BB Unix Network Monitor - Message

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: {bb} initial page delay





Your first rule does nothing, get rid of it.

Doesn't my first rule (*;;*;;*;*;*:~15) indicate "*" as the recipient, as in ALL recipients? I read the rule as "for all hosts, excluding nothing, for all services, excluding nothing, for all times, and for all recipients set an initial delay of 15 minutes." Are you saying that because the subsequent lines DO NOT have an initial delay specified, it will ignore my first line? Or are you saying my syntax is incorrect?

The effect I am after is this: For all services and recipients, don't page for 10 or 15 minutes if something goes red. If a service is still red after that delay, e-mail my phone(s). Then page every 4 hours until it's recovered.

Is there any way to set a site-wide initial delay?

Thanks for the info,
Jason



Since there is
no recipient noted, it's not even counted, really.  Secondly, if you
want a page delay of 15 minutes set in the bbwarnrules.cfg, you'll
have to set that for each rule that you want it used on.

(However, you do have options.  If you are using bbgen, you can set in
your bb-hosts file that a test shouldn't go red for a specific number
of tests, using the badTEST directive.  Like this:

1.2.3.4 host1.domain.com # test1 test2 test3 badtest1:1:1:3

This will cause host1.domain.com to go yellow after 1 failure of
test1, but not go red until test1 fails three times, which is 15
minutes if you're using the default 300 second delay between tests.)

If you don't use that, or if you don't want to have to put a badTEST
directive in for every single test you're using (including the
defaults, because you would need one for cpu, disk, log, etc), then
you'll have to add a ~15 to  the end of every page rule in
bbwarnrules.cfg.

Remember, when you're writing a paging rule, make it as specific to
the server(s)/test(s) that you're trying to match as you can.  It may
not be possible to cover all servers and/or tests in one rule, even in
the same host group.  Don't worry if you feel like you have to write
44 lines to get one host group paging correctly.  Sometimes it takes
that.



There was mention of a bug with this syntax, but that may have been in
an older version?  Anyone have details on that?

Here is the relevant portion of my bbwarnrules.cfg file:
------------------------------
# Don't page unless something is down for 15 minutes.
*;;*;;*;*;*:~15

# email admin about everything (except things explicitly
# excluded below)
*;;*;;*;*;admin@abc.com

# Big Brother Pagers
# See /etc/aliases for the proper e-mail addresses. To change who pages
go to, modify those aliases.  Don't change this.
#
#Next 5 lines are the default:
#Paul
hg-hostgroup1;;*;;*;*;ext-ex4-btipager_one admin@abc.com
#Rob
hg-hostgroup2;;*;;*;*;ext-ex4-btipager_two admin@abc.com
#Jason
hg-hostgroup3;;*;;*;*;ext-ex5-btipager_three admin@abc.com
#Kevin
hg-kevin;;*;;*;*;ext-ex4-btipager_four admin@abc.com
#Neal
hg-neal;;*;;*;*;ext-ex4-btipager_five admin@abc.com
#Mark K.
hg-mark;;*;;*;*;ext-ex4-btipager_six admin@abc.com

#Everyone
hg-hostedservers;;*;;*;*;ext-ex4-btipager_one ext-ex4-btipager_two
ext-ex4-btipager_three admin@abc.com







--
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-=-=-=-=-=-=-=-=-=
To unsubscribe from this list, or to subscribe to the bb-digest list
send e-mail to mailto:majordomo@bb4.com with unsubscribe bb -and/or-
subscribe bb-digest in the BODY of the message.


Home | Main Index | Thread Index