[Xymon] Alerts STOP command not working

Fri Mar 1 23:16:07 CET 2019

I'm definitely getting the 5 minute and 15 minute (email and "text")
alarms.  I haven't waited to find out if the 60 minute one was working at
all or not as I'm trying to not get the 5m and 15m ones in the first place.

Josh Luthman
Office: 937-552-2340
Direct: 937-552-2343
1100 Wayne St
Suite 1337
Troy, OH 45373

On Fri, Mar 1, 2019 at 3:52 PM Larry Bonham <larry at fni-stl.com> wrote:

> It had been long enough that I didn’t recall the exact problem.  I checked
> the archives.  My problem was I was getting multiple recovered
> notifications since STOP didn’t include RECOVERED by default.  So a
> different problem than you are experiencing.
>
>
>
> Are you getting all three alerts and recoveries or just the last two
> alerts since the DURATION on the first one has not been met?
>
>
>
> Here is a note I have in my alerts.cfg on proper use of DURATION and
> STOP.  Again, may not be your exact problem.
>
>
>
> # Here is the proper way to handle a DURATION setting when you don't want
> any notification to happen
>
> # until it is in an alert condition for at least 2 minutes.
> #
>
> # If you don't use $STOP it will fail to match if the duration is not met.
>
> # It will then NOT stop processing and will fall down to the default alert
> notifications which are immediate.
>
> #
>
> # PAGE=%url/.* EXSERVICE=sslcert
>
> #       MAIL notify at us.com DURATION>2 REPEAT=60 RECOVERED
>
> #       $STOP   <-- see definition below
>
> #
>
>
>
> *From:* Josh Luthman [mailto:josh at imaginenetworksllc.com]
> *Sent:* Friday, March 1, 2019 1:27 PM
> *To:* Larry Bonham
> *Cc:* Xymon MailingList
> *Subject:* Re: [Xymon] Alerts STOP command not working
>
>
>
> I'm getting both red and recovered alerts in my case.  In your case were
> you not getting red alerts but you were getting recovered messages?
>
>
>
> I'm using Xymon 4.3.28 on CentOS 7.6
>
>
>
> Josh Luthman
> Office: 937-552-2340
> Direct: 937-552-2343
> 1100 Wayne St
> Suite 1337
> Troy, OH 45373
>
>
>
>
>
> On Fri, Mar 1, 2019 at 2:14 PM Larry Bonham <larry at fni-stl.com> wrote:
>
> Josh,
>
>
>
> This may not be your problem but I had issues  in the past similar to
> this.  My problem turned out to be how RECOVERED was being handled.  I’m
> using xymon 4.3.28 on Redhat 7.6.
>
>
>
> I defined this macro at the top of the rule set in alerts.cfg and replaced
> all STOP instances with $STOP.
>
>
>
> # !!!!!!!!!! IMPORTANT !!!!!!!!!!!!!!!!!!
>
> # Define macro to halt any further rule evaluation.
>
> # Both IGNORE and RECOVERED are needed.
>
> $STOP=IGNORE RECOVERED
>
>
>
> Larry
>
>
>
> *From:* Xymon [mailto:xymon-bounces at xymon.com] *On Behalf Of *Josh Luthman
> *Sent:* Friday, March 1, 2019 9:11 AM
> *To:* Ralph Mitchell
> *Cc:* Xymon MailingList
> *Subject:* Re: [Xymon] Alerts STOP command not working
>
>
>
> Sorry trying to sanitize let me repost...
>
>
>
> # tail -n 14 alerts.cfg
>
> HOST=windows10.imaginenetworksllc.com
>
>   MAIL josh at imaginenetworksllc.com COLOR=RED DURATION>60m REPEAT=60
> RECOVERED
>
>   STOP
>
>
>
> HOST=%.*\.imaginenetworksllc\.com
>
>   MAIL 11111111111111 at vtext.com COLOR=RED DURATION>15m RECOVERED
> FORMAT=SMS
>
>
>
> HOST=*
>
>   MAIL josh at imaginenetworksllc.com COLOR=RED DURATION>5m REPEAT=60
> RECOVERED
>
>
>
> # include additional sections
>
> directory /etc/xymon/alerts.d
>
>
>
>
>
> Josh Luthman
> Office: 937-552-2340
> Direct: 937-552-2343
> 1100 Wayne St
> Suite 1337
> Troy, OH 45373
>
>
>
>
>
> On Fri, Mar 1, 2019 at 10:02 AM Ralph Mitchell <ralphmitchell at gmail.com>
> wrote:
>
> Just a minor nit-pick - does the actual file have the same typo in the
> hostname in the first entry??
>
>
>
>      HOST=windows10.imaignenetworksllc.com
>
>
>
> Ralph Mitchell
>
>
>
>
>
> On Fri, Mar 1, 2019 at 9:50 AM Josh Luthman <josh at imaginenetworksllc.com>
> wrote:
>
> Does anyone have a working example of STOP?
>
>
>
> The man page says:
>
> #    STOP      - Valid for a recipient: If this recipient gets an
>
> #                alert, recipients further down in alerts.cfg
>
> #                are ignored.
>
>
>
> This doesn't seem to be the case, though.  The second and third statements
> are happening even though the first has a STOP.
>
>
>
> HOST=windows10.imaignenetworksllc.com
>
>   MAIL josh at imaginenetworksllc.com COLOR=RED DURATION>60m REPEAT=60
> RECOVERED
>
>   STOP
>
>
>
> HOST=%.*\.imaginenetworksllc\.com
>
>   MAIL 1231231234 at vtext.com COLOR=RED DURATION>15m RECOVERED FORMAT=SMS
>
>
>
> HOST=*
>
>   MAIL josh at imaginenetworksllc.com COLOR=RED DURATION>5m REPEAT=60
> RECOVERED
>
>
>
>
>
> Josh Luthman
> Office: 937-552-2340
> Direct: 937-552-2343
> 1100 Wayne St
> Suite 1337
> Troy, OH 45373
>
> _______________________________________________
> Xymon mailing list
> Xymon at xymon.com
> http://lists.xymon.com/mailman/listinfo/xymon
>
>
> ------------------------------
>
>
> CONFIDENTIALITY NOTICE:
> This electronic mail message is intended exclusively for
> recipient to which it is addressed. The contents of this message
> and any attachments may contain confidential and privileged
> information. Any unauthorized review, use, print, storage, copy,
> disclosure or distribution is strictly prohibited. If you have
> received this message in error, please advise the sender
> immediately by replying to the message's sender and delete all
> copies of this message and its attachments without disclosing
> the contents to anyone, or using the contents for any purpose.
>
>
> ------------------------------
>
> CONFIDENTIALITY NOTICE:
> This electronic mail message is intended exclusively for
> recipient to which it is addressed. The contents of this message
> and any attachments may contain confidential and privileged
> information. Any unauthorized review, use, print, storage, copy,
> disclosure or distribution is strictly prohibited. If you have
> received this message in error, please advise the sender
> immediately by replying to the message's sender and delete all
> copies of this message and its attachments without disclosing
> the contents to anyone, or using the contents for any purpose.
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.xymon.com/pipermail/xymon/attachments/20190301/6e001c69/attachment.html>