Emails not being sent
Hi all,
My Xymon server is set up so that I have a number of pages for the support teams to monitor (the usual Xymon pages) but I also have a subset of pages that have a cut-down list of servers and monitor items that I want the 24x7 team to look at and be alerted on.
I did this by simply duplicating the main pages, changing the IP address to 0.0.0.0 and removing any items I didn't want alerted on (group-execpt is my friend here!).
I also configured the alerts.cfg so that the support teams would get emails if things go wrong on their pages and the 24x7 team get alerts if things go wrong on theirs, obviously... one entry looks like this:
Alerts.cfg:
PAGE=SYS IGNORE HOST=%sys[12].lon.oss.colt.net SERVICE=procs,ports # These are reported by the sys-jb process SCRIPT /opt/xymon/server/ext/html_mail.pl support at colt.flibble.net DURATION>10m repeat=1d COLOR=yellow,red PAGE=IN-SYS IGNORE HOST=%sys[12].lon.oss.colt.net SERVICE=procs,ports # These are reported by the sys-jb process SCRIPT /opt/xymon/server/ext/html_mail.pl 24x7 at colt.flibble.net DURATION>1h repeat=8h COLOR=red RECOVERED
The theory here is that if the disk column goes yellow then only support at colt.flibble.net gets and email whereas is the disk column goes red then both support at colt.flibble.net and 24x7 at colt.flibble.net get an email.
Sadly only support at colt.flibble.net gets an email in both cases. Support does always get an email so I know that the actual tests work, I just cannot get the system to send out the second email! I've gone through every log file and large amounts of debug output to no avail. The output of xymond_alert -dump-config looks fine:
173 PAGE=SYS IGNORE REPEAT=30 HOST=%sys[12].lon.oss.colt.net SERVICE=procs,ports STOP SCRIPT /opt/xymon/server/ext/html_mail.pl support at colt.flibble.net FORMAT=SCRIPT REPEAT=1440 COLOR=yellow,red DURATION>10
176 PAGE=IN-SYS IGNORE REPEAT=30 HOST=%sys[12].lon.oss.colt.net SERVICE=procs,ports STOP SCRIPT /opt/xymon/server/ext/html_mail.pl 24x7 at colt.flibble.net FORMAT=SCRIPT REPEAT=480 COLOR=red DURATION>60 RECOVERED
Suggestions are always appreciated,
|\/|
I believe the "IGNORE" is the problem - IGNORE has an explicit "STOP" (which is why your -dump-config shows a STOP at the end of each line).
I'm not sure what you're trying to achieve with your IGNORE at the start of the line?
"IGNORE This is used to define a recipient that does NOT trigger any alerts, and also terminates the search for more recipients. It is useful if you have a rule that handles most alerts, but there is just that one particular server where you dont want cpu alerts on Monday morning. Note that the IGNORE recipient always has the STOP flag defined, so when the IGNORE recipient is matched, no more recipients will be considered. So the location of this recipient in your set of recipients is important." - from man page for alerts.cfg
Regards,
Carl Inglis Systems Administrator
Rakon UK Limited Dowsett House, Sadler Road, Lincoln LN6 3RS, United Kingdom Tel: +44 (0)1522 812630 | Fax:+44 (0) 1522 812664 | Mob: +44 (0) 7786 552915 Carl.Inglis at rakon.com | www.rakon.com
[The Queens Awards for Enterprise 2012]
[Rakon Logo]
We are an organisation committed to working towards accreditation for the Investors in People Standard.
This message together with any attachments contains confidential information and may be subject to privilege. If you are not the intended recipient you may not distribute it in any way, you must notify the sender immediately and delete any copies of the message along with its attachments.
Rakon UK Ltd is a limited company registered in England and Wales. Registered Office: Dowsett House, Sadler Road, Lincoln LN6 3RS Company Registration Number: 5128090.
Please be aware that Rakon UK Limited may monitor email traffic data including the date, time, subject line, sender and recipients for the purposes of security and usage monitoring. Automated monitoring systems may also be applied to ascertain whether incoming/outgoing emails are likely to contain viruses, other destructive devices or inappropriate content. From: xymon-bounces at xymon.com [mailto:xymon-bounces at xymon.com] On Behalf Of Ward, Martin Sent: 04 January 2013 09:35 To: xymon at xymon.com Subject: [Xymon] Emails not being sent
Hi all,
My Xymon server is set up so that I have a number of pages for the support teams to monitor (the usual Xymon pages) but I also have a subset of pages that have a cut-down list of servers and monitor items that I want the 24x7 team to look at and be alerted on.
I did this by simply duplicating the main pages, changing the IP address to 0.0.0.0 and removing any items I didn't want alerted on (group-execpt is my friend here!).
I also configured the alerts.cfg so that the support teams would get emails if things go wrong on their pages and the 24x7 team get alerts if things go wrong on theirs, obviously... one entry looks like this:
Alerts.cfg:
PAGE=SYS IGNORE HOST=%sys[12].lon.oss.colt.net SERVICE=procs,ports # These are reported by the sys-jb process SCRIPT /opt/xymon/server/ext/html_mail.pl support at colt.flibble.net<mailto:support at colt.flibble.net> DURATION>10m repeat=1d COLOR=yellow,red PAGE=IN-SYS IGNORE HOST=%sys[12].lon.oss.colt.net SERVICE=procs,ports # These are reported by the sys-jb process SCRIPT /opt/xymon/server/ext/html_mail.pl 24x7 at colt.flibble.net<mailto:24x7 at colt.flibble.net> DURATION>1h repeat=8h COLOR=red RECOVERED
The theory here is that if the disk column goes yellow then only support at colt.flibble.net<mailto:support at colt.flibble.net> gets and email whereas is the disk column goes red then both support at colt.flibble.net<mailto:support at colt.flibble.net> and 24x7 at colt.flibble.net<mailto:24x7 at colt.flibble.net> get an email.
