<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<meta name="Generator" content="Microsoft Word 12 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
{mso-style-priority:99;
mso-style-link:"Balloon Text Char";
margin:0cm;
margin-bottom:.0001pt;
font-size:8.0pt;
font-family:"Tahoma","sans-serif";}
span.BalloonTextChar
{mso-style-name:"Balloon Text Char";
mso-style-priority:99;
mso-style-link:"Balloon Text";
font-family:"Tahoma","sans-serif";}
span.EmailStyle19
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:windowtext;}
span.EmailStyle20
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.EmailStyle21
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.EmailStyle22
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.EmailStyle24
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-GB" link="blue" vlink="purple">
<!--ppd1000048--><!--ppd1000049--><!--ppd1000056--><!--ppd1000050--><!--ppd1000052-->
<div class="WordSection1">
<p class="MsoNormal"><span style="color:#1F497D">Hi,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">You may have a point on the delay criteria. I’ll try taking that out.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">Thanks!<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><br>
Carl<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<br>
<div style="WIDTH: 375px"><img style="MARGIN: 0px" border="0" alt="Rakon Logo" src="cid:91e60de77b654f5cad0e8319511962e2"></div>
<br>
<div style="WIDTH: 375px"><font face="Calibri">Carl Inglis </font> <font size="2" face="Calibri"><b><br>
Systems Administrator</b><br>
<br>
<b>Rakon UK Limited</b><br>
</font><font size="1" face="Calibri">Dowsett House, Sadler Road, Lincoln LN6 3RS, United Kingdom<br>
Tel: +44 (0)1522 812630 | Fax:+44 (0) 1522 812664 | Mob: +44 (0) 7786 552915</font><br>
<font color="#34b233" size="1" face="Calibri">Carl.Inglis@rakon.com | www.rakon.com</font></div>
<br>
<div style="WIDTH: 375px"><font size="1" face="Calibri">Winner of the 2010 Lincolnshire Business of the Year Award<br>
<br>
This message together with any attachments contains confidential information and may be<br>
subject to privilege. If you are not the intended recipient you may not distribute it in any<br>
way, you must notify the sender immediately and delete any copies of the message along<br>
with its attachments.</font></div>
<div style="border:none;border-left:solid blue 1.5pt;padding:0cm 0cm 0cm 4.0pt">
<div>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0cm 0cm 0cm">
<p class="MsoNormal"><b><span lang="EN-US" style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">From:</span></b><span lang="EN-US" style="font-size:10.0pt;font-family:"Tahoma","sans-serif""> Johan Sjöberg [mailto:Johan.Sjoberg@deltamanagement.se]
<br>
<b>Sent:</b> 15 December 2011 11:15<br>
<b>To:</b> Carl Inglis<br>
<b>Subject:</b> RE: Alerting - I'm not doing it right...<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><span lang="SV" style="color:#1F497D">Hi.</span><span lang="SV"><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="SV" style="color:#1F497D"> </span><span lang="SV"><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="color:#1F497D">Maybe it doesn’t count as received if the delay of the first line hasn’t been exceeded yet?</span><span lang="SV"><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="color:#1F497D">I have to admit I haven’t even seen this UNMATCHED feature before, so I thought all matching lines would generate an alert.</span><span lang="SV"><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="color:#1F497D"> </span><span lang="SV"><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="color:#1F497D">/Johan</span><span lang="SV"><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="color:#1F497D"> </span><span lang="SV"><o:p></o:p></span></p>
<div style="border:none;border-left:solid blue 1.5pt;padding:0cm 0cm 0cm 4.0pt">
<div>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0cm 0cm 0cm">
<p class="MsoNormal"><b><span lang="EN-US" style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">From:</span></b><span lang="EN-US" style="font-size:10.0pt;font-family:"Tahoma","sans-serif""> Carl Inglis [<a href="mailto:Carl.Inglis@rakon.com">mailto:Carl.Inglis@rakon.com</a>]
<br>
<b>Sent:</b> den 15 december 2011 12:12<br>
<b>To:</b> Johan Sjöberg<br>
<b>Subject:</b> RE: Alerting - I'm not doing it right...</span><span lang="SV"><o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><span lang="SV"> <o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">Hi Johan,</span><span lang="SV"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> </span><span lang="SV"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">The relevant section of the Info page looks like this:</span><span lang="SV"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> </span><span lang="SV"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">winUpdates <a href="mailto:carl.inglis@rakon.com">
carl.inglis@rakon.com</a> (R,S) 1d - 1d - purple,yellow,red</span><span lang="SV"><o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:36.0pt;text-indent:36.0pt"><span style="color:#1F497D"><a href="mailto:carl.inglis@rakon.com">carl.inglis@rakon.com</a> (R,S,U) - - 1h - purple,yellow,red</span><span lang="SV"><o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:36.0pt;text-indent:36.0pt"><span style="color:#1F497D"> </span><span lang="SV"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">It would seem that I have misunderstood the UNMATCHED entry then.
