Alert Setup Question
list Pnixon
Okay, I'm working on getting my alerts setup. My current hobbit-alert.cfg is:
list Pnixon
Now for the rest of my email....
▸
Okay,
I'm working on getting my alerts setup.
My current hobbit-alert.cfg is:
$IGNPAT=%(annex-nw|gozo|mis-server)
EXHOST=$IGNPAT
MAIL user-c102b8958c7a@xymon.invalid REPEAT=5m
EXHOST=$IGNPAT,%sps* TIME=*:0800:1700
MAIL user-99ffe2bb97cc@xymon.invalid REPEAT=15m FORMAT=SMS
MAIL user-24a445068ef7@xymon.invalid REPEAT=15m FORMAT=SMS
I need to have it email the pager group for the first alert in a 15minute
window, and then for 15minute intervals.
Suggestions?
list Jason Chambers
I think you want the DURATION tag! http://hobbitmon.sourceforge.net/docs/manpages/man5/hobbit-alerts.cfg.5. html this site should help you. Jason Chambers IT Helpdesk Support Geosoft Inc. XX Richmond St. West - 8th Floor Toronto, Ontario, Canada M5H 2C9 Tel: XXX-XXX-XXXX x344 Fax: XXX-XXX-XXXX www.geosoft.com
▸
-----Original Message-----
From: user-c102b8958c7a@xymon.invalid [mailto:user-c102b8958c7a@xymon.invalid]
Sent: Friday, November 18, 2005 12:35 PM
To: user-ae9b8668bcde@xymon.invalid
Subject: RE: [hobbit] Alert Setup Question
Now for the rest of my email....
Okay,
I'm working on getting my alerts setup.
My current hobbit-alert.cfg is:
$IGNPAT=%(annex-nw|gozo|mis-server)
EXHOST=$IGNPAT
MAIL user-c102b8958c7a@xymon.invalid REPEAT=5m
EXHOST=$IGNPAT,%sps* TIME=*:0800:1700
MAIL user-99ffe2bb97cc@xymon.invalid REPEAT=15m FORMAT=SMS
MAIL user-24a445068ef7@xymon.invalid REPEAT=15m FORMAT=SMS
I need to have it email the pager group for the first alert in a
15minute
window, and then for 15minute intervals.
Suggestions?
list Pnixon
Thanks for the reply. If I understand DURATION ( DURATION<5m) correctly that says if HostA is down for more than five minutes alert, if not do nothing. I basically want to put a hold on the Alert for that rule for 15minutes after it's triggered. In BB they write an entry in /bbvar/notifications with the mail address with a timestamp of +15m. As long as that entry is in there, you won't get double paged. --Pat
▸
-----Original Message----- From: Jason Chambers [mailto:user-3fa671c0a30d@xymon.invalid] Sent: Friday, November 18, 2005 1:22 PM To: user-ae9b8668bcde@xymon.invalid Subject: RE: [hobbit] Alert Setup Question I think you want the DURATION tag! http://hobbitmon.sourceforge.net/docs/manpages/man5/hobbit-alerts.cfg.5. html this site should help you. Jason Chambers IT Helpdesk Support Geosoft Inc. XX Richmond St. West - 8th Floor Toronto, Ontario, Canada M5H 2C9 Tel: XXX-XXX-XXXX x344 Fax: XXX-XXX-XXXX www.geosoft.com -----Original Message----- From: user-c102b8958c7a@xymon.invalid [mailto:user-c102b8958c7a@xymon.invalid] Sent: Friday, November 18, 2005 12:35 PM To: user-ae9b8668bcde@xymon.invalid Subject: RE: [hobbit] Alert Setup Question Now for the rest of my email.... Okay, I'm working on getting my alerts setup. My current hobbit-alert.cfg is: $IGNPAT=%(annex-nw|gozo|mis-server) EXHOST=$IGNPAT MAIL user-c102b8958c7a@xymon.invalid REPEAT=5m EXHOST=$IGNPAT,%sps* TIME=*:0800:1700 MAIL user-99ffe2bb97cc@xymon.invalid REPEAT=15m FORMAT=SMS MAIL user-24a445068ef7@xymon.invalid REPEAT=15m FORMAT=SMS I need to have it email the pager group for the first alert in a 15minute window, and then for 15minute intervals. Suggestions?
list Jason Chambers
I don't understand what you mean DURATION<5 means that it wont page you if the alert has gone longer that 5 minutes. DUATION>15 means that it wont page you for the alert until the alert has gone up for more than 15 minutes. There is DELAY which wont page you for certain intervals. But I don't understand what you want to do.
