I come across an tranform in one of zenoss set up which is written to translate events when event is not pre-normalized so am curious to know and learn about Normalization

Hi All,

I want to escalate an event if it gets thrown up more than once in a 5 minute interval.  e.g. the first event isn't necessarily a problem but a second event within 5 minutes would be and escalate accordingly.

I have played around with the event transform to escalate an event based on event counts (https://gist.github.com/1486570) and this seems to work for the most part.

However, because the first event sometimes happens overnight, we get false alarm when a second one appears sometime later and the first event hasn't aged yet.  I don't want to put event aging too quickly.  I tried creating an event transform that would be based on the firstTime attribute of an event but it looks like I can't reference this attribute in the transform.

Any pointers appreciated, thanks!

Having tried Zenoss and loving it i'm begining to fill it with routers i'm monitoring on the internet.
Als goes well and there's lots of info when something doesnt work or when you don't no how.
Great Community ;-)

But now i'm running in to an error i can't find on the forum and don't know how so solve.

I now have 30 routers on 30 diferent locations set up in Zenoss.
But now the Google Maps Portlet gives when the counter hits 14 of 30 the error :

"Google could not process addresses. Reason: OVER_QUERY_LIMIT"

My first thought. The google maps rquest limit of 25k (I don't have that many mappoint yet but maybee through some error)

But that was'nt the case. The report says about 100 query's on the google page for the first two days of testing.

I see somebody mentions(but for a complete different application) that there is a limit of adresses you can send to google in 1 or 2 seconds.

Kan this be limited in Zenoss so there will be a small delay in geo looking up. Or does anybody know where this error coems from

Also, if i'm not mistaking . Zenoss should cache the adresses so it doesn't have to look them up all the time , right ?

Everytime i get to the dashboard it starts over again with lookip up 1 0f 30 2 of 30 until 13 or 14 and then the error.

I already dit al clear geocache in the Infrastructure menu and also restarted zenoss a couple of times

Any help is welkom, i'm setting this up to convince my superior to switch to Zenoss in stead of OpenNMS an Nagios ;-)

Picture of error is attached

LITTLE UPDATE:

As far as i can check it should not re-geolocate every adres everytime.
I made a sub location container with 5 adresses. This works because i don't hit the 13 limit.
But ervery time i switch from and back to the dashboard is re-geolocates the adresses.So no cache is being used what so ever.
If i hit the 14 in this container i also get the query limit error again. But if it would cache i would have 3 times the error and then it would use the cached location

So where can i find the file or database entry where the cache is beining supposed to be build up, anyone ?

Hey, I'm very new to Zenoss. My task recently at work has been to upgrade the current Zenoss system (2.5 on a literally unknown linux distro).

I have created a New VM on an ESXi Host, installed CentOS 6.4, and was easily able to configure it and run the auto deploy script provided on the Zenoss Install Wiki. I was very pleased with these results.

The old system just did ping tests on a listed amount of servers. The goal was to increase monitoring using more of the capabilities Zenoss offers. Heres the info I can provide, i hope its enough let me know if more info is requred:

Class = /Server/Windows/WMI

Modeler Plugins selected:

zenoss.wmi.CpuMap,zenoss.wmi.FileSystemMap,zenoss.wmi.IpInterfaceMap,zenoss.wmi.MemoryMap,zenoss.wmi.ProcessMap

Model Device Output:

