Ryan, this worked great, thanks for the suggestion!
Tony Guadagno O +1 585 577 1003 C +1 585 703 6700 E tonyg@guadagnoconsulting.commailto:tonyg@guadagnoconsulting.com [cid:image001.jpg@01D84DD6.FC9912E0]
From: Ryan, Spencer J. Ryan@millercanfield.com Sent: Monday, November 27, 2023 8:24 PM To: Tony Guadagno tonyg@guadagno.org; Observium observium@lists.observium.org Subject: RE: [Observium] Re: is there an alert kill switch?
There are no documented API calls available to manipulate “scheduled maintenance”, so setting the device ignore is the only “correct” way of doing it programmatically.
I’m not sure of your setup, but I can think of a few reasons why we’d never want to globally disable alerts outside of very rare instances. Mainly we have hundreds of devices and we wouldn’t want to suppress alarms from a router because a windows/linux box is getting patched. Second, if you’re using the API to ignore/un-ignore devices there will be log entries for an audit trail.
Sending 75 API requests should take a few seconds tops, not sure why you don’t want to do that.
Anyway, if you’re really inclined, you can keep two copies of config.php, with one of them having “$config['alerts']['disable']['all'] = true;
And copy those into config.php as necessary, it should take effect immediately (the next poller cycle)
If you go to Gear-->Global Settings-->Edit you can see all the possibilities, items set in the config file are not changeable via the web, but anything not explicitly set in config.php can be set via the web.
Hope that helps.
________________________________ Spencer J. Ryan| Manager, Technology and Infrastructure Miller Canfield T +1.313.496.7979 | F +1.313.496.7500
________________________________
From: Tony Guadagno <tonyg@guadagno.orgmailto:tonyg@guadagno.org> Sent: Monday, November 27, 2023 7:45 PM To: Ryan, Spencer J. <Ryan@millercanfield.commailto:Ryan@millercanfield.com>; Observium <observium@lists.observium.orgmailto:observium@lists.observium.org> Subject: RE: [Observium] Re: is there an alert kill switch?
Caution: This is an external email. Do not open attachments or click links from unknown or unexpected emails.
Spencer, thanks, but as I said, I would like to disable alerting for the whole system. I have about 75 servers and I would not want to call the api 75 times, I would like one way to disable alerting.
I am wondering if there is a php file I can rename that would render alerting non-functional. I can then rename it back when I am through.
thanks
Tony Guadagno O +1 585 577 1003 C +1 585 703 6700 E tonyg@guadagnoconsulting.commailto:tonyg@guadagnoconsulting.com [cid:image001.jpg@01DA2204.35E7D3D0]
From: Ryan, Spencer J. <Ryan@millercanfield.commailto:Ryan@millercanfield.com> Sent: Monday, November 27, 2023 5:34 PM To: Observium <observium@lists.observium.orgmailto:observium@lists.observium.org> Cc: Tony Guadagno <tonyg@guadagno.orgmailto:tonyg@guadagno.org> Subject: RE: [Observium] Re: is there an alert kill switch?
Set “ignore” and/or “ignore_until” via the API (“Changing a device”)
https://docs.observium.org/api/#changing-a-device
________________________________ Spencer J. Ryan| Manager, Technology and Infrastructure Miller Canfield T +1.313.496.7979 | F +1.313.496.7500
________________________________
From: Tony Guadagno via observium <observium@lists.observium.orgmailto:observium@lists.observium.org> Sent: Monday, November 27, 2023 4:59 PM To: Observium <observium@lists.observium.orgmailto:observium@lists.observium.org> Cc: Tony Guadagno <tonyg@guadagno.orgmailto:tonyg@guadagno.org> Subject: [Observium] Re: is there an alert kill switch?
Caution: This is an external email. Do not open attachments or click links from unknown or unexpected emails.
Tom, yes, I am aware of how to disable the alerts for a specific device. What I want to do is disable alerts system wide for a time period. I can take responsibility for scripting the disable/enable part….but is there a way at the OS level to system wide disable alerts?
Tony Guadagno O +1 585 577 1003 C +1 585 703 6700 E tonyg@guadagnoconsulting.commailto:tonyg@guadagnoconsulting.com [cid:image001.jpg@01DA2204.35E7D3D0]
From: Tom Laermans via observium <observium@lists.observium.orgmailto:observium@lists.observium.org> Sent: Monday, November 27, 2023 4:52 PM To: Tony Guadagno via observium <observium@lists.observium.orgmailto:observium@lists.observium.org> Cc: Tom Laermans <tom.laermans@powersource.cxmailto:tom.laermans@powersource.cx> Subject: [Observium] Re: is there an alert kill switch?
Hi Tony,
There is an option to disable alerting for a device. You can set and unset this option using the API. That could possibly work? (note it disables ALL alerting on the device for the time that checkmark is on)
Alternatively, you could also set a "delay" variable on your alerts - which means they won't fire after x times 5 minutes have passed, allowing your machine to reboot and come back up before an alert is sent. However this delays ALL your alerts for that specific checker for x times 5 minutes which is probably undesirable (so it depends what alerts you're seeing to make that call...)
Tom
On 27/11/2023 21:02, Tony Guadagno via observium wrote: Hi, when my Microsoft servers patch monthly, they often reboot and that causes an alert that is unnecessary for me. Is there a way (maybe a script I could write) that would disable alerting? I am thinking about making a cron job that would run monthly (at the time I am patching) that would disable alerting…then maybe 2 hrs later, re-enable alerting.
Is this possible?
Tony Guadagno O +1 585 577 1003 C +1 585 703 6700 E tonyg@guadagnoconsulting.commailto:tonyg@guadagnoconsulting.com [cid:image001.jpg@01DA2204.35E7D3D0]
_______________________________________________
observium mailing list -- observium@lists.observium.orgmailto:observium@lists.observium.org
To unsubscribe send an email to observium-leave@lists.observium.orgmailto:observium-leave@lists.observium.org
You have received a message from the law firm Miller Canfield. The information contained in or attached to this electronic mail may be privileged and/or confidential. If you received this transmission and are not the intended recipient, you should not read this message and are hereby notified that any dissemination, distribution or copying of this communication and/or its attachments is strictly prohibited. If you have received this communication in error or are not sure whether it is privileged, please immediately notify us by return e-mail and delete or destroy the original and any copies, electronic, paper or otherwise, that you may have of this communication and any attachments.
