It does not, but I did figure out the issue this morning. Somehow when I re-did all the rules I didn't even create an $sms-ems-oncall alias, so that is why it was trying to message SERVICE=conn. Pretty sure it is working as intended now. Thanks for the reply!
On Tue, Mar 23, 2021 at 10:02 AM Clovis Otteson <clovis at ipost.com> wrote:
---------- Forwarded message ---------- From: "Neal, Jonathan W" <wes.neal at verizon.com> To: "xymon >> xymon at xymon.com" <xymon at xymon.com> Cc: Bcc: Date: Mon, 22 Mar 2021 10:01:15 -0400 Subject: Weird email alerts issue Running Xymon 4.3.28, have been since release. I rebuilt my alerts.cfg file from scratch and I have a weird issue with alerts I can't figure out.
This seems to be happening on most if not all entries where I have a SERVICE=conn. The only thing I really changed on all my entries was a new mail alias for them, the actual rule itself is the same as before.
Entry looks like this:
HOST=$rcontrol MAIL $rcontrolmail REPEAT=2h DURATION>10 RECOVERED MAIL $rcontrolmail SERVICE=conn DURATION>10 REPEAT=2d MAIL $rcontrolpage SERVICE=conn DURATION>10 REPEAT=1h TIME=W:1300:2200 MAIL $sms-ems-oncall SERVICE=conn DURATION>10 REPEAT=2d
I get an alert, it emails the proper people tied to $rcontrolmail, but it also tries to email SERVICE=conn .
I can see them in the email log.
Mon Mar 22 13:47:09 2021 host02.procs (159.98.104.166) SERVICE=conn[1022] 1616420829 300
Mon Mar 22 12:59:03 2021 hostlan.disk (199.200.3.170) SERVICE=conn[725] 1616417943 100
Anyone got an idea how to troubleshoot this or what might be causing it?
Does the value of $rcontrol or $sms-ems-oncall end with a comma?
Xymon mailing list Xymon at xymon.com
https://urldefense.proofpoint.com/v2/url?u=http-3A__lists.xymon.com_mailman_...
--
Wes Neal Engineer IV Spec-Ntwk Eng&Ops EMS Support
O 8139871162 wes.neal at verizon.com