Questions - Features

Francois Mikus fmikus at acktomic.com
Tue Apr 5 21:29:27 EDT 2005


Jeff Weisberg wrote:
> 
> SNMP is the preferred remote agent. most SNMP servers can be configured
> to report on disk use, processes, or run your own program.
> 
> argus also comes with a 'argus-agent' which can be run out
> of inetd on remote machines to monitor disk use, cpu load, etc,
> for people who for some reason don't want to use SNMP.
> 
> 
> | We've requested a 'warning', but Argus' author is taking an "I dont know
> | how to do it because I'm not that good" approach.
> 
> huh? requested what? do you mean something like:
> 	severity: warning

For my part, what I meant was, that it would be nice to have a yellow 
colour for visualisation of alerts which are considered warnings. This 
way administrators know that they have to look at it, but not 
necessarely urgently.

> 
> | > - same colour/event scheme as big brother. (colour for no data, red for 
> | > alert, yellow for warning, colour for stale data) Also have color icons 
> | > with a twist, for acknowledged alarms, or other special events. This 
> | > makes it easy to see that someone is working on a problem.
> 
> definitely not. argus has no animated spinning icons.
> argus does not have a disgusting jelly-bean-vomit color scheme.
> just a simple clean look.
 >
> the author considers this a feature.
> 
lol

I have to agree with you, spinning icons and other distractions have 
little place in serious web content. But, I have to acknowledge that the 
big brother interface was excellent at summarizing and displaying 
information much better than most other systems. Of course the system, I 
worked with was heavily customized by a collegue.. Even with it's 
animated icons.. That is not to say that BB was perfect, far from it, 
Big brother simply does not scale.

Back to the topic at hand!

Let me re-phrase.

You get an alert. The services goes red on the web interface. An alert 
goes to a sys admin. The admin looks at the issue, acknowledges that he 
is working on it. Great.

What is very useful is having a visual way of representing that, there 
is an alert, but someone is looking at it. This could be a check mark, etc.

A second thing. If argus has a display hierarchy for alerts, it is nice 
for this hierarchy to reflect that the alter was acknowledged. This way 
if another alert is triggered, it would be easy to notice that there was 
a new one, even from a hiearchical point of view. The is immense value 
in hiding complexity with hierarchical views with inhereted alert 
status. (Which is one reason things like big brother, netcool and others 
that use this type of display are so popular)

Maybe argus already has all this and I should just go try all the 
features and be done with it! :-)

In any case the project looks great.. look forward to testing in my lab 
network.

Francois Mikus


More information about the Arguslist mailing list