multiple alerts for the same service
Eli Stair
estair at ilm.com
Tue Mar 14 19:53:02 CET 2006
The way check_log works is to compare the current log vs. the log at the
time the last check was run so that behaviour is "normal"... I don't
recall if I changed this or not, but I have the output set to summarize
the number of instances matches, and alert based on that value, so the
check becomes effectively "this many alerts over this timeperiod". IMO
this plugin is really only useful for this method.
Extending this in perl to foreach over the search pattern, and generate
an alert directly (via the CGI/command file) instead of having the
return value return state and Nagios generate the alert directly... is
simple (if unorthodox). That's one way I can think of off hand that
would let you fire the check at scheduled time intervals, and still have
a single alert generated for _each_ entry in the log since the last
check. At the same time, it'd be smaller/faster to just use a diff
since the last check, vs the entire file (gets bloated/slow with a huge
number of hosts, esp. if they go log-happy).
/eli
Julien Ford wrote:
> Hello,
>
> I'm monitoring a log file with the check_log plugin.
>
> The plugin tries to find patterns in the log file and
> if it finds, sends an alert to the nagios server. In
> nagios this service is volatile,passive and has a
> "max_check_attempts" to 1.
>
> My trouble is when there are two or more alerts for
> the same service, only the last is show in the web
> interface and only this one can by acknowledge.
>
> Is it possible to show in the web interface all alerts
> and to acknowledge them independently ? If the last
> alert is acknowledged is it possible that the service
> become OK only if there isn't any previous
> unacknowledged alert ?
>
> Thanks.
>
> Regards,
> Julien
>
>
> -------------------------------------------------------
> This SF.Net email is sponsored by xPML, a groundbreaking scripting language
> that extends applications into web and mobile media. Attend the live webcast
> and join the prime developer group breaking into this new coding territory!
> http://sel.as-us.falkag.net/sel?cmd=k&kid0944&bid$1720&dat1642
> _______________________________________________
> Nagios-users mailing list
> Nagios-users at lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/nagios-users
> ::: Please include Nagios version, plugin version (-v) and OS when reporting any issue.
> ::: Messages without supporting info will risk being sent to /dev/null
>
-------------------------------------------------------
This SF.Net email is sponsored by xPML, a groundbreaking scripting language
that extends applications into web and mobile media. Attend the live webcast
and join the prime developer group breaking into this new coding territory!
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=110944&bid=241720&dat=121642
_______________________________________________
Nagios-users mailing list
Nagios-users at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting any issue.
::: Messages without supporting info will risk being sent to /dev/null
More information about the Users
mailing list