From michal at taborsky.cz Mon Dec 1 22:25:10 2014 From: michal at taborsky.cz (Michal Taborsky) Date: Mon, 1 Dec 2014 23:25:10 +0100 Subject: [Reconnoiter-users] Riemann In-Reply-To: <547B4019.3040400@gmail.com> References: <547B4019.3040400@gmail.com> Message-ID: Hi. Yes, I got it to work. Here is a simple /usr/local/var/db/noit-iep/riemann.config. There is a snippet, that evaluates "Core::Cpu`local`user" metric and sets the state accordingly. It also emits all service statuses over AMQP. This config works for me and enables the usage of riemann-dash. (logging/init :file "riemann.log") (let [host "0.0.0.0"] (tcp-server :host host) (udp-server :host host) (ws-server :host host)) (instrumentation {:interval 1}) (periodically-expire 1) (streams (with :ttl 90 (where (service "Core::Cpu`local`user") (where (<= 0 metric 70) (with :state "ok" (index))) (where (<= 71 metric 90) (with :state "warning" (index))) (where (>= metric 91) (with :state "err" (index))) (else (index))) ) (where (service "status") (reconnoiter/alert-key "status")) ) Michal T?borsk? 2014-11-30 17:04 GMT+01:00 Bo Agerskov Rising : > Hi Michal, > > Did you get any further in your trials? > > I am battling a bit when trying to change the state of the numeric > metrics, it apparently never gets pushed back into the index. My guess > would be that it's perhaps the integration between reconnoiter and riemann. > > Would love to hear what you have been trying to do :) > > Regards, > Bo > > Michal Taborsky > 6 Jun 2014 13:19 > OK, so I got it to build, apparently it runs but what now. I see there is > a /usr/local/var/db/noit-iep/riemann.config. I tried to modify it to do two > things, log to a file and expose API over the standard port 5555 so I can > query the index. However, it does not log to a file and the port is not > open, so I am thinking the file is ignored. Do you have any more pointers? > I will write a blog post later to sum it up. > > my stratcon.conf IEP part: > > > command="/usr/local/bin/run-iep.sh" /> > > myhost > *** > *** > > > myhost > noit.firehose > topic > check.# > *** > *** > > > riemann.config > > > > > my riemann.conf: > > (def noit-alert fn [e] e) > (logging/init :file "/var/log/riemann.log") > > (let [host "0.0.0.0"] > (tcp-server {:host host}) > (udp-server {:host host}) > (ws-server {:host host})) > > (instrumentation {:interval 1}) > > (periodically-expire 1) > > (let [index (default :ttl 3 (update-index (index)))] > (streams > (expired prn) > index)) > > (streams noit-alert) > > > > > > Michal T?borsk? > > > > > _______________________________________________ > Reconnoiter-users mailing list > Reconnoiter-users at lists.omniti.com > http://lists.omniti.com/mailman/listinfo/reconnoiter-users > Theo Schlossnagle > 3 Jun 2014 13:46 > Heh.. that's not obvious at all... Make sure Maven (mvn) is installed and > in your path at configure time. > > > > > > -- > > Theo Schlossnagle > > http://omniti.com/is/theo-schlossnagle > _______________________________________________ > Reconnoiter-users mailing list > Reconnoiter-users at lists.omniti.com > http://lists.omniti.com/mailman/listinfo/reconnoiter-users > Michal Taborsky > 3 Jun 2014 13:44 > Well, I am currently even unable to build it. When I run configure, I get: > > === Compile-time Configuration === > Lua Implementation: LuaJIT > > == optional noit modules == > Postgres module: yes > MySQL module: no > SNMP module: yes > SSH2 module: yes > > == optional stratcon modules == > Postgres ingestor: yes > STOMP iep driver: yes > FQ iep driver: no > > == Java bits == > Jezebel: yes > Reconnoiter: yes > Riemann IEP: no > > I can't seem to decipher what it needs in order to build it with Riemann. > > Michal T?borsk? > > > > > _______________________________________________ > Reconnoiter-users mailing list > Reconnoiter-users at lists.omniti.com > http://lists.omniti.com/mailman/listinfo/reconnoiter-users > Theo Schlossnagle > 3 Jun 2014 13:26 > Reconnoiter embeds reimann. You don't need to run reimann yourself. > > There aren't much docs, but the test suite configures and spins up a > riemann instance with rules to make sure all the hand off works. > > > > > > -- > > Theo Schlossnagle > > http://omniti.com/is/theo-schlossnagle > _______________________________________________ > Reconnoiter-users mailing list > Reconnoiter-users at lists.omniti.com > http://lists.omniti.com/mailman/listinfo/reconnoiter-users > Michal Taborsky > 3 Jun 2014 10:46 > Hello everyone, is there any info or docs on the Reconnoiter-Riemann > integration? I'd like to give it a try, I have Riemann running, but don't > know how to proceed. > > How do I compile reconnoiter with riemann support? > What does stracon (I assume it is stratcon) emit to riemann? > Are there any examples of streams definition? > > Thanks, > Michal T?borsk? > > _______________________________________________ > Reconnoiter-users mailing list > Reconnoiter-users at lists.omniti.com > http://lists.omniti.com/mailman/listinfo/reconnoiter-users > > > -- > Sent with Postbox > -------------- next part -------------- An HTML attachment was scrubbed... URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: postbox-contact.jpg Type: image/jpeg Size: 1151 bytes Desc: not available URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: postbox-contact.jpg Type: image/jpeg Size: 1281 bytes Desc: not available URL: From borising at gmail.com Mon Dec 22 13:44:55 2014 From: borising at gmail.com (Bo Agerskov Rising) Date: Mon, 22 Dec 2014 14:44:55 +0100 Subject: [Reconnoiter-users] Riemann In-Reply-To: References: <547B4019.3040400@gmail.com> Message-ID: <54982057.1060908@gmail.com> Hi Michal, Sorry for not replying to you earlier! But thanks a lot for sharing your configuration :) Do you know the difference between reconnoiter/alert-key and reconnoiter-alert? Happy Christmas, Bo Rising > Michal Taborsky > 1 Dec 2014 23:25 > Hi. Yes, I got it to work. Here is a simple > /usr/local/var/db/noit-iep/riemann.config. There is a snippet, that > evaluates "Core::Cpu`local`user" metric and sets the state > accordingly. It also emits all service statuses over AMQP. This config > works for me and enables the usage of riemann-dash. > > (logging/init :file "riemann.log") > > (let [host "0.0.0.0"] > (tcp-server :host host) > (udp-server :host host) > (ws-server :host host)) > > (instrumentation {:interval 1}) > > (periodically-expire 1) > > (streams > (with :ttl 90 > (where (service "Core::Cpu`local`user") > (where (<= 0 metric 70) > (with :state "ok" (index))) > (where (<= 71 metric 90) > (with :state "warning" (index))) > (where (>= metric 91) > (with :state "err" (index))) > (else (index))) > ) > (where (service "status") (reconnoiter/alert-key "status")) > ) > > > > Michal T?borsk? > > > > Bo Agerskov Rising > 30 Nov 2014 17:04 > Hi Michal, > > Did you get any further in your trials? > > I am battling a bit when trying to change the state of the numeric > metrics, it apparently never gets pushed back into the index. My guess > would be that it's perhaps the integration between reconnoiter and > riemann. > > Would love to hear what you have been trying to do :) > > Regards, > Bo > > Michal Taborsky > 6 Jun 2014 13:19 > OK, so I got it to build, apparently it runs but what now. I see there > is a /usr/local/var/db/noit-iep/riemann.config. I tried to modify it > to do two things, log to a file and expose API over the standard port > 5555 so I can query the index. However, it does not log to a file and > the port is not open, so I am thinking the file is ignored. Do you > have any more pointers? I will write a blog post later to sum it up. > > my stratcon.conf IEP part: > > > command="/usr/local/bin/run-iep.sh" /> > > myhost > *** > *** > > > myhost > noit.firehose > topic > check.