[Xymon] duration of MSG red status

[Jeremy Laidman]

Nicole

On 29 October 2014 05:16, Nicole Beck <nskyrca at syr.edu> wrote:

> What I’m seeing is that I get an alert for my trigger string (which has a
> timestamp on it), and then I keep getting alerts for the same trigger
> string (with the same timestamp) for the next 30 minutes.
>

How often do you get the repeated alerts?  Or how many in that 30 minutes?


> I’m not sure if anything else was append to the log file in that 30
> minutes. I stop getting the alerts after 30 minutes and don’t have to wait
> until the log is rotated for the alert to clear.
>

Do you have ALERTREPEAT defined in xymonserver.cfg?  The default is 30
seconds, but you may have it less than that.

Similarly, do you have "REPEAT" defined in alerts.cfg for the rule matching
these alerts?  (The "REPEAT" value in alerts.cfg defaults to the setting of
ALERTREPEAT.)

Is your message status (red?) staying non-green for the 30 minutes, or
non-green for only a short time, or flapping like red/green/red/green?

The way messages get to Xymon are via the client data.  So during an
"event" you can click on the "Client data available" link at the bottom of
your "msgs" page for the host, and it should show you all of the client
data, and you can search for the logfilename to see what log lines the
client sent to the server.  Or you can click on the logfile name on the
"msgs" page for a modified client data report showing just the log lines
for that logfile.

What I'm trying to understand is whether you are getting the same messages
sent multiple times from the client causing multiple events, or whether the
one event is generating multiple alerts.

>From what I can tell, a red "msgs" status will stay red for only one
5-minute client cycle.  The next time the client sends its client data
report, if the logfile in question has no new matching lines, it will
actively generate a green status.

J
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.xymon.com/pipermail/xymon/attachments/20141029/cf6ab592/attachment.html>