<div dir="ltr">The default repeat interval (set in xymonserver.cfg) is 30 minutes. <div><br></div><div style>Thanks,</div><div style>Larry Barber</div></div><div class="gmail_extra"><br><br><div class="gmail_quote">On Mon, May 13, 2013 at 10:10 AM, Ward, Martin <span dir="ltr"><<a href="mailto:Martin.Ward@colt.net" target="_blank">Martin.Ward@colt.net</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">My apologies, I hit the "Send" button accidentally, a bit more info would have helped :-(<br>
<br>
I ran the " xymoncmd xymond_alert --test" as you suggested and it is definitely matching on the right entry:<br>
<br>
00019291 2013-05-13 15:52:53 *** Match with 'PAGE=SMARTS HOST=%sm[0-9]* EXSERVICE=files,msgs,ports,cpu' ***<br>
<br>
The lines in the logfile there are:<br>
<br>
PAGE=SMARTS HOST=%sm[0-9]* EXSERVICE=files,msgs,ports,cpu<br>
SCRIPT /opt/xymon/server/ext/<a href="http://html_mail.pl" target="_blank">html_mail.pl</a> <a href="mailto:internalitnoc@colt.net">internalitnoc@colt.net</a> DURATION>1h COLOR=red RECOVERED STOP<br>
<br>
AFAIK this means that the alert should only be sent once, however it is being sent every thirty minutes as the lines from the log file show:<br>
Mon May 13 00:11:27 2013 sm9.lon.oss.colt.net.procs (212.74.77.85) <a href="mailto:internalitnoc@colt.net">internalitnoc@colt.net</a> 1368400263 300<br>
Mon May 13 00:41:31 2013 sm9.lon.oss.colt.net.procs (212.74.77.85) <a href="mailto:internalitnoc@colt.net">internalitnoc@colt.net</a> 1368402066 300<br>
Mon May 13 01:11:50 2013 sm9.lon.oss.colt.net.procs (212.74.77.85) <a href="mailto:internalitnoc@colt.net">internalitnoc@colt.net</a> 1368403886 300<br>
Mon May 13 01:42:03 2013 sm9.lon.oss.colt.net.procs (212.74.77.85) <a href="mailto:internalitnoc@colt.net">internalitnoc@colt.net</a> 1368405699 300<br>
Mon May 13 02:12:13 2013 sm9.lon.oss.colt.net.procs (212.74.77.85) <a href="mailto:internalitnoc@colt.net">internalitnoc@colt.net</a> 1368407508 300<br>
Mon May 13 02:42:21 2013 sm9.lon.oss.colt.net.procs (212.74.77.85) <a href="mailto:internalitnoc@colt.net">internalitnoc@colt.net</a> 1368409316 300<br>
<br>
I cannot fathom why it repeats at all so rather that look for something that isn't there, for now I have forced every alert to repeat every seven days but I would like to understand more about why this is working the way it is rather than the way it is supposed to (or I think it is supposed to!).<br>
<br>
|\/|artin<br>
<div class="im HOEnZb">--<br>
Martin Ward<br>
Manager, Technical Services<br>
Service Operations<br>
<br>
DDI:<a href="tel:%2B44%20%280%29%2020%207863%205218" value="+442078635218">+44 (0) 20 7863 5218</a> / Fax: <a href="tel:%2B44%20%280%2920%207863%209999" value="+442078639999">+44 (0)20 7863 9999</a> / <a href="http://www.colt.net" target="_blank">www.colt.net</a><br>
Colt Technology Services, Unit 12, Powergate Business Park, Volt Avenue, Park Royal, London, NW10 6PW, UK.<br>
<br>
Help reduce your carbon footprint | Think before you print. Registered in England and Wales, registered number 02452736, VAT number GB 645 4205 50<br>
<br>
<br>
> -----Original Message-----<br>
</div><div class="HOEnZb"><div class="h5">> From: Ward, Martin<br>
> Sent: 13 May 2013 16:02<br>
> To: '<a href="mailto:henrik@hswn.dk">henrik@hswn.dk</a>'<br>
> Cc: <a href="mailto:xymon@xymon.com">xymon@xymon.com</a><br>
> Subject: RE: [Xymon] Xymon alerting when it's been told not to<br>
><br>
> I cannot fathom why it repeats at all so rather that look for something that<br>
> isn't there I have forced every alert to repeat every seven days to see if that<br>
