rule matching order

On Wed, Jun 06, 2007 at 12:44:47PM -0500, Daniel Bourque wrote:

HOST=blah
   mail foo SERVICE=http
   mail bar


If an http alert comes in for host "blah", will both foo and bar get an 
email , or both? if both , can I say:

Both will get an e-mail.

HOST=blah
   mail foo SERVICE=http
   mail bar SERVICE="!http"

Yes.


The easiest way to see how your alert rules work is to go to the "info"
column for a host; there's a section there listing who gets alerts for
each service.


Regards,
Henrik