hobbit-alerts.cfg IGNORE TIME
Greetings all,
I have been trying to figure this out and I think I am missing something real obvious.
I am trying to ignore an event when a series of servers do some backups and the http test gets triggered for a second Sunday Morning at 3:35AM or 0835UTC.
Here is the rule in hobbit-alerts.cfg
HOST=S1,S2,S3,S4 COLOR=red SERVICE=http IGNORE HOST=S1,S2,S3,S4 SERVICE=http TIME=7:0830:0845
But I get still get paged.
Here is what I get when I run:
./bin/bbcmd hobbitd_alert --test S1 http
00052836 2009-12-29 18:02:45 Matching host:service:page 'S1:http:' against rule line 81 2009-12-29 18:02:45 Bad timespec (missing colon or wrong weekdays): 7:0830:0845 00052836 2009-12-29 18:02:45 Failed 'IGNORE HOST=S1,S2,S3,S4 SERVICE=http TIME=7:0830:0845' (time criteria)
In the hobbit manual there is an example that shows a similar rule set for Thursday using day 4:0000:0000 so I believe Sunday should be day 7? If I change the day to 6 I don't get that error in the --test output.
Thanks and HNY!
Lee J. Imber Systems Engineer Glance Networks 1167 Massachusetts Ave. Arlington, MA USA 02476 www.glance.net lee at glance.net
Network World says Glance is "the fastest way for 100 people to view your screen." Watch their video review
Lee, I did something similar, but instead of doing an ignore on the alert, I put the server into a downtime for the window.
DOWNTIME=cam:60:0000:2400:Offline2,cam:W:1930:0830:Offline
The first one puts service cam into downtime all day saturday and sunday, and the second does it all Weekdays 730p to 830a
Hope that helps and thanks for the link in your email, I'm checking out Glance now :)
--Patrick
On Tue, Dec 29, 2009 at 1:24 PM, Lee J. Imber <Lee at glance.net> wrote:
Greetings all, I have been trying to figure this out and I think I am missing something real obvious. I am trying to ignore an event when a series of servers do some backups and the http test gets triggered for a second Sunday Morning at 3:35AM or 0835UTC. Here is the rule in hobbit-alerts.cfg HOST=S1,S2,S3,S4 COLOR=red SERVICE=http IGNORE HOST=S1,S2,S3,S4 SERVICE=http TIME=7:0830:0845 But I get still get paged.
Here is what I get when I run: ./bin/bbcmd hobbitd_alert --test S1 http 00052836 2009-12-29 18:02:45 Matching host:service:page 'S1:http:' against rule line 81 2009-12-29 18:02:45 Bad timespec (missing colon or wrong weekdays): 7:0830:0845 00052836 2009-12-29 18:02:45 Failed 'IGNORE HOST=S1,S2,S3,S4 SERVICE=http TIME=7:0830:0845' (time criteria) In the hobbit manual there is an example that shows a similar rule set for Thursday using day 4:0000:0000 so I believe Sunday should be day 7? If I change the day to 6 I don't get that error in the --test output. Thanks and HNY! Lee J. Imber Systems Engineer Glance Networks 1167 Massachusetts Ave. Arlington, MA USA 02476 www.glance.net lee at glance.net Network World says Glance is "the fastest way for 100 people to view your screen." Watch their video review
Awesome!
I will try the downtime, that actually may be a better solution.
OK, the example here in the hobbit-alerts.html page.
A common scenario is where you handle most of the alerts with a wildcard rule, but there is just that one exception where you dont want any cpu alerts from the marketing server on Thursday afternoon. Then it is time for the IGNORE recipient:
HOST=* COLOR=red
IGNORE HOST=marketing.foo.com SERVICE=cpu TIME=4:1500:1800
MAIL admin at foo.comThursday=4, so really this should be 5 ;)
I will try 0 and if it does not work then you guys owe me some beer ;)
Cheers!
Lee
Lee J. Imber Systems Engineer Glance Networks 1167 Massachusetts Ave. Arlington, MA USA 02476 www.glance.net lee at glance.net
Network World says Glance is "the fastest way for 100 people to view your screen." Watch their video review
On Dec 29, 2009, at 5:00 PM, Patrick Nixon wrote:
Lee, I did something similar, but instead of doing an ignore on the alert, I put the server into a downtime for the window.
DOWNTIME=cam:60:0000:2400:Offline2,cam:W:1930:0830:Offline
The first one puts service cam into downtime all day saturday and sunday, and the second does it all Weekdays 730p to 830a
Hope that helps and thanks for the link in your email, I'm checking out Glance now :)
--Patrick
On Tue, Dec 29, 2009 at 1:24 PM, Lee J. Imber <Lee at glance.net> wrote:
Greetings all, I have been trying to figure this out and I think I am missing something real obvious. I am trying to ignore an event when a series of servers do some backups and the http test gets triggered for a second Sunday Morning at 3:35AM or 0835UTC. Here is the rule in hobbit-alerts.cfg HOST=S1,S2,S3,S4 COLOR=red SERVICE=http IGNORE HOST=S1,S2,S3,S4 SERVICE=http TIME=7:0830:0845 But I get still get paged.
Here is what I get when I run: ./bin/bbcmd hobbitd_alert --test S1 http 00052836 2009-12-29 18:02:45 Matching host:service:page 'S1:http:' against rule line 81 2009-12-29 18:02:45 Bad timespec (missing colon or wrong weekdays): 7:0830:0845 00052836 2009-12-29 18:02:45 Failed 'IGNORE HOST=S1,S2,S3,S4 SERVICE=http TIME=7:0830:0845' (time criteria) In the hobbit manual there is an example that shows a similar rule set for Thursday using day 4:0000:0000 so I believe Sunday should be day 7? If I change the day to 6 I don't get that error in the --test output. Thanks and HNY! Lee J. Imber Systems Engineer Glance Networks 1167 Massachusetts Ave. Arlington, MA USA 02476 www.glance.net lee at glance.net Network World says Glance is "the fastest way for 100 people to view your screen." Watch their video review
To unsubscribe from the hobbit list, send an e-mail to hobbit-unsubscribe at hswn.dk
participants (2)
-
Lee＠glance.net
-
pnixon＠gmail.com