<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META content="text/html; charset=us-ascii" http-equiv=Content-Type>
<META name=GENERATOR content="MSHTML 9.00.8112.16443"></HEAD>
<BODY>
<DIV><SPAN class=916530413-28052012><FONT size=2 face=Arial>2 possible bugs or
documentation errors...</FONT></SPAN></DIV>
<DIV><SPAN class=916530413-28052012><FONT size=2
face=Arial></FONT></SPAN> </DIV>
<DIV><SPAN class=916530413-28052012><FONT size=2
face=Arial></FONT></SPAN> </DIV>
<DIV><SPAN class=916530413-28052012><FONT size=2
face=Arial><STRONG>Summary:</STRONG></FONT></SPAN></DIV>
<DIV><SPAN class=916530413-28052012><FONT size=2
face=Arial></FONT></SPAN> </DIV>
<DIV><SPAN class=916530413-28052012><FONT size=2 face=Arial>1.
xymond_alert interprets duration as minutes although the documentation says it
is specified as seconds.</FONT></SPAN></DIV>
<DIV><SPAN class=916530413-28052012><FONT size=2 face=Arial>2. > is
interpreted as >= (greater than or equal to) instead of > (greater than)
in alerts.cfg.</FONT></SPAN></DIV>
<DIV><SPAN class=916530413-28052012><FONT size=2
face=Arial></FONT></SPAN> </DIV>
<DIV><SPAN class=916530413-28052012><FONT size=2
face=Arial></FONT></SPAN> </DIV>
<DIV><SPAN class=916530413-28052012><FONT size=2 face=Arial>
<DIV><SPAN class=916530413-28052012><FONT size=2 face=Arial><SPAN
class=916530413-28052012><STRONG>Version
affected:</STRONG></SPAN></FONT></SPAN></DIV>
<DIV><SPAN class=916530413-28052012><FONT size=2 face=Arial><SPAN
class=916530413-28052012></SPAN></FONT></SPAN></DIV>
<DIV><SPAN class=916530413-28052012><FONT size=2 face=Arial><SPAN
class=916530413-28052012></SPAN></FONT></SPAN><SPAN
class=916530413-28052012><FONT size=2
face=Arial><STRONG>4.3.7</STRONG></FONT></SPAN></DIV>
<DIV><SPAN class=916530413-28052012></SPAN> </DIV>
<DIV><SPAN class=916530413-28052012></SPAN> </DIV>
<DIV><SPAN class=916530413-28052012></SPAN><STRONG>Steps to
reproduce:</STRONG></FONT></SPAN></DIV></DIV>
<DIV><SPAN class=916530413-28052012><FONT size=2
face=Arial></FONT></SPAN> </DIV>
<DIV><SPAN class=916530413-28052012><FONT size=2
face=Arial>alerts.cfg:</FONT></SPAN></DIV>
<DIV><SPAN class=916530413-28052012><FONT size=2
face=Arial></FONT></SPAN> </DIV>
<DIV><SPAN class=916530413-28052012><FONT size=2
face=Arial>HOST=CS1<BR> MAIL $pg-sebsms SERVICE=svcs
COLOR=red DURATION>10m REPEAT=30 RECOVERED<BR></DIV>
<DIV></FONT></SPAN><SPAN class=916530413-28052012><FONT size=2
face=Arial></FONT></SPAN> </DIV>
<DIV><SPAN class=916530413-28052012><FONT size=2 face=Arial>Also tried without
the the m for minutes, as this is supposed to be the
default.</FONT></SPAN></DIV>
<DIV><SPAN class=916530413-28052012><FONT size=2
face=Arial></FONT></SPAN> </DIV>
<DIV><SPAN class=916530413-28052012><FONT size=2
face=Arial>/home/hobbit/server/bin/xymond_alert --test CS1 svcs --color=red
--duration=11 | grep Mail<BR>00009396 2012-05-28 14:09:46 Mail alert with
command '/var/spool/mail/root "Xymon [12345] CS1:svcs CRITICAL (RED)" <A
href="mailto:syntecseb@sms2email.com'"><email address removed></A><A
href="mailto:syntecseb@sms2email.com'">'</A><BR></DIV></FONT></SPAN>
<DIV><SPAN class=916530413-28052012><FONT size=2
face=Arial>/home/hobbit/server/bin/xymond_alert --test CS1 svcs --color=red
--duration=10 | grep Mail<BR>00009483 2012-05-28 14:09:50 Mail alert with
