scott.brehm at l-3com.com wrote:
I've been getting double alert mails for one of my servers, and no alerts for others. I'm wondering if the problem is related to my using the UNMATCHED rule. It's not listed on the man page for hobbit-alerts.cfg so I probably copied it from my earlier Big Brother config without thinking. Is there an UNMATCHED equivalent in Hobbit?
Here's the current rules. I'm getting double e-mails for all tests on atscm-setnas2.set.local. I'm also getting no alerts for the http test on two servers that don't match the rules here. I didn't realize that until I followed the info link for them and saw No Alerts Defined in the alerting table.
HOST=* SERVICE=conn MAIL scott.brehm at x.com COLOR=red
HOST=%atscm MAIL scott.brehm at x.com EXSERVICE=conn COLOR=red
HOST=%atscs MAIL scott.brehm at x.com EXSERVICE=conn DURATION>10 COLOR=red MAIL phil.lane at x.com DURATION>10 COLOR=red
HOST=%atssl MAIL scott.brehm at x.com EXSERVICE=conn DURATION>10 COLOR=red MAIL stephanie.greer at x.com DURATION>10 COLOR=red
HOST=%atswv MAIL scott.brehm at x.com EXSERVICE=conn DURATION>10 COLOR=red MAIL stephanie.greer at x.com DURATION>10 COLOR=red
HOST=atscmmail1.ats.ad.local SERVICE=pop3 MAIL phil.lane at x.com COLOR=red
HOST=setnas1.set.local MAIL scott.brehm at x.com EXSERVICE=conn COLOR=red MAIL charles.negus at x.com COLOR=red
HOST=atscm-setnas2.set.local MAIL charles.negus at x.com COLOR=red
UNMATCHED MAIL scott.brehm at x.com COLOR=red
Scott Brehm
IT Manager L-3 Communications - Applied Technologies 3394 Carmel Mountain Rd, San Diego CA, 92121 858-720-4035
To unsubscribe from the hobbit list, send an e-mail to hobbit-unsubscribe at hswn.dk
As catch all rule, we have this at the end of our hobbit-alerts.cfg
HOST=* root at localhost 24h RECOVERED UNMATCHED
Dominique UNIL - University of Lausanne