<html>
<head>
<style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 12pt;
font-family:Calibri
}
--></style></head>
<body class='hmmessage'><div dir='ltr'>Can anyone shed any light for me? <br><br><br>larry:/xymondev/L:=> date -d "Tue Apr 16 22:01:23 EDT 2013" +%s<br>1366164083<br><br>this works: [[note *** Match with '$XCD' ***]]<br><br>$XCD=MAIL user@user.com FORMAT=PLAIN RECOVERED TIME=*:2101:0729 DURATION>5<br>#--------------------------------------------------------------------<br><br>HOST=* SERVICE=conn<br> MAIL user@user.com FORMAT=PLAIN RECOVERED TIME=*:2101:0729 DURATION>5 <br> $XCD <br><br><br><br>larry:/xymondev/-L:=> gelaptopp conn --duration=6 --time=1366164083 <<br>00009651 2013-04-16 22:01:23 send_alert gelaptopp:conn state Paging<br>00009651 2013-04-16 22:01:23 Matching host:service:dgroup:page 'gelaptopp:conn:NONE:test' against rule line 132<br>00009651 2013-04-16 22:01:23 *** Match with 'HOST=* SERVICE=conn' ***<br>00009651 2013-04-16 22:01:23 Matching host:service:dgroup:page 'gelaptopp:conn:NONE:test' against rule line 133<br>00009651 2013-04-16 22:01:23 *** Match with 'MAIL user@user.com FORMAT=PLAIN RECOVERED TIME=*:2101:0729 DURATION>5' ***<br>00009651 2013-04-16 22:01:23 Mail alert with command '/var/spool/mail/xymondev1 "Xymon [12345] gelaptopp:conn CRITICAL (RED)" user@user.com'<br>00009651 2013-04-16 22:01:23 Matching host:service:dgroup:page 'gelaptopp:conn:NONE:test' against rule line 134<br>00009651 2013-04-16 22:01:23<b> *** Match with '$XCD' ***</b><br>00009651 2013-04-16 22:01:23 Mail alert with command '/var/spool/mail/xymondev1 "Xymon [12345] gelaptopp:conn CRITICAL (RED)" user@user.com'<br>00009651 2013-04-16 22:01:23 Matching host:service:dgroup:page 'gelaptopp:conn:NONE:test' against rule line 151<br>00009651 2013-04-16 22:01:23 Failed 'HOST=* SERVICE=msgs' (service not in include list)<br>00009651 2013-04-16 22:01:23 Matching host:service:dgroup:page 'gelaptopp:conn:NONE:test' against rule line 155<br>00009651 2013-04-16 22:01:23 Failed 'HOST=* SERVICE=* EXSERVICE=conn,memory' (service excluded)<br><br><br><br>this works -- moved only the duration part to be on the line within the HOST paragraph [[*** Match with '$XCD DURATION>5' ***]]<br><br>$XCD=MAIL user@user.com FORMAT=PLAIN RECOVERED <b>TIME=*:2101:0729 </b><br>#--------------------------------------------------------------------<br><br>HOST=* SERVICE=conn<br> MAIL user@user.com FORMAT=PLAIN RECOVERED TIME=*:2101:0729 DURATION>5 <br> $XCD <b>DURATION>5 </b><br><br><br>larry:/xymondev/ -L:=> /xymondev/dev1/server/bin/xymond_alert --test gelaptopp conn --duration=6 --time=1366164><br>00009878 2013-04-16 22:01:23 send_alert gelaptopp:conn state Paging<br>00009878 2013-04-16 22:01:23 Matching host:service:dgroup:page 'gelaptopp:conn:NONE:test' against rule line 132<br>00009878 2013-04-16 22:01:23 *** Match with 'HOST=* SERVICE=conn' ***<br>00009878 2013-04-16 22:01:23 Matching host:service:dgroup:page 'gelaptopp:conn:NONE:test' against rule line 133<br>00009878 2013-04-16 22:01:23 *** Match with 'MAIL user@user.com FORMAT=PLAIN RECOVERED TIME=*:2101:0729 DURATION>5' ***<br>00009878 2013-04-16 22:01:23 Mail alert with command '/var/spool/mail/xymondev1 "Xymon [12345] gelaptopp:conn CRITICAL (RED)" user@user.com'<br>00009878 2013-04-16 22:01:23 Matching host:service:dgroup:page 'gelaptopp:conn:NONE:test' against rule line 134<br>00009878 2013-04-16 22:01:23 <b>*** Match with '$XCD DURATION>5' ***</b><br>00009878 2013-04-16 