"Roll-up" of purple alerts and their recoveries.
list Jean-Pierre Pitout [ Mtn South Africa ]
Good day, I haven't been able to find too much information on this topic. Is it possible to configure Xymon to "roll-up" multiple purple alerts as well as their respective recoveries into one single event/alert? This is mostly just for purple status that causes a multitude of mails. Any info would be greatly appreciated. Thanks! JP Pitout "This email is confidential. If you have received it in error, you are on notice of its status. Please notify us immediately by reply email and then delete this message from your system. Please do not copy it or use it for any purpose, or disclose its contents to any other person as to do so could be a breach of confidentiality. Thank you for your co-operation. " “The information contained in this message is intended solely for the individual to whom it is specifically and originally addressed. This message and its contents may contain confidential or privileged information from MTN Group. If you are not the intended recipient, you are hereby notified that any disclosure or distribution, is strictly prohibited. If you receive this email in error, please notify MTN Group immediately and delete it. MTN Group does not accept any liability or responsibility if action is taken in reliance on the contents of this information . Note that all personal emails are not authorized by MTN Group. ”
list John Rothlisberger
I simply use a rule like this in alerts.cfg: COLOR=purple SERVICE=disk <alert details> I use the service=disk as it is a common test across windows/linux. Thanks, John Upcoming PTO: John Rothlisberger IT Strategy, Infrastructure & Security - Technology Growth Platform TGP for Business Process Outsourcing Accenture XXX.XXX.XXXX office
▸
-----Original Message-----
From: Xymon [mailto:xymon-bounces at xymon.com] On Behalf Of Jean-Pierre Pitout [ MTN South Africa ]
Sent: Tuesday, September 19, 2017 3:27 AM
To: xymon at xymon.com
Subject: [External] [Xymon] "Roll-up" of purple alerts and their recoveries.
Good day,
I haven't been able to find too much information on this topic.
Is it possible to configure Xymon to "roll-up" multiple purple alerts as
well as their respective recoveries into one single event/alert? This is
mostly just for purple status that causes a multitude of mails.
Any info would be greatly appreciated.
Thanks!
JP Pitout
"This email is confidential. If you have received it in error, you are on notice of its status. Please notify us immediately by reply email and then delete this message from your system. Please do not copy it or use it for any purpose, or disclose its contents to any other person as to do so could be a breach of confidentiality. Thank you for your co-operation. "
“The information contained in this message is intended solely for the individual to whom it is specifically and originally addressed. This message and its contents may contain confidential or privileged information from MTN Group. If you are not the intended recipient, you are hereby notified that any disclosure or distribution, is strictly prohibited. If you receive this email in error, please notify MTN Group immediately and delete it. MTN Group does not accept any liability or responsibility if action is taken in reliance on the contents of this information . Note that all personal emails are not authorized by MTN Group. ”
https://urldefense.proofpoint.com/v2/url?u=http-3A__lists.xymon.com_mailman_listinfo_xymon&d=DwIGaQ&c=eIGjsITfXP_y-DLLX0uEHXJvU8nOHrUK8IrwNKOtkVU&r=u6KtIBCRNAeN-AbgJjdZe5zZJVFEfq04dnWD-hYNPL_fxJIIFncbL8W6k0NMJtuq&m=Z95RV1vxHpmsm5b4fZTua6P1ON1RhodfnXsI7w8kyJs&s=3Tv5lVsGWFU3NNuzu2cvjTUvW4pFQvhhYJ33OY-Ims8&e= This message is for the designated recipient only and may contain privileged, proprietary, or otherwise confidential information. If you have received it in error, please notify the sender immediately and delete the original. Any other use of the e-mail by you is prohibited. Where allowed by local law, electronic communications with Accenture and its affiliates, including e-mail and instant messaging (including content), may be scanned by our systems for the purposes of information security and assessment of internal compliance with Accenture policy. www.accenture.com
list Jean-Pierre Pitout [ Mtn South Africa ]
Has anyone written a custom script to achieve this? Regards, JP Pitout
▸
On 20/09/2017 10:03, Jean-Pierre Pitout [ MTN South Africa ] wrote:Good day, I haven't been able to find too much information on this topic. Is it possible to configure Xymon to "roll-up" multiple purple alerts as well as their respective recoveries into one single event/alert? This is mostly just for purple status that causes a multitude of mails. Any info would be greatly appreciated. Thanks! JP Pitout "This email is confidential. If you have received it in error, you are on notice of its status. Please notify us immediately by reply email and then delete this message from your system. Please do not copy it or use it for any purpose, or disclose its contents to any other person as to do so could be a breach of confidentiality. Thank you for your co-operation. " “The information contained in this message is intended solely for the individual to whom it is specifically and originally addressed. This message and its contents may contain confidential or privileged information from MTN Group. If you are not the intended recipient, you are hereby notified that any disclosure or distribution, is strictly prohibited. If you receive this email in error, please notify MTN Group immediately and delete it. MTN Group does not accept any liability or responsibility if action is taken in reliance on the contents of this information . Note that all personal emails are not authorized by MTN Group. ”
“The information contained in this message is intended solely for the individual to whom it is specifically and originally addressed. This message and its contents may contain confidential or privileged information from MTN Group. If you are not the intended recipient, you are hereby notified that any disclosure or distribution, is strictly prohibited. If you receive this email in error, please notify MTN Group immediately and delete it. MTN Group does not accept any liability or responsibility if action is taken in reliance on the contents of this information . Note that all personal emails are not authorized by MTN Group. ”
list Galen Johnson
JP, You might want to look into test dependencies. Look in the hosts.cfg man page for "depends=". Not 100% sure if this will give you what you're looking for but comes the closest out of the box that I can think of. =G=
▸
From: Xymon <xymon-bounces at xymon.com> on behalf of Jean-Pierre Pitout [ MTN South Africa ] <user-d79d4f3a8dc6@xymon.invalid>
Sent: Thursday, September 21, 2017 4:03 AM
To: xymon at xymon.com
Subject: Re: [Xymon] "Roll-up" of purple alerts and their recoveries.
