Re: {bb} Limiting the duration of a 'red' msgs alert

[Henrik Olsen <henrik@iaeste.dk>]

On Thu, 3 Feb 2000, Eric Gallagher wrote:
> As long as everyone's chiming in on this, here are the simple scripts I use to
> change BB conditions afer a fix. This is not very sophisticated but they do
> what I want.  I run these on the machine after I've fixed whatever problem BB
> pointed out.
> 
> I'll take a look at what other people are using as these messages fly by.  I
> can easily imagine that I'm missing particular conditions.
> 
> #!/bin/sh
> # bb_nored.sh
> # written 09-11-99 by Eric Gallagher
> # National Institutes of Health
> # purpose: tiny little thing to set red BB msgs back to green
> #          without /lib/newsyslog (should be done only after
> #          the problem is solved!)
> 
> sed 's/NOTICE/notice/g' /var/adm/messages > /tmp/messages
> cp /tmp/messages /var/adm/messages
Race condition here as far as I can see, you'll loose messages that
appear between the two commands.

> #!/bin/sh
> # bb_noyellow.sh
> # written 09-11-99 by Eric Gallagher
> # National Institutes of Health
> # purpose: tiny little thing to set yellow BB msgs back to green
> #          without /lib/newsyslog (should be done only after
> #          the problem is solved!)
> 
> sed 's/WARNING/warning/g' /var/adm/messages > /tmp/messages
> cp /tmp/messages /var/adm/messages
Ditto

> > > Hi folks,
> > >   Has anyone written a patch to limit how long a 'bad message' in
> > > /var/adm/messages causes a red alert for? On some of our less verbose
> > > machines, we only rotate the logs once a week, which means the msgs column
> > > stays red long after the problem has been handled or acknowledged. Since I
> > > don't want to zero out my log file whenever I solve a problem it reported,
> > > it would be nice to tell big brother to stop reporting it after some
> > amount
> > > of time (for example, red for one hour (with an accompanying page), then
> > > yellow for 4 hours, then green again).
> > >
> > > If no one has done it, I'll get to work on it myself. I expect it'll
> > > require an add-on program that decodes the time stamp of each log entry to
> > > determine whether that log entry is recent enough to alert about.
> > >
> > > Thanks,
> > >
> > > Steve Hillman                           hillman@sfu.ca
> > > Senior Systems Administrator            (604) 291-3960
> > > Simon Fraser University
> 
> Eric Gallagher          Senior Systems Analyst
> NMR/NINDS/NIH                     301-402-3110
> gallaghe@ninds.nih.gov       fax: 301-402-0119
> 
> 
> --
> =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-=-=-=-=-=-=-=-=-=
> To unsubscribe from this list, or to subscribe to the bb-digest list
> send e-mail to mailto:majordomo@bb4.com with unsubscribe bb -and/or-
> subscribe bb-digest in the BODY of the message.
> 

-- 
Henrik Olsen,  Dawn Solutions I/S       URL=http://www.iaeste.dk/~henrik/
 `I was told it was the finest thing to die for a god,' Simony mumbled.
 `Vobis said that.  And he was . . . stupid.  You can die for your country
 or your people or your family, but for a god you should live fully and
 busily, every day of a long life.'            Terry Pratchett, Small Gods


--
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-=-=-=-=-=-=-=-=-=
To unsubscribe from this list, or to subscribe to the bb-digest list
send e-mail to mailto:majordomo@bb4.com with unsubscribe bb -and/or-
subscribe bb-digest in the BODY of the message.