<div dir="ltr"><div dir="ltr">I'm getting both red and recovered alerts in my case. In your case were you not getting red alerts but you were getting recovered messages?<div><br></div><div>I'm using Xymon 4.3.28 on CentOS 7.6<br clear="all"><div><div dir="ltr" class="gmail_signature"><div dir="ltr"><div><br></div>Josh Luthman<br>Office: 937-552-2340<br>Direct: 937-552-2343<br>1100 Wayne St<br>Suite 1337<br>Troy, OH 45373</div></div></div><br></div></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Fri, Mar 1, 2019 at 2:14 PM Larry Bonham <<a href="mailto:larry@fni-stl.com">larry@fni-stl.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
<div lang="EN-US">
<div class="gmail-m_1154997765331460206WordSection1">
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)">Josh,<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)">This may not be your problem but I had issues in the past similar to this. My problem turned out to be how RECOVERED was being handled. I’m using xymon 4.3.28
on Redhat 7.6.<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)">I defined this macro at the top of the rule set in alerts.cfg and replaced all STOP instances with $STOP.<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)"># !!!!!!!!!! IMPORTANT !!!!!!!!!!!!!!!!!!<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)"># Define macro to halt any further rule evaluation.<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)"># Both IGNORE and RECOVERED are needed.<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)">$STOP=IGNORE RECOVERED<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)">Larry<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)"><u></u> <u></u></span></p>
<p class="MsoNormal"><b><span style="font-size:10pt;font-family:Tahoma,sans-serif">From:</span></b><span style="font-size:10pt;font-family:Tahoma,sans-serif"> Xymon [mailto:<a href="mailto:xymon-bounces@xymon.com" target="_blank">xymon-bounces@xymon.com</a>]
<b>On Behalf Of </b>Josh Luthman<br>
<b>Sent:</b> Friday, March 1, 2019 9:11 AM<br>
<b>To:</b> Ralph Mitchell<br>
<b>Cc:</b> Xymon MailingList<br>
<b>Subject:</b> Re: [Xymon] Alerts STOP command not working<u></u><u></u></span></p>
<p class="MsoNormal"><u></u> <u></u></p>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<p class="MsoNormal">Sorry trying to sanitize let me repost...<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<div>
<p class="MsoNormal"># tail -n 14 alerts.cfg<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal">HOST=<a href="http://windows10.imaginenetworksllc.com" target="_blank">windows10.imaginenetworksllc.com</a><u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"> MAIL <a href="mailto:josh@imaginenetworksllc.com" target="_blank">josh@imaginenetworksllc.com</a> COLOR=RED DURATION>60m REPEAT=60 RECOVERED<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"> STOP<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">HOST=%.*\.imaginenetworksllc\.com<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"> MAIL <a href="mailto:11111111111111@vtext.com" target="_blank">11111111111111@vtext.com</a> COLOR=RED DURATION>15m RECOVERED FORMAT=SMS<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">HOST=*<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"> MAIL <a href="mailto:josh@imaginenetworksllc.com" target="_blank">josh@imaginenetworksllc.com</a> COLOR=RED DURATION>5m REPEAT=60 RECOVERED<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal"># include additional sections<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal">directory /etc/xymon/alerts.d<u></u><u></u></p>
</div>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<p class="MsoNormal">Josh Luthman<br>
Office: 937-552-2340<br>
Direct: 937-552-2343<br>
1100 Wayne St<br>
Suite 1337<br>
Troy, OH 45373<u></u><u></u></p>
</div>
</div>
</div>
<p class="MsoNormal" style="margin-bottom:12pt"><u></u> <u></u></p>
</div>
</div>
</div>
<p class="MsoNormal"><u></u> <u></u></p>
<div>
<div>
<p class="MsoNormal">On Fri, Mar 1, 2019 at 10:02 AM Ralph Mitchell <<a href="mailto:ralphmitchell@gmail.com" target="_blank">ralphmitchell@gmail.com</a>> wrote:<u></u><u></u></p>
