Repeated alerts for users migrated from Nagios Core

[faiwong]

I have a number of hosts, services and contacts from Nagios Core, recently I migrated them to Nagios Core 5.
Originally it was using "notify-host(service)-by-email" to send email alert, after migration we created users linking with the contacts, and use "xi_host(service)_event_handler" for alerting. Now once there is any alert, users got 2 emails, one sending from xi_host_event_handler and one sending from notify-host-by-email, why does this happen? I can't find anything wrong in configuration indeed.

[rkennedy]

Are you using sendmail or SMTP?

Can you post the service definition of one for us to take a look at?

[faiwong]

Using sendmail locally.

Basically we only see "notify-host-by-email" in template "generic-contact".
But the user getting repeated email is using template "xi_contact_generic" and he actually receiving email one by "notifiy-host-by-email" and one by "xi-host-notification-handler".
Here are an example of the service and contact we are getting double alerts.

Code: Select all

define contact {
        name                                    generic-contact
        host_notification_period                24x7
        service_notification_period             24x7
        host_notification_options               d,r,f,s
        service_notification_options            w,c,r,f,s
        host_notification_commands              notify-host-by-email
        service_notification_commands           notify-service-by-email
        register                                0
        }

define service {
        service_description             PING
        use                             generic-net-service
        hostgroup_name                  SHHO
        check_command                   check_ping!200.0,20%!600.0,60%
        check_interval                  5
        retry_interval                  1
        register                        1
        }

define service {
       name                                     generic-net-service
       is_volatile                              0
       max_check_attempts                       3
       check_interval                           5
       retry_interval                           2
       active_checks_enabled                    1
       passive_checks_enabled                   1
       check_period                             24x7
       parallelize_check                        1
       obsess_over_service                      1
       check_freshness                          0
       event_handler_enabled                    1
       flap_detection_enabled                   1
       process_perf_data                        1
       retain_status_information                1
       retain_nonstatus_information             1
       notification_interval                    30
       notification_period                      24x7
       notification_options                     c,r,
       notifications_enabled                    1
       contact_groups                           network
       register                                 0
}

define contactgroup {
        contactgroup_name                       network
        alias                                   network Administrators
        contactgroup_members                    xi_testing_group
        }

define contactgroup {
        contactgroup_name                       xi_testing_group
        alias                                   Control Tier Group
        members                                 hyleung
}

define contact {
        contact_name                            hyleung
        alias                                   hyeung
        host_notification_period                hyleung_notification_times
        service_notification_period             hyleung_notification_times
        host_notification_options               d,u,r,f,s
        service_notification_options            w,u,c,r,f,s
        email                                   [email address removed]
        use                                     xi_contact_generic
        }

define contact {
        name                                    xi_contact_generic
        contactgroups                           xi_contactgroup_all
        host_notifications_enabled              1
        service_notifications_enabled           1
        host_notification_period                xi_timeperiod_24x7
        service_notification_period             xi_timeperiod_24x7
        host_notification_options               d,u,r,f,s,
        service_notification_options            w,u,c,r,f,s,
        host_notification_commands              xi_host_notification_handler
        service_notification_commands           xi_service_notification_handler
        can_submit_commands                     1
        retain_status_information               1
        retain_nonstatus_information            1
        register                                0
        }

[hsmith]

Do you have an 'XI User' with the same name as the 'Contact'?

This is a good document to take a look at:

https://assets.nagios.com/downloads/nag ... ntacts.pdf

[faiwong]

Yes, we have created them according to the document.

[Box293]

Taking a step back for a second.

But the user getting repeated email is using template "xi_contact_generic" and he actually receiving email one by "notifiy-host-by-email" and one by "xi-host-notification-handler".
Here are an example of the service and contact we are getting double alerts.

Code: Select all

define service {
        service_description             PING
        use                             generic-net-service
        hostgroup_name                  SHHO
        check_command                   check_ping!200.0,20%!600.0,60%
        check_interval                  5
        retry_interval                  1
        register                        1
        }

If it's the ping service you are receiving multiple emails for, is it possible you are receiving one email for the HOST object (which happens to be a ping check) and a SEPARATE email for the Ping service?

Can you paste the contents of the duplicate alerts here so we can compare them please.

Also what is the output of these commands:

Code: Select all

ipcs -q
ps -ef | grep nagios.cfg

[faiwong]

Both of the alerts are "host" alert, and they are about 2 minutes apart.
When the host was down, 1st alert received, 2nd alert (repeated) came around 2 minutes later, after the notification interval, 2 alerts again, until the host is back online.
So in our opinion it is something duplicated. But it was OK for Nagios XI users newly created (not imported from core).

Code: Select all

[nagios@nagiosxi cfgprep]$ ipcs -q

------ Message Queues --------
key        msqid      owner      perms      used-bytes   messages    
0xf4000002 196608     nagios     600        0            0          

[nagios@nagiosxi cfgprep]$ ps -ef | grep nagios.cfg
nagios   16052     1  3 11:38 ?        00:00:04 /usr/local/nagios/bin/nagios -d /usr/local/nagios/etc/nagios.cfg
nagios   16415 16052  0 11:39 ?        00:00:00 /usr/local/nagios/bin/nagios -d /usr/local/nagios/etc/nagios.cfg
nagios   22083  8996  0 11:40 pts/0    00:00:00 grep nagios.cfg

[Box293]

Do you have paid support?

This is something that will be much easier to resolve through a support ticket.

If you do, please send an email to [email protected] referencing this forum thread and we'll take it from there. Reply to this thread when you have done this so we can confirm we received the email.

Otherwise you'll need to make a copy of your profile available to us and then email that url to the support user in this forum:
https://support.nagios.com/forum/member ... le&u=62610
Click the Admin menu
System Config > System Profile
Click the Download Profile button and send us that file

[faiwong]

No problem, we just bought the paid support last week.

[rkennedy]

Please submit a support ticket in, and let us know once this is done.

As of now, I don't see a ticket open currently for this. Did you email [email protected]?