2013-07-31 15:06:53,009 INFO zen.ZenModeler: Connecting to localhost:8789
2013-07-31 15:06:53,014 INFO zen.ZenModeler: Connected to ZenHub
2013-07-31 15:06:53,158 INFO zen.ZenModeler: Collecting for device FileServer.domain.local
2013-07-31 15:06:53,352 INFO zen.ZenModeler: WMI collector method for device FileServer.domain.local
2013-07-31 15:06:53,353 INFO zen.ZenModeler: plugins: zenoss.wmi.CpuMap, zenoss.wmi.FileSystemMap, zenoss.wmi.IpInterfaceMap, zenoss.wmi.MemoryMap, zenoss.wmi.ProcessMap
2013-07-31 15:06:53,355 INFO zen.ZenModeler: No Python plugins found for FileServer.domain.local
2013-07-31 15:06:53,356 INFO zen.ZenModeler: No command plugins found for dathomir.cudgc.local
2013-07-31 15:06:53,357 INFO zen.ZenModeler: SNMP monitoring off for FileServer.domain.local
2013-07-31 15:06:53,357 INFO zen.ZenModeler: No portscan plugins found for FileServer.domain.local
2013-07-31 15:06:59,614 INFO zen.ZenModeler: processing zenoss.wmi.CpuMap (Cache) for device FileServer.domain.local
2013-07-31 15:06:59,616 INFO zen.ZenModeler: processing zenoss.wmi.CpuMap (CPU) for device FileServer.domain.local
2013-07-31 15:06:59,618 INFO zen.ZenModeler: Collecting filesystems for device FileServer.domain.local
2013-07-31 15:06:59,619 INFO zen.ZenModeler: Collecting interfaces for device FileServer.domain.local
2013-07-31 15:06:59,621 INFO zen.ZenModeler: processing zenoss.wmi.MemoryMap for device FileServer.domain.local
2013-07-31 15:06:59,622 WARNING zen.ZenModeler: WMI process discovery is currently not supported
2013-07-31 15:07:00,511 INFO zen.ZenModeler: Changes in configuration applied
2013-07-31 15:07:00,512 INFO zen.ZenModeler: Scan time: 7.35 seconds
2013-07-31 15:07:00,514 INFO zen.ZenModeler: Daemon ZenModeler shutting down

Default Monitoring templates selected:

Device_WMI (/Server/Windows)

Error:

Resource: FileServer
Component: zen.winperf.PerfRpc
Event Class: /Status/Wmi
Status: New
Message: Bad Counter(s) - 5 bad counter(s) for device 172.16.xxx.xx

Event Management...
agent zenwinperf
component zen.winperf.PerfRpc
dedupid dathomir.cudgc.local|zen.winperf.PerfRpc|/Status/Wmi|bad_wmi_counter_consolidation_event|3
eventClass /Status/Wmi
eventClassKey 
eventClassMapping 
eventGroup 
eventKey bad_wmi_counter_consolidation_event
eventState New
evid 000c298f-1444-bb75-11e2-fa1ce8cf3ca4
facility 
message Bad Counter(s) - 5 bad counter(s) for device 172.16.xxx.xx
ntevid 
priority 
severity 3
summary Bad Counter(s) - 5 bad counter(s) for device 172.16.xxx.xx

Device State...
DeviceClass /Server/Windows/WMI
DeviceGroups 
DevicePriority Normal
Location 
Systems 
device FileServer
ipAddress 172.16.xxx.xx
monitor localhost
prodState Production

Event Data...
clearid 
count 3
firstTime 2013-07-31 15:08:03
lastTime 2013-07-31 15:08:03
ownerid 
stateChange 2013-07-31 15:08:03

Event Details...
details \LogicalDisk(\\?\Volume{97bf102a-8671-11e2-a005-806e6f6e6963})\Disk Read Bytes/sec,
\LogicalDisk(\\?\Volume{97bf102a-8671-11e2-a005-806e6f6e6963})\% Disk Read Time,
\LogicalDisk(\\?\Volume{97bf102a-8671-11e2-a005-806e6f6e6963})\Disk Write Bytes/sec,
\LogicalDisk(\\?\Volume{97bf102a-8671-11e2-a005-806e6f6e6963})\% Disk Write Time,
\LogicalDisk(\\?\Volume{97bf102a-8671-11e2-a005-806e6f6e6963})\Free Megabytes

explanation These WMI performance counter(s) are being queried, but the specific performance counter(s) are not on the remote system
manager Zenoss
resolution Stop monitoring the component or fix and/or remove the performance counter name from the monitoring template. 'typeperf -q' on the remote system will show available counters
zenoss.device.device_class /Server/Windows/WMI
zenoss.device.ip_address 172.16.20.44
zenoss.device.priority 3
zenoss.device.production_state 1000

I found this fourm post, http://community.zenoss.org/thread/16187 and attempted the trnsform script provided, but that did not resolve the Issue, i still get this error in my events on Zenoss. I can see all the info I would like to see via the WMI modeliing I just really would like not to see this error. I am able to see what the disk usuage is for each disk on the device so i'm not sure what exactly its complainnig about and i can't for the life of my find where in Zenoss I would disable this monitoring request.. Thoughts?

Oh and the Server being monitored via WMI is Windows Server 2008 R2.

