<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <HTML xmlns="http://www.w3.org/TR/REC-html40" xmlns:v = "urn:schemas-microsoft-com:vml" xmlns:o = "urn:schemas-microsoft-com:office:office" xmlns:w = "urn:schemas-microsoft-com:office:word" xmlns:m = "http://schemas.microsoft.com/office/2004/12/omml"><HEAD> <META http-equiv=Content-Type content="text/html; charset=us-ascii"> <META content="MSHTML 6.00.2900.6036" name=GENERATOR> <STYLE>@font-face { font-family: SimSun; } @font-face { font-family: Mangal; } @font-face { font-family: Cambria Math; } @font-face { font-family: Calibri; } @font-face { font-family: Tahoma; } @font-face { font-family: @SimSun; } @page WordSection1 {size: 8.5in 11.0in; margin: 1.0in 1.0in 1.0in 1.0in; } P.MsoNormal { FONT-SIZE: 12pt; MARGIN: 0in 0in 0pt; FONT-FAMILY: "Times New Roman","serif" } LI.MsoNormal { FONT-SIZE: 12pt; MARGIN: 0in 0in 0pt; FONT-FAMILY: "Times New Roman","serif" } DIV.MsoNormal { FONT-SIZE: 12pt; MARGIN: 0in 0in 0pt; FONT-FAMILY: "Times New Roman","serif" } A:link { COLOR: blue; TEXT-DECORATION: underline; mso-style-priority: 99 } SPAN.MsoHyperlink { COLOR: blue; TEXT-DECORATION: underline; mso-style-priority: 99 } A:visited { COLOR: purple; TEXT-DECORATION: underline; mso-style-priority: 99 } SPAN.MsoHyperlinkFollowed { COLOR: purple; TEXT-DECORATION: underline; mso-style-priority: 99 } P { FONT-SIZE: 12pt; MARGIN-LEFT: 0in; MARGIN-RIGHT: 0in; FONT-FAMILY: "Times New Roman","serif"; mso-style-priority: 99; mso-margin-top-alt: auto; mso-margin-bottom-alt: auto } SPAN.EmailStyle18 { COLOR: #1f497d; FONT-FAMILY: "Calibri","sans-serif"; mso-style-type: personal-reply } .MsoChpDefault { mso-style-type: export-only } DIV.WordSection1 { page: WordSection1 } </STYLE> </HEAD> <BODY lang=EN-US vLink=purple link=blue> <DIV dir=ltr align=left><FONT face=Arial color=#0000ff size=2><SPAN class=541224513-07122010>Hi there --</SPAN></FONT></DIV> <DIV dir=ltr align=left><FONT face=Arial color=#0000ff size=2><SPAN class=541224513-07122010></SPAN></FONT> </DIV> <DIV dir=ltr align=left><FONT face=Arial color=#0000ff size=2><SPAN class=541224513-07122010>The load values that are displayed in top match those for the check_load plugin. This is the case whether the plugin</SPAN></FONT></DIV> <DIV dir=ltr align=left><FONT face=Arial color=#0000ff size=2><SPAN class=541224513-07122010>is run either automatically or interactively. The output for the uptime command is shown below:</SPAN></FONT></DIV> <DIV dir=ltr align=left><FONT face=Arial color=#0000ff size=2><SPAN class=541224513-07122010></SPAN></FONT> </DIV> <DIV><FONT face=Arial color=#0000ff size=2>8:48am up 153 days, 23:21, 1 user, load average: 73.36, 73.29, 73.21</FONT></DIV> <DIV><FONT face=Arial color=#0000ff size=2></FONT> </DIV> <DIV> </DIV> <DIV dir=ltr align=left><FONT face=Arial color=#0000ff size=2><SPAN class=541224513-07122010></SPAN></FONT> </DIV><BR> <DIV class=OutlookMessageHeader lang=en-us dir=ltr align=left> <HR tabIndex=-1> <FONT face=Tahoma size=2><B>From:</B> Daniel Wittenberg [mailto:daniel.wittenberg.r0ko@statefarm.com] <BR><B>Sent:</B> Monday, December 06, 2010 4:40 PM<BR><B>To:</B> Nagios Users List<BR><B>Subject:</B> Re: [Nagios-users] Determining what is causing a high load reportedby check_load plugin<BR></FONT><BR></DIV> <DIV></DIV> <DIV class=WordSection1> <P class=MsoNormal><SPAN style="FONT-SIZE: 11pt; COLOR: #1f497d; FONT-FAMILY: 'Calibri','sans-serif'">In top, does it show the same load values? The status of your memory shouldn’t cause the nagios plugin to report high cpu. What does the uptime command say? Try running the check_load script by hand on that host and verify it returns the same results.