The following examples show the different sections of the ztatus report.
General configuration parameters
[TealeafStatus]
CompanyName=myCompany
GeneralReportTime=07:00
MinutesToBetweenErrorReport=180
BlackOutPeriod=00:15,00:45
WriteReportToFile=True
ReportFileName=TealeafStatus.html
When WriteReportToFile is set to True, the report is written to
the ReportFileName filename. It must be set to False to generate
Status emails.
Parameters for connecting to the Data Service
[DataService]
server=sierra
port=23000| Parameter | Description |
|---|---|
| server | Identifier for the server that hosts the Data Service |
| port | Port number through which to communicate with the Data Service |
Email parameters
[Email]
From=TeaLeafAdmins@company.com
To=stakeholders@company.com
Subject=Tealeaf StatusPCA threshold parameters
These parameters define thresholds for the CX Passive Capture Application. When these thresholds are exceeded, an error is indicated in the Status report.
[PcaThresholds]
MaxIdle=120
MaxCpu=75
MaxRestart=0
MaxCacheSSLMisses=10000| Parameter | Description |
|---|---|
| MaxIdle | Maximum idle time in seconds, after which Status reports a non-response PCA |
| MaxCpu | Maximum CPU use rate as a percentage, above which Status reports an overburdened PCA |
| MaxRestart | Maximum number of restarts since the last Status report, above which Status reports the count |
| MaxCacheSSLMisses | When an SSL session record comes in for decryption, it is checked to see if decryption cipher info for that session is in the cache. If not, it is counted as a cache miss. These misses can happen if Passive Capture was restarted and began capturing in-progress SSL sessions or it has exceeded the default 10,000 concurrent SSL session cache entries and the LRU entries were deleted. |
Canister threshold parameters
[CanisterThresholds]
CanisterDiskPctFree=5
WaitToBeEval=20000
WaitToBeLongTermed=20000
UnEvaluatedHits=10000
UnIndexedSessions=20000
MaxLssnDisplayCount=7| Parameter | Description |
|---|---|
| CanisterDiskPctFree | Minimum disk space as a percentage, below which Status reports as an error |
| WaitToBeEval | Maximum number of sessions waiting to be evaluated, above which Status reports as an error |
| WaitToBeLongTermed | Maximum number of sessions waiting to be closed and moved to the Long Term Canister on disk, above which Status reports as an error |
| UnEvaluatedHits | Maximum number of hits that have not yet been evaluated, above which Status reports as an error |
| UnIndexedSessions | Maximum number of sessions that have not been indexed, above which Status reports as an error |
| MaxLssnDisplayCount | Maximum number of updated LSSN records to be displayed. There is no upper limit to this setting |
Report threshold parameters
These thresholds pertain to the report database activities.
[ReportThresholds]
ReportInvalidIndexDelay=86400
DefaultMaxInvalidIndexPaths=12| Parameter | Description |
|---|---|
| ReportInvalidIndexDelay | Maximum number of seconds to wait for an invalid index to be corrected, after which it is reported as an error |
| DefaultMaxInvalidIndexPaths | Maximum number of invalid index paths, above which Status reports as an error |
Ignore Event List parameters
Configure events from the Application Event Log to ignore for inclusion in the Status report.
Event_<n>=[EventSource],[Category],[EventID],[MessageType]
Event_1=TeaLeaf Report Service,TeaLeafAlert,ALL,ALL
Event_2=TeaLeaf Event Reporter,ALL,10241,ALL
Event_3=TeaLeaf Session Indexer,ALL,9833,INFO| Property | Description |
|---|---|
| [EventID] | Number of the event ID or ALL |
| [MessageType] | Type of event to report: ALL, ERROR,
WARN, and INFO |
No Error Event List parameters
Application Event Log events can be specified if you don't want to generate an error in the Status report.
[NoErrorEventList]
Event_1=TeaLeaf Report Service,TeaLeafRS,200,ERROR
Event_2=TeaLeaf Report Service,TeaLeafRS,201,ERROR
Event_3=TeaLeaf Session Indexer,ALL,9845,ERROR
Event_4=TeaLeaf Session Indexer,ALL,9745,ERROR
Event_5=TeaLeaf Session Indexer,ALL,9753,ERROR
Repeat Event List parameters
List the Application Event Log events that should be listed only once. Configuring this section for events that are likely to repeat many times can greatly reduce the size and clutter of your Status reports.
[RepeatEventList]
Event_1=TeaLeaf Alert Service,TeaLeafAS,200,INFO
Event_2=TeaLeaf Alert Service,TeaLeafAS,201,INFO
Event_3=TeaLeaf Session Indexer,Check,12553,INFO
Event_4=TeaLeaf Session Indexer,Control Prog,9834,INFO
Event_5=TeaLeaf Pipeline,All,16,WARN