View Source

The NMIS Event Log is a realtime update of what is NMIS see's is happening with devices being managed.

The raw event log looks like this

1360614047,nmisdev,Node Down,Major,,Ping failed
1360614109,nmisdev,Node Up,Normal,,Ping failed Time=00:01:03
1360615224,meatball,Proactive Interface Output Utilisation,Warning,Dialer1,Value=60.27 Threshold=60
1360615225,meatball,Proactive Interface Output Utilisation,Warning,ATM0.1-aal5 layer,Value=60.38 Threshold=60
1360615225,meatball,email to keiths@opmantek.com Esc0 Proactive Interface Output Utilisation,Warning,Dialer1,Value=60.27 Threshold=60
1360615225,meatball,email to keiths@opmantek.com Esc0 Proactive Interface Output Utilisation,Warning,ATM0.1-aal5 layer,Value=60.38 Threshold=60
1360615519,meatball,Proactive Interface Input Utilisation,Warning,Dialer1,Value=61.86 Threshold=60
1360615519,meatball,Proactive Interface Output Utilisation Closed,Normal,Dialer1,Value=46.89 Threshold=60 Time=00:04:55
1360615519,meatball,Proactive Interface Input Utilisation,Warning,ATM0.1-aal5 layer,Value=61.96 Threshold=60
1360615519,meatball,Proactive Interface Output Utilisation Closed,Normal,ATM0.1-aal5 layer,Value=44.55 Threshold=60 Time=00:04:55
1360615529,meatball,email to keiths@opmantek.com UP Notify,Normal,ATM0.1-aal5 layer,Value=44.55 Threshold=60 Time=00:04:55
1360615529,meatball,email to keiths@opmantek.com UP Notify,Normal,Dialer1,Value=46.89 Threshold=60 Time=00:04:55
1360615529,meatball,email to keiths@opmantek.com Esc0 Proactive Interface Input Utilisation,Warning,Dialer1,Value=61.86 Threshold=60
1360615529,meatball,email to keiths@opmantek.com Esc0 Proactive Interface Input Utilisation,Warning,ATM0.1-aal5 layer,Value=61.96 Threshold=60
1360615811,nmisdev,Service Down,Warning,port80,
1360615847,meatball,email to keiths@opmantek.com Esc1 Proactive Interface Input Utilisation,Warning,Dialer1,Value=61.86 Threshold=60
1360615847,meatball,email to keiths@opmantek.com Esc1 Proactive Interface Input Utilisation,Warning,ATM0.1-aal5 layer,Value=61.96 Threshold=60
1360616114,nmisdev,Service Up,Normal,port80, Time=00:05:03
1360616419,meatball,Proactive Interface Input Utilisation Closed,Normal,Dialer1,Value=9.66 Threshold=60 Time=00:15:00
1360616419,meatball,Proactive Interface Input Utilisation Closed,Normal,ATM0.1-aal5 layer,Value=9.63 Threshold=60 Time=00:15:00
1360616429,meatball,email to keiths@opmantek.com UP Notify,Normal,ATM0.1-aal5 layer,Value=9.63 Threshold=60 Time=00:15:00
1360616429,meatball,email to keiths@opmantek.com UP Notify,Normal,Dialer1,Value=9.66 Threshold=60 Time=00:15:00
1360618812,nmisdev,Service Down,Warning,port80,
1360619117,nmisdev,Service Up,Normal,port80, Time=00:05:05
1360624525,meatball,Proactive Interface Input Utilisation,Fatal,Dialer1,Value=127.64 Threshold=95
1360624525,meatball,Proactive Interface Input Utilisation,Fatal,ATM0.1-aal5 layer,Value=126.42 Threshold=95
1360624539,meatball,email to keiths@opmantek.com Esc0 Proactive Interface Input Utilisation,Fatal,Dialer1,Value=127.64 Threshold=95
1360624539,meatball,email to keiths@opmantek.com Esc0 Proactive Interface Input Utilisation,Fatal,ATM0.1-aal5 layer,Value=126.42 Threshold=95
1360624828,meatball,email to keiths@opmantek.com Esc1 Proactive Interface Input Utilisation,Fatal,Dialer1,Value=127.64 Threshold=95
1360624828,meatball,email to keiths@opmantek.com Esc1 Proactive Interface Input Utilisation,Fatal,ATM0.1-aal5 layer,Value=126.42 Threshold=95
1360625427,meatball,email to keiths@opmantek.com Esc2 Proactive Interface Input Utilisation,Fatal,Dialer1,Value=127.64 Threshold=95
1360625427,meatball,email to keiths@opmantek.com Esc2 Proactive Interface Input Utilisation,Fatal,ATM0.1-aal5 layer,Value=126.42 Threshold=95
1360626325,meatball,Proactive Interface Input Utilisation Closed,Normal,Dialer1,Value=19.10 Threshold=60 Time=00:30:00
1360626326,meatball,Proactive Interface Input Utilisation Closed,Normal,ATM0.1-aal5 layer,Value=18.97 Threshold=60 Time=00:30:01
1360626330,meatball,email to keiths@opmantek.com UP Notify,Normal,ATM0.1-aal5 layer,Value=18.97 Threshold=60 Time=00:30:01
1360626330,meatball,email to keiths@opmantek.com UP Notify,Normal,Dialer1,Value=19.10 Threshold=60 Time=00:30:00

The fields which are included in each event are described here.

