the address setting screen is not displayed because it is not necessary to set the address.
4.4. Agent Events Setting
Set monitor events of Server Management Agent and associate monitor events with report destinations.
If monitor events of Server Management Agent occur, alerts will be sent to destinations set up here.
Select "Agents Events Setting" on the Control Panel (ESMamsadm) and the [Agents Events Setting] screen opens.
Source
The list of the source names is displayed.
Operation on source
Operation on source can be selected.
ON: Select this item when you set the report destination for all event IDs of the selected source at the same time
OFF: Select this item if you set the following.
- When you individually set the report destination to each event ID of the selected Source - When you modify the setting of the monitor event
Event ID
The Event ID from the source selected in "Source" is displayed.
When "ON" is selected in "Operation on source,” "ALL" is displayed in "Event ID.”
Trap Name
The trap name of selected Event ID is displayed.
[Set...]
Sets the selections based on "Operation on source.” Pressing this button displays the [Monitor Event Setting]
screen. See “4.4.1 Setting Destination.”
[close]
The [Agents Events Setting] screen closes.
4.4.1. Setting Destination (Agent Event)
The following are the methods of specifying the report destination:
1. Specify the report destination for each monitor event individually.
2. Specify the same report destination for all event IDs under each source at the same time.
■ To specify the report destination for each monitor event individually Not only the report destination but also Action After Report, Deal Method, etc., can be set.
[Setting Method]
1. Start the Control Panel (ESMamsadm) and select "Agents Events Setting.”
2. Select the source name from "Source.” (Select using the "UP/DOWN" arrow keys.) 3. Select "OFF" from "Operation on source.” (Set using the space key.)
4. Select the Event ID for which you want to modify the setting from "Event ID.”
(Select using the "UP/DOWN" arrow keys.)
5. Press [Set...] and the [Monitor Event Setting] screen opens.
6. Select the ID to be reported from "Destination ID List.”
7. Pressing [Add] moves the ID to "Report to.”
8. To delete IDs from "Report to,” select the ID from "Report to" and press [Remove] to move the ID to
"Destination ID List.”
9. Press [ok].
Action After Report
Select either "Shutdown,” "Reboot,” or "None" from the list and specify an action after report.
(Select using the "UP/DOWN" arrow keys.) Deal Method
Specify the action method to the reported item. The limit is 507 alphanumeric characters.
■ To specify the same report destination for all event IDs under each source at the same time [Setting Method]
1. Start the Control Panel (ESMamsadm), and select "Agents Events Setting.”
2. Select the source name from "Source.” (Select using the "UP/DOWN" arrow keys.) 3. Select "ON" from "Operation on source.” (Set using the space key.)
4. Press [Set...] and the [Monitor Event Setting] screen opens.
5. Select the ID to be reported from "Destination ID List.”
6. Pressing [Add] moves the ID to "Report to.”
7. To delete IDs from "Report to,” select the ID from "Report To" and press [Remove] to move the ID to
"Destination ID List.”
8. Press [ok].
Even if the [Monitor Event Setting] screen is opened again after this setting is done, nothing is displayed in "Report to.”
Confirm the setting individually in each event.
4.5. Syslog Events Setting
You can link the setting of syslog monitoring events with the report to monitoring events.
If monitor events occur, alerts will be sent to destinations set up here.
You can arbitrarily add and delete new event sources and new monitoring events in addition to events registered beforehand according to the system environment.
Monitoring syslog events is performed at intervals of 5 minutes. You can change the monitoring interval of Syslog event monitoring.
Refer to "3.3. Syslog Monitoring" for the method to modify monitoring interval.
Select "Syslog Events Setting" on the Control Panel (ESMamsadm) and the [Syslog Events Setting] screen opens.
Source
The list of the source name is displayed.
Operation on source
Operation on source can be selected.
ON: Select this item if you set the following.
- When you set the report destination for all event IDs of the selected source at the same time.
- When you add or delete the source of the syslog monitoring events.
OFF: Select this item if you set the following.
- When you individually set the report destination to each event ID of the selected Source.
