<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=us-ascii"><meta name=Generator content="Microsoft Word 14 (filtered medium)"><style></style></head><body lang=EN-GB link=blue vlink=purple><div class=WordSection1>Escalations are a little pesky to get working correctly.<o:p></o:p><o:p> </o:p>Here is an example.<o:p></o:p><o:p> </o:p>define serviceescalation{<o:p></o:p> host_name .*<o:p></o:p> service_description .*<o:p></o:p> first_notification 1<o:p></o:p> last_notification 0<o:p></o:p> notification_interval 60<o:p></o:p> contact_groups admins<o:p></o:p> escalation_period 24x7<o:p></o:p> escalation_options w,u,c,r<o:p></o:p> }<o:p></o:p><o:p> </o:p>define serviceescalation{<o:p></o:p> host_name .*<o:p></o:p> servicegroup_name disks,dns,firewall,load,mailq,processes,sendmail,ssh,time<o:p></o:p> first_notification 2<o:p></o:p> last_notification 2<o:p></o:p> notification_interval 60<o:p></o:p> contact_groups support<o:p></o:p> escalation_period 24x7<o:p></o:p> escalation_options w,u,c,r<o:p></o:p> }<o:p></o:p><o:p> </o:p>define hostescalation{<o:p></o:p> host_name .*<o:p></o:p> first_notification 1<o:p></o:p> last_notification 0<o:p></o:p> notification_interval 60<o:p></o:p> contact_groups admins<o:p></o:p> escalation_period 24x7<o:p></o:p> escalation_options d,u,r<o:p></o:p> }<o:p></o:p><o:p> </o:p>define hostescalation{<o:p></o:p> host_name .*<o:p></o:p> first_notification 2<o:p></o:p> last_notification 2<o:p></o:p> notification_interval 60<o:p></o:p> contact_groups support<o:p></o:p> escalation_period 24x7<o:p></o:p> escalation_options d,u,r<o:p></o:p> }<o:p></o:p><o:p> </o:p>This alerts admins after the interval set on the host/service (5 mins) and then every hour. On the second alert (5+60 mins) it will alert support (for the services listed) just the once but then continue to alert admins every hour.<o:p></o:p><o:p> </o:p>At least that’s what I think happens, I’m never sure with esculations!<o:p></o:p><o:p> </o:p>For this to work I had to enable regular expressions and set up service groups.<o:p></o:p><o:p> </o:p>I have a feeling I also removed the following from my hosts definitions as well.<o:p></o:p><o:p> </o:p>contact_groups admins<o:p></o:p>notification_interval 30<o:p></o:p>notification_period 24x7<o:p></o:p>notification_options d,r<o:p></o:p><o:p> </o:p>Hope that helps and gives you some ideas…<o:p></o:p><o:p> </o:p>Duncan<o:p></o:p><o:p> </o:p><o:p> </o:p><div><div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0cm 0cm 0cm'>From: Frost, Mark {PBC} [mailto:mark.frost1@pepsico.com] Sent: 10 November 2010 17:26 To: 'Nagios Users List' Subject: [Nagios-users] different notification_intervals by contact<o:p></o:p></div></div><o:p> </o:p>So we're setting up some Nagios checks for a new team and they're asking for something new that I'm not really sure we can do with Nagios. For any production alerts they want to receive pager alerts every 15 minutes and e-mail alerts every 60 minutes. Since each host/service definition has only a single notification_interval setting and contact definitions don’t allow a notification_interval setting, I don't see how this can be done within that context.<o:p></o:p><o:p> </o:p>We don't currently use escalations for anything, but I've been staring at them and trying to figure out how that might work for us. In terms of using escalations to solve this problem I'm struck by several issues:<o:p></o:p><o:p> </o:p>- I'd be trying to use escalations to setup an indefinite pattern, not a system where there's an last_notification where everyone gets the notifications.<o:p></o:p>- I have to do this for a lot of hosts/services and it doesn't look like I can wildcard service_descriptions (tried it and it failed).<o:p></o:p><o:p> </o:p>My other thought is to just have 2 checks for the same service where check A has the 15-minute notification_interval and goes to pagers and check B has a 1-hour notification_interval and goes to e-mail. And that's for a lot of services. I can't really do the duplicate checks on hosts. But either way, you know, "yuck".<o:p></o:p><o:p> </o:p>I keep thinking there's some easier more obvious solution that's eluding me to this. Is something that anyone else has solved? I'm inclined to tell them that we can't do this and get them to unify on one notification_interval like everyone else, but before I do, I thought I'd ask.<o:p></o:p><o:p> </o:p><o:p> </o:p>Thanks<o:p></o:p><o:p> </o:p>Mark<o:p></o:p> -- This message has been scanned for viruses and dangerous content by <a href="http://www.mailscanner.info/">MailScanner</a>, and is believed to be clean. <o:p></o:p></div></body></html>