-
templates for alerts, problem adding alerts
Hi people.
i have an idea for a new function, because it will be a great help for save time.
i have problems adding alerts to agents, because i don’t know because i can’t copy multiple alerts to multiple agents (it’s not working manage agents / manage config / copy alerts) when i do that task all alerts are copied to first agent (the same problem was reported few versions before (i think) i have (Pandora FMS v2.1 – Build PC090325)
but this is another question.so the main reason is and i think it’s possible to do this feature:
create a new table with a template for alerts linked to a module (may be linked to description)
for ex.
i have a proc module that inform if dns is wrong or not
but not all agents have this module, so i can’t add that alert for all agents.i think that it’s possible do an automatic task to search modules, search the same description in alert template, compare with alerts table and if that module isn’t on it, add the alert automatically.
any suggestion about this?
another question, may be related with the same version or config.
the operation / agentes / estado_grupo shows all in wrong state.
see pic. -
11 Replies
-
The entire alert system has been upgraded in next version (3.0). Take a look, it’s based on generic templates assigned to modules. This templates has the condition on fire (a total of 6 different conditions, like =, !=, , regexp, WARNING or CRITITAL). They are defined once, and you can apply to any of your modules.
Actions are applicable on a escalation concept (number of times that condition does) and applicable to module/alert template. This allow to alter a template globally, making global changes to any module who are currently doing it. In the template you can also define a “default” action and customize later.
It’s difficult to explain, we’re working on documentation, it’s fully functional and even includes a migration script. Please take a look.
Nice screen ¿how many agent, modules and alerts are you running?.
-
-
-
No thanks, but it’s weird, running the pandoradb should “delete” all non-init modules. Check that your /usr/share/pandora/util/pandora_db.pl script has, in the bottom of file, something similar to
pandoradb_main {
pandora_purgedb ($config_days_purge, $dbname, $dbuser, $dbpass, $dbhost);
pandora_checkdb_consistency ($dbname, $dbuser, $dbpass, $dbhost);
pandora_compactdb ($config_days_compact, $dbname, $dbuser, $dbpass, $dbhost);
print “n”;
exit;
}the function pandora_checkdb_consistency (without comments) delete all non-init modules, check twice, because has too many unknown modules impact on global performance.
-
-
Hi suzdal,
Can you try one thing regarding the alerts copy?
Try to mark “copy modules and alerts” to an agent and see if it works marking both, so we can isolate the problem to just copying alerts (without copying the module along with it)About the group view, please file a bug report 🙁 (mark the 2.1 version please)
-
i tried this:
copy modules from a recon agent to another 2 recon agents.. no problem
copy modules & alerts from a recon agent to another 2 recon agents.. no problemcopy alerts from a recon agent to another 2 recon agents.. copied both to first agent
copy alerts from a data agent to another 2 data agents.. copied both to first agent
copy modules & alerts from a data agent to another 2 data agents.. no problem, modules doesn’t work, because remote agent don’t sent any info.if i mark to copy 2 differents alerts from one agent to another one, it copy the 2 alerts but to a single one module, not for the 2 modules.
tell me if i should open a bug about this and groups view or i wait to 3.0 release
-
-
-
Hi guys.
I have already discussed this bug here:
http://openideas.info/vanilla/comments.php?DiscussionID=736
And opened a tracker for this issue to (ID: 2549106):
http://sourceforge.net/tracker/?func=detail&aid=2549106&group_id=155200&atid=794852
Unfortunatly, I’m still using version 2.0 and could not assure that this problem happens in version 2.1 too. Now with suzdal posts, we could see that the problems remains the same.
Regards.
