excluding servers from alert checks
Hi,
I'm trying to exclude some servers from a check, but it does not work.
Check Conditions processor_usage greater 80
Device match: * notequals db-02 notequals man-01
Entity match *
But when I run regenerate the two machines have always the alerts enabled. removing the * from Device match don't help either.
A second question, is it possible to suppress alert checking during a certain period , I'll do off site backup each day that triggers this alert. The alert check: Traffic exceeds 85% with a delay of 2 If I put the delay higher I will not receive 'real' alerts.
You need 2 rules for entity matches, if they're the same, you can't combine them.
Plannable silencing of alerts is on the roadmap.
Maarten
Sent from my iPhone
On 8 apr. 2015, at 08:00, Patrick Marquetecken patrick@marquetecken.be wrote:
Hi,
I'm trying to exclude some servers from a check, but it does not work.
Check Conditions processor_usage greater 80
Device match:
notequals db-02 notequals man-01
Entity match
But when I run regenerate the two machines have always the alerts enabled. removing the * from Device match don't help either.
A second question, is it possible to suppress alert checking during a certain period , I'll do off site backup each day that triggers this alert. The alert check: Traffic exceeds 85% with a delay of 2 If I put the delay higher I will not receive 'real' alerts. _______________________________________________ observium mailing list observium@observium.org http://postman.memetic.org/cgi-bin/mailman/listinfo/observium
Please include screenshots. It isn't clear what you put in the association settings.
It looks like you didn't actually say what should "not match" those strings.
Adam.
Sent with AquaMail for Android http://www.aqua-mail.com
On 8 April 2015 07:00:00 Patrick Marquetecken patrick@marquetecken.be wrote:
Hi,
I'm trying to exclude some servers from a check, but it does not work.
Check Conditions processor_usage greater 80
Device match:
notequals db-02 notequals man-01
Entity match
But when I run regenerate the two machines have always the alerts enabled. removing the * from Device match don't help either.
A second question, is it possible to suppress alert checking during a certain period , I'll do off site backup each day that triggers this alert. The alert check: Traffic exceeds 85% with a delay of 2 If I put the delay higher I will not receive 'real' alerts.
observium mailing list observium@observium.org http://postman.memetic.org/cgi-bin/mailman/listinfo/observium
Adam,
Here is the screenshot.
Adam Armstronf schreef op 08/04/15 om 10:21:
Please include screenshots. It isn't clear what you put in the association settings.
It looks like you didn't actually say what should "not match" those strings.
Adam.
Sent with AquaMail for Android http://www.aqua-mail.com
On 8 April 2015 07:00:00 Patrick Marquetecken patrick@marquetecken.be wrote:
Hi,
I'm trying to exclude some servers from a check, but it does not work.
Check Conditions processor_usage greater 80
Device match:
notequals db-02 notequals man-01
Entity match
But when I run regenerate the two machines have always the alerts enabled. removing the * from Device match don't help either.
A second question, is it possible to suppress alert checking during a certain period , I'll do off site backup each day that triggers this alert. The alert check: Traffic exceeds 85% with a delay of 2 If I put the delay higher I will not receive 'real' alerts. _______________________________________________ observium mailing list observium@observium.org http://postman.memetic.org/cgi-bin/mailman/listinfo/observium
observium mailing list observium@observium.org http://postman.memetic.org/cgi-bin/mailman/listinfo/observium
Yeah, those aren't valid association rules, you haven't specified a device attribute to match against.
Please read the documentation:
http://www.observium.org/wiki/Alerting_Metrics_and_Attributes#Device http://www.observium.org/wiki/Creating_an_Alert_Checker#Associations
adam.
Sent from Mailbird [http://www.getmailbird.com/?utm_source=Mailbird&utm_medium=email&utm...] On 08/04/2015 11:52:33, Patrick Marquetecken patrick@marquetecken.be wrote:
Adam,
Here is the screenshot.
Adam Armstronf schreef op 08/04/15 om 10:21:
cite="mid:14c981e4598.2765.0fa97865a0e1ab36152b6b2299eedb49@memetic.org" type="cite">
Please include screenshots. It isn't clear what you put in the association settings.
