RE: {bb} Limiting the duration of a 'red' msgs alert

[Jeff Younker <Jeff@mdli.com>]

Steve Hillman writes:

	Has anyone written a patch to limit how long a 'bad
	message' in /var/adm/messages causes a red alert
	for? On some of our less verbose machines, we only
	rotate the logs once a week, which means the msgs
	column stays red long after the problem has been
	handled or acknowledged. Since I don't want to zero
	out my log file whenever I solve a problem it
	reported, it would be nice to tell big brother to
	stop reporting it after some amount of time...

My extension The State when used in conjunction with a log monitoring
program such as swatch will give you the desired functionality.

	(for example, red for one hour (with an accompanying page), then
	yellow for 4 hours, then green again).

Currently you have to submit multiple messages to The State with different
activation and expiration times to get this behavior, but built in
escalation (and de-escalation) will be in the next version. 

	If no one has done it, I'll get to work on it myself...

This is precisely how The State came about.

- Jeff Younker - jeff@mdli.com - These are my opinions, not MDL's -

--
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-=-=-=-=-=-=-=-=-=
To unsubscribe from this list, or to subscribe to the bb-digest list
send e-mail to mailto:majordomo@bb4.com with unsubscribe bb -and/or-
subscribe bb-digest in the BODY of the message.