Xymon Mailing List Archive search

Getting doubled alerts

list Scott Brehm
Fri, 7 Oct 2005 09:45:32 -0700
Message-Id: <user-0a749c65b90d@xymon.invalid>

Is there a keyword to suppress multiple alert emails from the same event?
I've been running 4.0 for a while, but just getting in to configuring
alerts. My hobbit-alerts.cfg includes the following:
HOST=* SERVICE=conn
        MAIL user-43f0e15c2cc9@xymon.invalid COLOR=red
HOST=%atscm
        MAIL user-43f0e15c2cc9@xymon.invalid COLOR=red
        MAIL user-e7eda2829196@xymon.invalid COLOR=red
HOST=%atscs
        MAIL user-43f0e15c2cc9@xymon.invalid COLOR=red
        MAIL user-78aee4d399ab@xymon.invalid COLOR=red
I want alerts for any connection problems, but only want alerts for
other hosts if they come from two specific sets of hosts. 
As you've found out yourself, EXSERVICE=conn on the two host-specific
rules will do it. Instead, you could also use the keyword "STOP" with
the "conn" rule - like

 HOST=* SERVICE=conn
         MAIL user-43f0e15c2cc9@xymon.invalid COLOR=red STOP
  This will make the alert-handler stop looking for recipients after your
general "conn" rule has been matched.


Henrik

Will placing the STOP as shown stop looking for just conn events or all
events? And for just sbrehm or for all persons? In the example I still
need to notify person2 and person3 of connection problems with their
systems.

Scott