Brehm, Scott wrote:
Is it normal to get two alert messages if an event matches two rules? Is there a keyword to suppress multiple alert emails from the same event? I've been running 4.0 for a while, but just getting in to configuring alerts. My hobbit-alerts.cfg includes the following:
HOST=* SERVICE=conn
MAIL user-43f0e15c2cc9@xymon.invalid <mailto:user-43f0e15c2cc9@xymon.invalid> COLOR=red
HOST=%atscm
MAIL user-43f0e15c2cc9@xymon.invalid <mailto:user-43f0e15c2cc9@xymon.invalid> COLOR=red
MAIL user-e7eda2829196@xymon.invalid <mailto:user-e7eda2829196@xymon.invalid> COLOR=red
HOST=%atscs
MAIL user-43f0e15c2cc9@xymon.invalid <mailto:user-43f0e15c2cc9@xymon.invalid> COLOR=red
MAIL user-78aee4d399ab@xymon.invalid <mailto:user-78aee4d399ab@xymon.invalid> COLOR=red
I want alerts for any connection problems, but only want alerts for other hosts if they come from two specific sets of hosts. Unfortunately I'm getting a match for both the first rule and the second or third rule when there is conn alert for one of the two. I'm now using EXSERVICE=conn for myself on rules two and three, but still curious.
Scott Brehm
IT Manager
L3 Communications - Titan (ATS/ATAG)
XXXX Carmel Mountain Rd, San Diego CA, 92121
XXX-XXX-XXXX
There is/was a STOP statement on a rule I think but not sure if its still there and if it will do what you want it to
Allan