<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:x="urn:schemas-microsoft-com:office:excel" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 12 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
{mso-style-priority:99;
mso-style-link:"Balloon Text Char";
margin:0in;
margin-bottom:.0001pt;
font-size:8.0pt;
font-family:"Tahoma","sans-serif";}
p.msonormal0, li.msonormal0, div.msonormal0
{mso-style-name:msonormal;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
span.EmailStyle18
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:windowtext;}
span.EmailStyle19
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.EmailStyle20
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:windowtext;}
span.EmailStyle21
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:windowtext;}
span.EmailStyle22
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.BalloonTextChar
{mso-style-name:"Balloon Text Char";
mso-style-priority:99;
mso-style-link:"Balloon Text";
font-family:"Tahoma","sans-serif";}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal"><font size="2" color="#1f497d" face="Calibri"><span style="font-size:11.0pt;color:#1F497D">And notifications.log says that it is running /etc/xymon/custom/alert.sh User2@domain.com?<o:p></o:p></span></font></p>
<p class="MsoNormal"><font size="2" color="#1f497d" face="Calibri"><span style="font-size:11.0pt;color:#1F497D"><o:p> </o:p></span></font></p>
<p class="MsoNormal"><font size="2" color="#1f497d" face="Calibri"><span style="font-size:11.0pt;color:#1F497D">I’d look in /etc/xymon/custom/alert.sh then.<o:p></o:p></span></font></p>
<p class="MsoNormal"><font size="2" color="#1f497d" face="Calibri"><span style="font-size:11.0pt;color:#1F497D"><o:p> </o:p></span></font></p>
<p class="MsoNormal"><font size="2" color="#1f497d" face="Calibri"><span style="font-size:11.0pt;color:#1F497D"><o:p> </o:p></span></font></p>
<div>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><font size="2" face="Tahoma"><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif";font-weight:bold">From:</span></font></b><font size="2" face="Tahoma"><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif""> John
Tullis [mailto:john@executech.com] <br>
<b><span style="font-weight:bold">Sent:</span></b> Wednesday, October 11, 2017 1:52 PM<br>
<b><span style="font-weight:bold">To:</span></b> Root, Paul T; KC Kuhns; xymon@xymon.com<br>
<b><span style="font-weight:bold">Subject:</span></b> RE: Notification Issues<o:p></o:p></span></font></p>
</div>
</div>
<p class="MsoNormal"><font size="2" face="Calibri"><span style="font-size:11.0pt"><o:p> </o:p></span></font></p>
<p class="MsoNormal"><font size="2" face="Calibri"><span style="font-size:11.0pt">I’ve worked with KC on this issue for some time now and still have had no success.
<o:p></o:p></span></font></p>
<p class="MsoNormal"><font size="2" face="Calibri"><span style="font-size:11.0pt">This is the result we’re getting when we test with xymond_alert.<o:p></o:p></span></font></p>
<p class="MsoNormal"><font size="2" face="Calibri"><span style="font-size:11.0pt"><o:p> </o:p></span></font></p>
<p class="MsoNormal"><font size="2" face="Calibri"><span style="font-size:11.0pt">$ xymond_alert --test DC.Comcast disk --duration=500
<o:p></o:p></span></font></p>
<p class="MsoNormal"><font size="2" face="Calibri"><span style="font-size:11.0pt">00007222 2017-10-11 11:46:08 Matching host:service:dgroup:page ''DC.Comcast:disk:NONE: User2/Client2' against rule line 1<o:p></o:p></span></font></p>
<p class="MsoNormal"><font size="2" face="Calibri"><span style="font-size:11.0pt">00007222 2017-10-11 11:46:08 Failed 'PAGE=%.*User1/' (pagename not in include list)<o:p></o:p></span></font></p>
<p class="MsoNormal"><font size="2" face="Calibri"><span style="font-size:11.0pt">00007222 2017-10-11 11:46:08 Matching host:service:dgroup:page 'DC.Comcast:disk:NONE:User2/Client2' against rule line 3<o:p></o:p></span></font></p>
<p class="MsoNormal"><font size="2" face="Calibri"><span style="font-size:11.0pt">00007222 2017-10-11 11:46:08 *** Match with 'PAGE=%.*User2/' ***<o:p></o:p></span></font></p>
<p class="MsoNormal"><font size="2" face="Calibri"><span style="font-size:11.0pt">00007222 2017-10-11 11:46:08 Matching host:service:dgroup:page 'DC.Comcast:disk:NONE: User2/Client2' against rule line 4<o:p></o:p></span></font></p>
<p class="MsoNormal"><font size="2" face="Calibri"><span style="font-size:11.0pt">00007222 2017-10-11 11:46:08 *** Match with 'SCRIPT=/etc/xymon/custom/alert.sh
<a href="mailto:user2@domain.com">user2@domain.com</a> COLOR=red,yellow RECOVERED REPEAT=720 DURATION>10' ***<o:p></o:p></span></font></p>
