Xymon Mailing List Archive search

Citrix Users?

12 messages in this thread

list Jason Chambers · Mon, 24 Oct 2005 10:53:09 -0400 · 
Hi guys,

 
I see a Citrix User graph in hobbitgraph file, but I have unable to find
a script on deadcat.net that would support this. Can anyone help me out
here?

 
Cheers,

Jason Chambers

IT Helpdesk Support

 eosoft Inc.

XX Richmond St. West - 8th Floor

Toronto, Ontario, Canada

M5H 2C9

Tel: XXX-XXX-XXXX x344

Fax: XXX-XXX-XXXX

www.geosoft.com
list Richard Deal · Mon, 24 Oct 2005 10:59:39 -0400 · 
citrix.zip in the contrib. directory of the hobbit server will do the
trick
▸ quoted from Jason Chambers

 
-----Original Message-----
From: Jason Chambers [mailto:user-3fa671c0a30d@xymon.invalid] 
Sent: Monday, October 24, 2005 10:53 AM
To: user-ae9b8668bcde@xymon.invalid
Subject: [hobbit] Citrix Users?

 
Hi guys,

 
I see a Citrix User graph in hobbitgraph file, but I have unable to find
a script on deadcat.net that would support this. Can anyone help me out
here?

 
Cheers,

Jason Chambers

IT Helpdesk Support

 eosoft Inc.

XX Richmond St. West - 8th Floor

Toronto, Ontario, Canada

M5H 2C9

Tel: XXX-XXX-XXXX x344

Fax: XXX-XXX-XXXX

www.geosoft.com
list Henrik Størner · Mon, 24 Oct 2005 17:02:14 +0200 ·
▸ quoted from Jason Chambers
On Mon, Oct 24, 2005 at 10:53:09AM -0400, Jason Chambers wrote:
I see a Citrix User graph in hobbitgraph file, but I have unable to find
a script on deadcat.net that would support this. Can anyone help me out
here?
It's in the Hobbit "contrib" directory.


Henrik
list Martin Ward · Mon, 4 Mar 2013 09:19:25 +0000 · 
Hi all,

I have the following in my alerts.cfg:

PAGE=IV
        HOST=%ivma[12].*.osspriv.colt.net EXSERVICE=files,msgs,ports,procs,cpu
        SCRIPT /opt/xymon/server/ext/html_mail.pl user-2d33a6eb6a05@xymon.invalid DURATION>1h COLOR=red RECOVERED STOP

If I run it through xymond_alert -dump-config it comes up as:
  168   PAGE=Infovista
  169   HOST=%ivma[12].*.osspriv.colt.net EXSERVICE=files,msgs,ports,procs,cpu
        SCRIPT /opt/xymon/server/ext/html_mail.pl user-2d33a6eb6a05@xymon.invalid FORMAT=SCRIPT REPEAT=30 COLOR=red DURATION>60 RECOVERED STOP

Yet I am still getting CPU alerts from ivma2.lon.osspriv.colt.net

Can anyone suggest what the problem might be?

|\/|artin

[Colt Disclaimer]
This email is from an entity of the Colt group of companies.
Colt Group S.A., K2 Building, Forte 1, 2a rue Albert Borschette, L-1246 Luxembourg, R.C.S. B115679.
Corporate and contact information for our entities can be found at
http://colt.net/uk/en/Colt-Group-of-Companies/index.htm.
Internet communications are not secure and Colt does not accept
responsibility for the accurate transmission of this message. Content
of this email or its attachments is not legally or contractually binding
unless expressly previously agreed in writing by Colt
list Henrik Størner · Mon, 04 Mar 2013 12:27:25 +0100 · 
On Mon, 4 Mar 2013 09:19:25 +0000, "Ward, Martin" <user-2d33a6eb6a05@xymon.invalid>
▸ quoted from Martin Ward
wrote:
Hi all,

I have the following in my alerts.cfg:
[snip] 
Yet I am still getting CPU alerts from ivma2.lon.osspriv.colt.net
Try running
   xymoncmd xymond_alert --test ivma2.lon.osspriv.colt.net cpu
and look for lines like

00004226 2013-03-04 12:24:11 Matching host:service:dgroup:page
'cscxymweb3.csc.dk:disk:Xymon servers:cscdk/mwsmonitor,cscdk/mwsmonitor'
against rule line 1260
00004226 2013-03-04 12:24:11 *** Match with 'MAIL $XYMONADM
$XYMONADMREPEAT' ***
00004226 2013-03-04 12:24:11 Mail alert with command '/usr/bin/mail -s
"Xymon [12345] cscxymweb3.csc.dk:disk CRITICAL (RED)" user-fe4cb829cfaa@xymon.invalid'
00004226 2013-03-04 12:24:11 Matching host:service:dgroup:page
'cscxymweb3.csc.dk:disk:Xymon servers:cscdk/mwsmonitor,cscdk/mwsmonitor'
against rule line 126

to see which rule triggers the alert.


