SUMMARY: Using Event Management (EVM)

From: John P Speno <speno_at_isc.upenn.edu>
Date: Mon, 11 Dec 2000 10:36:54 -0500

I got one reply, but it was from Jem Treadwell (one of the engineers who
designed EVM). Thanks Jem!

> Is there a way to configure EVM so that you can get some details on events
> of type _at_SYS_VP_at_.evm.daemon.event_activity? I'd like to know where to look

No, and here's why: The high activity event could have been generated by
EVM processing X different events in Y time period, where X and Y are
user defined (defaulting to 500 events, and 10 minutes). So, it's not just
one event happening over and over again rapidly that triggers this alert, it
could be up to 500 different events!

So, that would be difficult for EVM to keep track of and report on. I've
asked Compaq to try to provide this detail in future versions of EVM.

> Where can we find a list of what events the kernel will generate and
> when?

Jem said:

    If you want to see what events are available, here's a command that will
    do it for you:

        evmwatch -i | evmsort -s name | evmshow -t "_at_name" -x | more

    The -x gives you the explanation text for each event.
                                                                                                                     
    This shows all events that can be posted to EVM, but of course some of
    them are very generic - e.g. we can't get more specific about a syslog
    message than knowing what faciltiy it came from.

> Will EVM be able to use the new Compaq Analyze in stand-alone mode to
> translate binary errorlogs to human readlable text?

Not yet, but maybe someday now that it's been suggested.

Jem also provided me with a white paper on EVM which is a good source
of EVM information, in addition to EVM docs in the manuals. If you want
this white paper, write to Jem Treadwell <Jem.Treadwell_at_compaq.com>.
Received on Mon Dec 11 2000 - 15:38:43 NZDT

This archive was generated by hypermail 2.4.0 : Wed Nov 08 2023 - 11:53:41 NZDT