Xymon alerting when it's been told not to
Hi all,
I have the following in my alerts.cfg:
PAGE=IV HOST=%ivma[12].*.osspriv.colt.net EXSERVICE=files,msgs,ports,procs,cpu SCRIPT /opt/xymon/server/ext/html_mail.pl martin.ward at colt.net DURATION>1h COLOR=red RECOVERED STOP
If I run it through xymond_alert -dump-config it comes up as: 168 PAGE=Infovista 169 HOST=%ivma[12].*.osspriv.colt.net EXSERVICE=files,msgs,ports,procs,cpu SCRIPT /opt/xymon/server/ext/html_mail.pl martin.ward at colt.net FORMAT=SCRIPT REPEAT=30 COLOR=red DURATION>60 RECOVERED STOP
Yet I am still getting CPU alerts from ivma2.lon.osspriv.colt.net
Can anyone suggest what the problem might be?
|\/|artin
[Colt Disclaimer] This email is from an entity of the Colt group of companies. Colt Group S.A., K2 Building, Forte 1, 2a rue Albert Borschette, L-1246 Luxembourg, R.C.S. B115679. Corporate and contact information for our entities can be found at http://colt.net/uk/en/Colt-Group-of-Companies/index.htm. Internet communications are not secure and Colt does not accept responsibility for the accurate transmission of this message. Content of this email or its attachments is not legally or contractually binding unless expressly previously agreed in writing by Colt
On Mon, 4 Mar 2013 09:19:25 +0000, "Ward, Martin" <Martin.Ward at colt.net> wrote:
Hi all,
I have the following in my alerts.cfg: [snip] Yet I am still getting CPU alerts from ivma2.lon.osspriv.colt.net
Try running xymoncmd xymond_alert --test ivma2.lon.osspriv.colt.net cpu and look for lines like
00004226 2013-03-04 12:24:11 Matching host:service:dgroup:page 'cscxymweb3.csc.dk:disk:Xymon servers:cscdk/mwsmonitor,cscdk/mwsmonitor' against rule line 1260 00004226 2013-03-04 12:24:11 *** Match with 'MAIL $XYMONADM $XYMONADMREPEAT' *** 00004226 2013-03-04 12:24:11 Mail alert with command '/usr/bin/mail -s "Xymon [12345] cscxymweb3.csc.dk:disk CRITICAL (RED)" 29236260 at sms.csc.dk' 00004226 2013-03-04 12:24:11 Matching host:service:dgroup:page 'cscxymweb3.csc.dk:disk:Xymon servers:cscdk/mwsmonitor,cscdk/mwsmonitor' against rule line 126
to see which rule triggers the alert.
Regards, Henrik
Thanks Henrik that helped a huge amount. I was able to diagnose the issue which was that I was specifying a subpage incorrectly.
To help those searching the Internet for this problem, if you have a subpage that you want to get alerts about then it must be specified as:
PAGE=Main/Sub
Instead of:
PAGE=Sub
Which is what I had; the actual config lines now work correctly:
PAGE=Infovista/IV32 HOST=%ivma[12].*.osspriv.colt.net EXSERVICE=files,msgs,ports,procs,cpu SCRIPT /opt/xymon/server/ext/html_mail.pl martin.ward at colt.net DURATION>1h COLOR=red RECOVERED STOP
@Kenneth, I tried adding a comma at the end of the EXSERVICE line, it made no difference but thanks for the suggestion.
|\/|artin
Martin Ward Manager, Technical Services Service Operations
DDI:+44 (0) 20 7863 5218 / Fax: +44 (0)20 7863 9999 / www.colt.net Colt Technology Services, Unit 12, Powergate Business Park, Volt Avenue, Park Royal, London, NW10 6PW, UK.
