I've had a long term problem with receiving duplicated recovery alerts. Only with a small number of tests. Most of them seem to have an underscore or dash in the test name. But not always. On the alerting side I'm not getting any duplication. Only on recovery.
Now using 4.3.18 on RHEL 6.6.
It's like the IGNORE line is not getting read during the recovery phase. In my example below, line 386 should be the only alert I receive. And it is during alerting.
Any advice would be appreciated.
Larry B.
Email subject lines for the duplicated recovery notices. cfid:386 should be the only one.
Xymon qa_ccsic_ccs_red_alert:http recovered [cfid:409] Xymon qa_ccsic_ccs_red_alert:http recovered [cfid:386] Xymon qa_ccsic_ccs_red_alert:http recovered [cfid:550]
xymon/server/etc/hosts.cfg
0.0.0.0 qa_ccsic_ccs_red_alert # noconn nosslcert https://<internal_URL>/cgi-bin/ccs_red_alert.pl
related alerts.cfg sections
should be handled in this section and stop
384 PAGE=%url/FNIBOCS HOST=%(qa|test|launch)_ccsic_ccs.*_(redalert|red_alert) EXSERVICE=sslcert 385 MAIL <various_internal_email_addresses> DURATION>2 REPEAT=60 RECOVERED 386 --> MAIL <internal_systems_group_address> DURATION>2 REPEAT=60 RECOVERED COLOR=yellow,red 387 IGNORE
Matches this rule but should have not gotten past the above rule 384
407 PAGE=%url/.* EXSERVICE=sslcert 408 MAIL <various_internal_email_addresses> DURATION>2 REPEAT=60 RECOVERED COLOR=yellow,red 409 --> MAIL <internal_systems_group_address> DURATION>2 REPEAT=60 RECOVERED COLOR=yellow,red 410 ... 411 ... 412 ... 413 ... 414 ... 415 ... 416 ... 417 ... 418 SCRIPT /data/bin/xymon-page.sh sys DURATION>2 FORMAT=SCRIPT REPEAT=60 RECOVERED COLOR=red,purple 419 IGNORE
Catch all rule
548 HOST=* EXSERVICE=%$NoNotifySvc EXHOST=%$Windows|$NoPage|$SLA_MF66|$SLA_MF66_ESX EXPAGE=%(dev|uatest) 549 ... 550 --> MAIL <internal_systems_group_address> REPEAT=1440 RECOVERED COLOR=yellow,red 551 SCRIPT /data/bin/xymon-page.sh sys FORMAT=SCRIPT REPEAT=60 RECOVERED COLOR=red 552 IGNORE
=========================================================
Larry D. Bonham
Financial Network Inc. 10401-F Baur Olivette, MO 63132
(314) 400-9412 voice (314) 997-5647 fax
CONFIDENTIALITY NOTICE: This electronic mail message is intended exclusively for recipient to which it is addressed. The contents of this message and any attachments may contain confidential and privileged information. Any unauthorized review, use, print, storage, copy, disclosure or distribution is strictly prohibited. If you have received this message in error, please advise the sender immediately by replying to the message's sender and delete all copies of this message and its attachments without disclosing the contents to anyone, or using the contents for any purpose.