Wording associated with Write-up IX: failed over the tips for other folks (wording)

www. "Jun Lang ~ Don't! not!! Usually do not perish!! ohh ~ you are going, we've got widows along with orphans how you can reside goodness me!!" striking appear originated from the space, over depressing unfortunate sad Kids crying and moping ...... sore speech was, fragile along with tender childlike little one language, yet put in a effect regarding unhappiness, individuals sighed a young age thus sensible little one can be deceased dad: "Mother ~ Mom ! father what sort of ...... is not sleeping? Mother yowl, appear, nice pitfall drum, tend not to weep tend not to yowl ! Niangqin most able minded ...... "followed by" scraping ...... "There is often a feeling of a tiny portion of weeks drums seemed, along with the lady sad weeping, seemed unusual nevertheless much more hopeless ...... "ooo, ooo ~ ~ good poor ah!!Inches Susu biting any handkerchief petals, a pair of cry yet carefully watching television. Legend enjoyment jaws twitching along with observing cleansing soap operas search for Susu mesmerizing appearance, good to help you? Piao Liaopiao characters on TV ...... cardiovascular tucao: makeup also clear, neck and face are two distinctive colours ...... statistics also up graiding, small locks, lengthy hair along with hair hooks as well as a various fancy dress costumes from every period, Here is the period of the excellent accident emerged for you? ! Our god mount features! ! As well as the lines therefore old fashioned, the actual plan is also old-fashioned, perishing, Qiong Yao, restoration loved ones property Doo Doo Doo Development variety pail, prosperous lord of farm pets way too inexpensive it, how just about everywhere. From a Follow trough spit, superstar tour resolutely turned his head to confront to visit! Facial boil first night night time, an evening online, lastly many userful stuff here, it could be deemed the excitement on the planet find, celebrity trip sensed called a good mood! To be able to accept a new challenge which are very excellent my oh my! Patted the still smooth white moist cheeks, tend not to go to whichever trace associated with dark circles along with fatigued seem, superstar excursion developed a cute confront, revealing two modest hollows. "Bang boom bang" knock for the entrance, crying and moping mess Susu finally wake up involving a number of, but nevertheless relatively drowsily, sobbing flapping chicken wings in order to fly for the front door, opened the door, after which happened to the actual keep on the actual lounger watching TV ...... all of a sudden awoke, transformed as well as noticed the front door carrying a new whole milk fritters this specific individuals confront looked unusual along with wacky automatically open up the entranceway as well as suddenly fitted a brand new house, to possess a few Mongolia : own ...... completely wrong spot might right now there! ! ? Which? Xiao Zhao chant. "You come to me, nicely, 1 hour prior to coming.In . Celebrity walk out directly to both your hands regarding dairy fritters childhood Zhao took over, and after that didn't state everything to Xiaozhao time, beat select the door again to shut ...... Xiaozhao boring face, and then looked over Timber under one particular centimeter in the nasal entrance, then looked straight down in his or her vacant hands, shivers, only to wake up, bitterly contacted your nasal area: the particular rub - this world is getting examine, and that i usually do not take care of the periods! ! Time: 1 hour after. Area: a medical facility. "Sister! Young children carry out ......Inches (Section Fifteen) "No! Certainly not! Absolutely can't notify your strong, usually do not ...... not necessarily ...... proper, not necessarily ......" lady shouting hoarse first panicked, and then please take a touch of just about unusual confused Nangnang path. "But Sister!! That's our children, these are Ji family body bone fragments my oh my!Will Notify Yuan buddy cousin ...... years old ...... this ......Inch "No, zero ...... usually do not point out the situation, Apologies Yuan ... Apologies ... serious ...... ooo ...... "woman's emotional security last but not least been shattered, given a crying cry, ward silence, just girl meows ...... inside the two different people have no idea, pocket doorways have ear, star vacation can be outside the house playing this particular for them will be the earth-shattering secret or perhaps scandal ...... brother fell deeply in love with our cousin, along with sister also delivered twin babies, along with the girl spouse nevertheless kept in the particular dim ...... Nonetheless, though females speech appeared extremely unhappy, nevertheless the woman's heart is extremely dark, with a scary magic formula the idea ...... actions Tata arrived go swimming expensive sideways, observing the particular obtaining strong seem worn out yet emerged more than their confront, and then wandered in to the infirmary. Superstar Excursion shaken their go, turned away, actual difficulties, nevertheless take a look at merely a infant, nevertheless inadvertently observed this type of concept, looked couch potatoes, Xiao Zhao, expression is good, but ...... the actual heart imbalances in fact deceive the joy, perform Xiao Zhao was obviously a recessive Mensao chit chat man! ? Pressing the face ...... continue with the breath involving non secular electrical power left behind, legend trip arrived twins baby infirmary, a pair of infant looks very pretty, with star excursion still left adding nourishment to faith based strength, would not look like quick children, the white face looks glistening excellent wet, mouth in addition preserve spittle, little fleshy one group seems to be quite pretty, people can not support yet really like and love. "Hey ~ young girl, you may not ...... evening display me personally exactly how lady do? How be around oh?In . Lu Yuan came up, this individual saw his or her son as well as daughter standing celebrity visit advantage, could not aid realizing smile, imagine themself turned into sons and daughters, and also to maintain a long, actually God bless goodness me! "Ah? Big brother my oh my? Me personally right now ...... oh, nowadays My partner and i visit a medical facility dressing up, merely very good cross right here, seem oh therefore pretty child, you arrived at notice, is the big brother from the youngsters, currently." Legend Visit represents sit not accepting to sell Meng There's no strain from the side of me ...... nevertheless Xiao Zhao Tucao: I apply, miss something whilst arrived right here over a medicine? Towards the substance known as Avoid! ! ? Clearly all around a large fold predilection! ! Throughout the wall structure to view exactly how pretty tiny baby! ! ? Math concepts can be drastically wrong! ! Certainly is often a objective to it, also! ! Overlook Lolita back so pretty anyone! ! ! "Oh ~ really cute.Inch Kamu Yuan happy confront huge smiles, "Yes, young girl, what's your business my oh my? ... I must thank you also nicely.In . "You're pleasant, and granddad, I go ...... "Star Excursion gust regarding wind flow showed off Lu Yuan about, vaguely Lu Yuan apparently notice the girl said some thing as part of his ear:Inches The current mindful goodness me  burberry handbags ...... ...... best folks about, "chuckled, moving Lu Yuan shaking his / her mind, experienced he must currently have the idea wrong, yet ...... bears weak uneasiness is the place another thing ...... -