Help reduce your carbon footprint | Think before you print. Registered in England and Wales, registered number 02452736, VAT number GB 645 4205 50
-----Original Message----- From: henrik at hswn.dk [mailto:henrik at hswn.dk] Sent: 04 March 2013 11:27 To: Ward, Martin Cc: xymon at xymon.com Subject: Re: [Xymon] Xymon alerting when it's been told not to
On Mon, 4 Mar 2013 09:19:25 +0000, "Ward, Martin" <Martin.Ward at colt.net> wrote:
Hi all,
I have the following in my alerts.cfg: [snip] Yet I am still getting CPU alerts from ivma2.lon.osspriv.colt.net
Try running xymoncmd xymond_alert --test ivma2.lon.osspriv.colt.net cpu and look for lines like
00004226 2013-03-04 12:24:11 Matching host:service:dgroup:page 'cscxymweb3.csc.dk:disk:Xymon servers:cscdk/mwsmonitor,cscdk/mwsmonitor' against rule line 1260 00004226 2013-03-04 12:24:11 *** Match with 'MAIL $XYMONADM $XYMONADMREPEAT' *** 00004226 2013-03-04 12:24:11 Mail alert with command '/usr/bin/mail -s "Xymon [12345] cscxymweb3.csc.dk:disk CRITICAL (RED)" 29236260 at sms.csc.dk' 00004226 2013-03-04 12:24:11 Matching host:service:dgroup:page 'cscxymweb3.csc.dk:disk:Xymon servers:cscdk/mwsmonitor,cscdk/mwsmonitor' against rule line 126
to see which rule triggers the alert.
Regards, Henrik
[Colt Disclaimer] This email is from an entity of the Colt group of companies. Colt Group S.A., K2 Building, Forte 1, 2a rue Albert Borschette, L-1246 Luxembourg, R.C.S. B115679. Corporate and contact information for our entities can be found at http://colt.net/uk/en/Colt-Group-of-Companies/index.htm. Internet communications are not secure and Colt does not accept responsibility for the accurate transmission of this message. Content of this email or its attachments is not legally or contractually binding unless expressly previously agreed in writing by Colt
I cannot fathom why it repeats at all so rather that look for something that isn't there I have forced every alert to repeat every seven days to see if that resolves the issue!
|\/|
Martin Ward Manager, Technical Services Service Operations
DDI:+44 (0) 20 7863 5218 / Fax: +44 (0)20 7863 9999 / www.colt.net Colt Technology Services, Unit 12, Powergate Business Park, Volt Avenue, Park Royal, London, NW10 6PW, UK.
Help reduce your carbon footprint | Think before you print. Registered in England and Wales, registered number 02452736, VAT number GB 645 4205 50
-----Original Message----- From: henrik at hswn.dk [mailto:henrik at hswn.dk] Sent: 04 March 2013 11:27 To: Ward, Martin Cc: xymon at xymon.com Subject: Re: [Xymon] Xymon alerting when it's been told not to
On Mon, 4 Mar 2013 09:19:25 +0000, "Ward, Martin" <Martin.Ward at colt.net> wrote:
Hi all,
I have the following in my alerts.cfg: [snip] Yet I am still getting CPU alerts from ivma2.lon.osspriv.colt.net
Try running xymoncmd xymond_alert --test ivma2.lon.osspriv.colt.net cpu and look for lines like
00004226 2013-03-04 12:24:11 Matching host:service:dgroup:page 'cscxymweb3.csc.dk:disk:Xymon servers:cscdk/mwsmonitor,cscdk/mwsmonitor' against rule line 1260 00004226 2013-03-04 12:24:11 *** Match with 'MAIL $XYMONADM $XYMONADMREPEAT' *** 00004226 2013-03-04 12:24:11 Mail alert with command '/usr/bin/mail -s "Xymon [12345] cscxymweb3.csc.dk:disk CRITICAL (RED)" 29236260 at sms.csc.dk' 00004226 2013-03-04 12:24:11 Matching host:service:dgroup:page 'cscxymweb3.csc.dk:disk:Xymon servers:cscdk/mwsmonitor,cscdk/mwsmonitor' against rule line 126
to see which rule triggers the alert.
