[Xymon] Alerts not recognizing DURATION flag

[Eliza Danyi]

Hi all,

We had an incident this morning where a server's http check went red for 2m
35s starting at 04:15, recovering at 04:17 and sent out an alert at 04:21
with a subject 'servername:keepalive CRITICAL (RED)' and the body of the
message 'green Wed Nov 21 04:18:46 2018: Content OK'. The strange thing is
that in alerts.cfg the MAIL is set up with 'DURATION >5m' and should not be
sending out alerts at all if the problem does not persist for more than 5
minutes. In the info tab for this server it does show '1st Delay' as '5m
1s', so it appears to be seeing the setting, just not respecting it.

We are using Xymon 4.3.28-1.el7.terabithia running on CentOS 7.5.

Does anyone know why this might be happening?

Thanks,
*Eliza Danyi*
Operating Systems Analyst
VCU Computer Center
E-mail: danyiem at vcu.edu

*Don't be a phishing victim -- VCU and other reputable organizations will
never use email to request that you reply with your password, social
security number or confidential personal information.  For more details,
visit **https://ts.vcu.edu/about-us/information-security/common-questions/what-is-phishing/
<https://ts.vcu.edu/about-us/information-security/common-questions/what-is-phishing/>
*
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.xymon.com/pipermail/xymon/attachments/20181121/2ccce8fa/attachment.html>