The Heartbeat Agent utilizes SNMP (v1, v2c & V3) and SSH (when available) on the remote host to gather more information from the monitored device.
Using SNMP the following information can be retrieved:
•Disk Space information
•Performance Monitoring
•Hardware Summary
•Running processes (alerting only)
Using SSH the following information can be retrieved:
•Extended system information (time zone, USB version, BIOS, OS install date, extended CPU info
•Running daemon / services
Automatic Detection
The heartbeat agent will attempt to detect certain features on a remote host automatically and retrieve the associated information via SNMP or SSH.
VMWare ESXi
When VMWare is detected on a remote host, a VM inventory is retrieved from the remote host and available on the Inventory - Virtual Machine page. The following details are available:
•Product Name
•Product Version
•Product Build
•VM Name
•Current VM status
•VM Operating System (if tools are installed)
•Assigned CPUs
•Assigned memory
•Path to .vmx file
MAC to Switch Port Mapping
If the monitored device is a switch, the MAC address to switch part mappings are automatically retrieved and available on the Inventory - Switch page. The MAC addresses are correlated to hardware information obtained by the agents and the ARP daemon so that host names can be displayed whenever possible.
Logging
The SNMP capabilities of a remote device are determined automatically when the heartbeat agent initializes after startup, and event 11020 is logged for every device which supports at least SNMP v1.
|
All features require that the respective system health object (e.g. disk space, performance monitoring) is assigned to the monitored hosts.
If no disk space, performance or software/hardware inventory object is assigned to a host, it will not be monitored via SNMP. |
Error Handling
EventSentry suspends SNMP monitoring of a host under the following conditions:
1.The Heartbeat Service is unable to query a remote host via SNMP during the first monitoring interval after service startup.
2.The Heartbeat Service is unable to query a remote host via SNMP for more than 24 hours, event id 11023 will be logged and SNMP monitoring will be disabled for the host.
3.The Heartbeat Service is unable to query a remote host via SNMP at least 50% of the time during a 48-hour period, event id 11015 will be logged and SNMP monitoring will be disabled for the host.
|
To re-enable SNMP monitoring, follow the instructions in the logged event or open the management console, locate & click the host inside its respective computer group and finally click the SNMP-related warning to re-enable SNMP monitoring. |
