TIME parameter in alert rules

3 messages in this thread

list David Stuffle · Wed, 23 Mar 2005 09:32:33 -0500 ·

Henrik,
I'm in the process of converting all my Big Brother rules to Hobbit.  When I
reached the following BB rule, it turned in to a really long Hobbit rule
TIME specification.  The TIME parameter in the Hobbit rule is all one line.
There are about 12 Citrix servers.  I know I can put the TIME's in the
bb-host file as DOWNTIME, but it would still be that long of a line and I
would have to put in on each of the 12 Citrix servers.  Being able to
specify multiple days in one TIME parameter would greatly simplify this
rule, like you can in Big Brother.  For example: TIME=124-6:0615:0800  or
TIME=12456:0615:0800 
Would this TIME specification be do-able in Hobbit, maybe in a future
release?  Or, am I missing something that would simplify this rule?  It
really messes up the info column.     

BB Rule: 
hg-indy_citrix;;conn disk;;1 2 4-6;0000-0300 0615-0800 1800-2359;dlm-p at linus
daveh-p at linus dal1-p at linus:~60 jeb1-p at linus:~90 


Hobbit Rule:
HOST=$CITRIXSERVERS SERVICE=conn,disk
TIME=0:0500:0100,1:1800:0300,1:0615:0800,2:1800:0300,2:0615:0800,4:1800:0300
,4:0615:0800,5:1800:0300,5:0615:0800,6:1800:0300,6:0615:0800
        MAIL $dmcfatridge
        MAIL $dherrmann
        MAIL $dlohr DURATION>60
        MAIL $jbuser DURATION>90


Sorry for the disclaimer, I can't remove it.

Thanks,
David Stuffle
This email and any files transmitted with it are confidential and intended
solely for the use of the individual or entity to whom they are addressed.
If you have received this email in error please notify the system manager.
Please note that any views or opinions presented in this email are solely
those of the author and do not necessarily represent those of the company.
Finally, the recipient should check this email and any attachments for the
presence of viruses. The company accepts no liability for any damage caused
by any virus transmitted by this email.

list Asif Iqbal · Wed, 23 Mar 2005 11:31:41 -0500 ·

▸ quoted from David Stuffle

On Wed, Mar 23, 2005 at 09:32:33AM, Stuffle, David wrote:

BB Rule: 
hg-indy_citrix;;conn disk;;1 2 4-6;0000-0300 0615-0800 1800-2359;dlm-p at linus
daveh-p at linus dal1-p at linus:~60 jeb1-p at linus:~90 


Hobbit Rule:
HOST=$CITRIXSERVERS SERVICE=conn,disk
TIME=0:0500:0100,1:1800:0300,1:0615:0800,2:1800:0300,2:0615:0800,4:1800:0300
,4:0615:0800,5:1800:0300,5:0615:0800,6:1800:0300,6:0615:0800
        MAIL $dmcfatridge
        MAIL $dherrmann
        MAIL $dlohr DURATION>60
        MAIL $jbuser DURATION>90

This might work, but not sure

$time='TIME=......................."
HOST=....
TIME=$time
	MAIL $dmcfatridge $dherrmann
	MAIL $dlohr DURATION>60
	MAIL $jbuser DURATION>90

-- 
Asif Iqbal
PGP Key: 0xE62693C5 KeyServer: pgp.mit.edu
"..there are two kinds of people: those who work and those who take the credit...try
 to be in the first group;...less competition there."  - Indira Gandhi

list Henrik Størner · Mon, 28 Mar 2005 13:08:09 +0200 ·

▸ quoted from David Stuffle

On Wed, Mar 23, 2005 at 09:32:33AM -0500, Stuffle, David wrote:

Being able to specify multiple days in one TIME parameter would
greatly simplify this rule, like you can in Big Brother.  For
example: TIME=124-6:0615:0800 or TIME=12456:0615:0800

I've added this with the post-RC6-v2 patch (the one just released),
so you can use the "TIME=12456:0615:0800" format.


Regards,
Henrik

TIME parameter in alert rules 🔗 link

TIME parameter in alert rules