|
You can see what times these emails were received. The first email (down) however using the %p (%h) is %s because %c status="%e" in %a at %y %z format for the alert reported the incorrect time of last change. I assume it is reporting the last status change before the one creating the down condition. I wonder if that perhaps could be changed to retrieve the current status change not the previous one. Perhaps this has come up (using web templates) before and I was not here. Is it possible to have the first down alert (using the %y %z variables when downcount = 1) Use the current date and time (or the %d %t variables?)? |
--- Begin Message --- Title: DNS service is DOWNDNS service (192.168.1.11) is DOWN because NTService : DNS status="Start Pending" in 16 ms at 7/17/2003 05:18
--- End Message ---
--- Begin Message --- Title: DNS service is RUNNINGDNS service (192.168.1.11) is RUNNING because NTService : DNS status="Running" in 0 ms at 7/17/2003 11:48
--- End Message ---