It looks like you didn't actually say what should "not match" those strings.
Adam.
Sent with AquaMail for Android
http://www.aqua-mail.com [http://www.aqua-mail.com]
On 8 April 2015 07:00:00 Patrick Marquetecken patrick@marquetecken.be [mailto:patrick@marquetecken.be] wrote:
Hi,
I'm trying to exclude some servers from a check, but it does not work.
Check Conditions
processor_usage greater 80
Device match:
*
notequals db-02
notequals man-01
Entity match
*
But when I run regenerate the two machines have always the alerts enabled.
removing the * from Device match don't help either.
A second question, is it possible to suppress alert checking during a certain period , I'll do off site backup each day that triggers this alert.
The alert check: Traffic exceeds 85% with a delay of 2
If I put the delay higher I will not receive 'real' alerts.
_______________________________________________
observium mailing list
observium@observium.org [mailto:observium@observium.org]
href="http://postman.memetic.org/cgi-bin/mailman/listinfo/observium%22%3Ehttp://po...
_______________________________________________ observium mailing list observium@observium.org [mailto:observium@observium.org] http://postman.memetic.org/cgi-bin/mailman/listinfo/observium [http://postman.memetic.org/cgi-bin/mailman/listinfo/observium]
For reference, here is a working association: [image: Inline image 1]
Ben
On Wed, Apr 8, 2015 at 9:42 PM, Adam Armstrong adama@memetic.org wrote:
Yeah, those aren't valid association rules, you haven't specified a device attribute to match against.
Please read the documentation:
http://www.observium.org/wiki/Alerting_Metrics_and_Attributes#Device http://www.observium.org/wiki/Creating_an_Alert_Checker#Associations
adam.
Sent from Mailbird http://www.getmailbird.com/?utm_source=Mailbird&utm_medium=email&utm_campaign=sent-from-mailbird
On 08/04/2015 11:52:33, Patrick Marquetecken patrick@marquetecken.be wrote:
Adam,
Here is the screenshot.
Adam Armstronf schreef op 08/04/15 om 10:21:
cite="mid:14c981e4598.2765.0fa97865a0e1ab36152b6b2299eedb49@memetic.org" type="cite">
Please include screenshots. It isn't clear what you put in the association settings.
It looks like you didn't actually say what should "not match" those strings.
Adam.
Sent with AquaMail for Android
On 8 April 2015 07:00:00 Patrick Marquetecken patrick@marquetecken.be patrick@marquetecken.be wrote:
Hi,
I'm trying to exclude some servers from a check, but it does not work.
Check Conditions
processor_usage greater 80
Device match:
notequals db-02
notequals man-01
Entity match
But when I run regenerate the two machines have always the alerts enabled.
removing the * from Device match don't help either.
A second question, is it possible to suppress alert checking during a certain period , I'll do off site backup each day that triggers this alert.
The alert check: Traffic exceeds 85% with a delay of 2
If I put the delay higher I will not receive 'real' alerts.
observium mailing list
observium@observium.org
href="http://postman.memetic.org/cgi-bin/mailman/listinfo/observium%22%3E http://postman.memetic.org/cgi-bin/mailman/listinfo/observium
observium mailing list observium@observium.org http://postman.memetic.org/cgi-bin/mailman/listinfo/observium
observium mailing list observium@observium.org http://postman.memetic.org/cgi-bin/mailman/listinfo/observium
I have experienced issues with a setup like this, however, this was with both match & notmatch statements in the "entity match" part.
I've splitted it up in 2 associations, which in your case would be 4 associations.
Have you verified that the alert-checker matches everything that it should match?
Maarten -- Maarten Moerman | Mgr, Network Engineering | eBay Classifieds | +31-655122247 | mmoerman@ebay.com
From: Ben Hohnke <settra+observium@gmail.commailto:settra+observium@gmail.com> Reply-To: Observium Network Observation System <observium@observium.orgmailto:observium@observium.org> Date: Wednesday, April 8, 2015 at 1:54 PM To: Observium Network Observation System <observium@observium.orgmailto:observium@observium.org> Subject: Re: [Observium] excluding servers from alert checks
For reference, here is a working association: [Inline image 1]
Ben
On Wed, Apr 8, 2015 at 9:42 PM, Adam Armstrong <adama@memetic.orgmailto:adama@memetic.org> wrote: Yeah, those aren't valid association rules, you haven't specified a device attribute to match against.
