Camelia Anghel wrote:
Hello,
This is how my hobbit-client.cfg and hobbit-alerts.cfg look and I would like to send the first LOG to some users and the second LOG to different users.
How do I send an alert based on a warning expression?
Hobbit-client.cfg
HOST=myhost.org
LOG /var/log/messages %failure*|%failed*|%error*|%Warning* COLOR=red
LOG /var/log/www_server_4881.log %exceeded* COLOR=red
Hobbit-alerts.cfg
HOST=myhost.org
MAIL user at something.org SERVICE=msgs REPEAT=30m COLOR=redRECOVERED
Any help, suggestion will be appreciated
Thanks,
Camelia Anghel
canghel at cjh.org
You might experiment with the GROUP= directive, see documentation for it in the hobbit-clients.cfg and hobbit-alerts.cfg man pages.
Maybe something like:
Hobbit-client.cfg
HOST=myhost.org
LOG /var/log/messages %failure*|%failed*|%error*|%Warning*COLOR=red GROUP=mypeople
LOG /var/log/www_server_4881.log %exceeded* COLOR=red GROUP=yourpeopleHobbit-alerts.cfg
HOST=myhost.org
MAIL user at something.org GROUP=mypeople SERVICE=msgs REPEAT=30mCOLOR=red RECOVERED MAIL user at something.org GROUP=yourpeople SERVICE=msgs REPEAT=30m COLOR=red RECOVERED
Hope this helps. -Alan