Settinggs for Generic Alert Log Metric, OEM GC 10204

OS: AIX Grid Control Version: 10204
Agent:10204, Repository DB:10204
This is the setting on a 9208 DB I was testing for Generic Alert Log Error Metric (I had to change [ (square bracket with { curly brackets on the post).
Warning Metric: ORA-*
Critical Metric: ORA-0*(60{0-9}|1157|1562|1628|1650|1653|1654|1655|1656|4031|7445|16014|29740){^0-9}
The Warning metric (ORA-*) is set to a catch all else if not found in the critical metric. Not sure if there's an order the warning vs critical is read, but so far this has worked for our purposes.
In GC 10204, we can add an ORA- error to the 'Alert Log Filter Expresion' and this would prevent a metric from being sent out if matched, so if there's a particular ORA-0600 error we do not want to be sent out as critical, we could add it to to the filter to be ignored. In the Advance Setting GC example , we want to ignore "ORA-00600: internal error code, arguments {qerfxFetch_01}, {}, {}, {}, {}, {}, {}" , so we would added it to the filter as ".*ORA-00600:.*\{qerfxFetch{^\}}*\}.*"
My question - Instead of ignoring the error "ORA-00600: internal error code, arguments {qerfxFetch_01}, {}, {}, {}, {}, {}, {}", I want to move it to be a Warning, can anyone suggest any way of doing this? I've tried adding to the Warning metric {.*ORA-00600:.*\{qerfxFetch{^\}}*\}.*}|ORA-*, but this does not work, as the alert still comes out as a critical.
All suggestions are welcome.

Hi,
You did not mention database version. in 11g, the generic alert log metric will not work. For 10g, you can set this from metrics and policy settings page bu setting warning and critical thresholds for this metric to "ORA-*". And then create a notification rule for this metric.
For 11g, you need to check MOS note 949858.1
Salman

Similar Messages

Generic Alert log metric

I'm trying to figure out how to setup the generic alert log metric to run a corrective action based on a warning .
So when i try to work with the generic alert log metric .
it provides a time/line number which has an all others with a warning and a critical .
if i tried to add a new line with a % in the time/line number and warning expression it wont let me add it .
what am i doing wrong here . Obviously since this is the alert log i will not know the time or line number of when i will recieve this error unless i'm reading something wrong here.

if i tried to add a new line with a % in the time/line number and warning expression it wont let me add it . Try "%" (in quotes)

Excluding ORA-00060 errors from Generic Alert Log Error in OEM

Hi,
I want to remove the alerts for ORA-00060 errors from OEM Alerts. In "Generic Alert Log Error" the current expression for Warning is ORA-0*(600?|7445|4[0-9][0-9][0-9])[^0-9]. How should I change this expression so that it will not send alerts for ORA-00060. I am not much aware of perl :-). Please help me with the expression.
Target Type=dbname
Host=host
Metric=Generic Alert Log Error
Metric Value=ORA-00060: Deadlock detected. More info in
Time/Line Number=Mon Nov 2 10:02:54 2009/134883
Timestamp=Nov 2, 2009 10:17:14 AM EST
Severity=Warning
Message=ORA-error stack (00060) logged in /eb_rdo0_p/oraadmin/pnoltp/bdump/alert_.log.
Notification Rule Name=Database Alert
Notification Rule Owner=SYSMAN
Notification Count=1
Thanks,
Varma

this is default monitored objects.
To stop monitoring for this object, clear the Critical and Warning threshold values and click Continue.

User Defined Metric for default ALERT log directory

On our system we have moved the alert log to a non-default location. If we use the wrong initialization file or something else goes haywire then trace files and alert logs get placed in the $ORACLE_HOME/rdbms/log directory.
I want to create a user defined metric for each machine that will look in all the $ORACLE_HOME/rdbms/log directories for each ORACLE_HOME on the server checking for any alert*.log or *.trc files. Creating an alert if it encounters any of these files.
I don't know if I should do it as a host UDM or an instance UDM. And more to the point how do I get it to see the multiple homes if the server has more than one.
Any ideas would be appreciated.
Thanks
Tim

Well I did it with a host UDM calling a local script (which will be installed on shared drives for the development/test and production systems).
The local script cats the /var/opt/oracle/oratab file eliminating lines beginning with # or $ then takes the second argument of each line and loops through all entries using a checkit procedure. The checkit procedure determines if the appropriate log directores exist for the oracle home and does a find on the diretory looking for alert*.log and *.trc. If there are any then global variables get updated with the count and directory name.
There is an if statement before exit that checks of the count of files is greater than zero and write an appropriate em_result and em_message depending on the results.
I then created the UDM in EM to call this script and check for critical/warning thresholds.
Regards
Tim

