<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <HTML><HEAD><TITLE>Using escalations and / or timeperiods for out of hours</TITLE> <META http-equiv=Content-Type content="text/html; charset=us-ascii"> <META content="MSHTML 6.00.2900.5659" name=GENERATOR></HEAD> <BODY> <DIV dir=ltr align=left><FONT face=Arial color=#0000ff size=2><SPAN class=852325810-04112008>figured it out, so thought i'd post back in case i need to find out how to do it again..</SPAN></FONT></DIV> <DIV dir=ltr align=left><FONT face=Arial color=#0000ff size=2><SPAN class=852325810-04112008></SPAN></FONT> </DIV> <DIV dir=ltr align=left><FONT face=Arial color=#0000ff size=2><SPAN class=852325810-04112008>i set up a timeperiod called 'nonworkhours' that covers those hours out of work.</SPAN></FONT></DIV> <DIV dir=ltr align=left><FONT face=Arial color=#0000ff size=2><SPAN class=852325810-04112008></SPAN></FONT> </DIV> <DIV dir=ltr align=left><FONT face=Arial color=#0000ff size=2><SPAN class=852325810-04112008>i then defined a serviceescalation that would come into effect over those hours and used wildcards to define all services on all hosts. the tricky bit was the wildcard, as i thought '*' would work. turns out i had to use '.*'</SPAN></FONT></DIV> <DIV dir=ltr align=left><FONT face=Arial color=#0000ff size=2><SPAN class=852325810-04112008></SPAN></FONT><FONT face=Arial color=#0000ff size=2><SPAN class=852325810-04112008></SPAN></FONT> </DIV> <DIV dir=ltr align=left><FONT face=Arial color=#0000ff size=2><SPAN class=852325810-04112008>ie:</SPAN></FONT></DIV> <DIV dir=ltr align=left><FONT face=Arial color=#0000ff size=2><SPAN class=852325810-04112008></SPAN></FONT> </DIV> <DIV dir=ltr align=left><FONT face=Arial color=#0000ff size=2><SPAN class=852325810-04112008>define serviceescalation{<BR> host_name .*<BR> service_description .*<BR> first_notification 1<BR> last_notification 0<BR> notification_interval 30<BR> escalation_period nonworkhours<BR> contact_groups server,dba<BR> }</SPAN></FONT></DIV> <DIV> </DIV> <DIV dir=ltr align=left><FONT face=Arial color=#0000ff size=2><SPAN class=852325810-04112008>all pretty obvious once you think about it :)</SPAN></FONT></DIV> <DIV dir=ltr align=left><FONT face=Arial color=#0000ff size=2><SPAN class=852325810-04112008></SPAN></FONT> </DIV> <DIV dir=ltr align=left><FONT face=Arial color=#0000ff size=2><SPAN class=852325810-04112008></SPAN></FONT> </DIV> <DIV dir=ltr align=left><FONT face=Arial color=#0000ff size=2><SPAN class=852325810-04112008></SPAN></FONT> </DIV> <DIV dir=ltr align=left><FONT face=Arial color=#0000ff size=2><SPAN class=852325810-04112008></SPAN></FONT> </DIV><BR> <DIV class=OutlookMessageHeader lang=en-us dir=ltr align=left> <HR tabIndex=-1> <FONT face=Tahoma size=2><B>From:</B> Sotiroff, Kristian <BR><B>Sent:</B> 22 October 2008 15:39<BR><B>To:</B> 'nagios-users@lists.sourceforge.net'<BR><B>Subject:</B> RE: [Nagios-users] Using escalations and / or timeperiods for out ofhours<BR></FONT><BR></DIV> <DIV></DIV> <DIV dir=ltr align=left><FONT face=Arial color=#0000ff size=2><SPAN class=589143414-22102008>with all this talk of escalations, I thought I'd try and push my question out again....</SPAN></FONT></DIV> <DIV dir=ltr align=left><FONT face=Arial color=#0000ff size=2><SPAN class=589143414-22102008></SPAN></FONT> </DIV> <DIV dir=ltr align=left><FONT face=Arial color=#0000ff size=2><SPAN class=589143414-22102008>full text is below, but basically I'm trying to reduce the amount of emails that get sent out of hours, through escalations and the escalation time period.</SPAN></FONT></DIV> <DIV dir=ltr align=left><FONT face=Arial color=#0000ff size=2><SPAN class=589143414-22102008></SPAN></FONT> </DIV> <DIV dir=ltr align=left><FONT face=Arial color=#0000ff size=2><SPAN class=589143414-22102008>if its in normal work hours, send alerts every 5 mins. if not, send them every 30 mins.</SPAN></FONT></DIV> <DIV dir=ltr align=left><FONT face=Arial color=#0000ff size=2><SPAN class=589143414-22102008></SPAN></FONT> </DIV> <DIV dir=ltr align=left><FONT face=Arial color=#0000ff size=2><SPAN class=589143414-22102008>a few tests I've run haven't worked so has anybody got a better idea?</SPAN></FONT></DIV><BR> <DIV class=OutlookMessageHeader lang=en-us dir=ltr align=left> <HR tabIndex=-1> <FONT face=Tahoma size=2><B>From:</B> Sotiroff, Kristian <BR><B>Sent:</B> 17 October 2008 09:25<BR><B>To:</B> nagios-users@lists.sourceforge.net<BR><B>Subject:</B> [Nagios-users] Using escalations and / or timeperiods for out ofhours<BR></FONT><BR></DIV> <DIV></DIV><BR> <P><FONT face=Arial size=2>Hi</FONT> </P> <P><FONT face=Arial size=2>(Version: Nagios 3.0.3 )</FONT> </P> <P><FONT face=Arial size=2>I'm trying to configure my alerts to work in such a way that engineers don't get mailed excessively out of hours. I've tried with escalations, but only with Nagios 2 and didn't have much success.