<html xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=utf-8"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:Wingdings;
panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
font-size:10.0pt;
font-family:"Calibri",sans-serif;}
p.MsoListParagraph, li.MsoListParagraph, div.MsoListParagraph
{mso-style-priority:34;
margin-top:0in;
margin-right:0in;
margin-bottom:0in;
margin-left:.5in;
font-size:10.0pt;
font-family:"Calibri",sans-serif;}
span.EmailStyle21
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
/* List Definitions */
@list l0
{mso-list-id:1423649025;
mso-list-template-ids:-1822104890;}
@list l0:level1
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level2
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:1.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:"Courier New";
mso-bidi-font-family:"Times New Roman";}
@list l0:level3
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:1.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l0:level4
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:2.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level5
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:2.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level6
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:3.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level7
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:3.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level8
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:4.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level9
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:4.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l1
{mso-list-id:1775132652;
mso-list-template-ids:1539088994;}
@list l1:level1
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l1:level2
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:1.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l1:level3
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:1.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l1:level4
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:2.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l1:level5
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:2.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l1:level6
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:3.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l1:level7
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:3.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l1:level8
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:4.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l1:level9
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:4.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l2
{mso-list-id:2007592212;
mso-list-type:hybrid;
mso-list-template-ids:-2147337284 67698689 67698691 67698693 67698689 67698691 67698693 67698689 67698691 67698693;}
@list l2:level1
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Symbol;}
@list l2:level2
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Courier New";}
@list l2:level3
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Wingdings;}
@list l2:level4
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Symbol;}
@list l2:level5
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Courier New";}
@list l2:level6
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Wingdings;}
@list l2:level7
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Symbol;}
@list l2:level8
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Courier New";}
@list l2:level9
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Wingdings;}
ol
{margin-bottom:0in;}
ul
{margin-bottom:0in;}
--></style></head><body lang=EN-US link="#0563C1" vlink="#954F72" style='word-wrap:break-word'><div class=WordSection1><p class=MsoNormal><span style='font-size:11.0pt'>Thanks for the detailed answer.<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt'>Let me answer the question, “What software specifically do you want to generate alarms?”<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt'>We have software that monitors security events associated with the Linux kernel that we would like to expose to the cloud platform. These security events get logged to journald which in turn is picked up by syslog. We would make a syslog rule that selects these specific audit events and outputs them to a named pipe. We’d run a service on each node that would read from this pipe, massage the syslog message, and, our hope, would be to create an alarm within StarlingX that represents that security event.<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt'>That’s really the crux of my question. I’ve read that Kubernetes generally does not handle platform events yet we are exploring a requirement that these security alarms be exposed to the cloud admin through the Horizon web GUI. I’m trying to understand if this is possible.<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt'>Again, thanks for taking the time to read my question and help.<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt'>Rich<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt'><o:p> </o:p></span></p><div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in'><p class=MsoNormal style='margin-bottom:12.0pt'><b><span style='font-size:12.0pt;color:black'>From: </span></b><span style='font-size:12.0pt;color:black'>Waines, Greg <Greg.Waines@windriver.com><br><b>Date: </b>Thursday, June 15, 2023 at 8:19 PM<br><b>To: </b>Richard Schmitt <richard.schmitt@starlab.io>, starlingx-discuss@lists.starlingx.io <starlingx-discuss@lists.starlingx.io><br><b>Subject: </b>RE: Question about alarms in StarlingX<o:p></o:p></span></p></div><div><p class=MsoNormal><span style='font-size:11.0pt'>[EXTERNAL SENDER]<o:p></o:p></span></p></div><div><p class=MsoNormal><span style='font-size:11.0pt'>Hey Richard … sorry for the slow reply …<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt'>This is the right place to ask.<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt'> <o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt'>I am not totally sure what you mean by <i>“We want to create user alarms in OpenStack.”</i><o:p></o:p></span></p><ul style='margin-top:0in' type=disc><li class=MsoListParagraph style='margin-left:0in;mso-list:l2 level1 lfo3'><span style='font-size:11.0pt'>What software specifically do you want to generate alarms related to what specific fault conditions ?