processMon

The processMon event producer monitors for process death.

Overview

The processMon event producer resides under the cpu directory and monitors for process death, based on process name. Only the parent process for a given process with same name is monitored. That means if we have a process tree abc (pid 123)->xyz (pid 345)->xyz (pid 567) and some one requests to monitor the xyz process then (pid = 345) actually gets monitored.

Capabilities

AHAFS_THRESHOLD_STATE
AHAFS_REMOTE_EVENT_ENABLED
AHAFS_CALLBACK_INTRCNTX

Return codes

The processMon event producer returns only a single return code 0.

Event producer message

This event producer passes PROCESS_DOWN message as part of its event data.

Acceptable monitor files

To monitor for process deaths, a monitor file with the same path as the one used to start the process, should be created under the processMon.monFactory directory. For example, to monitor a process named test which is placed under the directory /usr/samples/ahafs, the monitor file /aha/cpu/processMon.monFactory/usr/samples/ahafs/test.mon would be used.

Example event data

The following event data was generated from the death of a monitored process. This is the output seen with the default INFO_LVL.

BEGIN_EVENT_INFO
TIME_tvsec=1272348909
TIME_tvnsec=482502597
SEQUENCE_NUM=0
RC_FROM_EVPROD=0
BEGIN_EVPROD_INFO
EVENT_TYPE=PROCESS_DOWN
END_EVPROD_INFO
END_EVENT_INFO