Proper alert escalations question 🔗 link

The goal here is for the secondary on-call person to have a restful nights sleep, assuming that the primary oncall person fixes the problem that caused the alert.

* The primary should be alerted immediately upon a problem
* The primary should get a RECOVERY page when the alert recovers
* The secondary should ONLY get an alert if something is red for 30+ minutes
* The secondary should get a RECOVERY page, ONLY if they were alerted in the first place (for a +30min event).
* If the primary ACKs an alert, the secondary will not be emailed unless the ACK expires and the service is still red.

If I use a ruleset of:

 HOST=www.foo.com SERVICE=http
      MAIL user-f6ebe6f67d6e@xymon.invalid  FORMAT=sms COLOR=red RECOVERED
      MAIL user-2c74be58f1f8@xymon.invalid FORMAT=sms COLOR=red DURATION>30 RECOVERED

I do not believe this will work? Because the secondary will still get woke up by the RECOVERED message? Or is Hobbit smart enough that it only sends RECOVERED messages to only MAIL recipients that have previously received an alert?

On Mon, Oct 16, 2006 at 04:05:34PM -0700, Charles Jones wrote:

Hobbit is smart enough to handle this. RECOVERED messages only go to
those who have received an alert.


Regards,
Henrik

This must be new?  I had to turn off RECOVERED messages in 4.2.0 because
they were sent even if a problem message had not yet been sent to
someone, which some of my users found annoying during the wee hours... 
GLH

-----Original Message-----
From: Henrik Stoerner [mailto:user-ce4a2c883f75@xymon.invalid] Sent: Tuesday, October 17, 2006 12:50 AM
To: user-ae9b8668bcde@xymon.invalid
Subject: Re: [hobbit] Proper alert escalations question

On Mon, Oct 16, 2006 at 04:05:34PM -0700, Charles Jones wrote:

Hobbit is smart enough to handle this. RECOVERED messages only go to
those who have received an alert.


Regards,
Henrik