Alerting rules - covering 24h interval.

Kii NODA kii.noda at gmail.com
Wed Jan 27 17:55:48 CET 2010


Hi everyone,

In our journey towards completely and successfully deploying Xymon on our
machines we've come over this situation: we want to have an alert coming to
us if the duration is over 30 minutes between 0800 and 2259 AND every 60
minutes between 2300 and 0759 the next day. They need to be repeated every
120 minutes in both cases.

The following group of 3 rules obviously covers what we want to accomplish,
right?
--- cut here ---
        MAIL email at recipient.tld DURATION>60 REPEAT=120 RECOVERED NOTICE
TIME=*:0000:0759
        MAIL email at recipient.tld DURATION>30 REPEAT=120 RECOVERED NOTICE
TIME=*:0800:2259
        MAIL email at recipient.tld DURATION>60 REPEAT=120 RECOVERED NOTICE
TIME=*:2300:2359
--- and here ---

However, we're looking to write the most simple set of rules that would
cover our requirements and would therefore welcome your answers regarding
the following possible variants:

1. Would the following set of rules work given a setting like
"TIME=*:2300:0759"?
--- cut here ---
        MAIL email at recipient.tld DURATION>30 REPEAT=120 RECOVERED NOTICE
TIME=*:0800:2259
        MAIL email at recipient.tld DURATION>60 REPEAT=120 RECOVERED NOTICE
TIME=*:2300:0759
--- and here ---

2. Or maybe would the following work? In this case, wouldn't this duplicate
alerts that happen to have a duration of 70 minutes, for example?
--- cut here ---
        MAIL email at recipient.tld DURATION>30 REPEAT=120 RECOVERED NOTICE
TIME=*:0800:2259
        MAIL email at recipient.tld DURATION>60 REPEAT=120 RECOVERED NOTICE
--- and here ---

3. We have also been considering using "STOP" as below but this won't work
when we need to alert 3 similar recipients. Any thoughts?
--- cut here ---
        MAIL email at recipient.tld DURATION>30 REPEAT=120 RECOVERED NOTICE
TIME=*:0800:2259 STOP
        MAIL email at recipient.tld DURATION>60 REPEAT=120 RECOVERED NOTICE
--- and here ---

We are definitely looking forward to see the answers that users more
experienced than ourselves would provide.
Thanks in advance for your help.
-- 
kN
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.xymon.com/pipermail/xymon/attachments/20100127/6d7a7479/attachment.html>


More information about the Xymon mailing list