Weird alert behaviour

Clovertech Forums Read Only Archives Cloverleaf Cloverleaf Weird alert behaviour

  • Creator
    Topic
  • #54636
    David Teh
    Participant

      Hi folks,

      I have a UAT server running 5.8.7.0P on Solaris, with 4 test sites.

      Here’s something weird I just came across while troubleshooting a weirder host server issue. 😛

      On all 4 sites, I don’t have any alerts configured.

      But, in the hcimonitord log for all 4 sites, I see the below (which weird cos the alert file is empty). What gives?

      [cmd :cmd :INFO/0:_hcimonitord_:04/07/2015 21:40:25] Received command: ‘summary’ on connection 0x849518

      [cmd :cmd :INFO/0:_hcimonitord_:04/07/2015 21:40:25] Doing ‘summary’ command with args ”

      [cmd :cmd :INFO/0:_hcimonitord_:04/07/2015 21:40:25] Command client went away while reading.  Closing connection 0x849518.

      [aler:aler:INFO/0:_hcimonitord_:04/07/2015 21:40:25] Removing alerts and wants for connection 0x849518

      [cmd :cmd :INFO/0:_hcimonitord_:04/07/2015 21:40:49] Received command: ‘iwant state pstate’ on connection 0x849518

      [cmd :cmd :INFO/0:_hcimonitord_:04/07/2015 21:40:49] Doing ‘iwant’ command with args ‘state pstate’

      [aler:aler:INFO/0:_hcimonitord_:04/07/2015 21:40:49] New alert ID: #1

      [aler:aler:INFO/0:_hcimonitord_:04/07/2015 21:40:49] New alert def:

      {VALUE status} {SOURCE all} {MODE delta} {WITH -1} {COMP diff} {FOR once} {ACTION status}

      [aler:aler:INFO/0:_hcimonitord_:04/07/2015 21:40:49] New alert ID: #2

      [aler:aler:INFO/0:_hcimonitord_:04/07/2015 21:40:49] New alert def:

      {VALUE ps} {SOURCE all} {MODE delta} {WITH -1} {COMP diff} {FOR once} {ACTION status}

      [cmd :cmd :INFO/0:_hcimonitord_:04/07/2015 21:40:49] Received command: ‘iwant alerts’ on connection 0x849518

      [cmd :cmd :INFO/0:_hcimonitord_:04/07/2015 21:40:49] Doing ‘iwant’ command with args ‘alerts’

      [aler:aler:INFO/0:_hcimonitord_:04/07/2015 21:40:49] Creating AlertAction: cascade

      [aler:aler:INFO/0:_hcimonitord_:04/07/2015 21:40:49] New alert ID: #3

      [aler:aler:INFO/0:_hcimonitord_:04/07/2015 21:40:49] New alert def:

      {VALUE action} {SOURCE notify} {MODE actual} {WITH -1} {COMP none} {FOR once} {ACTION cascade}

      [cmd :cmd :WARN/0:_hcimonitord_:04/07/2015 21:40:49] alerts client 0x849518

      [cmd :cmd :INFO/0:_hcimonitord_:04/07/2015 21:40:49] Received command: ‘iwant eonotify’ on connection 0x849518

      [cmd :cmd :INFO/0:_hcimonitord_:04/07/2015 21:40:49] Doing ‘iwant’ command with args ‘eonotify’

      [aler:aler:INFO/0:_hcimonitord_:04/07/2015 21:40:49] Creating AlertAction: eocnotify

      [aler:aler:INFO/0:_hcimonitord_:04/07/2015 21:40:49] New alert ID: #4

      [aler:aler:INFO/0:_hcimonitord_:04/07/2015 21:40:49] New alert def:

      {VALUE eocycle} {SOURCE all} {MODE actual} {WITH -1} {COMP none} {FOR once} {ACTION eocnotify}

