I've solved my problem differencing events panel and mail received by trigger. I've noticed that the trigger matches randomly TCP content alarm only on UP states (not all and not on down states). Putting the duration field on last condition works every time.
IF duration is > "10 Minutes" AND "type" is IN "TCP CONTENT", then "send mail", stop this trigger ==> BAD IF "type" is IN "TCP CONTENT" AND duration is > "10 Minutes" then "send mail", stop this trigger _______________ David LIMA Professional Services www.scc.com -----Message d'origine----- De : [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] De la part de LIMA David Envoyé : jeudi 17 novembre 2005 13:37 À : [email protected] Objet : [jffnms-users] Alarm Duration and triggers Hi list, Can someone tell me how the duration field is considered by the consolidator process cause i can't understand something I have setup JFFNMS to monitor Postfix using the TCP content interface type. The events generate an alarm if telnet to port 25 does not match "220 Postfix SMTP server". The problem is that the tcp connect sometimes timeouts cause of heavy load, no problem, I have setup a trigger that match ALARMS duration > 10 mins (2 cycles of polling) > and says IF duration is > "10 Minutes" AND "type" is IN "TCP CONTENT", then "send mail", stop this trigger. But i I check one of my alerts, the duration is not > 10 mins, do I miss something ? --------------------------------------------- hello XXXX: Alarm Time: 2005-11-17 08:40:15 To 2005-11-17 08:46:54 Alarm Type: TCP Content valid Interface: XXXXX extranet Port 25 XXXX smtp Event: 2005-11-17 08:46:54 XXXXX extranet Event: Content Response on Port 25 is valid 220 Postfix SMTP server Event: 2005-11-17 08:40:15 XXXXX extranet Event: Content Response on Port 25 is invalid ------------------------------------------------------ _______________ David LIMA Professional Services www.scc.com ------------------------------------------------------------------------------------------ Ce message contient des informations dont le contenu est susceptible d'etre confidentiel. Il est destine au(x) destinataire(s) indique(s) exclusivement. A moins que vous ne fassiez partie de la liste des destinataires, ou que vous soyez habilite a recevoir le mail a leur place, il vous est interdit de le copier, de l'utiliser ou de devoiler son contenu a un tiers. Si vous avez recu cet email par erreur, merci de prendre contact avec l'emetteur. Les opinions exprimees dans cet e-mail sont celles de l'emetteur et ne refletent pas necessairement celles de l'entreprise. Ce e-mail peut contenir des pieces jointes dont certaines pourraient contenir des virus qui pourraient endommager votre systeme informatique. La compagnie a pris toutes dispositions afin de minimiser ce risque et decline toute responsabilite pour toute perte ou dommage resultant directement ou indirectement de l'utilisation de cet email ou de son contenu. Il vous appartient d'effectuer vos propres controles anti-virus avant d'ouvrir la ou les pieces jointes. ------------------------------------------------------------------------------------------ ------------------------------------------------------- This SF.Net email is sponsored by the JBoss Inc. Get Certified Today Register for a JBoss Training Course. Free Certification Exam for All Training Attendees Through End of 2005. For more info visit: http://ads.osdn.com/?ad_idv28&alloc_id845&op=ick _______________________________________________ jffnms-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/jffnms-users ------------------------------------------------------- This SF.Net email is sponsored by the JBoss Inc. Get Certified Today Register for a JBoss Training Course. Free Certification Exam for All Training Attendees Through End of 2005. For more info visit: http://ads.osdn.com/?ad_idv28&alloc_id845&op=click _______________________________________________ jffnms-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/jffnms-users
