Re: {bb} Keep alerting about an entry in the messages file

[Asif Iqbal <iqbala-bb@qwestip.net>]

I am reposting my question since I dod not get any reply/suggestion on
this

Asif Iqbal wrote:
> In other words,
> 
> I rather not be paged for an entry in the /var/adm/messages that has
> the smae timestamp since the first alert about that entry came through.
> 
> Is that attainable?
> 
> Thanks
> 
> Asif Iqbal wrote:
> > Hi All
> > 
> > I am running bb1.9c with bbgen 2.15. I noticed that on one of my server
> > the /var/adm/messages file has a CRITICAL entry which was fixed in 10
> > mins. However since the CRITICAL entry is still there I am keep getting
> > alert messages. Is there a logic I can use to stop the alert (with the
> > same alertcode) if it does not see another same CRTICAL entry after
> > certain period?
> > 
> > For example say I have Cisco Router who sends the log to my syslog
> > server when one of the interface goes down. Now, bigbrother client scans
> > my syslog and alerts me when it sees CRITICAL - cisco interface is down.
> > Hwoever in 10 mins my Cisco interface got fixed. But bigbrother client
> > is scanning the syslog again in ievery 5 mins (I think that is the default) and
> > is keep alerting me. I was wondering if I could have a login where it
> > check the entry only twice in 5 mins and if it does not see new time
> > stamp with 10 mins for the same entry it won't alert again and assume it
> > got fixed.
> > 
> > Is that possible?
> > 
> > Thanks a lot
> > 
> > 

-- 
Asif Iqbal
PGP Key: 0xE62693C5 KeyServer: pgp.mit.edu
There's no place like 127.0.0.1
--
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-=-=-=-=-=-=-=-=-=
To unsubscribe from this list, or to subscribe to the bb-digest list
send e-mail to mailto:majordomo@bb4.com with unsubscribe bb -and/or-
subscribe bb-digest in the BODY of the message.