escalation noti send to lv1 and lv2 at the same time

[sacom01]

i have configured escalation notification to MS.Teams with level1 and leve2 as pictures.
It have sent noti to MS.Teams but send to lv1 and lv2 at the same time.
I read "Understanding-Nagios-XI-Notification-Escalations.pdf" already but do not clear about first, last, notification interval.
can you explain me more?
thank you.

[vtrac]

Hi,
How are you doing?

Since you did not setup up "#7 - 0", here's an example of what I think your notification was sent out:

09:00 #1 MS team
09:05 #2 LV1
09:10 #3 LV2
09:15 #4 LV1
09:20 #5 LV2
09:40 #6 LV2
10:00 #7 MS team ..... It would be best to setup "#7 - 0"

https://assets.nagios.com/downloads/nag ... ations.pdf

I would suggested that you setup like the followings.
The one in the PDF was more complicated with notification going from LV1 to LV2 to Lv1 ...

2 - 4, LV1
5 - 6, LV2
7 - 0, LV3


Best Regards,
Vinh

[sacom01]

hi,
I was config escalation as your suggest, but it work like : just send alert to one contact, or all three contacts at the same time. Seem something wrong. Pls help me review attach file.
Thanks

[vtrac]

Hi,
Since you have defined 3 levels of escalations.
Please make sure you define 3 contact groups.

LV1 group1
LV2 group1, group2
LV3 group1, group2, group3

Based on what you defined,
#1 - #3 will be sent out every 5 minutes.
#4 - #6 every 10 minutes
#7 - 0 every 20 minutes.

The issue here is if a group inherits from another group, so please make sure each group is define correctly.

Also, please keep in mind that Nagios is doing hundreds (or thousands) of checks every minute, so there might be delays in sending out these notifications if your check interval is so close together like 5, 10 minutes apart.


Best Regards,
Vinh

[sacom01]

hi Vinh,
i do configured as your suggest but the same result, nagios send alert to 3 level at the same time.
Thanks.

[vtrac]

Hi Hang,
How are you doing?

Setup looks good but not sure if there are any overlapping escalations.

I would also get the state history report:
Please go to Reports > State History:
- Adjust the Period to include the time this occurred
- Select the host from the Limit To dropdown
- Select the service your are testing with
- For Type, select Both
- For State Type, select Both
- For State, select Any
- Click Run
Please send me the report, you can either download it as a PDF or CSV.

And the nagios.log from this testing so we can match them up.

Also, please upload the "profile.zip" as well.


Best Regards,
Vinh

[sacom01]

hi Vinh,
Pls check inbox for download files.
The alert send to ms.teams today but there is no State History report in all time.

[vtrac]

Hi Hang,
How are you doing?
I looked inside your zip file and noticed the "system-profile.tar", which contained "elasticsearch" and "logstash" logs file ..... These looks like Nagios Log Server, not Nagios XI log files.

Any way, I tested on my Nagios XI and it works fine. I got all email sent out correctly starting from notification #1 - notification #7, then notification #0.

Please see attached pictures (screenshots).

What version is your Nagios XI?
Where did you test these escalation? ... prod or test?

Please try delete all your escalation and test again. Please click "Add New" for each level (below).

First, I click "Add New" for #1 - #3,
I then click "Add New" again for notification #4 - #6
Lastly, I click "Add New" for notification #7 - 0
Now, click "Apply Configuration"

As you can see from my attachments (screenshots), the email notification I got included all from #1 - #7, then #0.


Best Regards,
Vinh

[sacom01]

hi Vinh,

Resent you nagios xi profile already. Pls check ib

What version is your Nagios XI? -> 5.7.3
Where did you test these escalation? ... prod or test? -> both test and prod did not work

When add new escalations for a service, have to specify Manage host, Manage contact, Manage service right?
i do testing for service, not host.

[vtrac]

Hi Hang,
How are you doing?

I looked at the objects.cache and did not see any overlapping escallation.
I am confused as to why it sent out all Lv1, Lv2 and Lv3 notification at the same time.

I tested on my Nagios XI and seem to be working fine.

I also asked another team member to take a look at the profile and he said:

His profile looks good at least the objects.cache escalation defs.
I would get a copy of his nagios.log (or archives file) that contains the data and get the Reports > Notification Report for this time as well. That should show us what occurred

Could you please share the "Reports > Notification Report" for the time of the escalation occured?
Also, if you could share the output of the "nagios.log" during the escalation period as well.


Best Regards,
Vinh