Getting doubled alerts
Is there a keyword to suppress multiple alert emails from the same event? I've been running 4.0 for a while, but just getting in to configuring alerts. My hobbit-alerts.cfg includes the following:HOST=* SERVICE=connMAIL user-43f0e15c2cc9@xymon.invalid COLOR=redHOST=%atscmMAIL user-43f0e15c2cc9@xymon.invalid COLOR=red MAIL user-e7eda2829196@xymon.invalid COLOR=redHOST=%atscsMAIL user-43f0e15c2cc9@xymon.invalid COLOR=red MAIL user-78aee4d399ab@xymon.invalid COLOR=redI want alerts for any connection problems, but only want alerts for other hosts if they come from two specific sets of hosts.As you've found out yourself, EXSERVICE=conn on the two host-specific rules will do it. Instead, you could also use the keyword "STOP" with the "conn" rule - like HOST=* SERVICE=conn MAIL user-43f0e15c2cc9@xymon.invalid COLOR=red STOP This will make the alert-handler stop looking for recipients after your general "conn" rule has been matched. Henrik
Will placing the STOP as shown stop looking for just conn events or all events? And for just sbrehm or for all persons? In the example I still need to notify person2 and person3 of connection problems with their systems. Scott