sending particular alert message to particular users
Hello, This is how my hobbit-client.cfg and hobbit-alerts.cfg look and I would like to send the first LOG to some users and the second LOG to different users. How do I send an alert based on a warning expression?
Hobbit-client.cfg HOST=myhost.org LOG /var/log/messages %failure*|%failed*|%error*|%Warning* COLOR=red LOG /var/log/www_server_4881.log %exceeded* COLOR=red
Hobbit-alerts.cfg HOST=myhost.org MAIL user at something.org SERVICE=msgs REPEAT=30m COLOR=red RECOVERED
Any help, suggestion will be appreciated
Thanks, Camelia Anghel canghel at cjh.org
I don't think you can do this via the standard alerts function (because all log messages are grouped into the one "msg" test). However, you might be able to do what you want if you call a script and have the script examine the message content and then send the email to the proper user.
GLH
On 9/10/09, Camelia Anghel <canghel at cjh.org> wrote:
Hello,
This is how my hobbit-client.cfg and hobbit-alerts.cfg look and I would like to send the first LOG to some users and the second LOG to different users.
How do I send an alert based on a warning expression?
Hobbit-client.cfg
HOST=myhost.org
LOG /var/log/messages %failure*|%failed*|%error*|%Warning* COLOR=red
LOG /var/log/www_server_4881.log %exceeded* COLOR=red
Hobbit-alerts.cfg
HOST=myhost.org
MAIL user at something.org SERVICE=msgs REPEAT=30m COLOR=redRECOVERED
Any help, suggestion will be appreciated
Thanks,
Camelia Anghel
canghel at cjh.org
-- Disclaimer: 1) all opinions are my own, 2) I may be completely wrong, 3) my advice is worth at least as much as what you are paying for it, or your money cheerfully refunded.
Camelia Anghel wrote:
Hello,
This is how my hobbit-client.cfg and hobbit-alerts.cfg look and I would like to send the first LOG to some users and the second LOG to different users.
How do I send an alert based on a warning expression?
Hobbit-client.cfg
HOST=myhost.org
LOG /var/log/messages %failure*|%failed*|%error*|%Warning* COLOR=red
LOG /var/log/www_server_4881.log %exceeded* COLOR=red
Hobbit-alerts.cfg
HOST=myhost.org
MAIL user at something.org SERVICE=msgs REPEAT=30m COLOR=redRECOVERED
Any help, suggestion will be appreciated
Thanks,
Camelia Anghel
canghel at cjh.org
You might experiment with the GROUP= directive, see documentation for it in the hobbit-clients.cfg and hobbit-alerts.cfg man pages.
Maybe something like:
Hobbit-client.cfg
HOST=myhost.org
LOG /var/log/messages %failure*|%failed*|%error*|%Warning*COLOR=red GROUP=mypeople
LOG /var/log/www_server_4881.log %exceeded* COLOR=red GROUP=yourpeopleHobbit-alerts.cfg
HOST=myhost.org
MAIL user at something.org GROUP=mypeople SERVICE=msgs REPEAT=30mCOLOR=red RECOVERED MAIL user at something.org GROUP=yourpeople SERVICE=msgs REPEAT=30m COLOR=red RECOVERED
Hope this helps. -Alan
participants (3)
-
asparks＠doublesparks.net
-
canghel＠cjh.org
-
glh.forums＠gmail.com