Welcome to Pandora FMS Community › Forums › Community support › Alerting
-
Alerting
Posted by yduma on October 10, 2008 at 04:46Hi
Can pandora next:
If something down – create alert – this down
if all down – create only one alert that ALL down?
I think I should use combined alert’s, and I can create alert when all down, but how to disable for this time other alert’s?My last try – ServerA, monitors – check 80 and 443 port. Alert’s – when 80 down, when 443 down and combined – when 80 AND 443 down. I receive 3 letter’s, but need only one. Where is problem?
Regard’syduma replied 16 years, 4 months ago 3 Members · 8 Replies -
8 Replies
-
-
::
Combined alert i will recive when 80 and 443 is down in the same time, but when pb will only in 80? nothing?
maybe it was not good example. Let’s take 80 and 25 port.
I want next – receive letter when 80 down, if in same time 25 down – I want to receive only combined alert ( like – AGENT XXX down) and if only 25 – I want receive letter that Agent XXX port 25 down. In 3 different situation – 3 different letter’s, not only 1.Thanks!
-
-
-
-
::
Let me explaine better.
If you have server, where pandora installed, and when you receive alert you want know what happend, true?
If only apache down – I want to receive letter – Apache on … down
if something with postfix – only – Postfix down
but If Server down ( or communication line) – I want to receive only – Server down(communication) , not – apache down, postfix down and server down, because in first two alert’s is no senceDo you understand what I mean?
thank’s! -
::
Yeah
Make one alert checking if host don’t reply to ICMP check, callit “host down”.
Make another COMBINED alert with this components:
1. An alert called “APACHE DOWN” who checks if apache process is alive.
2. Previous ALERT (host down) with NOT clause.If Apache is DOWN and host is NOT DOWN, they mail you an alert as “Apache down”.
If host is down, they send you an alert for “host down”.
The same way for the other two alerts…
If you want to make a more complex alert method (cascade alerts, dependencies on topology, etc) you always can combine complex alerts into complex alerts (with a max. depth of 5 levels). This way of alerting take some time to understand, but is extremately powerful because you can mix ANY data and ANY kind of data (numerical, incremental, text).
-