Alert Configuration

Started by Aron Schneider, November 17, 2009, 12:17:25 AM

Previous topic - Next topic

Aron Schneider

Thanks very much for the utility.  We're trying to make this solution part of our network monitorning.  We have the following questions:

1. How do we disable alerts and notifications of a sys_node_down\sys_node_up status during a set time period?  For example, during the 12am to 4am hours, the majority of our servers go through a restart process.  How do we configure the scheduling so that the email notification of sys_node_down and sys_node_up are not captured over a certain time period?

2. How do we configure the email alerts to only send once email every 5 minutes and stop after 4 emails when a sys_node_down event occurs.  In other words, we've created an event processing policy for sys_node_up and sys_node_down for sending an email notification once when an event occurs.  How do we create an email event so that we are notified once every 5 minutes with a max of 4 emails?

Thanks in advance.

Aron

Victor Kirhenshtein

Hello!

Quote from: Aron Schneider on November 17, 2009, 12:17:25 AM
1. How do we disable alerts and notifications of a sys_node_down\sys_node_up status during a set time period?  For example, during the 12am to 4am hours, the majority of our servers go through a restart process.  How do we configure the scheduling so that the email notification of sys_node_down and sys_node_up are not captured over a certain time period?

You can achieve this by adding additional filtering script to the rule. Script for checking if current time is not between 00:00 and 04:00 (04:00 not included) may look like following:


sub main()
{
   now = localtime();
   return now->hour >= 4;
}



Quote from: Aron Schneider on November 17, 2009, 12:17:25 AM
2. How do we configure the email alerts to only send once email every 5 minutes and stop after 4 emails when a sys_node_down event occurs.  In other words, we've created an event processing policy for sys_node_up and sys_node_down for sending an email notification once when an event occurs.  How do we create an email event so that we are notified once every 5 minutes with a max of 4 emails?

There are no easy way to achieve this. However, you can try the following:

1. Create custom event, like NODE_STILL_DOWN;
2. In processing policy, add action that runs a script on server; this script should run nxevent tool four times to post NODE_STILL_DOWN event to server four times with 5 minutes interval, and then exit;
3. Add event processing policy rule for NODE_STILL_DOWN event - it should check if node is still down and if yes, send additional email.

Hope this helps!

Best regards,
Victor