<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style type="text/css" style="display:none"><!-- p { margin-top: 0px; margin-bottom: 0px; }--></style>
</head>
<body dir="ltr" style="font-size:12pt;color:#000000;background-color:#FFFFFF;font-family:Calibri,Arial,Helvetica,sans-serif;">
<p>Have you tried removing the recovered stanza? I thought Xymon only sent a recovered message if you explicitly tell it to on the alert itself:<br>
</p>
<p><br>
</p>
<div>HOST=*</div>
<div> MAIL someuser@example.com DURATION>10 REPEAT=30 RECOVERED UNMATCHED<br>
</div>
<p><br>
</p>
<p>Check other rules to see if you are overriding it somewhere by telling it to explicitly send recover messages.<br>
</p>
<p><br>
</p>
<p>NB: I had thought there was a global setting somewhere that would default it to on but I can't find it<br>
</p>
<p><br>
</p>
<p>Basically, try commenting out<br>
</p>
<p><br>
</p>
<div>HOST=* RECOVERED=1</div>
<div> IGNORE HOST=*<br>
</div>
<div><br>
</div>
<div>and see if it behaves like you want.<br>
</div>
<p><br>
</p>
<p>=G=<br>
</p>
<p><br>
</p>
<div dir="ltr" style="font-size:12pt; color:#000000; background-color:#FFFFFF; font-family:Calibri,Arial,Helvetica,sans-serif">
<hr tabindex="-1" style="display:inline-block; width:98%">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" color="#000000" style="font-size:11pt"><b>From:</b> Xymon <xymon-bounces@xymon.com> on behalf of Even Hauge Juberg <even.juberg@ntnu.no><br>
<b>Sent:</b> Monday, March 27, 2017 8:04 AM<br>
<b>To:</b> xymon@xymon.com<br>
<b>Subject:</b> [Xymon] Annyoing logic in alerts.cfg</font>
<div> </div>
</div>
<div>
<p>Hi!<br>
</p>
<p><br>
</p>
<p>I've been using Xymon for years and have recently begun to play around with the alerts.cfg, however, there is something I have been banging my head against the wall with, for weeks now. So I am reaching out to this list in the hopes that someone out there
might have the key to save me from eternal frustration.<br>
</p>
<p><br>
</p>
<p>*snippet from my alerts.cfg*<br>
</p>
<p><br>
</p>
<div><em>HOST=* RECOVERED=1</em></div>
<div><em> IGNORE HOST=*</em></div>
<div><br>
</div>
<div><em>HOST=one-host SERVICE=http</em></div>
<div><em> MAIL someuser@domain.local COLOR=red</em></div>
<div><em> MAIL </em><span style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:16px; background-color:rgb(255,255,255)"><em>someuser@domain</em></span><span style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:16px; background-color:rgb(255,255,255)"><em>.local</em></span><em>
DURATION>5 COLOR=red</em></div>
<div><br>
<br>
</div>
<div>What I'm trying to accomplish is to stop the "I'm OK - recovered" messages. Those messages are irrelevant, so I want those filtered out. The problem though, is that the logic is completely off on this point. The first rule for some reason takes presedense,
even though I have explicitly told it to only use that rule IF the host has recovered, no? <br>
</div>
<div><br>
</div>
<div>I want it to skip that rule, if it has not yet recovered, send mail to the first user immediately, then to the other user after 5 minutes, but leave those users alone if the service is OK again. Is there a way to accomplish this? <br>
</div>
<div><br>
</div>
<div>Sincerely, <br>
</div>
<div>Even<br>
</div>
<p><br>
</p>
</div>
</div>
</body>
</html>