BB Unix Network Monitor - Message
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
RE: {bb} Keep alerting about an entry in the messages file
- To: <bb@bb4.com>
- Subject: RE: {bb} Keep alerting about an entry in the messages file
- From: "Kimberly McKinnis" <kmckinnis@macrovision.com>
- Date: Sun, 11 Jul 2004 14:20:37 -0700
- Content-class: urn:content-classes:message
- Content-transfer-encoding: 8bit
- Content-type: text/plain; charset="US-ASCII"
- Reply-to: bb@bb4.com
- Sender: owner-bb@bb4.com
- Thread-index: AcRnjH3YwKPjdoiZSSOQ6F7eVAiyBQAAETNA
- Thread-topic: {bb} Keep alerting about an entry in the messages file
Perhaps there is a way to do this with the custom paging scripts? Parse
the log to see if there is a duplicate and ignore duplicates?
-----Original Message-----
From: owner-bb@bb4.com [mailto:owner-bb@bb4.com] On Behalf Of Asif Iqbal
Sent: Sunday, July 11, 2004 2:03 PM
To: bb@bb4.com
Subject: Re: {bb} Keep alerting about an entry in the messages file
I am reposting my question since I dod not get any reply/suggestion on
this
Asif Iqbal wrote:
> In other words,
>
> I rather not be paged for an entry in the /var/adm/messages that has
> the smae timestamp since the first alert about that entry came
through.
>
> Is that attainable?
>
> Thanks
>
> Asif Iqbal wrote:
> > Hi All
> >
> > I am running bb1.9c with bbgen 2.15. I noticed that on one of my
server
> > the /var/adm/messages file has a CRITICAL entry which was fixed in
10
> > mins. However since the CRITICAL entry is still there I am keep
getting
> > alert messages. Is there a logic I can use to stop the alert (with
the
> > same alertcode) if it does not see another same CRTICAL entry after
> > certain period?
> >
> > For example say I have Cisco Router who sends the log to my syslog
> > server when one of the interface goes down. Now, bigbrother client
scans
> > my syslog and alerts me when it sees CRITICAL - cisco interface is
down.
> > Hwoever in 10 mins my Cisco interface got fixed. But bigbrother
client
> > is scanning the syslog again in ievery 5 mins (I think that is the
default) and
> > is keep alerting me. I was wondering if I could have a login where
it
> > check the entry only twice in 5 mins and if it does not see new time
> > stamp with 10 mins for the same entry it won't alert again and
assume it
> > got fixed.
> >
> > Is that possible?
> >
> > Thanks a lot
> >
> >
--
Asif Iqbal
PGP Key: 0xE62693C5 KeyServer: pgp.mit.edu
There's no place like 127.0.0.1
--
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-=-=-=-=-=-=-=-=-=
To unsubscribe from this list, or to subscribe to the bb-digest list
send e-mail to mailto:majordomo@bb4.com with unsubscribe bb -and/or-
subscribe bb-digest in the BODY of the message.
--
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-=-=-=-=-=-=-=-=-=
To unsubscribe from this list, or to subscribe to the bb-digest list
send e-mail to mailto:majordomo@bb4.com with unsubscribe bb -and/or-
subscribe bb-digest in the BODY of the message.
Home |
Main Index |
Thread Index