Regards,
Henrik
list Massimo Morsiani · Mon, 4 Mar 2013 14:02:18 +0000 · 
Hello everybody,

I have found traces of citrix users tracking in XYMOND_RRD man page and I have seen a citrix user graph in graph.cfg file.
But neither contrib./ directory nor citrix.zip are present in current 4.3.10 tarball from SourceForge.

So my questions.
Is anyone using this extension?
Is it possible to share it with the list?
Or where can I find/download it?

Thanks in advance.


Regards.

Massimo Morsiani Information Technology Dept. ------ Gilbarco S.r.l. via de' Cattani, 220/G 50145 Firenze, Italy tel:    +39-055-30941 fax:    +39-055-318603 email:  user-32025d8bd22e@xymon.invalid web:    http://www.gilbarco.it

 Please consider the environment before printing this e-mail


Please be advised that this email may contain confidential information.  If you are not the intended recipient, please notify us by email by replying to the sender and delete this message.  The sender disclaims that the content of this email constitutes an offer to enter into, or the acceptance of, any agreement; provided that the foregoing does not invalidate the binding effect of any digital or other electronic reproduction of a manual signature that is included in any attachment.
list Martin Ward · Tue, 5 Mar 2013 12:25:51 +0000 · 
Thanks Henrik that helped a huge amount. I was able to diagnose the issue which was that I was specifying a subpage incorrectly.

To help those searching the Internet for this problem, if you have a subpage that you want to get alerts about then it must be specified as:

PAGE=Main/Sub

Instead of:

PAGE=Sub

Which is what I had; the actual config lines now work correctly:

PAGE=Infovista/IV32 HOST=%ivma[12].*.osspriv.colt.net EXSERVICE=files,msgs,ports,procs,cpu
        SCRIPT /opt/xymon/server/ext/html_mail.pl user-2d33a6eb6a05@xymon.invalid DURATION>1h COLOR=red RECOVERED STOP

@Kenneth, I tried adding a comma at the end of the EXSERVICE line, it made no difference but thanks for the suggestion.

|\/|artin
--  
Martin Ward
Manager, Technical Services
Service Operations

DDI:+44 (0) 20 7863 5218 / Fax: +XX (X)XX XXXX XXXX /  www.colt.net
Colt Technology Services, Unit XX, Powergate Business Park, Volt Avenue, Park Royal, London, NW10 6PW, UK.

Help reduce your carbon footprint | Think before you print. Registered in England and Wales, registered number 02452736, VAT number GB 645 4205 50
▸ quoted from Henrik Størner


-----Original Message-----
From: user-ce4a2c883f75@xymon.invalid [mailto:user-ce4a2c883f75@xymon.invalid]
Sent: 04 March 2013 11:27
To: Ward, Martin
Cc: xymon at xymon.com
Subject: Re: [Xymon] Xymon alerting when it's been told not to

On Mon, 4 Mar 2013 09:19:25 +0000, "Ward, Martin"
<user-2d33a6eb6a05@xymon.invalid>
wrote:
Hi all,

I have the following in my alerts.cfg:
[snip]
Yet I am still getting CPU alerts from ivma2.lon.osspriv.colt.net
Try running
   xymoncmd xymond_alert --test ivma2.lon.osspriv.colt.net cpu and look for
lines like

00004226 2013-03-04 12:24:11 Matching host:service:dgroup:page
'cscxymweb3.csc.dk:disk:Xymon
servers:cscdk/mwsmonitor,cscdk/mwsmonitor'
against rule line 1260
00004226 2013-03-04 12:24:11 *** Match with 'MAIL $XYMONADM
$XYMONADMREPEAT' ***
00004226 2013-03-04 12:24:11 Mail alert with command '/usr/bin/mail -s
"Xymon [12345] cscxymweb3.csc.dk:disk CRITICAL (RED)"
user-fe4cb829cfaa@xymon.invalid'
00004226 2013-03-04 12:24:11 Matching host:service:dgroup:page
'cscxymweb3.csc.dk:disk:Xymon
servers:cscdk/mwsmonitor,cscdk/mwsmonitor'
against rule line 126

to see which rule triggers the alert.


Regards,
Henrik

[Colt Disclaimer]
This email is from an entity of the Colt group of companies.
Colt Group S.A., K2 Building, Forte 1, 2a rue Albert Borschette, L-1246 Luxembourg, R.C.S. B115679.
Corporate and contact information for our entities can be found at
http://colt.net/uk/en/Colt-Group-of-Companies/index.htm.
Internet communications are not secure and Colt does not accept
responsibility for the accurate transmission of this message. Content
of this email or its attachments is not legally or contractually binding
unless expressly previously agreed in writing by Colt
list Martin Ward · Mon, 13 May 2013 15:01:51 +0000 · 
I cannot fathom why it repeats at all so rather that look for something that isn't there I have forced every alert to repeat every seven days to see if that resolves the issue!
▸ quoted from Martin Ward

|\/|
--  
Martin Ward
Manager, Technical Services
Service Operations

DDI:+44 (0) 20 7863 5218 / Fax: +XX (X)XX XXXX XXXX /  www.colt.net
Colt Technology Services, Unit XX, Powergate Business Park, Volt Avenue, Park Royal, London, NW10 6PW, UK.

