<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
Not sure if this could be the problem, but your DURATION parameter in
the MAIL line just says "DURATION>6". Maybe hours is the default,
and you need to change it to DURATION>6m (like your second use of it
on the last line)?<br>
<br>
-Charles<br>
<br>
Kauffman, Tom wrote:
<blockquote
cite="mid5B3853EEF769544ABD6EEC79788A0639074A0A23@EXVS2.nibco.com"
type="cite">
<pre wrap="">I've a problem with my running 4.03RC1 (yeah, I know :-) that doesn't
seem to change with 4.2 Alpha.
With this alert_config set:
HOST=%(whq-sapcon-1|whq-sapcon-2) EXSERVICE=msgs
SCRIPT=/usr/local/hobbit/server/ext/pg/sms oracle_echelon
SERVICE=telnet,svcs,procs color=RED DURATION>6m REPEAT=4h
MAIL techsupt@localhost SERVICE=telnet,svcs,procs <b>DURATION>6</b>
REPEAT=4h
MAIL techsupt@localhost UNMATCHED DURATION>6m REPEAT=4h
I get this when running the test:
00018172 2006-04-05 11:42:36 Matching host:service:page
'whq-sapcon-1:telnet:' against rule line 140
00018172 2006-04-05 11:42:36 *** Match with
'HOST=%(whq-sapcon-1|whq-sapcon-2) EXSERVICE=msgs' ***
00018172 2006-04-05 11:42:36 Matching host:service:page
'whq-sapcon-1:telnet:' against rule line 141
00018172 2006-04-05 11:42:36 Failed
'SCRIPT=/usr/local/hobbit/server/ext/pg/sms oracle_echelon
SERVICE=telnet,svcs,procs color=RED DURATION>6m REPEAT=4h' (min.
duration 0<360)
00018172 2006-04-05 11:42:36 Matching host:service:page
'whq-sapcon-1:telnet:' against rule line 142
00018172 2006-04-05 11:42:36 Failed 'MAIL techsupt@localhost
SERVICE=telnet,svcs,procs DURATION>6 REPEAT=4h' (min. duration 0<360)
00018172 2006-04-05 11:42:36 Matching host:service:page
'whq-sapcon-1:telnet:' against rule line 143
00018172 2006-04-05 11:42:36 Failed 'MAIL techsupt@localhost UNMATCHED
DURATION>6m REPEAT=4h' (min. duration 0<360)
So if I'm reading this correctly, my 'duration>6m' is being interpreted
as 'duration>6h'. The intent here is to require two failed tests before
paging. Where have I gone wrong?
Tom Kauffman
NIBCO, Inc
CONFIDENTIALITY NOTICE: This email and any attachments are for the
exclusive and confidential use of the intended recipient. If you are not
the intended recipient, please do not read, distribute or take action in
reliance upon this message. If you have received this in error, please
notify us immediately by return email and promptly delete this message
and its attachments from your computer system. We do not waive
attorney-client or work product privilege by the transmission of this
message.
To unsubscribe from the hobbit list, send an e-mail to
<a class="moz-txt-link-abbreviated" href="mailto:hobbit-unsubscribe@hswn.dk">hobbit-unsubscribe@hswn.dk</a>
</pre>
</blockquote>
<br>
</body>
</html>