Xymon Mailing List Archive search

Emails not being sent

3 messages in this thread

list Martin Ward · Fri, 4 Jan 2013 09:34:35 +0000 · 
Hi all,

My Xymon server is set up so that I have a number of pages for the support teams to monitor (the usual Xymon pages) but I also have a subset of pages that have a cut-down list of servers and monitor items that I want the 24x7 team to look at and be alerted on.

I did this by simply duplicating the main pages, changing the IP address to 0.0.0.0 and removing any items I didn't want alerted on (group-execpt is my friend here!).

I also configured the alerts.cfg so that the support teams would get emails if things go wrong on their pages and the 24x7 team get alerts if things go wrong on theirs, obviously... one entry looks like this:


Alerts.cfg:

PAGE=SYS
     IGNORE HOST=%sys[12].lon.oss.colt.net  SERVICE=procs,ports # These are reported by the sys-jb process
     SCRIPT /opt/xymon/server/ext/html_mail.pl user-039af1d10d64@xymon.invalid  DURATION>10m repeat=1d COLOR=yellow,red
PAGE=IN-SYS
     IGNORE HOST=%sys[12].lon.oss.colt.net  SERVICE=procs,ports # These are reported by the sys-jb process
     SCRIPT /opt/xymon/server/ext/html_mail.pl user-b0278b13a8a9@xymon.invalid DURATION>1h repeat=8h COLOR=red RECOVERED

The theory here is that if the disk column goes yellow then only user-039af1d10d64@xymon.invalid  gets and email whereas is the disk column goes red then both user-039af1d10d64@xymon.invalid and user-b0278b13a8a9@xymon.invalid  get an email.

Sadly only user-039af1d10d64@xymon.invalid  gets an email in both cases. Support does always get an email so I know that the actual tests work, I just cannot get the system to send out the second email! I've gone through every log file and large amounts of debug output to no avail. The output of xymond_alert -dump-config looks fine:

  173   PAGE=SYS
        IGNORE REPEAT=30 HOST=%sys[12].lon.oss.colt.net SERVICE=procs,ports STOP
        SCRIPT /opt/xymon/server/ext/html_mail.pl user-039af1d10d64@xymon.invalid FORMAT=SCRIPT REPEAT=1440 COLOR=yellow,red DURATION>10

  176   PAGE=IN-SYS
        IGNORE REPEAT=30 HOST=%sys[12].lon.oss.colt.net SERVICE=procs,ports STOP
        SCRIPT /opt/xymon/server/ext/html_mail.pl user-b0278b13a8a9@xymon.invalid FORMAT=SCRIPT REPEAT=480 COLOR=red DURATION>60 RECOVERED

Suggestions are always appreciated,

|\/|
list Carl Inglis · Fri, 4 Jan 2013 10:35:03 +0000 · 
I believe the "IGNORE" is the problem - IGNORE has an explicit "STOP" (which is why your -dump-config shows a STOP at the end of each line).

I'm not sure what you're trying to achieve with your IGNORE at the start of the line?

"IGNORE This is used to define a recipient that does NOT trigger any alerts, and also terminates the search for more recipients. It is useful if you have a rule that handles most alerts, but there is just that one particular server where you dont want cpu alerts on Monday morning. Note that the IGNORE recipient always has the STOP flag defined, so when the IGNORE recipient is matched, no more recipients will be considered. So the location of this recipient in your set of recipients is important." - from man page for alerts.cfg

Regards,


Carl Inglis
Systems Administrator

Rakon UK Limited
Dowsett House, Sadler Road, Lincoln LN6 3RS, United Kingdom
Tel: +XX (X)XXXX XXXXXX | Fax:+XX (X) XXXX XXXXXX | Mob: +44 (0) 7786 552915
user-96685bdc864b@xymon.invalid | www.rakon.com

[The Queens Awards for Enterprise 2012]

[Rakon Logo]

We are an organisation committed to working towards accreditation for the Investors in People Standard.

This message together with any attachments contains confidential information and may be
subject to privilege. If you are not the intended recipient you may not distribute it in any
way, you must notify the sender immediately and delete any copies of the message along
with its attachments.

