[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: Alerting rules - covering 24h interval.
- To: hobbit (at) hswn.dk
- Subject: Re: Alerting rules - covering 24h interval.
- From: Kii NODA <kii.noda (at) gmail.com>
- Date: Wed, 27 Jan 2010 22:59:58 +0200
- Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:in-reply-to:references :date:message-id:subject:from:to:content-type; bh=o0r1X/Moj1PvNXpzIPLd9cUCUFeuo87FB/7NKLATpR4=; b=bn2xpKporqFYe5XQvqkcqfMfqs9oL78OeJlvJd28bGA0//r5rCRaPdqd4cpTnX0J1C q21r+yrE+x0RDXytEPH1uUV/PQykvrP1f4zbfeZ0pBNC/8ui+zGbODVkRdCOiRkdLqR5 8Gm5NKzKHeTXZLsuaEhmxGhnIjiWrsT1AjF48=
- Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :content-type; b=DxtCiDgTUeTe15D4i2IytePjiuoRWiazSk2VQ6fz6TNem6z6pB+O0ZEJiskNACzpX8 yH1KMnkMrcXTJC0aBcHshoPQMxx/C/yVeorjKM0B86414zscdb1D5KBugdH6azEZnO5I R7listyHEEzE7H4Lea346SXzTYA0VgtcF+2So=
- References: <86461ff21001270855k49204b72o3b8051073c4bbd44 (at) mail.gmail.com>
Hi everyone,
To answer my own question, in short: "TIME=*:2300:0759" is equivalent to
"TIME=*:2300:2400,*:0000:0759" and thus solves our problem. Xymon is indeed
a fine and well-thought piece of software.
Expanded explanation: While RTFM-ing 'man bb-hosts' and 'man
hobbit-alerts.cfg' I could find out that the time format of the alerts has
the same format as DOWNTIME has in bb-hosts which in turn has the same
format as NKTIME. Even more, NKTIME is explicitly allowing the following:
--- cut here ---
The interval between starttime and endtime may cross midnight, e.g.
*:2330:0200 would be valid and have the same effect as
*:2330:2400,*:0000:0200.
--- and here ---
Sorry for the noise, thought I'd mention my findings for future reference.
On Wed, Jan 27, 2010 at 6:55 PM, Kii NODA <kii.noda (at) gmail.com> wrote:
> Hi everyone,
>
> In our journey towards completely and successfully deploying Xymon on our
> machines we've come over this situation: we want to have an alert coming to
> us if the duration is over 30 minutes between 0800 and 2259 AND every 60
> minutes between 2300 and 0759 the next day. They need to be repeated every
> 120 minutes in both cases.
>
> 1. Would the following set of rules work given a setting like
> "TIME=*:2300:0759"?
> --- cut here ---
> MAIL email (at) recipient.tld DURATION>30 REPEAT=120 RECOVERED NOTICE
> TIME=*:0800:2259
> MAIL email (at) recipient.tld DURATION>60 REPEAT=120 RECOVERED NOTICE
> TIME=*:2300:0759
> --- and here ---
>
[ snip ]
--
kN