Help reduce your carbon footprint | Think before you print. Registered in England and Wales, registered number 02452736, VAT number GB 645 4205 50


-----Original Message-----
From: user-ce4a2c883f75@xymon.invalid [mailto:user-ce4a2c883f75@xymon.invalid]
Sent: 04 March 2013 11:27
To: Ward, Martin
Cc: xymon at xymon.com
Subject: Re: [Xymon] Xymon alerting when it's been told not to

On Mon, 4 Mar 2013 09:19:25 +0000, "Ward, Martin"
<user-2d33a6eb6a05@xymon.invalid>
wrote:
Hi all,

I have the following in my alerts.cfg:
[snip]
Yet I am still getting CPU alerts from ivma2.lon.osspriv.colt.net
Try running
   xymoncmd xymond_alert --test ivma2.lon.osspriv.colt.net cpu and look for
lines like

00004226 2013-03-04 12:24:11 Matching host:service:dgroup:page
'cscxymweb3.csc.dk:disk:Xymon
servers:cscdk/mwsmonitor,cscdk/mwsmonitor'
against rule line 1260
00004226 2013-03-04 12:24:11 *** Match with 'MAIL $XYMONADM
$XYMONADMREPEAT' ***
00004226 2013-03-04 12:24:11 Mail alert with command '/usr/bin/mail -s
"Xymon [12345] cscxymweb3.csc.dk:disk CRITICAL (RED)"
user-fe4cb829cfaa@xymon.invalid'
00004226 2013-03-04 12:24:11 Matching host:service:dgroup:page
'cscxymweb3.csc.dk:disk:Xymon
servers:cscdk/mwsmonitor,cscdk/mwsmonitor'
against rule line 126

to see which rule triggers the alert.


Regards,
Henrik

[Colt Disclaimer]
This email is from an entity of the Colt group of companies.
Colt Group S.A., K2 Building, Forte 1, 2a rue Albert Borschette, L-1246 Luxembourg, R.C.S. B115679.
Corporate and contact information for our entities can be found at
http://colt.net/uk/en/Colt-Group-of-Companies/index.htm.
Internet communications are not secure and Colt does not accept
responsibility for the accurate transmission of this message. Content
of this email or its attachments is not legally or contractually binding
unless expressly previously agreed in writing by Colt
list Martin Ward · Mon, 13 May 2013 15:10:33 +0000 · 
My apologies, I hit the "Send" button accidentally, a bit more info would have helped :-(

I ran the " xymoncmd xymond_alert --test" as you suggested and it is definitely matching on the right entry:

00019291 2013-05-13 15:52:53 *** Match with 'PAGE=SMARTS        HOST=%sm[0-9]* EXSERVICE=files,msgs,ports,cpu' ***

The lines in the logfile there are:

PAGE=SMARTS     HOST=%sm[0-9]* EXSERVICE=files,msgs,ports,cpu
        SCRIPT /opt/xymon/server/ext/html_mail.pl user-569f3875c7f6@xymon.invalid DURATION>1h COLOR=red RECOVERED STOP

AFAIK this means that the alert should only be sent once, however it is being sent every thirty minutes as the lines from the log file show:
Mon May 13 00:11:27 2013 sm9.lon.oss.colt.net.procs (212.74.77.85) user-569f3875c7f6@xymon.invalid 1368400263 300
Mon May 13 00:41:31 2013 sm9.lon.oss.colt.net.procs (212.74.77.85) user-569f3875c7f6@xymon.invalid 1368402066 300
Mon May 13 01:11:50 2013 sm9.lon.oss.colt.net.procs (212.74.77.85) user-569f3875c7f6@xymon.invalid 1368403886 300
Mon May 13 01:42:03 2013 sm9.lon.oss.colt.net.procs (212.74.77.85) user-569f3875c7f6@xymon.invalid 1368405699 300
Mon May 13 02:12:13 2013 sm9.lon.oss.colt.net.procs (212.74.77.85) user-569f3875c7f6@xymon.invalid 1368407508 300
Mon May 13 02:42:21 2013 sm9.lon.oss.colt.net.procs (212.74.77.85) user-569f3875c7f6@xymon.invalid 1368409316 300

I cannot fathom why it repeats at all so rather that look for something that isn't there, for now I have forced every alert to repeat every seven days but I would like to understand more about why this is working the way it is rather than the way it is supposed to (or I think it is supposed to!).
▸ quoted from Martin Ward

|\/|artin
--  
Martin Ward
Manager, Technical Services
Service Operations

DDI:+44 (0) 20 7863 5218 / Fax: +XX (X)XX XXXX XXXX /  www.colt.net
Colt Technology Services, Unit XX, Powergate Business Park, Volt Avenue, Park Royal, London, NW10 6PW, UK.

