Pandora FMS community forums

Full Version: Alerts fire too soon
You're currently viewing a stripped down version of our content. View the full version with proper formatting.
Hello,

I have defined an alert template called "critical condition after 3 times" with following conditions:

days of week = all
use special day list = unchecked
set initial time = 12:00:00
set end time = 12:00:00
time threshold = 1 day
min. number of alerts = 3
max. number of alerts = 3 
reset counter for non-sustained alerts = unchecked
default action = mail to admin
condition type = critical status

on the next page:
alert recovery = enabled
no special settings, just default values

Then the agent has the following alert attached:

module = cpu_load
template = critical condition after 3 times
actions = mail to admin (default) / mail to admin (always)

The action here is defined by:
module = cpu_load
action = mail to admin
number of alerts to match = 0 to 0
threshold = 0

But the problem is that the email is sent right after the FIRST alert, not after the THIRD. But why? What am I missing?

Thanks for your help!
(08-22-2018, 02:32 PM)JPSelter Wrote: [ -> ]Hello,

I have defined an alert template called "critical condition after 3 times" with following conditions:

days of week = all
use special day list = unchecked
set initial time = 12:00:00
set end time = 12:00:00
time threshold = 1 day
min. number of alerts = 3
max. number of alerts = 3 
reset counter for non-sustained alerts = unchecked
default action = mail to admin
condition type = critical status

on the next page:
alert recovery = enabled
no special settings, just default values

Then the agent has the following alert attached:

module = cpu_load
template = critical condition after 3 times
actions = mail to admin (default) / mail to admin (always)

The action here is defined by:
module = cpu_load
action = mail to admin
number of alerts to match = 0 to 0
threshold = 0

But the problem is that the email is sent right after the FIRST alert, not after the THIRD. But why? What am I missing?

Thanks for your help!

Good morning JPSelter,

Try to do this,

Create another action called mail to XXX where you put the email you want to be send and the parameters needed to make the correct acction.

Afterwards create the new template with the same parameters that you showed in the post with the new action included.

Then create the alert in the List of alerts as shown in the image attached.

Tell me after trying this option how the things went.

Alberto
Hello Alberto,

thanks for your quick reply! Looks good so far. The old action fired on the first alert, the new action a few minutes later after 3 alerts occured. Thanks!

kind regards, Peter