Hi Folks -
I'm a little confused to why something is happening in my alerts
config, so I thought I would ask for some help to clear up the
confusion.
I have a specific set of systems that I only want to alert on if the
procs alarm is on for 30 mins or more, while my default is 6 minutes
(1 more than the poller). So I have 2 things (well, for this, I have
a whole lot more doing other things):
# only alarm after 30 min machines
HOST=%echo.*.domain.com SERVICE=procs
MAIL $EMAIL_OPS DURATION>30m REPEAT=60m
MAIL $OPS_PAGER_1 DURATION>30m REPEAT=10m COLOR=red STOP
HOST=*
MAIL $EMAIL_OPS DURATION>6m REPEAT=60m
MAIL $OPS_PAGER_1 DURATION>6m REPEAT=10m COLOR=red
I _THOUGHT_ that if the STOP keyword was in there, it would stop
processing after that, but when I look in the web interface, I see
this:
procs user-e815642a386b@xymon.invalid 30m 1s - 1h - purple,yellow,red
user-3a422a0e9c0c@xymon.invalid,user-d2eb62b9ce4b@xymon.invalid (S) 30m 1s - 10m - red
user-e815642a386b@xymon.invalid 6m 1s - 1h - purple,yellow,red
user-3a422a0e9c0c@xymon.invalid,user-d2eb62b9ce4b@xymon.invalid 6m 1s - 10m - red
The lines after the first set are red (which makes me think it's
pointing out bad configuration?). What am I missing here?
Thanks!
Skadz