[Xymon] Duplicated recovery alerts

Larry Bonham larry at fni-stl.com
Fri Feb 27 17:45:59 CET 2015


I've had a long term problem with receiving duplicated recovery alerts.  Only with a small number of tests.  Most of them seem to have an underscore or dash in the test name.  But not always.  On the alerting side I'm not getting any duplication.  Only on recovery.

Now using 4.3.18 on RHEL 6.6.

It's like the IGNORE line is not getting read during the recovery phase.  In my example below, line 386 should be the only alert I receive.  And it is during alerting.

Any advice would be appreciated.

Larry B.

# Email subject lines for the duplicated recovery notices.  cfid:386 should be the only one.

Xymon qa_ccsic_ccs_red_alert:http recovered [cfid:409]
Xymon qa_ccsic_ccs_red_alert:http recovered [cfid:386]
Xymon qa_ccsic_ccs_red_alert:http recovered [cfid:550]


# xymon/server/etc/hosts.cfg

0.0.0.0 qa_ccsic_ccs_red_alert # noconn nosslcert https://<internal_URL>/cgi-bin/ccs_red_alert.pl


# related alerts.cfg sections

# should be handled in this section and stop

384  PAGE=%url/FNIBOCS HOST=%(qa|test|launch)_ccsic_ccs.*_(redalert|red_alert) EXSERVICE=sslcert
385         MAIL <various_internal_email_addresses> DURATION>2 REPEAT=60 RECOVERED
386 -->     MAIL <internal_systems_group_address> DURATION>2 REPEAT=60 RECOVERED COLOR=yellow,red
387         IGNORE

# Matches this rule but should have not gotten past the above rule 384

407  PAGE=%url/.* EXSERVICE=sslcert
408        MAIL <various_internal_email_addresses> DURATION>2 REPEAT=60 RECOVERED COLOR=yellow,red
409 -->    MAIL <internal_systems_group_address> DURATION>2 REPEAT=60 RECOVERED COLOR=yellow,red
410        ...
411        ...
412        ...
413        ...
414        ...
415        ...
416        ...
417        ...
418        SCRIPT /data/bin/xymon-page.sh sys DURATION>2 FORMAT=SCRIPT REPEAT=60 RECOVERED COLOR=red,purple
419        IGNORE

# Catch all rule

548  HOST=* EXSERVICE=%$NoNotifySvc EXHOST=%$Windows|$NoPage|$SLA_MF66|$SLA_MF66_ESX EXPAGE=%(dev|uatest)
549        ...
550 -->    MAIL <internal_systems_group_address> REPEAT=1440 RECOVERED COLOR=yellow,red
551        SCRIPT /data/bin/xymon-page.sh sys FORMAT=SCRIPT REPEAT=60 RECOVERED COLOR=red
552        IGNORE

=========================================================

Larry D. Bonham

Financial Network Inc.
10401-F Baur
Olivette, MO 63132

(314) 400-9412 voice
(314) 997-5647 fax
=========================================================



________________________________

CONFIDENTIALITY NOTICE:
This electronic mail message is intended exclusively for
recipient to which it is addressed. The contents of this message
and any attachments may contain confidential and privileged
information. Any unauthorized review, use, print, storage, copy,
disclosure or distribution is strictly prohibited. If you have
received this message in error, please advise the sender
immediately by replying to the message's sender and delete all
copies of this message and its attachments without disclosing
the contents to anyone, or using the contents for any purpose.


More information about the Xymon mailing list