<html><body><div style="color:#000; background-color:#fff; font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;font-size:10px">Hobbit version 4.2.3<br class=""><div id="yui_3_16_0_1_1423127419195_6425"><br></div><div id="yui_3_16_0_1_1423127419195_6417"><br></div><div dir="ltr" id="yui_3_16_0_1_1423127419195_6394">hobbit-alerts.cfg entry:</div><div dir="ltr" id="yui_3_16_0_1_1423127419195_6474"><br></div><div dir="ltr" id="yui_3_16_0_1_1423127419195_6473">..</div><div dir="ltr" id="yui_3_16_0_1_1423127419195_6406">CFG_WHEN=60</div><div dir="ltr" id="yui_3_16_0_1_1423127419195_6426">...</div><div dir="ltr" id="yui_3_16_0_1_1423127419195_6427"># catch all disk<br class="">HOST=* SERVICE=disk TIME=w:1830:2359,$CFG_WHEN:0800:2359 COLOR=red<br class="">MAIL <email address redacted> DURATION>60 REPEAT=15<br class="">MAIL <pager email redacted> DURATION>60 REPEAT=15 FORMAT=SMS<br class=""></div><div dir="ltr" id="yui_3_16_0_1_1423127419195_6470"><br></div><div dir="ltr" id="yui_3_16_0_1_1423127419195_6428">testing this with</div><div dir="ltr" id="yui_3_16_0_1_1423127419195_6471"><br></div><div dir="ltr" id="yui_3_16_0_1_1423127419195_6454"> ./hobbitd_alert --test wp-vlauditlog disk --time=1423170000<br class=""></div><div dir="ltr" id="yui_3_16_0_1_1423127419195_6468"><br></div><div dir="ltr" id="yui_3_16_0_1_1423127419195_6464">the epoch time was last night at 21:00 which is within the timeframe for the alerts to happen ie
w:1830:2359
</div><div dir="ltr" id="yui_3_16_0_1_1423127419195_6465"><br></div><div dir="ltr" id="yui_3_16_0_1_1423127419195_6475">00002124 2015-02-05 21:00:00 Matching host:service:page 'wp-vlauditlog:disk:iss' against rule line 242<br class="">00002124 2015-02-05 21:00:00 *** Match with 'HOST=* SERVICE=disk TIME=w:1830:2359,$CFG_WHEN:0800:2359 COLOR=red' ***<br class="">00002124 2015-02-05 21:00:00 Matching host:service:page 'wp-vlauditlog:disk:iss' against rule line 243<br class="">00002124 2015-02-05 21:00:00 Failed 'MAIL <email address redacted> DURATION>60 REPEAT=15' (min. duration 0<3600)<br class="">00002124 2015-02-05 21:00:00 Matching host:service:page 'wp-vlauditlog:disk:iss' against rule line 244<br class="">00002124 2015-02-05 21:00:00 Failed 'MAIL <paging email redacted> DURATION>60 REPEAT=15 FORMAT=SMS' (min. duration 0<3600)<br class=""></div><div dir="ltr" id="yui_3_16_0_1_1423127419195_6477"><br></div><div dir="ltr" id="yui_3_16_0_1_1423127419195_6478">I can see that indeed there is a match with the rule </div><div dir="ltr" id="yui_3_16_0_1_1423127419195_6479">
HOST=* SERVICE=disk TIME=w:1830:2359,$CFG_WHEN:0800:2359 COLOR=red
</div><div dir="ltr" id="yui_3_16_0_1_1423127419195_6501"><br></div><div dir="ltr" id="yui_3_16_0_1_1423127419195_6500"><br></div><div dir="ltr" id="yui_3_16_0_1_1423127419195_6499">but then there seems to be some error or mismatch with the two MAIL lines following it.</div><div dir="ltr" id="yui_3_16_0_1_1423127419195_6498"><br></div><div dir="ltr" id="yui_3_16_0_1_1423127419195_6497">Is anyone able to point out what I am doing wrong here?</div><div dir="ltr" id="yui_3_16_0_1_1423127419195_6496"><br></div><div dir="ltr" id="yui_3_16_0_1_1423127419195_6493">cheers</div><div dir="ltr" id="yui_3_16_0_1_1423127419195_6494"><br></div><div dir="ltr" id="yui_3_16_0_1_1423127419195_6495">ian</div><div dir="ltr"><br></div><div style="font-family: HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif; font-size: 10px;"><div style="font-family: HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, Sans-Serif; font-size: 16px;"> </div> </div> </div></body></html>