Regards, Henrik
[Colt Disclaimer] This email is from an entity of the Colt group of companies. Colt Group S.A., K2 Building, Forte 1, 2a rue Albert Borschette, L-1246 Luxembourg, R.C.S. B115679. Corporate and contact information for our entities can be found at http://colt.net/uk/en/Colt-Group-of-Companies/index.htm. Internet communications are not secure and Colt does not accept responsibility for the accurate transmission of this message. Content of this email or its attachments is not legally or contractually binding unless expressly previously agreed in writing by Colt
My apologies, I hit the "Send" button accidentally, a bit more info would have helped :-(
I ran the " xymoncmd xymond_alert --test" as you suggested and it is definitely matching on the right entry:
00019291 2013-05-13 15:52:53 *** Match with 'PAGE=SMARTS HOST=%sm[0-9]* EXSERVICE=files,msgs,ports,cpu' ***
The lines in the logfile there are:
PAGE=SMARTS HOST=%sm[0-9]* EXSERVICE=files,msgs,ports,cpu SCRIPT /opt/xymon/server/ext/html_mail.pl internalitnoc at colt.net DURATION>1h COLOR=red RECOVERED STOP
AFAIK this means that the alert should only be sent once, however it is being sent every thirty minutes as the lines from the log file show: Mon May 13 00:11:27 2013 sm9.lon.oss.colt.net.procs (212.74.77.85) internalitnoc at colt.net 1368400263 300 Mon May 13 00:41:31 2013 sm9.lon.oss.colt.net.procs (212.74.77.85) internalitnoc at colt.net 1368402066 300 Mon May 13 01:11:50 2013 sm9.lon.oss.colt.net.procs (212.74.77.85) internalitnoc at colt.net 1368403886 300 Mon May 13 01:42:03 2013 sm9.lon.oss.colt.net.procs (212.74.77.85) internalitnoc at colt.net 1368405699 300 Mon May 13 02:12:13 2013 sm9.lon.oss.colt.net.procs (212.74.77.85) internalitnoc at colt.net 1368407508 300 Mon May 13 02:42:21 2013 sm9.lon.oss.colt.net.procs (212.74.77.85) internalitnoc at colt.net 1368409316 300
I cannot fathom why it repeats at all so rather that look for something that isn't there, for now I have forced every alert to repeat every seven days but I would like to understand more about why this is working the way it is rather than the way it is supposed to (or I think it is supposed to!).
|\/|artin
Martin Ward Manager, Technical Services Service Operations
DDI:+44 (0) 20 7863 5218 / Fax: +44 (0)20 7863 9999 / www.colt.net Colt Technology Services, Unit 12, Powergate Business Park, Volt Avenue, Park Royal, London, NW10 6PW, UK.
Help reduce your carbon footprint | Think before you print. Registered in England and Wales, registered number 02452736, VAT number GB 645 4205 50
-----Original Message----- From: Ward, Martin Sent: 13 May 2013 16:02 To: 'henrik at hswn.dk' Cc: xymon at xymon.com Subject: RE: [Xymon] Xymon alerting when it's been told not to
I cannot fathom why it repeats at all so rather that look for something that isn't there I have forced every alert to repeat every seven days to see if that resolves the issue!
|\/|
Martin Ward Manager, Technical Services Service Operations
DDI:+44 (0) 20 7863 5218 / Fax: +44 (0)20 7863 9999 / www.colt.net Colt Technology Services, Unit 12, Powergate Business Park, Volt Avenue, Park Royal, London, NW10 6PW, UK.
Help reduce your carbon footprint | Think before you print. Registered in England and Wales, registered number 02452736, VAT number GB 645 4205 50
-----Original Message----- From: henrik at hswn.dk [mailto:henrik at hswn.dk] Sent: 04 March 2013 11:27 To: Ward, Martin Cc: xymon at xymon.com Subject: Re: [Xymon] Xymon alerting when it's been told not to
On Mon, 4 Mar 2013 09:19:25 +0000, "Ward, Martin" <Martin.Ward at colt.net> wrote:
Hi all,
I have the following in my alerts.cfg: [snip] Yet I am still getting CPU alerts from ivma2.lon.osspriv.colt.net
Try running xymoncmd xymond_alert --test ivma2.lon.osspriv.colt.net cpu and look for lines like
00004226 2013-03-04 12:24:11 Matching host:service:dgroup:page 'cscxymweb3.csc.dk:disk:Xymon servers:cscdk/mwsmonitor,cscdk/mwsmonitor' against rule line 1260 00004226 2013-03-04 12:24:11 *** Match with 'MAIL $XYMONADM $XYMONADMREPEAT' *** 00004226 2013-03-04 12:24:11 Mail alert with command '/usr/bin/mail -s "Xymon [12345] cscxymweb3.csc.dk:disk CRITICAL (RED)" 29236260 at sms.csc.dk' 00004226 2013-03-04 12:24:11 Matching host:service:dgroup:page 'cscxymweb3.csc.dk:disk:Xymon servers:cscdk/mwsmonitor,cscdk/mwsmonitor' against rule line 126
to see which rule triggers the alert.
