[Xymon] Alerts STOP command not working

[Josh Luthman]

Just checking to see if anyone has any idea why this would be an issue for
me as it doesn't sound like it's a bug (if it's working as expected for
Larry).

Josh Luthman
Office: 937-552-2340
Direct: 937-552-2343
1100 Wayne St
Suite 1337
Troy, OH 45373


On Fri, Mar 1, 2019 at 5:16 PM Josh Luthman <josh at imaginenetworksllc.com>
wrote:

> I'm definitely getting the 5 minute and 15 minute (email and "text")
> alarms.  I haven't waited to find out if the 60 minute one was working at
> all or not as I'm trying to not get the 5m and 15m ones in the first place.
>
> Josh Luthman
> Office: 937-552-2340
> Direct: 937-552-2343
> 1100 Wayne St
> Suite 1337
> Troy, OH 45373
>
>
> On Fri, Mar 1, 2019 at 3:52 PM Larry Bonham <larry at fni-stl.com> wrote:
>
>> It had been long enough that I didn’t recall the exact problem.  I
>> checked the archives.  My problem was I was getting multiple recovered
>> notifications since STOP didn’t include RECOVERED by default.  So a
>> different problem than you are experiencing.
>>
>>
>>
>> Are you getting all three alerts and recoveries or just the last two
>> alerts since the DURATION on the first one has not been met?
>>
>>
>>
>> Here is a note I have in my alerts.cfg on proper use of DURATION and
>> STOP.  Again, may not be your exact problem.
>>
>>
>>
>> # Here is the proper way to handle a DURATION setting when you don't want
>> any notification to happen
>>
>> # until it is in an alert condition for at least 2 minutes.
>> #
>>
>> # If you don't use $STOP it will fail to match if the duration is not met.
>>
>> # It will then NOT stop processing and will fall down to the default
>> alert notifications which are immediate.
>>
>> #
>>
>> # PAGE=%url/.* EXSERVICE=sslcert
>>
>> #       MAIL notify at us.com DURATION>2 REPEAT=60 RECOVERED
>>
>> #       $STOP   <-- see definition below
>>
>> #
>>
>>
>>
>> *From:* Josh Luthman [mailto:josh at imaginenetworksllc.com]
>> *Sent:* Friday, March 1, 2019 1:27 PM
>> *To:* Larry Bonham
>> *Cc:* Xymon MailingList
>> *Subject:* Re: [Xymon] Alerts STOP command not working
>>
>>
>>
>> I'm getting both red and recovered alerts in my case.  In your case were
>> you not getting red alerts but you were getting recovered messages?
>>
>>
>>
>> I'm using Xymon 4.3.28 on CentOS 7.6
>>
>>
>>
>> Josh Luthman
>> Office: 937-552-2340
>> Direct: 937-552-2343
>> 1100 Wayne St
>> Suite 1337
>> Troy, OH 45373
>>
>>
>>
>>
>>
>> On Fri, Mar 1, 2019 at 2:14 PM Larry Bonham <larry at fni-stl.com> wrote:
>>
>> Josh,
>>
>>
>>
>> This may not be your problem but I had issues  in the past similar to
>> this.  My problem turned out to be how RECOVERED was being handled.  I’m
>> using xymon 4.3.28 on Redhat 7.6.
>>
>>
>>
>> I defined this macro at the top of the rule set in alerts.cfg and
>> replaced all STOP instances with $STOP.
>>
>>
>>
>> # !!!!!!!!!! IMPORTANT !!!!!!!!!!!!!!!!!!
>>
>> # Define macro to halt any further rule evaluation.
>>
>> # Both IGNORE and RECOVERED are needed.
>>
>> $STOP=IGNORE RECOVERED
>>
>>
>>
>> Larry
>>
>>
>>
>> *From:* Xymon [mailto:xymon-bounces at xymon.com] *On Behalf Of *Josh
>> Luthman
>> *Sent:* Friday, March 1, 2019 9:11 AM
>> *To:* Ralph Mitchell
>> *Cc:* Xymon MailingList
>> *Subject:* Re: [Xymon] Alerts STOP command not working
>>
>>
>>
>> Sorry trying to sanitize let me repost...
>>
>>
>>
>> # tail -n 14 alerts.cfg
>>
>> HOST=windows10.imaginenetworksllc.com
