Hobbit Alert config
list Vernon Everett
Hi all
Can anybody tell me if there is a specific order required for the
entries in hobbit-alert.cfg?
For instance, this line
MAIL user-6afb11b32748@xymon.invalid <mailto:user-2eb66043fedc@xymon.invalid> FORMAT=SMS
REPEAT=180 DURATION>5 COLOR=red RECOVERED
alerts me to the issue, but I don't get a recovered SMS.
I know Hobbit is configured correctly, because this line
MAIL user-99fc6b22a3a3@xymon.invalid RECOVERED REPEAT=480
mails me the recovered notice.
Cheers
Vernon
No trees were killed in the creation of this message. However, many
electrons were terribly inconvenienced. _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _
NOTICE: This message and any attachments are confidential and may contain copyright material of Australian Finance Group Limited or a third party. It is intended solely for the purpose of the addressee and any other named recipient. If you are not the intended recipient, any use, distribution, disclosure or copying of this message is strictly prohibited. The confidentiality attached
to this message is not waived or lost by reason of the mistaken transmission or delivery to any unintended party. If you have received this message in error, please notify the author immediately or contact Australian Finance Group on +61 8 9420 7888.
list James B Horwath
Vernon, My guess would be the "COLOR=red" token in the rule. When a recovery comes in the color isn't red, therefore no match. Regards, Jim ----- Message from "Vernon Everett" <user-99fc6b22a3a3@xymon.invalid> on Fri, 13 Jan 2006 18:55:30 +0800 ----- To: <user-ae9b8668bcde@xymon.invalid> Subject: Hobbit Alert config
▸
Hi all
Can anybody tell me if there is a specific order required for the entries
in hobbit-alert.cfg?
For instance, this line
MAIL user-6afb11b32748@xymon.invalid FORMAT=SMS REPEAT=180 DURATION>5 COLOR=red
RECOVERED
alerts me to the issue, but I don't get a recovered SMS.
I know Hobbit is configured correctly, because this line
MAIL user-99fc6b22a3a3@xymon.invalid RECOVERED REPEAT=480
mails me the recovered notice.
Cheers
Vernon
Jim Horwath
SANS Certified: GCUX, GCIH, GCIA, GHTQ, GREM
Unix Admin
user-9b4f5b722116@xymon.invalid
(W) XXX-XXX-XXXX
(C) XXX-XXX-XXXX
(F) XXX-XXX-XXXX
This message, and any attachments to it, may contain information that
is privileged, confidential, and exempt from disclosure under
applicable law. If the reader of this message is not the intended
recipient, you are notified that any use, dissemination, distribution,
copying, or communication of this message is strictly prohibited. If
you have received this message in error, please notify the sender
immediately by return e-mail and delete the message and any
attachments. Thank you.
list Vernon Everett
Hmmm, makes sense. OK, then does anybody know if there a workaround for this? I want an e-mail on any colour fail, and an e-mail on recovery. On a condition red, I want an SMS, and an SMS on recovery from a red. Regards
▸
Vernon
No trees were killed in the creation of this message. However, many
electrons were terribly inconvenienced.
▸
From: James B Horwath [mailto:user-9b4f5b722116@xymon.invalid] Sent: Friday, 13 January 2006 7:13 PM
To: user-ae9b8668bcde@xymon.invalid
Subject: [hobbit] Re: Hobbit Alert config
Vernon,
My guess would be the "COLOR=red" token in the rule. When a recovery
comes in the color isn't red, therefore no match.
Regards, Jim
----- Message from "Vernon Everett" <user-99fc6b22a3a3@xymon.invalid> on Fri,
13 Jan 2006 18:55:30 +0800 ----- To:
<user-ae9b8668bcde@xymon.invalid> Subject:
Hobbit Alert config
Hi all Can anybody tell me if there is a specific order required for the
entries in hobbit-alert.cfg? For instance, this line MAIL user-6afb11b32748@xymon.invalid <mailto:user-2eb66043fedc@xymon.invalid> FORMAT=SMS
REPEAT=180 DURATION>5 COLOR=red RECOVERED
alerts me to the issue, but I don't get a recovered SMS. I know Hobbit is configured correctly, because this line MAIL user-99fc6b22a3a3@xymon.invalid <mailto:user-99fc6b22a3a3@xymon.invalid>
▸
RECOVERED REPEAT=480 mails me the recovered notice. Cheers Vernon
Jim Horwath
SANS Certified: GCUX, GCIH, GCIA, GHTQ, GREM
Unix Admin
user-9b4f5b722116@xymon.invalid
(W) XXX-XXX-XXXX
(C) XXX-XXX-XXXX
(F) XXX-XXX-XXXX
This message, and any attachments to it, may contain information that
is privileged, confidential, and exempt from disclosure under
applicable law. If the reader of this message is not the intended
recipient, you are notified that any use, dissemination, distribution,
copying, or communication of this message is strictly prohibited. If
you have received this message in error, please notify the sender
immediately by return e-mail and delete the message and any
attachments. Thank you.