Help reduce your carbon footprint | Think before you print. Registered in England and Wales, registered number 02452736, VAT number GB 645 4205 50


-----Original Message-----
From: Ward, Martin
Sent: 13 May 2013 16:02
To: 'user-ce4a2c883f75@xymon.invalid'
Cc: xymon at xymon.com
Subject: RE: [Xymon] Xymon alerting when it's been told not to

I cannot fathom why it repeats at all so rather that look for something that
isn't there I have forced every alert to repeat every seven days to see if that
resolves the issue!

|\/|
--
Martin Ward
Manager, Technical Services
Service Operations

DDI:+44 (0) 20 7863 5218 / Fax: +XX (X)XX XXXX XXXX /  www.colt.net Colt
Technology Services, Unit XX, Powergate Business Park, Volt Avenue, Park
Royal, London, NW10 6PW, UK.

Help reduce your carbon footprint | Think before you print. Registered in
England and Wales, registered number 02452736, VAT number GB 645 4205
50


-----Original Message-----
From: user-ce4a2c883f75@xymon.invalid [mailto:user-ce4a2c883f75@xymon.invalid]
Sent: 04 March 2013 11:27
To: Ward, Martin
Cc: xymon at xymon.com
Subject: Re: [Xymon] Xymon alerting when it's been told not to

On Mon, 4 Mar 2013 09:19:25 +0000, "Ward, Martin"
<user-2d33a6eb6a05@xymon.invalid>
wrote:
Hi all,

I have the following in my alerts.cfg:
[snip]
Yet I am still getting CPU alerts from ivma2.lon.osspriv.colt.net
Try running
   xymoncmd xymond_alert --test ivma2.lon.osspriv.colt.net cpu and
look for lines like

00004226 2013-03-04 12:24:11 Matching host:service:dgroup:page
'cscxymweb3.csc.dk:disk:Xymon
servers:cscdk/mwsmonitor,cscdk/mwsmonitor'
against rule line 1260
00004226 2013-03-04 12:24:11 *** Match with 'MAIL $XYMONADM
$XYMONADMREPEAT' ***
00004226 2013-03-04 12:24:11 Mail alert with command '/usr/bin/mail -s
"Xymon [12345] cscxymweb3.csc.dk:disk CRITICAL (RED)"
user-fe4cb829cfaa@xymon.invalid'
00004226 2013-03-04 12:24:11 Matching host:service:dgroup:page
'cscxymweb3.csc.dk:disk:Xymon
servers:cscdk/mwsmonitor,cscdk/mwsmonitor'
against rule line 126

to see which rule triggers the alert.


Regards,
Henrik

[Colt Disclaimer]
This email is from an entity of the Colt group of companies.
Colt Group S.A., K2 Building, Forte 1, 2a rue Albert Borschette, L-1246 Luxembourg, R.C.S. B115679.
Corporate and contact information for our entities can be found at
http://colt.net/uk/en/Colt-Group-of-Companies/index.htm.
Internet communications are not secure and Colt does not accept
responsibility for the accurate transmission of this message. Content
of this email or its attachments is not legally or contractually binding
unless expressly previously agreed in writing by Colt
list Carl Inglis · Mon, 13 May 2013 15:54:22 +0000 · 
Hi Martin,

"Since there is no "REPEAT" setting for this recipient, the default is used which is to repeat the alert every 30 minutes." - from xymon-alerts.html

Regards,

Carl


 Carl Inglis
Systems Administrator

Rakon UK Limited
Dowsett House, Sadler Road, Lincoln LN6 3RS, United Kingdom
Tel: +XX (X)XXXX XXXXXX | Fax: +XX (X) XXXX XXXXXX | Mob: +44 (0) 7786 552915
user-96685bdc864b@xymon.invalid | www.rakon.com


THE QUEENS AWARDS FOR ENTERPRISE 2012
Rakon UK Ltd


This message together with any attachments contains confidential information and may be
subject to privilege. If you are not the intended recipient you may not distribute it in any
way, you must notify the sender immediately and delete any copies of the message along
with its attachments.


Rakon UK Ltd is a limited company registered in England and Wales.
Registered Office: Dowsett House, Sadler Road, Lincoln LN6 3RS
Company Registration Number: 5128090.

