I didn't get a response last week so I'll explain the issue.
If you set a local test without a GROUP label it will cause all alerts that match to fire, regardless of whether they have a GROUP label or not.
To use the GROUP functionality properly every test that requires a different group will require a label for every entry for a host/service, depending on how you've configured your hobbit-alerts.cfg I would like the default to be to send a GROUP label with every set of tests and have the hobbit-alerts.cfg to have a default group for matching when no group is assigned.
Looking at the code it doesn't seem like it'd be too hard to add. Add a default in getalertgroups() for the client, maybe after the processing of the line in load_alertconfig() (line 653 from the 7/12 snapshot) for the server.
Let me know what you think.
Jason
From: Kruse, Jason K. Sent: Monday, July 10, 2006 9:51 AM To: 'hobbit at hswn.dk' Subject: Default groupings
Would it be possible to add a default group label for each line automatically in the client configuration so you don't have to qualify them on every entry? It doesn't really matter what label name is used. It would make it easier to configure the alerts since all rules would have a group associated and you won't get excessive notifications on items that don't have a group label.
Jason