<p class="MsoNormal"><font size="2" face="Calibri"><span style="font-size:11.0pt">00007222 2017-10-11 11:46:08 Script alert with command '/etc/xymon/custom/alert.sh' and recipient
<a href="mailto:user2@domain.com">user2@domain.com</a><o:p></o:p></span></font></p>
<p class="MsoNormal"><font size="2" face="Calibri"><span style="font-size:11.0pt"><o:p> </o:p></span></font></p>
<p class="MsoNormal"><font size="2" face="Calibri"><span style="font-size:11.0pt">This is a sample of alerts.cfg:<o:p></o:p></span></font></p>
<p class="MsoNormal"><font size="2" face="Calibri"><span style="font-size:11.0pt">PAGE=%.*User1/<o:p></o:p></span></font></p>
<p class="MsoNormal"><font size="2" face="Calibri"><span style="font-size:11.0pt"> SCRIPT=/etc/xymon/alerts/alert.sh
<a href="mailto:user1@domain.com">user1@domain.com</a> COLOR=red,yellow RECOVERED REPEAT=720 DURATION>10<o:p></o:p></span></font></p>
<p class="MsoNormal"><font size="2" face="Calibri"><span style="font-size:11.0pt">PAGE=%.*User2/<o:p></o:p></span></font></p>
<p class="MsoNormal"><font size="2" face="Calibri"><span style="font-size:11.0pt"> SCRIPT=/etc/xymon/custom-alerts/alert.sh
<a href="mailto:User2@domain.com">User2@domain.com</a> COLOR=red,yellow RECOVERED REPEAT=720 DURATION>10<o:p></o:p></span></font></p>
<p class="MsoNormal"><font size="2" face="Calibri"><span style="font-size:11.0pt"><o:p> </o:p></span></font></p>
<p class="MsoNormal"><font size="2" face="Calibri"><span style="font-size:11.0pt">User2 matches correctly but the email is still going to User1 even though we get a failed message for User1. We’ve tried deleting the User1 folder in the www folder. Restarting
Xymon and the entire server and it doesn’t ever really seem to go away. I can see that the emails were sent in the logs. I also added the matching line number to the alert email using $CFID and the matching line points to line 1 for User1. <o:p></o:p></span></font></p>
<p class="MsoNormal"><font size="2" face="Calibri"><span style="font-size:11.0pt"><o:p> </o:p></span></font></p>
<p class="MsoNormal" style="margin-bottom:12.0pt"><font size="2" color="black" face="Calibri"><span style="font-size:11.0pt;color:black">Any more help would be appreciated.
<o:p></o:p></span></font></p>
<p class="MsoNormal" style="margin-bottom:12.0pt"><font size="2" color="black" face="Calibri"><span style="font-size:11.0pt;color:black">Thanks, John.</span></font><o:p></o:p></p>
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><font size="2" face="Calibri"><span style="font-size:11.0pt;font-weight:bold">From:</span></font></b> Xymon [<a href="mailto:xymon-bounces@xymon.com">mailto:xymon-bounces@xymon.com</a>]
<b><span style="font-weight:bold">On Behalf Of </span></b>Root, Paul T<br>
<b><span style="font-weight:bold">Sent:</span></b> Wednesday, October 11, 2017 10:22 AM<br>
<b><span style="font-weight:bold">To:</span></b> KC Kuhns <<a href="mailto:kc.kuhns@executech.com">kc.kuhns@executech.com</a>>;
<a href="mailto:xymon@xymon.com">xymon@xymon.com</a><br>
<b><span style="font-weight:bold">Subject:</span></b> Re: [Xymon] Notification Issues<o:p></o:p></p>
</div>
</div>
<p class="MsoNormal"><font size="2" face="Calibri"><span style="font-size:11.0pt"><o:p> </o:p></span></font></p>
<p class="MsoNormal"><font size="2" color="#1f497d" face="Calibri"><span style="font-size:11.0pt;color:#1F497D">You can use xymond_alert to test the alert system to see where it is sending.<o:p></o:p></span></font></p>
<p class="MsoNormal"><font size="2" color="#1f497d" face="Calibri"><span style="font-size:11.0pt;color:#1F497D"><o:p> </o:p></span></font></p>
<p class="MsoNormal"><font size="2" color="#1f497d" face="Calibri"><span style="font-size:11.0pt;color:#1F497D">xymond_alert --test DC.Comcast procs --duration=500 |grep -v Failed<o:p></o:p></span></font></p>
<p class="MsoNormal"><font size="2" color="#1f497d" face="Calibri"><span style="font-size:11.0pt;color:#1F497D"><o:p> </o:p></span></font></p>
<div>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><font size="2" face="Tahoma"><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif";font-weight:bold">From:</span></font></b><font size="2" face="Tahoma"><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif""> Xymon
[<a href="mailto:xymon-bounces@xymon.com">mailto:xymon-bounces@xymon.com</a>] <b>
<span style="font-weight:bold">On Behalf Of </span></b>KC Kuhns<br>
<b><span style="font-weight:bold">Sent:</span></b> Wednesday, October 11, 2017 9:27 AM<br>
<b><span style="font-weight:bold">To:</span></b> <a href="mailto:xymon@xymon.com">
