Monitoring CIFS utilization on VNX5500

Firstly, welcome to the forums, and above all, thank you for being an EMC customer.

Please consider moving this question as-is (no need to recreate) to the proper forum for maximum visibility.  Questions written to the users' own "Discussions" space don't get the same amount of attention and can go unanswered for a long time.

You can do so by selecting "Move" under ACTIONS along the upper-right.  Then search for and select: "VNX Support Forum".

VNX Support Forum

Within Unisphere have you seen the "Storage Usage" (and maybe even the "Storage Projection") notifications available via the following breadcrumb trail?

System > Monitoring and Alerts > Notifications for File

It can send an email or an SNMP trap.  It is worth noting though that it is at the file system level (and not at a per share level if that is what you are looking for?).

Configure the system to generate a notification when file system usage exceeds certain limits

In the Unisphere software, you can create individualized threshold notifications for file systems. For example, you can notify when a particular file system hits 80 percent usage and also notify when a different file system hits 85 percent usage. The Unisphere software defines these notifications as resource notifications.

1. Configure DNS to enable email notification:

$ nas_cs -set -dns_domain -search_domain [,...] -dns_servers [,...]

where:

= domain name of the primary Control Station

= DNS domains searched

= IPv4 or IPv6 addresses of the DNS servers

Most of the time, DNS configuration is done at the time of system implementation.

Note: Steps 1–3, 8,and 9 can be done by using the Unisphere software by selecting System ➤ Monitoring and Alerts ➤ Notifications ➤ Storage Usage. The actions are limited to email and trap.

2. Create a new notification configuration file named /nas/site/my_eventlog.cfg by copying /nas/sys/nas_eventlog.cfg to my_eventlog.cfg.

3. Use a text editor to add the following statements to my_eventlog.cfg:

# CFS High Water Mark Event Control

# notification for the file system size threshold exceeded

#

facilitypolicy 1:27,7

disposition range=1-1, logfile "/nas/log/sys_log"

disposition range=1-1, mail "stor_admin_01@nasdocs.emc.com"

disposition range=1-1, mail "stor_admin_02@nasdocs.emc.com"

disposition range=1-1, mail "stor_admin_03@nasdocs.emc.com"

disposition range=1-1, trap "/nas/site/trap.cfg 12"

where:

facilitypolicy 1:27 = dispositions that need to be applied to events in the CFS

facility (facility ID 27) of the DART component (component ID 1).

7 = severity-level threshold (captures events of severity 7 or lower).

disposition range=1-1 = events 1 through 1, which equates to the CFS event "Crossed the fs (file system) size threshold." Event ID 1 is the event ID of the fs threshold event.

logfile = entry added to the /nas/log/sys_log file for events 1 through 1.

stor_admin_01@nasdocs.emc.com, stor_admin_02@nasdocs.emc.com, and stor_admin_03@nasdocs.emc.com = email addresses that receive email notification.

Replace these with one or more email addresses at the company.

12 = arbitrary, yet unique, trap number you associate with the event in the MIB (code shown in step 5).

Determine events associated with a facility on page 40 provides information about determining which events are associated with which facilities.

4. Set up the SNMP Manager by adding the following line to the file /nas/site/trap.cfg:

snmpmanager ; communityname

where:

= IPv4 or IPv6 address, hostname, or fully qualified domain name of the SNMP Manager that gets the traps.

= community name to use for authentication with the SNMP Manager. Use alphanumeric characters and the special characters ~ ! @ # $ % ^ * + = { } : ? _ to specify the community name. Check with the site manager for what to use in place of public.

5. Modify the MIB, found at /nas/sys/emccelerra.mib, to include the following lines:

celCFS TRAP-TYPE

ENTERPRISE emcCelerra

VARIABLES {celEvent}

DESCRIPTION

"Trap message will be sent when a file system exceeds the threshold."

::=12

where:

12 = arbitrary, yet unique, trap number for the event you specified in the my_eventlog.cfg

file.

Note: Save a copy of the modified MIB in another location because it is overwritten when the system is upgraded. On HP OpenView, load the MIB by using Options ➤ Load/Unload MIBs:SNMP.

6. Configure MIB on the SNMP Manager.

7. Ensure that the Control Station name is in the /etc/hosts file:

# Do not remove the following line, or various programs

# requiring network functionality will fail.

127.0.0.1 localhost.localdomain localhost

where:

= Control Station name and is the name of domain that includes the mail server. Substitute Control Station and domain information for the ones in the example.

8. Using the full pathname, load the new notification configuration file by using the following command:

$ nas_event -Load /nas/site/my_eventlog.cfg

Output:

EventLog : will load /nas/site/my_eventlog.cfg...done

Note: You must unload the configuration file before making additional changes. You must specify the absolute path of the configuration file to unload.

9. Verify that the new notifications (email and traps) have been accepted by using the following commands:

$ nas_event -list -action mail

or

$ nas_event -list -action trap

Note: Mail is not a default action. Until an event is configured for mail notification, the command nas_event -list -action mail returns an error.

The output should at least ; CFS(27)

BaseID Severity Brief_Description

1 WARNING(4) filesystem size threshold (${usageHWM,2,%d}%)

crossed

(fs ${mountPath,55,%s})

When the used space in a file system exceeds the threshold, an SNMP trap message and an email notification are sent to the file system administrator. The /usr/sbin/snmptrapd daemon must be started on the Control Station to display SNMP trap messages. Send a test SNMP trap on page 47 provides more information.

The trap message on the SNMP Manager looks like this:

Output

Feb 6 13:17:43 2008 CFS:4:1 Slot 3: 1191865801: filesystem size threshold

(90%) crossed (fs /ufs1)

Note

The 1 in CFS:4:1 indicates the CFS event "Crossed the fs (file system) size threshold" and the Data Mover (Slot 3) and

the mount point of the file system (/ufs1) involved are shown.

An example of an email notification follows:

Output

To: root@matisse-cs0.rtp.dg.com

Subject: EMCServer matisse-cs0, Component - DART, Facility - CFS, Severity

- WARNING

Feb 6 13:17:43 2008 DART:CFS:WARNING:1 Slot 3: 1191865801: filesystem

size threshold (90%) crossed (fs /ufs1)

Please mark my answer as "correct/helpful" if it helps.

roll your own script, look into nas_fs -query