Regards, Henrik
[Colt Disclaimer] This email is from an entity of the Colt group of companies. Colt Group S.A., K2 Building, Forte 1, 2a rue Albert Borschette, L-1246 Luxembourg, R.C.S. B115679. Corporate and contact information for our entities can be found at http://colt.net/uk/en/Colt-Group-of-Companies/index.htm. Internet communications are not secure and Colt does not accept responsibility for the accurate transmission of this message. Content of this email or its attachments is not legally or contractually binding unless expressly previously agreed in writing by Colt
Hi Martin,
"Since there is no "REPEAT" setting for this recipient, the default is used which is to repeat the alert every 30 minutes." - from xymon-alerts.html
Regards,
Carl
Carl Inglis Systems Administrator
Rakon UK Limited Dowsett House, Sadler Road, Lincoln LN6 3RS, United Kingdom Tel: +44 (0)1522 812630 | Fax: +44 (0) 1522 812664 | Mob: +44 (0) 7786 552915 Carl.Inglis at rakon.com | www.rakon.com
THE QUEENS AWARDS FOR ENTERPRISE 2012 Rakon UK Ltd
This message together with any attachments contains confidential information and may be subject to privilege. If you are not the intended recipient you may not distribute it in any way, you must notify the sender immediately and delete any copies of the message along with its attachments.
Rakon UK Ltd is a limited company registered in England and Wales. Registered Office: Dowsett House, Sadler Road, Lincoln LN6 3RS Company Registration Number: 5128090.
Please be aware that Rakon UK Limited may monitor email traffic data including the date, time, subject line, sender and recipients for the purposes of security and usage monitoring. Automated monitoring systems may also be applied to ascertain whether incoming/outgoing emails are likely to contain viruses, other destructive devices or inappropriate content. -----Original Message----- From: Xymon [mailto:xymon-bounces at xymon.com] On Behalf Of Ward, Martin Sent: 13 May 2013 16:11 To: henrik at hswn.dk Cc: xymon at xymon.com Subject: Re: [Xymon] Xymon alerting when it's been told not to
My apologies, I hit the "Send" button accidentally, a bit more info would have helped :-(
I ran the " xymoncmd xymond_alert --test" as you suggested and it is definitely matching on the right entry:
00019291 2013-05-13 15:52:53 *** Match with 'PAGE=SMARTS HOST=%sm[0-9]* EXSERVICE=files,msgs,ports,cpu' ***
The lines in the logfile there are:
PAGE=SMARTS HOST=%sm[0-9]* EXSERVICE=files,msgs,ports,cpu SCRIPT /opt/xymon/server/ext/html_mail.pl internalitnoc at colt.net DURATION>1h COLOR=red RECOVERED STOP
AFAIK this means that the alert should only be sent once, however it is being sent every thirty minutes as the lines from the log file show: Mon May 13 00:11:27 2013 sm9.lon.oss.colt.net.procs (212.74.77.85) internalitnoc at colt.net 1368400263 300 Mon May 13 00:41:31 2013 sm9.lon.oss.colt.net.procs (212.74.77.85) internalitnoc at colt.net 1368402066 300 Mon May 13 01:11:50 2013 sm9.lon.oss.colt.net.procs (212.74.77.85) internalitnoc at colt.net 1368403886 300 Mon May 13 01:42:03 2013 sm9.lon.oss.colt.net.procs (212.74.77.85) internalitnoc at colt.net 1368405699 300 Mon May 13 02:12:13 2013 sm9.lon.oss.colt.net.procs (212.74.77.85) internalitnoc at colt.net 1368407508 300 Mon May 13 02:42:21 2013 sm9.lon.oss.colt.net.procs (212.74.77.85) internalitnoc at colt.net 1368409316 300
I cannot fathom why it repeats at all so rather that look for something that isn't there, for now I have forced every alert to repeat every seven days but I would like to understand more about why this is working the way it is rather than the way it is supposed to (or I think it is supposed to!).
|\/|artin
Martin Ward Manager, Technical Services Service Operations
DDI:+44 (0) 20 7863 5218 / Fax: +44 (0)20 7863 9999 / www.colt.net Colt Technology Services, Unit 12, Powergate Business Park, Volt Avenue, Park Royal, London, NW10 6PW, UK.