Trap Name
The trap name of the selected Event ID is displayed.
[close]
The [Syslog Events Setting] screen closes.
For the following buttons, a part of the function varies according to the selection situation of "Operation on source.”
[Add...]
ON: Add the source of the syslog monitoring events.
Pressing this button displays the [Add Syslog Item] screen.
OFF: Add the syslog monitoring event under the selected source.
Pressing this button displays the [Add Syslog Item] screen.
[Del...]
ON: Delete the selected source of the syslog monitoring events.
OFF: Delete the syslog monitoring event selected in "Event ID.”
[Set...]
ON: Specify the report destination for to all Event IDs of the selected source at the same time.
Pressing this button displays the [Syslog Application Setting] screen.
OFF: Modify the setting of the monitor event selected from "Event ID.”
Specify the report destination to the monitor event selected from "Event ID.”
Pressing this button displays the [Syslog Application Setting] screen.
[Test]
ON: This button is not available.
OFF: For the test report, press this button.
4.5.1. Setting Destination (Syslog Event)
The following are the methods of specifying the report destination:
1. Specify the report destination for each monitor event individually.
2. Specify the same report destination for all event IDs under each source at the same time.
■ To specify the report destination for each monitor event individually Not only the report destination but also Action After Report, Deal Method, etc., can be set.
[Setting Method]
1. Start the Control Panel (ESMamsadm) and select "Syslog Events Setting.”
2. Select the source name from "Source.” (Select using the "UP/DOWN" arrow keys.) 3. Select "OFF" from "Operation on source.” (Set using the space key.)
4. Select the Event ID for which you want to modify the setting from "Event ID.”
(Select using the "UP/DOWN" arrow keys.)
5. Press [Set...] and the [Syslog Application Setting] screen opens.
6. Select the ID to be reported from "Destination ID List.”
7. Pressing [Add] moves the ID to "Report to.”
8. To delete IDs from "Report to,” select the ID from "Report to" and press [Remove] to move the ID to
"Destination ID List.”
9. Press [ok].
Action After Report
Select either "Shutdown,” "Reboot,” or "None" from the list and specify an action after report.
(Select using the "UP/DOWN" arrow keys.) Deal Method
Specify the action method to the reported item within 507 alphanumeric characters.
Report Count
The report is done when the key word is registered in Syslog at the same frequency as the setting here.
Monitoring Time Table
Set the reportable time periods. Only the alerts that occur during the reportable time are reported.
It is possible to specify 1 hour.
The default value is 24 hours.
■ To specify the same report destination for all event IDs under each source at the same time [Setting Method]
1. Start the Control Panel (ESMamsadm) and select "Syslog Events Setting.”
2. Select the source name from "Source.” (Select using the "UP/DOWN" arrow keys.) 3. Select "ON" from "Operation on source.” (Set using the space key.)
4. Press [Set...] and the [Syslog Application Setting] screen opens.
5. Select the ID to be reported from "Destination ID List.”
6. Pressing [Add] moves the ID to "Report to.”
7. To delete IDs from "Report to,” select the ID from "Report to" and press [Remove] to move the ID to
"Destination ID List.”
8. Press [ok].
Even if the [Syslog Application Setting] screen is opened again after this setting is done, nothing is displayed in "Report to.”
4.5.2. Adding of Syslog Monitoring Event Sources
According to the system environment, you can arbitrarily add new event sources.
Add new event sources here when you want to monitor the event that applications other than Server Management Agent register.
You register the first new monitoring event when registering a new event source.
[Setting Method]
1. Start the Control Panel (ESMamsadm) and select "Syslog Events Setting.”
2. Select "ON" from "Operation on source.” (Set using the space key.) 3. Press [Add...], and then the [Add Syslog Item] screen opens.
4. Input Source, Event ID, Keyword, Trap Name and Deal Method.
5. Press [Done].
Source
Specify the source name within 40 alphanumeric characters.
It is displayed in the "source" column at the alert viewer of Server Management Manager.
