From: Hyppolite, Jean <user-ebfdd4b5e861@xymon.invalid>
Sent: Monday, May 18, 2020 10:52 AM
To: Scott Birl <user-e9368a101f99@xymon.invalid>
Subject: RE: [External] [Xymon] FW: alerts
Hi
Do you mean this rule below
HOST=*
??????? MAIL mailto:user-ef5f73c71700@xymon.invalid FORMAT=TEXT SERVICE=conn,disk,files,memory,svcs REPEAT=20M COLOR=red RECOVERED
Yes, that's a good start. Any other rules that apply to that server?
There's a few things missing that you may want to explicitly set: DURATION, REPEAT, and TIME, all of which are explained in alerts.cfg. That should help curb the excess alerts, and possibly prevent emails from being sent from flapping.
Another suggestion is to break down that rule into multiple rules, ie:
HOST=*
MAIL mailto:user-ef5f73c71700@xymon.invalid FORMAT=TEXT SERVICE=conn REPEAT=20M COLOR=red RECOVERED
MAIL mailto:user-ef5f73c71700@xymon.invalid FORMAT=TEXT SERVICE=disk REPEAT=20M COLOR=red RECOVERED
MAIL mailto:user-ef5f73c71700@xymon.invalid FORMAT=TEXT SERVICE=files REPEAT=20M COLOR=red RECOVERED
MAIL mailto:user-ef5f73c71700@xymon.invalid FORMAT=TEXT SERVICE=memory REPEAT=20M COLOR=red RECOVERED
MAIL mailto:user-ef5f73c71700@xymon.invalid FORMAT=TEXT SERVICE=svcs REPEAT=20M COLOR=red RECOVERED
That would allow you tweak the settings for individual services.
From: Xymon <mailto:xymon-bounces at xymon.com> On Behalf Of Hyppolite, Jean
Sent: Monday, May 18, 2020 10:39 AM
To: mailto:xymon at xymon.com
Subject: [External] [Xymon] FW: alerts
Also To clarify, A lot of alerts we are getting are delayed alerts, alerts that are being sent out hours later
From: Hyppolite, Jean
Sent: Monday, May 18, 2020 10:09 AM
To: mailto:xymon at xymon.com
Subject: alerts
Hello,
Our Xymon server is sending out a lot of excess and some false alerts. It seems that when a server is not reachable it sends the alerts out, but when the server recovers it never sends the > > > recovery message, but keeps sending the down critical messages. And idea what may be causing this? Is there? a way to look at exactly what alerts are being sent out from the xymon server from xymon? Also is there a way to configure xymon not to send out email alerts on flapping statuses?
Our Xymon server version is:? Xymon 4.3.30-1.el7.terabithia
Thanks
Jean
From: Scott Birl <mailto:user-e9368a101f99@xymon.invalid>
Sent: Monday, May 18, 2020 10:43 AM
To: mailto:xymon at xymon.com
Subject: RE: [External] [Xymon] FW: alerts
Please post the rules from alerts.cfg for that particular server.