[xymon] Odd issue with Release Candidate one and alerts

[Clark, Sean]

Sorry about that, I guess I was being lazy about creating emails

Won't happen again


-Sean



On 1/24/11 2:32 PM, "Ryan Novosielski" <novosirj at umdnj.edu<mailto:novosirj at umdnj.edu>> wrote:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Please do not thread hijack (that is to say, reply to a message, change
its contents and subject and send that as a new message). These messages
still contain an In-Reply-To: header that irritates people with a
threaded mail reader. Please compose new messages instead.

I'd post a link on ettiquette but apparently someone has erased the
Wikipedia definition.

On 01/24/2011 02:06 PM, Clark, Sean wrote:
I just compiled and installed RC1 on a Red Hat EL5.5 server this AM, and have come across a strange issue – don't know if it's my configuration or something with the new version
It seems like it isn't following the DURATION flag for alerts
I have some rules for a host, it matches on two lines:
./xymond_alert --test hostname.subdomain.domain.com disk
00003158 2011-01-24 13:51:05 send_alert hostname.subdomain.domain.com:disk state Paging
00003158 2011-01-24 13:51:05 Matching host:service:page 'hostname.subdomain.domain.com:disk:unified-tex' against rule line 128
00003158 2011-01-24 13:51:05 *** Match with 'HOST=% SERVICE=%disk|inode|procs|temperature|bbd|http|conn|ssh' ***
00003158 2011-01-24 13:51:05 Matching host:service:page 'hostname.subdomain.domain.com:disk:unified-tex' against rule line 134
00003158 2011-01-24 13:51:05 *** Match with 'HOST=% SERVICE=%disk|inode|procs|temperature' ***
here is the alerts.cfg relevent sections:
    128  HOST=% SERVICE=%disk|inode|procs|temperature|bbd|http|conn|ssh
    129   MAIL=mailing-list at domain.com<mailto:MAIL=mailing-list at domain.com> DURATION>20 REPEAT=60 COLOR=red RECOVERED
    134  HOST=% SERVICE=%disk|inode|procs|temperature
    135   MAIL=SMSgateways at txt.att.com<mailto:MAIL=SMSgateways at txt.att.com> TIME=06:0000:2359 DURATION>720 REPEAT=120 COLOR=red RECOVERED
    136   MAIL=SMSgateways at txt.att.com<mailto:MAIL=SMSgateways at txt.att.com> TIME=12345:0000:0559 DURATION>720 REPEAT=120 COLOR=red RECOVERED
    137   MAIL=SMSgateways at txt.att.com<mailto:MAIL=SMSgateways at txt.att.com> TIME=12345:0600:1759 DURATION>60 REPEAT=120 COLOR=red RECOVERED
    138   MAIL=SMSgateways at txt.att.com<mailto:MAIL=SMSgateways at txt.att.com> TIME=12345:1800:2359 DURATION>720 REPEAT=120 COLOR=red RECOVERED
What i am expecting from these rules/matches is
email mailing-list  if it's been red for > 20 minutes, and email on recovery
additionally
on Sat, Sunday, if it's been red for > 720 minutes, email my phone
on M-F, email my phone if it's been red for > 720 minutes & before 6am
after 7am, red > 60 minutes, after 6pm > 7200 minutes again
What is happening is
When a red even occurs, it immediately sends an email to mailing-list at domain.com<mailto:mailing-list at domain.com> , and an email to SMSgateways at txt.att.com<mailto:SMSgateways at txt.att.com>
Does anyone know if this is my configuration that needs fixing , or something with 4.3.0?
-Sean
________________________________
This E-mail and any of its attachments may contain Time Warner Cable proprietary information, which is privileged, confidential, or subject to copyright belonging to Time Warner Cable. This E-mail is intended solely for the use of the individual or entity to which it is addressed. If you are not the intended recipient of this E-mail, you are hereby notified that any dissemination, distribution, copying, or action taken in relation to the contents of and attachments to this E-mail is strictly prohibited and may be unlawful. If you have received this E-mail in error, please notify the sender immediately and permanently delete the original and any copy of this E-mail and any printout.
To unsubscribe from the xymon list, send an e-mail to
xymon-unsubscribe at xymon.com<mailto:xymon-unsubscribe at xymon.com>


- --
- ---- _  _ _  _ ___  _  _  _
|Y#| |  | |\/| |  \ |\ |  | |Ryan Novosielski - Sr. Systems Programmer
|$&| |__| |  | |__/ | \| _| |novosirj at umdnj.edu<mailto:|novosirj at umdnj.edu> - 973/972.0922 (2-0922)
\__/ Univ. of Med. and Dent.|IST/CST-Academic Svcs. - ADMC 450, Newark
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk0908kACgkQmb+gadEcsb6UvQCeLD6q9TmVwlTyiy7hSvoFR73b
G3cAoKVghoHR1qbCVlsUsd5Lc2MtysQV
=j//M
-----END PGP SIGNATURE-----