Odd issue with Release Candidate one and alerts

["Clark, Sean" <sean.clark (at) twcable.com>]

I just compiled and installed RC1 on a Red Hat EL5.5 server this AM, and have come across a strange issue – don't know if it's my configuration or something with the new version

It seems like it isn't following the DURATION flag for alerts

I have some rules for a host, it matches on two lines:


./xymond_alert --test hostname.subdomain.domain.com disk
00003158 2011-01-24 13:51:05 send_alert hostname.subdomain.domain.com:disk state Paging
00003158 2011-01-24 13:51:05 Matching host:service:page 'hostname.subdomain.domain.com:disk:unified-tex' against rule line 128
00003158 2011-01-24 13:51:05 *** Match with 'HOST=% SERVICE=%disk|inode|procs|temperature|bbd|http|conn|ssh' ***
00003158 2011-01-24 13:51:05 Matching host:service:page 'hostname.subdomain.domain.com:disk:unified-tex' against rule line 134
00003158 2011-01-24 13:51:05 *** Match with 'HOST=% SERVICE=%disk|inode|procs|temperature' ***



here is the alerts.cfg relevent sections:


   128  HOST=% SERVICE=%disk|inode|procs|temperature|bbd|http|conn|ssh
   129   MAIL=mailing-list (at) domain.com DURATION>20 REPEAT=60 COLOR=red RECOVERED



   134  HOST=% SERVICE=%disk|inode|procs|temperature
   135   MAIL=SMSgateways (at) txt.att.com TIME=06:0000:2359 DURATION>720 REPEAT=120 COLOR=red RECOVERED
   136   MAIL=SMSgateways (at) txt.att.com TIME=12345:0000:0559 DURATION>720 REPEAT=120 COLOR=red RECOVERED
   137   MAIL=SMSgateways (at) txt.att.com TIME=12345:0600:1759 DURATION>60 REPEAT=120 COLOR=red RECOVERED
   138   MAIL=SMSgateways (at) txt.att.com TIME=12345:1800:2359 DURATION>720 REPEAT=120 COLOR=red RECOVERED


What i am expecting from these rules/matches is

email mailing-list  if it's been red for > 20 minutes, and email on recovery

additionally

on Sat, Sunday, if it's been red for > 720 minutes, email my phone
on M-F, email my phone if it's been red for > 720 minutes & before 6am
after 7am, red > 60 minutes, after 6pm > 7200 minutes again



What is happening is

When a red even occurs, it immediately sends an email to mailing-list (at) domain.com , and an email to SMSgateways (at) txt.att.com


Does anyone know if this is my configuration that needs fixing , or something with 4.3.0?


-Sean




________________________________
This E-mail and any of its attachments may contain Time Warner Cable proprietary information, which is privileged, confidential, or subject to copyright belonging to Time Warner Cable. This E-mail is intended solely for the use of the individual or entity to which it is addressed. If you are not the intended recipient of this E-mail, you are hereby notified that any dissemination, distribution, copying, or action taken in relation to the contents of and attachments to this E-mail is strictly prohibited and may be unlawful. If you have received this E-mail in error, please notify the sender immediately and permanently delete the original and any copy of this E-mail and any printout.