[hobbit] rule matching order

[Henrik Stoerner]

On Wed, Jun 06, 2007 at 12:44:47PM -0500, Daniel Bourque wrote:
> HOST=blah
>    mail foo SERVICE=http
>    mail bar
> 
> 
> If an http alert comes in for host "blah", will both foo and bar get an 
> email , or both? if both , can I say:

Both will get an e-mail.

> HOST=blah
>    mail foo SERVICE=http
>    mail bar SERVICE="!http"

Yes.


The easiest way to see how your alert rules work is to go to the "info"
column for a host; there's a section there listing who gets alerts for
each service.


Regards,
Henrik