Message alerts 🔗 link

I hate the Windows event log! Is ther a way to centralize the "ignore
message" function in Hobbit? We get hammered with event log messages about
every little thing that happens and most are just nonsense noise and trying
to go and update 400+ windows servers about what to ignore every time a new
event pops up is simply not practical. In addition, it seems the the Win
client simply ignores some strings that you enter in the "ignore" field. I
already thought of sending all the "msgs" notifications to a separate
mailbox but trying to sort through 30000 messages each week is the
definition of ridiculous. Any ideas welcome.

Thanks

Kevin


P.S. The idea of deleting Windows has already occurred to me but I think the
management might frown on that  ;-)

Then I'd suggest you forward the messages to management's mailbox ;-)

I did!...for just one day. I got a message from some manager who was all hot
and bothered because she was not getting timely alerts or updates about
server problems and demanded to be put on the alert list! I warned her
several times that it might best for us sysadmins to let her know when there
was a prob but she demanded to have alerts sent to her pager
immediately....so I did as she asked.
The next day she was begging to be taken off the alert list! It seem sthat
she was kept up all night by her pager and got no sleep!

Welcome to my world! 

-----Original Message-----
From: McDonald, Dan [mailto:user-290ce4e24e19@xymon.invalid] 
Sent: Saturday, March 19, 2005 12:07 PM
To: user-ae9b8668bcde@xymon.invalid
Subject: RE: [hobbit] Message alerts
Importance: Low

Then I'd suggest you forward the messages to management's mailbox ;-)

On Sat, Mar 19, 2005 at 12:03:51PM, Kevin Hanrahan wrote:

I am not sure if I understood your email but how about something like
this

cat script.sh

  #!/bin/sh

  PATTERN_FILE=${BBSERVERROOT}/server/etc/patterns

  echo "${BBALPHAMSG}" | $EGREP -f $PATTERN_FILE > /dev/null 2>&1

  [ "$?" -ne 0 ] && {
  echo "${BBALPHAMSG}" | /bin/mailx -s "BB [$ACKCODE] $BBHOSTSVC is RED" $RCPT
  }

  exit 0


PATTERN file could be list of patterns--that can be put each on a
separate line--that you don't want to be paged for.

Then SCRIPT /path/to/script.sh user-ad62a7b8f4f5@xymon.invalid FORMAT=TEXT COLOR=red 
on your hobbit-alerts.cfg should may work.

Again, I am answering based on what I assume you like to do. I might be
totally wrong about your intension

Thanks
-- 
Asif Iqbal
PGP Key: 0xE62693C5 KeyServer: pgp.mit.edu
"..there are two kinds of people: those who work and those who take the credit...try
 to be in the first group;...less competition there."  - Indira Gandhi

Nice idea...I will try it. Thanks

KEvin

-----Original Message-----
From: Asif Iqbal [mailto:user-c8222abeff59@xymon.invalid] 
Sent: Saturday, March 19, 2005 2:03 PM
To: 'user-ae9b8668bcde@xymon.invalid'
Subject: Re: [hobbit] Message alerts


On Sat, Mar 19, 2005 at 12:03:51PM, Kevin Hanrahan wrote:

I am not sure if I understood your email but how about something like this

cat script.sh

  #!/bin/sh

  PATTERN_FILE=${BBSERVERROOT}/server/etc/patterns

  echo "${BBALPHAMSG}" | $EGREP -f $PATTERN_FILE > /dev/null 2>&1

  [ "$?" -ne 0 ] && {
  echo "${BBALPHAMSG}" | /bin/mailx -s "BB [$ACKCODE] $BBHOSTSVC is RED"
$RCPT
  }

  exit 0


PATTERN file could be list of patterns--that can be put each on a separate
line--that you don't want to be paged for.

Then SCRIPT /path/to/script.sh user-ad62a7b8f4f5@xymon.invalid FORMAT=TEXT COLOR=red 
on your hobbit-alerts.cfg should may work.

Again, I am answering based on what I assume you like to do. I might be
totally wrong about your intension

Thanks
-- 
Asif Iqbal
PGP Key: 0xE62693C5 KeyServer: pgp.mit.edu
"..there are two kinds of people: those who work and those who take the
credit...try  to be in the first group;...less competition there."  - Indira
Gandhi

Note:  The information contained in this email and in any attachments is
intended only for the person or entity to which it is addressed and may
contain confidential and/or privileged material.  Any review,
retransmission, dissemination or other use of, or taking of any action in
reliance upon, this information by persons or entities other than the
intended recipient is prohibited.  The recipient should check this email and
any attachments for the presence of viruses.  Sender accepts no liability
for any damages caused by any virus transmitted by this email. If you have
received this email in error, please notify us immediately by replying to
the message and delete the email from your computer.  This e-mail is and any
response to it will be unencrypted and, therefore, potentially unsecure.
Thank you.  NOVA Information Systems, Inc.