<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<style>
<!--
@font-face
{font-family:Wingdings}
@font-face
{font-family:"Cambria Math"}
@font-face
{font-family:Calibri}
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif"}
a:link, span.MsoHyperlink
{color:blue;
text-decoration:underline}
a:visited, span.MsoHyperlinkFollowed
{color:purple;
text-decoration:underline}
p.MsoListParagraph, li.MsoListParagraph, div.MsoListParagraph
{margin-top:0in;
margin-right:0in;
margin-bottom:0in;
margin-left:.5in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif"}
span.EmailStyle17
{font-family:"Arial","sans-serif";
color:#1F497D}
.MsoChpDefault
{}
@page WordSection1
{margin:1.0in 1.0in 1.0in 1.0in}
div.WordSection1
{}
ol
{margin-bottom:0in}
ul
{margin-bottom:0in}
-->
</style>
</head>
<body lang="EN-US" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:12.0pt; font-family:"Arial","sans-serif"; color:#1F497D">Has anyone been successful at something like this?</span></p>
<p class="MsoNormal"><span style="font-size:12.0pt; font-family:"Arial","sans-serif"; color:#1F497D"> </span></p>
<p class="MsoNormal"><span style="font-size:12.0pt; font-family:"Arial","sans-serif"; color:#1F497D">I am monitoring a process where there should be at least 1 running but no more than 1. These processes are running on a windows server (BBWin 0.12) and reporting
back to my Xymon server (4.3.0) on Ubuntu (10.04).</span></p>
<p class="MsoNormal"><span style="font-size:12.0pt; font-family:"Arial","sans-serif"; color:#1F497D"> </span></p>
<p class="MsoNormal"><span style="font-size:12.0pt; font-family:"Arial","sans-serif"; color:#1F497D">Easy (analysis.cfg):</span></p>
<p class="MsoNormal"><span style="font-size:12.0pt; font-family:"Arial","sans-serif"; color:#1F497D">HOST=reallycoolserver</span></p>
<p class="MsoNormal"><span style="font-size:12.0pt; font-family:"Arial","sans-serif"; color:#1F497D"> PROC galaxy_hitch_guide.exe 1 1 red</span></p>
<p class="MsoNormal"><span style="font-size:12.0pt; font-family:"Arial","sans-serif"; color:#1F497D"> </span></p>
<p class="MsoNormal"><span style="font-size:12.0pt; font-family:"Arial","sans-serif"; color:#1F497D">Ok, so on occasion some special people will run an additional process manually and this happens often and is acceptable. So, I would like the alert above to
have an initial duration of say 240 prior to alerting.</span></p>
<p class="MsoNormal"><span style="font-size:12.0pt; font-family:"Arial","sans-serif"; color:#1F497D"> </span></p>
<p class="MsoNormal"><span style="font-size:12.0pt; font-family:"Arial","sans-serif"; color:#1F497D">Easy (alerts.cfg):</span></p>
<p class="MsoNormal"><span style="font-size:12.0pt; font-family:"Arial","sans-serif"; color:#1F497D">HOST=reallycoolserver</span></p>
<p class="MsoNormal"><span style="font-size:12.0pt; font-family:"Arial","sans-serif"; color:#1F497D"> MAIL me@here.com DURATION>240 REPEAT=30 FORMAT=TEXT</span></p>
<p class="MsoNormal"><span style="font-size:12.0pt; font-family:"Arial","sans-serif"; color:#1F497D">STOP</span></p>
<p class="MsoNormal"><span style="font-size:12.0pt; font-family:"Arial","sans-serif"; color:#1F497D"> </span></p>
<p class="MsoNormal"><span style="font-size:12.0pt; font-family:"Arial","sans-serif"; color:#1F497D">So, this seems all well and good except in 2 other cases:</span></p>
<p class="MsoListParagraph" style="text-indent:-.25in"><span style="font-size:12.0pt; font-family:"Arial","sans-serif"; color:#1F497D"><span style="">-<span style="font:7.0pt "Times New Roman"">
