Hobbit version 4.2.3
hobbit-alerts.cfg entry: ..CFG_WHEN=60...# catch all disk HOST=* SERVICE=disk TIME=w:1830:2359,$CFG_WHEN:0800:2359 COLOR=red MAIL <email address redacted> DURATION>60 REPEAT=15 MAIL <pager email redacted> DURATION>60 REPEAT=15 FORMAT=SMS
testing this with ./hobbitd_alert --test wp-vlauditlog disk --time=1423170000
the epoch time was last night at 21:00 which is within the timeframe for the alerts to happen ie w:1830:2359 00002124 2015-02-05 21:00:00 Matching host:service:page 'wp-vlauditlog:disk:iss' against rule line 242 00002124 2015-02-05 21:00:00 *** Match with 'HOST=* SERVICE=disk TIME=w:1830:2359,$CFG_WHEN:0800:2359 COLOR=red' *** 00002124 2015-02-05 21:00:00 Matching host:service:page 'wp-vlauditlog:disk:iss' against rule line 243 00002124 2015-02-05 21:00:00 Failed 'MAIL <email address redacted> DURATION>60 REPEAT=15' (min. duration 0<3600) 00002124 2015-02-05 21:00:00 Matching host:service:page 'wp-vlauditlog:disk:iss' against rule line 244 00002124 2015-02-05 21:00:00 Failed 'MAIL <paging email redacted> DURATION>60 REPEAT=15 FORMAT=SMS' (min. duration 0<3600)
I can see that indeed there is a match with the rule HOST=* SERVICE=disk TIME=w:1830:2359,$CFG_WHEN:0800:2359 COLOR=red
but then there seems to be some error or mismatch with the two MAIL lines following it. Is anyone able to point out what I am doing wrong here? cheers ian