<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; color: rgb(0, 0, 0); font-size: 14px; font-family: Calibri, sans-serif; ">
<div>Hi folks. I'm still trying to clean up the analysis.cfg and alerts.cfg files to get emails going the way we expect them to when things happen.</div>
<div>In the example below, I have a group in analysis.cfg called SRMDBASE. In alerts.cfg I set up a macro called $MAC_SRMDBASE. I want any PROC or SVC alerts for the host called FileMaker01 to send an email to the srmdbase email address. So in alerts I have
the section</div>
<div> GROUP=SRMDBASE</div>
<div>$MAC_SRMDBASE</div>
<div><br>
</div>
<div>We stopped the PROC fmserver.exe on filemaker01 host and the SRMINFRA team got an email but the srmdbase team didn't.</div>
<div><br>
</div>
<div>Can someone point me to some insight ?</div>
<div><br>
</div>
<div>Thanks!</div>
<div><br>
</div>
<div>Don K</div>
<div><br>
</div>
<div><br>
</div>
<div>PS – here are configuration samples from analysis.cfg and alerts.cfg</div>
<div><br>
</div>
<div><br>
</div>
<div>I reference groups called SRMDBASE, SRMINFRA, and SRMAPPS in the analysis.cfg file as below:</div>
<div><br>
</div>
<div>
<div># FileMaker Dev Server</div>
<div>HOST=FileMaker01 GROUP=SRMDBASE</div>
<div> PROC fmadminserver.exe 1 1</div>
<div> PROC fmserver.exe 1 1</div>
<div> PROC fmshelper.exe 1 1</div>
<div> PROC fmxdbc_listener.exe 1 1</div>
<div> PROC inetinfo.exe 1 1</div>
<div> SVC GxCVD(Instance001) status=started startup=automatic</div>
<div> SVC GxEvMgrC(Instance001) status=started startup=automatic</div>
<div> SVC FileMaker_Server status=started startup=automatic</div>
</div>
<div><br>
</div>
<div><br>
</div>
<div>In the alerts.cfg file I setup macros named MAC_SRMDBASE, MAC_SRMINFRA, and MAC_SRMAPPS</div>
<div><br>
</div>
<div>These macro defintions are below:</div>
<div>
<div># MACRO DEFINITIONS GO HERE</div>
<div># USE $MAC_ for the prefix on any macro defintion so it is easily identified as a macro</div>
<div> </div>
<div>$MAC_SRMAPPS=SCRIPT /home/xymon/server/ext/html_mail.pl srmapps@company.com FORMAT=TEXT</div>
<div><br>
</div>
<div>$MAC_SRMDBASE=SCRIPT /home/xymon/server/ext/html_mail.pl srmdbase@company.com FORMAT=TEXT</div>
<div><br>
</div>
<div>$MAC_SRMINFRA=SCRIPT /home/xymon/server/ext/html_mail.pl srminfra@company.com FORMAT=TEXT</div>
</div>
<div><br>
</div>
<div><br>
</div>
<div>Lower in the alerts.cfg file I refer to the Macros created by using a GROUP declaration and then the MACRO as below:</div>
<div>
<div>GROUP=SRMDBASE</div>
<div>$MAC_SRMDBASE</div>
</div>
<div><br>
</div>
<div># SERVICE ALERTS GO HERE</div>
<div>
<div>SERVICE=cpu,disk,memory,procs TIME=W:0800:1600 RECOVERED</div>
<div>$MAC_SRMINFRA</div>
</div>
<div><br>
</div>
<div># PAGE ALERTS GO HERE</div>
<div>
<div>PAGE=Applications/app1/app1prod TIME=W:0800:1600 RECOVERED</div>
<div>$MAC_SRMAPPS</div>
</div>
<div><br>
</div>
<div><br>
</div>
<div><br>
</div>
<div>HERE IS THE BASE ANALYSIS.CFG FILE:</div>
<div><br>
</div>
<div>
<div>#RULE is host time etc</div>
<div>host=* TIME:W:0800:1600</div>
<div><br>
</div>
