Will this work O.K.?
HOST=%ep* SERVICE=http
MAIL 555555555 at mycell.com REPEAT=15 COLOR=RED DURATION>5m DURATION<35 RECOVERED
So, that it will not page the cell unless the outage lasts longer than 5 minutes,
and will only page twice. (Assuming after 5 minute outage it pages, then pages
every fifteen minutes for thirty minutes - twice)
Thanks..James
James Wade
On Tue, Oct 30, 2007 at 02:46:37PM -0500, James Wade wrote:
Will this work O.K.?
HOST=%ep* SERVICE=http
the regex is wrong, you probably want "%ep.*"
MAIL 555555555 at mycell.com REPEAT=15 COLOR=RED DURATION>5m DURATION<35 RECOVERED
So, that it will not page the cell unless the outage lasts longer than 5 minutes,
and will only page twice. (Assuming after 5 minute outage it pages, then pages every fifteen minutes for thirty minutes - twice)
For http, this will work as intended. There is a "gotcha" when this is used with tests that can go yellow - this is not the case with "http" tests. But e.g. a disk check that goes yellow for an hour, then red would NOT trigger an alert in this case, first because you don't alert on yellow, and second because the duration of the incident exceeds 35 minutes when it does go red (DURATION begins when the status goes non-green).
Regards, Henrik
While we're on the subject of alert configuration, could someone confirm mine?
HOST=* MAIL josh at imaginenetworksllc.com COLOR=RED DURATION>15m RECOVERED
It will only email once something has been red for 15m and it will email once it has become green again - correct?
On 10/30/07, Henrik Stoerner <henrik at hswn.dk> wrote:
On Tue, Oct 30, 2007 at 02:46:37PM -0500, James Wade wrote:
Will this work O.K.?
HOST=%ep* SERVICE=http
the regex is wrong, you probably want "%ep.*"
MAIL 555555555 at mycell.com REPEAT=15 COLOR=RED DURATION>5m DURATION<35 RECOVERED
So, that it will not page the cell unless the outage lasts longer than 5 minutes,
and will only page twice. (Assuming after 5 minute outage it pages, then pages every fifteen minutes for thirty minutes - twice)
For http, this will work as intended. There is a "gotcha" when this is used with tests that can go yellow - this is not the case with "http" tests. But e.g. a disk check that goes yellow for an hour, then red would NOT trigger an alert in this case, first because you don't alert on yellow, and second because the duration of the incident exceeds 35 minutes when it does go red (DURATION begins when the status goes non-green).
Regards, Henrik
To unsubscribe from the hobbit list, send an e-mail to hobbit-unsubscribe at hswn.dk
-- Josh Luthman Office: 937-552-2340 Direct: 937-552-2343 1100 Wayne St Suite 1337 Troy, OH 45373
Those who don't understand UNIX are condemned to reinvent it, poorly. --- Henry Spencer
Josh Luthman wrote:
While we're on the subject of alert configuration, could someone confirm mine?
HOST=* MAIL josh at imaginenetworksllc.com <mailto:josh at imaginenetworksllc.com> COLOR=RED DURATION>15m RECOVERED
It will only email once something has been red for 15m and it will email once it has become green again - correct?
On 10/30/07, *Henrik Stoerner* < henrik at hswn.dk <mailto:henrik at hswn.dk>> wrote:
On Tue, Oct 30, 2007 at 02:46:37PM -0500, James Wade wrote: > Will this work O.K.? > > > > HOST=%ep* SERVICE=http the regex is wrong, you probably want "%ep.*" > MAIL 555555555 at mycell.com <mailto:555555555 at mycell.com> REPEAT=15 COLOR=RED DURATION>5m DURATION<35 RECOVERED > > So, that it will not page the cell unless the outage lasts longer than 5 > minutes, > > and will only page twice. (Assuming after 5 minute outage it pages, then > pages every fifteen minutes for thirty minutes - twice) For http, this will work as intended. There is a "gotcha" when this is used with tests that can go yellow - this is not the case with "http" tests. But e.g. a disk check that goes yellow for an hour, then red would NOT trigger an alert in this case, first because you don't alert on yellow, and second because the duration of the incident exceeds 35 minutes when it does go red (DURATION begins when the status goes non-green). Regards, Henrik To unsubscribe from the hobbit list, send an e-mail to hobbit-unsubscribe at hswn.dk <mailto:hobbit-unsubscribe at hswn.dk>-- Josh Luthman Office: 937-552-2340 Direct: 937-552-2343 1100 Wayne St Suite 1337 Troy, OH 45373
Those who don't understand UNIX are condemned to reinvent it, poorly. --- Henry Spencer
Correct :)
Greatly appreciate it. Thanks Allan!
On 10/30/07, Allan <allan at zandahar.net> wrote:
Josh Luthman wrote:
While we're on the subject of alert configuration, could someone confirm mine?
HOST=* MAIL josh at imaginenetworksllc.com <mailto:josh at imaginenetworksllc.com> COLOR=RED DURATION>15m RECOVERED
It will only email once something has been red for 15m and it will email once it has become green again - correct?
On 10/30/07, *Henrik Stoerner* < henrik at hswn.dk <mailto:henrik at hswn.dk>> wrote:
On Tue, Oct 30, 2007 at 02:46:37PM -0500, James Wade wrote: > Will this work O.K.? > > > > HOST=%ep* SERVICE=http the regex is wrong, you probably want "%ep.*" > MAIL 555555555 at mycell.com <mailto:555555555 at mycell.com> REPEAT=15 COLOR=RED DURATION>5m DURATION<35 RECOVERED > > So, that it will not page the cell unless the outage lasts longer than 5 > minutes, > > and will only page twice. (Assuming after 5 minute outage it pages, then > pages every fifteen minutes for thirty minutes - twice) For http, this will work as intended. There is a "gotcha" when thisis used with tests that can go yellow - this is not the case with "http" tests. But e.g. a disk check that goes yellow for an hour, then red would NOT trigger an alert in this case, first because you don't alert on yellow, and second because the duration of the incident exceeds 35 minutes when it does go red (DURATION begins when the status goes non-green).
Regards, Henrik To unsubscribe from the hobbit list, send an e-mail to hobbit-unsubscribe at hswn.dk <mailto:hobbit-unsubscribe at hswn.dk>-- Josh Luthman Office: 937-552-2340 Direct: 937-552-2343 1100 Wayne St Suite 1337 Troy, OH 45373
Those who don't understand UNIX are condemned to reinvent it, poorly. --- Henry Spencer
Correct :)
To unsubscribe from the hobbit list, send an e-mail to hobbit-unsubscribe at hswn.dk
-- Josh Luthman Office: 937-552-2340 Direct: 937-552-2343 1100 Wayne St Suite 1337 Troy, OH 45373
Those who don't understand UNIX are condemned to reinvent it, poorly. --- Henry Spencer
participants (4)
-
allan＠zandahar.net
-
henrik＠hswn.dk
-
jkwade＠futurefrontiers.com
-
josh＠imaginenetworksllc.com