Xymon Mailing List Archive search

network hiccups causing false positives to be sent

8 messages in this thread

list Tom S · Sun, 22 Jan 2012 12:48:44 -0500 ·
So our crappy server host (1and1) seems to be getting random network spikes
causing false alert emails to be sent out with Critical notifications.
I understand I can set alerts.cfg to only alert after a certain duration of
red but we need notifications to be sent right away in case of production
downtime.

Is there an option where I can have XYMON ping a certain host, and if that
host is unreachable to ignore any other alerts?
eg.  I can run a ping on yahoo.com and example.com , if either of those as
any connection issues, to ignore all other alerts for the time being?

tia.
list Josh Luthman · Sun, 22 Jan 2012 12:55:19 -0500 ·
Use ROUTE as I think DEPENDS is broken.

1.1.1.1 gateway.foo.com #
0.0.0.0 realserver.com # route:gateway.foo.com

realserver.com will go yellow if gateway.foo.com is red

Josh Luthman
Office: XXX-XXX-XXXX
Direct: XXX-XXX-XXXX
XXXX Wayne St
Suite XXXX
Troy, OH XXXXX
quoted from Tom S


On Sun, Jan 22, 2012 at 12:48 PM, Tom S <user-428671d28ab5@xymon.invalid> wrote:
So our crappy server host (1and1) seems to be getting random network spikes
causing false alert emails to be sent out with Critical notifications.
I understand I can set alerts.cfg to only alert after a certain duration of
red but we need notifications to be sent right away in case of production
downtime.

Is there an option where I can have XYMON ping a certain host, and if that
host is unreachable to ignore any other alerts?
eg.  I can run a ping on yahoo.com and example.com , if either of those as
any connection issues, to ignore all other alerts for the time being?

tia.

list Paul Root · Mon, 23 Jan 2012 08:25:35 -0600 ·
Well, you could write a script, that is tripped off by your systems failing the ping. Then in that script, ping yahoo or whatever, and if that succeeds, send your alert on.

Paul Root    - Engineer III
Managed Services Systems - CenturyLink
quoted from Tom S


From: xymon-bounces at xymon.com [mailto:xymon-bounces at xymon.com] On Behalf Of Tom S
Sent: Sunday, January 22, 2012 11:49 AM
To: xymon at xymon.com
Subject: [Xymon] network hiccups causing false positives to be sent

So our crappy server host (1and1) seems to be getting random network spikes causing false alert emails to be sent out with Critical notifications.
I understand I can set alerts.cfg to only alert after a certain duration of red but we need notifications to be sent right away in case of production downtime.

Is there an option where I can have XYMON ping a certain host, and if that host is unreachable to ignore any other alerts?

eg.  I can run a ping on yahoo.com<http://yahoo.com>; and example.com<http://example.com>; , if either of those as any connection issues, to ignore all other alerts for the time being?

tia.

This communication is the property of CenturyLink and may contain confidential or privileged information. Unauthorized use of this communication is strictly
prohibited and may be unlawful. If you have received this communication
in error, please immediately notify the sender by reply e-mail and destroy
all copies of the communication and any attachments.
list Michael Baydoun · Wed, 8 Feb 2012 16:03:50 -0500 ·
DEPENDS is broken?  No wonder I can't get it to work.

On Sun, Jan 22, 2012 at 12:55 PM, Josh Luthman
quoted from Paul Root
<user-4c45a83f15cb@xymon.invalid>wrote:
Use ROUTE as I think DEPENDS is broken.

1.1.1.1 gateway.foo.com #
0.0.0.0 realserver.com # route:gateway.foo.com

realserver.com will go yellow if gateway.foo.com is red

Josh Luthman
Office: XXX-XXX-XXXX
Direct: XXX-XXX-XXXX
XXXX Wayne St
Suite XXXX
Troy, OH XXXXX


On Sun, Jan 22, 2012 at 12:48 PM, Tom S <user-428671d28ab5@xymon.invalid> wrote:
So our crappy server host (1and1) seems to be getting random network
spikes
causing false alert emails to be sent out with Critical notifications.
I understand I can set alerts.cfg to only alert after a certain duration
of
red but we need notifications to be sent right away in case of production
downtime.

Is there an option where I can have XYMON ping a certain host, and if
that
host is unreachable to ignore any other alerts?
eg.  I can run a ping on yahoo.com and example.com , if either of those
as
any connection issues, to ignore all other alerts for the time being?

tia.

list Ryan Novosielski · Wed, 08 Feb 2012 16:06:10 -0500 ·
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

I'd like a confirmation of this first. Broken how/etc.
quoted from Michael Baydoun

On 02/08/2012 04:03 PM, Michael Baydoun wrote:
DEPENDS is broken?  No wonder I can't get it to work.