-

festive trip lately visited family louis vuitton handbags , family members with no personal computer, there is not any approach to bring up to date. (Notice phase ghosting palm Stepford newest improvements, please Baidu lookup, or perhaps one on one insight) (have a look at your boutique about the novel,) internet.<br/>Relate Articles:<br/> burberryscarf

<br/> GucciBeltsOnline

Hi there,

Our application is running on 10 devices (i.e. servers). I've setup an email alert on Zenoss. Currently zenoss is sending one email per device upon an event trigger. My mailbox is flooded. Does anyone know how to setup zenoss so I only receive aggregated one email for all devices?

Another question is, I setup the warning threshold on the application to "5". Does Zenoss apply the threshold "5" or "0.5" (5/10) on each device?

Thank you very much.

Hi,

I have gone through all the steps to set up a non-admin user for monitoring (DCOM, WMI, enable ntlm2 etc). All LOOKS good, except the zenoss user does not see all the services. I have not found any solutions out there:

Non Admin User:

wmic -U <domain>/zenoss --password='<PW>' //<server> "Select caption From Win32_Service" -d 1Caption|Name
Application Management|AppMgmt
DCOM Server Process Launcher|DcomLaunch
DHCP Client|Dhcp
DNS Client|Dnscache
Windows Event Log|EventLog
[wmi/wmic.c:212:main()] OK   : Retrieve result data.
Windows CardSpace|idsvc
KtmRm for Distributed Transaction Coordinator|KtmRm
Distributed Transaction Coordinator|MSDTC
Network Access Protection Agent|napagent
Net.Msmq Listener Adapter|NetMsmqActivator
[wmi/wmic.c:212:main()] OK   : Retrieve result data.
Net.Pipe Listener Adapter|NetPipeActivator
Net.Tcp Listener Adapter|NetTcpActivator
Net.Tcp Port Sharing Service|NetTcpPortSharing
Office Source Engine|ose
BranchCache|PeerDistSvc
[wmi/wmic.c:212:main()] OK   : Retrieve result data.
Performance Logs & Alerts|pla
Remote Access Auto Connection Manager|RasAuto
Remote Access Connection Manager|RasMan
Routing and Remote Access|RemoteAccess
Remote Procedure Call (RPC)|RpcSs
[wmi/wmic.c:212:main()] OK   : Retrieve result data.
Resultant Set of Policy Provider|RSoPProv
Security Accounts Manager|SamSs
Task Scheduler|Schedule
System Event Notification Service|SENS
Print Spooler|Spooler
[wmi/wmic.c:212:main()] OK   : Retrieve result data.
Secure Socket Tunneling Protocol Service|SstpSvc
Virtual Disk|vds
Windows Color System|WcsPlugInService
WinHTTP Web Proxy Auto-Discovery Service|WinHttpAutoProxySvc
Windows Update|wuauserv
[wmi/wmic.c:212:main()] OK   : Retrieve result data.