      [cmd :cmd :WARN/0:_hcimonitord_:04/07/2015 21:40:49] eonotify client 0x849518

      [cmd :cmd :INFO/0:_hcimonitord_:04/07/2015 21:40:50] Received command: ‘iwant {statistics 60 {dtsshp_receipts csris_oas_ib snecoas_to_snec snecoas_to_otm lab_oas_ib csris_to_nccoas o_emr_oasa

      dt_d2 sghcmis_receipt bvi_hids multiaccess_to_oas nco_oas_siu centrecmis_receipt nhcoas_to_cvis cmis_to_csris adt_to_ims2 bvo_max_cmis sgo_lab_adt_oas cish_receipts3 dtssghoas_broadcast nhcoa

      s_broadcast nccoas_to_nccmax sghoas_to_esrs shpoas_to_csris adt_to_wrs cish_receipts2 adt_to_outramoas sap_to_aims csris_to_shpoas dtsncc_receipts oasadt_to_emr4 sap_to_esb oasadt_to_emr3 shp

      cmis_to_csris dtssnec_receipts sgi_csris_dft_o snecmax_to_oas trashbin sgi_ris_siu2 csris_sap_ob nccoas_to_vac edrchrg_to_oas bvo_chcs_adt snecoas_broadcast sghoas_to_esb sap_to_cvis cish_ibh

      ub1 adt_to_avms o_emr_oasadt_m2 dtssgh_receipts nhcoas_orm_ciims nci_csris_dft_o nhcmax_to_oas out_oasemr ips_to_oas oas_to_ips shpcmis_broadcast sghcmis_broadcast sgoas_to_mrts sgh_to_emrx2

      dtsshpoas_broadcast chrg_fr_edr serv_to_nhcoas sap_to_esrs ctroas_to_esb nccmax_to_oas oas_to_shp sapadt_to_ipas csris_sap_ib adt_to_omis serv_to_snecoas nhcoas_to_nhcmax bvo_emr_hids_d shpoa

      s_broadcast shp_to_oas1 wrs_to_ish adt_to_edietitian sghcmis_to_hcitest ncccmis_broadcast nci_ris_siu spo_csris_cmis nhcoas_to_ciims bvi_ibhubraw oas_to_csris shpoas_to_esb bvo_emr_hids_m oas

      _to_lab nci_ris_siu2 adt_to_cqis hids_from_hcitest dtsnccoas_broadcast serv_to_shpoas adt_to_rfid csris_todelete3 csris_todelete2 ogord_from_asemr3 sgi_ris_siu dtsnhc_receipts shp_to_oas emer

      ge_x_hcitest2 dtssnecoas_broadcast bms_in adt_to_og in_oasemr sghoas_broadcast adt_to_bms3 nhi_csris_dft_o csris_oas_ob sgi_emr_ord_og_d2 ndcoas_broadcast sgi_emr_ord_og_m2 dtsnhcoas_broadcas

      t csris_to_nhcoas lab_oas_ob bms_out oas_to_smr sgo_csris_cmis sneccmis_to_snecips sgo_oas_siu cish_receipts2_ib sghoas_to_numis dtscish_ibhub1 cmis_to_ips sneccmis_broadcast ndcoas_to_edr ad

      t_to_poct nccoas_to_multiaccess ndccmis_broadcast sap_to_smr serv_to_nccoas sghoas_to_fmcms spi_csris_dft_o shp_to_smr bvo_hms csris_to_sghoas sap_to_csris polycmis_receipt sgo_csris_adt_i sp

      o_csris_adt_o sap_to_fasttrack adt_to_bms1 nccoas_broadcast nhccmis_broadcast cmis_to_aims sgo_csris_adt_o shscmis_broadcast }}’ on connection 0x849518

      [cmd :cmd :INFO/0:_hcimonitord_:04/07/2015 21:40:50] Doing ‘iwant’ command with args ‘{statistics 60 {dtsshp_receipts csris_oas_ib snecoas_to_snec snecoas_to_otm lab_oas_ib csris_to_nccoas o_

      emr_oasadt_d2 sghcmis_receipt bvi_hids multiaccess_to_oas nco_oas_siu centrecmis_receipt nhcoas_to_cvis cmis_to_csris adt_to_ims2 bvo_max_cmis sgo_lab_adt_oas cish_receipts3 dtssghoas_broadca