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _
NOTICE: This message and any attachments are confidential and may contain copyright material of Australian Finance Group Limited or a third party. It is intended solely for the purpose of the addressee and any other named recipient. If you are not the intended recipient, any use, distribution, disclosure or copying of this message is strictly prohibited. The confidentiality attached
to this message is not waived or lost by reason of the mistaken transmission or delivery to any unintended party. If you have received this message in error, please notify the author immediately or contact Australian Finance Group on +61 8 9420 7888.
list James B Horwath
Vernon, You may need a separate rule for the recovery condition. Or maybe the cleaner solution is to write a small script to handle paging. I did. Hobbit has environment variables set if there is a recovery or it is a new message. I am not familar with the SMS format, I use plain 'ole send mail to a pager for alerts. But I would doubt sending to SMS would be difficult. Regards, Jim To: <user-ae9b8668bcde@xymon.invalid> Subject: RE: [hobbit] Re: Hobbit Alert config
▸
Hmmm, makes sense.
OK, then does anybody know if there a workaround for this?
I want an e-mail on any colour fail, and an e-mail on recovery.
On a condition red, I want an SMS, and an SMS on recovery from a red.
Regards
Vernon
Jim Horwath
SANS Certified: GCUX, GCIH, GCIA, GHTQ, GREM
Unix Admin
user-9b4f5b722116@xymon.invalid
(W) XXX-XXX-XXXX
(C) XXX-XXX-XXXX
(F) XXX-XXX-XXXX
This message, and any attachments to it, may contain information that
is privileged, confidential, and exempt from disclosure under
applicable law. If the reader of this message is not the intended
recipient, you are notified that any use, dissemination, distribution,
copying, or communication of this message is strictly prohibited. If
you have received this message in error, please notify the sender
immediately by return e-mail and delete the message and any
attachments. Thank you.
list Henrik Størner
▸
On Fri, Jan 13, 2006 at 06:13:20AM -0500, James B Horwath wrote:
Vernon Everett wrote:Can anybody tell me if there is a specific order required for the entries in hobbit-alert.cfg? For instance, this line MAIL user-6afb11b32748@xymon.invalid FORMAT=SMS REPEAT=180 DURATION>5 COLOR=red RECOVERED alerts me to the issue, but I don't get a recovered SMS. I know Hobbit is configured correctly, because this line MAIL user-99fc6b22a3a3@xymon.invalid RECOVERED REPEAT=480 mails me the recovered notice.My guess would be the "COLOR=red" token in the rule. When a recovery comes in the color isn't red, therefore no match.
That shouldn't cause it to drop the recovery message - when you have a RECOVERED setting on an alert rule, the recovery message goes out to all the people who were alerted originally. At least, that's how it *should* work. Now, the question for Vernon is: Did the "user-6afb11b32748@xymon.invalid" recipient in your original report get the alert message ? There's a DURATION>5 there, so if it was a short-lived problem he may not have gotten the alert - and then there's no recovery message either. Regards, Henrik
list Vernon Everett
Hi Henrik Yes, I got the alert, no problem. The e-mail address <number>@messagenet.com sends an SMS to <number> I obviously removed my own number before sending this mail :-) I then sorted out the problem, but never got a recovery message. In case you need to know, I am using Hobbit version 4.1.2
▸
Regards Vernon
No trees were killed in the creation of this message. However, many
electrons were terribly inconvenienced.
-----Original Message-----
▸
From: Henrik Stoerner [mailto:user-ce4a2c883f75@xymon.invalid] Sent: Saturday, 14 January 2006 1:04 AM
To: user-ae9b8668bcde@xymon.invalid
Subject: Re: [hobbit] Re: Hobbit Alert config
On Fri, Jan 13, 2006 at 06:13:20AM -0500, James B Horwath wrote:Vernon Everett wrote:Can anybody tell me if there is a specific order required for the entries in hobbit-alert.cfg? For instance, this line MAIL user-6afb11b32748@xymon.invalid FORMAT=SMS REPEAT=180 DURATION>5 COLOR=red RECOVERED alerts me to the issue, but I don't get a recovered SMS. I know Hobbit is configured correctly, because this line MAIL user-99fc6b22a3a3@xymon.invalid RECOVERED REPEAT=480 mails me the recovered notice.My guess would be the "COLOR=red" token in the rule. When a recovery comes in the color isn't red, therefore no match.
That shouldn't cause it to drop the recovery message - when you have a RECOVERED setting on an alert rule, the recovery message goes out to all the people who were alerted originally. At least, that's how it *should* work. Now, the question for Vernon is: Did the "user-6afb11b32748@xymon.invalid" recipient in your original report get the alert message ? There's a DURATION>5 there, so if it was a short-lived problem he may not have gotten the alert - and then there's no recovery message either. Regards, Henrik _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ NOTICE: This message and any attachments are confidential and may contain copyright material of Australian Finance Group Limited or a third party. It is intended solely for the purpose of the addressee and any other named recipient. If you are not the intended recipient, any use, distribution, disclosure or copying of this message is strictly prohibited. The confidentiality attached to this message is not waived or lost by reason of the mistaken transmission or delivery to any unintended party. If you have received this message in error, please notify the author immediately or contact Australian Finance Group on +61 8 9420 7888.