First let me say that I am different - all of our alerts are done via external scripts that look like this: HOST=somehost SCRIPT /home/xymon/server/ext/pg/exalert_WINPURPLE purple_alert COLOR=purple DURATION>30 REPEAT=12h FORMAT=TEXT UNMATCHED SCRIPT /home/xymon/server/ext/pg/exalert_DBACRIT disk_alert DURATION>20 REPEAT=15 COLOR=red SERVICE=disk FORMAT=TEXT UNMATCHED SCRIPT /home/xymon/server/ext/pg/exwarn_DBACRIT disk_warn DURATION>30 REPEAT=8h COLOR=yellow SERVICE=disk FORMAT=TEXT UNMATCHED STOP
My issue is with the config report (this has always been a sore spot for me for a number of reasons) where the information provided could be better.
Ex. disk
purple_alert (S,U)
30m 1s
12h
purple
disk_alert (U)
20m 1s
15m
red
disk_warn (U)
30m 1s
8h
yellow
Normally, this would be ok, but in my case the alerts.cfg file has a large number of host, page, or other sections with scripts that also use "disk_alert" or "disk_warn" as the receivers. If the config report could include the line number from the alerts.cfg it would be most helpful when alert rules apply (unintentionally) multiple times.
My age old question(s), which I asked years ago and still don't know the answer:
Why do some rules show up in red?
What is the meaning of the (S,U) or (U) in the config report?
Thanks, John Upcoming PTO:
John Rothlisberger IT Strategy, Infrastructure & Security - Technology Growth Platform TGP for Business Process Outsourcing Accenture 312.693.3136 office
This message is for the designated recipient only and may contain privileged, proprietary, or otherwise confidential information. If you have received it in error, please notify the sender immediately and delete the original. Any other use of the e-mail by you is prohibited. Where allowed by local law, electronic communications with Accenture and its affiliates, including e-mail and instant messaging (including content), may be scanned by our systems for the purposes of information security and assessment of internal compliance with Accenture policy.
www.accenture.com