Please read the documentation:
http://www.observium.org/wiki/Alerting_Metrics_and_Attributes#Device http://www.observium.org/wiki/Creating_an_Alert_Checker#Associations
adam.
Sent from Mailbirdhttp://www.getmailbird.com/?utm_source=Mailbird&utm_medium=email&utm_campaign=sent-from-mailbird
On 08/04/2015 11:52:33, Patrick Marquetecken <patrick@marquetecken.bemailto:patrick@marquetecken.be> wrote:
Adam,
Here is the screenshot.
Adam Armstronf schreef op 08/04/15 om 10:21:
cite="mid:14c981e4598.2765.0fa97865a0e1ab36152b6b2299eedb49@memetic.orgmailto:mid%3A14c981e4598.2765.0fa97865a0e1ab36152b6b2299eedb49@memetic.org" type="cite">
Please include screenshots. It isn't clear what you put in the association settings.
It looks like you didn't actually say what should "not match" those strings.
Adam.
Sent with AquaMail for Android
On 8 April 2015 07:00:00 Patrick Marquetecken patrick@marquetecken.bemailto:patrick@marquetecken.be wrote:
Hi,
I'm trying to exclude some servers from a check, but it does not work.
Check Conditions
processor_usage greater 80
Device match:
*
notequals db-02
notequals man-01
Entity match
*
But when I run regenerate the two machines have always the alerts enabled.
removing the * from Device match don't help either.
A second question, is it possible to suppress alert checking during a certain period , I'll do off site backup each day that triggers this alert.
The alert check: Traffic exceeds 85% with a delay of 2
If I put the delay higher I will not receive 'real' alerts.
_______________________________________________
observium mailing list
observium@observium.orgmailto:observium@observium.org
href="http://postman.memetic.org/cgi-bin/mailman/listinfo/observium%22%3Ehttp://po...
_______________________________________________
observium mailing list
observium@observium.orgmailto:observium@observium.org http://postman.memetic.org/cgi-bin/mailman/listinfo/observium
_______________________________________________ observium mailing list observium@observium.orgmailto:observium@observium.org http://postman.memetic.org/cgi-bin/mailman/listinfo/observium
Ok, I got it to work finally :-)
Here is my working alert.
Ben Hohnke schreef op 08/04/15 om 13:54:
For reference, here is a working association: Inline image 1
Ben
On Wed, Apr 8, 2015 at 9:42 PM, Adam Armstrong <adama@memetic.org mailto:adama@memetic.org> wrote:
Yeah, those aren't valid association rules, you haven't specified a device attribute to match against. Please read the documentation: http://www.observium.org/wiki/Alerting_Metrics_and_Attributes#Device http://www.observium.org/wiki/Creating_an_Alert_Checker#Associations adam. Sent from Mailbird <http://www.getmailbird.com/?utm_source=Mailbird&utm_medium=email&utm_campaign=sent-from-mailbird>On 08/04/2015 11:52:33, Patrick Marquetecken <patrick@marquetecken.be <mailto:patrick@marquetecken.be>> wrote: Adam, Here is the screenshot. Adam Armstronf schreef op 08/04/15 om 10:21: cite="mid:14c981e4598.2765.0fa97865a0e1ab36152b6b2299eedb49@memetic.org <mailto:mid%3A14c981e4598.2765.0fa97865a0e1ab36152b6b2299eedb49@memetic.org>" type="cite"> Please include screenshots. It isn't clear what you put in the association settings. It looks like you didn't actually say what should "not match" those strings. Adam. Sent with AquaMail for Android http://www.aqua-mail.com On 8 April 2015 07:00:00 Patrick Marquetecken <patrick@marquetecken.be> <mailto:patrick@marquetecken.be> wrote:Hi, I'm trying to exclude some servers from a check, but it does not work. Check Conditions processor_usage greater 80 Device match: * notequals db-02 notequals man-01 Entity match * But when I run regenerate the two machines have always the alerts enabled. removing the * from Device match don't help either. A second question, is it possible to