Event ID
Specify Event ID using 8 alphanumeric characters (hexadecimal number) according to the following naming rule for event IDs.
The format of Event ID is "x0000yyy.” (For example: 40000101, 800002AB, C0000101) Select one as follows, and set it in "x":
Keyword1, Keyword2, Keyword3
Specify the character string for which Server Management Agent can uniquely specify the message registered in Syslog within 256 alphanumeric characters.
When the message including all keywords is detected from Syslog, the full text of the message is reported to Server Management Manager.
It is displayed in the "Details" column of an alert viewer of Server Management Manager.
Trap Name
Specify the outline of the report message within 79 alphanumeric characters.
It is displayed in the "Outline" column of an alert viewer of Server Management Manager.
Deal Method
Specify the action method to the reported item within 507 alphanumeric characters.
It is displayed in the "Action" column of an alert viewer of Server Management Manager.
The maximum number of events that can be registered is 1000.
*Keep in mind that the amount of the disk used and the amount of the memory used are increased by the number of registered events.
Source, Event ID, Keyword1, and Trap Name are indispensable.
4.5.3. Adding of Syslog Monitoring Events
Responding to the system environment, you can add a new Syslog Monitoring event under the Syslog Monitoring Event Source that has already been registered.
[Setting Method]
1. Start the Control Panel (ESMamsadm) and select "Syslog Events Setting.”
2. Select the source name from "Source.” (Select using the "UP/DOWN" arrow keys.) 3. Select "OFF" from "Operation on source.” (Set using the space key.)
4. Press [Add...] and the [Add Syslog Item] screen opens.
5. Input Event ID, Keyword, Trap Name and Deal Method.
Refer to "4.5.2 Adding of Syslog Monitoring Event Sources" for details.
6. Press [Done].
The maximum number of events that can be registered is 1000.
*Keep in mind that the amount of the disk used and the amount of the memory used are increased by the number of registered events.
Event ID, Keyword1, and Trap Name are indispensable.
4.5.4. Deleting of Syslog Monitoring Event Sources
The source of the Syslog Monitoring event can be deleted from the Syslog event watch.
When you delete an event source, all monitoring events contained in that source will be deleted.
Certain monitoring event resources are registered with Server Management Agent by default. You cannot delete them.
[Setting Method]
1. Start the Control Panel (ESMamsadm) and select "Syslog Events Setting.”
2. Select the source name that you want to delete from "Source.” (Select using the "UP/DOWN" arrow keys.) 3. Select "ON" from "Operation on source.” (Set using the space key.)
4. Press [Del...].
4.5.5. Deleting of Syslog Monitoring Events
You can delete an event source from Syslog event monitoring.
The predetermined watch event that Server Management Agent registers cannot be deleted.
[Setting Method]
1. Start the Control Panel (ESMamsadm) and select "Syslog Events Setting.”
2. Select the source name from "Source.” (Select using the "UP/DOWN" arrow keys.) 3. Select "OFF" from "Operation on source.” (Set using the space key.)
4. Select Event ID that you want to delete from "Event ID.” (Select using the "UP/DOWN" arrow keys.) 5. Press [Del...].
Appendix A
NOTE
Keep the following limitations in mind when using Server Management Agent:
1. The issue of the net-snmp packages version "5.1.2-11.EL4.7" on RHEL4U4 EM64T
In Server Management Manager, the following phenomena are generated by the issue of the net-snmp packages, when the net-snmp packages version "5.1.2-11.EL4.7" included in RHEL4U4 EM64T is installed on the machine that is an object of management.
1) In the Autodiscovery function, when the fourth octet of the IP address of the machine that is an object of management is 128 or more, the machine cannot be discovered automatically.
[Evasion plan]
Please do either of the following:
− Use the net-snmp packages of which the version is "5.1.2-11.EL4.6" on the machine that is an object of management.
(This issue is not included in the net-snmp packages of which the version is "5.1.2-11.EL4.6")
− Register the machine that is an object of management manually using the Icon Palette.
(From [View] Menu of the Operation Window, select [Icon Palette]).