Help reduce your carbon footprint | Think before you print. Registered in England and Wales, registered number 02452736, VAT number GB 645 4205 50
-----Original Message----- From: Ward, Martin Sent: 13 May 2013 16:02 To: 'henrik at hswn.dk' Cc: xymon at xymon.com Subject: RE: [Xymon] Xymon alerting when it's been told not to
I cannot fathom why it repeats at all so rather that look for something that isn't there I have forced every alert to repeat every seven days to see if that resolves the issue!
|\/|
Martin Ward Manager, Technical Services Service Operations
DDI:+44 (0) 20 7863 5218 / Fax: +44 (0)20 7863 9999 / www.colt.net Colt Technology Services, Unit 12, Powergate Business Park, Volt Avenue, Park Royal, London, NW10 6PW, UK.
Help reduce your carbon footprint | Think before you print. Registered in England and Wales, registered number 02452736, VAT number GB 645 4205 50
-----Original Message----- From: henrik at hswn.dk [mailto:henrik at hswn.dk] Sent: 04 March 2013 11:27 To: Ward, Martin Cc: xymon at xymon.com Subject: Re: [Xymon] Xymon alerting when it's been told not to
On Mon, 4 Mar 2013 09:19:25 +0000, "Ward, Martin" <Martin.Ward at colt.net> wrote:
Hi all,
I have the following in my alerts.cfg: [snip] Yet I am still getting CPU alerts from ivma2.lon.osspriv.colt.net
Try running xymoncmd xymond_alert --test ivma2.lon.osspriv.colt.net cpu and look for lines like
00004226 2013-03-04 12:24:11 Matching host:service:dgroup:page 'cscxymweb3.csc.dk:disk:Xymon servers:cscdk/mwsmonitor,cscdk/mwsmonitor' against rule line 1260 00004226 2013-03-04 12:24:11 *** Match with 'MAIL $XYMONADM $XYMONADMREPEAT' *** 00004226 2013-03-04 12:24:11 Mail alert with command '/usr/bin/mail -s "Xymon [12345] cscxymweb3.csc.dk:disk CRITICAL (RED)" 29236260 at sms.csc.dk' 00004226 2013-03-04 12:24:11 Matching host:service:dgroup:page 'cscxymweb3.csc.dk:disk:Xymon servers:cscdk/mwsmonitor,cscdk/mwsmonitor' against rule line 126
to see which rule triggers the alert.
Regards, Henrik
[Colt Disclaimer] This email is from an entity of the Colt group of companies. Colt Group S.A., K2 Building, Forte 1, 2a rue Albert Borschette, L-1246 Luxembourg, R.C.S. B115679. Corporate and contact information for our entities can be found at http://colt.net/uk/en/Colt-Group-of-Companies/index.htm. Internet communications are not secure and Colt does not accept responsibility for the accurate transmission of this message. Content of this email or its attachments is not legally or contractually binding unless expressly previously agreed in writing by Colt
Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon
The default repeat interval (set in xymonserver.cfg) is 30 minutes.
Thanks, Larry Barber
On Mon, May 13, 2013 at 10:10 AM, Ward, Martin <Martin.Ward at colt.net> wrote:
My apologies, I hit the "Send" button accidentally, a bit more info would have helped :-(
I ran the " xymoncmd xymond_alert --test" as you suggested and it is definitely matching on the right entry:
00019291 2013-05-13 15:52:53 *** Match with 'PAGE=SMARTS HOST=%sm[0-9]* EXSERVICE=files,msgs,ports,cpu' ***
The lines in the logfile there are:
PAGE=SMARTS HOST=%sm[0-9]* EXSERVICE=files,msgs,ports,cpu SCRIPT /opt/xymon/server/ext/html_mail.pl internalitnoc at colt.netDURATION>1h COLOR=red RECOVERED STOP
AFAIK this means that the alert should only be sent once, however it is being sent every thirty minutes as the lines from the log file show: Mon May 13 00:11:27 2013 sm9.lon.oss.colt.net.procs (212.74.77.85) internalitnoc at colt.net 1368400263 300 Mon May 13 00:41:31 2013 sm9.lon.oss.colt.net.procs (212.74.77.85) internalitnoc at colt.net 1368402066 300 Mon May 13 01:11:50 2013 sm9.lon.oss.colt.net.procs (212.74.77.85) internalitnoc at colt.net 1368403886 300 Mon May 13 01:42:03 2013 sm9.lon.oss.colt.net.procs (212.74.77.85) internalitnoc at colt.net 1368405699 300 Mon May 13 02:12:13 2013 sm9.lon.oss.colt.net.procs (212.74.77.85) internalitnoc at colt.net 1368407508 300 Mon May 13 02:42:21 2013 sm9.lon.oss.colt.net.procs (212.74.77.85) internalitnoc at colt.net 1368409316 300
I cannot fathom why it repeats at all so rather that look for something that isn't there, for now I have forced every alert to repeat every seven days but I would like to understand more about why this is working the way it is rather than the way it is supposed to (or I think it is supposed to!).