Generic Alert Log Expression Syntax

Can anyone explain or point where I can understand the syntax allowed for expressions for monitoring the alert log? For example :
ORA-0*(600?|7445|4[0-9][0-9][0-9])[^0-9]

Are you asking what 'ORA-0*(600?|7445|4[0-9][0-9][0-9])[^0-9]' means?
If so, its just a perl expression. look on google for searching patterns etc in perl and then change it accordingly to what you want (or not) to search for.
Bazza

Shell script for oracle alert.log file

Hi Gurus,
I wanted to write shell script to know the last 10 shutdown timings of the database from alert log file. I'm working on oracle 9i.
Could anyone please advice on this.
Thanks in advance
regards,
Shaan
Edited by: Shaan_dmp on Jan 5, 2009 1:27 PM
Edited by: Shaan_dmp on Jan 5, 2009 1:28 PM

Use awk. I don't have a 9i to hand but here is a very simple version for 10g XE
My awk file (the line numbers are for the notes below - don't include them:
01:BEGIN { prevline = "";}
02:
03:/Completed: alter database close/ {print prevline,FS,$0;}
04:
05:{prevline = $0;}The command line and results (from my 300k alert log)
$ awk -f alert.awk.txt alert_xe.log
Fri Apr 11 18:08:40 2008   Completed: alter database close normal
Fri May 16 18:53:21 2008   Completed: alter database close normal
Tue May 20 17:28:23 2008   Completed: alter database close normal
Thu Jul 17 19:08:52 2008   Completed: alter database close normal
Fri Aug 15 15:12:48 2008   Completed: alter database close normal
Wed Nov 05 08:52:59 2008   Completed: alter database close normal
Fri Nov 14 16:36:03 2008   Completed: alter database close normal
Tue Dec 09 10:46:23 2008   Completed: alter database close normal
Mon Jan 05 11:12:22 2009   Completed: alter database close normalWhat it means:
1) the BEGIN section at line 01 defines the variable to hold the previous line
2) the /search string/ at line 03 finds the marker in the file for a shutdown, then does the required action (print the time which was in the previous line, and then this line; use FS (the awk field separator - normally space) as a separator
3) at line 05 is an instruction we do on every line - so we remember it in case it is the timestamp for the shutdown.
Now, you can include more of the corner cases for shutdowns by adding more search patterns etc. For more information, google for awk examples.
Awk is really good at this sort of thing!
HTH
Regards Nigel

Receiving Alerts on ORA- error in Alert Log File

Hi,
I am using 10.2.0.5 OEM grid control and same versioned agent on my database servers. I have configured the alert email notification if there is any ORA- error message in my alert log file. The metric i selcted for this is "Generic Alert Log Error Status". In notification email, i see only the message that there is generic error message in the alert log file. Is there any way to set this notification so that i receive the exact ORA- error message in my alert notification email if there is any kind of ORA- error found in my alert log file?
Thanks
Salman

Please look into the Metalink Note: 458605.1
Subject: Receiving "Clear" Notifications Unexpectedly for 'Generic Alert Log Error Status' Metric

Not clearable : 1 distinct types of ORA- errors have been found in the alert log.

( Correct me if I'm wrong.)
What could be the reason for the fact that the event "1 distinct types of ORA- errors have been found in the alert log." is not clearable?
Even if the problem is solved, the ORA- error will still be in the alert.log.
Therefore the event would eventually only disappear after 7 days.
Doesn't sound very logical to me.

- The event page showing a warning event for "Generic Alert Log Error Status" metric,
- "Generic Alert Log Error Status" event is a statefull metric,
- On each evaluation of the metric defined as 'Statefull', the Cloud Control Agent recalculates the severity,
- This means, EM Agent scans the alert log for ORA errors, "Generic Alert Log Error Status" will return the number of ORA error found,
- Whenever the returned number is grater than the assigned thresholds of "Generic Alert Log Error Status", an alert is raised on EM console,
- On the next scan of alert log file, this alert will be cleared ONLY if the collected value is less than the assigned threshold,
- By checking your system, the warning threshold of "Generic Alert Log Error Status" is 0, so whenever a single ORA error is found in alert log, a warning event will be raised and you will not be able to clear it manually as this is a stateful metric.
There are three cases where this alert can be cleared:
1. The agent found 0 ORA errors in Alert log, then the alert will be cleared automatically
2. Manual clear: By disabling/enabling the metric
3. Manual clear and further not receiving similar alerts frequently: By assigning higher thresholds values
So, I suggest to disable the metric, then, enable it after some time as follows as follows:
- Go to the problematic database home page >> open the 'Oracle Database' drop-down menu >> 'Monitoring' >> 'Metric and Collection Settings',
- Choose 'All metrics' from the 'View' drop-down list >> search for the 'Generic Alert Log Error Status' metric,
- Click the pencil icon under 'Edit' column opposite to the above metric >> remove the Warning Threshold (make it empty) >> 'Continue' >> 'OK'.
- Wait for the next collection schedule in order for the warning events to be cleared, then, enable the metric again with the same steps (setting Warning Threshold=0).
References:
Note 604385.1 Receiving "Clear" Notifications Unexpectedly for 'Generic Alert Log Error Status' Metric
Note 733784.1 What are Statefull and Stateless Metrics in Enterprise Manager - Explanation and Example
HTH
Mani