</span><span lang="SV"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> </span><span lang="SV"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">The man page says “</span>The alert is sent to this recipient ONLY if no other recipients received an alert for this event. “<span lang="SV"><o:p></o:p></span></p>
<p class="MsoNormal"> <span lang="SV"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">I thought that it meant that for any given pass through alerts.cfg (“this event”) the UNMATCHED recipient would only be emailed if the event hadn’t triggered any other recipient.</span><span lang="SV"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> </span><span lang="SV"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">Regards,</span><span lang="SV"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><br>
Carl</span><span lang="SV"><o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:21.0pt"><span style="color:#1F497D"> </span><span lang="SV"><o:p></o:p></span></p>
<div>
<p class="MsoNormal"><span lang="SV"><o:p> </o:p></span></p>
</div>
<div style="border:none;border-left:solid blue 1.5pt;padding:0cm 0cm 0cm 4.0pt">
<div>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0cm 0cm 0cm">
<p class="MsoNormal"><b><span lang="EN-US" style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">From:</span></b><span lang="EN-US" style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">
<a href="mailto:xymon-bounces@xymon.com">xymon-bounces@xymon.com</a> <a href="mailto:[mailto:xymon-bounces@xymon.com]">
[mailto:xymon-bounces@xymon.com]</a> <b>On Behalf Of </b>Johan Sjöberg<br>
<b>Sent:</b> 15 December 2011 10:31<br>
<b>To:</b> <a href="mailto:xymon@xymon.com">xymon@xymon.com</a><br>
<b>Subject:</b> Re: [Xymon] Alerting - I'm not doing it right...</span><span lang="SV"><o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"> <span lang="SV"><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="SV" style="color:#1F497D">Hi.</span><span lang="SV"><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="SV" style="color:#1F497D"> </span><span lang="SV"><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="color:#1F497D">How does it look in the ”Info” page for that server? Both alert lines would match that server, thus giving you an alert every hour, with an extra e-mail once per day, after a day, unless the server
is in the printers page.</span><span lang="SV"><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="color:#1F497D">If you don’t want the second alert line to match that server/test, you need to exclude it.</span><span lang="SV"><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="color:#1F497D"> </span><span lang="SV"><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="color:#1F497D">/Johan</span><span lang="SV"><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="color:#1F497D"> </span><span lang="SV"><o:p></o:p></span></p>
<div style="border:none;border-left:solid blue 1.5pt;padding:0cm 0cm 0cm 4.0pt">
<div>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0cm 0cm 0cm">
<p class="MsoNormal"><b><span lang="EN-US" style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">From:</span></b><span lang="EN-US" style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">
<a href="mailto:xymon-bounces@xymon.com">xymon-bounces@xymon.com</a> [<a href="mailto:xymon-bounces@xymon.com">mailto:xymon-bounces@xymon.com</a>]
<b>On Behalf Of </b>Carl Inglis<br>
<b>Sent:</b> den 15 december 2011 11:03<br>
<b>To:</b> <a href="mailto:xymon@xymon.com">xymon@xymon.com</a><br>
