Welcome to Pandora FMS Community!

Find answers, ask questions, and connect with our community around the world.

  • Posted by yduma on October 10, 2008 at 04:46

    Hi

    Can pandora next:
    If something down – create alert – this down
    if all down – create only one alert that ALL down?
    I think I should use combined alert’s, and I can create alert when all down, but how to disable for this time other alert’s?

    My last try – ServerA, monitors – check 80 and 443 port. Alert’s – when 80 down, when 443 down and combined – when 80 AND 443 down. I receive 3 letter’s, but need only one. Where is problem?
    Regard’s

    yduma replied 16 years, 4 months ago 3 Members · 8 Replies
  • 8 Replies
  • Sancho

    Administrator
    October 10, 2008 at 10:23
    2321 Karma points
    Community awards: bulb Bright ideas
    Community rank: tentacle_master_icon Tentacle Master
    Like it
    Up
    0
    Down
    Drop it
    ::

    So you need to create ONLY a email alert and three compound only alerts. WHEN all three alerts are fired, this trigger the combined that mails you. other three are in RED but dont “exec” nothing, it’s values are used only for combined one.

  • yduma

    Member
    October 13, 2008 at 02:49
    2 Karma points
    Community rank: tentacle-noob-1 Tentacle noob
    Like it
    Up
    0
    Down
    Drop it
    ::

    Combined alert i will recive when 80 and 443 is down in the same time, but when pb will only in 80? nothing?
    maybe it was not good example. Let’s take 80 and 25 port.
    I want next – receive letter when 80 down, if in same time 25 down – I want to receive only combined alert ( like – AGENT XXX down) and if only 25 – I want receive letter that Agent XXX port 25 down. In 3 different situation – 3 different letter’s, not only 1.

    Thanks!

  • manu

    Member
    October 13, 2008 at 04:30
    0 Karma points
    Community rank: tentacle-noob-1 Tentacle noob
    Like it
    Up
    0
    Down
    Drop it
    ::

    You can have an alert for the port 80, another one for the 25 one (both simples) and then the combined one when both of them are down.

  • yduma

    Member
    October 13, 2008 at 08:34
    2 Karma points
    Community rank: tentacle-noob-1 Tentacle noob
    Like it
    Up
    0
    Down
    Drop it
    ::

    In this case when 80 and 25 down – I will receive 3 alert – 80 down, 25 down, and Agent down, but I need only one.
    How can I do that?

  • manu

    Member
    October 13, 2008 at 08:56
    0 Karma points
    Community rank: tentacle-noob-1 Tentacle noob
    Like it
    Up
    0
    Down
    Drop it
    ::

    So, then 1 combined with all those 3 you need 🙂

  • yduma

    Member
    October 14, 2008 at 03:48
    2 Karma points
    Community rank: tentacle-noob-1 Tentacle noob
    Like it
    Up
    0
    Down
    Drop it
    ::

    Let me explaine better.
    If you have server, where pandora installed, and when you receive alert you want know what happend, true?
    If only apache down – I want to receive letter – Apache on … down
    if something with postfix – only – Postfix down
    but If Server down ( or communication line) – I want to receive only – Server down(communication) , not – apache down, postfix down and server down, because in first two alert’s is no sence

    Do you understand what I mean?
    thank’s!

  • Sancho

    Administrator
    October 14, 2008 at 04:08
    2321 Karma points
    Community awards: bulb Bright ideas
    Community rank: tentacle_master_icon Tentacle Master
    Like it
    Up
    0
    Down
    Drop it
    ::

    Yeah

    Make one alert checking if host don’t reply to ICMP check, callit “host down”.

    Make another COMBINED alert with this components:
    1. An alert called “APACHE DOWN” who checks if apache process is alive.
    2. Previous ALERT (host down) with NOT clause.

    If Apache is DOWN and host is NOT DOWN, they mail you an alert as “Apache down”.

    If host is down, they send you an alert for “host down”.

    The same way for the other two alerts…

    If you want to make a more complex alert method (cascade alerts, dependencies on topology, etc) you always can combine complex alerts into complex alerts (with a max. depth of 5 levels). This way of alerting take some time to understand, but is extremately powerful because you can mix ANY data and ANY kind of data (numerical, incremental, text).

  • yduma

    Member
    October 14, 2008 at 05:29
    2 Karma points
    Community rank: tentacle-noob-1 Tentacle noob
    Like it
    Up
    0
    Down
    Drop it
    ::

    Thank you very mush. Logical think is very powerfull thing!!!