<br><font size=2 face="sans-serif">Hi List,</font>
<br>
<br><font size=2 face="sans-serif">I stumbled over a strange problem yesterday.</font>
<br><font size=2 face="sans-serif">I have started to set escalations and splitted notifications depending on time/severity.</font>
<br><font size=2 face="sans-serif">To my astounding Nagios does not behave as intended and I cannot see any fault</font>
<br><font size=2 face="sans-serif">in my configuration.</font>
<br>
<br><font size=2 face="sans-serif">The desired behavior:</font>
<br>
<br><font size=2 face="sans-serif">24x7:</font>
<br><font size=2 face="sans-serif">- Send Emails for D,R</font>
<br>
<br><font size=2 face="sans-serif">During the day:</font>
<br><font size=2 face="sans-serif">- Send SMS on DOWN (first notification only)</font>
<br><font size=2 face="sans-serif">- Send SMS on RECOVERY (second notification and later only)</font>
<br>
<br><font size=2 face="sans-serif">During the night:</font>
<br><font size=2 face="sans-serif">- Send SMS on DOWN (second notification only)</font>
<br><font size=2 face="sans-serif">- Send SMS on RECOVER (third notification and later only)</font>
<br>
<br><font size=2 face="sans-serif">So during the days we want an immediate SMS on a host DOWN alert and SMS on RECOVERY.</font>
<br><font size=2 face="sans-serif">During the nights we only want a SMS for the second DOWN alert and a SMS for RECOVERY later on.</font>
<br><font size=2 face="sans-serif">We always want Emails 24x7 to have a better overview of network downs/ups.</font>
<br>
<br><font size=2 face="sans-serif">For some strange reason Nagios fails to notify us via SMS if the host goes up after the</font>
<br><font size=2 face="sans-serif">initial DOWN notification. It does notify via SMS though if the host goes up after the second</font>
<br><font size=2 face="sans-serif">DOWN notification (which is send as email).</font>
<br>
<br><font size=2 face="sans-serif">Scenarios:</font>
<br>
<br><font size=2 face="sans-serif">10:00 Host goes DOWN -> Email + SMS alert generated (OK!)</font>
<br><font size=2 face="sans-serif">10:05 Host goes UP -> Email alert generated (NOT OK! SMS should be sent too, but is not triggered for an unknown reason)</font>
<br>
<br><font size=2 face="sans-serif">10:00 Host goes DOWN -> Email + SMS alert generated (OK!)</font>
<br><font size=2 face="sans-serif">10:10 Host still DOWN -> Email alert generated (OK!)</font>
<br><font size=2 face="sans-serif">10:15 Host goes UP -> Email + SMS alert generated (OK!)</font>
<br>
<br><font size=2 face="sans-serif">The escalation configuration is as follows:</font>
<br>
<br><font size=2 face="sans-serif">#</font>
<br><font size=2 face="sans-serif"># Die erste Warnung immer auch per SMS rausschicken</font>
<br><font size=2 face="sans-serif">#</font>
<br><font size=2 face="sans-serif">define hostescalation {</font>
<br><font size=2 face="sans-serif">hostgroup_name Router,SAP,Notes,app-server,Fileserver,Domaincontroller,Switch</font>
<br><font size=2 face="sans-serif">contact_groups SMS-Alarm</font>
<br><font size=2 face="sans-serif">first_notification 1</font>
<br><font size=2 face="sans-serif">last_notification 1</font>
<br><font size=2 face="sans-serif">notification_interval 10</font>
<br><font size=2 face="sans-serif">escalation_period daylight_hours</font>
<br><font size=2 face="sans-serif">escalation_options d</font>
<br><font size=2 face="sans-serif">}</font>
<br><font size=2 face="sans-serif">#</font>
<br><font size=2 face="sans-serif"># Ab der zweiten Notification nur noch das Recovery per SMS rausschicken</font>
<br><font size=2 face="sans-serif">#</font>
<br><font size=2 face="sans-serif">define hostescalation {</font>
<br><font size=2 face="sans-serif">hostgroup_name Router,SAP,Notes,app-server,Fileserver,Domaincontroller,Switch</font>
<br><font size=2 face="sans-serif">contact_groups SMS-Alarm</font>
<br><font size=2 face="sans-serif">first_notification 2</font>
<br><font size=2 face="sans-serif">last_notification 0</font>
<br><font size=2 face="sans-serif">notification_interval 10</font>
<br><font size=2 face="sans-serif">escalation_period daylight_hours</font>
<br><font size=2 face="sans-serif">escalation_options r</font>
<br><font size=2 face="sans-serif">}</font>
<br><font size=2 face="sans-serif">#</font>