      st nhcoas_broadcast nccoas_to_nccmax sghoas_to_esrs shpoas_to_csris adt_to_wrs cish_receipts2 adt_to_outramoas sap_to_aims csris_to_shpoas dtsncc_receipts oasadt_to_emr4 sap_to_esb oasadt_to_

      emr3 shpcmis_to_csris dtssnec_receipts sgi_csris_dft_o snecmax_to_oas trashbin sgi_ris_siu2 csris_sap_ob nccoas_to_vac edrchrg_to_oas bvo_chcs_adt snecoas_broadcast sghoas_to_esb sap_to_cvis

      cish_ibhub1 adt_to_avms o_emr_oasadt_m2 dtssgh_receipts nhcoas_orm_ciims nci_csris_dft_o nhcmax_to_oas out_oasemr ips_to_oas oas_to_ips shpcmis_broadcast sghcmis_broadcast sgoas_to_mrts sgh_t

      o_emrx2 dtsshpoas_broadcast chrg_fr_edr serv_to_nhcoas sap_to_esrs ctroas_to_esb nccmax_to_oas oas_to_shp sapadt_to_ipas csris_sap_ib adt_to_omis serv_to_snecoas nhcoas_to_nhcmax bvo_emr_hids

      _d shpoas_broadcast shp_to_oas1 wrs_to_ish adt_to_edietitian sghcmis_to_hcitest ncccmis_broadcast nci_ris_siu spo_csris_cmis nhcoas_to_ciims bvi_ibhubraw oas_to_csris shpoas_to_esb bvo_emr_hi

      ds_m oas_to_lab nci_ris_siu2 adt_to_cqis hids_from_hcitest dtsnccoas_broadcast serv_to_shpoas adt_to_rfid csris_todelete3 csris_todelete2 ogord_from_asemr3 sgi_ris_siu dtsnhc_receipts shp_to_

      oas emerge_x_hcitest2 dtssnecoas_broadcast bms_in adt_to_og in_oasemr sghoas_broadcast adt_to_bms3 nhi_csris_dft_o csris_oas_ob sgi_emr_ord_og_d2 ndcoas_broadcast sgi_emr_ord_og_m2 dtsnhcoas_

      broadcast csris_to_nhcoas lab_oas_ob bms_out oas_to_smr sgo_csris_cmis sneccmis_to_snecips sgo_oas_siu cish_receipts2_ib sghoas_to_numis dtscish_ibhub1 cmis_to_ips sneccmis_broadcast ndcoas_t

      o_edr adt_to_poct nccoas_to_multiaccess ndccmis_broadcast sap_to_smr serv_to_nccoas sghoas_to_fmcms spi_csris_dft_o shp_to_smr bvo_hms csris_to_sghoas sap_to_csris polycmis_receipt sgo_csris_

      adt_i spo_csris_adt_o sap_to_fasttrack adt_to_bms1 nccoas_broadcast nhccmis_broadcast cmis_to_aims sgo_csris_adt_o shscmis_broadcast }}’

      [aler:aler:WARN/0:_hcimonitord_:04/07/2015 21:40:50] WINDOW event key value has defined ‘seconds’, but this configuration is not supported, substituting with ‘*’

      [aler:aler:WARN/0:_hcimonitord_:04/07/2015 21:40:50] All fields in WINDOW key are taken as ‘*’

      [aler:aler:INFO/0:_hcimonitord_:04/07/2015 21:40:50] New alert ID: #5

      [aler:aler:INFO/0:_hcimonitord_:04/07/2015 21:40:50] New alert def:

      {VALUE metrics} {SOURCE {dtsshp_receipts csris_oas_ib snecoas_to_snec snecoas_to_otm lab_oas_ib csris_to_nccoas o_emr_oasadt_d2 sghcmis_receipt bvi_hids multiaccess_to_oas nco_oas_siu centrec

      mis_receipt nhcoas_to_cvis cmis_to_csris adt_to_ims2 bvo_max_cmis sgo_lab_adt_oas cish_receipts3 dtssghoas_broadcast nhcoas_broadcast nccoas_to_nccmax sghoas_to_esrs shpoas_to_csris adt_to_wr

