Xymon Mailing List Archive search

Xymon alerting when it's been told not to

list Martin Ward
Mon, 13 May 2013 16:15:37 +0000
Message-Id: <user-2fa90b6a373b@xymon.invalid>

Thanks Larry, Carl and Mike, I couldn't find that repeat option anywhere, clearly I was looking in the wrong places!

|\/|

--
Martin Ward
Manager, Technical Services
Service Operations

DDI:+44 (0) 20 7863 5218 / Fax: +XX (X)XX XXXX XXXX /  www.colt.net<http://www.colt.net/>;
Colt Technology Services, Unit XX, Powergate Business Park, Volt Avenue, Park Royal, London, NW10 6PW, UK.

Help reduce your carbon footprint | Think before you print. Registered in England and Wales, registered number 02452736, VAT number GB 645 4205 50

From: Larry Barber [mailto:user-6ef9c2864140@xymon.invalid]
Sent: 13 May 2013 17:10
To: Ward, Martin
Cc: user-ce4a2c883f75@xymon.invalid; xymon at xymon.com
Subject: Re: [Xymon] Xymon alerting when it's been told not to

The default repeat interval (set in xymonserver.cfg) is 30 minutes.

Thanks,
Larry Barber

On Mon, May 13, 2013 at 10:10 AM, Ward, Martin <user-2d33a6eb6a05@xymon.invalid<mailto:user-2d33a6eb6a05@xymon.invalid>> wrote:
My apologies, I hit the "Send" button accidentally, a bit more info would have helped :-(

I ran the " xymoncmd xymond_alert --test" as you suggested and it is definitely matching on the right entry:

00019291 2013-05-13 15:52:53 *** Match with 'PAGE=SMARTS        HOST=%sm[0-9]* EXSERVICE=files,msgs,ports,cpu' ***

The lines in the logfile there are:

PAGE=SMARTS     HOST=%sm[0-9]* EXSERVICE=files,msgs,ports,cpu
        SCRIPT /opt/xymon/server/ext/html_mail.pl<http://html_mail.pl>; user-569f3875c7f6@xymon.invalid<mailto:user-569f3875c7f6@xymon.invalid> DURATION>1h COLOR=red RECOVERED STOP

AFAIK this means that the alert should only be sent once, however it is being sent every thirty minutes as the lines from the log file show:
Mon May 13 00:11:27 2013 sm9.lon.oss.colt.net.procs (212.74.77.85) user-569f3875c7f6@xymon.invalid<mailto:user-569f3875c7f6@xymon.invalid> 1368400263 300
Mon May 13 00:41:31 2013 sm9.lon.oss.colt.net.procs (212.74.77.85) user-569f3875c7f6@xymon.invalid<mailto:user-569f3875c7f6@xymon.invalid> 1368402066 300
Mon May 13 01:11:50 2013 sm9.lon.oss.colt.net.procs (212.74.77.85) user-569f3875c7f6@xymon.invalid<mailto:user-569f3875c7f6@xymon.invalid> 1368403886 300
Mon May 13 01:42:03 2013 sm9.lon.oss.colt.net.procs (212.74.77.85) user-569f3875c7f6@xymon.invalid<mailto:user-569f3875c7f6@xymon.invalid> 1368405699 300
Mon May 13 02:12:13 2013 sm9.lon.oss.colt.net.procs (212.74.77.85) user-569f3875c7f6@xymon.invalid<mailto:user-569f3875c7f6@xymon.invalid> 1368407508 300
Mon May 13 02:42:21 2013 sm9.lon.oss.colt.net.procs (212.74.77.85) user-569f3875c7f6@xymon.invalid<mailto:user-569f3875c7f6@xymon.invalid> 1368409316 300

I cannot fathom why it repeats at all so rather that look for something that isn't there, for now I have forced every alert to repeat every seven days but I would like to understand more about why this is working the way it is rather than the way it is supposed to (or I think it is supposed to!).

|\/|artin
--
Martin Ward
Manager, Technical Services
Service Operations

DDI:+44 (0) 20 7863 5218<tel:%2B44%20%280%29%2020%207863%205218> / Fax: +XX (X)XX XXXX XXXX<tel:%2B44%20%280%2920%207863%209999> /  www.colt.net<http://www.colt.net>;
Colt Technology Services, Unit XX, Powergate Business Park, Volt Avenue, Park Royal, London, NW10 6PW, UK.

