Alan Sparks <mailto:user-8f2174fd8b66@xymon.invalid> wrote:
SebA wrote:
This seems to be a bug (or at least a flaw) in the alerting system
(on hobbit trunk from Dec 2008): a recovery is sent for a MAIL
alert that never actually sent an alert in the first place. The
last two lines in the notifications.log are recoveries that were
sent at the exact same time. But only 1 alert (alarm) was actually
sent out.
I have a feeling you're seeing an artifact of some oddities in how the
alerts module matches up events and paging rules. You can see my
analysis writeup here (however, I never solved the problem):
http://www.hswn.dk/hobbiton/2008/07/msg00132.html
-Alan
Yes, it looks like you're right Alan. I really think the alerts module needs
a bit of a rewrite... I've already posted about several flaws in it over the
past year... It just doesn't seem to be possible to get it doing what I want
(and expect) for several different tests / scenarios (at the same time).
SebA