Please be aware that Rakon UK Limited may monitor email traffic data including the date, time, subject line, sender and recipients for the purposes of security and usage monitoring. Automated monitoring systems may also be applied to ascertain whether incoming/outgoing emails are likely to contain viruses, other destructive devices or inappropriate content.
▸ quoted from Martin Ward
-----Original Message-----
From: Xymon [mailto:xymon-bounces at xymon.com] On Behalf Of Ward, Martin
Sent: 13 May 2013 16:11
To: user-ce4a2c883f75@xymon.invalid
Cc: xymon at xymon.com
Subject: Re: [Xymon] Xymon alerting when it's been told not to

My apologies, I hit the "Send" button accidentally, a bit more info would have helped :-(

I ran the " xymoncmd xymond_alert --test" as you suggested and it is definitely matching on the right entry:

00019291 2013-05-13 15:52:53 *** Match with 'PAGE=SMARTS        HOST=%sm[0-9]* EXSERVICE=files,msgs,ports,cpu' ***

The lines in the logfile there are:

PAGE=SMARTS     HOST=%sm[0-9]* EXSERVICE=files,msgs,ports,cpu
        SCRIPT /opt/xymon/server/ext/html_mail.pl user-569f3875c7f6@xymon.invalid DURATION>1h COLOR=red RECOVERED STOP

AFAIK this means that the alert should only be sent once, however it is being sent every thirty minutes as the lines from the log file show:
Mon May 13 00:11:27 2013 sm9.lon.oss.colt.net.procs (212.74.77.85) user-569f3875c7f6@xymon.invalid 1368400263 300
Mon May 13 00:41:31 2013 sm9.lon.oss.colt.net.procs (212.74.77.85) user-569f3875c7f6@xymon.invalid 1368402066 300
Mon May 13 01:11:50 2013 sm9.lon.oss.colt.net.procs (212.74.77.85) user-569f3875c7f6@xymon.invalid 1368403886 300
Mon May 13 01:42:03 2013 sm9.lon.oss.colt.net.procs (212.74.77.85) user-569f3875c7f6@xymon.invalid 1368405699 300
Mon May 13 02:12:13 2013 sm9.lon.oss.colt.net.procs (212.74.77.85) user-569f3875c7f6@xymon.invalid 1368407508 300
Mon May 13 02:42:21 2013 sm9.lon.oss.colt.net.procs (212.74.77.85) user-569f3875c7f6@xymon.invalid 1368409316 300

I cannot fathom why it repeats at all so rather that look for something that isn't there, for now I have forced every alert to repeat every seven days but I would like to understand more about why this is working the way it is rather than the way it is supposed to (or I think it is supposed to!).

|\/|artin
--
Martin Ward
Manager, Technical Services
Service Operations

DDI:+44 (0) 20 7863 5218 / Fax: +XX (X)XX XXXX XXXX /  www.colt.net
Colt Technology Services, Unit XX, Powergate Business Park, Volt Avenue, Park Royal, London, NW10 6PW, UK.

Help reduce your carbon footprint | Think before you print. Registered in England and Wales, registered number 02452736, VAT number GB 645 4205 50


-----Original Message-----
From: Ward, Martin
Sent: 13 May 2013 16:02
To: 'user-ce4a2c883f75@xymon.invalid'
Cc: xymon at xymon.com
Subject: RE: [Xymon] Xymon alerting when it's been told not to

I cannot fathom why it repeats at all so rather that look for something that
isn't there I have forced every alert to repeat every seven days to see if that
resolves the issue!

|\/|
--
Martin Ward
Manager, Technical Services
Service Operations

DDI:+44 (0) 20 7863 5218 / Fax: +XX (X)XX XXXX XXXX /  www.colt.net Colt
Technology Services, Unit XX, Powergate Business Park, Volt Avenue, Park
Royal, London, NW10 6PW, UK.

Help reduce your carbon footprint | Think before you print. Registered in
England and Wales, registered number 02452736, VAT number GB 645 4205
50


-----Original Message-----
From: user-ce4a2c883f75@xymon.invalid [mailto:user-ce4a2c883f75@xymon.invalid]
Sent: 04 March 2013 11:27
To: Ward, Martin
Cc: xymon at xymon.com
Subject: Re: [Xymon] Xymon alerting when it's been told not to

On Mon, 4 Mar 2013 09:19:25 +0000, "Ward, Martin"
<user-2d33a6eb6a05@xymon.invalid>
wrote:
Hi all,

I have the following in my alerts.cfg:
[snip]
Yet I am still getting CPU alerts from ivma2.lon.osspriv.colt.net
Try running
   xymoncmd xymond_alert --test ivma2.lon.osspriv.colt.net cpu and
look for lines like

00004226 2013-03-04 12:24:11 Matching host:service:dgroup:page
'cscxymweb3.csc.dk:disk:Xymon
servers:cscdk/mwsmonitor,cscdk/mwsmonitor'
against rule line 1260
00004226 2013-03-04 12:24:11 *** Match with 'MAIL $XYMONADM
$XYMONADMREPEAT' ***
00004226 2013-03-04 12:24:11 Mail alert with command '/usr/bin/mail -s
"Xymon [12345] cscxymweb3.csc.dk:disk CRITICAL (RED)"
user-fe4cb829cfaa@xymon.invalid'
00004226 2013-03-04 12:24:11 Matching host:service:dgroup:page
'cscxymweb3.csc.dk:disk:Xymon
servers:cscdk/mwsmonitor,cscdk/mwsmonitor'
against rule line 126

to see which rule triggers the alert.


