[Xymon] Phantom red statuses (Fwd: Xymon [750466] mgmtconsole:msgs CRITICAL (RED))

[Greg Earle]

I'm running Xymon 4.3.12-2 server (yeah, I know ...) on my management system.
(RHEL 6.5 currently)

A couple of days ago I migrated our central syslog server over to the
Xymon server, so now "/var/log/messages" is getting a ton of stuff in
it that it never had before since all my systems are now reporting in
to it.

Ever since then I've seen something weird - every hour (for about 17+ hours)
I was getting RED alerts for the management console's own "msgs" status, but
the actual e-mail notifications don't show anything marked red in them!

It's either yellow or, as in the forwarded message below, green.  I have no
idea why I was getting RED alerts for this file if it thinks it's yellow or
green - any ideas?

The only other thing I can add is that when I go to the Web page for
mgmtconsole:msgs, it says "WARNING: Flapping status" at the top.

Is that a clue?

(Update: interestingly, it looks like the status has finally changed to
 green a few minutes ago - after having been red for nearly 17 1/2 hours.
 Still seeing "WARNING: Flapping status" on the svcstatus Web page, though.)

Thanks,

	- Greg

> Begin forwarded message:
> 
> From: xymon Monitor <xymon at mgmtconsole.my.do.ma.in>
> Subject: Xymon [750466] mgmtconsole:msgs CRITICAL (RED)
> Date: February 11, 2016 at 11:57:25 AM PST
> To: sysadmins at mgmtconsole.my.do.ma.in
> 
> green Thu Feb 11 11:57:24 PST 2016 - Log files ok
> <pre>
> </pre>
> 
> No entries in <a href="/xymon-cgi/svcstatus.sh?CLIENT=mgmtconsole&SECTION=msgs:/var/log/messages">/var/log/messages</a>
> 
> 
> Full log <a href="/xymon-cgi/svcstatus.sh?CLIENT=mgmtconsole&SECTION=msgs:/var/log/messages">/var/log/messages</a>
> <...SKIPPED...>
> Feb 11 11:57:17 host7 nrpe[20194]: [ID 927837 daemon.info] connect from mtfuji
> 
> [... rest elided ... ]
> 
> See http://mgmtconsole/xymon-cgi/svcstatus.sh?HOST=mgmtconsole&SERVICE=msgs