Antwort: RRDtool Aberrant behavior detection

[Sascha.Runschke at gfkl.com]

Marco Tirado <marco.tirado at gmail.com> schrieb am 31.01.2009 18:01:55:

> I am very interested in integrating RRDtool's features for aberrant 
> behavior detection with my nagios implementation. I still have not 
> found a plugin for this and I would like to know if anybody has 
> already implemented this. 
> 
> I guess an option would be to adapt plugins "pnp4nagios" or 
> "nagiosgraph" to get it to work. Any pointers or comments are deeply
> appreciated. 

I'm unsure how you want to "implement" the ABD of RRD.
Do you just want to use it to visualize anomalities, or do you
want nagios to notify you if an anomality occurs?
The pure visualization is pretty simple, I've already done that. Sadly the 
results
were a bit - disappointing.
After evaluating the graphs with aberrant behaviour detection we came to 
the conclusion,
that about 99% of our nagios checks cannot be used to detect real 
anomalities.
Things like diskfree, CPU, network i/o, disk i/o and the such do not 
follow strict patterns
and are unpredictable most of the time. The only things we found ABD to be 
helpful with
were monitoring temperature and humidity in our datacenters.

PNP4Nagios can be easily used to implement ABD, all you have to do is 
change
the rra.cfg to reflect the necessary aberrant behaviour detection RRAs. 
But
keep in mind that you have to make those changes to the config _before_ 
the
first RRD gets created, since you cannot add RRAs to existing RRDs - at 
least
not without major knowledge in manipulating RRDs (say: export dump and 
manual import
with selfmade scripts)

Regards
        Sascha

-- 
Sascha Runschke
IT-Infrastruktur

fon      : +49 (201) / 102-1879
fax      : +49 (201) / 102-1102105
mobil : +49 (173) / 5419665



GFKL Financial Services AG
Vorstand: Dr. Peter Jänsch (Vors.), Jürgen Baltes, Dr. Tom Haverkamp
Vorsitzender des Aufsichtsrats: Dr. Georg F. Thoma
Sitz: Limbecker Platz 1, 45127 Essen, Amtsgericht Essen, HRB 13522

------------------------------------------------------------------------------
This SF.net email is sponsored by:
SourcForge Community
SourceForge wants to tell your story.
http://p.sf.net/sfu/sf-spreadtheword
_______________________________________________
Nagios-users mailing list
Nagios-users at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. 
::: Messages without supporting info will risk being sent to /dev/null