Devo Relay Activeboard

We've defined an Activeboard that shows useful information related to your relay after installing it.

Installation

You can download the Activeboard's raw configuration here:

To instantiate it, follow these instructions:

Create a new Activeboard in your domain. Learn how to do it here.
In Edit mode, click the ellipsis button and select Edit raw configuration.
Open the downloaded file, select all the text, and copy it into the clipboard.
Paste the contents of the file in the raw editor. Make sure you replace the existing configuration completely.
Click Save changes. The Activeboard should show up immediately..

Optionally, if the agent devo-monitor is installed in the relay machine, edit the select-type input called Relay hostnames and replace the default hostnames included by your own ones. In order to know the exact values to include, you can run the following query and look for the relay hostnames:

from box.stat.unix.dstatLt1
group by machine
every -

Learn how to install the devo-monitor agent in Installing Devo packages for *nix.

Take into account that if you are using devo-monitor in other Linux machines, many machine names will be shown and only those hosting a relay must be selected and added to the Relay hostnames input.

Description

This Activeboard is based on the data that the Syslog engine inside the relay (Scoja) reports to Devo. All these metrics are sent to the table syslog.scoja.stats. Also, if the devo-monitor agent is installed, some of the charts will show data from the tables box.stat.unix.diskstat and box.stat.unix.dstat-lt1.

The Activeboard has three main parts:

Summary metrics
EPS received in the relay
EPS sent to Devo, Mbps sent and dropped events
Relay machine resources usage (only if the devo-monitor agent is installed in the relay host machine)

Summary metrics

This area provides the following main metrics per relay:

totalEventsReceived are the events received by the relay that comes from the different data sources.
internalEvents are the events generated by the relay itself.
totalDroppedEvents are events that cannot be handled by the relay and we are forced to drop. Contact support in case you notice events dropping.
totalEventsSent are the events sent from the relay to Devo.
difference is calculated as the difference between the event sent and the sum of the events received, the internal events and the dropped events.
- if difference is a negative number, it means you have events dropping or that some data is not matching any rule in the relay.
- if difference is a positive number, it means that we are ingesting some events in more than one table.

EPS received in the relay

EPS sent to Devo, Mbps sent and dropped events

Relay machine resources usage

All these charts use the information generated by the devo-monitor agent that is available in the tables box.stat.unix.diskstat and box.stat.unix.dstat-lt1
All these line charts show the information grouped every 5 minutes.