It's certainly that first host entry there. The way I prevent this on my site is %(host1|host2|host3).example.com. Using FQDN's, you can't really have this kind of problem.

-- ____ *Note: UMDNJ is now Rutgers-Biomedical and Health Sciences* || \\UTGERS |---------------------*O*--------------------- ||_// Biomedical | Ryan Novosielski - Sr. Systems Programmer || \\ and Health | novosirj at rutgers.edu - 973/972.0922 (2x0922) || \\ Sciences | OIT/EI-Academic Svcs. - ADMC 450, Newark `'

From: Xymon [xymon-bounces at xymon.com] On Behalf Of Shackelford, Ken [ken.shackelford at siemens.com] Sent: Friday, January 24, 2014 8:49 AM To: xymon at xymon.com Subject: [Xymon] Receiving Duplicate Alerts

Hello,

    I have a situation where I’m receiving duplicate alert E-mail for most of my monitored devices.

For example, with the following configuration lines:

$B-list-brn-emea=%(Ballerup-w|Barcelona-w|Berlin-w|Bilbao-w|Bonn-w|Capelle-w|CastlePark-w|Essen-w|Goeppingen-w|Hamburg-w|Hannover-w|Hengelo-w|Huizingen-w|Kista-w|Klagenfurt-w|Leuven-LMS-w|Lindau-w|Linz-w|Madrid-w|Manchester-w|Milano-w|Modena-w|Molndal-w|Moscow-w|Munich-w|Nuernberg-w|Orbassano-w|Prague-w|Rheinfelden-w|s-Hertogenbosch-w|Solihull-w|StPriest-w|Stuttgart-w|Stuttgart-TCNO-w|Toulouse-w|ToulouseKineo-w|Treviso-w|Vejle-w|Velizy-w|Warsaw-w|Wolfsburg-w|Zurich-w)

$B-list-grn-emea=%(Ballerup-w-plnet|Barcelona-w-plnet|Bilbao-w-plnet|Bonn-w-plnet|CastlePark-w-plnet|Goeppingen-w-plnet|Hamburg-w-plnet|Hannover-w-plnet|Hengelo-w-plnet|Huizingen-w-plnet|Kista-w-plnet|Klagenfurt-w-plnet|Linz-w-plnet|Madrid-w-plnet|Manchester-w-plnet|Milano-w-plnet|Modena-w-plnet|Molndal-w-plnet|Moscow-w-plnet|Munich-w-plnet|Nuernberg-w-plnet|Orbassano-w-plnet|Prague-w-plnet|Rheinfelden-w-plnet|s-Hertogenbosch-w-plnet|Solihull-w-plnet|StPriest-w-plnet|Stuttgart-w-plnet|Stuttgart-TCNO-w-plnet|Toulouse-w-plnet|Treviso-w-plnet|Vejle-w-plnet|Velizy-w-plnet|Warsaw-w-plnet|Wolfsburg-w-plnet|Zurich-w-plnet)

HOST=$B-list-brn-emea MAIL ci_team at siemens.com<mailto:ci_team at siemens.com> DURATION>5 REPEAT=1d RECOVERED

HOST=$B-list-grn-emea MAIL ci_team at siemens.com DURATION>5 REPEAT=1d RECOVERED

Now, if, for example the device Ballerup-w-plnet goes red, I get two mails with identical headers:

Xymon [701628] Ballerup-w-plnet:conn CRITICAL (RED)

And likewise, when it comes back up, I get two messages:

Xymon Ballerup-w-plnet:conn recovered

I’m not really a PERL programmer, so I may have botched the above regular expressions, but does anyone have any ideas why this might be happening?

Thanks, Ken