</span></span></span><span style="font-size:12.0pt; font-family:"Arial","sans-serif"; color:#1F497D">If another monitored process on reallycoolserver fails, it will also be delayed 240 minutes.</span></p>
<p class="MsoListParagraph" style="text-indent:-.25in"><span style="font-size:12.0pt; font-family:"Arial","sans-serif"; color:#1F497D"><span style="">-<span style="font:7.0pt "Times New Roman"">
</span></span></span><span style="font-size:12.0pt; font-family:"Arial","sans-serif"; color:#1F497D">If an unacceptable condition with coolthing.exe such as 20 of them running.</span></p>
<p class="MsoNormal"><span style="font-size:12.0pt; font-family:"Arial","sans-serif"; color:#1F497D"> </span></p>
<p class="MsoNormal"><span style="font-size:12.0pt; font-family:"Arial","sans-serif"; color:#1F497D">So, I thought that GROUPS would be the way to go:</span></p>
<p class="MsoNormal"><span style="font-size:12.0pt; font-family:"Arial","sans-serif"; color:#1F497D"> </span></p>
<p class="MsoNormal"><span style="font-size:12.0pt; font-family:"Arial","sans-serif"; color:#1F497D">Analysis.cfg:</span></p>
<p class="MsoNormal"><span style="font-size:12.0pt; font-family:"Arial","sans-serif"; color:#1F497D">HOST=reallycoolserver</span></p>
<p class="MsoNormal"><span style="font-size:12.0pt; font-family:"Arial","sans-serif"; color:#1F497D"> PROC galaxy_hitch_guide.exe 1 20 red GROUP=fish</span></p>
<p class="MsoNormal"><span style="font-size:12.0pt; font-family:"Arial","sans-serif"; color:#1F497D"> </span></p>
<p class="MsoNormal"><span style="font-size:12.0pt; font-family:"Arial","sans-serif"; color:#1F497D">HOST=reallycoolserver</span></p>
<p class="MsoNormal"><span style="font-size:12.0pt; font-family:"Arial","sans-serif"; color:#1F497D"> PROC galaxy_hitch_guide.exe 1 1 red GROUP=pints</span></p>
<p class="MsoNormal"><span style="font-size:12.0pt; font-family:"Arial","sans-serif"; color:#1F497D"> </span></p>
<p class="MsoNormal"><span style="font-size:12.0pt; font-family:"Arial","sans-serif"; color:#1F497D">Alerts.cfg:</span></p>
<p class="MsoNormal"><span style="font-size:12.0pt; font-family:"Arial","sans-serif"; color:#1F497D">HOST=reallycoolserver GROUP=fish</span></p>
<p class="MsoNormal"><span style="font-size:12.0pt; font-family:"Arial","sans-serif"; color:#1F497D"> MAIL me@here.com DURATION>5 REPEAT=10 FORMAT=TEXT GROUP=fish</span></p>
<p class="MsoNormal"><span style="font-size:12.0pt; font-family:"Arial","sans-serif"; color:#1F497D">STOP</span></p>
<p class="MsoNormal"><span style="font-size:12.0pt; font-family:"Arial","sans-serif"; color:#1F497D"> </span></p>
<p class="MsoNormal"><span style="font-size:12.0pt; font-family:"Arial","sans-serif"; color:#1F497D">HOST=reallycoolserver GROUP=pints</span></p>
<p class="MsoNormal"><span style="font-size:12.0pt; font-family:"Arial","sans-serif"; color:#1F497D"> MAIL me@here.com DURATION>240 REPEAT=10 FORMAT=TEXT GROUP=pints</span></p>
<p class="MsoNormal"><span style="font-size:12.0pt; font-family:"Arial","sans-serif"; color:#1F497D">STOP</span></p>
<p class="MsoNormal"><span style="font-size:12.0pt; font-family:"Arial","sans-serif"; color:#1F497D"> </span></p>
<p class="MsoNormal"><span style="font-size:12.0pt; font-family:"Arial","sans-serif"; color:#1F497D">I have tried to arrange these in a variety of ways:</span></p>
<p class="MsoListParagraph" style="text-indent:-.25in"><span style="font-size:12.0pt; font-family:"Arial","sans-serif"; color:#1F497D"><span style="">-<span style="font:7.0pt "Times New Roman"">
