Getting doubled alerts
Is it normal to get two alert messages if an event matches two rules? Is there a keyword to suppress multiple alert emails from the same event? I've been running 4.0 for a while, but just getting in to configuring alerts. My hobbit-alerts.cfg includes the following:
HOST=* SERVICE=conn MAIL sbrehm at titan.com COLOR=red
HOST=%atscm MAIL sbrehm at titan.com COLOR=red MAIL person2 at titan.com COLOR=red
HOST=%atscs MAIL sbrehm at titan.com COLOR=red MAIL person3 at titan.com COLOR=red
I want alerts for any connection problems, but only want alerts for other hosts if they come from two specific sets of hosts. Unfortunately I'm getting a match for both the first rule and the second or third rule when there is conn alert for one of the two. I'm now using EXSERVICE=conn for myself on rules two and three, but still curious.
Scott Brehm
IT Manager L3 Communications - Titan (ATS/ATAG) 3394 Carmel Mountain Rd, San Diego CA, 92121 858-720-4035
Brehm, Scott wrote:
Is it normal to get two alert messages if an event matches two rules? Is there a keyword to suppress multiple alert emails from the same event? I've been running 4.0 for a while, but just getting in to configuring alerts. My hobbit-alerts.cfg includes the following:
HOST=* SERVICE=conn MAIL sbrehm at titan.com <mailto:sbrehm at titan.com> COLOR=red
HOST=%atscm MAIL sbrehm at titan.com <mailto:sbrehm at titan.com> COLOR=red MAIL person2 at titan.com <mailto:person2 at titan.com> COLOR=red
HOST=%atscs MAIL sbrehm at titan.com <mailto:sbrehm at titan.com> COLOR=red MAIL person3 at titan.com <mailto:person3 at titan.com> COLOR=red
I want alerts for any connection problems, but only want alerts for other hosts if they come from two specific sets of hosts. Unfortunately I'm getting a match for both the first rule and the second or third rule when there is conn alert for one of the two. I'm now using EXSERVICE=conn for myself on rules two and three, but still curious.
Scott Brehm
IT Manager L3 Communications - Titan (ATS/ATAG) 3394 Carmel Mountain Rd, San Diego CA, 92121 858-720-4035
There is/was a STOP statement on a rule I think but not sure if its still there and if it will do what you want it to
Allan
On Wed, Oct 05, 2005 at 03:27:07PM -0700, Brehm, Scott wrote:
Is it normal to get two alert messages if an event matches two rules?
Yes.
Is there a keyword to suppress multiple alert emails from the same event? I've been running 4.0 for a while, but just getting in to configuring alerts. My hobbit-alerts.cfg includes the following:
HOST=* SERVICE=conn MAIL sbrehm at titan.com COLOR=red
HOST=%atscm MAIL sbrehm at titan.com COLOR=red MAIL person2 at titan.com COLOR=red
HOST=%atscs MAIL sbrehm at titan.com COLOR=red MAIL person3 at titan.com COLOR=red
I want alerts for any connection problems, but only want alerts for other hosts if they come from two specific sets of hosts.
As you've found out yourself, EXSERVICE=conn on the two host-specific rules will do it. Instead, you could also use the keyword "STOP" with the "conn" rule - like
HOST=* SERVICE=conn MAIL sbrehm at titan.com COLOR=red STOP
This will make the alert-handler stop looking for recipients after your general "conn" rule has been matched.
Henrik
HI,
Can we monitor applications running on VAX using Hobbit or BB.
Thanks and regards Arun Sopanrao Nale Tata Consultancy Services Limited Mailto: arun.nale at tcs.com Website: http://www.tcs.com
Notice: The information contained in this e-mail message and/or attachments to it may contain confidential or privileged information. If you are not the intended recipient, any dissemination, use, review, distribution, printing or copying of the information contained in this e-mail message and/or attachments to it are strictly prohibited. If you have received this communication in error, please notify us by reply e-mail or telephone and immediately and permanently delete the message and any attachments. Thank you
On Thu, Oct 06, 2005 at 02:09:38PM +0530, arun.nale at tcs.com wrote:
Can we monitor applications running on VAX using Hobbit or BB.
There are two ways of monitoring: Either by looking at your server across the network (e.g. requesting a webpage, trying to connect to a mail server etc); or by running some script locally on your VAX that performs some local checks - e.g. if a certain process or job is running.
Network based monitoring is built into Hobbit, so if you setup a Hobbit server, it will be able to monitor all of the common TCP/IP based services. And even some of the not-so-common ones :-)
Running a script locally means that you must 1) create such a script; and 2) you need a tool to feed the result of your script into Hobbit. This combination is what we call a Hobbit "client", and Hobbit includes client packages for most of the common Unix- like operating systems.
Would it be possible to create a client package for a VAX ? Sure, but I'd need some help from you. You know how to monitor a VAX (it's been 15 years since I last touched one of those), so you could probably come up with a script that checks what the load and disk utilisation is on the box; and what processes and tasks are active.
Second, we need a C compiler for the VAX. Is GNU C (gcc) available? With a C compiler, you can try to build the Hobbit client programs. It might require some tweaking to get the Makefile right for the client, but once that is done you'll have the program needed to send your status from the VAX over to Hobbit.
Regards, Henrik
participants (4)
-
allan＠zandahar.net
-
arun.nale＠tcs.com
-
henrik＠hswn.dk
-
sbrehm＠titan.com