More alert testing

[Rich Smrcina <rsmrcina (at) wi.rr.com>]

I have email macros configured thusly:

$pg-rich=%rsmrcina (at) wi.rr.com
$pg-tom=%(2628531588 (at) vtext.com|tbrockman (at) ourdomain.com)

In other words, Rich can be reached at a single email address, Tom with 
two addresses.

The notification is set up like this:

HOST=%(vse*|vm*) DURATION>5m
        MAIL $pg-tom
        MAIL $pg-rich

So if any test on a host beginning with vse or vm fails, both Tom and 
Rich will get a page after 5 minutes.

When I test the process, I get the following:

hobbit (at) hobbit1:~/server/bin> ./bbcmd hobbitd_alert --test vm2 conn
2005-05-31 14:00:10 Using default environment file 
/home/hobbit/server/etc/hobbitserver.cfg
00002400 2005-05-31 14:00:10 send_alert vm2:conn state Paging
00002400 2005-05-31 14:00:10 Matching host:service:page 'vm2:conn:' 
against rule line 145
00002400 2005-05-31 14:00:10 Failed 'HOST=%(vse*|vm*) DURATION>5m' (min. 
duration 0<300)

This is certainly not what I expected.  If I remove the DURATION value 
from the notification, I get:

hobbit (at) hobbit1:~/server/bin> ./bbcmd hobbitd_alert --test vm2 conn
2005-05-31 14:07:04 Using default environment file 
/home/hobbit/server/etc/hobbitserver.cfg
00002433 2005-05-31 14:07:04 send_alert vm2:conn state Paging
00002433 2005-05-31 14:07:04 Matching host:service:page 'vm2:conn:' 
against rule line 145
00002433 2005-05-31 14:07:04 *** Match with 'HOST=%(vse*|vm*)' ***
00002433 2005-05-31 14:07:04 Matching host:service:page 'vm2:conn:' 
against rule line 145
00002433 2005-05-31 14:07:04 *** Match with 'HOST=%(vse*|vm*)' ***
00002433 2005-05-31 14:07:04 Mail alert with command 'mail -s "Hobbit 
[12345] vm2:conn CRITICAL (RED)" 
%(2628531588 (at) vtext.com|tbrockman (at) ourdomain.com)'
00002433 2005-05-31 14:07:04 Matching host:service:page 'vm2:conn:' 
against rule line 145
00002433 2005-05-31 14:07:04 *** Match with 'HOST=%(vse*|vm*)' ***
00002433 2005-05-31 14:07:04 Mail alert with command 'mail -s "Hobbit 
[12345] gredevm2:conn CRITICAL (RED)" %rsmrcina (at) wi.rr.com'

Is this correct?  Do the macros get expanded when the emails are generated?

Thanks.

--
Rich Smrcina
VM Assist, Inc.
Main: (262)392-2026
Cell: (414)491-6001
Ans Service:  (360)715-2467
rich.smrcina at vmassist.com

Catch the WAVV!  http://www.wavv.org
WAVV 2006 - Chattanooga, TN - April 7-11, 2006