22:01:23 Mail alert with command '/var/spool/mail/xymondev1 "Xymon [12345] gelaptopp:conn CRITICAL (RED)" user@user.com'<br>00009878 2013-04-16 22:01:23 Matching host:service:dgroup:page 'gelaptopp:conn:NONE:test' against rule line 151<br>00009878 2013-04-16 22:01:23 Failed 'HOST=* SERVICE=msgs' (service not in include list)<br>00009878 2013-04-16 22:01:23 Matching host:service:dgroup:page 'gelaptopp:conn:NONE:test' against rule line 155<br>00009878 2013-04-16 22:01:23 Failed 'HOST=* SERVICE=* EXSERVICE=conn,memory' (service excluded)<br><br><br><b>If I try and move the TIME as well it fails to match. Why?</b><br><br>$XCD=MAIL user@user.com FORMAT=PLAIN RECOVERED <br>#--------------------------------------------------------------------<br><br>HOST=* SERVICE=conn<br> MAIL user@user.com FORMAT=PLAIN RECOVERED TIME=*:2101:0729 DURATION>5 <br> $XCD TIME=*:2101:0729 DURATION>5 <br><br><br><br>larry:/xymondev/ -L:=> /xymondev/dev1/server/bin/xymond_alert --test gelaptopp conn --duration=6 --time=1366164><br>00010046 2013-04-16 22:01:23 send_alert gelaptopp:conn state Paging<br>00010046 2013-04-16 22:01:23 Matching host:service:dgroup:page 'gelaptopp:conn:NONE:test' against rule line 132<br>00010046 2013-04-16 22:01:23 *** Match with 'HOST=* SERVICE=conn' ***<br>00010046 2013-04-16 22:01:23 Matching host:service:dgroup:page 'gelaptopp:conn:NONE:test' against rule line 133<br>00010046 2013-04-16 22:01:23 *** Match with 'MAIL user@user.com FORMAT=PLAIN RECOVERED TIME=*:2101:0729 DURATION>5' ***<br>00010046 2013-04-16 22:01:23 Mail alert with command '/var/spool/mail/xymondev1 "Xymon [12345] gelaptopp:conn CRITICAL (RED)" user@user.com'<br>00010046 2013-04-16 22:01:23 Matching host:service:dgroup:page 'gelaptopp:conn:NONE:test' against rule line 151<br>00010046 2013-04-16 22:01:23 Failed 'HOST=* SERVICE=msgs' (service not in include list)<br>00010046 2013-04-16 22:01:23 Matching host:service:dgroup:page 'gelaptopp:conn:NONE:test' against rule line 155<br>00010046 2013-04-16 22:01:23 Failed 'HOST=* SERVICE=* EXSERVICE=conn,memory' (service excluded)<br><br><br>this does not work either ... <br>$XCD=MAIL user@user.com FORMAT=PLAIN RECOVERED DURATION>5<br>#--------------------------------------------------------------------<br><br>HOST=* SERVICE=conn<br> MAIL user@user.com FORMAT=PLAIN RECOVERED TIME=*:2101:0729 DURATION>5 <br> $XCD TIME=*:2101:0729 <br><br><br>00013510 2013-04-16 22:01:23 send_alert gelaptopp:conn state Paging<br>00013510 2013-04-16 22:01:23 Matching host:service:dgroup:page 'gelaptopp:conn:NONE:test' against rule line 132<br>00013510 2013-04-16 22:01:23 *** Match with 'HOST=* SERVICE=conn' ***<br>00013510 2013-04-16 22:01:23 Matching host:service:dgroup:page 'gelaptopp:conn:NONE:test' against rule line 133<br>00013510 2013-04-16 22:01:23 *** Match with 'MAIL user@user.com FORMAT=PLAIN RECOVERED TIME=*:2101:0729 DURATION>5' ***<br>00013510 2013-04-16 22:01:23 Mail alert with command '/var/spool/mail/xymondev1 "Xymon [12345] gelaptopp:conn CRITICAL (RED)" user@user.com'<br>00013510 2013-04-16 22:01:23 Matching host:service:dgroup:page 'gelaptopp:conn:NONE:test' against rule line 151<br>00013510 2013-04-16 22:01:23 Failed 'HOST=* SERVICE=msgs' (service not in include list)<br>00013510 2013-04-16 22:01:23 Matching host:service:dgroup:page 'gelaptopp:conn:NONE:test' against rule line 155<br>00013510 2013-04-16 22:01:23 Failed 'HOST=* SERVICE=* EXSERVICE=conn,memory' (service excluded)<br><br> </div></body>
</html>