Sorry, I'm a little late to the table, Justin is right that I don't see a future for SNMP, so there won't be any direct integration there (but still possible to use a perl script or something like that with cfengine and use the tools provided in cf-monitord). Direct writes to syslog and event viewer will be in Cfengine Nova 1 march, which is probably better than email for short "tweets". Otherwise cfengine tries hard to *not* deal with events, but rather summaries of happenings, as the former doesn't scale well, as several people have mentioned.
Funny you should mention zenoss etcc - we have talked about doing integration with several of these products in a simple way, though we have some higher priorities before that that mostly have to do with making it even easier to use the growing standard library of solutions. M Justin Lloyd wrote: > Syslog-ng is what we've historically used for centralized logging and > I'll be revamping it with v3 later this year. Combined with a > logwatching tool, it makes a powerful combination with an snmp-based > monitoring tool. Intuitively, I like better the idea of remote > monitoring of Cfengine cf-execd processes and promise repairs via SNMP, > though I seem to recall Mark not being the biggest fan of SNMP. If I'm > recalling that correctly, I think there'd be a small chance of SNMP > integration. > > OTOH, perhaps centralized log monitoring is sufficient. It will take > implementation, testing, and experience to determine this, I think. > > Justin > > -----Original Message----- > From: help-cfengine-boun...@cfengine.org > [mailto:help-cfengine-boun...@cfengine.org] On Behalf Of Les Mikesell > Sent: Tuesday, February 09, 2010 2:39 PM > To: help-cfengine@cfengine.org > Subject: Re: Email notification of repairs > > On 2/9/2010 3:09 PM, Justin Lloyd wrote: >> Has anyone done any investigation into having a monitoring tool like >> Zenoss (which we use), Nagios, or OpenNMS watch for repairs? At the > very >> least, centralizing at least some of Cfengine hosts' logs and using a >> log-watching tool like Swatch or Splunk would be a step in the right >> direction. > > OpenNMS isn't particularly good at throttling repeated notifications if > they come from an outside source like syslog. But one nice touch is > that it can send notifications to an xmpp (jabber)group conference so > you can watch with an IM client when/if you are interested and not have > to clean up a mailbox when there has been a lot of output. > -- Mark Burgess ------------------------------------------------- Professor of Network and System Administration Oslo University College, Norway Personal Web: http://www.iu.hio.no/~mark Office Telf : +47 22453272 ------------------------------------------------- _______________________________________________ Help-cfengine mailing list Help-cfengine@cfengine.org https://cfengine.org/mailman/listinfo/help-cfengine