>>
>>   MAIL josh at imaginenetworksllc.com COLOR=RED DURATION>60m REPEAT=60
>> RECOVERED
>>
>>   STOP
>>
>>
>>
>> HOST=%.*\.imaginenetworksllc\.com
>>
>>   MAIL 11111111111111 at vtext.com COLOR=RED DURATION>15m RECOVERED
>> FORMAT=SMS
>>
>>
>>
>> HOST=*
>>
>>   MAIL josh at imaginenetworksllc.com COLOR=RED DURATION>5m REPEAT=60
>> RECOVERED
>>
>>
>>
>> # include additional sections
>>
>> directory /etc/xymon/alerts.d
>>
>>
>>
>>
>>
>> Josh Luthman
>> Office: 937-552-2340
>> Direct: 937-552-2343
>> 1100 Wayne St
>> Suite 1337
>> Troy, OH 45373
>>
>>
>>
>>
>>
>> On Fri, Mar 1, 2019 at 10:02 AM Ralph Mitchell <ralphmitchell at gmail.com>
>> wrote:
>>
>> Just a minor nit-pick - does the actual file have the same typo in the
>> hostname in the first entry??
>>
>>
>>
>>      HOST=windows10.imaignenetworksllc.com
>>
>>
>>
>> Ralph Mitchell
>>
>>
>>
>>
>>
>> On Fri, Mar 1, 2019 at 9:50 AM Josh Luthman <josh at imaginenetworksllc.com>
>> wrote:
>>
>> Does anyone have a working example of STOP?
>>
>>
>>
>> The man page says:
>>
>> #    STOP      - Valid for a recipient: If this recipient gets an
>>
>> #                alert, recipients further down in alerts.cfg
>>
>> #                are ignored.
>>
>>
>>
>> This doesn't seem to be the case, though.  The second and third
>> statements are happening even though the first has a STOP.
>>
>>
>>
>> HOST=windows10.imaignenetworksllc.com
>>
>>   MAIL josh at imaginenetworksllc.com COLOR=RED DURATION>60m REPEAT=60
>> RECOVERED
>>
>>   STOP
>>
>>
>>
>> HOST=%.*\.imaginenetworksllc\.com
>>
>>   MAIL 1231231234 at vtext.com COLOR=RED DURATION>15m RECOVERED FORMAT=SMS
>>
>>
>>
>> HOST=*
>>
>>   MAIL josh at imaginenetworksllc.com COLOR=RED DURATION>5m REPEAT=60
>> RECOVERED
>>
>>
>>
>>
>>
>> Josh Luthman
>> Office: 937-552-2340
>> Direct: 937-552-2343
>> 1100 Wayne St
>> Suite 1337
>> Troy, OH 45373
>>
>> _______________________________________________
>> Xymon mailing list
>> Xymon at xymon.com
>> http://lists.xymon.com/mailman/listinfo/xymon
>>
>>
>> ------------------------------
>>
>>
>> CONFIDENTIALITY NOTICE:
>> This electronic mail message is intended exclusively for
>> recipient to which it is addressed. The contents of this message
>> and any attachments may contain confidential and privileged
>> information. Any unauthorized review, use, print, storage, copy,
>> disclosure or distribution is strictly prohibited. If you have
>> received this message in error, please advise the sender
>> immediately by replying to the message's sender and delete all
>> copies of this message and its attachments without disclosing
>> the contents to anyone, or using the contents for any purpose.
>>
>>
>> ------------------------------
>>
>> CONFIDENTIALITY NOTICE:
>> This electronic mail message is intended exclusively for
>> recipient to which it is addressed. The contents of this message
>> and any attachments may contain confidential and privileged
>> information. Any unauthorized review, use, print, storage, copy,
>> disclosure or distribution is strictly prohibited. If you have
>> received this message in error, please advise the sender
>> immediately by replying to the message's sender and delete all
>> copies of this message and its attachments without disclosing
>> the contents to anyone, or using the contents for any purpose.
>>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.xymon.com/pipermail/xymon/attachments/20190312/cebc5c1c/attachment.html>