Event Log Data	Description
time	The UNIX time of the event
node	The node name which NMIS knows the node by
event	The name of the event, possible values at present are listed in this article.
level	The event level, possible values are: Fatal Critical Major Minor Warning Error Normal Unknown
element	The specific element of the node experiencing this problem. This will be an interface, service name, disk or processor ID, etc.
details	Other details about the event, like threshold values, time event was active

my $message = "NMIS_Event::$C->{nmis_host}::$ET->{$event_hash}{},$ET->{$event_hash}{},$ET->{$event_hash}{},$ET->{$event_hash}{},$ET->{$event_hash}{},$ET->{$event_hash}{details}";

Slave Event Log

When viewing the Slave_Event_Log, you are viewing syslog events from NMIS slave servers sending events in by syslog. The end of the line incluse the sending server with a ":: servername" appended to the end.

12-Feb-2013 09:15:25 meatball Proactive Interface Input Utilisation Fatal Dialer1 Value=127.64 Threshold=95 :: nmisdev64.dev.opmantek.com

12-Feb-2013 09:15:25 meatball Proactive Interface Input Utilisation Fatal ATM0.1-aal5 layer Value=126.42 Threshold=95 :: nmisdev64.dev.opmantek.com

12-Feb-2013 07:40:12 nmisdev Service Up Normal port80 Time=00:05:05 :: nmisdev64.dev.opmantek.com

12-Feb-2013 07:40:12 nmisdev Service Down Warning port80 :: nmisdev64.dev.opmantek.com

12-Feb-2013 06:45:19 meatball Proactive Interface Input Utilisation Closed Normal ATM0.1-aal5 layer Value=9.63 Threshold=60 Time=00:15:00 :: nmisdev64.dev.opmantek.com

12-Feb-2013 06:45:19 meatball Proactive Interface Input Utilisation Closed Normal Dialer1 Value=9.66 Threshold=60 Time=00:15:00 :: nmisdev64.dev.opmantek.com

12-Feb-2013 06:50:11 nmisdev Service Up Normal port80 Time=00:05:03 :: nmisdev64.dev.opmantek.com

12-Feb-2013 06:50:11 nmisdev Service Down Warning port80 :: nmisdev64.dev.opmantek.com

12-Feb-2013 06:45:19 meatball Proactive Interface Input Utilisation Warning Dialer1 Value=61.86 Threshold=60 :: nmisdev64.dev.opmantek.com

12-Feb-2013 06:45:19 meatball Proactive Interface Input Utilisation Warning ATM0.1-aal5 layer Value=61.96 Threshold=60 :: nmisdev64.dev.opmantek.com

12-Feb-2013 06:40:24 meatball Proactive Interface Output Utilisation Closed Normal ATM0.1-aal5 layer Value=44.55 Threshold=60 Time=00:04:55 :: nmisdev64.dev.opmantek.com

The raw slave log file will look like this:

Feb 12 07:00:29 localhost nmis.pl[24461]: NMIS_Event::nmisdev64.dev.opmantek.com::1360615519,meatball,Proactive Interface Input Utilisation Closed,Normal,Dialer1,Value=9.66, Threshold=60 Time=00:15:00
Feb 12 07:00:29 localhost nmis.pl[24461]: NMIS_Event::nmisdev64.dev.opmantek.com::1360615519,meatball,Proactive Interface Input Utilisation Closed,Normal,ATM0.1-aal5 layer,Value=9.63, Threshold=60 Time=00:15:00
Feb 12 07:40:26 localhost nmis.pl[25222]: NMIS_Event::nmisdev64.dev.opmantek.com::1360618812,nmisdev,Service Down,Warning,port80,
Feb 12 07:45:29 localhost nmis.pl[25326]: NMIS_Event::nmisdev64.dev.opmantek.com::1360618812,nmisdev,Service Up,Normal,port80, Time=00:05:05
Feb 12 09:15:39 localhost nmis.pl[27058]: NMIS_Event::nmisdev64.dev.opmantek.com::1360624525,meatball,Proactive Interface Input Utilisation,Fatal,ATM0.1-aal5 layer,Value=126.42, Threshold=95
Feb 12 09:15:39 localhost nmis.pl[27058]: NMIS_Event::nmisdev64.dev.opmantek.com::1360624525,meatball,Proactive Interface Input Utilisation,Fatal,Dialer1,Value=127.64, Threshold=95
Feb 12 09:45:31 localhost nmis.pl[27678]: NMIS_Event::nmisdev64.dev.opmantek.com::1360624525,meatball,Proactive Interface Input Utilisation Closed,Normal,Dialer1,Value=19.10, Threshold=60 Time=00:30:00
Feb 12 09:45:31 localhost nmis.pl[27678]: NMIS_Event::nmisdev64.dev.opmantek.com::1360624525,meatball,Proactive Interface Input Utilisation Closed,Normal,ATM0.1-aal5 layer,Value=18.97, Threshold=60 Time=00:30:01

The first part of the lins is added by syslog "Feb 12 07:00:29 localhost nmis.pl[24461]:"

The rest of the line "NMIS_Event::nmisdev64.dev.opmantek.com::1360618812,nmisdev,Service Up,Normal,port80, Time=00:05:05" is a normal NMIS Event log entry, with "NMIS_Event::servername::" appended to the front of the log entry.