|\/|artin
Martin Ward Manager, Technical Services Service Operations
DDI:+44 (0) 20 7863 5218 / Fax: +44 (0)20 7863 9999 / www.colt.net Colt Technology Services, Unit 12, Powergate Business Park, Volt Avenue, Park Royal, London, NW10 6PW, UK.
Help reduce your carbon footprint | Think before you print. Registered in England and Wales, registered number 02452736, VAT number GB 645 4205 50
-----Original Message----- From: Ward, Martin Sent: 13 May 2013 16:02 To: 'henrik at hswn.dk' Cc: xymon at xymon.com Subject: RE: [Xymon] Xymon alerting when it's been told not to
I cannot fathom why it repeats at all so rather that look for something that isn't there I have forced every alert to repeat every seven days to see if that resolves the issue!
|\/|
Martin Ward Manager, Technical Services Service Operations
DDI:+44 (0) 20 7863 5218 / Fax: +44 (0)20 7863 9999 / www.colt.net Colt Technology Services, Unit 12, Powergate Business Park, Volt Avenue, Park Royal, London, NW10 6PW, UK.
Help reduce your carbon footprint | Think before you print. Registered in England and Wales, registered number 02452736, VAT number GB 645 4205 50
-----Original Message----- From: henrik at hswn.dk [mailto:henrik at hswn.dk] Sent: 04 March 2013 11:27 To: Ward, Martin Cc: xymon at xymon.com Subject: Re: [Xymon] Xymon alerting when it's been told not to
On Mon, 4 Mar 2013 09:19:25 +0000, "Ward, Martin" <Martin.Ward at colt.net> wrote:
Hi all,
I have the following in my alerts.cfg: [snip] Yet I am still getting CPU alerts from ivma2.lon.osspriv.colt.net
Try running xymoncmd xymond_alert --test ivma2.lon.osspriv.colt.net cpu and look for lines like
00004226 2013-03-04 12:24:11 Matching host:service:dgroup:page 'cscxymweb3.csc.dk:disk:Xymon servers:cscdk/mwsmonitor,cscdk/mwsmonitor' against rule line 1260 00004226 2013-03-04 12:24:11 *** Match with 'MAIL $XYMONADM $XYMONADMREPEAT' *** 00004226 2013-03-04 12:24:11 Mail alert with command '/usr/bin/mail -s "Xymon [12345] cscxymweb3.csc.dk:disk CRITICAL (RED)" 29236260 at sms.csc.dk' 00004226 2013-03-04 12:24:11 Matching host:service:dgroup:page 'cscxymweb3.csc.dk:disk:Xymon servers:cscdk/mwsmonitor,cscdk/mwsmonitor' against rule line 126
to see which rule triggers the alert.
Regards, Henrik
[Colt Disclaimer] This email is from an entity of the Colt group of companies. Colt Group S.A., K2 Building, Forte 1, 2a rue Albert Borschette, L-1246 Luxembourg, R.C.S. B115679. Corporate and contact information for our entities can be found at http://colt.net/uk/en/Colt-Group-of-Companies/index.htm. Internet communications are not secure and Colt does not accept responsibility for the accurate transmission of this message. Content of this email or its attachments is not legally or contractually binding unless expressly previously agreed in writing by Colt
Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon
Thanks Larry, Carl and Mike, I couldn't find that repeat option anywhere, clearly I was looking in the wrong places!
|\/|
-- Martin Ward Manager, Technical Services Service Operations
DDI:+44 (0) 20 7863 5218 / Fax: +44 (0)20 7863 9999 / www.colt.net<http://www.colt.net/> Colt Technology Services, Unit 12, Powergate Business Park, Volt Avenue, Park Royal, London, NW10 6PW, UK.
