<html><head></head><body><div style="font-family:Helvetica Neue, Helvetica, Arial, sans-serif;font-size:10px;"><div>Yeah - I could see that as an option, cheers Phil...<br><br>Some body else pointed me at using DISPLAYGROUPS and the defined groups in the xymon hosts.cfg, which would seem to be the answer. But I can;t get it working and I find tyhe "offivcial" docuementation really unhelpful (obviously my issue as everybody eolse can translate it into working configurations).<br><br>As an example</div><div><br></div><div>hosts.cfg<br><span><div>page diddstest DIDDSTEST</div><div>#group-compress <H3><I>DIDDSTEST</I></H3></div><div>group <H3><I>DIDDSTEST</I></H3></div><div>192.168.52.83 testbox</div><div><br></div><div>alerts.cfg<br><span><div>DISPLAYGROUP=DIDDSTESTmsgs TIME=w:0800:1830 COLOR=red</div><div> MAIL didds@us.com</div><div><br></div><div>I( have the analysis.cfg etc all set up such that I can trigger a red alert for system testbox for msgs fine. But I never get an email of said alerts as per the alerts.cfg attempt. I can check the maillog on testbox and the email isn;t sent (ie it hasn;'t got blpocked or whatever elsewhere - its just never sent ie never triggered.)<br><br>If tried the displaygroup group name in both upper and lower case.<br><br>what am I doing wrong?</div><div><br></div></span><br></div><div><br></div></span><br><br><br></div><div><br></div><div><br></div><div id="ydp8a73229byahoo_quoted_6583713963" class="ydp8a73229byahoo_quoted">
<div style="font-family:'Helvetica Neue', Helvetica, Arial, sans-serif;font-size:13px;color:#26282a;">
<div>
On Friday, 31 August 2018, 04:18:09 BST, Phil Crooker <Phil.Crooker@orix.com.au> wrote:
</div>
<div><br></div>
<div><br></div>
<div><div id="ydp8a73229byiv1046956304"><div dir="ltr">
<div dir="ltr" id="ydp8a73229byiv1046956304divtagdefaultwrapper" style="font-size:12pt;color:#000000;font-family:Calibri, Helvetica, sans-serif;">
<p style="margin-top:0;margin-bottom:0;">Have two separate HOST stanzas - one for linux hosts and one for windows.<br clear="none">
</p>
<p style="margin-top:0;margin-bottom:0;"><br clear="none">
</p>
<p style="margin-top:0;margin-bottom:0;">HOST=linuxhost.whatever.com,linuxhost2.whatever.com [[conditions]]</p>
<p style="margin-top:0;margin-bottom:0;"> MAIL whoever@whatever.com</p>
<p style="margin-top:0;margin-bottom:0;"><br clear="none">
</p>
<p style="margin-top:0;margin-bottom:0;">HOST=winhost.whatever.com,winhost2.whatever.com [[conditions]]</p>
<p style="margin-top:0;margin-bottom:0;"> MAIL whoever@.....</p>
<p style="margin-top:0;margin-bottom:0;"><br clear="none">
</p>
<p style="margin-top:0;margin-bottom:0;">Of course you can use host groups, regular expressions, etc.</p>
<p style="margin-top:0;margin-bottom:0;"><br clear="none">
</p>
<p style="margin-top:0;margin-bottom:0;"><br clear="none">
</p>
<div class="ydp8a73229byiv1046956304yqt4765636225" id="ydp8a73229byiv1046956304yqt70686"><div style="color:rgb(0, 0, 0);">
<hr style="display:inline-block;width:98%;" tabindex="-1">
<div dir="ltr" id="ydp8a73229byiv1046956304divRplyFwdMsg"><font style="font-size:11pt;" face="Calibri, sans-serif" color="#000000"><b>From:</b> Ian Diddams <didds3@yahoo.co.uk><br clear="none">
<b>Sent:</b> Thursday, August 30, 2018 9:50 PM<br clear="none">
<b>To:</b> Xymon Mailing List<br clear="none">
<b>Subject:</b> create an alert for all linux servers</font>
<div> </div>
</div>
</div></div></div></div><div class="ydp8a73229byiv1046956304yqt4765636225" id="ydp8a73229byiv1046956304yqt21454"><div><div>
<div style="font-family:Helvetica Neue, Helvetica, Arial, sans-serif;font-size:10px;">
<div>Ive an alert for msgs (var/log/messages entries) that I desire to have paged in office hours only<br clear="none">
