Event Monitor on Linux question

We are currently running NSM 2.0. The engine is version 2.00.37 running on a NetWare 6.5 sp7 server. The two event servers are version 2.00.15 running on NetWare 6.5 sp7 servers. We are needing to decommission the two servers that are our current event servers and replace them with SLES. No plans are in place to upgrade the server running the NSM engine. I see from the documentation that we will need to upgrade NSM to 2.5 in order to run the event servers on SLES. The documentation states "installing the NSM Event Monitor for Linux requires OES2-SP1 or SLES 10 SP2." The directions then go on to state how to install on a OES2 box. Do you have to install the event monitors on OES2? Will the event monitors run on SLES 11?
We already have 64 bit SLES 11 systems in the partition and would like to use these instead of installing more servers if possible. If we need to install OES2 servers, is it OK if they are virtual?

I guess I am a little confused. We have SLES 11 boxes with eDirectory 8.8.5 sp4 installed. These servers also run LDAP and hold read/write replicas of the partition the users reside in. Why do I need to run OES2 to monitor eDirectory events?
Originally Posted by NSRDevelopment
The main purpose of the event monitor is to monitor edirectory replicas for events. If there are no replicas where you install event, it can be configured to monitor replicas on another server. The event monitor will probably run on SLES 11 (not officially supported), but you will have to configure it to monitor a server with edirectory replicas via LDAP, which requires OES 2 (SP 1 or SP 2.) There is no problem installing on a virtual server.
NSM Support and Development
>>> stephayers<[email protected]> 8/17/2010 4:29 PM >>>
We are currently running NSM 2.0. The engine is version 2.00.37 running
on a NetWare 6.5 sp7 server. The two event servers are version 2.00.15
running on NetWare 6.5 sp7 servers. We are needing to decommission the
two servers that are our current event servers and replace them with
SLES. No plans are in place to upgrade the server running the NSM
engine. I see from the documentation that we will need to upgrade NSM to
2.5 in order to run the event servers on SLES. The documentation states
"installing the NSM Event Monitor for Linux requires OES2-SP1 or SLES 10
SP2." The directions then go on to state how to install on a OES2 box.
Do you have to install the event monitors on OES2? Will the event
monitors run on SLES 11?
We already have 64 bit SLES 11 systems in the partition and would like
to use these instead of installing more servers if possible. If we need
to install OES2 servers, is it OK if they are virtual?
stephayers
stephayers's Profile: NOVELL FORUMS - View Profile: stephayers
View this thread: Event Monitor on Linux question - NOVELL FORUMS

Similar Messages

  • How to delete all Messages in B1-Event-Monitor

    Hello,
    is there a way to delete all Messages from the B1-Event-Monitor.
    Now we have:
    ... But when I try the "Delete All" Function nothing happend, and the Browser hang.
    I found this post.B1if db unexplained growth.. and followed all steps.
    1)Monitoring->B1 Event Monitor->Switch the log off. Now press delete all button. To clear all the logs.
    It is recommended that the B1 Event Monitor is turned on only when debugging& analyzing specific issues. During normal usage, you should switch the B1 Event Monitor off:
    2)Maintenance->Cfg Msglog->Click on Manual Delete and provide the appropriate input and press Delete.
    3)B1if is handling the message log deletion automatically on the daily bases (B1if -> Maintenance -> Cfg MsgLog -> Daily deletion button). By default it#s set to 23.00. It means the server needs to be up at this time. This value can be set according the customer#s requirement and here you can find more option regarding the message log settings as well. (Kindly check whether Backup buffer(days) is set to 0, if yes check by changing it to 1)
    4)Schedule an immediate Transaction-Log Garbage Collect (B1if #> Control Center #> Maintenance #> Schedule TLog GC #> Submit)
    5)Open Integration Framework->Control Center->Maintenance->tlog delete->Select the Execution status as "Completed"->submit. Wait for the process to complete.
    6)Now restart the Integration service.
    Messages are still in the B1-Event-Monitor.
    I think our mistake was the LOG-Level ON during all the time.. the daily deletion I switched to 03:00 with 1 day Buffer
    Thank you for an Idea.
    SAP B1 9.0 PL 12
    B1-Integration PL15 = .1.20.8
    Regards
    Markus

    Hi,
    You Can use DB Purge tools.
    May be it will help you for deleting those data.
    You can also view this thread.
    http://scn.sap.com/thread/3606618
    Thanks,
    Tushar

