Linux RED HAT System Monitoring (Advanced) template

The Linux RED HAT System Monitoring (Advanced) template contains all of the rules available in the Standard template and adds additional rule coverage.

Contains the standard rules plus these rules:

  • File (/etc/resolv.conf) Has Changed - File(/etc/) Trigger(Exists)
  • File (/etc/sysconfig/iptables) Has Changed - File(/etc/sysconfig) Trigger(Exists)
  • File (/etc/vsftpd.conf) Has Changed - File(/etc/vsftpd) Trigger(Exists)

Contains the standard rule plus these rules:

  • Monitor for MySQL Errors - LogFile(/var/log/mysqld.log) Expression (error|failure)
  • Monitor for Samba Errors - LogFile(/var/log/samba/smbd.log) Expression (error|failed)

Contains the standard rules plus these rules:

  • Filesystem (/boot) Disk Space Used >=80% - Group(Filesystem) Volume(/boot) Type(Filesystem Space Used %) Trigger(>=80%)
  • Filesystem (/boot) Does Not Exist - Group(Filesystem) Volume(/boot) Trigger(Does Not Exist)
  • Filesystem (/boot) Inode Used >=90% - Group(Filesystem) Volume(/boot) Type(I-Nodes %) Trigger(>=90%)
  • PageFile Used <30% (Suggests Too Much Paging Space) - Group(Memory) Type(UsedPageFilePercent) Trigger(<30%)
  • PageFile Used >70% (Suggests Not Enough Paging Space) - Group(Memory) Type(UsedPageFilePercent) Trigger(>70%)

Contains the standard rules plus these rules:

  • Optional Process (httpd) Does Not Exist - Type(Process By Name) Process(httpd) Trigger(DoesNotExist)
  • Optional Process (mysqld) Does Not Exist - Type(Process By Name) Process(mysqld) Trigger(DoesNotExist)
  • Optional Process (postmaster) Does Not Exist - Type(Process By Name) Process(postmaster) Trigger(DoesNotExist)
  • Optional Process (rpc.idmapd) Does Not Exist - Type(Process By Name) Process(rpc.idmapd) Trigger(DoesNotExist)
  • Optional Process (rpc.statd) Does Not Exist - Type(Process By Name) Process(rpc.statd) Trigger(DoesNotExist)
  • Optional Process (sendmail) Does Not Exist - Type(Process By Name) Process(sendmail) Trigger(DoesNotExist)
  • Optional Process (smbd) Does Not Exist - Type(Process By Name) Process(smbd) Trigger(DoesNotExist)
  • Optional Process (spamd) Does Not Exist - Type(Process By Name) Process(spamd) Trigger(DoesNotExist)
  • Optional Process (squid) Does Not Exist - Type(Process By Name) Process(squid) Trigger(DoesNotExist)
  • Optional Process (vsftpd) Does Not Exist - Type(Process By Name) Process(vsftpd) Trigger(DoesNotExist)
NOTE: All actions for each of the above rules within this template are set to a default of sending an alert to the Enterprise Console. You must manually change this setting if you require an alternative action to be taken upon the generation of an alert.

Related Topics