Thing is its only linux clients that need this check., not windows clients.<br clear="none">
<br clear="none">
So if I set a stadard style alerts.cfg entry <br clear="none">
<br clear="none">
<span>
</span><div>HOST=* SERVICE=msgs TIME=w:0800:1830 COLOR=red</div>
<div> MAIL monitor@us.com</div>
<div><br clear="none">
</div>
<div>of course if any windows msgs go red (constantly... zzzz) then they will page also, which is not the required outcome.<br clear="none">
<br clear="none">
There is the option I see of something like<br clear="none">
<br clear="none">
alerts.cfg:<br clear="none">
<span>
</span><div>GROUP=SSSD_MSGS TIME=w:0800:1830 COLOR=red</div>
<div> MAIL monitor@us.com<br clear="none">
analysis.cfg</div>
<div>default section<br clear="none">
<span>
</span><div>LOG %/var/log/messages "%TEST" COLOR=red GROUP=SSSD_MSGS [ search string here of course being TEST ]<br clear="none">
<br clear="none">
but that does exactly the same thing.<br clear="none">
<br clear="none">
So - aside from adding that LOG line to umpteen individual analysis.cfg entries for each linux server, or a single section listing all the linux servers ... is there a way to curtail this check to only linux servers (or more likely a bunch of hostnames of
course). Somewhere it seems we'd have to manulayy maintain the correct "list" of hostnames to be caught - Im just trying to minimise the overhead.<br clear="none">
<br clear="none">
I had considered using a yellow alert to alert the LOG check... but other "things" also issue yellow alerts and we don;t want to trigger them either.<br clear="none">
<br clear="none">
I can;t see a way out of this?</div>
<div><br clear="none">
</div>
<div>didds</div>
<div><br clear="none">
</div>
<br clear="none">
<br clear="none">
</div>
<div><br clear="none">
</div>
<br clear="none">
</div>
<div><br clear="none">
</div>
<br clear="none">
<br clear="none">
</div>
</div>
</div>
<br clear="none">
<br clear="none">
<table style="width:650px;" width="650"><tbody><tr><td colspan="1" rowspan="1" valign="top" style="vertical-align:top;">
<div style="background-color:#1F2A6B;width:650px;min-height:30px;margin:10px 0 15px 0;float:left;"></div>
<div style="font-style: normal; font-weight: normal; font-stretch: normal; font-size: 9px; line-height: normal; font-family: Arial, Helvetica, sans-serif; color: rgb(148, 148, 148);">
<p></p><h1 style="font-size:11px;font-weight:bold;padding:0;margin:0;">Please consider the environment before printing this e-mail</h1><p></p>
<p style="padding:0;margin:0;text-align:justify;">This message from ORIX Australia may contain confidential and/or privileged information. If you are not the intended recipient, any use, disclosure or copying of this message (or of any attachments to it) is not authorised. If you have received this message in error, please notify the sender immediately and delete the message and any attachments from your system. Please inform the sender if you do not wish to receive further communications by email.</p>
<p>ORIX has a Privacy Policy which outlines what kinds of personal information we collect and hold, how we may collect and handle it, and your rights regarding personal information. Please let us know if you would like a copy. The Privacy Policy and a Collection Statement are also available on our <a shape="rect" href="http://www.orix.com.au" style="color:#949494;" rel="nofollow" target="_blank">website</a>.</p>
<p>We do not accept liability for any loss or damage caused by any computer viruses or defects that may be transmitted with this message. We recommend you carry out your own checks for viruses or defects.</p>
</div>
</td></tr></tbody></table>
</div></div></div></div>
</div>
</div></div></body></html>