Re: [hobbit] False alerts (was : Can't see my alert in the "info" column)

[Henrik Storner <henrik (at) hswn.dk>]

In <UQX708PZ3AFGXC02XC (at) mailvel.velizy.fr.sterianet> Frédéric Mangeant <frederic.mangeant (at) steria.com> writes:

>some alerts don't work as expected.

[snip config and summary of sent alerts]

>I think there are 2 false errors :
>- for each 'foo.cpu' alert I got paged twice, with the same ACK code.
>- I shouldn't have been paged between 11h05 and 12h05, nor after 13h00, for
>'foo.procs'

Could you try running "bbcmd hobbitd_alert --test foo cpu" ?

Also, if you add the option "--cfid" to the hobbitd_alert commandline
in hobbitlaunch.cfg, it will include the linenumber of the
hobbit-alerts.cfg file with each alert. That should make it easier to
track down what rules trigger an alert.


Regards,
Henrik