<br><font size=2 face="sans-serif"># Nachts immer nur die 2te Notification per SMS rausschicken</font>
<br><font size=2 face="sans-serif">#</font>
<br><font size=2 face="sans-serif">define hostescalation {</font>
<br><font size=2 face="sans-serif">hostgroup_name Router,SAP,Notes,app-server,Fileserver,Domaincontroller,Switch</font>
<br><font size=2 face="sans-serif">contact_groups SMS-Alarm</font>
<br><font size=2 face="sans-serif">first_notification 2</font>
<br><font size=2 face="sans-serif">last_notification 2</font>
<br><font size=2 face="sans-serif">notification_interval 10</font>
<br><font size=2 face="sans-serif">escalation_period night_hours</font>
<br><font size=2 face="sans-serif">escalation_options d</font>
<br><font size=2 face="sans-serif">}</font>
<br><font size=2 face="sans-serif">#</font>
<br><font size=2 face="sans-serif"># Danach nur noch die Recovery per SMS</font>
<br><font size=2 face="sans-serif">#</font>
<br><font size=2 face="sans-serif">define hostescalation {</font>
<br><font size=2 face="sans-serif">hostgroup_name Router,SAP,Notes,app-server,Fileserver,Domaincontroller,Switch</font>
<br><font size=2 face="sans-serif">contact_groups SMS-Alarm</font>
<br><font size=2 face="sans-serif">first_notification 3</font>
<br><font size=2 face="sans-serif">last_notification 0</font>
<br><font size=2 face="sans-serif">notification_interval 10</font>
<br><font size=2 face="sans-serif">escalation_period night_hours</font>
<br><font size=2 face="sans-serif">escalation_options r</font>
<br><font size=2 face="sans-serif">}</font>
<br><font size=2 face="sans-serif">#</font>
<br><font size=2 face="sans-serif"># Rund um die Uhr die Notifications per Email rausschicken</font>
<br><font size=2 face="sans-serif">#</font>
<br><font size=2 face="sans-serif">define hostescalation {</font>
<br><font size=2 face="sans-serif">hostgroup_name Router,SAP,Notes,app-server,Fileserver,Domaincontroller,Switch</font>
<br><font size=2 face="sans-serif">contact_groups master-admins</font>
<br><font size=2 face="sans-serif">first_notification 1</font>
<br><font size=2 face="sans-serif">last_notification 0</font>
<br><font size=2 face="sans-serif">notification_interval 10</font>
<br><font size=2 face="sans-serif">escalation_period 24x7</font>
<br><font size=2 face="sans-serif">escalation_options d,r</font>
<br><font size=2 face="sans-serif">}</font>
<br>
<br><font size=2 face="sans-serif">Any hints? Or did I make a mistake that I fail to see?</font>
<br>
<br><font size=2 face="sans-serif">regards</font>
<br><font size=2 face="sans-serif"> sash</font>
<br>
<br><font size=2 face="sans-serif">--------------------------------------------------<br>
Sascha Runschke<br>
Netzwerk Administration<br>
IT-Services<br>
<br>
ABIT AG<br>
Robert-Bosch-Str. 1<br>
40668 Meerbusch<br>
<br>
Tel.:+49 (0) 2150.9153.226<br>
mailto:SRunschke@abit.de<br>
<br>
http://www.abit.net<br>
http://www.abit-epos.net<br>
http://www.my-academy.net<br>
--------------------------------------------------<br>
Der Inhalt dieser Email sowie die Anhänge sind ausschließlich für den bezeichneten Adressaten bestimmt. Wenn Sie nicht der vorgesehene Adressat dieser Email oder dessen Vertreter sein sollten, so beachten Sie bitte, daß jede Form der Kenntnisnahme, Veröffentlichung, Vervielfältigung oder Weitergabe des Inhalts dieser Email unzulässig ist. Wir möchten Sie außerdem darauf hinweisen, daß die Kommunikation per Email über das Internet unsicher ist, da fuer unberechtigte Dritte grundsätzlich die Möglichkeit der Kenntnisnahme und Manipulation besteht. Wenn Sie diese Nachricht versehentlich erhalten, informieren Sie bitte den Absender und löschen diese Nachricht mit den Anhängen. Herzlichen Dank<br>
<br>
The information and any attachments contained in this email are intended solely for the addressee. Access to this email by anyone else is unauthorized. If you are not the intended recipient, any form of disclosure, reproduction, distribution or any action taken or refrained from in reliance on it, is prohibited and may be unlawful. We also like to inform you that communication via email over the internet is insecure because third parties may have the possibility to access and manipulate emails. If you have received the message in error, please advise the sender and delete the message and any attachments. Thank you very much.</font>