Regards,
Henrik

[Colt Disclaimer]
This email is from an entity of the Colt group of companies.
Colt Group S.A., K2 Building, Forte 1, 2a rue Albert Borschette, L-1246 Luxembourg, R.C.S. B115679.
Corporate and contact information for our entities can be found at
http://colt.net/uk/en/Colt-Group-of-Companies/index.htm.
Internet communications are not secure and Colt does not accept
responsibility for the accurate transmission of this message. Content
of this email or its attachments is not legally or contractually binding
unless expressly previously agreed in writing by Colt
list Larry Barber · Mon, 13 May 2013 11:09:41 -0500 · 
The default repeat interval (set in xymonserver.cfg) is 30 minutes.

Thanks,
Larry Barber
▸ quoted from Carl Inglis


On Mon, May 13, 2013 at 10:10 AM, Ward, Martin <user-2d33a6eb6a05@xymon.invalid> wrote:

My apologies, I hit the "Send" button accidentally, a bit more info would
have helped :-(

I ran the " xymoncmd xymond_alert --test" as you suggested and it is
definitely matching on the right entry:

00019291 2013-05-13 15:52:53 *** Match with 'PAGE=SMARTS
 HOST=%sm[0-9]* EXSERVICE=files,msgs,ports,cpu' ***

The lines in the logfile there are:

PAGE=SMARTS     HOST=%sm[0-9]* EXSERVICE=files,msgs,ports,cpu

        SCRIPT /opt/xymon/server/ext/html_mail.pl user-9ce49b708f19@xymon.invalid>1h COLOR=red RECOVERED STOP
▸ quoted from Carl Inglis

AFAIK this means that the alert should only be sent once, however it is
being sent every thirty minutes as the lines from the log file show:
Mon May 13 00:11:27 2013 sm9.lon.oss.colt.net.procs (212.74.77.85)
user-569f3875c7f6@xymon.invalid 1368400263 300
Mon May 13 00:41:31 2013 sm9.lon.oss.colt.net.procs (212.74.77.85)
user-569f3875c7f6@xymon.invalid 1368402066 300
Mon May 13 01:11:50 2013 sm9.lon.oss.colt.net.procs (212.74.77.85)
user-569f3875c7f6@xymon.invalid 1368403886 300
Mon May 13 01:42:03 2013 sm9.lon.oss.colt.net.procs (212.74.77.85)
user-569f3875c7f6@xymon.invalid 1368405699 300
Mon May 13 02:12:13 2013 sm9.lon.oss.colt.net.procs (212.74.77.85)
user-569f3875c7f6@xymon.invalid 1368407508 300
Mon May 13 02:42:21 2013 sm9.lon.oss.colt.net.procs (212.74.77.85)
user-569f3875c7f6@xymon.invalid 1368409316 300

I cannot fathom why it repeats at all so rather that look for something
that isn't there, for now I have forced every alert to repeat every seven
days but I would like to understand more about why this is working the way
it is rather than the way it is supposed to (or I think it is supposed to!).

|\/|artin
--
Martin Ward
Manager, Technical Services
Service Operations

DDI:+44 (0) 20 7863 5218 / Fax: +XX (X)XX XXXX XXXX /  www.colt.net
Colt Technology Services, Unit XX, Powergate Business Park, Volt Avenue,
Park Royal, London, NW10 6PW, UK.

Help reduce your carbon footprint | Think before you print. Registered in
England and Wales, registered number 02452736, VAT number GB 645 4205 50


-----Original Message-----
From: Ward, Martin
Sent: 13 May 2013 16:02
To: 'user-ce4a2c883f75@xymon.invalid'
Cc: xymon at xymon.com
Subject: RE: [Xymon] Xymon alerting when it's been told not to

I cannot fathom why it repeats at all so rather that look for something
that
isn't there I have forced every alert to repeat every seven days to see
if that
resolves the issue!

|\/|
--
Martin Ward
Manager, Technical Services
Service Operations

DDI:+44 (0) 20 7863 5218 / Fax: +XX (X)XX XXXX XXXX /  www.colt.net Colt
Technology Services, Unit XX, Powergate Business Park, Volt Avenue, Park
Royal, London, NW10 6PW, UK.

