3.2.9 Monitoring Hosts

Privileged Account Manager maintains a log file for each host. Each host can be configured to send alerts to the Framework Manager console when errors occur. It allows you to monitor the status of each host:

Viewing the Host Status

The Host Status option allows you to view the current status of all your hosts, or all the hosts in a domain, on one page.

On the home page of the console, click Hosts.
Select a domain.

Click Host Status in the task pane.

The status for each host is displayed, as shown in the following table, with a summary at the bottom of the screen.

	The host is online.
	There is a status problem with the host; for example, the host’s time offset exceeds the defined level (see Step 7). Click the arrow to the left of the green box to display status messages.
	The host is offline.
	The host is unregistered.

Use the Online, Offline and Unregistered check boxes to select the hosts you want to view.

If you have a long list of hosts, deselect the Auto scroll check box to stop the automatic scrolling.
(Conditional) If you want to enable FIPS in all agents and manager component, click Enable. Before enabling FIPS, review prerequisites in section Enabling FIPS Mode in the Privileged Account Manager Installation Guide.
(Conditional) If you want to disable CBC mode in all agents and manager component, click Disable.
(Optional) Change the filter settings from the default values and select Restart to check the status again. The available filters are:

Maximum Timeoffset (minutes): The difference in system time between the host and the Primary Registry Manager. If the time offset exceeds the value in this field, a warning indicator is displayed.

Minimum Disk Space (MB): If the available disk space on the host machine goes below the value in this field, a warning indicator is displayed.

Maximum Memory (MB): If the memory used by the host exceeds the value in this field, a warning indicator is displayed.
To view a host’s details, double-click the host or click Close to return to the hierarchical view.

To use a command line option to view the status, see Section 10.5.3, Agent Status.

Viewing the Host Log

On the home page of the console, click Hosts.
In the navigation pane, select the required host.
In the task pane, click View Host Log.
Specify the values for the following based on the required log information:

Log Level: Set the level of information you want to see on the screen.
- Error displays only Error messages.
- Warning displays Warning and Error messages.
- Information displays Information, Warning, and Error messages.
Refresh (secs): Set the interval between screen refreshes. You can select intervals from 1 to 60 seconds

Maximum Cached log Messages: Set the maximum number of log messages to display on the screen. You can view from 10 to 1000 messages.
Click the Pause check box to pause the screen display.
Click the Clear button to clear the screen display.
Click Close to return to the Framework hierarchy view.

Modifying Log Settings

You can modify log settings for hosts, hosts in a domain, or an individual host by using the Domain Log Settings or Host Log Settings options.

On the home page of the console, click Hosts.
To modify the log settings for all hosts in a domain, select the domain. To modify the log settings for an individual host, select the host in the navigation pane.
Click Domain Log Settings or Host Log Settings in the task pane, then modify the following settings:

File Name: Specify the filename and location of the log file. All the details are by default logged in logs/unifid.log.

Level: Set the level of information you need. The default level is Info.
- Error for Error messages.
- Warning for Warning and Error messages.
- Info for Information, Warning, and Error messages.
- Debug for Debug, Information, Warning, and Error messages.
- Trace for Trace, Debug, Information, Warning, and Error messages.
  
  NOTE:The Debug and Trace settings generate a lot of data and are primarily for the use of NetIQ Support.
Show all tasks: Click Show all tasks to include all tasks in the log. The Show all tasks option is primarily for the use of NetIQ Support.

Roll Over: Select the rollover point from the drop-down list to specify when the log file is overwritten with new information. If the maximum size set for the log file is reached, the log file is overwritten regardless of this setting.

Max Size (MB): Select the maximum size of the log file from the drop-down list. This specifies when the log is overwritten with new information.

Roll Over Script: Enter a Perl script to be executed at the rollover point. For a sample script, see Example Rollover Script.
Click Next to apply the changes.

If the changes are applied successfully, a green box is displayed next to the agent name.

If the changes are not applied successfully (for example, if the host is not online), a red box is displayed next to the agent name.
Click Close.

Example Rollover Script

This is an example of a Perl script that can be called at the rollover point for the host log file. The script compresses the old unifid.log and then removes any log files that are more than 30 days old.

use File::Basename;
# Zip up rolled over logfile
system("/usr/bin/gzip $LOG_FILE");
my $log_root = dirname($LOG_FILE);
$ctx->log_info("Log file directory  - $log_root");
opendir(LOGDIR, $log_root);
$ctx->log_info("Zipping up $LOG_FILE");
# Find all the compressed log files
my @log_files = map { $_->[1] }
map { [ $_, "$log_root/$_" ] }
grep { /\.gz$/ }
readdir(LOGDIR);
closedir(LOGDIR);
# Delete all log files older than 30 days
my $time = time();
foreach my $log (@log_files) {
my ($mtime) = (stat($log))[9];
my $age = int((($time - $mtime) / 3600) / 24);
$ctx->log_info("Checking $log ($age days old)");
next unless $age > 30;
$ctx->log_info("Deleting $log ($age days old)");
unlink $log;
}