      s cish_receipts2 adt_to_outramoas sap_to_aims csris_to_shpoas dtsncc_receipts oasadt_to_emr4 sap_to_esb oasadt_to_emr3 shpcmis_to_csris dtssnec_receipts sgi_csris_dft_o snecmax_to_oas trashbi

      n sgi_ris_siu2 csris_sap_ob nccoas_to_vac edrchrg_to_oas bvo_chcs_adt snecoas_broadcast sghoas_to_esb sap_to_cvis cish_ibhub1 adt_to_avms o_emr_oasadt_m2 dtssgh_receipts nhcoas_orm_ciims nci_

      csris_dft_o nhcmax_to_oas out_oasemr ips_to_oas oas_to_ips shpcmis_broadcast sghcmis_broadcast sgoas_to_mrts sgh_to_emrx2 dtsshpoas_broadcast chrg_fr_edr serv_to_nhcoas sap_to_esrs ctroas_to_

      esb nccmax_to_oas oas_to_shp sapadt_to_ipas csris_sap_ib adt_to_omis serv_to_snecoas nhcoas_to_nhcmax bvo_emr_hids_d shpoas_broadcast shp_to_oas1 wrs_to_ish adt_to_edietitian sghcmis_to_hcite

      st ncccmis_broadcast nci_ris_siu spo_csris_cmis nhcoas_to_ciims bvi_ibhubraw oas_to_csris shpoas_to_esb bvo_emr_hids_m oas_to_lab nci_ris_siu2 adt_to_cqis hids_from_hcitest dtsnccoas_broadcas

      t serv_to_shpoas adt_to_rfid csris_todelete3 csris_todelete2 ogord_from_asemr3 sgi_ris_siu dtsnhc_receipts shp_to_oas emerge_x_hcitest2 dtssnecoas_broadcast bms_in adt_to_og in_oasemr sghoas_

      broadcast adt_to_bms3 nhi_csris_dft_o csris_oas_ob sgi_emr_ord_og_d2 ndcoas_broadcast sgi_emr_ord_og_m2 dtsnhcoas_broadcast csris_to_nhcoas lab_oas_ob bms_out oas_to_smr sgo_csris_cmis sneccm

      is_to_snecips sgo_oas_siu cish_receipts2_ib sghoas_to_numis dtscish_ibhub1 cmis_to_ips sneccmis_broadcast ndcoas_to_edr adt_to_poct nccoas_to_multiaccess ndccmis_broadcast sap_to_smr serv_to_

      nccoas sghoas_to_fmcms spi_csris_dft_o shp_to_smr bvo_hms csris_to_sghoas sap_to_csris polycmis_receipt sgo_csris_adt_i spo_csris_adt_o sap_to_fasttrack adt_to_bms1 nccoas_broadcast nhccmis_b

      roadcast cmis_to_aims sgo_csris_adt_o shscmis_broadcast }} {MODE actual} {WITH -1} {COMP none} {FOR once} {ACTION status} {WINDOW {60 * * * * *}}

      [cmd :cmd :WARN/0:_hcimonitord_:04/07/2015 21:40:50] statistics client 0x849518

      [cmd :cmd :INFO/0:_hcimonitord_:04/07/2015 21:44:05] Received command: ‘summary’ on connection 0x413b68

      [cmd :cmd :INFO/0:_hcimonitord_:04/07/2015 21:44:05] Doing ‘summary’ command with args ”

      [cmd :cmd :INFO/0:_hcimonitord_:04/07/2015 21:44:05] Command client went away while reading.  Closing connection 0x413b68.

      [aler:aler:INFO/0:_hcimonitord_:04/07/2015 21:44:05] Removing alerts and wants for connection 0x413b68

      [cmd :cmd :INFO/0:_hcimonitord_:04/07/2015 21:46:04] Received command: ‘iwant state pstate’ on connection 0x413b68

      [cmd :cmd :INFO/0:_hcimonitord_:04/07/2015 21:46:04] Doing ‘iwant’ command with args ‘state pstate’

      [aler:aler:INFO/0:_hcimonitord_:04/07/2015 21:46:04] New alert ID: #6

      [aler:aler:INFO/0:_hcimonitord_:04/07/2015 21:46:04] New alert def:

      {VALUE status} {SOURCE all} {MODE delta} {WITH -1} {COMP diff} {FOR once} {ACTION status}