Help reduce your carbon footprint | Think before you print. Registered in England and Wales, registered number 02452736, VAT number GB 645 4205 50
From: Larry Barber [mailto:lebarber at gmail.com] Sent: 13 May 2013 17:10 To: Ward, Martin Cc: henrik at hswn.dk; xymon at xymon.com Subject: Re: [Xymon] Xymon alerting when it's been told not to
The default repeat interval (set in xymonserver.cfg) is 30 minutes.
Thanks, Larry Barber
On Mon, May 13, 2013 at 10:10 AM, Ward, Martin <Martin.Ward at colt.net<mailto:Martin.Ward at colt.net>> wrote: My apologies, I hit the "Send" button accidentally, a bit more info would have helped :-(
I ran the " xymoncmd xymond_alert --test" as you suggested and it is definitely matching on the right entry:
00019291 2013-05-13 15:52:53 *** Match with 'PAGE=SMARTS HOST=%sm[0-9]* EXSERVICE=files,msgs,ports,cpu' ***
The lines in the logfile there are:
PAGE=SMARTS HOST=%sm[0-9]* EXSERVICE=files,msgs,ports,cpu SCRIPT /opt/xymon/server/ext/html_mail.pl<http://html_mail.pl> internalitnoc at colt.net<mailto:internalitnoc at colt.net> DURATION>1h COLOR=red RECOVERED STOP
AFAIK this means that the alert should only be sent once, however it is being sent every thirty minutes as the lines from the log file show: Mon May 13 00:11:27 2013 sm9.lon.oss.colt.net.procs (212.74.77.85) internalitnoc at colt.net<mailto:internalitnoc at colt.net> 1368400263 300 Mon May 13 00:41:31 2013 sm9.lon.oss.colt.net.procs (212.74.77.85) internalitnoc at colt.net<mailto:internalitnoc at colt.net> 1368402066 300 Mon May 13 01:11:50 2013 sm9.lon.oss.colt.net.procs (212.74.77.85) internalitnoc at colt.net<mailto:internalitnoc at colt.net> 1368403886 300 Mon May 13 01:42:03 2013 sm9.lon.oss.colt.net.procs (212.74.77.85) internalitnoc at colt.net<mailto:internalitnoc at colt.net> 1368405699 300 Mon May 13 02:12:13 2013 sm9.lon.oss.colt.net.procs (212.74.77.85) internalitnoc at colt.net<mailto:internalitnoc at colt.net> 1368407508 300 Mon May 13 02:42:21 2013 sm9.lon.oss.colt.net.procs (212.74.77.85) internalitnoc at colt.net<mailto:internalitnoc at colt.net> 1368409316 300
I cannot fathom why it repeats at all so rather that look for something that isn't there, for now I have forced every alert to repeat every seven days but I would like to understand more about why this is working the way it is rather than the way it is supposed to (or I think it is supposed to!).
|\/|artin
Martin Ward Manager, Technical Services Service Operations
DDI:+44 (0) 20 7863 5218<tel:%2B44%20%280%29%2020%207863%205218> / Fax: +44 (0)20 7863 9999<tel:%2B44%20%280%2920%207863%209999> / www.colt.net<http://www.colt.net> Colt Technology Services, Unit 12, Powergate Business Park, Volt Avenue, Park Royal, London, NW10 6PW, UK.
Help reduce your carbon footprint | Think before you print. Registered in England and Wales, registered number 02452736, VAT number GB 645 4205 50
-----Original Message----- From: Ward, Martin Sent: 13 May 2013 16:02 To: 'henrik at hswn.dk<mailto:henrik at hswn.dk>' Cc: xymon at xymon.com<mailto:xymon at xymon.com> Subject: RE: [Xymon] Xymon alerting when it's been told not to
I cannot fathom why it repeats at all so rather that look for something that isn't there I have forced every alert to repeat every seven days to see if that resolves the issue!
|\/|
Martin Ward Manager, Technical Services Service Operations
DDI:+44 (0) 20 7863 5218<tel:%2B44%20%280%29%2020%207863%205218> / Fax: +44 (0)20 7863 9999<tel:%2B44%20%280%2920%207863%209999> / www.colt.net<http://www.colt.net> Colt Technology Services, Unit 12, Powergate Business Park, Volt Avenue, Park Royal, London, NW10 6PW, UK.
