Strange Rule Matching Issue
list Chris Strzelczyk
Wed, 3 Sep 2008 09:29:51 -0400
Message-Id: <user-c2bce00eb8ee@xymon.invalid>
Hello, I have a strange rule matching issue.
I have a rule in my hobbit-alert file which looks like this:
*HOST=* SERVICE=*
MAIL $test COLOR=red REPEAT=10*
The rule **SHOULD** only send when the disk (or any other service) reaches
red color. I have disk defined in my hobbit-clients.cfg as:
*DISK * 90 95
• I have a server that currently has a filesystem filled to 91%. The server
name is 'stflnx1d'. I am getting the following emails:
*yellow Wed Sep 3 08:52:24 EDT 2008 - Filesystems NOT ok
&yellow /var (91% used) has reached the WARNING level (90%)*
I ran the bin/hobbitd_alert and got the following:
*00011596 2008-09-03 09:24:20 Matching host:service:page
'stflnx1d:disk:AIXDev' against rule line 138
00011596 2008-09-03 09:24:20 *** Match with 'MAIL $test COLOR=red REPEAT=10'
***
00011596 2008-09-03 09:24:20 Mail alert with command
'/var/spool/mail/mrhobbit "Hobbit [12345] stflnx1d:disk CRITICAL (RED)"
user-5306126c87d7@xymon.invalid'*
As you can see it matches the rule as RED even though I an the warning state
of yellow for the disk on the server. It also sends me the email with
Yellow status. It doesn't match any other rule. I tried setting the
COLOR=yellow in the rule and it didn't match. Can anybody tell me why
Hobbit thinks this is RED when it is really Yellow????
Thank You,
-cs