</div>
<blockquote style="border-top:none;border-right:none;border-bottom:none;border-left:1pt solid rgb(204,204,204);padding:0in 0in 0in 6pt;margin-left:4.8pt;margin-right:0in">
<div>
<div>
<p class="MsoNormal">Just a minor nit-pick - does the actual file have the same typo in the hostname in the first entry??<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal"> HOST=<a href="http://windows10.imaignenetworksllc.com" target="_blank">windows10.imaignenetworksllc.com</a><u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">Ralph Mitchell<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
</div>
<p class="MsoNormal"><u></u> <u></u></p>
<div>
<div>
<p class="MsoNormal">On Fri, Mar 1, 2019 at 9:50 AM Josh Luthman <<a href="mailto:josh@imaginenetworksllc.com" target="_blank">josh@imaginenetworksllc.com</a>> wrote:<u></u><u></u></p>
</div>
<blockquote style="border-top:none;border-right:none;border-bottom:none;border-left:1pt solid rgb(204,204,204);padding:0in 0in 0in 6pt;margin-left:4.8pt;margin-right:0in">
<div>
<div>
<div>
<div>
<p class="MsoNormal">Does anyone have a working example of STOP?<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">The man page says:<u></u><u></u></p>
</div>
<div>
<div>
<p class="MsoNormal"># STOP - Valid for a recipient: If this recipient gets an<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"># alert, recipients further down in alerts.cfg<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"># are ignored.<u></u><u></u></p>
</div>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">This doesn't seem to be the case, though. The second and third statements are happening even though the first has a STOP.<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">HOST=<a href="http://windows10.imaignenetworksllc.com" target="_blank">windows10.imaignenetworksllc.com</a><u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"> MAIL <a href="mailto:josh@imaginenetworksllc.com" target="_blank">josh@imaginenetworksllc.com</a> COLOR=RED DURATION>60m REPEAT=60 RECOVERED<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"> STOP<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">HOST=%.*\.imaginenetworksllc\.com<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"> MAIL <a href="mailto:1231231234@vtext.com" target="_blank">1231231234@vtext.com</a> COLOR=RED DURATION>15m RECOVERED FORMAT=SMS<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">HOST=*<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"> MAIL <a href="mailto:josh@imaginenetworksllc.com" target="_blank">josh@imaginenetworksllc.com</a> COLOR=RED DURATION>5m REPEAT=60 RECOVERED<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<div>
<div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<p class="MsoNormal">Josh Luthman<br>
Office: 937-552-2340<br>
Direct: 937-552-2343<br>
1100 Wayne St<br>
Suite 1337<br>
Troy, OH 45373<u></u><u></u></p>
</div>
</div>
</div>
</div>
</div>
</div>
<p class="MsoNormal">_______________________________________________<br>
Xymon mailing list<br>
<a href="mailto:Xymon@xymon.com" target="_blank">Xymon@xymon.com</a><br>
<a href="http://lists.xymon.com/mailman/listinfo/xymon" target="_blank">http://lists.xymon.com/mailman/listinfo/xymon</a><u></u><u></u></p>
</blockquote>
</div>
</blockquote>
</div>
</div>
<br>
<hr>
<font face="Arial" color="Black" size="3"><br>
CONFIDENTIALITY NOTICE:<br>
This electronic mail message is intended exclusively for<br>
recipient to which it is addressed. The contents of this message<br>
and any attachments may contain confidential and privileged<br>
information. Any unauthorized review, use, print, storage, copy,<br>
disclosure or distribution is strictly prohibited. If you have<br>
received this message in error, please advise the sender<br>
immediately by replying to the message's sender and delete all<br>
copies of this message and its attachments without disclosing<br>
the contents to anyone, or using the contents for any purpose.<br>
</font>
</div>
</blockquote></div>