<o:p></o:p></span></li></ul><p class=MsoNormal><span style='font-size:11.0pt'> <o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt'>Some other background on alarms in StarlingX:<o:p></o:p></span></p><ul style='margin-top:0in' type=disc><li class=MsoListParagraph style='margin-left:0in;mso-list:l2 level1 lfo3'><span style='font-size:11.0pt'>StarlingX Platform has a Fault Management system of its own<o:p></o:p></span></li></ul><ul style='margin-top:0in' type=disc><ul style='margin-top:0in' type=circle><li class=MsoListParagraph style='margin-left:0in;mso-list:l2 level2 lfo3'><span style='font-size:11.0pt'>It is used by StarlingX Platform’s Infrastructure Services to raise alarms and logs related to fault conditions detected by StarlingX Platform’s Infrastructure Services<o:p></o:p></span></li><li class=MsoListParagraph style='margin-left:0in;mso-list:l2 level2 lfo3'><span style='font-size:11.0pt'>These alarms / logs are stored in a historical event (alarm or log) db<o:p></o:p></span></li><li class=MsoListParagraph style='margin-left:0in;mso-list:l2 level2 lfo3'><span style='font-size:11.0pt'>And an active alarm db is maintained to show alarms that are currently present within StarlingX<o:p></o:p></span></li><li class=MsoListParagraph style='margin-left:0in;mso-list:l2 level2 lfo3'><span style='font-size:11.0pt'>The historical event db and the active alarm db can be displayed thru<o:p></o:p></span></li></ul></ul><ul style='margin-top:0in' type=disc><ul style='margin-top:0in' type=circle><ul style='margin-top:0in' type=square><li class=MsoListParagraph style='margin-left:0in;mso-list:l2 level3 lfo3'><span style='font-size:11.0pt'>the starlingx API/CLI ‘fm’, and<o:p></o:p></span></li><li class=MsoListParagraph style='margin-left:0in;mso-list:l2 level3 lfo3'><span style='font-size:11.0pt'>the starlingx horizon, on the Fault Management page<o:p></o:p></span></li></ul></ul></ul><ul style='margin-top:0in' type=disc><ul style='margin-top:0in' type=circle><li class=MsoListParagraph style='margin-left:0in;mso-list:l2 level2 lfo3'><span style='font-size:11.0pt'>There is an internal developer’s API for FM for people coding StarlingX Platform Infrastructure Services code to raise and clear alarms/logs<o:p></o:p></span></li></ul></ul><ul style='margin-top:0in' type=disc><ul style='margin-top:0in' type=circle><ul style='margin-top:0in' type=square><li class=MsoListParagraph style='margin-left:0in;mso-list:l2 level3 lfo3'><span style='font-size:11.0pt'>Likely not documented well … other than in the code (lol)<o:p></o:p></span></li><li class=MsoListParagraph style='margin-left:0in;mso-list:l2 level3 lfo3'><span style='font-size:11.0pt'>Let me know if this is what you are looking for<o:p></o:p></span></li></ul></ul></ul><ul style='margin-top:0in' type=disc><li class=MsoListParagraph style='margin-left:0in;mso-list:l2 level1 lfo3'><span style='font-size:11.0pt'>StarlingX OpenStack … i.e. the containerized openstack solution<o:p></o:p></span></li></ul><ul style='margin-top:0in' type=disc><ul style='margin-top:0in' type=circle><li class=MsoListParagraph style='margin-left:0in;mso-list:l2 level2 lfo3'><span style='font-size:11.0pt'>You’re right that the only pure openstack alarming that I am aware of is via aodh which does alarm thresholding of statistics collected by openstack telemetry / gnoochi … which StarlingX OpenStack doesn’t fully support anymore … we let it go stale and need to fix it<o:p></o:p></span></li><li class=MsoListParagraph style='margin-left:0in;mso-list:l2 level2 lfo3'><span style='font-size:11.0pt'>…<o:p></o:p></span></li><li class=MsoListParagraph style='margin-left:0in;mso-list:l2 level2 lfo3'><span style='font-size:11.0pt'>However there is a StarlingX OpenStack VIM component that lives in the gray area between the StarlingX Platform on the host and StarlingX OpenStack in containers … <o:p></o:p></span></li></ul></ul><ul style='margin-top:0in' type=disc><ul style='margin-top:0in' type=circle><ul style='margin-top:0in' type=square><li class=MsoListParagraph style='margin-left:0in;mso-list:l2 level3 lfo3'><span style='font-size:11.0pt'>One of the things VIM does, is watch openstack events and raises FM alarms and logs for many openstack events<o:p></o:p></span></li><li class=MsoListParagraph style='margin-left:0in;mso-list:l2 level3 lfo3'><span style='font-size:11.0pt'>I believe this is still operational and working today<o:p></o:p></span></li></ul></ul></ul><ul style='margin-top:0in' type=disc><ul style='margin-top:0in' type=circle><li class=MsoListParagraph style='margin-left:0in;mso-list:l2 level2 lfo3'><span style='font-size:11.0pt'>At one time we were working on cloning FM and having a StarlingX Platform FM and a StarlingX OpenStack FM … but I don’t believe that ever got completed.<o:p></o:p></span></li></ul></ul><p class=MsoNormal><span style='font-size:11.0pt'> <o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt'>Anyways … let me know if this helps,<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt'>Greg<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt'> <o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt'> <o:p></o:p></span></p><div><div style='border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in'><p class=MsoNormal><b><span style='font-size:11.0pt'>From:</span></b><span style='font-size:11.0pt'> Richard Schmitt <richard.schmitt@starlab.io> <br><b>Sent:</b> Monday, June 12, 2023 5:59 PM<br><b>To:</b> starlingx-discuss@lists.starlingx.io<br><b>Subject:</b> [Starlingx-discuss] Question about alarms in StarlingX<o:p></o:p></span></p></div></div><p class=MsoNormal><span style='font-size:11.0pt'> <o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt'>Sorry if this isn’t the right place to ask this question.<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt'> <o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt'>We want to create user alarms in OpenStack. We are not very knowledgeable of OpenStack. Ultimately, we’d like to raise alarms and have them appear in the Horizon Fault Management page or via the fm CLI. It does not appear that StarlingX has anything to do with creating or raising alarms. There are some references in OpenStack documentation on aodh but that service is not deployed in our configuration.<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt'> <o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt'>I’m not entirely sure whether OpenStack supports extensible alarms. Perhaps that’s why I’m finding so little info on it. Any pointers on where I should look?<br><br>Thanks,<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt'>Rich<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt'> <o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt'> <o:p></o:p></span></p></div></div></body></html>