Help reduce your carbon footprint | Think before you print. Registered in
England and Wales, registered number 02452736, VAT number GB 645 4205
50


-----Original Message-----
From: user-ce4a2c883f75@xymon.invalid [mailto:user-ce4a2c883f75@xymon.invalid]
Sent: 04 March 2013 11:27
To: Ward, Martin
Cc: xymon at xymon.com
Subject: Re: [Xymon] Xymon alerting when it's been told not to

On Mon, 4 Mar 2013 09:19:25 +0000, "Ward, Martin"
<user-2d33a6eb6a05@xymon.invalid>
wrote:
Hi all,

I have the following in my alerts.cfg:
[snip]
Yet I am still getting CPU alerts from ivma2.lon.osspriv.colt.net
Try running
   xymoncmd xymond_alert --test ivma2.lon.osspriv.colt.net cpu and
look for lines like

00004226 2013-03-04 12:24:11 Matching host:service:dgroup:page
'cscxymweb3.csc.dk:disk:Xymon
servers:cscdk/mwsmonitor,cscdk/mwsmonitor'
against rule line 1260
00004226 2013-03-04 12:24:11 *** Match with 'MAIL $XYMONADM
$XYMONADMREPEAT' ***
00004226 2013-03-04 12:24:11 Mail alert with command '/usr/bin/mail -s
"Xymon [12345] cscxymweb3.csc.dk:disk CRITICAL (RED)"
user-fe4cb829cfaa@xymon.invalid'
00004226 2013-03-04 12:24:11 Matching host:service:dgroup:page
'cscxymweb3.csc.dk:disk:Xymon
servers:cscdk/mwsmonitor,cscdk/mwsmonitor'
against rule line 126

to see which rule triggers the alert.


Regards,
Henrik

[Colt Disclaimer]
This email is from an entity of the Colt group of companies.
Colt Group S.A., K2 Building, Forte 1, 2a rue Albert Borschette, L-1246
Luxembourg, R.C.S. B115679.
Corporate and contact information for our entities can be found at
http://colt.net/uk/en/Colt-Group-of-Companies/index.htm.
Internet communications are not secure and Colt does not accept
responsibility for the accurate transmission of this message. Content
of this email or its attachments is not legally or contractually binding
unless expressly previously agreed in writing by Colt
list Martin Ward · Mon, 13 May 2013 16:15:37 +0000 · 
Thanks Larry, Carl and Mike, I couldn't find that repeat option anywhere, clearly I was looking in the wrong places!

|\/|

--
Martin Ward
Manager, Technical Services
Service Operations

DDI:+44 (0) 20 7863 5218 / Fax: +XX (X)XX XXXX XXXX /  www.colt.net<http://www.colt.net/>;
▸ signature
Colt Technology Services, Unit XX, Powergate Business Park, Volt Avenue, Park Royal, London, NW10 6PW, UK.

Help reduce your carbon footprint | Think before you print. Registered in England and Wales, registered number 02452736, VAT number GB 645 4205 50
▸ quoted from Larry Barber
From: Larry Barber [mailto:user-6ef9c2864140@xymon.invalid]
Sent: 13 May 2013 17:10
To: Ward, Martin
Cc: user-ce4a2c883f75@xymon.invalid; xymon at xymon.com
Subject: Re: [Xymon] Xymon alerting when it's been told not to

The default repeat interval (set in xymonserver.cfg) is 30 minutes.

Thanks,
Larry Barber

On Mon, May 13, 2013 at 10:10 AM, Ward, Martin <user-2d33a6eb6a05@xymon.invalid<mailto:user-2d33a6eb6a05@xymon.invalid>> wrote:
My apologies, I hit the "Send" button accidentally, a bit more info would have helped :-(

I ran the " xymoncmd xymond_alert --test" as you suggested and it is definitely matching on the right entry:

00019291 2013-05-13 15:52:53 *** Match with 'PAGE=SMARTS        HOST=%sm[0-9]* EXSERVICE=files,msgs,ports,cpu' ***

The lines in the logfile there are:

PAGE=SMARTS     HOST=%sm[0-9]* EXSERVICE=files,msgs,ports,cpu

        SCRIPT /opt/xymon/server/ext/html_mail.pl<http://html_mail.pl>; user-569f3875c7f6@xymon.invalid<mailto:user-569f3875c7f6@xymon.invalid> DURATION>1h COLOR=red RECOVERED STOP

AFAIK this means that the alert should only be sent once, however it is being sent every thirty minutes as the lines from the log file show:
Mon May 13 00:11:27 2013 sm9.lon.oss.colt.net.procs (212.74.77.85) user-569f3875c7f6@xymon.invalid<mailto:user-569f3875c7f6@xymon.invalid> 1368400263 300
Mon May 13 00:41:31 2013 sm9.lon.oss.colt.net.procs (212.74.77.85) user-569f3875c7f6@xymon.invalid<mailto:user-569f3875c7f6@xymon.invalid> 1368402066 300
Mon May 13 01:11:50 2013 sm9.lon.oss.colt.net.procs (212.74.77.85) user-569f3875c7f6@xymon.invalid<mailto:user-569f3875c7f6@xymon.invalid> 1368403886 300
Mon May 13 01:42:03 2013 sm9.lon.oss.colt.net.procs (212.74.77.85) user-569f3875c7f6@xymon.invalid<mailto:user-569f3875c7f6@xymon.invalid> 1368405699 300
Mon May 13 02:12:13 2013 sm9.lon.oss.colt.net.procs (212.74.77.85) user-569f3875c7f6@xymon.invalid<mailto:user-569f3875c7f6@xymon.invalid> 1368407508 300
Mon May 13 02:42:21 2013 sm9.lon.oss.colt.net.procs (212.74.77.85) user-569f3875c7f6@xymon.invalid<mailto:user-569f3875c7f6@xymon.invalid> 1368409316 300
▸ quoted from Larry Barber