  • Looking for different audit events in Oracle Linux

    Hi,
    I am looking for different audit events in Oracle Linux. I did lot of googling but could not find anything relevant. Can you please share some doc/info if you have.
    Thanks,
    Ravi

    You can probably spent all day searching in https://linux.oracle.com/documentation/ or http://docs.redhat.com/docs/en-US/index.html for information about this topic. Finding relevant information appears to be difficult.
    The information you are looking for is about configuring the Linux Audit subsystem. There are some rules examples in /usr/share/doc/audit*
    I found the following link in Google that seems to provide a reasonable overview:
    http://dgz.dyndns.org/mediawiki/index.php/%28RHEL%29_HOWTO_configure_the_auditing_of_the_system_%28auditd%29

  • IPS event monitor and reports not working

    Dear after upgrading my IPS from E3 to E4  the event monitor  and reports not working, can you please advice my to solve this issues

    Hi All,
    Filter settings below:
    The filter works partially as I don't get alerts on the IPS itself.
    Firewall LOG:
    4          Feb 14 2014          15:33:22                              39715                    514          IPS requested to drop UDP packet from SOURCE_VLAN_NUMBER:/39715 to DESTINATION_VLAN_NUMBER:/514
    IPS LOG (when enabled):
    evIdsAlert: eventId=1352793300955167909  vendor=Cisco  severity=low 
      originator:  
        hostId: SSM02 
        appName: sensorApp 
        appInstanceId: 1192 
      time: Feb 14, 2014 15:33:22 UTC  offset=0  timeZone=GMT00:00 
      signature:   description=IP Fragment Too Small  id=1206  version=S212  type=anomaly  created=20030801 
        subsigId: 0 
        sigDetails: Too many small IP fragments in datagram 
      interfaceGroup: vs0 
      vlan: 0 
      participants:  
        attacker:  
          addr: 172.x.x.x  locality=OUT 
          port: 39715 
        target:  
          addr: x.x.x.x  locality=OUT 
          port: 514 
          os:   idSource=unknown  type=unknown  relevance=relevant 
      alertDetails: InterfaceAttributes:  context="single_vf" physical="Unknown" backplane="GigabitEthernet0/1" ; 
      riskRatingValue: 50  targetValueRating=medium  attackRelevanceRating=relevant 
      threatRatingValue: 50 
      interface: GigabitEthernet0/1  context=single_vf  physical=Unknown  backplane=GigabitEthernet0/1 
      protocol: udp 
    Our next step is to make a service policy exception on the firewall itself. We are also considering reloading the IPS device or at least the analysis engine.
    Thanks for all your help so far. Any more suggestions are most welcome. I'll keep you up to date.
    Regards
    Mariusz

  • Missed event monitor with event reset

    I have pretty simple request for Scom monitoring, but I don’t know how to do it. My application generates an event in custom log with name Mpis. Event level is Informational, Event ID is 10 and source is Mpis. This event is created every
    5 minutes. If application failed, event isn’t created. I have a need to create an alert, if event isn’t created more than one hour and monitor must go into unhealthy state (red). If same event come back, monitor must resolve itself and go back to healthy (green).
    I try doing this with missed event monitor with event reset, but they don’t work as I expected, probably because I use the same event for trigger an alert and resolve an alert. Any idea ?

    There must be something misconfigured. Missed Event Detection -> Windows Event Reset is the correct one.
    Use Event ID 10 and Source Mpis as expression in both Simple Event Expression and Missing Event Expression. in Missing Event Detection, use "Based on fixed simple recurring Schedule" and choose 60 minutes/1 hour.
    I have configured this in my environment, and this works perfectly; if no events are logged within an hour, i get an alert. If i then create the event, the alert Closes.
    www.coretech.dk - blog.coretech.dk

  • Javac - command not found (Linux question)

    Hi Im running openSUSE 10.2 and recently downloaded the jdk from sum.com
    I added the path of the executable files (home/jdk/bin) to my PATH environment variable, and the command 'java' works fine nomatter what the current directory, 'javac' however claims not to be found, as does appletviewer and many others.
    really cant figure this out, seeing as im sure the PATH variable has been set correctly
    sorry this is more of a linux question than java but i hoped someone on here might have had the same problem
    thanks

    use this command to check if javac is in path
    which javac if you have set the path correctly, then it should display the location of the javac otherwise it will display an error that no javac found in path..