▸
Jason Chambers IT Helpdesk Support Geosoft Inc. XX Richmond St. West - 8th Floor Toronto, Ontario, Canada M5H 2C9 Tel: XXX-XXX-XXXX x344 Fax: XXX-XXX-XXXX www.geosoft.com -----Original Message----- From: user-c102b8958c7a@xymon.invalid [mailto:user-c102b8958c7a@xymon.invalid] Sent: Friday, November 18, 2005 1:35 PM To: user-ae9b8668bcde@xymon.invalid Subject: RE: [hobbit] Alert Setup Question Thanks for the reply. If I understand DURATION ( DURATION<5m) correctly that says if HostA is down for more than five minutes alert, if not do nothing. I basically want to put a hold on the Alert for that rule for 15minutes after it's triggered. In BB they write an entry in /bbvar/notifications with the mail address with a timestamp of +15m. As long as that entry is in there, you won't get double paged. --Pat -----Original Message----- From: Jason Chambers [mailto:user-3fa671c0a30d@xymon.invalid] Sent: Friday, November 18, 2005 1:22 PM To: user-ae9b8668bcde@xymon.invalid Subject: RE: [hobbit] Alert Setup Question I think you want the DURATION tag! http://hobbitmon.sourceforge.net/docs/manpages/man5/hobbit-alerts.cfg.5. html this site should help you. Jason Chambers IT Helpdesk Support Geosoft Inc. XX Richmond St. West - 8th Floor Toronto, Ontario, Canada M5H 2C9 Tel: XXX-XXX-XXXX x344 Fax: XXX-XXX-XXXX www.geosoft.com -----Original Message----- From: user-c102b8958c7a@xymon.invalid [mailto:user-c102b8958c7a@xymon.invalid] Sent: Friday, November 18, 2005 12:35 PM To: user-ae9b8668bcde@xymon.invalid Subject: RE: [hobbit] Alert Setup Question Now for the rest of my email.... Okay, I'm working on getting my alerts setup. My current hobbit-alert.cfg is: $IGNPAT=%(annex-nw|gozo|mis-server) EXHOST=$IGNPAT MAIL user-c102b8958c7a@xymon.invalid REPEAT=5m EXHOST=$IGNPAT,%sps* TIME=*:0800:1700 MAIL user-99ffe2bb97cc@xymon.invalid REPEAT=15m FORMAT=SMS MAIL user-24a445068ef7@xymon.invalid REPEAT=15m FORMAT=SMS I need to have it email the pager group for the first alert in a 15minute window, and then for 15minute intervals. Suggestions?
list Pnixon
Okay, let me run a scenario... 7:00 HostA generates an alert which gets sent to user-31de6375c70f@xymon.invalid 7:05 HostB generates an alert which does not get sent to user-31de6375c70f@xymon.invalid because they got paged in the 15 minutes 7:18 HostA is fixed now, but HostB is still broken and generating an alert, which gets sent to user-31de6375c70f@xymon.invalid 7:22 HostC breaks now, no Alert to user-31de6375c70f@xymon.invalid 7:33 HostB is still Broken, sends an alert to user-31de6375c70f@xymon.invalid Duration is for how old the alert is Delay - I haven't seen any documentation on this. In BigBrother it's called pagedelay and was configured in bbwarnsetup.cfg, in my case, for 15 minutes. Does that help?
