<DIV>Scenario:</DIV> <DIV> We have several mail servers that are doing spam filtering. When they receive a spam definition update there is a brief recycle of the smtp services. This causes Hobbit's smtp test to go "colorful" (red or yellow). </DIV> <DIV> To avoid being notified every time there was a momentary blip due to this update cycle I setup an alert rule as follows:</DIV> <DIV> PAGE=mail_servers</DIV> <DIV> MAIL <my <A href="mailto:address@my">address@my</A> domain> SERVICE=smtp DURATION>2m</DIV> <DIV> </DIV> <DIV>This works as desired by suppressing alerts for times when the smtp service goes from green to red or yellow and then back to green in less than two minutes.</DIV> <DIV> </DIV> <DIV> </DIV>
<DIV>PROBLEM:</DIV> <DIV> The above rule does not alert me when the smtp service goes from green to red for 1 min, then red to yellow for 1 min, then yellow back to red for 1 min... etc. In this case since no one event is longer than two minutes I'm not getting alerts even though my servers are non-green for a longer period of time. The way I understand the DURATION keyword is that it keeps a timer on the present state (red, yellow, purple) and that when the state changes the timer is reset. What I want is a way to keep track of the total duration of non-green events. Whereas a blip when the smtp service recycles is acceptable, I need to know if it struggles to return to green afterward.</DIV> <DIV> </DIV> <DIV>DESIRED STATE:</DIV> <DIV> I want to be alerted when the smtp service is anything other than green for more than two minutes. This could be a single red or yellow event
lasting more than two minutes or it could be a string of connected red and yellow events that when combined are greater than two minutes in length.</DIV> <DIV> </DIV> <DIV>Any help you can offer is appreciated. If you need more info or clarification please let me know.</DIV> <DIV> </DIV> <DIV>Thanks,</DIV> <DIV>Danny</DIV><p>
<hr size=1>Be a better friend, newshound, and
know-it-all with Yahoo! Mobile. <a href="http://us.rd.yahoo.com/evt=51733/*http://mobile.yahoo.com/;_ylt=Ahu06i62sR8HDtDypao8Wcj9tAcJ "> Try it now.</a>