2) When the count of the SNMP request transmission from Server Management Manager exceeds 2,147,483,648 times, the SNMP request to the machine that is an object of management fails.
If an error has occurred, it becomes impossible to do the following for the machine that is an object of management:
− Start the DataViewer
− Watch Server Status
− Automatic Data Collection [Assistance]
As a standard where the phenomenon is generated, the SNMP request exceeds 2,147,483,648 times after about 400 days, when the following setting and operating are done for 255 machines that are an object of management.
− Start the DataViewer (5 times per day)
− "every 30 minutes" is set to the Collection Cycle in Automatic Data Collection function.
− "1 minute" is set to Server Status Polling Interval.
[Evasion plan]
Please do either of the following:
− Use the net-snmp packages of which the version is "5.1.2-11.EL4.6" on the machine that is an object of management.
(This issue is not included in the net-snmp packages of which the version is "5.1.2-11.EL4.6")
− Restart ESM Base Service regularly on Server Management Manager side.
3) In the Local Polling function of Server Management Manager, the following phenomena are generated, when RHEL4U4 EM64T is installed on the machine that is an object of management.
-1 The following error message is displayed and polling cannot be startedwhen a negative value is set for maximum value, minimum value, or each threshold.
"Could not set thresholds on the server.
Please refer to Recovery Action for errors in DataViewer Help."
-2 The following error message is displayed and it is not possible to reset it, even if the [Reset] button is pressed.
"Could not set thresholds on the server.
Please refer to Recovery Action for errors in DataViewer Help."
2. Logical CPU information and Memory Usage
On VMware ESX Server 3, Logical CPU information and Memory Usage that Server Management Agent treats are not the entire values of the system but the values allocated in the service console.
3. The transmission speed of the network on DataViewer
The transmission speed of the network might not be correctly displayed on the network tree of the DataViewer, according to the specification of hardware and the specification of driver.
4. The type of the network interface on DataViewer
The type of the network interface supported by Server Management Manager is only Ethernet and Loopback.
Other types of network interface might not be correctly displayed on the network tree of the DataViewer.
5. Expansion Bus Device Information on DataViewer
When operating system is SUSE Linux, "Expansion Bus Device" information is not displayed on the DataViewer.
6. segfault’s message
Segfault is very uncommonly generated on an EM64T system when the following services stop: ESMamvmain, ESMcmn, and ntagent. This does not influence the operation of Server Management Agent, but the following messages might be registered in Syslog.
kernel: ESMamvmain[XXXXX]: segfault at XXXXXXXXXXXXXXXX rip XXXXXXXXXXXXXXXX rsp XXXXXXXXXXXXXXXX error X
* "XXXXX" represents alphanumeric characters. It changes by the situation.
■ Between Manager and Agent
Function Manager (Port) Direction Agent (Port) Protocol Remarks
Operation Window (Autodiscovery) - →
←
- icmp icmp
Operation Window (Server Status Polling) / DataViewer / Server Down Detection
Undetermined →
Report to Manager (TCP/IP In-Band) Report to Manager (TCP/IP Out-of-Band)
31134 →
←
Undetermined TCP -
- The upper direction shows the direction at start-up, and the lower shows the return.
- For the setting of the port number for the Report to Manager (TCP/IP In-Band), refer to "4.3.1.1.Address Setting when Manager (TCP_IP In-Band) is used as a report method.”
- For the setting of the port number for the Report to Manager (TCP/IP Out-of-Band), refer to "4.3.1.2.Address Setting when Manager (TCP_IP Out-of-Band) is used as a report method.”
- "Undetermined" means that the unoccupied port at the communication start-up will be selected.
■ Between Manager and Manager
Function Manager (Port) Direction Manager (Port) Protocol Remarks Inter-Manager Communication Undetermined →
←
8806 TCP -
- The port number can be changed in the Remote Manager dialog box by selecting Operation Window menu [Option], [Customize] , [Remote Manager].
- "Undetermined" means that the unoccupied port at the communication start-up will be selected.
- "Undetermined" means that the unoccupied port at the communication start-up will be selected.