On Wed, Apr 06, 2005 at 01:49:45PM +0200, Etienne Roulland wrote:
i'm trying to set rules with multiples conditions
like
"COLOR=red "and" SERVICE=* "and" DURATION>6m REPEAT=15m RECOVER"
COLOR=red DURATION>6m RECOVERED MAIL someone at somewhere.com REPEAT=15m
will do what you want. The rule matching requires that all criteria are met before a rule matches, so there's an implicit "and" between each criteria.
"RECOVERED" is actually just a flag - if an alert message was sent out, then the RECOVERED flag means that a recovery message will also be sent.
Events are matching if COLOR is RED "OR" duration> 6m..
Don't know if i'm clear in my question...
It would probably help if you run
~hobbit/server/bin/hobbitd_alert --test HOSTNAME SERVICE
for the host/service that is causing you headaches, and let us see what the output is.
Regards, Henrik