<div># This Setting says to ignore any disk that starts with /Volumes</div>
<div>DISK %\/Volumes* IGNORE</div>
<div># This setting is to monitor cron only on Unix or Redhat systems - not windows or mac</div>
<div>PROC cron GROUP=SRMINFRA EXCLASS=win32,darwin</div>
<div># This setting is for Unix / MAC server systems</div>
<div>LOAD 8.0 12.0 GROUP=SRMINFRA EXCLASS=win32</div>
<div><br>
</div>
<div>###########</div>
<div># 6/5/12 Adding in specific host analysis criteria</div>
<div># For Service monitoring - name of host and svc is CASE-sensitve</div>
<div># Can get values out of xymon by clicking on the server's info proc or svcs link</div>
<div><br>
</div>
<div># SERVER for various AFP Shares</div>
<div>HOST=AFPServer01</div>
<div><span class="Apple-tab-span" style="white-space:pre"></span>PROC adclient</div>
<div> PROC adbindd</div>
<div> PROC cnid_dbd</div>
<div> PROC nmbd</div>
<div> PROC smbd</div>
<div> PROC winbindd</div>
<div><br>
</div>
</div>
<div>
<div># FileMaker Dev Server</div>
<div>HOST=FileMaker01 GROUP=SRMDBASE</div>
<div> PROC fmadminserver.exe 1 1</div>
<div> PROC fmserver.exe 1 1</div>
<div> PROC fmshelper.exe 1 1</div>
<div> PROC fmxdbc_listener.exe 1 1</div>
<div> PROC inetinfo.exe 1 1</div>
<div> SVC GxCVD(Instance001) status=started startup=automatic</div>
<div> SVC GxEvMgrC(Instance001) status=started startup=automatic</div>
<div> SVC FileMaker_Server status=started startup=automatic</div>
</div>
<div><br>
</div>
<div>
<div>HOST=SQL01 GROUP=SRMDBASE</div>
<div> MEMSWAP 75 90</div>
<div> SVC ReportServer status=started startup=automatic</div>
<div> SVC MSSQLSERVER status=started startup=automatic</div>
<div># SVC SQLBrowser status=started startup=automatic</div>
<div> SVC SQLSERVERAGENT status=started startup=automatic</div>
<div> SVC SQLWriter status=started startup=automatic</div>
<div> PORT STATE=LISTENING LOCAL=%[.:](1433)$ MIN=1 TEXT=SQL_Port_1433</div>
<div> PROC ReportingServicesService.exe 1 1</div>
<div> PROC sqlservr.exe 1 1 TEXT=SQLServer</div>
<div><br>
</div>
</div>
<div>
<div># MYSQL Servers</div>
<div>HOST=mysql1.company.com,mysql2.company.com,mysql3.company.com GROUP=SRMDBASE</div>
<div> PORT STATE=LISTEN LOCAL=%[.:](3306)$ TEXT=MySQL Ports</div>
<div> PROC mysqld 1 TEXT=MySQL Process</div>
<div> DISK * 98 100</div>
<div><br>
</div>
</div>
<div>
<div># This is for windows servers</div>
<div>CLASS=win32 GROUP=SRMINFRA</div>
<div> MEMSWAP 75 90</div>
<div> DISK G 101 101</div>
<div> LOAD 92 97 # Load thresholds are in %</div>
<div> PROC BBWin.exe 1 1</div>
<div> SVC BBWin status=started startup=automatic</div>
<div> PORT STATE=LISTENING MIN=0 TRACK=Listen TEXT=Listen</div>
<div><br>
</div>
<div>DEFAULT</div>
<div> <span class="Apple-tab-span" style="white-space:pre"> </span># These are the defaults if not over-ridden above.</div>
<div> UP<span class="Apple-tab-span" style="white-space:pre"> </span>1h</div>
<div> LOAD 8.0 12.0 GROUP=SRMINFRA</div>
<div> DISK * 95 97 GROUP=SRMINFRA</div>
<div> MEMPHYS 100 101</div>
<div> MEMSWAP 50 80</div>
<div> MEMACT 90 97</div>
<div><br>
</div>
<div><br>
</div>
</div>
</body>
</html>