Admin User:

wmic -U <domain>/administrator --password='<PW>' //<server> "Select caption From Win32_Service" -d 1Caption|Name

Caption|Name
Application Experience|AeLookupSvc
Application Layer Gateway Service|ALG
Application Information|Appinfo
Application Management|AppMgmt
ASP.NET State Service|aspnet_state
[wmi/wmic.c:212:main()] OK   : Retrieve result data.
Windows Audio Endpoint Builder|AudioEndpointBuilder
Windows Audio|Audiosrv
Backup Exec Remote Agent for Windows Systems|BackupExecAgentAccelerator
Base Filtering Engine|BFE
Background Intelligent Transfer Service|BITS
[wmi/wmic.c:212:main()] OK   : Retrieve result data.
Computer Browser|Browser
Symantec Event Manager|ccEvtMgr
Symantec Settings Manager|ccSetMgr
Certificate Propagation|CertPropSvc
Microsoft .NET Framework NGEN v2.0.50727_X86|clr_optimization_v2.0.50727_32
[wmi/wmic.c:212:main()] OK   : Retrieve result data.
Microsoft .NET Framework NGEN v4.0.30319_X86|clr_optimization_v4.0.30319_32
COM+ System Application|COMSysApp
Cryptographic Services|CryptSvc
Offline Files|CscService
DCOM Server Process Launcher|DcomLaunch
[wmi/wmic.c:212:main()] OK   : Retrieve result data.
DHCP Client|Dhcp
DNS Client|Dnscache
Wired AutoConfig|dot3svc
Diagnostic Policy Service|DPS
Extensible Authentication Protocol|EapHost
[wmi/wmic.c:212:main()] OK   : Retrieve result data.
Windows Event Log|EventLog
COM+ Event System|EventSystem
Microsoft Fibre Channel Platform Registration Service|FCRegSvc
Function Discovery Provider Host|fdPHost
Function Discovery Resource Publication|FDResPub
[wmi/wmic.c:212:main()] OK   : Retrieve result data.
Windows Font Cache Service|FontCache
Windows Presentation Foundation Font Cache 3.0.0.0|FontCache3.0.0.0
Group Policy Client|gpsvc
Human Interface Device Access|hidserv
Health Key and Certificate Management|hkmsvc
[wmi/wmic.c:212:main()] OK   : Retrieve result data.
Windows CardSpace|idsvc
IKE and AuthIP IPsec Keying Modules|IKEEXT
PnP-X IP Bus Enumerator|IPBusEnum
IP Helper|iphlpsvc
CNG Key Isolation|KeyIso
[wmi/wmic.c:212:main()] OK   : Retrieve result data.
KtmRm for Distributed Transaction Coordinator|KtmRm
Server|LanmanServer
Workstation|LanmanWorkstation
LiveUpdate|LiveUpdate
Link-Layer Topology Discovery Mapper|lltdsvc
[wmi/wmic.c:212:main()] OK   : Retrieve result data.
TCP/IP NetBIOS Helper|lmhosts
Multimedia Class Scheduler|MMCSS
Windows Firewall|MpsSvc
Distributed Transaction Coordinator|MSDTC
SQL Server FullText Search (MSSQLSERVER)|msftesql
[wmi/wmic.c:212:main()] OK   : Retrieve result data.
Microsoft iSCSI Initiator Service|MSiSCSI
Windows Installer|msiserver
SQL Server (MSSQLSERVER)|MSSQLSERVER
SQL Server Active Directory Helper|MSSQLServerADHelper
SQL Server Analysis Services (MSSQLSERVER)|MSSQLServerOLAPService
[wmi/wmic.c:212:main()] OK   : Retrieve result data.
Network Access Protection Agent|napagent
Netlogon|Netlogon
Network Connections|Netman
Net.Msmq Listener Adapter|NetMsmqActivator
Net.Pipe Listener Adapter|NetPipeActivator
[wmi/wmic.c:212:main()] OK   : Retrieve result data.
Network List Service|netprofm
Net.Tcp Listener Adapter|NetTcpActivator
Net.Tcp Port Sharing Service|NetTcpPortSharing
Network Location Awareness|NlaSvc
Network Store Interface Service|nsi
[wmi/wmic.c:212:main()] OK   : Retrieve result data.