</span></span></span><span style="font-size:12.0pt; font-family:"Arial","sans-serif"; color:#1F497D">A single HOST entry in analysis.cfg with the same proc defined twice as above. The color will change correctly but the alerts do not behave right.</span></p>
<p class="MsoListParagraph" style="text-indent:-.25in"><span style="font-size:12.0pt; font-family:"Arial","sans-serif"; color:#1F497D"><span style="">-<span style="font:7.0pt "Times New Roman"">
</span></span></span><span style="font-size:12.0pt; font-family:"Arial","sans-serif"; color:#1F497D">A group only entry in alerts.cfg</span></p>
<p class="MsoListParagraph" style="text-indent:-.25in"><span style="font-size:12.0pt; font-family:"Arial","sans-serif"; color:#1F497D"><span style="">-<span style="font:7.0pt "Times New Roman"">
</span></span></span><span style="font-size:12.0pt; font-family:"Arial","sans-serif"; color:#1F497D">Using EXGROUP following the HOST entry to exclude one of the groups</span></p>
<p class="MsoListParagraph" style="text-indent:-.25in"><span style="font-size:12.0pt; font-family:"Arial","sans-serif"; color:#1F497D"><span style="">-<span style="font:7.0pt "Times New Roman"">
</span></span></span><span style="font-size:12.0pt; font-family:"Arial","sans-serif"; color:#1F497D">Using EXGROUP following the MAIL entry to exclude one of the groups</span></p>
<p class="MsoNormal"><span style="font-size:12.0pt; font-family:"Arial","sans-serif"; color:#1F497D"> </span></p>
<p class="MsoNormal"><span style="font-size:12.0pt; font-family:"Arial","sans-serif"; color:#1F497D">Any ideas?</span></p>
<p class="MsoNormal" style=""><span style="font-size:12.0pt; font-family:"Arial","sans-serif"; color:#1F497D">Thanks,
</span></p>
<p class="MsoNormal" style=""><span style="font-size:12.0pt; font-family:"Arial","sans-serif"; color:#1F497D">John
</span></p>
<p class="MsoNormal" style=""><span style="font-size:12.0pt; font-family:"Arial","sans-serif"; color:#1F497D">_____________________________________________________________________
</span></p>
<p class="MsoNormal"><span style="font-size:12.0pt; font-family:"Arial","sans-serif"; color:#1F497D">John Rothlisberger</span></p>
<p class="MsoNormal"><span style="font-size:12.0pt; font-family:"Arial","sans-serif"; color:#1F497D">IT Strategy, Infrastructure & Security - Technology Growth Platform</span></p>
<p class="MsoNormal"><span style="font-size:12.0pt; font-family:"Arial","sans-serif"; color:#1F497D">TGP for Business Process Outsourcing</span></p>
<p class="MsoNormal"><span style="font-size:12.0pt; font-family:"Arial","sans-serif"; color:#1F497D">Accenture</span></p>
<p class="MsoNormal"><span style="font-size:12.0pt; font-family:"Arial","sans-serif"; color:#1F497D">312.693.3136 office<b></b></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt; font-family:"Arial","sans-serif"; color:#1F497D">_____________________________________________________________________
</span></p>
<p class="MsoNormal"> </p>
</div>
<br>
<hr>
<font face="Arial" color="Gray" size="2">Subject to local law, communications with Accenture and its affiliates including telephone calls and emails (including content), may be monitored by our systems for the purposes of security and the assessment of internal
compliance with Accenture policy.<br>
______________________________________________________________________________________<br>
<br>
www.accenture.com<br>
</font>
</body>
</html>