<b>Subject:</b> [Xymon] Alerting - I'm not doing it right...</span><span lang="SV"><o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><span lang="SV"> <o:p></o:p></span></p>
<p class="MsoNormal">Hi folks,<span lang="SV"><o:p></o:p></span></p>
<p class="MsoNormal"> <span lang="SV"><o:p></o:p></span></p>
<p class="MsoNormal">I’m sure this is going to be something really silly that I’ve missed – but I’ve been pulling my hair out over this one for a couple of days now.<span lang="SV"><o:p></o:p></span></p>
<p class="MsoNormal"> <span lang="SV"><o:p></o:p></span></p>
<p class="MsoNormal"><b>alerts.cfg</b><span lang="SV"><o:p></o:p></span></p>
<p class="MsoNormal"> <span lang="SV"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Courier New""><a href="mailto:$EMAIL_ALERT=carl.inglis@rakon.com">$EMAIL_ALERT=carl.inglis@rakon.com</a></span><span lang="SV"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Courier New"">$LIN_WINDOWS_PROBLEMS=$EMAIL_ALERT</span><span lang="SV"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Courier New""> </span><span lang="SV"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Courier New"">HOST=%lin(.*) SERVICE=%win(.*)</span><span lang="SV"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Courier New""> MAIL $LIN_WINDOWS_PROBLEMS REPEAT=24h DURATION>1d RECOVERED STOP</span><span lang="SV"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Courier New""> </span><span lang="SV"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Courier New"">HOST=* EXPAGE=printers</span><span lang="SV"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Courier New""> MAIL $EMAIL_ALERT REPEAT=1h RECOVERED UNMATCHED STOP</span><span lang="SV"><o:p></o:p></span></p>
<p class="MsoNormal"> <span lang="SV"><o:p></o:p></span></p>
<p class="MsoNormal">When the host “lin-apps-01” has a yellow alert on it’s “winUpdates” services, I expect it to shout about it once every 24h. It is, however, shouting about it once every hour.<span lang="SV"><o:p></o:p></span></p>
<p class="MsoNormal"> <span lang="SV"><o:p></o:p></span></p>
<p class="MsoNormal">It’s clear that the first HOST line is being ignored – I suspect my regex is incorrect in some way.<span lang="SV"><o:p></o:p></span></p>
<p class="MsoNormal"> <span lang="SV"><o:p></o:p></span></p>
<p class="MsoNormal">Any thoughts or pointers would be appreciated.<span lang="SV"><o:p></o:p></span></p>
<p class="MsoNormal"> <span lang="SV"><o:p></o:p></span></p>
<p class="MsoNormal">Regards,<span lang="SV"><o:p></o:p></span></p>
<p class="MsoNormal"><br>
Carl<span lang="SV"><o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><span lang="SV"><o:p> </o:p></span></p>
</div>
</div>
</div>
<br>
<div style="WIDTH: 375px"><img style="MARGIN: 0px" border="0" alt="Winner of the NZ Hi-Tech Awards 2011 - Hi-Tech Company of the Decade" src="cid:23690d145bcf44338d5a8a9d383d48ed"></div>
<div style="WIDTH: 375px"><br>
<font size="1" face="Verdana"><em>Rakon UK Ltd is a limited company registered in England and Wales.
<br>
Registered Office: Dowsett House, Sadler Road, Lincoln LN6 3RS <br>
Company Registration Number: 5128090. <br>
<br>
Please be aware that Rakon UK Limited may monitor email traffic data<br>
including the date, time, subject line, sender and recipients for the <br>
purposes of security and usage monitoring. Automated monitoring <br>
systems may also be applied to ascertain whether incoming/outgoing <br>
emails are likely to contain viruses, other destructive devices or <br>
inappropriate content. </em></font></div>
</body>
</html>