<html><head></head><body><div style="color:#000; background-color:#fff; font-family:Helvetica Neue-Light, Helvetica Neue Light, Helvetica Neue, Helvetica, Arial, Lucida Grande, Sans-Serif;font-size:10px"><div id="yui_3_16_0_1_1474444919720_5510">hobbit version 4.2.3</div><div id="yui_3_16_0_1_1474444919720_5510"><br></div><div id="yui_3_16_0_1_1474444919720_5510">I have an alert</div><div id="yui_3_16_0_1_1474444919720_5510"><br></div><div id="yui_3_16_0_1_1474444919720_5527">HOST=* TIME=w:0800:1830 COLOR=red,purple EXSERVICE=msgs,maint,sql_results,sql_results_1,sql_results_2,who,uptime</div><div id="yui_3_16_0_1_1474444919720_5528">MAIL monitor@domain<br></div><div dir="ltr" id="yui_3_16_0_1_1474444919720_5529"><br></div><div dir="ltr" id="yui_3_16_0_1_1474444919720_5529">Amongst other things coinfigured there is a "svcs" check we use for windows servers ie checking services that are running</div><div dir="ltr" id="yui_3_16_0_1_1474444919720_5529"><br></div><div dir="ltr" id="yui_3_16_0_1_1474444919720_5529"><br></div><div dir="ltr" id="yui_3_16_0_1_1474444919720_5529">This works great. Except we have a service on a windows server "SERVER_A" that is deliberately shut down for two hours every day and this of course sends alerts that are redundant/immaterial.<br></div><div dir="ltr" id="yui_3_16_0_1_1474444919720_5529"><br></div><div dir="ltr" id="yui_3_16_0_1_1474444919720_5529">So to get arond this I then configured</div><div dir="ltr" id="yui_3_16_0_1_1474444919720_5529"><br></div><div dir="ltr" id="yui_3_16_0_1_1474444919720_5529">HOST=* TIME=w:0800:1830 COLOR=red,purple EXSERVICE=msgs,maint,sql_results,sql_results_1,sql_results_2,who,uptime<br></div><div id="yui_3_16_0_1_1474444919720_5534" dir="ltr">EXSERVICE=svcs EXHOST=SERVER_A TIME=w:0700:0900</div><div dir="ltr" id="yui_3_16_0_1_1474444919720_5535">MAIL monitor@domain</div><div dir="ltr" id="yui_3_16_0_1_1474444919720_5535"><br></div><div dir="ltr" id="yui_3_16_0_1_1474444919720_5535">That is successful - i.e. the svcs email alert is not sent between 0700-0900. </div><div dir="ltr" id="yui_3_16_0_1_1474444919720_5535"><br></div><div dir="ltr" id="yui_3_16_0_1_1474444919720_5535"><br></div><div dir="ltr" id="yui_3_16_0_1_1474444919720_5535"><br></div><div dir="ltr" id="yui_3_16_0_1_1474444919720_5535"><br></div><div dir="ltr" id="yui_3_16_0_1_1474444919720_5535">However, a bizarre side effect of this is that now YELLOW alerts for "msgs" alerts are now sent between 0800 and 0900 ! </div><div dir="ltr" id="yui_3_16_0_1_1474444919720_5535"><br></div><div dir="ltr" id="yui_3_16_0_1_1474444919720_5535"><br></div><div dir="ltr" id="yui_3_16_0_1_1474444919720_5671">I have removed the "EXSERVICE=svcs EXHOST=SERVER_A TIME=w:0700:0900" to test the outcome, and as expected the svcs emails return, and the msgs one stop, so it must be this alert config that is the issue here.</div><div dir="ltr" id="yui_3_16_0_1_1474444919720_5672"><br id="yui_3_16_0_1_1474444919720_5673"></div><div dir="ltr" id="yui_3_16_0_1_1474444919720_5535">I'm at a bit of a loss here because<br></div><div dir="ltr" id="yui_3_16_0_1_1474444919720_5535"><br></div><div dir="ltr" id="yui_3_16_0_1_1474444919720_5535">1) this msgs alert is actually yellow, which is not included in the first line anyway</div><div dir="ltr" id="yui_3_16_0_1_1474444919720_5535">2) msgs are expressly excluded in the first line also.<br><br>So clearly this config is working as a sort of "first line unless the seocnd line exists". ?<br><br>Has anyone any suggestions as to how to configure this correctly so that the svcs alerts are not acted upon between 0700-0900 [in fact I can of course just mnake this 0800-0900 as the rule only works after 0800 anyway etc ], but msgs are not suddenly alerted upon?</div><div dir="ltr" id="yui_3_16_0_1_1474444919720_5535"><br></div><div dir="ltr" id="yui_3_16_0_1_1474444919720_5535">cheers</div><div dir="ltr" id="yui_3_16_0_1_1474444919720_5535"><br></div><div dir="ltr" id="yui_3_16_0_1_1474444919720_5535">ian</div><div dir="ltr" id="yui_3_16_0_1_1474444919720_5535"><br></div><div dir="ltr" id="yui_3_16_0_1_1474444919720_5535"><br></div><div dir="ltr" id="yui_3_16_0_1_1474444919720_5535"><br></div><div dir="ltr" id="yui_3_16_0_1_1474444919720_5535"><br></div></div></body></html>