On Sun, Jan 22, 2012 at 12:55 PM, Josh Luthman
<user-4c45a83f15cb@xymon.invalid <mailto:user-4c45a83f15cb@xymon.invalid>> wrote:

    Use ROUTE as I think DEPENDS is broken.

    1.1.1.1 gateway.foo.com <http://gateway.foo.com>; #
    0.0.0.0 realserver.com <http://realserver.com>; #
    route:gateway.foo.com <http://gateway.foo.com>;

    realserver.com <http://realserver.com>; will go yellow if
    gateway.foo.com <http://gateway.foo.com>; is red

    Josh Luthman
    Office: XXX-XXX-XXXX <tel:XXX-XXX-XXXX>
    Direct: XXX-XXX-XXXX <tel:XXX-XXX-XXXX>
quoted from Michael Baydoun
    XXXX Wayne St
    Suite XXXX
    Troy, OH XXXXX


    On Sun, Jan 22, 2012 at 12:48 PM, Tom S <user-428671d28ab5@xymon.invalid
    <mailto:user-428671d28ab5@xymon.invalid>> wrote:
So our crappy server host (1and1) seems to be getting random
    network spikes
causing false alert emails to be sent out with Critical notifications.
I understand I can set alerts.cfg to only alert after a certain
    duration of
red but we need notifications to be sent right away in case of
    production
downtime.

Is there an option where I can have XYMON ping a certain host, and
    if that
host is unreachable to ignore any other alerts?

eg.  I can run a ping on yahoo.com <http://yahoo.com>; and
    example.com <http://example.com>; , if either of those as
quoted from Michael Baydoun
any connection issues, to ignore all other alerts for the time being?

tia.

- -- 
- ---- _  _ _  _ ___  _  _  _

|Y#| |  | |\/| |  \ |\ |  | |Ryan Novosielski - Sr. Systems Programmer
|$&| |__| |  | |__/ | \| _| |user-ae4522577e16@xymon.invalid - 973/972.0922 (2-0922)
\__/ Univ. of Med. and Dent.|IST/EI-Academic Svcs. - ADMC 450, Newark
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk8y48IACgkQmb+gadEcsb4wgwCaAg1T2DShOw7EjREjUId5/H5l
PmwAn2IQd4CNCVVay214B2eslhZg9i8z
=GmXv
-----END PGP SIGNATURE-----
list Josh Luthman · Wed, 8 Feb 2012 16:13:13 -0500 ·
It was when I started using ROUTE years ago.
signature

Josh Luthman
Office: XXX-XXX-XXXX
Direct: XXX-XXX-XXXX
XXXX Wayne St
Suite XXXX
Troy, OH XXXXX


quoted from Michael Baydoun
On Wed, Feb 8, 2012 at 4:03 PM, Michael Baydoun <user-105c655da53d@xymon.invalid> wrote:
DEPENDS is broken?  No wonder I can't get it to work.


On Sun, Jan 22, 2012 at 12:55 PM, Josh Luthman <user-4c45a83f15cb@xymon.invalid>
wrote:
Use ROUTE as I think DEPENDS is broken.

1.1.1.1 gateway.foo.com #
0.0.0.0 realserver.com # route:gateway.foo.com

realserver.com will go yellow if gateway.foo.com is red

Josh Luthman
Office: XXX-XXX-XXXX
Direct: XXX-XXX-XXXX
XXXX Wayne St
Suite XXXX
Troy, OH XXXXX


On Sun, Jan 22, 2012 at 12:48 PM, Tom S <user-428671d28ab5@xymon.invalid> wrote:
So our crappy server host (1and1) seems to be getting random network
spikes
causing false alert emails to be sent out with Critical notifications.
I understand I can set alerts.cfg to only alert after a certain duration
of
red but we need notifications to be sent right away in case of
production
downtime.

Is there an option where I can have XYMON ping a certain host, and if
that
host is unreachable to ignore any other alerts?
eg.  I can run a ping on yahoo.com and example.com , if either of those
as
any connection issues, to ignore all other alerts for the time being?

tia.

list Josh Luthman · Wed, 8 Feb 2012 16:13:46 -0500 ·
Go to hosts.cfg (or bb-hosts) and use DEPENDS and watch both alerts happen.
signature

Josh Luthman
Office: XXX-XXX-XXXX
Direct: XXX-XXX-XXXX
XXXX Wayne St
Suite XXXX
Troy, OH XXXXX


quoted from Ryan Novosielski
On Wed, Feb 8, 2012 at 4:06 PM, Ryan Novosielski <user-ae4522577e16@xymon.invalid> wrote:
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

I'd like a confirmation of this first. Broken how/etc.

On 02/08/2012 04:03 PM, Michael Baydoun wrote:
DEPENDS is broken?  No wonder I can't get it to work.

