Nagios and event correlation: plugging in sec simple event correlator

[John P. Rouillard]

Hi all:

I get a number of problems that are expected. E.G. high bandwidth
usage when jumpstarting a system, or that I want additional
thresholding (more than 5 passive events received in a given time)
etc.. I would like to add sec (simple event correlator) 

  http://www.estpak.ee/~risto/sec/

to the filtering chain in nagios. Does anybody have any ideas on how
to integrate these tools? For purely passive events, I can try using
sec to transfer passive events from a sec input pipe to the nagios
command pipe. However I also want to suppress events that come from
active polls based on other occurrences on the network. I am guessing
that I can do something with event triggers, but I am not quite sure
how to start, so I thought I would ask here.


				-- rouilj
John Rouillard
===========================================================================
My employers don't acknowledge my existence much less my opinions.


-------------------------------------------------------
This SF.net email is sponsored by: Etnus, makers of TotalView, The debugger 
for complex code. Debugging C/C++ programs can leave you feeling lost and 
disoriented. TotalView can help you find your way. Available on major UNIX 
and Linux platforms. Try it free. www.etnus.com
_______________________________________________
Nagios-users mailing list
Nagios-users at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. 
::: Messages without supporting info will risk being sent to /dev/null