Office Source Engine|ose
BranchCache|PeerDistSvc
Performance Logs & Alerts|pla
Plug and Play|PlugPlay
IPsec Policy Agent|PolicyAgent
[wmi/wmic.c:212:main()] OK   : Retrieve result data.
User Profile Service|ProfSvc
Protected Storage|ProtectedStorage
Remote Access Auto Connection Manager|RasAuto
Remote Access Connection Manager|RasMan
Routing and Remote Access|RemoteAccess
[wmi/wmic.c:212:main()] OK   : Retrieve result data.
Remote Registry|RemoteRegistry
Remote Procedure Call (RPC) Locator|RpcLocator
Remote Procedure Call (RPC)|RpcSs
Resultant Set of Policy Provider|RSoPProv
Special Administration Console Helper|sacsvr
[wmi/wmic.c:212:main()] OK   : Retrieve result data.
Security Accounts Manager|SamSs
Smart Card|SCardSvr
Task Scheduler|Schedule
Smart Card Removal Policy|SCPolicySvc
Secondary Logon|seclogon
[wmi/wmic.c:212:main()] OK   : Retrieve result data.
System Event Notification Service|SENS
Terminal Services Configuration|SessionEnv
Internet Connection Sharing (ICS)|SharedAccess
Shell Hardware Detection|ShellHWDetection
Software Licensing|slsvc
[wmi/wmic.c:212:main()] OK   : Retrieve result data.
SL UI Notification Service|SLUINotify
Symantec Management Client|SmcService
Symantec Network Access Control|SNAC
SNMP Trap|SNMPTRAP
Print Spooler|Spooler
[wmi/wmic.c:212:main()] OK   : Retrieve result data.
SQL Server Browser|SQLBrowser
SQL Server Agent (MSSQLSERVER)|SQLSERVERAGENT
SQL Server VSS Writer|SQLWriter
SSDP Discovery|SSDPSRV
Secure Socket Tunneling Protocol Service|SstpSvc
[wmi/wmic.c:212:main()] OK   : Retrieve result data.
Microsoft Software Shadow Copy Provider|swprv
Symantec Endpoint Protection|Symantec AntiVirus
Superfetch|SysMain
Telephony|TapiSrv
TPM Base Services|TBS
[wmi/wmic.c:212:main()] OK   : Retrieve result data.
Terminal Services|TermService
Themes|Themes
Thread Ordering Server|THREADORDER
Distributed Link Tracking Client|TrkWks
Windows Modules Installer|TrustedInstaller
[wmi/wmic.c:212:main()] OK   : Retrieve result data.
Interactive Services Detection|UI0Detect
Terminal Services UserMode Port Redirector|UmRdpService
UPnP Device Host|upnphost
Desktop Window Manager Session Manager|UxSms
Virtual Disk|vds
[wmi/wmic.c:212:main()] OK   : Retrieve result data.
Volume Shadow Copy|VSS
Windows Time|W32Time
Block Level Backup Engine Service|wbengine
Windows Color System|WcsPlugInService
Diagnostic Service Host|WdiServiceHost
[wmi/wmic.c:212:main()] OK   : Retrieve result data.
Diagnostic System Host|WdiSystemHost
Windows Event Collector|Wecsvc
Problem Reports and Solutions Control Panel Support|wercplsupport
Windows Error Reporting Service|WerSvc
WinHTTP Web Proxy Auto-Discovery Service|WinHttpAutoProxySvc
[wmi/wmic.c:212:main()] OK   : Retrieve result data.
Windows Management Instrumentation|Winmgmt
Windows Remote Management (WS-Management)|WinRM
WMI Performance Adapter|wmiApSrv
Portable Device Enumerator Service|WPDBusEnum
Windows Presentation Foundation Font Cache 4.0.0.0|WPFFontCache_v0400
[wmi/wmic.c:212:main()] OK   : Retrieve result data.
Windows Update|wuauserv
Windows Driver Foundation - User-mode Driver Framework|wudfsvc

There was a sizeable thread on New ZenPacks in the Community in the old forums, I'm going to go ahead and restart it here.  New ZenPacks get announced in zenoss-zenpacks as well.

