Missing OSS Events Powerpoint_BITUG_2006
- 2. Sept 2006 Karl Todd, Product Manager, Insider Technologies Limited The missing OSS events, how to get the same operational event richness as native Guardian provides
- 3. Introduction • Brief introduction to Insider Technologies • How to log information from OSS • Limitations when logging from OSS • Enhancing non-unique EMS events • Not only an OSS issue • Questions and close
- 5. Cross-Section of our Commercial Customers • Bank Of England • CRESTCo (Euroclear) • Barclays • HSBC • RBS Group • Alliance & Leicester • Cable & Wireless • Standard Chartered • Shell • Dornier • Lloyds TSB • Deutsche Bank • Deutsche Telekom
- 6. Insider Technologies • Established 1989 • 28 people, based in Manchester • 80% of our customers are in the finance sector, many of them in London • Private company, shares held by the senior employees
- 7. Relationships • Typical length of relationship with our clients exceeds 10 years • Very focussed on customer care and creating a specific service relationship with each client • We continually add to our products to enhance them for our client base
- 8. Technical History • Began as a Tandem Alliance Partner • Now provide additional solutions hosted on high-end Windows with portable, open agents • Very good background for high-availability and customer support
- 9. ISO 9001/2000 • Insider Technologies has been quality certified since 1995 • One of the first UK companies to achieve the new 2000 certification
- 11. How to log Information from OSS There are two methods of raising logging events from OSS. • Use platform specific EMS procedure calls • Use the industry standard syslog
- 12. Limitations of using EMS procedure calls from OSS • Requires the developer to be familiar with EMS procedure calls such as EMSINIT and EMSADDTOKENS (Additional skills may be required such as DDL etc.) These skills may not exist for developers who are simply porting an existing application to OSS
- 13. Limitations of using EMS procedure calls from OSS • Impacts portability due to use of platform specific calls • Since logging is a fundamental part of most programs, there is the likelihood that changes will be required to even core processing of an application As well as risk, this introduces cost implications due to development time and testing
- 14. Limitations of using syslog • All useful error detail is placed into a single text token (ZEMS-TKN-TEXT). No support for populating embedded descriptive tokens. For example a token to detail a file in error that uses a token type of ZSPI-TYP-FNAME cannot be added to a syslog event. Note that the openLog command may be used to set the subject token of the EMS event by setting the token ZOSS- TKN-IDENT. e.g. openlog (“MyApp”); This allows some limited differentiation between events.
- 15. Limitations of using syslog • All syslog messages are mapped to a set of only eight EMS events that have a SSID of TANDEM.OSS (143). For example: syslog(LOG_INFO, “Transaction file is full.”) produces a TANDEM.OSS(143) event with an event number of 11: 06-08-23 11:02:25 ITLTECH.0,466 TANDEM.OSS.D30 000011 KERNEL INFO , PID = 962854916 (MyApp) : Transaction file is full.
- 16. Limitations of using syslog OSS Event Level EMS Event Number EMS Event Name LOG_EMERG 5 ZOSS-EVT-SYSLOG-EMERG LOG_ALERT 6 ZOSS-EVT-SYSLOG-ALERT LOG_CRIT 7 ZOSS-EVT-SYSLOG-CRIT LOG_ERR 8 ZOSS-EVT-SYSLOG-ERR LOG_WARNING 9 ZOSS-EVT-SYSLOG-WARNING LOG_NOTICE 10 ZOSS-EVT-SYSLOG-NOTICE LOG_INFO 11 ZOSS-EVT-SYSLOG-INFO LOG_DEBUG 12 ZOSS-EVT-SYSLOG-DEBUG
- 17. Limitations of using syslog • The EMS events raised by syslog have limited cause, effect, recovery details that offer no aid in fault resolution. For example the LOG_INFO event details are: Cause A site-written OSS application has sent an OSS operator message. The cause of the message is application specific. This message is informational only. Effect The effect depends on the application. Recovery Contact your application support representative for recovery information.
- 18. Summary of limitations Use of EMS procedures: • Requires specialised knowledge • Introduces risk & cost • Impacts portability Use of syslog: • Loses the ability to create unique events that can be used for automation / escalation. • Lack of useful cause, effect, recovery information.
- 19. Summary of limitations The impact of using non-unique syslog events is the lack of filtering which prevents: • Filtering of events to automation processing such as paging, reactive processing etc. • Filtering of events to console applications • Filtering of events to Enterprise Managers • Accurate collection of statistics • Useful Cause, Effect, Recovery • The use of distinct event Templates that can be edited
- 20. Enhancing non-unique EMS events • ITL’s Streamer product provides a method of producing a rich set of EMS events from a single originating event that is used for several situations. • Streamer uses a set of configuration rules to parse EMS events and produce new unique events. • Elements of the original event can be incorporated into the new event along with additional information. • Since new unique events are being generated it is possible to use automation and escalation. Custom cause, effect, recovery can also be created.
- 21. Enhancing non-unique EMS events • Since Streamer performs parsing of the generated EMS events, the OSS application is not affected in any way.
- 22. EMS parsing via Streamer
- 23. EMS parsing via Streamer • In this example an EMS event is created from the syslog(LOG_INFO, “Transaction file full.”) call of: 06-08-23 11:02:25 ITLTECH.0,466 TANDEM.OSS.D30 000011 KERNEL INFO , PID = 962854916 (MyApp) : Transaction file is full. Which is translated into the new unique event: 06-08-23 11:02:25 ITLTECH.$STRM MYAPP.1.0 000002 Transaction file is full. Increase the size of the transaction file. Automation can then be utilised.
- 24. EMS parsing via Streamer
- 25. EMS parsing via Streamer
- 26. The lack of rich EMS events is not only an OSS issue. Many legacy and third-party applications have this problem. For example IBM Websphere MQ v5.1 uses IBM.99.0 event 5 for many situations with useful details embedded in multiple event tokens. Not only an OSS issue
- 27. 06-08-24 12:16:26 ITLTECH.$X5H9 *IBM.MQSeries.2 000005 MQSeries message: "AMQ9243: The queue manager ‘QUEUE-MGR’ does not exist" EXPLANATION : "You tried to perform an action against a queue manager that does not exist. You may have specified the wrong queue manager name." ACTION : "If you specified the wrong name, correct the name and submit the command again. If the queue manager does not exist, create Not only an OSS issue
- 28. • For applications like these ITL can provide bespoke applications that will produce unique events. • For the IBM.99.0 event 5 events, ITL’s MQ EMS Gateway product will produce unique events using the AMQ number as the event number for the new event and will extract useful text into standard MQ tokens. For example, the Queue Manger text can be extracted and placed into a ZMQS-TKN-QMGR token. Not only an OSS issue
- 29. 06-08-24 12:16:27 ITLTECH.$MQGW INSIDER.MQEMSG.4 009243 EMS Gateway: "AMQ9243: The queue manager ‘QUEUE-MGR’ does not exist" EXPLANATION : "You tried to perform an action against a queue manager that does not exist. You may have specified the wrong queue manager name." ACTION : "If you specified the wrong correct the name and submit the command again. If the queue manager does not exist, create the queue manager and submit the command again." Queue Manager : QUEUE-MGR Not only an OSS issue
- 30. Not only an OSS issue
- 32. www.insidertech.co.uk Tel: +44 (0)161 876 6606