hobbit-alerts.cfg IGNORE TIME
list Lee J. Imber
Greetings all,
I have been trying to figure this out and I think I am missing something real obvious.
I am trying to ignore an event when a series of servers do some backups and the http test gets triggered for a second Sunday Morning at 3:35AM or 0835UTC.
Here is the rule in hobbit-alerts.cfg
HOST=S1,S2,S3,S4 COLOR=red SERVICE=http
IGNORE HOST=S1,S2,S3,S4 SERVICE=http TIME=7:0830:0845
But I get still get paged.
Here is what I get when I run:
./bin/bbcmd hobbitd_alert --test S1 http
00052836 2009-12-29 18:02:45 Matching host:service:page 'S1:http:' against rule line 81
2009-12-29 18:02:45 Bad timespec (missing colon or wrong weekdays): 7:0830:0845
00052836 2009-12-29 18:02:45 Failed 'IGNORE HOST=S1,S2,S3,S4 SERVICE=http TIME=7:0830:0845' (time criteria)
In the hobbit manual there is an example that shows a similar rule set for Thursday using day 4:0000:0000 so I believe Sunday should be day 7?
If I change the day to 6 I don't get that error in the --test output.
Thanks and HNY!
Lee J. Imber
Systems Engineer
Glance Networks
1167 Massachusetts Ave.
Arlington, MA USA 02476
www.glance.net
user-b326436e7231@xymon.invalid
Network World says Glance is
"the fastest way for 100 people
to view your screen."
Watch their video review
list Patrick Nixon
Lee, I did something similar, but instead of doing an ignore on the alert, I put the server into a downtime for the window. DOWNTIME=cam:60:0000:2400:Offline2,cam:W:1930:0830:Offline The first one puts service cam into downtime all day saturday and sunday, and the second does it all Weekdays 730p to 830a Hope that helps and thanks for the link in your email, I'm checking out Glance now :) --Patrick
▸
On Tue, Dec 29, 2009 at 1:24 PM, Lee J. Imber <user-b326436e7231@xymon.invalid> wrote:Greetings all, I have been trying to figure this out and I think I am missing something real obvious. I am trying to ignore an event when a series of servers do some backups and the http test gets triggered for a second Sunday Morning at 3:35AM or 0835UTC. Here is the rule in hobbit-alerts.cfg HOST=S1,S2,S3,S4 COLOR=red SERVICE=http IGNORE HOST=S1,S2,S3,S4 SERVICE=http TIME=7:0830:0845 But I get still get paged. Here is what I get when I run: ./bin/bbcmd hobbitd_alert --test S1 http 00052836 2009-12-29 18:02:45 Matching host:service:page 'S1:http:' against rule line 81 2009-12-29 18:02:45 Bad timespec (missing colon or wrong weekdays): 7:0830:0845 00052836 2009-12-29 18:02:45 Failed 'IGNORE HOST=S1,S2,S3,S4 SERVICE=http TIME=7:0830:0845' (time criteria) In the hobbit manual there is an example that shows a similar rule set for Thursday using day 4:0000:0000 so I believe Sunday should be day 7? If I change the day to 6 I don't get that error in the --test output. Thanks and HNY! Lee J. Imber Systems Engineer Glance Networks 1167 Massachusetts Ave. Arlington, MA USA 02476 www.glance.net user-b326436e7231@xymon.invalid Network World says Glance is "the fastest way for 100 people to view your screen." Watch their video review
list Lee J. Imber
Awesome! I will try the downtime, that actually may be a better solution. OK, the example here in the hobbit-alerts.html page. A common scenario is where you handle most of the alerts with a wildcard rule, but there is just that one exception where you dont want any cpu alerts from the marketing server on Thursday afternoon. Then it is time for the IGNORE recipient: HOST=* COLOR=red IGNORE HOST=marketing.foo.com SERVICE=cpu TIME=4:1500:1800 MAIL user-ef86c43926b6@xymon.invalid Thursday=4, so really this should be 5 ;) I will try 0 and if it does not work then you guys owe me some beer ;) Cheers! Lee
▸
Lee J. Imber
Systems Engineer
Glance Networks
1167 Massachusetts Ave.
Arlington, MA USA 02476
www.glance.net
user-b326436e7231@xymon.invalid
Network World says Glance is
"the fastest way for 100 people
to view your screen."
Watch their video review
On Dec 29, 2009, at 5:00 PM, Patrick Nixon wrote:
Lee, I did something similar, but instead of doing an ignore on the alert, I put the server into a downtime for the window. DOWNTIME=cam:60:0000:2400:Offline2,cam:W:1930:0830:Offline The first one puts service cam into downtime all day saturday and sunday, and the second does it all Weekdays 730p to 830a Hope that helps and thanks for the link in your email, I'm checking out Glance now :) --Patrick On Tue, Dec 29, 2009 at 1:24 PM, Lee J. Imber <user-b326436e7231@xymon.invalid> wrote:Greetings all, I have been trying to figure this out and I think I am missing something real obvious. I am trying to ignore an event when a series of servers do some backups and the http test gets triggered for a second Sunday Morning at 3:35AM or 0835UTC. Here is the rule in hobbit-alerts.cfg HOST=S1,S2,S3,S4 COLOR=red SERVICE=http IGNORE HOST=S1,S2,S3,S4 SERVICE=http TIME=7:0830:0845 But I get still get paged. Here is what I get when I run: ./bin/bbcmd hobbitd_alert --test S1 http 00052836 2009-12-29 18:02:45 Matching host:service:page 'S1:http:' against rule line 81 2009-12-29 18:02:45 Bad timespec (missing colon or wrong weekdays): 7:0830:0845 00052836 2009-12-29 18:02:45 Failed 'IGNORE HOST=S1,S2,S3,S4 SERVICE=http TIME=7:0830:0845' (time criteria) In the hobbit manual there is an example that shows a similar rule set for Thursday using day 4:0000:0000 so I believe Sunday should be day 7? If I change the day to 6 I don't get that error in the --test output. Thanks and HNY! Lee J. Imber Systems Engineer Glance Networks 1167 Massachusetts Ave. Arlington, MA USA 02476 www.glance.net user-b326436e7231@xymon.invalid Network World says Glance is "the fastest way for 100 people to view your screen." Watch their video review