Hi Jean
Alerts are sent by the xymond_alert module. You can find more information
about debugging (eg the "--test") in the man page for this tool.
The xymond_alert binary sends logs into a logfile, usually called
alerts.log. On my system, this is /var/log/xymon/alerts.log.
The alerts.cfg file has a "RECOVERED" keyword, which you might want to use.
I would have thought that a flapping condition would be just as important
to alert on as the underlying condition. I'd be interested to know your
circumstances relating to this.
You can also specify DURATION>30 to not send alerts until a fault condition
is persistent for more than 30 minutes. This may prevent alerts for
flapping conditions, in some cases. You can also adjust the global
flap-detection parameters - see the man page for xymond.
If you want more control over what alerts are sent out, you could implement
your own alerting script that filters some alerts out (such as any for a
flapping status). You would specify a "SCRIPT" recipient in alerts.cfg, and
your script could ascertain whether flapping was present, either from the
BBALPHAMSG environment variable, or by querying xymond using 'xymon
xymondboard' or something similar.
Cheers
Jeremy
On Tue, 19 May 2020 at 00:10, Hyppolite, Jean via Xymon <xymon at xymon.com>
wrote:
---------- Forwarded message ----------
From: "Hyppolite, Jean" <user-ebfdd4b5e861@xymon.invalid>
To: "xymon at xymon.com" <xymon at xymon.com>
Cc:
Bcc:
Date: Mon, 18 May 2020 14:08:40 +0000
Subject: alerts
Hello,
Our Xymon server is sending out a lot of excess and some false alerts. It
seems that when a server is not reachable it sends the alerts out, but when
the server recovers it never sends the recovery message, but keeps sending
the down critical messages. And idea what may be causing this? Is there a
way to look at exactly what alerts are being sent out from the xymon server
from xymon? Also is there a way to configure xymon not to send out email
alerts on flapping statuses?
Our Xymon server version is: Xymon 4.3.30-1.el7.terabithia
Thanks
Jean
This e-mail and any accompanying attachments may be privileged,
confidential, contain protected health information about an identified
patient or be otherwise protected from disclosure. State and federal law
protect the confidentiality of this information. If the reader of this
message is not the intended recipient; you are prohibited from using,
disclosing, reproducing or distributing this information; you should
immediately notify the sender by telephone or e-mail and delete this
e-mail.
---------- Forwarded message ----------
From: "Hyppolite, Jean via Xymon" <xymon at xymon.com>
To: "xymon at xymon.com" <xymon at xymon.com>
Cc:
Bcc:
Date: Mon, 18 May 2020 14:08:40 +0000
Subject: [Xymon] alerts