Home
  •  

Process SSH Service Health

Microsoft.Linux.RHEL.4.Process.Ssh.Monitor (UnitMonitor)

Red Hat Enterprise Linux Server 4 Process SSH Monitor

Knowledge Base article:

Summary

This process monitor watches for the SSHD process to be running. SSHD is the daemon for ssh. It replaces rlogin and rsh, and provides secure encrypted communication between two untrusted hosts over an insecure network. There should be at least one process running at all times.

Causes

A failure indicates that the ssh service on the system is down.

Resolutions

Check the service by running ps -ef | grep sshd or by viewing the diagnostic in the Operations Manager Console. Start it by running the command "service sshd start" or by clicking the recovery link in the Operations Manager Console.

For root cause analysis, first check the system logfiles (/var/log/messages) and (/var/log/secure), and view any related entries at the time of failure.

Element properties:

TargetMicrosoft.Linux.RHEL.4.OperatingSystem
Parent MonitorSystem.Health.AvailabilityState
CategoryAvailabilityHealth
EnabledTrue
Alert GenerateTrue
Alert SeverityError
Alert PriorityNormal
Alert Auto ResolveTrue
Monitor TypeMicrosoft.Unix.WSMan.Process.Status.MonitorType
RemotableTrue
AccessibilityPublic
Alert Message
Red Hat Enterprise Linux Server 4 Process SSH Monitor Alert
The SSH daemon on server {0} is not running.
RunAsDefault

Source Code:

<UnitMonitor ID="Microsoft.Linux.RHEL.4.Process.Ssh.Monitor" Accessibility="Public" Target="Microsoft.Linux.RHEL.4.OperatingSystem" TypeID="Unix!Microsoft.Unix.WSMan.Process.Status.MonitorType" Enabled="true" ParentMonitorID="SystemHealth!System.Health.AvailabilityState">

  <Category>AvailabilityHealth</Category>

  <AlertSettings AlertMessage="Microsoft.Linux.RHEL.4.Process.Ssh.AlertMessage">

    <AlertOnState>Error</AlertOnState>

    <AutoResolve>true</AutoResolve>

    <AlertPriority>Normal</AlertPriority>

    <AlertSeverity>Error</AlertSeverity>

    <AlertParameters>

      <AlertParameter1>$Target/Host/Property[Type="Unix!Microsoft.Unix.Computer"]/PrincipalName$</AlertParameter1>

    </AlertParameters>

  </AlertSettings>

  <OperationalStates>

    <OperationalState HealthState="Success" MonitorTypeStateID="Running" ID="Running"/>

    <OperationalState HealthState="Error" MonitorTypeStateID="NotRunning" ID="NotRunning"/>

  </OperationalStates>

  <Configuration>

    <TargetSystem>$Target/Host/Property[Type="Unix!Microsoft.Unix.Computer"]/NetworkName$</TargetSystem>

    <ProcessName>sshd</ProcessName>

    <Interval>300</Interval>

  </Configuration>

</UnitMonitor>