Rakon UK Ltd is a limited company registered in England and Wales.
Registered Office: Dowsett House, Sadler Road, Lincoln LN6 3RS
Company Registration Number: 5128090.

Please be aware that Rakon UK Limited may monitor email traffic data
including the date, time, subject line, sender and recipients for the
purposes of security and usage monitoring. Automated monitoring
systems may also be applied to ascertain whether incoming/outgoing
emails are likely to contain viruses, other destructive devices or
inappropriate content.
▸ quoted from Martin Ward
From: xymon-bounces at xymon.com [mailto:xymon-bounces at xymon.com] On Behalf Of Ward, Martin
Sent: 04 January 2013 09:35
To: xymon at xymon.com
Subject: [Xymon] Emails not being sent

Hi all,

My Xymon server is set up so that I have a number of pages for the support teams to monitor (the usual Xymon pages) but I also have a subset of pages that have a cut-down list of servers and monitor items that I want the 24x7 team to look at and be alerted on.

I did this by simply duplicating the main pages, changing the IP address to 0.0.0.0 and removing any items I didn't want alerted on (group-execpt is my friend here!).

I also configured the alerts.cfg so that the support teams would get emails if things go wrong on their pages and the 24x7 team get alerts if things go wrong on theirs, obviously... one entry looks like this:


Alerts.cfg:

PAGE=SYS
     IGNORE HOST=%sys[12].lon.oss.colt.net  SERVICE=procs,ports # These are reported by the sys-jb process

     SCRIPT /opt/xymon/server/ext/html_mail.pl user-039af1d10d64@xymon.invalid<mailto:user-039af1d10d64@xymon.invalid>  DURATION>10m repeat=1d COLOR=yellow,red
PAGE=IN-SYS
     IGNORE HOST=%sys[12].lon.oss.colt.net  SERVICE=procs,ports # These are reported by the sys-jb process
     SCRIPT /opt/xymon/server/ext/html_mail.pl user-b0278b13a8a9@xymon.invalid<mailto:user-b0278b13a8a9@xymon.invalid> DURATION>1h repeat=8h COLOR=red RECOVERED

The theory here is that if the disk column goes yellow then only user-039af1d10d64@xymon.invalid<mailto:user-039af1d10d64@xymon.invalid>  gets and email whereas is the disk column goes red then both user-039af1d10d64@xymon.invalid<mailto:user-039af1d10d64@xymon.invalid> and user-b0278b13a8a9@xymon.invalid<mailto:user-b0278b13a8a9@xymon.invalid>  get an email.

Sadly only user-039af1d10d64@xymon.invalid<mailto:user-039af1d10d64@xymon.invalid>  gets an email in both cases. Support does always get an email so I know that the actual tests work, I just cannot get the system to send out the second email! I've gone through every log file and large amounts of debug output to no avail. The output of xymond_alert -dump-config looks fine:

  173   PAGE=SYS
        IGNORE REPEAT=30 HOST=%sys[12].lon.oss.colt.net SERVICE=procs,ports STOP
        SCRIPT /opt/xymon/server/ext/html_mail.pl user-039af1d10d64@xymon.invalid<mailto:user-039af1d10d64@xymon.invalid> FORMAT=SCRIPT REPEAT=1440 COLOR=yellow,red DURATION>10

  176   PAGE=IN-SYS
        IGNORE REPEAT=30 HOST=%sys[12].lon.oss.colt.net SERVICE=procs,ports STOP
        SCRIPT /opt/xymon/server/ext/html_mail.pl user-b0278b13a8a9@xymon.invalid<mailto:user-b0278b13a8a9@xymon.invalid> FORMAT=SCRIPT REPEAT=480 COLOR=red DURATION>60 RECOVERED

Suggestions are always appreciated,

|\/|
list Martin Ward · Fri, 4 Jan 2013 17:17:45 +0000 · 
Thanks for the response Carl.


Ø  I believe the "IGNORE" is the problem - IGNORE has an explicit "STOP" (which is why your -dump-config shows a STOP at the end of each line).

