7.2.8 Selection of agent configuration or remote monitoring configuration
Using IM Configuration Management, you can use JP1/Base to monitor hosts in agent configuration, or remotely monitor hosts in a remote monitoring configuration.
In remote monitoring, a communication failure related to functional errors might cause log monitoring to stop or events to be lost. If the system cannot tolerate temporary stoppage of log monitoring, install JP1/Base and use it for log monitoring.
In both the agent configuration and remote monitoring configuration, multiple manager hosts cannot monitor one host.
Use the following table to help decide whether to use monitoring using JP1/Base or remote monitoring.
Item |
Monitoring using JP1/Base |
Remote monitoring |
---|---|---|
You perform monitoring that exceeds the restrictions for remote monitoring. |
Y |
N |
The stoppage of log monitoring and loss of events is undesirable in the system.#1 |
Y |
N |
Log monitoring is required even while JP1/IM - Manager is stopped. |
Y |
Y#2 |
Monitored hosts are frequently stopped. |
Y |
N |
WMI/NetBIOS (NetBIOS over TCP/IP) or SSH cannot be used on the system.#3 |
Y |
N |
Multiplexed monitoring.#4 |
Y |
N |
Other than above. |
Y |
Y |
For details about remote monitoring, see 7.6 Managing remotely monitored hosts.
Some limitations apply to remote monitoring. For the limit values, see the following table.
Item |
Limit |
---|---|
Maximum number of remote monitoring units#1 |
1,024 |
Maximum size of the log files that can be remotely monitored |
64 MB |
Maximum amount of log data that can be collected per monitoring interval (Windows)#2 |
10 KB#4 |
Maximum amount of log data that can be collected per monitoring interval (UNIX)#2 |
10 KB#4 |
Maximum amount of event log data that can be collected per monitoring interval#3 |
10 KB#4 |
Maximum amount of log data that can be collected by one JP1/IM - Manager |
10 MB |
- Organization of this subsection
(1) Functional differences between the agent configuration and the remote monitoring configuration
Item |
Agent configuration |
Remote monitoring configuration |
---|---|---|
Use |
|
When reducing load in the construction of an environment and for other operations has priority over monitoring accuracy#1 |
Monitored logs and file formats |
|
|
Scale |
|
|
Event issued |
|
|
Size of log files that can be monitored |
2 gigabytes or less |
64 megabytes or less |
Size of log data that can be collected during a monitoring interval |
Unlimited |
In Windows: 200 kilobytes or less In UNIX: 50 kilobytes or less |
Maximum size of event log that can be collected per monitoring interval |
Unlimited |
200 kilobytes or less |
Log file trap start option |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
In Windows, Unicode can be specified. |
Various character encodings that can be specified for the OS. |
|
|
|
|
|
|
|
Log file trap action definition |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Event log trap action definition |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Operation when manager stops |
If the manager host stops or a network failure occurs between the manager host and a monitored host, an agent host can convert the event into a JP1 event, and retry transfer of the generated JP1 event to the manager host. |
The log files and Windows event logs generated while JP1/IM - Manager is stopped are trapped the next time remote monitoring is started. |
Operation when network fails |
If network operation is restored after a failure before the maximum number of retries is reached and monitoring stops, the manager host will be notified of the log data collected during the failure period. Notification will be done only when none of the following restrictive conditions exist:
|
|
Host name |
A host name registered in the hosts file or DNS or a host name defined in jp1hosts or jp1hosts2 is specified for a host name. |
A host name registered in the hosts file or DNS is specified for a host name. The settings of jp1hosts and jp1hosts2 are not referenced. |