The goal here is for the secondary on-call person to have a restful nights sleep, assuming that the primary oncall person fixes the problem that caused the alert.
- The primary should be alerted immediately upon a problem
- The primary should get a RECOVERY page when the alert recovers
- The secondary should ONLY get an alert if something is red for 30+ minutes
- The secondary should get a RECOVERY page, ONLY if they were alerted in the first place (for a +30min event).
- If the primary ACKs an alert, the secondary will not be emailed unless the ACK expires and the service is still red.
If I use a ruleset of:
HOST=www.foo.com SERVICE=http MAIL primary_oncall at foo.com FORMAT=sms COLOR=red RECOVERED MAIL secondary_oncall at foo.com FORMAT=sms COLOR=red DURATION>30 RECOVERED
I do not believe this will work? Because the secondary will still get woke up by the RECOVERED message? Or is Hobbit smart enough that it only sends RECOVERED messages to only MAIL recipients that have previously received an alert?
On Mon, Oct 16, 2006 at 04:05:34PM -0700, Charles Jones wrote:
HOST=www.foo.com SERVICE=http MAIL primary_oncall at foo.com FORMAT=sms COLOR=red RECOVERED MAIL secondary_oncall at foo.com FORMAT=sms COLOR=red DURATION>30 RECOVERED
I do not believe this will work? Because the secondary will still get woke up by the RECOVERED message? Or is Hobbit smart enough that it only sends RECOVERED messages to only MAIL recipients that have previously received an alert?
Hobbit is smart enough to handle this. RECOVERED messages only go to those who have received an alert.
Regards, Henrik
This must be new? I had to turn off RECOVERED messages in 4.2.0 because they were sent even if a problem message had not yet been sent to someone, which some of my users found annoying during the wee hours...
GLH
-----Original Message----- From: Henrik Stoerner [mailto:henrik at hswn.dk] Sent: Tuesday, October 17, 2006 12:50 AM To: hobbit at hswn.dk Subject: Re: [hobbit] Proper alert escalations question
On Mon, Oct 16, 2006 at 04:05:34PM -0700, Charles Jones wrote:
HOST=www.foo.com SERVICE=http MAIL primary_oncall at foo.com FORMAT=sms COLOR=red RECOVERED MAIL secondary_oncall at foo.com FORMAT=sms COLOR=red DURATION>30 RECOVERED
I do not believe this will work? Because the secondary will still get woke up by the RECOVERED message? Or is Hobbit smart enough that it only sends RECOVERED messages to only MAIL recipients that have previously received an alert?
Hobbit is smart enough to handle this. RECOVERED messages only go to those who have received an alert.
Regards, Henrik
To unsubscribe from the hobbit list, send an e-mail to hobbit-unsubscribe at hswn.dk
participants (3)
-
charles.jones＠ciscolearning.org
-
greg.hubbard＠eds.com
-
henrik＠hswn.dk