multiple alerts for the same service

[Eli Stair]

The way check_log works is to compare the current log vs. the log at the 
time the last check was run so that behaviour is "normal"... I don't 
recall if I changed this or not, but I have the output set to summarize 
the number of instances matches, and alert based on that value, so the 
check becomes effectively "this many alerts over this timeperiod".  IMO 
this plugin is really only useful for this method.

Extending this in perl to foreach over the search pattern, and generate 
an alert directly (via the CGI/command file) instead of having the 
return value return state and Nagios generate the alert directly... is 
simple (if unorthodox).  That's one way I can think of off hand that 
would let you fire the check at scheduled time intervals, and still have 
a single alert generated for _each_ entry in the log since the last 
check.  At the same time, it'd be smaller/faster to just use a diff 
since the last check, vs the entire file (gets bloated/slow with a huge 
number of hosts, esp. if they go log-happy).

/eli





Julien Ford wrote:
> Hello,
> 
> I'm monitoring a log file with the check_log plugin.
> 
> The plugin tries to find  patterns in the log file and
> if it finds, sends an alert to the nagios server. In
> nagios this service is volatile,passive and has a
> "max_check_attempts" to 1.
> 
> My trouble is when there are two or more alerts for
> the same service, only the last is show in the web
> interface and only this one can by acknowledge.
> 
> Is it possible to show in the web interface all alerts
> and to acknowledge them independently ? If the last
> alert is acknowledged is it possible that the service
> become OK only if there isn't any previous
> unacknowledged alert ?
> 
> Thanks.
> 
> Regards,
> Julien
> 
> 
> -------------------------------------------------------
> This SF.Net email is sponsored by xPML, a groundbreaking scripting language
> that extends applications into web and mobile media. Attend the live webcast
> and join the prime developer group breaking into this new coding territory!
> http://sel.as-us.falkag.net/sel?cmd=k&kid0944&bid$1720&dat1642
> _______________________________________________
> Nagios-users mailing list
> Nagios-users at lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/nagios-users
> ::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. 
> ::: Messages without supporting info will risk being sent to /dev/null
> 



-------------------------------------------------------
This SF.Net email is sponsored by xPML, a groundbreaking scripting language
that extends applications into web and mobile media. Attend the live webcast
and join the prime developer group breaking into this new coding territory!
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=110944&bid=241720&dat=121642
_______________________________________________
Nagios-users mailing list
Nagios-users at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. 
::: Messages without supporting info will risk being sent to /dev/null