RE: [hobbit] Getting doubled alerts

["Brehm, Scott" <sbrehm (at) titan.com>]

> > Is there a keyword to suppress multiple alert emails from 
> the same event?
> > I've been running 4.0 for a while, but just getting in to 
> configuring
> > alerts. My hobbit-alerts.cfg includes the following:
> >  
> > HOST=* SERVICE=conn
> >         MAIL sbrehm (at) titan.com COLOR=red
> >  
> > HOST=%atscm
> >         MAIL sbrehm (at) titan.com COLOR=red
> >         MAIL person2 (at) titan.com COLOR=red
> >  
> > HOST=%atscs
> >         MAIL sbrehm (at) titan.com COLOR=red
> >         MAIL person3 (at) titan.com COLOR=red
> >  
> > I want alerts for any connection problems, but only want alerts for
> > other hosts if they come from two specific sets of hosts. 
> 
> As you've found out yourself, EXSERVICE=conn on the two host-specific
> rules will do it. Instead, you could also use the keyword "STOP" with
> the "conn" rule - like
> 
>  HOST=* SERVICE=conn
>          MAIL sbrehm (at) titan.com COLOR=red STOP
>   
> This will make the alert-handler stop looking for recipients 
> after your
> general "conn" rule has been matched.
> 
> 
> Henrik
> 
> 
Will placing the STOP as shown stop looking for just conn events or all
events? And for just sbrehm or for all persons? In the example I still
need to notify person2 and person3 of connection problems with their
systems.

Scott