<html xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns="http://www.w3.org/TR/REC-html40"> <head> <meta http-equiv=Content-Type content="text/html; charset=us-ascii"> <meta name=Generator content="Microsoft Word 11 (filtered medium)"> <title>Re: [Nagios-users] problem w/ check_log2.pl</title> <style>  </style> </head> <body lang=EN-US link=blue vlink=purple> <div class=Section1> <o:p> </o:p> <div id=idOWAReplyText87435> <div> Hello everybody.<o:p></o:p> I am running Nagios 1.2b and 2.01 at two separate locations. Both on Redhat 7.3<o:p></o:p> The issue I am running into is a large number of false alerts, which due to the nature of what we are monitoring. (In reality they are real alerts but they immediately recover – Nagios is working to well!) <o:p></o:p> We monitor our customers servers who are widely distributed on the net. Most are on DSL, cable or wireless connections. The customers we have on non-dedicated lines are generating real errors whenever they have to reboot a cable modem etc, but they always recover within a few minutes. Our alerts typically read “10:48 Host1 is down” then immediately “10:48 Service xxx is down” (repeat for all services) then followed by “10:48 Host1 is up” followed by “10:48 Service xxx has recovered” (repeat again)<o:p></o:p> Therefore, my question is on the host/service checks can I have it recheck a host/service when a failure occurs after 5 or 10 seconds prior to generating the first alert? Perhaps configuring it to only send an email after the 2nd error condition is seen. Simply double checking prior to generating the alert would be helpful to us.<o:p></o:p> <o:p> </o:p> Thanks all,<o:p></o:p> -Don McCallum<o:p></o:p> mccallum@nemsys.com <o:p></o:p> 419-243-3603x113<o:p></o:p> Nemsys LLC <o:p></o:p> </div> </div> </div> </body> </html>