On Sun, Jan 22, 2012 at 12:55 PM, Josh Luthman
<user-4c45a83f15cb@xymon.invalid <mailto:user-4c45a83f15cb@xymon.invalid>> wrote:

    Use ROUTE as I think DEPENDS is broken.

    1.1.1.1 gateway.foo.com <http://gateway.foo.com>; #
    0.0.0.0 realserver.com <http://realserver.com>; #
    route:gateway.foo.com <http://gateway.foo.com>;

    realserver.com <http://realserver.com>; will go yellow if
    gateway.foo.com <http://gateway.foo.com>; is red

    Josh Luthman
    Office: XXX-XXX-XXXX <tel:XXX-XXX-XXXX>
    Direct: XXX-XXX-XXXX <tel:XXX-XXX-XXXX>
    XXXX Wayne St
    Suite XXXX
    Troy, OH XXXXX


    On Sun, Jan 22, 2012 at 12:48 PM, Tom S <user-428671d28ab5@xymon.invalid
    <mailto:user-428671d28ab5@xymon.invalid>> wrote:
    > So our crappy server host (1and1) seems to be getting random
    network spikes
    > causing false alert emails to be sent out with Critical notifications.
    > I understand I can set alerts.cfg to only alert after a certain
    duration of
    > red but we need notifications to be sent right away in case of
    production
    > downtime.
    >
    > Is there an option where I can have XYMON ping a certain host, and
    if that
    > host is unreachable to ignore any other alerts?
    > eg.  I can run a ping on yahoo.com <http://yahoo.com>; and
    example.com <http://example.com>; , if either of those as
    > any connection issues, to ignore all other alerts for the time being?
    >
    > tia.
    >
    > 
    >
    

- --
- ---- _  _ _  _ ___  _  _  _
|Y#| |  | |\/| |  \ |\ |  | |Ryan Novosielski - Sr. Systems Programmer
|$&| |__| |  | |__/ | \| _| |user-ae4522577e16@xymon.invalid - 973/972.0922 (2-0922)
\__/ Univ. of Med. and Dent.|IST/EI-Academic Svcs. - ADMC 450, Newark
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk8y48IACgkQmb+gadEcsb4wgwCaAg1T2DShOw7EjREjUId5/H5l
PmwAn2IQd4CNCVVay214B2eslhZg9i8z
=GmXv
-----END PGP SIGNATURE-----
list Ryan Novosielski · Wed, 08 Feb 2012 16:16:50 -0500 ·
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Does anyone know what happened next here?

http://lists.xymon.com/oldarchive/2010/10/msg00169.html
quoted from Josh Luthman

On 02/08/2012 04:13 PM, Josh Luthman wrote:
It was when I started using ROUTE years ago.

Josh Luthman
Office: XXX-XXX-XXXX
Direct: XXX-XXX-XXXX
XXXX Wayne St
Suite XXXX
Troy, OH XXXXX


On Wed, Feb 8, 2012 at 4:03 PM, Michael Baydoun <user-105c655da53d@xymon.invalid> wrote:
DEPENDS is broken?  No wonder I can't get it to work.


On Sun, Jan 22, 2012 at 12:55 PM, Josh Luthman <user-4c45a83f15cb@xymon.invalid>
wrote:
Use ROUTE as I think DEPENDS is broken.

1.1.1.1 gateway.foo.com #
0.0.0.0 realserver.com # route:gateway.foo.com

realserver.com will go yellow if gateway.foo.com is red

Josh Luthman
Office: XXX-XXX-XXXX
Direct: XXX-XXX-XXXX
XXXX Wayne St
Suite XXXX
Troy, OH XXXXX


On Sun, Jan 22, 2012 at 12:48 PM, Tom S <user-428671d28ab5@xymon.invalid> wrote:
So our crappy server host (1and1) seems to be getting random network
spikes
causing false alert emails to be sent out with Critical notifications.
I understand I can set alerts.cfg to only alert after a certain duration
of
red but we need notifications to be sent right away in case of
production
downtime.

Is there an option where I can have XYMON ping a certain host, and if
that
host is unreachable to ignore any other alerts?
eg.  I can run a ping on yahoo.com and example.com , if either of those
as
any connection issues, to ignore all other alerts for the time being?

tia.

- -- 
- ---- _  _ _  _ ___  _  _  _
|Y#| |  | |\/| |  \ |\ |  | |Ryan Novosielski - Sr. Systems Programmer
|$&| |__| |  | |__/ | \| _| |user-ae4522577e16@xymon.invalid - 973/972.0922 (2-0922)
\__/ Univ. of Med. and Dent.|IST/EI-Academic Svcs. - ADMC 450, Newark
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk8y5kIACgkQmb+gadEcsb5w5wCfVJlrSTvWIT94AxW19o5GgVb9
lj4AoJOEPES/Y9ESX1qMHwjwNrzqHR+b
=+w7A
-----END PGP SIGNATURE-----