command '/var/spool/mail/root "Xymon [12345] CS1:svcs CRITICAL (RED)" <A
href="mailto:syntecseb@sms2email.com'"><email address removed></A><A
href="mailto:syntecseb@sms2email.com'">'</A><BR></DIV></FONT></SPAN>
<DIV>
<DIV><SPAN class=916530413-28052012><FONT size=2
face=Arial>/home/hobbit/server/bin/xymond_alert --test CS1 svcs --color=red
--duration=9 | grep Mail<BR><nothing></FONT></SPAN></DIV>
<DIV><SPAN class=916530413-28052012><FONT size=2
face=Arial></FONT></SPAN> </DIV>
<DIV><SPAN class=916530413-28052012><FONT size=2 face=Arial>But man xymond_alert
says:</FONT></SPAN></DIV>
<DIV><SPAN class=916530413-28052012><FONT size=2 face=Arial>--duration=SECONDS
The SECONDS parameter is the duration of the alert in
seconds.</FONT></SPAN></DIV>
<DIV><SPAN class=916530413-28052012><FONT size=2
face=Arial></FONT></SPAN> </DIV>
<DIV><SPAN class=916530413-28052012><FONT size=2 face=Arial>However, as you can
see above, the xymond_alert parameter is behaving as if it was in minutes (or
the <SPAN class=916530413-28052012><FONT size=2 face=Arial>alerts.cfg
rule is behaving as if it was in seconds). And the > is behaving
as if it were >=.</FONT></SPAN></FONT></SPAN></DIV>
<DIV><SPAN class=916530413-28052012><FONT size=2 face=Arial><SPAN
class=916530413-28052012></SPAN></FONT></SPAN> </DIV>
<DIV><SPAN class=916530413-28052012><FONT size=2 face=Arial><SPAN
class=916530413-28052012></SPAN></FONT></SPAN> </DIV>
<DIV><SPAN class=916530413-28052012><FONT size=2 face=Arial><SPAN
class=916530413-28052012><STRONG>Expected
behaviour:</STRONG></SPAN></FONT></SPAN></DIV>
<DIV><SPAN class=916530413-28052012><FONT size=2 face=Arial><SPAN
class=916530413-28052012></SPAN></FONT></SPAN> </DIV>
<DIV><SPAN class=916530413-28052012><FONT size=2 face=Arial><SPAN
class=916530413-28052012>1. xymond_alert interprets duration as
seconds.</SPAN></FONT></SPAN></DIV>
<DIV><SPAN class=916530413-28052012><FONT size=2 face=Arial><SPAN
class=916530413-28052012>2. > is interpreted as > (greater than) in
alerts.cfg.</SPAN></FONT></SPAN></DIV>
<DIV><SPAN class=916530413-28052012><FONT size=2 face=Arial><SPAN
class=916530413-28052012></SPAN></FONT></SPAN><SPAN
class=916530413-28052012><FONT size=2 face=Arial><SPAN
class=916530413-28052012></SPAN></FONT></SPAN> </DIV>
<DIV><SPAN class=916530413-28052012><FONT size=2 face=Arial><SPAN
class=916530413-28052012></SPAN></FONT></SPAN> </DIV>
<DIV><SPAN class=916530413-28052012><FONT size=2 face=Arial><SPAN
class=916530413-28052012><STRONG>Other
Suggestion:</STRONG></SPAN></FONT></SPAN></DIV>
<DIV><SPAN class=916530413-28052012><FONT size=2 face=Arial><SPAN
class=916530413-28052012></SPAN></FONT></SPAN> </DIV>
<DIV><SPAN class=916530413-28052012><FONT size=2 face=Arial><SPAN
class=916530413-28052012>alerts.cfg should accept durations specified in seconds
(with an s suffix) so that alert parameters can be more accurately defined as
some tests or status changes may be occurring more often than once a
minute.</SPAN></FONT></SPAN><SPAN class=916530413-28052012><FONT size=2
face=Arial></DIV></FONT></SPAN></DIV><!-- Converted from text/rtf format -->
<P align=left><SPAN lang=en-gb><FONT size=2 face=Arial>Kind
regards,</FONT></SPAN> </P>
<P><SPAN lang=en-gb><FONT size=2 face=Arial><SPAN
class=916530413-28052012>SebA</SPAN></FONT></SPAN></P></BODY></HTML>