Hi all,
I am trying to set up a rule for ignoring all alerts for a certain service during a given time:
I've tried:
IGNORE HOST=* SERVICE=bckp TIME=*:2000:2359,*:0000:0700
But get following error:
00012136 2006-03-23 16:32:35 Failed 'IGNORE HOST=* SERVICE=bckp TIME=*:2000:2359,*:0000:0700' (time criteria)
Suprisingly, when I set:
IGNORE HOST=* SERVICE=bckp TIME=*:1500:1800
It works: 00025985 2006-03-23 16:39:01 *** Match with 'IGNORE HOST=* SERVICE=bckp TIME=*:1500:1800' ***
Any idea?
Dominique UNIL - University of Lausanne
You might try to use 2 separate rules:
IGNORE HOST=* SERVICE=bckp TIME=*:0000:0700 IGNORE HOST=* SERVICE=bckp TIME=*:2000:2359
Thanks, Larry Barber
On 3/23/06, Dominique Frise <Dominique.Frise at unil.ch> wrote:
Hi all,
I am trying to set up a rule for ignoring all alerts for a certain service during a given time:
I've tried:
IGNORE HOST=* SERVICE=bckp TIME=*:2000:2359,*:0000:0700
But get following error:
00012136 2006-03-23 16:32:35 Failed 'IGNORE HOST=* SERVICE=bckp TIME=*:2000:2359,*:0000:0700' (time criteria)
Suprisingly, when I set:
IGNORE HOST=* SERVICE=bckp TIME=*:1500:1800
It works: 00025985 2006-03-23 16:39:01 *** Match with 'IGNORE HOST=* SERVICE=bckp TIME=*:1500:1800' ***
Any idea?
Dominique UNIL - University of Lausanne
To unsubscribe from the hobbit list, send an e-mail to hobbit-unsubscribe at hswn.dk
Larry Barber wrote:
You might try to use 2 separate rules:
IGNORE HOST=* SERVICE=bckp TIME=*:0000:0700 IGNORE HOST=* SERVICE=bckp TIME=*:2000:2359
Thanks, Larry Barber
On 3/23/06, *Dominique Frise* <Dominique.Frise at unil.ch <mailto:Dominique.Frise at unil.ch>> wrote:
Hi all, I am trying to set up a rule for ignoring all alerts for a certain service during a given time: I've tried: IGNORE HOST=* SERVICE=bckp TIME=*:2000:2359,*:0000:0700 But get following error: 00012136 2006-03-23 16:32:35 Failed 'IGNORE HOST=* SERVICE=bckp TIME=*:2000:2359,*:0000:0700' (time criteria) Suprisingly, when I set: IGNORE HOST=* SERVICE=bckp TIME=*:1500:1800 It works: 00025985 2006-03-23 16:39:01 *** Match with 'IGNORE HOST=* SERVICE=bckp TIME=*:1500:1800' *** Any idea? Dominique UNIL - University of Lausanne To unsubscribe from the hobbit list, send an e-mail to hobbit-unsubscribe at hswn.dk <mailto:hobbit-unsubscribe at hswn.dk>
In the alerts file the time in a round about way goes backwards. I dont have it implemented now but im fauly sure it was something like this
host=xyz.com time=*:0820:0800 which means that it alerts from 820 around till 800 again which means it skips 20 mins after 8am. Not sure if my memory is 100% correct but it does sound familiar.
I didnt know there was an ignore bit that like but if my guess is correct then just switch your times around.
Allan
participants (3)
-
allan@zandahar.net
-
Dominique.Frise@unil.ch
-
lebarber@gmail.com