Default Solstice SyMON Rules

This appendix describes the default rules for this release of Solstice SyMON. Use this appendix to determine the rules that are incorporated into this Solstice SyMON release. By identifying the default rules, you can determine whether or not you need to write a new rule.

Note - The sample.tcl file in Solstice SyMON 1.1 through 1.3 contained only a comment.

TABLE D-1 describes the default rules supplied with this release of Solstice SyMON. The columns in the table describe the following:

Column 1 is the rule number.
Column 2 is a description of the rule.
Column 3 is the action taken when the condition is true.

TABLE D-1

Rule..Description Number	Action
General: `syrules.tcl`
0....`Symond` status	`alarm, snmp`
1....Server status	`alarm, snmp`
3....Log Scanner status	`alarm, snmp`
4....Kernel Reader status	`alarm, snmp`
6....Delay initial Log Scanner `and` death status	none
7....Delay initial Kernel Reader death status 8....Warning if label contains `"."`	none
9....Warning if label contains `"*"`	`alarm, snmp`
General: `egrules.tcl`

TABLE D-1 (Continued)

Rule..Description Number	Action
50....Trim event log if getting full	`alarm, snmp`
51....Warning when maximum number of events is near	`alarm, snmp`
52....Warning when `ls_hist` is corrupted	`alarm, snmp`
53....Warning on incorrect Tcl rule syntax	`alarm, snmp`
General: `swrules.tcl`
100...Disk busy	`alarm, snmp`
102...Swap space	`alarm, snmp`
103...CPU swapping and paging	`alarm, snmp`
104...CPU load	`alarm, snmp`
105...File system full	`alarm, snmp`
106...No swap space	`alarm, snmp`
General: `hwrules.tcl`
209...SIMM error	`alarm, snmp`
210...`ssd` hardware error	`alarm, snmp`
211...`ssd` fatal error	`alarm, snmp`
212...SIMM error	`alarm, snmp`
214...`configd.*.status` failing	`alarm, snmp`
216...CPU panic	`alarm, snmp`
217...Tape error rate high	`alarm, snmp`
219...`ssd` off-line	`alarm, snmp`
220...`ssd` okay (online)	`alarm, snmp`
222...Fatal SunVTS error	`alarm, snmp`
223...SunVTS error	`alarm, snmp`
General: `pfrules.tcl`
300...SIMM errors	`add_pfa SIMM`
301...Disk soft errors	`add_pfa DISK`
302...Disk soft errors from smart drives	`alarm, snmp`
303...Check SIMM (test period 1)	`alarm, snmp`
304...Check SIMM (test period 2)	`alarm, snmp`

TABLE D-1 (Continued)

Rule..Description Number	Action
305...Check SIMM (test period 3)	`alarm, snmp`
306...Check disk `pfa` (warning)	`alarm, snmp`
307...Check disk `pfa` (severe)	`alarm, snmp`
308...Trims `pfa` history	none
General: `cprules.tcl`
400...CPU overload over x hours	`alarm, snmp, add_cpa`
401...Disk busy over x hours	`alarm, snmp, add_cpa`
402...Swap space low over x hours	`alarm, snmp, add_cpa`
403...Meta CPU events (`check_cpa_cpu`)	`alarm, snmp`
404...Meta disk events (`check_cpa_disk`)	`alarm, snmp`
405...Meta swap events (`check_cpa_swap`) 406...Trims `cpa` history 407...Initializes timestamp for rules 400 and 402	`alarm, snmp`
Platform-Specific Rules: SPARCserver 1000(E), SPARCcenter 2000(E ) - `SS1000.tcl, SC2000.tcl`
1002...Config Reader status	`alarm, snmp`
1005...Delay initial Config Reader death status	none
1207...`system...*.status`	`alarm, snmp`
1208...`system.......status`	`alarm, snmp`
1224...`system.......*.status`	`alarm, snmp`
1225...Corrected ECC error	`alarm, snmp`
Platform-Specific Rules: Ultra Enterprise 450: `UE450.tcl`
1002...Config Reader status	`alarm, snmp`
1005...Delay initial configd death status	none
1204...`system.*.fan.status`	`alarm, snmp`
1205...`system...*.temperature`	`alarm, snmp, mailto`
1207...`system...*.status`	`alarm, snmp`

TABLE D-1 Default Solstice SyMON Rules (Continued)


 Rule        Description                             Action  
 Number  


 1208        system.*.*.*.*.*.*.status               alarm, snmp  
 1212        Power supply state                      alarm, snmp  
 1213        Power supply limit                      alarm, snmp  
 1214        Power supply current share              alarm, snmp  
 1215        Power supply temperature                alarm, snmp,  
                                                     mailto  
 1224        system.*.*.*.*.*.*.*.status             alarm, snmp  
 1225        Corrected ECC error                     alarm, snmp  

 
Platform-Specific Rules:  Ultra Enterprise 3000, 4000, 5000, 6000:  
 UEnterprise.tcl  
 1002        Config Reader status                     alarm, snmp  
 1005        Delay initial Config Reader death status none  
 1201        Hot plug charge DC status               alarm, snmp  
 1202        Hot plug precharge DC status            alarm, snmp  
 1203        system.*.status                         alarm, snmp  
 1204        Fan status                              alarm, snmp  
 1205        CPU board temperature                   alarm, snmp,  
                                                     mailto  
 1206        I/O and clock board temperature         alarm, snmp,  
                                                     mailto  
 1207        system.*.*.*.status                     alarm, snmp  
 1208        system.*.*.*.*.*.status                 alarm, snmp  
 1209        system.*.*.*.*.*.*.status               alarm, snmp  
 1213        Hot plug "removed"                      alarm, snmp  
 1215        Hot plug "hotplugged into"              alarm, snmp  
 1218        system.*.*.*.*.status                   alarm, snmp  
 1220        Hot plug "installed"                    alarm, snmp  
 1221        Redundant power status                  alarm, snmp  

 
Platform-Specific Rules:  Ultra Enterprise 150: UEnterpriseI.tcl  
 1002        Config Reader status                     alarm, snmp

TABLE D-1 (Continued)

Rule Number	Description	Action
1005	Delay initial `configd` death status	none
1207	`system...*.status`	`alarm, snmp`
1208	`system.......status`	`alarm, snmp`
1224	`system.........*.status`	`alarm, snmp`