<div dir="ltr"><div class="gmail_default" style="font-family:tahoma,sans-serif">Ah my mistake - I missed the 1 line at the bottom of the man page. Is there a possibility any of the env variables is not set?</div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Mon, 22 Mar 2021 at 16:51, Neal, Jonathan W <<a href="mailto:wes.neal@verizon.com">wes.neal@verizon.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr"><div dir="ltr">Not sure what you mean, I have 100s of rules setup like this they have always worked. I want the first line to be working at all times and you can see if has a different notification alias.<input name="virtru-metadata" type="hidden" value="{"email-policy":{"state":"closed","expirationUnit":"days","disableCopyPaste":false,"disablePrint":false,"disableForwarding":false,"enableNoauth":false,"persistentProtection":false,"expandedWatermarking":false,"expires":false,"isManaged":false},"attachments":{},"compose-id":"11","compose-window":{"secure":false}}"><div>The page alias is the one with a specific time frame.</div><div><br></div><div>I don't think this is the issue.</div><div><br></div><div>Thanks for the reply though.</div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Mon, Mar 22, 2021 at 12:30 PM Malcolm Hunter <<a href="mailto:malcolm.r.hunter@gmail.com" target="_blank">malcolm.r.hunter@gmail.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr"><div style="font-family:tahoma,sans-serif">SERVICE and TIME need to go on the same line as HOST</div><div style="font-family:tahoma,sans-serif"><br></div><div style="font-family:tahoma,sans-serif">e.g.</div><div style="font-family:tahoma,sans-serif"><span style="font-family:Arial,Helvetica,sans-serif">HOST=$rcontrol </span>TIME=W:1300:2200 <span style="font-family:Arial,Helvetica,sans-serif">SERVICE=conn </span><span style="font-family:Arial,Helvetica,sans-serif">DURATION>10</span><br></div><div style="font-family:tahoma,sans-serif"><div></div><span style="font-family:Arial,Helvetica,sans-serif"> MAIL $rcontrolpage REPEAT=1h </span></div><div style="font-family:tahoma,sans-serif"><br></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Mon, 22 Mar 2021 at 14:09, Neal, Jonathan W via Xymon <<a href="mailto:xymon@xymon.com" target="_blank">xymon@xymon.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><br><br><br>---------- Forwarded message ----------<br>From: "Neal, Jonathan W" <<a href="mailto:wes.neal@verizon.com" target="_blank">wes.neal@verizon.com</a>><br>To: "xymon >> <a href="mailto:xymon@xymon.com" target="_blank">xymon@xymon.com</a>" <<a href="mailto:xymon@xymon.com" target="_blank">xymon@xymon.com</a>><br>Cc: <br>Bcc: <br>Date: Mon, 22 Mar 2021 10:01:15 -0400<br>Subject: Weird email alerts issue<br><div dir="ltr">Running Xymon 4.3.28, have been since release. I rebuilt my alerts.cfg file from scratch and I have a weird issue with alerts I can't figure out.<div><br></div><div>This seems to be happening on most if not all entries where I have a SERVICE=conn. The only thing I really changed on all my entries was a new mail alias for them, the actual rule itself is the same as before.</div><div><br></div><div>Entry looks like this:</div><div><br></div><div>HOST=$rcontrol<br> MAIL $rcontrolmail REPEAT=2h DURATION>10 RECOVERED<br> MAIL $rcontrolmail SERVICE=conn DURATION>10 REPEAT=2d<br> MAIL $rcontrolpage SERVICE=conn DURATION>10 REPEAT=1h TIME=W:1300:2200<br> MAIL $sms-ems-oncall SERVICE=conn DURATION>10 REPEAT=2d<br></div><div><br></div><div>I get an alert, it emails the proper people tied to $rcontrolmail, but it also tries to email SERVICE=conn .</div><div><br></div><div>I can see them in the email log.<br><br>Mon Mar 22 13:47:09 2021 host02.procs (159.98.104.166) SERVICE=conn[1022] 1616420829 300<br></div><div><br>Mon Mar 22 12:59:03 2021 hostlan.disk (199.200.3.170) SERVICE=conn[725] 1616417943 100<br></div><div><br></div><div>Anyone got an idea how to troubleshoot this or what might be causing it? </div></div>
<br><br><br>---------- Forwarded message ----------<br>From: "Neal, Jonathan W via Xymon" <<a href="mailto:xymon@xymon.com" target="_blank">xymon@xymon.com</a>><br>To: "xymon >> <a href="mailto:xymon@xymon.com" target="_blank">xymon@xymon.com</a>" <<a href="mailto:xymon@xymon.com" target="_blank">xymon@xymon.com</a>><br>Cc: <br>Bcc: <br>Date: Mon, 22 Mar 2021 10:01:15 -0400<br>Subject: [Xymon] Weird email alerts issue<br>_______________________________________________<br>
Xymon mailing list<br>
<a href="mailto:Xymon@xymon.com" target="_blank">Xymon@xymon.com</a><br>
<a href="https://urldefense.proofpoint.com/v2/url?u=http-3A__lists.xymon.com_mailman_listinfo_xymon&d=DwMFaQ&c=udBTRvFvXC5Dhqg7UHpJlPps3mZ3LRxpb6__0PomBTQ&r=LwjhQ01TR9Vhmm46Y_nkiTmave547oP54aN1_422NMQ&m=JcUe519s-NMXjbfIrlQsJXNYtervf_PYa0sFVeDTY7I&s=Aj-3OlzLKUqQDgq7M0AeEDghPGBuuJ9nutBwGjiCM1g&e=" rel="noreferrer" target="_blank">http://lists.xymon.com/mailman/listinfo/xymon</a><br>
</blockquote></div>
</blockquote></div><br clear="all"><div><br></div>-- <br><div dir="ltr"><div dir="ltr"><div><br></div><div><a href="http://www.verizon.com" target="_blank"><img src="http://ss7.vzw.com/is/image/VerizonWireless/vz-sig-verizon?$defaultscale$"></a><br></div><div><br></div><div><div>Wes Neal</div><div>Engineer IV Spec-Ntwk Eng&Ops</div><div>EMS Support</div><div><br></div><div>O 8139871162</div><div> <a href="mailto:wes.neal@verizon.com" target="_blank">wes.neal@verizon.com</a></div></div></div></div></div>
</blockquote></div>