<o:p></o:p></SPAN></P> <P class=MsoNormal><SPAN style="FONT-SIZE: 11pt; COLOR: #1f497d; FONT-FAMILY: 'Calibri','sans-serif'"><BR>Dan<o:p></o:p></SPAN></P> <P class=MsoNormal><SPAN style="FONT-SIZE: 11pt; COLOR: #1f497d; FONT-FAMILY: 'Calibri','sans-serif'"><o:p> </o:p></SPAN></P> <P class=MsoNormal><SPAN style="FONT-SIZE: 11pt; COLOR: #1f497d; FONT-FAMILY: 'Calibri','sans-serif'"><o:p> </o:p></SPAN></P> <DIV style="BORDER-RIGHT: medium none; PADDING-RIGHT: 0in; BORDER-TOP: #b5c4df 1pt solid; PADDING-LEFT: 0in; PADDING-BOTTOM: 0in; BORDER-LEFT: medium none; PADDING-TOP: 3pt; BORDER-BOTTOM: medium none"> <P class=MsoNormal><B><SPAN style="FONT-SIZE: 10pt; FONT-FAMILY: 'Tahoma','sans-serif'">From:</SPAN></B><SPAN style="FONT-SIZE: 10pt; FONT-FAMILY: 'Tahoma','sans-serif'"> Marc Powell [mailto:lists@xodus.org] <BR><B>Sent:</B> Monday, December 06, 2010 3:26 PM<BR><B>To:</B> Nagios Users List<BR><B>Subject:</B> Re: [Nagios-users] Determining what is causing a high load reported by check_load plugin<o:p></o:p></SPAN></P></DIV> <P class=MsoNormal><o:p> </o:p></P> <P class=MsoNormal style="MARGIN-BOTTOM: 12pt"><o:p> </o:p></P> <DIV> <P class=MsoNormal>On Mon, Dec 6, 2010 at 1:50 PM, Kaplan, Andrew H. <<A href="mailto:AHKAPLAN@partners.org">AHKAPLAN@partners.org</A>> wrote:<o:p></o:p></P> <DIV> <P><SPAN style="FONT-SIZE: 10pt; FONT-FAMILY: 'Arial','sans-serif'">Hi there --</SPAN> <o:p></o:p></P> <P><SPAN style="FONT-SIZE: 10pt; FONT-FAMILY: 'Arial','sans-serif'">We are running Nagios 3.1.2 server, and the client that is the subject of this e-mail is running version 2.6 of the nrpe client.</SPAN><o:p></o:p></P> <P><SPAN style="FONT-SIZE: 10pt; FONT-FAMILY: 'Arial','sans-serif'">The check_load plugin, version 1.4, is indicating the past three readings are the following:</SPAN> <o:p></o:p></P> <P><SPAN style="FONT-SIZE: 10pt; FONT-FAMILY: 'Arial','sans-serif'">load average: 71.00, 71.00, 70.95 CRITICAL</SPAN> <o:p></o:p></P> <P><SPAN style="FONT-SIZE: 10pt; FONT-FAMILY: 'Arial','sans-serif'">The critical threshold of the plugin has been set to the 30, 25, 20 settings.</SPAN> <o:p></o:p></P> <P><SPAN style="FONT-SIZE: 10pt; FONT-FAMILY: 'Arial','sans-serif'">When I checked the client in question, the first thing I did was to run the top command. The results are shown below:</SPAN> <o:p></o:p></P> <P><SPAN style="FONT-SIZE: 10pt; FONT-FAMILY: 'Arial','sans-serif'">CPU0 states: 0.0% user, 0.0% system, 0.0% nice, 100.0% idle</SPAN> <BR><SPAN style="FONT-SIZE: 10pt; FONT-FAMILY: 'Arial','sans-serif'">CPU1 states: 0.0% user, 0.0% system, 0.0% nice, 100.0% idle</SPAN> <BR><SPAN style="FONT-SIZE: 10pt; FONT-FAMILY: 'Arial','sans-serif'">CPU2 states: 1.0% user, 4.0% system, 0.0% nice, 93.0% idle</SPAN> <BR><SPAN style="FONT-SIZE: 10pt; FONT-FAMILY: 'Arial','sans-serif'">Mem: 2064324K av, 2032308K used, 32016K free, 0K shrd, 509924K buff</SPAN> <BR><SPAN style="FONT-SIZE: 10pt; FONT-FAMILY: 'Arial','sans-serif'">Swap: 2096472K av, 21432K used, 2075040K free 1035592K cached</SPAN> <o:p></o:p></P> <P><SPAN style="FONT-SIZE: 10pt; FONT-FAMILY: 'Arial','sans-serif'">The one thing that I noticed was the amount of free memory was at thirty-two megabytes. I wanted to know if that was</SPAN> <BR><SPAN style="FONT-SIZE: 10pt; FONT-FAMILY: 'Arial','sans-serif'">what was causing the critical status to occur, or if there is something(s) else that I should investigate.</SPAN><o:p></o:p></P></DIV> <DIV> <P class=MsoNormal style="MARGIN-BOTTOM: 12pt"><BR>Memory is not a factor in the load calculation, only the number of processes running or waiting to run. For at least 15 minutes you had approximately 71 processes either running or ready to run and waiting on CPU resources. Running top/ps was the right thing to do but you really need to do it when the problem is occurring to see what's actually using all the CPU resources. There are far too many reasons why load could be high but it should be easy for someone familiar with your system to figure it out (at least generally) while in-the-act.<BR><BR>--<BR>Marc<o:p></o:p></P></DIV></DIV></DIV><font face="monospace"><br> <br> The information in this e-mail is intended only for the person to whom it is<br> addressed. If you believe this e-mail was sent to you in error and the e-mail<br> contains patient information, please contact the Partners Compliance HelpLine at<br> http://www.partners.org/complianceline . If the e-mail was sent to you in error<br> but does not contain patient information, please contact the sender and properly<br> dispose of the e-mail.</font></BODY></HTML>