Thanks,

Matt Ray

Zenoss Community Manager

I have a weird error when click on graphs for all Windows hosts.

pythonThresholdException User-supplied Python expression (here.getTotalBlocks() * .9) for maximum value caused error: ['usedBlocks_usedBlocks']

By default when you assign a host to FileSystem template (in our environment it's always Windows for whatever reason), there is one graph for storage usage utilization. It has a formula in the maximum threshold value which is referenced in the error.

Any ideas?

SNMP is working. I've tested usedBlocks OID.

Thank you.

There was a sizeable thread on New ZenPacks in the Community in the old forums, I'm going to go ahead and restart it here.  New ZenPacks get announced in zenoss-zenpacks as well.

Thanks,

Matt Ray

Zenoss Community Manager

I have a weird error when click on graphs for all Windows hosts.

pythonThresholdException User-supplied Python expression (here.getTotalBlocks() * .9) for maximum value caused error: ['usedBlocks_usedBlocks']

By default when you assign a host to FileSystem template (in our environment it's always Windows for whatever reason), there is one graph for storage usage utilization. It has a formula in the maximum threshold value which is referenced in the error.

Any ideas?

SNMP is working. I've tested usedBlocks OID.

Thank you.

Zenoss Core doesn't provide any easy way to create new roles and permissions.  Zenoss Enterprise has the Device Access Control Lists ZenPack (documented in the Extended Monitoring Guide) but I don't believe this delivers anything very sophisticated.

I have created a ZenPack that works with the concept of Administered Objects to:

• Create a new role, ZenOperator, that has the normal ZenUser permissions plus "Manage Events" which lets a user Ack / Close events
• Create a new role, ZenCommon, with very minimal permissions
• For those devices / device organizers that are allocated as Administered Objects to a user,  devices can be viewed, their events can be Ack'ed / Closed, performance graphs are available and Locations will appear on the Dashboard GoogleMaps portlet.
• Conversely, users ONLY see what are allocated to them as Administerd Objects
• I have included a utility I found on the wiki (I think from cluther???) - copyDashboardState.py - that copies a model dashboard to other users - it's in the lib directory.
• Fixes various bugs to do with Administered Objects so that Locations, Groups Systems and Device Classes can be allocated / removed successfully as Administered Objects

This is currently development code and would much appreciate other testers.  The code is attached here and should be installed in a backed-up, test environment.  The ZenPack was developed in a 3.1 environment and has at least been installed on a 2.5.2 system.

• Download the tarball
• Untar it - I put such things into $ZENHOME/local.  Change to this directory.
• Install in development mode, as the zenoss user, with:
  • zenpack --link --install ZenPacks.skills1st.UserRoles
  • zenhub restart
  • zopectl restart
  • Point your browser at <your zenoss>:8080/zport/manage_access and check that ZenOperator and ZenCommon roles exist
• Read the README and the comments at the start of __init__.py
• To test the ZenPack:
  • Create a test group
  • Allocate an Administered Object to this group - ideally a smallish Location, Group or System
  • Change the role for this Group's Administered Objects to be ZenOperator (do this starting from the Location / Group / System -> DETAILS -> Administration menu, not from ADVANCED -> Settings -> Users)
  • Create a user and give it the ZenCommon basic role.  Assign it to the test user group.
  • Logoff and log on as the new user.  Check that you see only the devices and organizers allocated as Administered Objects
  • Take care with testing - web browsers are likely to cache who you are logged on as, even if you logoff one tab

For more discussions around the development process have a look at http://community.zenoss.org/message/59387#59387 .

This is just a starting point.  Users authorised to see various Administered Objects don't see any reports (but they do get a blank REPORTS top-level menu).

This ZenPack creates 2 new roles; it does not look at creating any new permissions; nor does it address how to apply new roles and permissions to existing Zenoss Core code.

Organisation will want a more generic way of specifying roles and permissions.

I am actively looking for other sponsors of this work.  I am hoping that it is of interest to several organisations who would be prepared to contribute development funds and/or coding efforts - obviously they also get to help specify the requirements.

The Zenoss Community Alliance hopes that this will be the first example of a joint community development.

Please append to this discussion with feedback / ideas / offers of help.

We hope to have a more formal method of offering financial help in the next week or two.

Cheers,

Jane

Hello,

I'm trying to customize the e-mail notifications sent out by Zenoss Core 3.0.3. Here's what I have so far.