▸
-----Original Message----- From: Jason Chambers [mailto:user-3fa671c0a30d@xymon.invalid] Sent: Friday, November 18, 2005 2:05 PM To: user-ae9b8668bcde@xymon.invalid Subject: RE: [hobbit] Alert Setup Question I don't understand what you mean DURATION<5 means that it wont page you if the alert has gone longer that 5 minutes. DUATION>15 means that it wont page you for the alert until the alert has gone up for more than 15 minutes. There is DELAY which wont page you for certain intervals. But I don't understand what you want to do. Jason Chambers IT Helpdesk Support Geosoft Inc. XX Richmond St. West - 8th Floor Toronto, Ontario, Canada M5H 2C9 Tel: XXX-XXX-XXXX x344 Fax: XXX-XXX-XXXX www.geosoft.com -----Original Message----- From: user-c102b8958c7a@xymon.invalid [mailto:user-c102b8958c7a@xymon.invalid] Sent: Friday, November 18, 2005 1:35 PM To: user-ae9b8668bcde@xymon.invalid Subject: RE: [hobbit] Alert Setup Question Thanks for the reply. If I understand DURATION ( DURATION<5m) correctly that says if HostA is down for more than five minutes alert, if not do nothing. I basically want to put a hold on the Alert for that rule for 15minutes after it's triggered. In BB they write an entry in /bbvar/notifications with the mail address with a timestamp of +15m. As long as that entry is in there, you won't get double paged. --Pat -----Original Message----- From: Jason Chambers [mailto:user-3fa671c0a30d@xymon.invalid] Sent: Friday, November 18, 2005 1:22 PM To: user-ae9b8668bcde@xymon.invalid Subject: RE: [hobbit] Alert Setup Question I think you want the DURATION tag! http://hobbitmon.sourceforge.net/docs/manpages/man5/hobbit-alerts.cfg.5. html this site should help you. Jason Chambers IT Helpdesk Support Geosoft Inc. XX Richmond St. West - 8th Floor Toronto, Ontario, Canada M5H 2C9 Tel: XXX-XXX-XXXX x344 Fax: XXX-XXX-XXXX www.geosoft.com -----Original Message----- From: user-c102b8958c7a@xymon.invalid [mailto:user-c102b8958c7a@xymon.invalid] Sent: Friday, November 18, 2005 12:35 PM To: user-ae9b8668bcde@xymon.invalid Subject: RE: [hobbit] Alert Setup Question Now for the rest of my email.... Okay, I'm working on getting my alerts setup. My current hobbit-alert.cfg is: $IGNPAT=%(annex-nw|gozo|mis-server) EXHOST=$IGNPAT MAIL user-c102b8958c7a@xymon.invalid REPEAT=5m EXHOST=$IGNPAT,%sps* TIME=*:0800:1700 MAIL user-99ffe2bb97cc@xymon.invalid REPEAT=15m FORMAT=SMS MAIL user-24a445068ef7@xymon.invalid REPEAT=15m FORMAT=SMS I need to have it email the pager group for the first alert in a 15minute window, and then for 15minute intervals. Suggestions?
list Jason Chambers
Wow, I don't deal with that kind of complexity. Maybe you can hack up some type of DEPENDS list? http://hobbitmon.sourceforge.net/docs/manpages/man5/bb-hosts.5.html
▸
Jason Chambers
IT Helpdesk Support
Geosoft Inc.
XX Richmond St. West - 8th Floor
Toronto, Ontario, Canada
M5H 2C9
Tel: XXX-XXX-XXXX x344
Fax: XXX-XXX-XXXX
www.geosoft.com
-----Original Message-----
From: user-c102b8958c7a@xymon.invalid [mailto:user-c102b8958c7a@xymon.invalid]
Sent: Friday, November 18, 2005 2:47 PM
To: user-ae9b8668bcde@xymon.invalid
Subject: RE: [hobbit] Alert Setup Question
Okay, let me run a scenario...
7:00 HostA generates an alert which gets sent to user-31de6375c70f@xymon.invalid
7:05 HostB generates an alert which does not get sent to user-31de6375c70f@xymon.invalid
because they got paged in the 15 minutes
7:18 HostA is fixed now, but HostB is still broken and generating an
alert,
which gets sent to user-31de6375c70f@xymon.invalid
7:22 HostC breaks now, no Alert to user-31de6375c70f@xymon.invalid
7:33 HostB is still Broken, sends an alert to user-31de6375c70f@xymon.invalid
Duration is for how old the alert is
Delay - I haven't seen any documentation on this.
In BigBrother it's called pagedelay and was configured in
bbwarnsetup.cfg,
in my case, for 15 minutes.
Does that help?