Sadly only support at colt.flibble.net<mailto:support at colt.flibble.net> gets an email in both cases. Support does always get an email so I know that the actual tests work, I just cannot get the system to send out the second email! I've gone through every log file and large amounts of debug output to no avail. The output of xymond_alert -dump-config looks fine:
173 PAGE=SYS IGNORE REPEAT=30 HOST=%sys[12].lon.oss.colt.net SERVICE=procs,ports STOP SCRIPT /opt/xymon/server/ext/html_mail.pl support at colt.flibble.net<mailto:support at colt.flibble.net> FORMAT=SCRIPT REPEAT=1440 COLOR=yellow,red DURATION>10
176 PAGE=IN-SYS IGNORE REPEAT=30 HOST=%sys[12].lon.oss.colt.net SERVICE=procs,ports STOP SCRIPT /opt/xymon/server/ext/html_mail.pl 24x7 at colt.flibble.net<mailto:24x7 at colt.flibble.net> FORMAT=SCRIPT REPEAT=480 COLOR=red DURATION>60 RECOVERED
Suggestions are always appreciated,
|\/|
Thanks for the response Carl.
Ø I believe the "IGNORE" is the problem - IGNORE has an explicit "STOP" (which is why your -dump-config shows a STOP at the end of each line).
The IGNORE lines are there to stop any alerts on the procs and ports columns. These IGNORE entries are fine because support at colt.fibble.net<mailto:support at colt.fibble.net> still gets their emails, only 24x7 at colt.fibble.net<mailto:24x7 at colt.fibble.net> doesn't.
|\/|artin
From: xymon-bounces at xymon.com<mailto:xymon-bounces at xymon.com> [mailto:xymon-bounces at xymon.com] On Behalf Of Ward, Martin Sent: 04 January 2013 09:35 To: xymon at xymon.com<mailto:xymon at xymon.com> Subject: [Xymon] Emails not being sent
Hi all,
My Xymon server is set up so that I have a number of pages for the support teams to monitor (the usual Xymon pages) but I also have a subset of pages that have a cut-down list of servers and monitor items that I want the 24x7 team to look at and be alerted on.
I did this by simply duplicating the main pages, changing the IP address to 0.0.0.0 and removing any items I didn't want alerted on (group-execpt is my friend here!).
I also configured the alerts.cfg so that the support teams would get emails if things go wrong on their pages and the 24x7 team get alerts if things go wrong on theirs, obviously... one entry looks like this:
Alerts.cfg:
PAGE=SYS IGNORE HOST=%sys[12].lon.oss.colt.net SERVICE=procs,ports # These are reported by the sys-jb process SCRIPT /opt/xymon/server/ext/html_mail.pl support at colt.flibble.net<mailto:support at colt.flibble.net> DURATION>10m repeat=1d COLOR=yellow,red PAGE=IN-SYS IGNORE HOST=%sys[12].lon.oss.colt.net SERVICE=procs,ports # These are reported by the sys-jb process SCRIPT /opt/xymon/server/ext/html_mail.pl 24x7 at colt.flibble.net<mailto:24x7 at colt.flibble.net> DURATION>1h repeat=8h COLOR=red RECOVERED
The theory here is that if the disk column goes yellow then only support at colt.flibble.net<mailto:support at colt.flibble.net> gets and email whereas is the disk column goes red then both support at colt.flibble.net<mailto:support at colt.flibble.net> and 24x7 at colt.flibble.net<mailto:24x7 at colt.flibble.net> get an email.
Sadly only support at colt.flibble.net<mailto:support at colt.flibble.net> gets an email in both cases. Support does always get an email so I know that the actual tests work, I just cannot get the system to send out the second email! I've gone through every log file and large amounts of debug output to no avail. The output of xymond_alert -dump-config looks fine:
173 PAGE=SYS IGNORE REPEAT=30 HOST=%sys[12].lon.oss.colt.net SERVICE=procs,ports STOP SCRIPT /opt/xymon/server/ext/html_mail.pl support at colt.flibble.net<mailto:support at colt.flibble.net> FORMAT=SCRIPT REPEAT=1440 COLOR=yellow,red DURATION>10
176 PAGE=IN-SYS IGNORE REPEAT=30 HOST=%sys[12].lon.oss.colt.net SERVICE=procs,ports STOP SCRIPT /opt/xymon/server/ext/html_mail.pl 24x7 at colt.flibble.net<mailto:24x7 at colt.flibble.net> FORMAT=SCRIPT REPEAT=480 COLOR=red DURATION>60 RECOVERED
Suggestions are always appreciated,
|\/|
[Colt Disclaimer] This email is from an entity of the Colt group of companies. Colt Group S.A., K2 Building, Forte 1, 2a rue Albert Borschette, L-1246 Luxembourg, R.C.S. B115679. Corporate and contact information for our entities can be found at http://colt.net/uk/en/Colt-Group-of-Companies/index.htm. Internet communications are not secure and Colt does not accept responsibility for the accurate transmission of this message. Content of this email or its attachments is not legally or contractually binding unless expressly previously agreed in writing by Colt
participants (2)
-
Carl.Inglis@rakon.com
-
Martin.Ward@colt.net