<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Exchange Server">
<!-- converted from rtf --><style><!-- .EmailQuote { margin-left: 1pt; padding-left: 4pt; border-left: #800000 2px solid; } --></style>
</head>
<body>
<font face="Arial" size="3"><span style="font-size:12pt;">
<div><font color="#1F497D">Env: Ubuntu 12.04</font></div>
<div><font color="#1F497D">Xymon 4.3.0</font></div>
<div><font color="#1F497D"> </font></div>
<div><font color="#1F497D">All of my alert rules run external scripts for email/page/etc.</font></div>
<div><font face="Calibri" size="2" color="#1F497D"><span style="font-size:11pt;"> </span></font></div>
<div><font color="#1F497D">I have the alerts.cfg file setup with the most granular items at the top (host specific, followed by page specific).
</font></div>
<div><font face="Calibri" size="2" color="#1F497D"><span style="font-size:11pt;"> </span></font></div>
<div><font color="#1F497D">When I have a rule such as:</font></div>
<div><font color="#1F497D">HOST=webserver1,webserver2 SERVICE=procs COLOR=red,yellow</font></div>
<div><font color="#1F497D"> SCRIPT /home/xymon/server/ext/pg/exalert_web exalert_web REPEAT=30 COLOR=red FORMAT=TEXT DURATION>240</font></div>
<div><font color="#1F497D"> SCRIPT /home/xymon/server/ext/pg/exdigest_web exdigest_web REPEAT=120 FORMAT=TEXT DURATION>120</font></div>
<div><font color="#1F497D">STOP</font></div>
<div><font face="Calibri" size="2" color="#1F497D"><span style="font-size:11pt;"> </span></font></div>
<div><font color="#1F497D">I expect that any alert for “procs” that matches red/yellow will run those scripts if it fits the DURATION or REPEAT rule. If those have not been satisfied, then I expect the searching of rules to go no farther. Well, it seems that
STOP doesn’t really mean STOP.</font></div>
<div><font color="#1F497D"> </font></div>
<div><font color="#1F497D">In my “info” screen where it shows what alerts are triggered for “procs” I see this:</font></div>
<table width="525" style="width:315pt;margin-left:2.4pt;">
<colgroup><col width="63" style="width:37.9pt;"><col width="232" style="width:139.35pt;"><col width="47" style="width:28.55pt;"><col width="15" style="width:9pt;"><col width="47" style="width:28.55pt;"><col width="15" style="width:9pt;"><col width="104" style="width:62.65pt;"></colgroup>
<tbody>
<tr>
<td rowspan="7" style="background-color:black;"><font face="Times New Roman" size="4" color="#D8D8BF"><span style="font-size:13.5pt;background-color:black;">procs</span></font></td>
<td style="background-color:black;"><font face="Tahoma" size="4" color="#FFFFCC"><span style="font-size:13.5pt;background-color:black;">exalert_web</span></font></td>
<td align="center" style="text-align:center;background-color:black;"><font face="Times New Roman" size="4" color="#D8D8BF"><span style="font-size:13.5pt;background-color:black;">4h</span></font></td>
<td align="center" style="text-align:center;background-color:black;"><font face="Times New Roman" size="4" color="#D8D8BF"><span style="font-size:13.5pt;background-color:black;">-</span></font></td>
<td align="center" style="text-align:center;background-color:black;"><font face="Times New Roman" size="4" color="#D8D8BF"><span style="font-size:13.5pt;background-color:black;">30m</span></font></td>
<td align="center" style="text-align:center;background-color:black;"><font face="Times New Roman" size="4" color="#D8D8BF"><span style="font-size:13.5pt;background-color:black;">-</span></font></td>
<td style="background-color:black;"><font face="Times New Roman" size="4" color="#D8D8BF"><span style="font-size:13.5pt;background-color:black;">red</span></font></td>
</tr>
<tr>
<td style="background-color:black;"><font face="Tahoma" size="4" color="#FFFFCC"><span style="font-size:13.5pt;background-color:black;">exdigest_web (S)</span></font></td>
<td align="center" style="text-align:center;background-color:black;"><font face="Times New Roman" size="4" color="#D8D8BF"><span style="font-size:13.5pt;background-color:black;">2h</span></font></td>
<td align="center" style="text-align:center;background-color:black;"><font face="Times New Roman" size="4" color="#D8D8BF"><span style="font-size:13.5pt;background-color:black;">-</span></font></td>
<td align="center" style="text-align:center;background-color:black;"><font face="Times New Roman" size="4" color="#D8D8BF"><span style="font-size:13.5pt;background-color:black;">2h</span></font></td>
<td align="center" style="text-align:center;background-color:black;"><font face="Times New Roman" size="4" color="#D8D8BF"><span style="font-size:13.5pt;background-color:black;">-</span></font></td>
<td style="background-color:black;"><font face="Times New Roman" size="4" color="#D8D8BF"><span style="font-size:13.5pt;background-color:black;">yellow,red</span></font></td>
</tr>
<tr>