Help reduce your carbon footprint | Think before you print. Registered in England and Wales, registered number 02452736, VAT number GB 645 4205 50

-----Original Message-----
From: Ward, Martin
Sent: 13 May 2013 16:02
To: 'user-ce4a2c883f75@xymon.invalid<mailto:user-ce4a2c883f75@xymon.invalid>'
Cc: xymon at xymon.com<mailto:xymon at xymon.com>
Subject: RE: [Xymon] Xymon alerting when it's been told not to

I cannot fathom why it repeats at all so rather that look for something that
isn't there I have forced every alert to repeat every seven days to see if that
resolves the issue!

|\/|
--
Martin Ward
Manager, Technical Services
Service Operations

DDI:+44 (0) 20 7863 5218<tel:%2B44%20%280%29%2020%207863%205218> / Fax: +XX (X)XX XXXX XXXX<tel:%2B44%20%280%2920%207863%209999> /  www.colt.net<http://www.colt.net>; Colt
Technology Services, Unit XX, Powergate Business Park, Volt Avenue, Park
Royal, London, NW10 6PW, UK.

Help reduce your carbon footprint | Think before you print. Registered in
England and Wales, registered number 02452736, VAT number GB 645 4205
50

-----Original Message-----
From: user-ce4a2c883f75@xymon.invalid<mailto:user-ce4a2c883f75@xymon.invalid> [mailto:user-ce4a2c883f75@xymon.invalid<mailto:user-ce4a2c883f75@xymon.invalid>]
Sent: 04 March 2013 11:27
To: Ward, Martin
Cc: xymon at xymon.com<mailto:xymon at xymon.com>
Subject: Re: [Xymon] Xymon alerting when it's been told not to

On Mon, 4 Mar 2013 09:19:25 +0000, "Ward, Martin"
<user-2d33a6eb6a05@xymon.invalid<mailto:user-2d33a6eb6a05@xymon.invalid>>
wrote:
Hi all,

I have the following in my alerts.cfg:
[snip]
Yet I am still getting CPU alerts from ivma2.lon.osspriv.colt.net<http://ivma2.lon.osspriv.colt.net>;
Try running
   xymoncmd xymond_alert --test ivma2.lon.osspriv.colt.net<http://ivma2.lon.osspriv.colt.net>; cpu and
look for lines like

00004226 2013-03-04 12:24:11 Matching host:service:dgroup:page
'cscxymweb3.csc.dk:disk:Xymon
servers:cscdk/mwsmonitor,cscdk/mwsmonitor'
against rule line 1260
00004226 2013-03-04 12:24:11 *** Match with 'MAIL $XYMONADM
$XYMONADMREPEAT' ***
00004226 2013-03-04 12:24:11 Mail alert with command '/usr/bin/mail -s
"Xymon [12345] cscxymweb3.csc.dk:disk CRITICAL (RED)"
user-fe4cb829cfaa@xymon.invalid<mailto:user-fe4cb829cfaa@xymon.invalid>'
00004226 2013-03-04 12:24:11 Matching host:service:dgroup:page
'cscxymweb3.csc.dk:disk:Xymon
servers:cscdk/mwsmonitor,cscdk/mwsmonitor'
against rule line 126

to see which rule triggers the alert.


Regards,
Henrik
[Colt Disclaimer]
This email is from an entity of the Colt group of companies.
Colt Group S.A., K2 Building, Forte 1, 2a rue Albert Borschette, L-1246 Luxembourg, R.C.S. B115679.
Corporate and contact information for our entities can be found at
http://colt.net/uk/en/Colt-Group-of-Companies/index.htm.
Internet communications are not secure and Colt does not accept
responsibility for the accurate transmission of this message. Content
of this email or its attachments is not legally or contractually binding
unless expressly previously agreed in writing by Colt