How can I minimise false alarms?

[Andreas Ericsson]

nemir nemiria wrote:
> Do any others get false alarms?  I seem to get one or two a week from the
> remote site.
> 
> Is there any way to minimise them?

Yes, you can increas the value for max_check_attempts and/or 
retry_check_interval. That will give a service which fails temporarily a 
bit longer to recuperate and thus suppress the false alarms.

>   Each notification is an sms,  and if a false alarm happens at an awkward
> hour it could wake me up (or worse! ;-)  At first I thought it was probably
> caused by some sort of deprioritation of ping traffic,  so I stopped checking
> ping,  and just check dns and ssh now.  Hasn't seemed to make much difference.
> 

False service (and host) check failures usually occur when the general 
network load is very high, like when backup-jobs are running and the 
switches simply can't cope with the traffic. Try not running any 
unnecessary checks during this period, and you'll most likely see fewer 
false alarms.

> I fear that before I fully roll out my nagios solution,  the number of false
> alarms will escalate to the point where the monitoring system loses its
> integrity.
> 

It's just a matter of configuration.

> Regards,
> 
> Carlos
> 
> 

-- 
Sourcerer / Andreas Ericsson
OP5 AB
+46 (0)733 709032
andreas.ericsson at op5.se


-------------------------------------------------------
This SF.Net email sponsored by Black Hat Briefings & Training.
Attend Black Hat Briefings & Training, Las Vegas July 24-29 - 
digital self defense, top technical experts, no vendor pitches, 
unmatched networking opportunities. Visit www.blackhat.com
_______________________________________________
Nagios-users mailing list
Nagios-users at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. 
::: Messages without supporting info will risk being sent to /dev/null