Total map count exceeding threshold-gigamon-GigaVUE-OS

Total map count exceeding threshold-gigamon-GigaVUE-OS
0

Total map count exceeding threshold-gigamon-GigaVUE-OS

Vendor: gigamon

OS: GigaVUE-OS

Description:
Indeni will alert if the devices total map count is exceeding the threshold

Remediation Steps:
Login to the device’s CLI, change to enable mode and issue “show map brief”. This will present an abbreviated table with map information.

How does this work?
Using the “show map brief” command and parsing for the number that follows “Total Map Count:”.

Why is this important?
Each node and cluster has a finite number of maps. Each map has rules, which are also limited in number. While the numbers can be large (16K rules with an HC2 CCv2, 4K rules with HC2 CCv1), the system can run out of resources and it’s always good to know if the system is nearing capacity. This is more of a monitoring and alerting function rather than mitigation/fixing.

Without Indeni how would you find this?
Login to the device’s CLI, change to enable mode and issue “show map brief”. This would present an abbreviated table with map information.

gigamon-show-map-brief

name: gigamon-show-map-brief
description: Fetch total map count
type: monitoring
monitoring_interval: 5 minutes
requires:
    vendor: gigamon
    os.name: GigaVUE-OS
    privileged-mode: 'true'
comments:
    map-total-count:
        why: |
            Each node and cluster has a finite number of maps. Each map has rules, which are also limited in number. While the numbers can be large (16K rules with an HC2 CCv2, 4K rules with HC2 CCv1), the system can run out of resources and it's always good to know if the system is nearing capacity. This is more of a monitoring and alerting function rather than mitigation/fixing.
        how: |
            Using the "show map brief" command and parsing for the number that follows "Total Map Count:".
        without-indeni: |
            Login to the device's CLI, change to enable mode and issue "show map brief". This would present an abbreviated table with map information.
        can-with-snmp: true
        can-with-syslog: false
        vendor-provided-management: Can be done through Fabric Manager (FM) GUI.
steps:
-   run:
        type: SSH
        command: show map brief
    parse:
        type: AWK
        file: gigamon-show-map-brief.parser.1.awk

GigamonTotalMapCountRule

// Deprecation warning : Scala template-based rules are deprecated. Please use YAML format rules instead.

package com.indeni.server.rules.library.templatebased.gigamon

import com.indeni.server.rules.library.templates.NearingCapacityTemplateRule


case class GigamonTotalMapCountRule() extends NearingCapacityTemplateRule (
  ruleName = "GigamonTotalMapCountRule",
  ruleFriendlyName = "Gigamon devices: Total map count exceeding threshold",
  ruleDescription = "Indeni will alert if the devices total map count is exceeding the threshold",
  usageMetricName = "map-total-count",
  threshold = 15500.0,
  alertDescriptionFormat = "Total maps: %.0f",
  baseRemediationText = "Login to the device's CLI, change to enable mode and issue \"show map brief\". This will present an abbreviated table with map information."
)()