On 11/3/2015 6:11 AM, Henrik Størner wrote:
Den 03-11-2015 01:59, John Thurston skrev:
Is there a mechanism through which I can dump certain host+test
combinations to /dev/null ?
Remove the host from your hosts.cfg, then Xymon will ignore updates from
it. Yes, it will still receive messages from it, but dropping them
immediately when the hostname is not found doesn't cost much processing.
Too bad if you do want to monitor *some* elements, but dropping the host
entirely from Xymon at least gives you some bargaining power towards the
people who mis-manage their monitored server.
Therein lies the rub. Xymon accepts all messages from a client, or it accepts none.
A host which has one business-critical test to report may also report an infinite number of bits of garbage. All of that garbage fills my logs and pushes everything else useful out of the "X events received in the past Y minutes" portion of the non-green screen. I beat, cajole, beg, but I can find no means by which to make an uncaring-host owner clean up their act.
re: Spam mail alerts back to the offending host owner
That will just add load to my alert-handler and mailer. The recipient will create a mail-server-side rule to flush my noise to /dev/null. This is a very ineffective whip unless the target email audience is very large.
It would be cool if there were a per-host "accept" tag. I could stick it in a .default. line in hosts.cfg, "accept=disk,cpu,conn,http". Any other test reported for the host would be dropped.
The underlying problem is Xymon assumes a friendly environment. Some of my host-owners are not being friendly :(
--
Do things because you should, not just because you can.
John Thurston XXX-XXX-XXXX
user-ce4d79d99bab@xymon.invalid
Enterprise Technology Services
Department of Administration
State of Alaska