[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [xymon] Odd issue with Release Candidate one and alerts
- To: xymon (at) xymon.com
- Subject: Re: [xymon] Odd issue with Release Candidate one and alerts
- From: Ryan Novosielski <novosirj (at) umdnj.edu>
- Date: Mon, 24 Jan 2011 14:32:26 -0500
- Organization: UMDNJ-IST/CST
- References: <C96333B4.6963%sean.clark (at) twcable.com>
- User-agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.13) Gecko/20101208 Lightning/1.0b2 Thunderbird/3.1.7
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Please do not thread hijack (that is to say, reply to a message, change
its contents and subject and send that as a new message). These messages
still contain an In-Reply-To: header that irritates people with a
threaded mail reader. Please compose new messages instead.
I'd post a link on ettiquette but apparently someone has erased the
Wikipedia definition.
On 01/24/2011 02:06 PM, Clark, Sean wrote:
> I just compiled and installed RC1 on a Red Hat EL5.5 server this AM, and have come across a strange issue – don't know if it's my configuration or something with the new version
>
> It seems like it isn't following the DURATION flag for alerts
>
> I have some rules for a host, it matches on two lines:
>
>
> ./xymond_alert --test hostname.subdomain.domain.com disk
> 00003158 2011-01-24 13:51:05 send_alert hostname.subdomain.domain.com:disk state Paging
> 00003158 2011-01-24 13:51:05 Matching host:service:page 'hostname.subdomain.domain.com:disk:unified-tex' against rule line 128
> 00003158 2011-01-24 13:51:05 *** Match with 'HOST=% SERVICE=%disk|inode|procs|temperature|bbd|http|conn|ssh' ***
> 00003158 2011-01-24 13:51:05 Matching host:service:page 'hostname.subdomain.domain.com:disk:unified-tex' against rule line 134
> 00003158 2011-01-24 13:51:05 *** Match with 'HOST=% SERVICE=%disk|inode|procs|temperature' ***
>
>
>
> here is the alerts.cfg relevent sections:
>
>
> 128 HOST=% SERVICE=%disk|inode|procs|temperature|bbd|http|conn|ssh
> 129 MAIL=mailing-list (at) domain.com DURATION>20 REPEAT=60 COLOR=red RECOVERED
>
>
>
> 134 HOST=% SERVICE=%disk|inode|procs|temperature
> 135 MAIL=SMSgateways (at) txt.att.com TIME=06:0000:2359 DURATION>720 REPEAT=120 COLOR=red RECOVERED
> 136 MAIL=SMSgateways (at) txt.att.com TIME=12345:0000:0559 DURATION>720 REPEAT=120 COLOR=red RECOVERED
> 137 MAIL=SMSgateways (at) txt.att.com TIME=12345:0600:1759 DURATION>60 REPEAT=120 COLOR=red RECOVERED
> 138 MAIL=SMSgateways (at) txt.att.com TIME=12345:1800:2359 DURATION>720 REPEAT=120 COLOR=red RECOVERED
>
>
> What i am expecting from these rules/matches is
>
> email mailing-list if it's been red for > 20 minutes, and email on recovery
>
> additionally
>
> on Sat, Sunday, if it's been red for > 720 minutes, email my phone
> on M-F, email my phone if it's been red for > 720 minutes & before 6am
> after 7am, red > 60 minutes, after 6pm > 7200 minutes again
>
>
>
> What is happening is
>
> When a red even occurs, it immediately sends an email to mailing-list (at) domain.com , and an email to SMSgateways (at) txt.att.com
>
>
> Does anyone know if this is my configuration that needs fixing , or something with 4.3.0?
>
>
> -Sean
>
>
>
>
> ________________________________
> This E-mail and any of its attachments may contain Time Warner Cable proprietary information, which is privileged, confidential, or subject to copyright belonging to Time Warner Cable. This E-mail is intended solely for the use of the individual or entity to which it is addressed. If you are not the intended recipient of this E-mail, you are hereby notified that any dissemination, distribution, copying, or action taken in relation to the contents of and attachments to this E-mail is strictly prohibited and may be unlawful. If you have received this E-mail in error, please notify the sender immediately and permanently delete the original and any copy of this E-mail and any printout.
>
> To unsubscribe from the xymon list, send an e-mail to
> xymon-unsubscribe (at) xymon.com
>
>
- --
- ---- _ _ _ _ ___ _ _ _
|Y#| | | |\/| | \ |\ | | |Ryan Novosielski - Sr. Systems Programmer
|$&| |__| | | |__/ | \| _| |novosirj (at) umdnj.edu - 973/972.0922 (2-0922)
\__/ Univ. of Med. and Dent.|IST/CST-Academic Svcs. - ADMC 450, Newark
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
iEYEARECAAYFAk0908kACgkQmb+gadEcsb6UvQCeLD6q9TmVwlTyiy7hSvoFR73b
G3cAoKVghoHR1qbCVlsUsd5Lc2MtysQV
=j//M
-----END PGP SIGNATURE-----