HP-UX Workload Manager User's Guide

WLM quick start: the essentials for using WLM
How to put an application under WLM control
Chapter 2 85
Secure compartments: Workload separation by secure
compartment
You can place processes in workload groups according to the secure
compartments the processes run in. The HP-UX feature Security
Containment, available starting with HP-UX 11i v2, allows you to create
secure compartments. You specify your mapping between secure
compartments and workload groups in the scomp statement. Here is an
example:
prm {
groups = OTHERS : 1,
database : 2,
webapp : 3;
scomp = db_comp : database,
wa_comp : webapp;
}
Besides the default OTHERS group, two workload groups are defined in
this example: database and webapp. Processes running in the db_comp
secure compartment are placed in workload group database, while
processes running in secure compartment wa_comp are placed in
workload group webapp. Processes not running in any of the two secure
compartments defined in this example are placed in OTHERS by default.
For more information on setting up secure compartment records, see
“Assigning secure compartments to workload groups (optional)” on
page 171.
Process maps: Workload separation using your own
criteria
Using the procmap statement, you define your own criteria for placing
processes in workload groups. You establish your criteria by specifying a
particular workload group plus a script or command and its arguments
that gathers and outputs PIDs of processes to be placed in that group.
WLM spawns the command or script periodically at 30-second intervals.
At each interval, WLM places the identified processes in the specified
group. You can use process maps to automatically place processes that
you might otherwise have to move manually by using the prmmove or
prmrun commands.