<td style="background-color:black;"><font face="Tahoma" size="4" color="#33EBF4"><span style="font-size:13.5pt;background-color:black;">BMC_BEM (R)</span></font></td>
<td align="center" style="text-align:center;background-color:black;"><font face="Times New Roman" size="4" color="#D8D8BF"><span style="font-size:13.5pt;background-color:black;">30m</span></font></td>
<td align="center" style="text-align:center;background-color:black;"><font face="Times New Roman" size="4" color="#D8D8BF"><span style="font-size:13.5pt;background-color:black;">-</span></font></td>
<td align="center" style="text-align:center;background-color:black;"><font face="Times New Roman" size="4" color="#D8D8BF"><span style="font-size:13.5pt;background-color:black;">3d</span></font></td>
<td align="center" style="text-align:center;background-color:black;"><font face="Times New Roman" size="4" color="#D8D8BF"><span style="font-size:13.5pt;background-color:black;">-</span></font></td>
<td style="background-color:black;"><font face="Times New Roman" size="4" color="#D8D8BF"><span style="font-size:13.5pt;background-color:black;">yellow</span></font></td>
</tr>
<tr>
<td style="background-color:black;"><font face="Tahoma" size="4" color="#33EBF4"><span style="font-size:13.5pt;background-color:black;">BMC_BEM (R)</span></font></td>
<td align="center" style="text-align:center;background-color:black;"><font face="Times New Roman" size="4" color="#D8D8BF"><span style="font-size:13.5pt;background-color:black;">-</span></font></td>
<td align="center" style="text-align:center;background-color:black;"><font face="Times New Roman" size="4" color="#D8D8BF"><span style="font-size:13.5pt;background-color:black;">-</span></font></td>
<td align="center" style="text-align:center;background-color:black;"><font face="Times New Roman" size="4" color="#D8D8BF"><span style="font-size:13.5pt;background-color:black;">1d</span></font></td>
<td align="center" style="text-align:center;background-color:black;"><font face="Times New Roman" size="4" color="#D8D8BF"><span style="font-size:13.5pt;background-color:black;">-</span></font></td>
<td style="background-color:black;"><font face="Times New Roman" size="4" color="#D8D8BF"><span style="font-size:13.5pt;background-color:black;">red</span></font></td>
</tr>
<tr>
<td style="background-color:black;"><font face="Tahoma" size="4" color="#33EBF4"><span style="font-size:13.5pt;background-color:black;">exalert_OTHCRIT</span></font></td>
<td align="center" style="text-align:center;background-color:black;"><font face="Times New Roman" size="4" color="#D8D8BF"><span style="font-size:13.5pt;background-color:black;">15m</span></font></td>
<td align="center" style="text-align:center;background-color:black;"><font face="Times New Roman" size="4" color="#D8D8BF"><span style="font-size:13.5pt;background-color:black;">-</span></font></td>
<td align="center" style="text-align:center;background-color:black;"><font face="Times New Roman" size="4" color="#D8D8BF"><span style="font-size:13.5pt;background-color:black;">15m</span></font></td>
<td align="center" style="text-align:center;background-color:black;"><font face="Times New Roman" size="4" color="#D8D8BF"><span style="font-size:13.5pt;background-color:black;">-</span></font></td>
<td style="background-color:black;"><font face="Times New Roman" size="4" color="#D8D8BF"><span style="font-size:13.5pt;background-color:black;">red</span></font></td>
</tr>
<tr>
<td style="background-color:black;"><font face="Tahoma" size="4" color="#33EBF4"><span style="font-size:13.5pt;background-color:black;">Exwarn_OTHCRIT</span></font></td>
<td align="center" style="text-align:center;background-color:black;"><font face="Times New Roman" size="4" color="#D8D8BF"><span style="font-size:13.5pt;background-color:black;">15m</span></font></td>
<td align="center" style="text-align:center;background-color:black;"><font face="Times New Roman" size="4" color="#D8D8BF"><span style="font-size:13.5pt;background-color:black;">-</span></font></td>
<td align="center" style="text-align:center;background-color:black;"><font face="Times New Roman" size="4" color="#D8D8BF"><span style="font-size:13.5pt;background-color:black;">3d</span></font></td>
<td align="center" style="text-align:center;background-color:black;"><font face="Times New Roman" size="4" color="#D8D8BF"><span style="font-size:13.5pt;background-color:black;">-</span></font></td>
<td style="background-color:black;"><font face="Times New Roman" size="4" color="#D8D8BF"><span style="font-size:13.5pt;background-color:black;">yellow</span></font></td>
</tr>
<tr>
<td style="background-color:black;"><font face="Tahoma" size="4" color="#33EBF4"><span style="font-size:13.5pt;background-color:black;">exdigest_OTHCRIT (S)</span></font></td>
<td align="center" style="text-align:center;background-color:black;"><font face="Times New Roman" size="4" color="#D8D8BF"><span style="font-size:13.5pt;background-color:black;">15m</span></font></td>