EXTERNAL
▸
Has anyone written a custom script to achieve this?
Regards,
JP Pitout
On 20/09/2017 10:03, Jean-Pierre Pitout [ MTN South Africa ] wrote:Good day, I haven't been able to find too much information on this topic. Is it possible to configure Xymon to "roll-up" multiple purple alerts as well as their respective recoveries into one single event/alert? This is mostly just for purple status that causes a multitude of mails. Any info would be greatly appreciated. Thanks! JP Pitout "This email is confidential. If you have received it in error, you are on notice of its status. Please notify us immediately by reply email and then delete this message from your system. Please do not copy it or use it for any purpose, or disclose its contents to any other person as to do so could be a breach of confidentiality. Thank you for your co-operation. " “The information contained in this message is intended solely for the individual to whom it is specifically and originally addressed. This message and its contents may contain confidential or privileged information from MTN Group. If you are not the intended recipient, you are hereby notified that any disclosure or distribution, is strictly prohibited. If you receive this email in error, please notify MTN Group immediately and delete it. MTN Group does not accept any liability or responsibility if action is taken in reliance on the contents of this information . Note that all personal emails are not authorized by MTN Group. ”
“The information contained in this message is intended solely for the individual to whom it is specifically and originally addressed. This message and its contents may contain confidential or privileged information from MTN Group. If you are not the intended recipient, you are hereby notified that any disclosure or distribution, is strictly prohibited. If you receive this email in error, please notify MTN Group immediately and delete it. MTN Group does not accept any liability or responsibility if action is taken in reliance on the contents of this information . Note that all personal emails are not authorized by MTN Group. ”
list John Tullis
For our organization, we rarely have a purple alert that isn't the entire server going offline. So we solved it by only sending purple alert messages for the CPU and wrote a custom message that says, your CPU is purple but it's likely your server is down. Please log in and check it. Then, in the alerts.cfg file, our rules look like this: PAGE=%.*pagename/ SCRIPT=/path/to/alert.sh user-242c7196bcd0@xymon.invalid COLOR=red,yellow RECOVERED REPEAT=720 DURATION>3 SCRIPT=/path/to/purple.sh user-242c7196bcd0@xymon.invalid COLOR=purple SERVICE=cpu RECOVERED REPEAT=720 DURATION>3 Thanks, John Tullis -----Original Message----- From: Jean-Pierre Pitout [ MTN South Africa ] [user-d79d4f3a8dc6@xymon.invalid] Received: Thursday, 21 Sep 2017, 3:38AM To: xymon at xymon.com [xymon at xymon.com]
▸
Subject: Re: [Xymon] "Roll-up" of purple alerts and their recoveries.
Has anyone written a custom script to achieve this?
Regards,
JP Pitout
On 20/09/2017 10:03, Jean-Pierre Pitout [ MTN South Africa ] wrote:
Good day,
I haven't been able to find too much information on this topic.
Is it possible to configure Xymon to "roll-up" multiple purple alerts as
well as their respective recoveries into one single event/alert? This is
mostly just for purple status that causes a multitude of mails.
Any info would be greatly appreciated.
Thanks!
JP Pitout
"This email is confidential. If you have received it in error, you are on notice of its status. Please notify us immediately by reply email and then delete this message from your system. Please do not copy it or use it for any purpose, or disclose its contents to any other person as to do so could be a breach of confidentiality. Thank you for your co-operation. "
“The information contained in this message is intended solely for the individual to whom it is specifically and originally addressed. This message and its contents may contain confidential or privileged information from MTN Group. If you are not the intended recipient, you are hereby notified that any disclosure or distribution, is strictly prohibited. If you receive this email in error, please notify MTN Group immediately and delete it. MTN Group does not accept any liability or responsibility if action is taken in reliance on the contents of this information . Note that all personal emails are not authorized by MTN Group. ”
“The information contained in this message is intended solely for the individual to whom it is specifically and originally addressed. This message and its contents may contain confidential or privileged information from MTN Group. If you are not the intended recipient, you are hereby notified that any disclosure or distribution, is strictly prohibited. If you receive this email in error, please notify MTN Group immediately and delete it. MTN Group does not accept any liability or responsibility if action is taken in reliance on the contents of this information . Note that all personal emails are not authorized by MTN Group. ”
John Tullis
XXX.XXX.XXXX Cell
XXX.XXX.XXXX Office
1314 W. 11400 S. Suite XXX
South Jordan, UT XXXXX