Xymon Mailing List Archive search

Alerts problems

7 messages in this thread

list Kevin Hanrahan · Sun, 30 Jan 2005 00:55:23 -0500 ·
I am having a bit of trouble with the alerts. I have the following rule:

HOST=%
        MAIL user-490a14721d84@xymon.invalid COLOR=red EXSERVICE=http RECOVERED


My understanding is that this should work as follows:

For ALL hosts:
	Mail user-490a14721d84@xymon.invalid
		if, the alert is RED only
		and if the service is other than http
		and mail when it recovers


What actually happens is:

	I get ALL alerts, for ALL colors, and ALL services


What did I do wrong?

Please advise.

Thank you

Kevin
list Kevin Hanrahan · Thu, 3 Mar 2005 10:36:21 -0500 ·
I just installed the post-RC4.patch and I am also getting alert messages
every minute but it is setup to alert every 30 minutes

Kevin Hanrahan


Note:  The information contained in this email and in any attachments is
intended only for the person or entity to which it is addressed and may
contain confidential and/or privileged material.  Any review,
retransmission, dissemination or other use of, or taking of any action in
reliance upon, this information by persons or entities other than the
intended recipient is prohibited.  The recipient should check this email and
any attachments for the presence of viruses.  Sender accepts no liability
for any damages caused by any virus transmitted by this email. If you have
received this email in error, please notify us immediately by replying to
the message and delete the email from your computer.  This e-mail is and any
response to it will be unencrypted and, therefore, potentially unsecure.
Thank you.  NOVA Information Systems, Inc.
list Kevin Hanrahan · Thu, 3 Mar 2005 10:43:12 -0500 ·
Also, acknowledgements for these alerts no longer works
quoted from Kevin Hanrahan

-----Original Message-----
From: Hanrahan, Kevin 
Sent: Thursday, March 03, 2005 10:36 AM
To: user-ae9b8668bcde@xymon.invalid
Subject: [hobbit] Alerts problems


I just installed the post-RC4.patch and I am also getting alert messages
every minute but it is setup to alert every 30 minutes

Kevin Hanrahan 


Note:  The information contained in this email and in any attachments is
intended only for the person or entity to which it is addressed and may
contain confidential and/or privileged material.  Any review,
retransmission, dissemination or other use of, or taking of any action in
reliance upon, this information by persons or entities other than the
intended recipient is prohibited.  The recipient should check this email and
any attachments for the presence of viruses.  Sender accepts no liability
for any damages caused by any virus transmitted by this email. If you have
received this email in error, please notify us immediately by replying to
the message and delete the email from your computer.  This e-mail is and any
response to it will be unencrypted and, therefore, potentially unsecure.
Thank you.  NOVA Information Systems, Inc.


Note:  The information contained in this email and in any attachments is
intended only for the person or entity to which it is addressed and may
contain confidential and/or privileged material.  Any review,
retransmission, dissemination or other use of, or taking of any action in
reliance upon, this information by persons or entities other than the
intended recipient is prohibited.  The recipient should check this email and
any attachments for the presence of viruses.  Sender accepts no liability
for any damages caused by any virus transmitted by this email. If you have
received this email in error, please notify us immediately by replying to
the message and delete the email from your computer.  This e-mail is and any
response to it will be unencrypted and, therefore, potentially unsecure.
Thank you.  NOVA Information Systems, Inc.
list Asif Iqbal · Thu, 3 Mar 2005 10:57:29 -0500 ·
quoted from Kevin Hanrahan
On Sun, Jan 30, 2005 at 12:55:23AM, Kevin Hanrahan wrote:
I am having a bit of trouble with the alerts. I have the following rule:

HOST=%
        MAIL user-490a14721d84@xymon.invalid COLOR=red EXSERVICE=http RECOVERED
What do you get when you run the followign test for a host

./bin/bbcmd hobbitd_laert --test host.domain service

And 
./bin/bbcmd hobbitd_alert --dump-config

You may want to post it here to help you troubleshoot 
quoted from Kevin Hanrahan
My understanding is that this should work as follows:

For ALL hosts:
	Mail user-490a14721d84@xymon.invalid
		if, the alert is RED only
		and if the service is other than http
		and mail when it recovers


What actually happens is:

	I get ALL alerts, for ALL colors, and ALL services


What did I do wrong?

Please advise.

Thank you

Kevin

-- 

Asif Iqbal
PGP Key: 0xE62693C5 KeyServer: pgp.mit.edu
"It is not the strongest of the species that survives, not the most intelligent, but
 the one most responsive to change."    - Charles Darwin
list Henrik Størner · Thu, 3 Mar 2005 19:30:26 +0100 ·
quoted from Kevin Hanrahan
On Thu, Mar 03, 2005 at 10:36:21AM -0500, user-fd47fec4b039@xymon.invalid wrote:
I just installed the post-RC4.patch and I am also getting alert messages
every minute but it is setup to alert every 30 minutes
Hmm - there's been one more report like that. So I probably messed up
something.

Will look at it later tonight.


Regards,
Henrik
list Bruce Lysik · Thu, 3 Mar 2005 10:42:07 -0800 ·
quoted from Henrik Størner
I just installed the post-RC4.patch and I am also getting 
alert messages
every minute but it is setup to alert every 30 minutes
Hmm - there's been one more report like that. So I probably messed up
something.

Will look at it later tonight.
Yeah, I just noticed the same thing.  Alerts every minute.

--
Bruce Z. Lysik  <user-4e63a10f8934@xymon.invalid>
Operations Engineer
list Henrik Størner · Thu, 3 Mar 2005 22:32:10 +0100 ·
quoted from Bruce Lysik
On Thu, Mar 03, 2005 at 10:36:21AM -0500, user-fd47fec4b039@xymon.invalid wrote:
I just installed the post-RC4.patch and I am also getting alert messages
every minute but it is setup to alert every 30 minutes
The culprit is line 1488 of hobbitd/do_alert.c. I remember looking at
this and thinking "this looks wrong" and then changing it ... well,
it wasn't wrong so instead of fixing a bug, I broke it.

It's a simple fix: Change a 0 to a 1 (literally one bit that makes a
difference). After the post-RC4 patch, line 1488 reads

              rpt = find_repeatinfo(alert, recip, 0);

It should be
              rpt = find_repeatinfo(alert, recip, 1);


Regards,
Henrik