      [aler:aler:INFO/0:_hcimonitord_:04/07/2015 21:46:04] New alert ID: #7

      [aler:aler:INFO/0:_hcimonitord_:04/07/2015 21:46:04] New alert def:

      {VALUE ps} {SOURCE all} {MODE delta} {WITH -1} {COMP diff} {FOR once} {ACTION status}

      [cmd :cmd :INFO/0:_hcimonitord_:04/07/2015 21:46:04] Received command: ‘iwant alerts’ on connection 0x413b68

      [cmd :cmd :INFO/0:_hcimonitord_:04/07/2015 21:46:04] Doing ‘iwant’ command with args ‘alerts’

      [aler:aler:INFO/0:_hcimonitord_:04/07/2015 21:46:04] Creating AlertAction: cascade

      [aler:aler:INFO/0:_hcimonitord_:04/07/2015 21:46:04] New alert ID: #8

      [aler:aler:INFO/0:_hcimonitord_:04/07/2015 21:46:04] New alert def:

      {VALUE action} {SOURCE notify} {MODE actual} {WITH -1} {COMP none} {FOR once} {ACTION cascade}

      [cmd :cmd :WARN/0:_hcimonitord_:04/07/2015 21:46:04] alerts client 0x413b68

      [cmd :cmd :INFO/0:_hcimonitord_:04/07/2015 21:46:04] Received command: ‘iwant eonotify’ on connection 0x413b68

      [cmd :cmd :INFO/0:_hcimonitord_:04/07/2015 21:46:04] Doing ‘iwant’ command with args ‘eonotify’

      [aler:aler:INFO/0:_hcimonitord_:04/07/2015 21:46:04] Creating AlertAction: eocnotify

      [aler:aler:INFO/0:_hcimonitord_:04/07/2015 21:46:04] New alert ID: #9

      [aler:aler:INFO/0:_hcimonitord_:04/07/2015 21:46:04] New alert def:

      {VALUE eocycle} {SOURCE all} {MODE actual} {WITH -1} {COMP none} {FOR once} {ACTION eocnotify}

      [cmd :cmd :WARN/0:_hcimonitord_:04/07/2015 21:46:04] eonotify client 0x413b68

      [cmd :cmd :INFO/0:_hcimonitord_:04/07/2015 21:46:04] Received command: ‘iwant mdstatus’ on connection 0x413b68

      [cmd :cmd :INFO/0:_hcimonitord_:04/07/2015 21:46:04] Doing ‘iwant’ command with args ‘mdstatus’

      [aler:aler:INFO/0:_hcimonitord_:04/07/2015 21:46:04] Creating AlertAction: cascade

      [aler:aler:WARN/0:_hcimonitord_:04/07/2015 21:46:04] All fields in WINDOW key are taken as ‘*’

      [aler:aler:INFO/0:_hcimonitord_:04/07/2015 21:46:04] New alert ID: #10

      [aler:aler:INFO/0:_hcimonitord_:04/07/2015 21:46:04] New alert def:

      {VALUE mdstatus} {SOURCE {notify}} {MODE actual} {WITH -1} {COMP none} {FOR once} {ACTION cascade} {WINDOW {* * * * * *}}

      [cmd :cmd :WARN/0:_hcimonitord_:04/07/2015 21:46:04] mdstatus client 0x413b68

      [aler:aler:WARN/0:_hcimonitord_:04/07/2015 21:46:07] Sending client 0x413b68 mdstatus: mdstatus 0

    Viewing 1 reply thread
    • Author
      Replies
      • #82340
        Rob Lindsey
        Participant

          That is strange.  

          A few things that I can think of are:

          – That someone setup a link to another file elsewhere on the system.

          – Someone setup a the Monitor Daemon to pull in a different Alert File (at least you used to be able to do this)

          Sorry I do not have any more insight.

          Rob

        • #82341
          Michael Hertel
          Participant

            My experience has been that these ‘iwant’ type of log entries happen when someone launches NetMonitor.

            So these are really not alerts.

        Viewing 1 reply thread
        • The forum ‘Cloverleaf’ is closed to new topics and replies.