User defined metrics for alert log errors

I want to create UDM for getting the full description of alert log ORA - error to be reported via E-mail. Can somebody guide me or help me withe script which can be used to create this alert. Currently, We get the only the message of that error is generated; which request us to manually check the alert to log to figure out the error.

Hi,
what metric did you use and what is the database version.
There are metrics related to alert log errors but those which have status at the end of a name return number of errors
and w/o status provide error description:
11g
Generic Incident - error message
Generic Incident Status - number of errors
10g
Generic Alert Log Error - error message
Generic Alert Log Error Status - number of errors
Did you set Generic Incident or Generic Alert Log Error? If description is not enough
you might use UDM but it would be easier for 11g since there are internal views which
have access to ADR, for 10g it will be required to build additional procedure (to open and read alert log)

How to be notified for all ORA- Errors recorded in the alert.log file

based on Note:405396.1, I Changed the Matches Warning from the default value ORA-0*(600?|7445|4[0-9][0-9][0-9])[^0-9] to ORA-* in order to receive an warning alert for all ORA- errors.
but I just recieved the alert like the following:
Metric=Generic Alert Log Error
Time/Line Number=Mon Feb 25 23:52:21 2008/21234
Timestamp=Feb 26, 2008 12:06:03 AM EST
Severity=Warning
Message=ORA-error stack (1654, 1654, 1654) logged in /opt/oracle/admin/PRD/bdump/alert_PRD.log.
Notification Rule Name=Alert Log Error
Notification Rule Owner=SYSMAN
as you can see, the message only indicate the ORA-1654, nothing else.
How to set in 10g grid control to get the details alert that in the alert log like:
"ORA-1654: unable to extend index ADM.RC_BP_STATUS by 1024 in tablespace PSINDEX"
I can't believe Oracle 10g Grid control only provide the ORA- number without details

Go to your database target.
On the home tab, on the left hand side under Diagnostic Summary, you'll see a clickable date link next to where it says 'Alert Log'. Click on that.
next click on Generic Alert Log Error Monitoring Configuration (its at the bottom)
In the alert thresholds put:
ORA-0*(600?|7445|4[0-9][0-9][0-9])[^0-9]
I believe that will pick anything up but experiment, its only perl.
If you want to test this use the DBMS_System.ksdwrt package but I would advise you only do so on a test database. If you've never heard of it, google it. Its a way of writing to your alert log.
Make sure you have your emails sent to long format as well.

Create custom rule: Looking for ORA errors in the alert log

I would like to create a rule to notify me when ORA errors are generated to the alert log. When I try to create a rule, I seem to only be able to choose from predefined lists. Has anyone configured a rule for this?

Grrr. This is for 10.2 Grid:
Go to databases --> select your database
Under Diagnostic summary, you'll see:
Alert Log 28-Dec-2006 09:19:48
The date part is a clickable link, click on it. Scroll to the bootom of the next page and click on:
"Generic Alert Log Error Monitoring Configuration"
Now read the page very carefully, its all self explanatory. The reason who haven't had some errors reported is because of that filter. Now set it up the way you want it.
Good luck
Bazzza

Need to find the way to get the actual error message in the alert log.

Hi,
I have configured OEM 11G and monitoring target versions are from 9i to 11g. Now my problem is i have defined the metrics for monitoring the alert log contents and OEM is sending alert if there is any error in the alert log but it is not showing the actual error message just it is showing as below.
============================
Target Name=IDMPRD
Target type=Database Instance
Host=oidmprd01.ho.abc.com
Occurred At=Dec 21, 2011 12:05:21 AM GMT+03:00
Message=1 distinct types of ORA- errors have been found in the alert log.
Metric=Generic Alert Log Error Status
Metric value=1
Severity=Warning
Acknowledged=No
Notification Rule Name=RULE_4_PROD_DATABASES
Notification Rule Owner=SYSMAN
============================
Is there any way to get the complete error details in the OEM alert itself.
Regards
DBA.

