Linux RED HAT System Monitoring (Standard) template

The RED HAT System Monitoring (Standard) template contains rules covering all of the Linux Monitors with the exception of the System Monitor. The following rules are defined:

Contains the following rules:

  • Logical volume (LogVol00) status <> available - Measure(Status) Trigger (<> available)
  • Logical volume (LogVol01) status <> available - Measure(Status) Trigger (<> available)

Contains the following rules:

  • Check for Failed Raid Drives - Script(mdadm -D /dev/md0 | grep Failed Devices 1|2|3)
  • Zombie process - Report on all - Script(ps -eo stat,pid | egrep “^Z” | awk ‘{print $2}’ ^[^$])
  • Zombie process count - Script(ps -eo stat,pid | egrep “^Z” | wc -l ^[^0])

Contains the following rules:

  • File (/etc/crontab) Has Changed - File(/etc/crontab) Trigger(Exists)
  • File (/etc/inittab) Has Changed - File(/etc/inittab) Trigger(Exists)
  • File (/etc/sendmail.cf) Has Changed - File(/etc/mail/sendmail.cf) Trigger(Exists)
  • File (/etc/profile) Has Changed - File(/etc/profile) Trigger(Exists)
  • File (/etc/xinetd.conf) Has Changed - File(/etc/xinetd.conf) Trigger(Exists)

Contains the following rule:

  • Monitor for Failed Logins in Secure Log - LogFile(/var/log/secure) Expression (failure)

Contains the following rules:

  • Filesystem (/) Disk Space Used >=80% - Group(Filesystem) Volume(/) Type(Filesystem Space Used %) Trigger(>=80%)
  • Filesystem (/) Does Not Exist - Group(Filesystem) Volume(/) Trigger(Does Not Exist)
  • Filesystem (/) Inode Used >=90% - Group(Filesystem) Volume(/) Type(I-Nodes %) Trigger(>=90%)
  • Paging Space >95% - Group(Memory) Type(Page File Used %) Trigger(>95%)
  • Sustained CPU >95% - Group(CPU) CPU(0) Type(Load) Trigger(>95%)

Contains the following rules:

  • Critical Process (crond) Does Not Exist - Type(Process By Name) Process(crond) Trigger(DoesNotExist)
  • Critical Process (gdm-binary) Does Not Exist - Type(Process By Name) Process(gdm-binary) Trigger(DoesNotExist)
  • Critical Process (sshd) Does Not Exist - Type(Process By Name) Process(sshd) Trigger(DoesNotExist)
  • Critical Process (syslogd) Does Not Exist - Type(Process By Name) Process(syslogd) Trigger(DoesNotExist)
  • Critical Process (xfs) Does Not Exist - Type(Process By Name) Process(xfs) Trigger(DoesNotExist)
  • Critical Process (xinetd) Does Not Exist - Type(Process By Name) Process(xinetd) Trigger(DoesNotExist)

Contains a single rule:

  • Check Server Can Ping Router - Host(1.2.3.4) Timeout(2000) Attempts(4) Success(50%) TTL(128)
NOTE: All actions for each of the above rules within this template are set to a default of sending an alert to the Enterprise Console. You must manually change this setting if you require an alternative action to be taken upon the generation of an alert.

Related Topics