Alert Configuration

[Aron Schneider]

Thanks very much for the utility.  We're trying to make this solution part of our network monitorning.  We have the following questions:

1. How do we disable alerts and notifications of a sys_node_down\sys_node_up status during a set time period?  For example, during the 12am to 4am hours, the majority of our servers go through a restart process.  How do we configure the scheduling so that the email notification of sys_node_down and sys_node_up are not captured over a certain time period?

2. How do we configure the email alerts to only send once email every 5 minutes and stop after 4 emails when a sys_node_down event occurs.  In other words, we've created an event processing policy for sys_node_up and sys_node_down for sending an email notification once when an event occurs.  How do we create an email event so that we are notified once every 5 minutes with a max of 4 emails?

Thanks in advance.

Aron

[victor]

Hello!

@aron-schneider said in Alert Configuration:

1. How do we disable alerts and notifications of a sys_node_down\sys_node_up status during a set time period?  For example, during the 12am to 4am hours, the majority of our servers go through a restart process.  How do we configure the scheduling so that the email notification of sys_node_down and sys_node_up are not captured over a certain time period?

You can achieve this by adding additional filtering script to the rule. Script for checking if current time is not between 00:00 and 04:00 (04:00 not included) may look like following:

sub main()
{
   now = localtime();
   return now->hour >= 4;
}

@aron-schneider said in Alert Configuration:

2. How do we configure the email alerts to only send once email every 5 minutes and stop after 4 emails when a sys_node_down event occurs.  In other words, we've created an event processing policy for sys_node_up and sys_node_down for sending an email notification once when an event occurs.  How do we create an email event so that we are notified once every 5 minutes with a max of 4 emails?

There are no easy way to achieve this. However, you can try the following:

1. Create custom event, like NODE_STILL_DOWN;
2. In processing policy, add action that runs a script on server; this script should run nxevent tool four times to post NODE_STILL_DOWN event to server four times with 5 minutes interval, and then exit;
3. Add event processing policy rule for NODE_STILL_DOWN event - it should check if node is still down and if yes, send additional email.

Hope this helps!

Best regards,
Victor