</FONT></P> <P><FONT face=Arial size=2>Reading though the docs for v3 it seems that I can define an escalation with reduced email frequency to be active only during a specified period, so I thought this may be a way to do it.</FONT></P> <P><FONT face=Arial size=2>Let me explain my scenario</FONT> </P> <P><FONT face=Arial size=2>Sun: 0000 - 0000 - reduced email</FONT> <BR><FONT face=Arial size=2>Mon - Fri 0000 - 0800 - reduced email</FONT> <BR> <FONT face=Arial size=2>0800 - 1900 - normal email</FONT> <BR> <FONT face=Arial size=2>1900 - 0000 - reduced email</FONT> <BR><FONT face=Arial size=2>Sat: 0000 - 0000 - reduced email</FONT> </P><BR> <P><FONT face=Arial size=2>If I configure the alerting to work so that after a single email is sent it escalates into my 'reduced email' period (if its in the right timeperiod) but otherwise will it then ignore the escalation and continue sending emails as normal?</FONT></P> <P><FONT face=Arial size=2>What happens if a server lets out some blue smoke over a weekend, so the escalation comes into play, but an engineer doesn't fix it until 12:00 Monday morning. Does this mean at 0800 (when the escalation is not valid any more) it will email normally? And if it continues into the next night will the escalation come back into play again or, because it has already been triggered, will it stay as normal.</FONT></P> <P><FONT face=Arial size=2>I'm sure someone has done this before. Does anybody have any first hand experience with it? How are other list users alerting out of hours?</FONT></P> <P><FONT face=Arial size=2>Cheers</FONT> <BR><FONT face=Arial size=2>Kristian</FONT> </P><BR><BR><PRE> CONFIDENTIALITY NOTICE This e-mail (and any attached files) is confidential and protected by copyright (and other intellectual property rights). If you are not the intended recipient please e-mail the sender and then delete the email and any attached files immediately. Any further use or dissemination is prohibited. While MTV Networks Europe has taken steps to ensure that this email and any attachments are virus free, it is your responsibility to ensure that this message and any attachments are virus free and do not affect your systems / data. Communicating by email is not 100% secure and carries risks such as delay, data corruption, non-delivery, wrongful interception and unauthorised amendment. If you communicate with us by e-mail, you acknowledge and assume these risks, and you agree to take appropriate measures to minimise these risks when e-mailing us. MTV Networks International, MTV Networks UK & Ireland, Greenhouse, Nickelodeon Viacom Consumer Products, VBSi, Viacom Brand Solutions International and Comedy Central are all trading names of MTV Networks Europe. MTV Networks Europe is a partnership between MTV Networks Europe Inc. and Viacom Networks Europe Inc. Address for service in Great Britain is UK House, 180 Oxford Street, London W1D 1DS, UK. </PRE><pre> CONFIDENTIALITY NOTICE This e-mail (and any attached files) is confidential and protected by copyright (and other intellectual property rights). If you are not the intended recipient please e-mail the sender and then delete the email and any attached files immediately. Any further use or dissemination is prohibited. While MTV Networks Europe has taken steps to ensure that this email and any attachments are virus free, it is your responsibility to ensure that this message and any attachments are virus free and do not affect your systems / data. Communicating by email is not 100% secure and carries risks such as delay, data corruption, non-delivery, wrongful interception and unauthorised amendment. If you communicate with us by e-mail, you acknowledge and assume these risks, and you agree to take appropriate measures to minimise these risks when e-mailing us. MTV Networks International, MTV Networks UK & Ireland, Greenhouse, Nickelodeon Viacom Consumer Products, VBSi, Viacom Brand Solutions International and Comedy Central are all trading names of MTV Networks Europe. MTV Networks Europe is a partnership between MTV Networks Europe Inc. and Viacom Networks Europe Inc. Address for service in Great Britain is UK House, 180 Oxford Street, London W1D 1DS, UK. </pre></BODY></HTML>