Howdy Guys,
I'm trying to figure out how I can build a "nested" for lack of better description device matching script. For example, "type equals network AND hostname match *domain1.com*". Or, "type equals network AND hostname notmatch *domain2.com*".
I can't just use a "hostname match *domain1.com*" because I also have devices in other groups with the same hostname match, but don't want to alert-check on those other groups.
I'm sure there's a way to do this, I'm just not figuring it out, and apparently my search-fu is weak.
Thanks,
Ron
--
Ron Marosko, Jr.
. . . . . . . . . . . . . . . . . . . . . . . . . .
CCIE No. 4526 (R/S), NN5DX
Senior Network Engineer
RJR Services, Inc.
1108 West Dickinson Blvd, Suite A
Fort Stockton, TX 79735 USA
o: +1 432 336 5600 x115
c: +1 432 290 6344
e: mailto:ron@rjr-services.com ron@rjr-services.com
pgp pubkey: http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x778B3B0258AB8B5C 0x58AB8B5C
"To know me is to fly with me."
-- This message has been scanned by E.F.A. Project and is believed to be clean.
Create two separate associations?
This will be easier in future. But today you need to make two separate associations.
Adam.
Sent from BlueMail
On 13 Jul 2017, 16:12, at 16:12, Ron Marosko ron@rjr-services.com wrote:
Howdy Guys,
I'm trying to figure out how I can build a "nested" for lack of better description device matching script. For example, "type equals network AND hostname match *domain1.com*". Or, "type equals network AND hostname notmatch *domain2.com*".
I can't just use a "hostname match *domain1.com*" because I also have devices in other groups with the same hostname match, but don't want to alert-check on those other groups.
I'm sure there's a way to do this, I'm just not figuring it out, and apparently my search-fu is weak.
Thanks,
Ron--
Ron Marosko, Jr.
. . . . . . . . . . . . . . . . . . . . . . . . . .
CCIE No. 4526 (R/S), NN5DX
Senior Network Engineer
RJR Services, Inc.
1108 West Dickinson Blvd, Suite A
Fort Stockton, TX 79735 USA
o: +1 432 336 5600 x115
c: +1 432 290 6344
e: mailto:ron@rjr-services.com ron@rjr-services.com
pgp pubkey: http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x778B3B0258AB8B5C 0x58AB8B5C
"To know me is to fly with me."
-- This message has been scanned by E.F.A. Project and is believed to be clean.
observium mailing list observium@observium.org http://postman.memetic.org/cgi-bin/mailman/listinfo/observium
Now that I’m working through this, I guess what I’m looking for is more in the line of dependencies…. Given a bunch of remote sites, I want to know if an individual piece of remote equipment is down, *but* if the circuit to that remote site is down, I don’t want 20 separate alerts for each of those 20 remote devices, I just want the alert for the primary router at that site, and suppress the alerts for the devices behind that router.
Maybe that’s one of the future things? 😉
Thank you!
…Ron
From: observium [mailto:observium-bounces@observium.org] On Behalf Of Adam Armstrong Sent: Thursday, July 13, 2017 10:15 AM To: 'Observium' observium@observium.org Cc: 'Observium' observium@observium.org Subject: Re: [Observium] Nested alert device matching?
Create two separate associations?
This will be easier in future. But today you need to make two separate associations.
Adam.
Sent from BlueMail http://www.bluemail.me/r?b=10066
On 13 Jul 2017, at 16:12, Ron Marosko <ron@rjr-services.com mailto:ron@rjr-services.com > wrote:
Howdy Guys,
I’m trying to figure out how I can build a “nested” for lack of better description device matching script. For example, “type equals network AND hostname match *domain1.com*”. Or, “type equals network AND hostname notmatch *domain2.com*”.
I can’t just use a “hostname match *domain1.com*” because I also have devices in other groups with the same hostname match, but don’t want to alert-check on those other groups.
I’m sure there’s a way to do this, I’m just not figuring it out, and apparently my search-fu is weak.
Thanks,
Ron
--
Ron Marosko, Jr.
. . . . . . . . . . . . . . . . . . . . . . . . . .
CCIE No. 4526 (R/S), NN5DX
Senior Network Engineer
RJR Services, Inc.
1108 West Dickinson Blvd, Suite A
Fort Stockton, TX 79735 USA
o: +1 432 336 5600 x115
c: +1 432 290 6344
e: mailto:ron@rjr-services.com ron@rjr-services.com
pgp pubkey: http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x778B3B0258AB8B5C 0x58AB8B5C
"To know me is to fly with me."
Not easily possible for us to do, since no one wants to wait 5 minutes to be notified of something just so we can check dependencies.
adam. On 13/07/2017 16:30:37, Ron Marosko ron@rjr-services.com wrote: Now that I’m working through this, I guess what I’m looking for is more in the line of dependencies…. Given a bunch of remote sites, I want to know if an individual piece of remote equipment is down, *but* if the circuit to that remote site is down, I don’t want 20 separate alerts for each of those 20 remote devices, I just want the alert for the primary router at that site, and suppress the alerts for the devices behind that router. Maybe that’s one of the future things? Thank you! …Ron From: observium [mailto:observium-bounces@observium.org] On Behalf Of Adam Armstrong Sent: Thursday, July 13, 2017 10:15 AM To: 'Observium' observium@observium.org Cc: 'Observium' observium@observium.org Subject: Re: [Observium] Nested alert device matching? Create two separate associations? This will be easier in future. But today you need to make two separate associations. Adam. Sent from BlueMail [http://www.bluemail.me/r?b=10066] On 13 Jul 2017, at 16:12, Ron Marosko <ron@rjr-services.com [mailto:ron@rjr-services.com]> wrote: Howdy Guys, I’m trying to figure out how I can build a “nested” for lack of better description device matching script. For example, “type equals network AND hostname match *domain1.com*”. Or, “type equals network AND hostname notmatch *domain2.com*”. I can’t just use a “hostname match *domain1.com*” because I also have devices in other groups with the same hostname match, but don’t want to alert-check on those other groups. I’m sure there’s a way to do this, I’m just not figuring it out, and apparently my search-fu is weak. Thanks, Ron -- Ron Marosko, Jr. . . . . . . . . . . . . . . . . . . . . . . . . . . CCIE No. 4526 (R/S), NN5DX Senior Network Engineer RJR Services, Inc. 1108 West Dickinson Blvd, Suite A Fort Stockton, TX 79735 USA o: +1 432 336 5600 x115 c: +1 432 290 6344 e: ron@rjr-services.com [mailto:ron@rjr-services.com] pgp pubkey: 0x58AB8B5C [http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x778B3B0258AB8B5C] "To know me is to fly with me."
-- This message has been scanned for viruses and dangerous content by E.F.A. Project [http://www.efa-project.org], and is believed to be clean.
observium mailing list observium@observium.org [mailto:observium@observium.org] http://postman.memetic.org/cgi-bin/mailman/listinfo/observium [http://postman.memetic.org/cgi-bin/mailman/listinfo/observium]
participants (3)
-
Adam Armstrong -
Adam Armstrong -
Ron Marosko