[hobbit] Some thoughts about alerts, acks and escalations
Larry.Barber at usda.gov
Larry.Barber at usda.gov
Wed Apr 13 16:16:21 CEST 2005
Yes, very useful. I think the biggest flaw with BigBrother is the way
one red alert can mask subsequent red alerts, even alerts from different
machines. There needs to be a way for the operations people to clear an
alert after they've noticed it and logged it.
Thanks,
Larry Barber
On Wed, 2005-04-13 at 00:49 -0500, henrik at hswn.dk wrote:
> I'm beginning to look at the issue of escalating alerts. And I've had
> an idea that I'd like to get some feedback on before I go ahead and
> implement it.
>
> Right now, Hobbit doesn't handle escalating an alert. When someone
> receives an alert message, they can ack it - when they do, all alerts
> stop and the item disappears from the "Critical systems" page (the NK
> page).
>
> BB has the concept of escalating an alert, meaning that some
> recipients of an alert will get the alert message even if the alert
> has been acknowledged.
>
>
> What I'd like to have is the BB system with a finer granularity. A
> recipient in the hobbit-alerts.cfg file has an associated "level",
> default is 1.
>
> I want our NOC guys who do nothing but stare at the NK page 24x7 to
> be
> able to acknowledge an alert - and that just gets it off their
> monitor, it doesn't stop alerts from going out. A "level 0"
> acknowledgment - this is just to log that a trouble ticket has been
> raised for the issue.
>
> A technician (who is a "level 1" recipient) can acknowledge the alert
> he receives - this will stop alert messages from going out to other
> "level 1" receipients, so all of the engineers can concentrate on
> doing what needs to be done.
>
> Alerts will still be sent to recipients who are "level 2" and above -
> these are the equivalent of the BB "escalation" alerts. They can ack
> the alert if they'd like to turn off more alert messages, of course.
>
> You can have even higher levels if you like, probably going up the
> hierarchy of managers. I don't think we'll using more than the 3
> levels I've described, but there is no reason to impose any limit.
>
>
> Does that sound like it would be useful?
>
>
> Regards,
> Henrik
>
> To unsubscribe from the hobbit list, send an e-mail to
> hobbit-unsubscribe at hswn.dk
>
>
>
More information about the Xymon
mailing list