I cannot fathom why it repeats at all so rather that look for something that isn't there, for now I have forced every alert to repeat every seven days but I would like to understand more about why this is working the way it is rather than the way it is supposed to (or I think it is supposed to!).

|\/|artin
--
Martin Ward
Manager, Technical Services
Service Operations


DDI:+44 (0) 20 7863 5218<tel:%2B44%20%280%29%2020%207863%205218> / Fax: +XX (X)XX XXXX XXXX<tel:%2B44%20%280%2920%207863%209999> /  www.colt.net<http://www.colt.net>;
▸ signature
Colt Technology Services, Unit XX, Powergate Business Park, Volt Avenue, Park Royal, London, NW10 6PW, UK.

Help reduce your carbon footprint | Think before you print. Registered in England and Wales, registered number 02452736, VAT number GB 645 4205 50


-----Original Message-----
▸ quoted from Larry Barber
From: Ward, Martin
Sent: 13 May 2013 16:02
To: 'user-ce4a2c883f75@xymon.invalid<mailto:user-ce4a2c883f75@xymon.invalid>'
Cc: xymon at xymon.com<mailto:xymon at xymon.com>
Subject: RE: [Xymon] Xymon alerting when it's been told not to

I cannot fathom why it repeats at all so rather that look for something that
isn't there I have forced every alert to repeat every seven days to see if that
resolves the issue!

|\/|
--
Martin Ward
Manager, Technical Services
Service Operations


DDI:+44 (0) 20 7863 5218<tel:%2B44%20%280%29%2020%207863%205218> / Fax: +XX (X)XX XXXX XXXX<tel:%2B44%20%280%2920%207863%209999> /  www.colt.net<http://www.colt.net>; Colt
▸ signature
Technology Services, Unit XX, Powergate Business Park, Volt Avenue, Park
Royal, London, NW10 6PW, UK.

Help reduce your carbon footprint | Think before you print. Registered in
England and Wales, registered number 02452736, VAT number GB 645 4205
50


-----Original Message-----
▸ quoted from Larry Barber
From: user-ce4a2c883f75@xymon.invalid<mailto:user-ce4a2c883f75@xymon.invalid> [mailto:user-ce4a2c883f75@xymon.invalid<mailto:user-ce4a2c883f75@xymon.invalid>]
Sent: 04 March 2013 11:27
To: Ward, Martin
Cc: xymon at xymon.com<mailto:xymon at xymon.com>
Subject: Re: [Xymon] Xymon alerting when it's been told not to

On Mon, 4 Mar 2013 09:19:25 +0000, "Ward, Martin"

<user-2d33a6eb6a05@xymon.invalid<mailto:user-2d33a6eb6a05@xymon.invalid>>
wrote:
Hi all,

I have the following in my alerts.cfg:
[snip]
Yet I am still getting CPU alerts from ivma2.lon.osspriv.colt.net<http://ivma2.lon.osspriv.colt.net>;
Try running
   xymoncmd xymond_alert --test ivma2.lon.osspriv.colt.net<http://ivma2.lon.osspriv.colt.net>; cpu and
▸ quoted from Larry Barber
look for lines like

00004226 2013-03-04 12:24:11 Matching host:service:dgroup:page
'cscxymweb3.csc.dk:disk:Xymon
servers:cscdk/mwsmonitor,cscdk/mwsmonitor'
against rule line 1260
00004226 2013-03-04 12:24:11 *** Match with 'MAIL $XYMONADM
$XYMONADMREPEAT' ***
00004226 2013-03-04 12:24:11 Mail alert with command '/usr/bin/mail -s
"Xymon [12345] cscxymweb3.csc.dk:disk CRITICAL (RED)"

user-fe4cb829cfaa@xymon.invalid<mailto:user-fe4cb829cfaa@xymon.invalid>'
▸ quoted from Larry Barber
00004226 2013-03-04 12:24:11 Matching host:service:dgroup:page
'cscxymweb3.csc.dk:disk:Xymon
servers:cscdk/mwsmonitor,cscdk/mwsmonitor'
against rule line 126

to see which rule triggers the alert.


Regards,
Henrik
[Colt Disclaimer]
This email is from an entity of the Colt group of companies.
Colt Group S.A., K2 Building, Forte 1, 2a rue Albert Borschette, L-1246 Luxembourg, R.C.S. B115679.
Corporate and contact information for our entities can be found at
http://colt.net/uk/en/Colt-Group-of-Companies/index.htm.
Internet communications are not secure and Colt does not accept
responsibility for the accurate transmission of this message. Content
of this email or its attachments is not legally or contractually binding
unless expressly previously agreed in writing by Colt