[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

RE: Default groupings

I didn't get a response last week so I'll explain the issue.

If you set a local test without a GROUP label it will cause all alerts
that match to fire, regardless of whether they have a GROUP label or
not.

To use the GROUP functionality properly every test that requires a
different group will require a label for every entry for a host/service,
depending on how you've configured your hobbit-alerts.cfg  I would like
the default to be to send a GROUP label with every set of tests and have
the hobbit-alerts.cfg to have a default group for matching when no group
is assigned.

Looking at the code it doesn't seem like it'd be too hard to add.  Add a
default in getalertgroups() for the client,  maybe after the processing
of the line in load_alertconfig() (line 653 from the 7/12 snapshot) for
the server.

Let me know what you think.

Jason

_____________________________________________
From: Kruse, Jason K. 
Sent: Monday, July 10, 2006 9:51 AM
To: 'hobbit (at) hswn.dk'
Subject: Default groupings

Would it be possible to add a default group label for each line
automatically in the client configuration so you don't have to qualify
them on every entry?  It doesn't really matter what label name is used.
It would make it easier to configure the alerts since all rules would
have a group associated and you won't get excessive notifications on
items that don't have a group label.

Jason