list Henrik Størner
▸
On Fri, Nov 18, 2005, user-c102b8958c7a@xymon.invalid wrote:
7:00 HostA generates an alert which gets sent to user-31de6375c70f@xymon.invalid
7:05 HostB generates an alert which does not get sent to user-31de6375c70f@xymon.invalid
because they got paged in the 15 minutes
7:18 HostA is fixed now, but HostB is still broken and generating an
alert, which gets sent to user-31de6375c70f@xymon.invalid
7:22 HostC breaks now, no Alert to user-31de6375c70f@xymon.invalid
7:33 HostB is still Broken, sends an alert to user-31de6375c70f@xymon.invalidNot possible. The Hobbit alert module doesn't really have the concept of "page groups"; if you want to compare with BB, it behaves like the BB pager with "pagetype" set to "EVENT". Each recipient configured to receive an alert for a specific HOST.TEST combination gets all alerts; there is no way of configuring Hobbit to send max. N alerts to a given recipient in a 15-minute period. I'm not saying that is the optimum solution for everyone, and it might be changed if you can convince me there is enough people who need it - but so far, you're the first one to ask for such a feature. Henrik
list Pnixon
I knew someone would get it eventually! I'll see if I can use it as is for now and get back to you if it becomes a big inconvience or issue. It's just kind of counter-productive to be working on something and getting 10 pages in a row. I suppose I can also build out the DEPENDS stuff to limit the backscatter from a downed item. Thanks for the response Henrik. --Pat
▸
-----Original Message-----
From: user-ce4a2c883f75@xymon.invalid [mailto:user-ce4a2c883f75@xymon.invalid]
Sent: Friday, November 18, 2005 6:00 PM
To: user-ae9b8668bcde@xymon.invalid
Subject: Re: [hobbit] Alert Setup Question
On Fri, Nov 18, 2005, user-c102b8958c7a@xymon.invalid wrote:
7:00 HostA generates an alert which gets sent to user-31de6375c70f@xymon.invalid
7:05 HostB generates an alert which does not get sent to user-31de6375c70f@xymon.invalid
because they got paged in the 15 minutes
7:18 HostA is fixed now, but HostB is still broken and generating an
alert, which gets sent to user-31de6375c70f@xymon.invalid
7:22 HostC breaks now, no Alert to user-31de6375c70f@xymon.invalid
7:33 HostB is still Broken, sends an alert to user-31de6375c70f@xymon.invalidNot possible. The Hobbit alert module doesn't really have the concept of "page groups"; if you want to compare with BB, it behaves like the BB pager with "pagetype" set to "EVENT". Each recipient configured to receive an alert for a specific HOST.TEST combination gets all alerts; there is no way of configuring Hobbit to send max. N alerts to a given recipient in a 15-minute period. I'm not saying that is the optimum solution for everyone, and it might be changed if you can convince me there is enough people who need it - but so far, you're the first one to ask for such a feature. Henrik
list Pnixon
Henrik, I don't suppose this has come up from anyone else since we discussed it last? I'm getting yelled at because we got a $400 overage charge this month on our pagers due to the 2500 alerts that went out. If you have no plans for it, I'll write an external script to handle it. Thanks, Pat
▸
-----Original Message-----
From: user-c102b8958c7a@xymon.invalid [mailto:user-c102b8958c7a@xymon.invalid]
Sent: Monday, November 21, 2005 1:19 PM
To: user-ae9b8668bcde@xymon.invalid
Subject: RE: [hobbit] Alert Setup Question
I knew someone would get it eventually!
I'll see if I can use it as is for now and get back to you if it becomes a
big inconvience or issue. It's just kind of counter-productive to be
working on something and getting 10 pages in a row.
I suppose I can also build out the DEPENDS stuff to limit the backscatter
from a downed item.
Thanks for the response Henrik.
--Pat
-----Original Message-----
From: user-ce4a2c883f75@xymon.invalid [mailto:user-ce4a2c883f75@xymon.invalid]
Sent: Friday, November 18, 2005 6:00 PM
To: user-ae9b8668bcde@xymon.invalid
Subject: Re: [hobbit] Alert Setup Question
On Fri, Nov 18, 2005, user-c102b8958c7a@xymon.invalid wrote:
7:00 HostA generates an alert which gets sent to user-31de6375c70f@xymon.invalid
7:05 HostB generates an alert which does not get sent to user-31de6375c70f@xymon.invalid
because they got paged in the 15 minutes
7:18 HostA is fixed now, but HostB is still broken and generating an
alert, which gets sent to user-31de6375c70f@xymon.invalid
7:22 HostC breaks now, no Alert to user-31de6375c70f@xymon.invalid
7:33 HostB is still Broken, sends an alert to user-31de6375c70f@xymon.invalidNot possible. The Hobbit alert module doesn't really have the concept of "page groups"; if you want to compare with BB, it behaves like the BB pager with "pagetype" set to "EVENT". Each recipient configured to receive an alert for a specific HOST.TEST combination gets all alerts; there is no way of configuring Hobbit to send max. N alerts to a given recipient in a 15-minute period. I'm not saying that is the optimum solution for everyone, and it might be changed if you can convince me there is enough people who need it - but so far, you're the first one to ask for such a feature. Henrik