Alert Syntax and Notification log mismatch 🔗 link

Hi All

I did a bbcmd hobbit_alert --dump-config and looked for particular host testhost1

HOST=%.* EXHOST=%testhost1(.*)
	MAIL user-ac2650e4fc9b@xymon.invalid,user-436c3acb35ab@xymon.invalid FORMAT=TEXT REPEAT=30 SERVICE=msgs DURATION>10

HOST=%testhost1(.*) EXSERVICE="msgs,vmio"
        MAIL user-ac2650e4fc9b@xymon.invalid,user-436c3acb35ab@xymon.invalid FORMAT=TEXT REPEAT=30
        MAIL user-ad62a7b8f4f5@xymon.invalid,user-6f66b61cf18f@xymon.invalid FORMAT=TEXT REPEAT=30 

HOST=%testhost1(.*) SERVICE="vmio"
        MAIL user-ac2650e4fc9b@xymon.invalid FORMAT=TEXT REPEAT=30 DURATION>10

HOST=%testhost2(.*)|testhost1(.*) SERVICE="msgs"
        SCRIPT /export/home/hobbit/server/bin/script user-ad62a7b8f4f5@xymon.invalid,user-90c24175af16@xymon.invalid FORMAT=TEXT REPEAT=30

So only user-ac2650e4fc9b@xymon.invalid and user-436c3acb35ab@xymon.invalid should get any alert
related to testhost1.here.net's vmio service. But I am seeing
user-ad62a7b8f4f5@xymon.invalid and user-6f66b61cf18f@xymon.invalid are also getting those alerts per
my notification log

(hobbit)@hobbitserver:~/server/etc$ tail -100 /var/log/hobbit/notifications.log

Wed Oct 12 09:23:33 2005 testhost1.here..net.vmio (1.2.1.251) user-ac2650e4fc9b@xymon.invalid,user-436c3acb35ab@xymon.invalid 1129123412 0
Wed Oct 12 09:23:35 2005 testhost1.here.net.vmio (1.2.1.251) user-ad62a7b8f4f5@xymon.invalid,user-90c24175af16@xymon.invalid 1129123412 0
Thu Oct 13 09:23:48 2005 testhost1.here..net.vmio (1.2.1.251) user-ac2650e4fc9b@xymon.invalid,user-436c3acb35ab@xymon.invalid 1129209826 0
Thu Oct 13 09:23:50 2005 testhost1.here.net.vmio (1.2.1.251) user-ad62a7b8f4f5@xymon.invalid,user-90c24175af16@xymon.invalid 1129209826 0

Any help to demystify this would be appreciated

I am using 4.1.2 for hobbit server and BB 1.9c for testhost1.here.net 

Thanks

-- 
Asif Iqbal
PGP Key: 0xE62693C5 KeyServer: pgp.mit.edu
"..there are two kinds of people: those who work and those who take the credit...try
 to be in the first group;...less competition there."  - Indira Gandhi

On Thu, Oct 13, 2005 at 11:18:12AM -0400, Asif Iqbal wrote:

Could you try "bbcmd hobbitd_alert --test testhost1.here.net vmio 700" ?

That will simulate how hobbitd_alert walks through the configuration
while processing an alert for the host "testhost1.here.net" and 
service "vmio", which has been red for 700 seconds.

Wed Oct 12 09:23:33 2005 testhost1.here..net.vmio (1.2.1.251) user-ac2650e4fc9b@xymon.invalid,user-436c3acb35ab@xymon.invalid 1129123412 0

Odd - double dots in the hostname there. Any idea where they
come from ?


Henrik

On Thu, Oct 13, 2005 at 11:18:12AM -0400, Asif Iqbal wrote:

Asif's problem turned out to be the quotes he put around the SERVICE and
EXSERVICE parameters. EXSERVICE="msgs,vmio" does not work as expected,
but EXSERVICE=msgs,vmio does.

That is too tricky for my taste. I'll try and make it behave better.


Regards,
Henrik