[hobbit] Double and missing alerts

[Dominique Frise]

scott.brehm at l-3com.com wrote:
> I've been getting double alert mails for one of my servers, and no
> alerts for others. I'm wondering if the problem is related to my using
> the UNMATCHED rule. It's not listed on the man page for
> hobbit-alerts.cfg so I probably copied it from my earlier Big Brother
> config without thinking. Is there an UNMATCHED equivalent in Hobbit?
> 
> Here's the current rules. I'm getting double e-mails for all tests on
> atscm-setnas2.set.local. I'm also getting no alerts for the http test on
> two servers that don't match the rules here. I didn't realize that until
> I followed the info link for them and saw No Alerts Defined in the
> alerting table.
> 
> HOST=* SERVICE=conn
> 	MAIL scott.brehm at x.com COLOR=red
> 	
> HOST=%atscm
> 	MAIL scott.brehm at x.com EXSERVICE=conn COLOR=red
> 
> HOST=%atscs
> 	MAIL scott.brehm at x.com EXSERVICE=conn DURATION>10 COLOR=red
> 	MAIL phil.lane at x.com DURATION>10 COLOR=red
> 
> HOST=%atssl
> 	MAIL scott.brehm at x.com EXSERVICE=conn DURATION>10 COLOR=red
> 	MAIL stephanie.greer at x.com DURATION>10 COLOR=red
> 
> HOST=%atswv
> 	MAIL scott.brehm at x.com EXSERVICE=conn DURATION>10 COLOR=red
> 	MAIL stephanie.greer at x.com DURATION>10 COLOR=red
> 
> HOST=atscmmail1.ats.ad.local SERVICE=pop3
> 	MAIL phil.lane at x.com COLOR=red
> 
> HOST=setnas1.set.local
> 	MAIL scott.brehm at x.com EXSERVICE=conn COLOR=red
> 	MAIL charles.negus at x.com COLOR=red
> 
> HOST=atscm-setnas2.set.local
> 	MAIL charles.negus at x.com COLOR=red
> 
> UNMATCHED
> 	MAIL scott.brehm at x.com COLOR=red
> 
> 
> Scott Brehm
> 
> IT Manager
> L-3 Communications - Applied Technologies
> 3394 Carmel Mountain Rd, San Diego CA, 92121
> 858-720-4035
> 
> 
> To unsubscribe from the hobbit list, send an e-mail to
> hobbit-unsubscribe at hswn.dk
> 
> 

As catch all rule, we have this at the end of our hobbit-alerts.cfg

HOST=*
    root at localhost 24h RECOVERED UNMATCHED


Dominique
UNIL - University of Lausanne