xymon@xymon.com</a><br>
<b><span style="font-weight:bold">Subject:</span></b> [Xymon] Notification Issues<o:p></o:p></span></font></p>
</div>
</div>
<p class="MsoNormal"><font size="2" face="Calibri"><span style="font-size:11.0pt"><o:p> </o:p></span></font></p>
<p class="MsoNormal"><font size="2" face="Calibri"><span style="font-size:11.0pt">Good morning,<o:p></o:p></span></font></p>
<p class="MsoNormal"><font size="2" face="Calibri"><span style="font-size:11.0pt"><o:p> </o:p></span></font></p>
<p class="MsoNormal"><font size="2" face="Calibri"><span style="font-size:11.0pt">We’re using Xymon 4.3.25 and are running into a strange issue. We use Armor to monitor servers and various things at all of our clients. Our host file is setup something like
this:<o:p></o:p></span></font></p>
<div style="border:none;border-bottom:solid windowtext 1.0pt;padding:0in 0in 1.0pt 0in">
<p class="MsoNormal"><font size="2" face="Calibri"><span style="font-size:11.0pt"><o:p> </o:p></span></font></p>
</div>
<p class="MsoNormal"><font size="2" face="Calibri"><span style="font-size:11.0pt"><o:p> </o:p></span></font></p>
<p class="MsoNormal"><b><i><font size="2" face="Calibri"><span style="font-size:10.0pt;font-weight:bold;font-style:italic">Page User1 User One<o:p></o:p></span></font></i></b></p>
<p class="MsoNormal"><b><i><font size="2" face="Calibri"><span style="font-size:10.0pt;font-weight:bold;font-style:italic">Subpage Client1 Client One<o:p></o:p></span></font></i></b></p>
<p class="MsoNormal"><b><i><font size="2" face="Calibri"><span style="font-size:10.0pt;font-weight:bold;font-style:italic">8.8.8.8 DC.Google # NOCONN<o:p></o:p></span></font></i></b></p>
<p class="MsoNormal"><b><i><font size="2" face="Calibri"><span style="font-size:10.0pt;font-weight:bold;font-style:italic"><o:p> </o:p></span></font></i></b></p>
<p class="MsoNormal"><b><i><font size="2" face="Calibri"><span style="font-size:10.0pt;font-weight:bold;font-style:italic">Page User2 User Two<o:p></o:p></span></font></i></b></p>
<p class="MsoNormal"><b><i><font size="2" face="Calibri"><span style="font-size:10.0pt;font-weight:bold;font-style:italic">Subpage Client2 Client Two<o:p></o:p></span></font></i></b></p>
<p class="MsoNormal"><b><i><font size="2" face="Calibri"><span style="font-size:10.0pt;font-weight:bold;font-style:italic">75.75.75.75 DC.Comcast # NOCONN<o:p></o:p></span></font></i></b></p>
<div style="border:none;border-bottom:solid windowtext 1.0pt;padding:0in 0in 1.0pt 0in">
<p class="MsoNormal"><font size="2" face="Calibri"><span style="font-size:11.0pt"><o:p> </o:p></span></font></p>
</div>
<p class="MsoNormal"><font size="2" face="Calibri"><span style="font-size:11.0pt"><o:p> </o:p></span></font></p>
<p class="MsoNormal"><font size="2" face="Calibri"><span style="font-size:11.0pt">Each technician that we have has a page, and each client has its own subpage under the related technician. We often move clients around to different technicians so in the above
example, we may decide to move Client2 to User1. When we do that, it seems that User2 still receives email alerts for DC.Comcast even though it has been moved under User1. When looking at the info tab for DC2, it would show only User1 and nothing tied to User2.
There’s also nothing relating to that client in the alerts file.<o:p></o:p></span></font></p>
<p class="MsoNormal"><font size="2" face="Calibri"><span style="font-size:11.0pt"><o:p> </o:p></span></font></p>
<p class="MsoNormal"><font size="2" face="Calibri"><span style="font-size:11.0pt">Is there some type of cache that we need to clear when we move clients around to different technicians to prevent this? Appreciate the help.<o:p></o:p></span></font></p>
<p class="MsoNormal" align="center" style="text-align:center"><font size="2" face="Calibri"><span style="font-size:11.0pt">This communication is the property of CenturyLink and may contain confidential or privileged information. Unauthorized use of this communication
is strictly prohibited and may be unlawful. If you have received this communication in error, please immediately notify the sender by reply e-mail and destroy all copies of the communication and any attachments.<o:p></o:p></span></font></p>
</div>
<center>This communication is the property of CenturyLink and may contain confidential or privileged information. Unauthorized use of this communication is strictly prohibited and may be unlawful. If you have received this communication in error, please immediately
notify the sender by reply e-mail and destroy all copies of the communication and any attachments.</center>
</body>
</html>