suppress alert checking during a certain period , I'll do off site backup each day that triggers this alert. The alert check: Traffic exceeds 85% with a delay of 2 If I put the delay higher I will not receive 'real' alerts. _______________________________________________ observium mailing list observium@observium.org <mailto:observium@observium.org> href="http://postman.memetic.org/cgi-bin/mailman/listinfo/observium">http://postman.memetic.org/cgi-bin/mailman/listinfo/observium_______________________________________________ observium mailing list observium@observium.org <mailto:observium@observium.org> http://postman.memetic.org/cgi-bin/mailman/listinfo/observium_______________________________________________ observium mailing list observium@observium.org <mailto:observium@observium.org> http://postman.memetic.org/cgi-bin/mailman/listinfo/observium
observium mailing list observium@observium.org http://postman.memetic.org/cgi-bin/mailman/listinfo/observium
Why am I getting this email.... ________________________________________ From: observium [observium-bounces@observium.org] on behalf of Ben Hohnke [settra+observium@gmail.com] Sent: Wednesday, April 08, 2015 7:54 AM To: Observium Network Observation System Subject: Re: [Observium] excluding servers from alert checks
For reference, here is a working association: [Inline image 1]
Ben
On Wed, Apr 8, 2015 at 9:42 PM, Adam Armstrong <adama@memetic.orgmailto:adama@memetic.org> wrote: Yeah, those aren't valid association rules, you haven't specified a device attribute to match against.
Please read the documentation:
http://www.observium.org/wiki/Alerting_Metrics_and_Attributes#Device http://www.observium.org/wiki/Creating_an_Alert_Checker#Associations
adam.
Sent from Mailbirdhttp://www.getmailbird.com/?utm_source=Mailbird&utm_medium=email&utm_campaign=sent-from-mailbird
On 08/04/2015 11:52:33, Patrick Marquetecken <patrick@marquetecken.bemailto:patrick@marquetecken.be> wrote:
Adam,
Here is the screenshot.
Adam Armstronf schreef op 08/04/15 om 10:21:
cite="mid:14c981e4598.2765.0fa97865a0e1ab36152b6b2299eedb49@memetic.orgmailto:mid%3A14c981e4598.2765.0fa97865a0e1ab36152b6b2299eedb49@memetic.org" type="cite">
Please include screenshots. It isn't clear what you put in the association settings.
It looks like you didn't actually say what should "not match" those strings.
Adam.
Sent with AquaMail for Android
On 8 April 2015 07:00:00 Patrick Marquetecken patrick@marquetecken.bemailto:patrick@marquetecken.be wrote:
Hi,
I'm trying to exclude some servers from a check, but it does not work.
Check Conditions
processor_usage greater 80
Device match:
*
notequals db-02
notequals man-01
Entity match
*
But when I run regenerate the two machines have always the alerts enabled.
removing the * from Device match don't help either.
A second question, is it possible to suppress alert checking during a certain period , I'll do off site backup each day that triggers this alert.
The alert check: Traffic exceeds 85% with a delay of 2
If I put the delay higher I will not receive 'real' alerts.
_______________________________________________
observium mailing list
observium@observium.orgmailto:observium@observium.org
href="http://postman.memetic.org/cgi-bin/mailman/listinfo/observium%22%3Ehttp://po...
_______________________________________________
observium mailing list
observium@observium.orgmailto:observium@observium.org
http://postman.memetic.org/cgi-bin/mailman/listinfo/observium
_______________________________________________ observium mailing list observium@observium.orgmailto:observium@observium.org http://postman.memetic.org/cgi-bin/mailman/listinfo/observium
participants (7)
-
Adam Armstronf -
Adam Armstrong
-
Applegate, Lynda K -
Ben Hohnke -
Moerman, Maarten -
Patrick Marquetecken -
Steve Kersley