  • Event monitor cannot find PowerShell generated events

    I have a basic event monitor that only looks for an event ID and source. The event I am monitoring is generated via Powershell from a remote system rather than being locally created. I'm not sure if that matters, but it sure seems like it.
    If I change the event expression in the monitor to look for other events it will generate alerts, it just cant see my PS events. I've tried changing the ID number, the source, using different params, etc... I'm convinced that this is due to the event creation
    process and PS must be creating the event in a different manner than SCOM is looking for. Maybe its a bug where SCOM just ignores events created by proxy.
    I found this: http://www.systemcentercentral.com/monitoring-events-written-from-a-remote-server-with-scom/
    But that is for Rules. I still tried adding <AllowProxying>false</AllowProxying> to the XML of the MP...SCOM didn't like
    it.
    Has anyone ran into this before?
    We are using SCOM 2012R2 fully updated. 
    - Slow is smooth and smooth is fast.

    I guess I should have been more specific. I am using PowerShell to create an event, it isnt an actual PowerShell event.
    write-eventlog -computername Server -logname Application -source Orchestrator -eventID 1 -message "This is an example of the events created with PS that SCOM cannot detect."
    Maybe I should explain what I'm doing. I have an Orchestrator runbook that does stuff with things. If one of the runbook activities fails, it will send an event to the machine it was trying to run the activity on. SCOM is monitoring for that PowerShell generated
    event stating that the runbook failed. 
    - Slow is smooth and smooth is fast.
    I think you haven't native source "Orchestrator" in PoSh log.
    Vladimir Zelenov | http://systemcenter4all.wordpress.com
    I run a New-EventLog command first to create the Orchestrator source. Otherwise the Write-EventLog command would fail if the source wasn't there. I can see the event there in the logs.
    - Slow is smooth and smooth is fast.

  • Event Monitors - Weird behavior!!

    Hi,
    I have made a powershell script which writes entries to a Event Log on a server, and an event monitor which searches for those entries. The powershell script runs on a management server and writes to the event log on a different server.
    When I trigger the entries the monitor looks for manually via powershell on the server, Write-EventLog, the monitor triggers both healthy and unhealthy state. However, when the entries are triggered by the powershell script referred to in my first paragraph
    the monitor does not trigger. Strange.
    Any ideas?
    Thanks in advance, Best Regards

    Hi!
    SCOM does not trigger on events written from another server by default. I haven’t tested it, but it looks possible to create a working monitor for that scenario: http://blogs.technet.com/b/kevinholman/archive/2010/07/23/how-to-monitor-events-logged-by-another-computer-or-cluster.aspx
    Markus Bölske, Lumagate. Blogg: www.opsmanager.se

  • NSM 3.0.4 Event Monitor Service

    NSM AD 3.0.4 on W2008
    This install has been running fine for months. Now the Event Monitor service will not start. Does anyone have any ideas on what might be the cause? Suggestions on a fix?
    Mike

    On 2/14/2013 6:10 PM, mfruech wrote:
    >
    > NSM AD 3.0.4 on W2008
    >
    > This install has been running fine for months. Now the Event Monitor
    > service will not start. Does anyone have any ideas on what might be the
    > cause? Suggestions on a fix?
    >
    > Mike
    >
    >
    Mike,
    Does the Event Monitor log file show anything? You should be able to see
    where the Event Monitor starts by looking at the log's timestamps
    (there's a large blob of XML at that timestamp too), and what follows is
    a sequence of checks making sure the service can start up correctly with
    all its appropriate dependencies. Anything with a 'Result = ' or 'rc='
    followed by a non-zero number is potentially a problem. Let us know what
    those are, and we can troubleshoot the Event Monitor from there. Thanks!
    - NFMS Support Team

  • Can't see events in Event Monitoring in IME

    Hello,
    I have a AIM-SSM installed succesfully, and "show events alert" output does display some alerts as expected.
    The problem is, there is no events in Event Monitoring in IME. Have tried to select "Realtime" or Time Range, it doesn't work.
    I've checked the configuration, and everything looks fine.
    Any suggestions for this?
    Thanks and regards,
    -Alejin

    Better to post your topic in the iPhoto community here.
    This forum is more or less for troubleshooting the App Store.
    You'll receive more feedback from iPhoto users in that forum.

