[Xymon] Weird email alerts issue

[Malcolm Hunter]

SERVICE and TIME need to go on the same line as HOST

e.g.
HOST=$rcontrol TIME=W:1300:2200 SERVICE=conn DURATION>10
        MAIL $rcontrolpage REPEAT=1h


On Mon, 22 Mar 2021 at 14:09, Neal, Jonathan W via Xymon <xymon at xymon.com>
wrote:

>
>
>
> ---------- Forwarded message ----------
> From: "Neal, Jonathan W" <wes.neal at verizon.com>
> To: "xymon >> xymon at xymon.com" <xymon at xymon.com>
> Cc:
> Bcc:
> Date: Mon, 22 Mar 2021 10:01:15 -0400
> Subject: Weird email alerts issue
> Running Xymon 4.3.28, have been since release.  I rebuilt my alerts.cfg
> file from scratch and I have a weird issue with alerts I can't figure out.
>
> This seems to be happening on most if not all entries where I have a
> SERVICE=conn.  The only thing I really changed on all my entries was a new
> mail alias for them, the actual rule itself is the same as before.
>
> Entry looks like this:
>
> HOST=$rcontrol
>         MAIL $rcontrolmail REPEAT=2h DURATION>10 RECOVERED
>         MAIL $rcontrolmail SERVICE=conn DURATION>10 REPEAT=2d
>         MAIL $rcontrolpage SERVICE=conn DURATION>10 REPEAT=1h
> TIME=W:1300:2200
>         MAIL $sms-ems-oncall SERVICE=conn DURATION>10 REPEAT=2d
>
> I get an alert, it emails the proper people tied to $rcontrolmail, but it
> also tries to email SERVICE=conn .
>
> I can see them in the email log.
>
> Mon Mar 22 13:47:09 2021 host02.procs (159.98.104.166) SERVICE=conn[1022]
> 1616420829 300
>
> Mon Mar 22 12:59:03 2021 hostlan.disk (199.200.3.170) SERVICE=conn[725]
> 1616417943 100
>
> Anyone got an idea how to troubleshoot this or what might be causing it?
>
>
>
> ---------- Forwarded message ----------
> From: "Neal, Jonathan W via Xymon" <xymon at xymon.com>
> To: "xymon >> xymon at xymon.com" <xymon at xymon.com>
> Cc:
> Bcc:
> Date: Mon, 22 Mar 2021 10:01:15 -0400
> Subject: [Xymon] Weird email alerts issue
> _______________________________________________
> Xymon mailing list
> Xymon at xymon.com
> http://lists.xymon.com/mailman/listinfo/xymon
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.xymon.com/pipermail/xymon/attachments/20210322/fac26f3e/attachment.htm>