# > *** > *** > > > riemann.config > > > > > my riemann.conf: > > (def noit-alert fn [e] e) > (logging/init :file "/var/log/riemann.log") > > (let [host "0.0.0.0"] > (tcp-server {:host host}) > (udp-server {:host host}) > (ws-server {:host host})) > > (instrumentation {:interval 1}) > > (periodically-expire 1) > > (let [index (default :ttl 3 (update-index (index)))] > (streams > (expired prn) > index)) > > (streams noit-alert) > > > > > > Michal T?borsk? > > > > > _______________________________________________ > Reconnoiter-users mailing list > Reconnoiter-users at lists.omniti.com > http://lists.omniti.com/mailman/listinfo/reconnoiter-users > Theo Schlossnagle > 3 Jun 2014 13:46 > Heh.. that's not obvious at all... Make sure Maven (mvn) is installed > and in your path at configure time. > > > > > > -- > > Theo Schlossnagle > > http://omniti.com/is/theo-schlossnagle > > _______________________________________________ > Reconnoiter-users mailing list > Reconnoiter-users at lists.omniti.com > http://lists.omniti.com/mailman/listinfo/reconnoiter-users > Michal Taborsky > 3 Jun 2014 13:44 > Well, I am currently even unable to build it. When I run configure, I get: > > === Compile-time Configuration === > Lua Implementation: LuaJIT > > == optional noit modules == > Postgres module: yes > MySQL module: no > SNMP module: yes > SSH2 module: yes > > == optional stratcon modules == > Postgres ingestor: yes > STOMP iep driver: yes > FQ iep driver: no > > == Java bits == > Jezebel: yes > Reconnoiter: yes > Riemann IEP: no > > I can't seem to decipher what it needs in order to build it with Riemann. > > Michal T?borsk? > > > > > _______________________________________________ > Reconnoiter-users mailing list > Reconnoiter-users at lists.omniti.com > http://lists.omniti.com/mailman/listinfo/reconnoiter-users -- Sent with Postbox -------------- next part -------------- An HTML attachment was scrubbed... URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: postbox-contact.jpg Type: image/jpeg Size: 1151 bytes Desc: not available URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: postbox-contact.jpg Type: image/jpeg Size: 1058 bytes Desc: not available URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: postbox-contact.jpg Type: image/jpeg Size: 1281 bytes Desc: not available URL: From michal at taborsky.cz Tue Dec 23 08:36:54 2014 From: michal at taborsky.cz (Michal Taborsky) Date: Tue, 23 Dec 2014 09:36:54 +0100 Subject: [Reconnoiter-users] Riemann In-Reply-To: <54982057.1060908@gmail.com> References: <547B4019.3040400@gmail.com> <54982057.1060908@gmail.com> Message-ID: reconnoiter/alert-key submits the event with the given routing key ("status" in my example), reconnoiter/alert does without. Michal 2014-12-22 14:44 GMT+01:00 Bo Agerskov Rising : > Hi Michal, > > Sorry for not replying to you earlier! > > But thanks a lot for sharing your configuration :) > > Do you know the difference between reconnoiter/alert-key and > reconnoiter-alert? > > Happy Christmas, > Bo Rising > > Michal Taborsky > 1 Dec 2014 23:25 > Hi. Yes, I got it to work. Here is a simple > /usr/local/var/db/noit-iep/riemann.config. There is a snippet, that > evaluates "Core::Cpu`local`user" metric and sets the state accordingly. It > also emits all service statuses over AMQP. This config works for me and > enables the usage of riemann-dash. > > (logging/init :file "riemann.log") > > (let [host "0.0.0.0"] > (tcp-server :host host) > (udp-server :host host) > (ws-server :host host)) > > (instrumentation {:interval 1}) > > (periodically-expire 1) > > (streams > (with :ttl 90 > (where (service "Core::Cpu`local`user") > (where (<= 0 metric 70) > (with :state "ok" (index))) > (where (<= 71 metric 90) > (with :state "warning" (index))) > (where (>= metric 91) > (with :state "err" (index))) > (else (index))) > ) > (where (service "status") (reconnoiter/alert-key "status")) > ) > > > > Michal T?borsk? > > > > Bo Agerskov Rising > 30 Nov 2014 17:04 > Hi Michal, > > Did you get any further in your trials? > > I am battling a bit when trying to change the state of the numeric > metrics, it apparently never gets pushed back into the index. My guess > would be that it's perhaps the integration between reconnoiter and riemann. > > Would love to hear what you have been trying to do :) > > Regards, > Bo > > Michal Taborsky > 6 Jun 2014 13:19 > OK, so I got it to build, apparently it runs but what now. I see there is > a /usr/local/var/db/noit-iep/riemann.config. I tried to modify it to do two > things, log to a file and expose API over the standard port 5555 so I can > query the index. However, it does not log to a file and the port is not > open, so I am thinking the file is ignored. Do you have any more pointers? > I will write a blog post later to sum it up. > > my stratcon.conf IEP part: > > > command="/usr/local/bin/run-iep.sh" /> > > myhost > *** > *** > > > myhost > noit.firehose > topic > check.# > *** > *** > > > riemann.config > > > > > my riemann.conf: > > (def noit-alert fn [e] e) > (logging/init :file "/var/log/riemann.log") > > (let [host "0.0.0.0"] > (tcp-server {:host host}) > (udp-server {:host host}) > (ws-server {:host host})) > > (instrumentation {:interval 1}) > > (periodically-expire 1) > > (let [index (default :ttl 3 (update-index (index)))] > (streams > (expired prn) > index)) > > (streams noit-alert) > > > > > > Michal T?borsk? > > > > > _______________________________________________ > Reconnoiter-users mailing list > Reconnoiter-users at lists.omniti.com > http://lists.omniti.com/mailman/listinfo/reconnoiter-users > Theo Schlossnagle > 3 Jun 2014 13:46 > Heh.. that's not obvious at all... Make sure Maven (mvn) is installed and > in your path at configure time. > > > > > > -- > > Theo Schlossnagle > > http://omniti.com/is/theo-schlossnagle > _______________________________________________ > Reconnoiter-users mailing list > Reconnoiter-users at lists.omniti.com > http://lists.omniti.com/mailman/listinfo/reconnoiter-users > Michal Taborsky > 3 Jun 2014 13:44 > Well, I am currently even unable to build it. When I run configure, I get: > > === Compile-time Configuration === > Lua Implementation: LuaJIT > > == optional noit modules == > Postgres module: yes > MySQL module: no > SNMP module: yes > SSH2 module: yes > > == optional stratcon modules == > Postgres ingestor: yes > STOMP iep driver: yes > FQ iep driver: no > > == Java bits == > Jezebel: yes > Reconnoiter: yes > Riemann IEP: no > > I can't seem to decipher what it needs in order to build it with Riemann. > > Michal T?borsk? > > > > > _______________________________________________ > Reconnoiter-users mailing list > Reconnoiter-users at lists.omniti.com > http://lists.omniti.com/mailman/listinfo/reconnoiter-users > > > -- > Sent with Postbox > -------------- next part -------------- An HTML attachment was scrubbed... URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: postbox-contact.jpg Type: image/jpeg Size: 1151 bytes Desc: not available URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: postbox-contact.jpg Type: image/jpeg Size: 1058 bytes Desc: not available URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: postbox-contact.jpg Type: image/jpeg Size: 1281 bytes