The IGNORE lines are there to stop any alerts on the procs and ports columns. These IGNORE entries are fine because user-c3047a916604@xymon.invalid<mailto:user-c3047a916604@xymon.invalid> still gets their emails, only user-293485ff148b@xymon.invalid<mailto:user-293485ff148b@xymon.invalid> doesn't.

|\/|artin
▸ quoted from Carl Inglis


From: xymon-bounces at xymon.com<mailto:xymon-bounces at xymon.com> [mailto:xymon-bounces at xymon.com] On Behalf Of Ward, Martin
Sent: 04 January 2013 09:35
To: xymon at xymon.com<mailto:xymon at xymon.com>
Subject: [Xymon] Emails not being sent

Hi all,

My Xymon server is set up so that I have a number of pages for the support teams to monitor (the usual Xymon pages) but I also have a subset of pages that have a cut-down list of servers and monitor items that I want the 24x7 team to look at and be alerted on.

I did this by simply duplicating the main pages, changing the IP address to 0.0.0.0 and removing any items I didn't want alerted on (group-execpt is my friend here!).

I also configured the alerts.cfg so that the support teams would get emails if things go wrong on their pages and the 24x7 team get alerts if things go wrong on theirs, obviously... one entry looks like this:


Alerts.cfg:

PAGE=SYS
     IGNORE HOST=%sys[12].lon.oss.colt.net  SERVICE=procs,ports # These are reported by the sys-jb process
     SCRIPT /opt/xymon/server/ext/html_mail.pl user-039af1d10d64@xymon.invalid<mailto:user-039af1d10d64@xymon.invalid>  DURATION>10m repeat=1d COLOR=yellow,red
PAGE=IN-SYS
     IGNORE HOST=%sys[12].lon.oss.colt.net  SERVICE=procs,ports # These are reported by the sys-jb process
     SCRIPT /opt/xymon/server/ext/html_mail.pl user-b0278b13a8a9@xymon.invalid<mailto:user-b0278b13a8a9@xymon.invalid> DURATION>1h repeat=8h COLOR=red RECOVERED

The theory here is that if the disk column goes yellow then only user-039af1d10d64@xymon.invalid<mailto:user-039af1d10d64@xymon.invalid>  gets and email whereas is the disk column goes red then both user-039af1d10d64@xymon.invalid<mailto:user-039af1d10d64@xymon.invalid> and user-b0278b13a8a9@xymon.invalid<mailto:user-b0278b13a8a9@xymon.invalid>  get an email.

Sadly only user-039af1d10d64@xymon.invalid<mailto:user-039af1d10d64@xymon.invalid>  gets an email in both cases. Support does always get an email so I know that the actual tests work, I just cannot get the system to send out the second email! I've gone through every log file and large amounts of debug output to no avail. The output of xymond_alert -dump-config looks fine:

  173   PAGE=SYS
        IGNORE REPEAT=30 HOST=%sys[12].lon.oss.colt.net SERVICE=procs,ports STOP
        SCRIPT /opt/xymon/server/ext/html_mail.pl user-039af1d10d64@xymon.invalid<mailto:user-039af1d10d64@xymon.invalid> FORMAT=SCRIPT REPEAT=1440 COLOR=yellow,red DURATION>10

  176   PAGE=IN-SYS
        IGNORE REPEAT=30 HOST=%sys[12].lon.oss.colt.net SERVICE=procs,ports STOP
        SCRIPT /opt/xymon/server/ext/html_mail.pl user-b0278b13a8a9@xymon.invalid<mailto:user-b0278b13a8a9@xymon.invalid> FORMAT=SCRIPT REPEAT=480 COLOR=red DURATION>60 RECOVERED

Suggestions are always appreciated,

|\/|



[Colt Disclaimer]
This email is from an entity of the Colt group of companies.
Colt Group S.A., K2 Building, Forte 1, 2a rue Albert Borschette, L-1246 Luxembourg, R.C.S. B115679.
Corporate and contact information for our entities can be found at
http://colt.net/uk/en/Colt-Group-of-Companies/index.htm.
Internet communications are not secure and Colt does not accept
responsibility for the accurate transmission of this message. Content
of this email or its attachments is not legally or contractually binding
unless expressly previously agreed in writing by Colt