EVM daemon: High event activity

From: ldg@ulysium.net
Date: Tue Aug 12 2003 - 15:51:12 EDT


Hello all,

I've been getting messages from the EVM daemon on a fairly new system with
tru64 5.1b, they come up when the system gets a little busy. It looks like
it's looking at just about everything being logged via syslog, which can
amount to quite bit.

The message says:

EVM ALERT [600]: EVM daemon: High event activity - exceeds 500 in 10 minutes

and using:

evmget | evmshow

is listing basically all activity from cron, pop, sendmail, ftp.....
Which I assume is what it calls "events", and obviously when the system gets
a little busy, it can go over that threshold that triggers the message from
the evm daemon.

Is there any way to tone this down?
Without logging less to syslog, I still want everything to stay as it is for
syslog logging.
How can I make evm be a little more selective in what it considers "events"?

-- 
Didier Godefroy
mailto:dg@ulysium.net


This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:49:31 EDT