Help reduce your carbon footprint | Think before you print. Registered in England and Wales, registered number 02452736, VAT number GB 645 4205 50
-----Original Message----- From: henrik at hswn.dk<mailto:henrik at hswn.dk> [mailto:henrik at hswn.dk<mailto:henrik at hswn.dk>] Sent: 04 March 2013 11:27 To: Ward, Martin Cc: xymon at xymon.com<mailto:xymon at xymon.com> Subject: Re: [Xymon] Xymon alerting when it's been told not to
On Mon, 4 Mar 2013 09:19:25 +0000, "Ward, Martin" <Martin.Ward at colt.net<mailto:Martin.Ward at colt.net>> wrote:
Hi all,
I have the following in my alerts.cfg: [snip] Yet I am still getting CPU alerts from ivma2.lon.osspriv.colt.net<http://ivma2.lon.osspriv.colt.net>
Try running xymoncmd xymond_alert --test ivma2.lon.osspriv.colt.net<http://ivma2.lon.osspriv.colt.net> cpu and look for lines like
00004226 2013-03-04 12:24:11 Matching host:service:dgroup:page 'cscxymweb3.csc.dk:disk:Xymon servers:cscdk/mwsmonitor,cscdk/mwsmonitor' against rule line 1260 00004226 2013-03-04 12:24:11 *** Match with 'MAIL $XYMONADM $XYMONADMREPEAT' *** 00004226 2013-03-04 12:24:11 Mail alert with command '/usr/bin/mail -s "Xymon [12345] cscxymweb3.csc.dk:disk CRITICAL (RED)" 29236260 at sms.csc.dk<mailto:29236260 at sms.csc.dk>' 00004226 2013-03-04 12:24:11 Matching host:service:dgroup:page 'cscxymweb3.csc.dk:disk:Xymon servers:cscdk/mwsmonitor,cscdk/mwsmonitor' against rule line 126
to see which rule triggers the alert.
Regards, Henrik
[Colt Disclaimer] This email is from an entity of the Colt group of companies. Colt Group S.A., K2 Building, Forte 1, 2a rue Albert Borschette, L-1246 Luxembourg, R.C.S. B115679. Corporate and contact information for our entities can be found at http://colt.net/uk/en/Colt-Group-of-Companies/index.htm. Internet communications are not secure and Colt does not accept responsibility for the accurate transmission of this message. Content of this email or its attachments is not legally or contractually binding unless expressly previously agreed in writing by Colt
Xymon mailing list Xymon at xymon.com<mailto:Xymon at xymon.com> http://lists.xymon.com/mailman/listinfo/xymon
Hello everybody,
I have found traces of citrix users tracking in XYMOND_RRD man page and I have seen a citrix user graph in graph.cfg file. But neither contrib./ directory nor citrix.zip are present in current 4.3.10 tarball from SourceForge.
So my questions. Is anyone using this extension? Is it possible to share it with the list? Or where can I find/download it?
Thanks in advance.
Regards.
Massimo Morsiani Information Technology Dept.
Gilbarco S.r.l. via de' Cattani, 220/G 50145 Firenze, Italy tel: +39-055-30941 fax: +39-055-318603 email: massimo.morsiani at gilbarco.com web: http://www.gilbarco.it
Please consider the environment before printing this e-mail
Please be advised that this email may contain confidential information. If you are not the intended recipient, please notify us by email by replying to the sender and delete this message. The sender disclaims that the content of this email constitutes an offer to enter into, or the acceptance of, any agreement; provided that the foregoing does not invalidate the binding effect of any digital or other electronic reproduction of a manual signature that is included in any attachment.
participants (5)
-
Carl.Inglis＠rakon.com
-
henrik＠hswn.dk
-
lebarber＠gmail.com
-
Martin.Ward＠colt.net
-
massimo.morsiani＠gilbarco.com