  • Best Approach for Performance/Event Monitoring

    I'm completely new to SAP and would appreciate the input of some more experienced folks.
    I have been given two tasks for SAP: performance monitoring of the SAP application/associated modules (e.g. SAP Memory utilization, number of processes, etc.) and alarm event monitoring (anything that would be characterized as a error and logged).
    For the performance monitoring I would like a access the metrics once every 5 minutes to keep a running history.  Several things I've started to look at are the Alert Manager and perhaps a Perl API interface.
    For alarm events, I assume there is some SAP module that can monitor for these and generate SNMP traps or perhaps a custom application that does log mining.  As part of this I am trying to determine where error events are written to in SAP (e.g. a log file??).
    If anyone has insight or can point me in the right direction, I would be very appreciative.  Thanks in advance.
    Ed

    Dear Ed,
    If Wily Introscope is configured for your Portal, which shoold be the case because SAP delivers it as with SAP Solution Manager, all metrics which oyu mention would be available.
    If you are running a testing instance which is not integrated with Solution Manager, you could try the Web Administrator
    http://<host>:<port>/nwa ->  Availability and Performance -> Resource Monitoring
    Best Regards,
    Sylvia

  • SMC 3.5 to monitor a Linux PC

    Will SunMC 3.5 monitor a Linux machine? How about a VxWorks OS/Filesystem?
    Thanks

    Will SunMC 3.5 monitor a Linux machine? Yes:
    http://javashoplm.sun.com/ECom/docs/Welcome.jsp?StoreId=8&PartDetailId=SUNMC-3.5-LX-G-F&TransactionId=try
    That package is technically for 3.5.1, but it can work with 3.5 as well with a minor configuration change.
    How about a VxWorks OS/Filesystem?Only in the specific case where it's VxWorks for a 3800-6900 system controller, and even then only to get hardware status of the entire box. There is currently no native SunMC client for VxWorks... but you may be able to find ways around it.
    Regards,
    Mike

  • VMS Security Monitor Event Rules - Email Script Question

    Reference: "Configure E-mail Notifications with Scripts for IDS Alerts Using CiscoWorks Monitoring Center for Security"
    http://www.cisco.com/en/US/customer/products/hw/vpndevc/ps4077/products_configuration_example09186a00801fc770.shtml#fivesensor
    Good day all -
    I have created the Email Notification process as desribed in the linked article. The script runs as expected when a High severity alert is triggered but does not fill in the variables within the email body. I have double-checked that I have the right version of the script for the sensors that we are using. Has anyone else been working with this (or some other) scripting solution and maybe have a suggestions on what to try next?

    Try the configuration available at the URL http://cisco.com/en/US/docs/security/security_management/vms/security_monitor/2.2/user/guide/ch05.html.

  • Dual monitor, and other questions....

    I'm sorry for these questions if they've already been discussed... with all the back lash, I'm having a hard time wading through all the comments.
    I have a macbookpro.
    I use an external 24" monitor along with my 15" laptop for editing. My 15" is used for my canvas.
    1: Can I use this set up with the new FCP X?
    I use PPro CS5 currently and I like the way it handles media and saving my projects.
    2: How does FCP X handle media?
    2.a: Does it handle media like iPhoto / Aperture?
    2.b: Are projects saved like in iMovie?
    I keep all my media on external hard drives.
    3: Will this be a problem with FCP X?
    Thank you in advance for your help.
    Tony

    On my dual monitor Mac pro, the main monitor has the timeline and canvas. The second monitor has the events I think, basically the bin. You'd probably want to make your 24 the main monitor
    FCP X handles media and projects a lot like iMovie. iTunes and iPhoto are accessed just like iMovie. You can save media to whatever drive you want although you can't really drill down to a particular location
    Hope this helps

  • 7.0.2 monitor agent, linux, email

    How does the Linux monitor agent perform email notification? Have a complaint that not all events are being emailed, consistently.

    Why not use our own GWIA? The destination is internal. Right now, it is going to the (a) GWIA. I can change it, if necessary.
    joe a.
    Originally Posted by dzanre
    Monitor uses it's own SMTP mailer, so where you run into problems sometimes is that some carriers will not accept mail from a server without a PTR, etc. You can use a relay server (but don't use your GWIA) if you need to in order to get this to work - maybe your ISP's SMTP server that would have a PTR - many times Monitor is not on a server that has a public IP address, etc.
    Hope that points you in the right direction.

Maybe you are looking for