Desc: not available URL: From borising at gmail.com Sun Dec 28 09:24:01 2014 From: borising at gmail.com (Bo Agerskov Rising) Date: Sun, 28 Dec 2014 10:24:01 +0100 Subject: [Reconnoiter-users] Riemann In-Reply-To: References: <547B4019.3040400@gmail.com> <54982057.1060908@gmail.com> Message-ID: <549FCC31.6090407@gmail.com> Hi Michal, Thank you for the clarification. Regards, Bo Rising > Michal Taborsky > 23 Dec 2014 09:36 > reconnoiter/alert-key submits the event with the given routing key > ("status" in my example), reconnoiter/alert does without. > > Michal > > > > Bo Agerskov Rising > 22 Dec 2014 14:44 > Hi Michal, > > Sorry for not replying to you earlier! > > But thanks a lot for sharing your configuration :) > > Do you know the difference between reconnoiter/alert-key and > reconnoiter-alert? > > Happy Christmas, > Bo Rising > > Michal Taborsky > 1 Dec 2014 23:25 > Hi. Yes, I got it to work. Here is a simple > /usr/local/var/db/noit-iep/riemann.config. There is a snippet, that > evaluates "Core::Cpu`local`user" metric and sets the state > accordingly. It also emits all service statuses over AMQP. This config > works for me and enables the usage of riemann-dash. > > (logging/init :file "riemann.log") > > (let [host "0.0.0.0"] > (tcp-server :host host) > (udp-server :host host) > (ws-server :host host)) > > (instrumentation {:interval 1}) > > (periodically-expire 1) > > (streams > (with :ttl 90 > (where (service "Core::Cpu`local`user") > (where (<= 0 metric 70) > (with :state "ok" (index))) > (where (<= 71 metric 90) > (with :state "warning" (index))) > (where (>= metric 91) > (with :state "err" (index))) > (else (index))) > ) > (where (service "status") (reconnoiter/alert-key "status")) > ) > > > > Michal T?borsk? > > > > Bo Agerskov Rising > 30 Nov 2014 17:04 > Hi Michal, > > Did you get any further in your trials? > > I am battling a bit when trying to change the state of the numeric > metrics, it apparently never gets pushed back into the index. My guess > would be that it's perhaps the integration between reconnoiter and > riemann. > > Would love to hear what you have been trying to do :) > > Regards, > Bo > > Michal Taborsky > 6 Jun 2014 13:19 > OK, so I got it to build, apparently it runs but what now. I see there > is a /usr/local/var/db/noit-iep/riemann.config. I tried to modify it > to do two things, log to a file and expose API over the standard port > 5555 so I can query the index. However, it does not log to a file and > the port is not open, so I am thinking the file is ignored. Do you > have any more pointers? I will write a blog post later to sum it up. > > my stratcon.conf IEP part: > > > command="/usr/local/bin/run-iep.sh" /> > > myhost > *** > *** > > > myhost > noit.firehose > topic > check.# > *** > *** > > > riemann.config > > > > > my riemann.conf: > > (def noit-alert fn [e] e) > (logging/init :file "/var/log/riemann.log") > > (let [host "0.0.0.0"] > (tcp-server {:host host}) > (udp-server {:host host}) > (ws-server {:host host})) > > (instrumentation {:interval 1}) > > (periodically-expire 1) > > (let [index (default :ttl 3 (update-index (index)))] > (streams > (expired prn) > index)) > > (streams noit-alert) > > > > > > Michal T?borsk? > > > > > _______________________________________________ > Reconnoiter-users mailing list > Reconnoiter-users at lists.omniti.com > http://lists.omniti.com/mailman/listinfo/reconnoiter-users -------------- next part -------------- An HTML attachment was scrubbed... URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: postbox-contact.jpg Type: image/jpeg Size: 1151 bytes Desc: not available URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: postbox-contact.jpg Type: image/jpeg Size: 1059 bytes Desc: not available URL: