[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [hobbit] Using time in alerts
- To: hobbit (at) hswn.dk
- Subject: Re: [hobbit] Using time in alerts
- From: Michael Frey <michael_frey (at) glic.com>
- Date: Fri, 6 Jan 2006 15:29:44 -0500
- Cc: hobbit (at) hswn.dk
I am getting the following on my hobbitd page:
hostname ????.com in tree, but no host-info
Michael Frey
Intel Senior Systems Engineer
The Guardian Life Insurance Company of America
3900 Burgess Place, 2-West
Bethlehem, PA 18017
E-Mail: Michael_frey (at) glic.com
Phone: 610-807-7889
Fax: 610-807-6003
James B Horwath <JamesHorwath (at) glic.com>
01/06/2006 03:16 PM
Please respond to
hobbit (at) hswn.dk
To
hobbit (at) hswn.dk
cc
Subject
[hobbit] Using time in alerts
It appears using times for alerting is not working as I expect.
I have this rule:
HOST=$MY_HOSTS
MAIL $UnixEmail SERVICE=$UnixServices REPEAT=15m RECOVERED
TIME:1-5:0800:1659
MAIL $UnixEmail SERVICE=$UnixServices REPEAT=60m RECOVERED
TIME:1-5:0000:0759,1-5:1700:2359
MAIL $UnixEmail SERVICE=$UnixServices REPEAT=60m RECOVERED
TIME:06:0000:2359
Based on these rules I would expect only one rule match at any time.
But when I run the command:
/usr/local/hobbit/server/bin/bbcmd hobbitd_alert --test jimhost cpu
I receive a message saying it matched three times.
Shouldn't the time token apply to the rule?
Please advise,
Jim
This message, and any attachments to it, may contain information that
is privileged, confidential, and exempt from disclosure under
applicable law. If the reader of this message is not the intended
recipient, you are notified that any use, dissemination, distribution,
copying, or communication of this message is strictly prohibited. If
you have received this message in error, please notify the sender
immediately by return e-mail and delete the message and any
attachments. Thank you.