> resolves the issue!<br>
><br>
> |\/|<br>
> --<br>
> Martin Ward<br>
> Manager, Technical Services<br>
> Service Operations<br>
><br>
> DDI:<a href="tel:%2B44%20%280%29%2020%207863%205218" value="+442078635218">+44 (0) 20 7863 5218</a> / Fax: <a href="tel:%2B44%20%280%2920%207863%209999" value="+442078639999">+44 (0)20 7863 9999</a> / <a href="http://www.colt.net" target="_blank">www.colt.net</a> Colt<br>
> Technology Services, Unit 12, Powergate Business Park, Volt Avenue, Park<br>
> Royal, London, NW10 6PW, UK.<br>
><br>
> Help reduce your carbon footprint | Think before you print. Registered in<br>
> England and Wales, registered number 02452736, VAT number GB 645 4205<br>
> 50<br>
><br>
><br>
> > -----Original Message-----<br>
> > From: <a href="mailto:henrik@hswn.dk">henrik@hswn.dk</a> [mailto:<a href="mailto:henrik@hswn.dk">henrik@hswn.dk</a>]<br>
> > Sent: 04 March 2013 11:27<br>
> > To: Ward, Martin<br>
> > Cc: <a href="mailto:xymon@xymon.com">xymon@xymon.com</a><br>
> > Subject: Re: [Xymon] Xymon alerting when it's been told not to<br>
> ><br>
</div></div><div class="HOEnZb"><div class="h5">> > On Mon, 4 Mar 2013 09:19:25 +0000, "Ward, Martin"<br>
> > <<a href="mailto:Martin.Ward@colt.net">Martin.Ward@colt.net</a>><br>
> > wrote:<br>
> > > Hi all,<br>
> > ><br>
> > > I have the following in my alerts.cfg:<br>
> > [snip]<br>
> > > Yet I am still getting CPU alerts from <a href="http://ivma2.lon.osspriv.colt.net" target="_blank">ivma2.lon.osspriv.colt.net</a><br>
> ><br>
> > Try running<br>
> > xymoncmd xymond_alert --test <a href="http://ivma2.lon.osspriv.colt.net" target="_blank">ivma2.lon.osspriv.colt.net</a> cpu and<br>
> > look for lines like<br>
> ><br>
> > 00004226 2013-03-04 12:24:11 Matching host:service:dgroup:page<br>
> > 'cscxymweb3.csc.dk:disk:Xymon<br>
> > servers:cscdk/mwsmonitor,cscdk/mwsmonitor'<br>
> > against rule line 1260<br>
> > 00004226 2013-03-04 12:24:11 *** Match with 'MAIL $XYMONADM<br>
> > $XYMONADMREPEAT' ***<br>
> > 00004226 2013-03-04 12:24:11 Mail alert with command '/usr/bin/mail -s<br>
> > "Xymon [12345] cscxymweb3.csc.dk:disk CRITICAL (RED)"<br>
> > <a href="mailto:29236260@sms.csc.dk">29236260@sms.csc.dk</a>'<br>
> > 00004226 2013-03-04 12:24:11 Matching host:service:dgroup:page<br>
> > 'cscxymweb3.csc.dk:disk:Xymon<br>
> > servers:cscdk/mwsmonitor,cscdk/mwsmonitor'<br>
> > against rule line 126<br>
> ><br>
> > to see which rule triggers the alert.<br>
> ><br>
> ><br>
> > Regards,<br>
> > Henrik<br>
<br>
<br>
</div></div><div class="im HOEnZb">[Colt Disclaimer]<br>
This email is from an entity of the Colt group of companies.<br>
Colt Group S.A., K2 Building, Forte 1, 2a rue Albert Borschette, L-1246 Luxembourg, R.C.S. B115679.<br>
Corporate and contact information for our entities can be found at<br>
<a href="http://colt.net/uk/en/Colt-Group-of-Companies/index.htm" target="_blank">http://colt.net/uk/en/Colt-Group-of-Companies/index.htm</a>.<br>
Internet communications are not secure and Colt does not accept<br>
responsibility for the accurate transmission of this message. Content<br>
of this email or its attachments is not legally or contractually binding<br>
unless expressly previously agreed in writing by Colt<br>
<br>
<br>
</div><div class="HOEnZb"><div class="h5">_______________________________________________<br>
Xymon mailing list<br>
<a href="mailto:Xymon@xymon.com">Xymon@xymon.com</a><br>
<a href="http://lists.xymon.com/mailman/listinfo/xymon" target="_blank">http://lists.xymon.com/mailman/listinfo/xymon</a><br>
</div></div></blockquote></div><br></div>