<td align="center" style="text-align:center;background-color:black;"><font face="Times New Roman" size="4" color="#D8D8BF"><span style="font-size:13.5pt;background-color:black;">-</span></font></td>
<td align="center" style="text-align:center;background-color:black;"><font face="Times New Roman" size="4" color="#D8D8BF"><span style="font-size:13.5pt;background-color:black;">2h</span></font></td>
<td align="center" style="text-align:center;background-color:black;"><font face="Times New Roman" size="4" color="#D8D8BF"><span style="font-size:13.5pt;background-color:black;">-</span></font></td>
<td style="background-color:black;"><font face="Times New Roman" size="4" color="#D8D8BF"><span style="font-size:13.5pt;background-color:black;">yellow,red</span></font></td>
</tr>
<tr>
<td style="background-color:black;"><font face="Calibri" size="2" color="#D8D8BF"><span style="font-size:11pt;background-color:black;"></span></font></td>
<td style="background-color:black;"><font face="Calibri" size="2" color="#33EBF4"><span style="font-size:11pt;background-color:black;"></span></font></td>
<td align="center" style="text-align:center;background-color:black;"><font face="Calibri" size="2" color="#D8D8BF"><span style="font-size:11pt;background-color:black;"></span></font></td>
<td align="center" style="text-align:center;background-color:black;"><font face="Calibri" size="2" color="#D8D8BF"><span style="font-size:11pt;background-color:black;"></span></font></td>
<td align="center" style="text-align:center;background-color:black;"><font face="Calibri" size="2" color="#D8D8BF"><span style="font-size:11pt;background-color:black;"></span></font></td>
<td align="center" style="text-align:center;background-color:black;"><font face="Calibri" size="2" color="#D8D8BF"><span style="font-size:11pt;background-color:black;"></span></font></td>
<td style="background-color:black;"><font face="Calibri" size="2" color="#D8D8BF"><span style="font-size:11pt;background-color:black;"></span></font></td>
</tr>
</tbody>
</table>
<div><font face="Calibri" size="2" color="#1F497D"><span style="font-size:11pt;"><br>
</span></font></div>
<div><font color="#1F497D">The items in white above (first 2 lines if the colors don’t appear correctly) are what I expect to run and nothing else. The final 5 items (in blue, again if the colors show up correctly) are rules that would match the page etc.</font></div>
<div><font face="Calibri" size="2" color="#1F497D"><span style="font-size:11pt;"> </span></font></div>
<div><font color="#1F497D">Why are rules being processed beyond the STOP?</font></div>
<div><font color="#1F497D">Why are some in blue (I’ve always wondered this)?</font></div>
<div><font color="#1F497D">And, as long as I am asking, what does the “(S)” represent?</font></div>
<div><font color="#1F497D"> </font></div>
<div><font face="Calibri" size="2" color="#1F497D"><span style="font-size:11pt;"> </span></font></div>
<div style="margin-top:5pt;margin-bottom:5pt;"><font color="#1F497D">Thanks, </font>
</div>
<div style="margin-top:5pt;margin-bottom:5pt;"><font color="#1F497D">John </font>
</div>
<div><font color="#1F497D">Upcoming PTO: None</font></div>
<div style="margin-top:5pt;margin-bottom:5pt;"><font color="#1F497D">_____________________________________________________________________
</font></div>
<div><font color="#1F497D">John Rothlisberger</font></div>
<div><font color="#1F497D">IT Strategy, Infrastructure & Security - Technology Growth Platform</font></div>
<div><font color="#1F497D">TGP for Business Process Outsourcing</font></div>
<div><font color="#1F497D">Accenture</font></div>
<div><font color="#1F497D">312.693.3136 office</font></div>
<div><font color="#1F497D">_____________________________________________________________________
</font></div>
<div><font face="Calibri" size="2" color="#1F497D"><span style="font-size:11pt;"> </span></font></div>
<div><font face="Calibri" size="2"><span style="font-size:11pt;"> </span></font></div>
<div><font face="Calibri" size="2"><span style="font-size:11pt;"> </span></font></div>
</span></font><br>
<hr>
<font face="Arial" color="Gray" size="1">This message is for the designated recipient only and may contain privileged, proprietary, or otherwise confidential information. If you have received it in error, please notify the sender immediately and delete the
original. Any other use of the e-mail by you is prohibited.<br>
<br>
Where allowed by local law, electronic communications with Accenture and its affiliates, including e-mail and instant messaging (including content), may be scanned by our systems for the purposes of information security and assessment of internal compliance
with Accenture policy.<br>
<br>
______________________________________________________________________________________<br>
<br>
www.accenture.com<br>
</font>
</body>
</html>