Summary:

%(device)s %(summary)s

Body:

Device: %(device)s
Component: %(component)s
Severity: %(severityString)s
Time: %(firstTime)s
Message:
%(message)s
<a href="%(eventUrl)s">Event Detail</a>
<a href="%(ackUrl)s">Acknowledge</a>
<a href="%(deleteUrl)s">Delete</a>
<a href="%(eventsUrl)s">Device Events</a>

This works great for most devices, however any devices that are not registered in DNS only show the IP address in the notfication. For example I have a device named BURL-SERVER-UPS. IP address 192.168.17.98

When the up/down notification gets sent, it gives a notification saying:

192.168.17.98 ip 192.168.17.98 is up

What field can I use so that the notification shows the Device Name rather than the IP?

There was a sizeable thread on New ZenPacks in the Community in the old forums, I'm going to go ahead and restart it here.  New ZenPacks get announced in zenoss-zenpacks as well.

Thanks,

Matt Ray

Zenoss Community Manager

Hi All,

I want to escalate an event if it gets thrown up more than once in a 5 minute interval.  e.g. the first event isn't necessarily a problem but a second event within 5 minutes would be and escalate accordingly.

I have played around with the event transform to escalate an event based on event counts (https://gist.github.com/1486570) and this seems to work for the most part.

However, because the first event sometimes happens overnight, we get false alarm when a second one appears sometime later and the first event hasn't aged yet.  I don't want to put event aging too quickly.  I tried creating an event transform that would be based on the firstTime attribute of an event but it looks like I can't reference this attribute in the transform.

Any pointers appreciated, thanks!

Hi,

We have enabled events on /Perf/CPU high thresholds in our environment.

Zenoss 3.2.1
Linux (x86_64) 2.6.32 (Linux nk-mgmt-dh-17 2.6.32-41-server #91-Ubuntu SMP Wed Jun 13 11:58:56 UTC 2012 x86_64)

But we do not want to get an event on every little performance spike:

I tried to set on both: Device(/Server/Linux) and WMIDevice(/Server/Windows) this.

(See scrots)

But still the events shows up after every little spike..

From what I read I thought that warning - 5 would take 5*5*3 minutes to create and show up that critical event?

Or am I being misled here by my own incompetence

--

Regards Falk

I sure hope someone can help me figure this out.  Been through all the logs, forums, and anything else I can think of, so as a last resort, I'm reaching out the community.  I'm not a power linux user by any means, but  know enough to be dangerous, to give you some background.   All we need is simple monitoring and alerting, but without Zenhub, we don't get alerts, which isn't good.  Zenhub won't stay running for a more than 2-3 days at this point, and it's been that way for months.  There's nothing in the zenhub log.  It just stops.  I found this in zencommand log, which is the most information I can find on the issue.

2012-08-10 21:35:52,849 ERROR zen.zencommand: ZenHub is down

Traceback (most recent call last):

  File "/usr/local/zenoss/zenoss/Products/ZenRRD/zencommand.py", line 704, in doFetchConfig

    self.setPropertyItems(driver.next())

  File "/usr/local/zenoss/zenoss/Products/ZenUtils/Driver.py", line 64, in result

    raise ex

HubDown: ZenHub is down

2012-08-10 21:35:53,342 ERROR zen.zencommand: ZenHub is down

Traceback (most recent call last):

  File "/usr/local/zenoss/zenoss/Products/ZenRRD/zencommand.py", line 752, in start

    driver.next()

  File "/usr/local/zenoss/zenoss/Products/ZenUtils/Driver.py", line 64, in result

    raise ex

HubDown: ZenHub is down

2012-08-11 03:35:53,484 ERROR zen.zencommand: ZenHub is down

Traceback (most recent call last):

  File "/usr/local/zenoss/zenoss/Products/ZenRRD/zencommand.py", line 704, in doFetchConfig

    self.setPropertyItems(driver.next())

  File "/usr/local/zenoss/zenoss/Products/ZenUtils/Driver.py", line 64, in result

    raise ex

HubDown: ZenHub is down

2012-08-11 03:35:53,685 ERROR zen.zencommand: ZenHub is down

Traceback (most recent call last):

  File "/usr/local/zenoss/zenoss/Products/ZenRRD/zencommand.py", line 752, in start

    driver.next()

  File "/usr/local/zenoss/zenoss/Products/ZenUtils/Driver.py", line 64, in result

    raise ex

We are running this on Ubuntu Linux 12.04.1 and Zenoss is the latest version: Zenoss 3.2.1.

I'd truly appreciate some help in getting this fixed.  Please let me know if there is any other information I can provide.  Thank you in advance.