You need to look at the Alert Log error messages, not the "status" messages. See doc http://docs.oracle.com/cd/E11857_01/em.111/e16285/oracle_database.htm#autoId2

Customize alerts on ALERT.log file? And another question

We just setup and have started to use Grid Control. So far, I have been very pleased with what I have seen.
Just some questions though.
Is there a way to customize the "Generic Alert Log Error Status"?
Can we have exclusions for that alert? We get are getting messages on alerts for a bug that exists in one of our DB's. If we can some how exclude this particular error, that would be great. That possible?
Secondly, can you schedule checks on a database to check the state of the database? This is something I would like to do if possible.
THanks.

Go to targets - databases - <database>
On this page on the left side, you'll see a heading "Diagnostic Summary"
The you'll see something like:Alert Log <date>
Click on the date, go to the bottom of the page and click on "Generic Alert Log Error Monitoring Configuration"
Here you can configure exactly what alert log messages you want.
Yes, depending on what it is you want to do. Look at User Defined Metrics, Reports and possibly Jobs to see what fits best with want you want to do.

Alert log monitoring in dbconsole 11.2.0.2.0

Hullo
Is there a way to tune out certain ORA- alerts from alerting via dbconsole? At the moment we are getting all ORA-0600s and some of them we dont need waking up by!
Thanks.
11.2.0.3
RHEL 5.5

Do you have metalink support? This is the doc you want to check into .. yes it is possible.
Database Alert log monitoring in 12c explained (Doc ID 1538482.1)
From this doc...
You need to get fancy with the regexp..
Setting thresholds for alert log metrics
Setting of the thresholds is a very complex and wide area and the values are depending on the requirements, the DBA experience and environments being monitored. This can be achieved by going to the Database target menu->Monitoring->Metrics and collection settings->Edit the "Generic Alert Log Error" from the 3 blue pencils icon on the right.
By default, the "Generic Alert Log Error" Warning threshold is set to "ORA-0*(600?|7445|4[0-9][0-9][0-9])[^0-9]" which means:
ORA-0*(600?|7445|4[0-9][0-9][0-9])[^0-9] - the string ORA-0
ORA-0*(600?|7445|4[0-9][0-9][0-9])[^0-9] - folowed by none ore more zeroes
ORA-0*(600?|7445|4[0-9][0-9][0-9])[^0-9] - followed by 600 or 60 (the ? operator means "there is zero or one of the preceding element")
ORA-0*(600?|7445|4[0-9][0-9][0-9])[^0-9] - or it can be 7445
ORA-0*(600?|7445|4[0-9][0-9][0-9])[^0-9] - or it can be anything between 4000 and 4999
ORA-0*(600?|7445|4[0-9][0-9][0-9])[^0-9] - it can follow anything but a number
For setting the thresholds, a Regular expression (RegExp) as the one above needs to be used.

Errors appeared in alert log file should send an email

Hi,
I have one requirement to do, as i am new dba, i dont know how to do this,
sendmail is configured on my unix machine, but dont know how to send the errors appeared in alert logfile should send an email to administrator.
daily, it has to check the errors in alert log file, if any errors occurs(ORA- errors or WARNING errors) should send an email to administrator.
please help me how to do it

Hi,
There are many methods for interrogating the alert log and sending e-mail. Here are my notes:
http://www.dba-oracle.com/t_alert_log_monitoring_errors.htm
- PL/SQL or Java with e-mail alert: http://www.dba-village.com/village/dvp_papers.PaperDetails?PaperIdA=2383
- Shell script - Database independent and on same level as alert log file and e-mail.
- OEM - Too inflexible for complex alert log analysis rules
- SQL against the alert log - You can define the alert log file as an external table and detect messages with SQL and then e-mail.
Because the alert log is a server side flat file and because e-mail is also at the OS-level, I like to use a server side scell script. It's also far more robust then OEM, especially when combining and evaluating multiple alert log events. Jon Emmons has great notes on this:
http://www.lifeaftercoffee.com/2007/12/04/when-to-use-shell-scripts/
If you are on Windows, see here:
http://www.dba-oracle.com/t_windows_alert_log_script.htm
For UNIX, Linux, Jon Emmons has a great alert log e-mail script.
Hope this helps . . . .
Donald K. Burleson
Oracle Press author

Settinggs for Generic Alert Log Metric, OEM GC 10204

Similar Messages

Maybe you are looking for