SINGLE ALERT NOTIFICATION IN PASSIVE CHECK

[itSmart]

Hi everybody,
we installed nagios server to manage 50 servers in passive check.
Every NSCA clients send data to NAGIOS Server every 5 minutes.
We have some NSCA clients with services warning and critical and we receive this notification every 5 minutes.
We'd like to receive only one notification for each NSCA client only the first time the problem occurs.
We have already set (for each services) in 'Configure'-'Nagios Core Config Manager'-'Services' TAB 'Alert Setting'-'Notification interval=0'.
But it seems not to work cause we still receive the alert every 5 minutes.
Any ideas?
Thanks
F.

[nscott]

One method of doing this would be to use an escalation for these servers. Set some dummy contact would be the default contact for all of these servers, and then make a host or service contact escalation that would only receive one notification. See the following post:
http://www.mail-archive.com/nagios-user ... 28159.html

[jsmurphy]

Would disabling state stalking also help in this situation? Assuming you don't care if the error message changes... If you set the standard notification for that service to only message once, would it message again if it received an identical check result on the next update or is it discarded with stalking off?

[itSmart]

One method of doing this would be to use an escalation for these servers. Set some dummy contact would be the default contact for all of these servers, and then make a host or service contact escalation that would only receive one notification. See the following post:
http://www.mail-archive.com/nagios-user ... 28159.html

Thanks nscott, but we cannot create a dummy contact; each Server has his own contact used for a remote login and monitoring.
Do You know if the passive check allow this once alerting?
Thank you
F.

[itSmart]

Would disabling state stalking also help in this situation? Assuming you don't care if the error message changes... If you set the standard notification for that service to only message once, would it message again if it received an identical check result on the next update or is it discarded with stalking off?

Hi jsmurphy,
the stalking is off and the error messages are identical, except only the timestamp:

FIRST ALERT
***** Nagios XI Alert *****
Notification Type: PROBLEM
Service: SERVICE_StatoServizi
Host: CUSTOMER_SERVER
Address: CUSTOMER_SERVER
State: CRITICAL
Info:
CRITICAL: SrvLicService: stopped (critical)
Date/Time: 21/10/2011 10:30:05

NEXT ALERT
***** Nagios XI Alert *****
Notification Type: PROBLEM
Service: SERVICE_StatoServizi
Host: CUSTOMER_SERVER
Address: CUSTOMER_SERVER
State: CRITICAL
Info:
CRITICAL: SrvLicService: stopped (critical)
Date/Time: 21/10/2011 10:25:07

Any suggestions?
Thank you
F.

[mguthrie]

Can you access the Core Config Manager->Services page, and click the "Download" icon for this particular service and then post that config? (Remove any private data). It should only be notifying once if your notification interval is 0. There's something we're missing somewhere....

[itSmart]

Can you access the Core Config Manager->Services page, and click the "Download" icon for this particular service and then post that config? (Remove any private data). It should only be notifying once if your notification interval is 0. There's something we're missing somewhere....

Hi mguthrie,
here the config file.
I agree that it should work only with notification interval = 0.
I have a doubt, it's valid also in Passive Check?
We only have Passive Checks enabled.

Thanks
F.

[mguthrie]

Have you been able to "Apply Configuration" successfully? According to this config you shouldn't be receiving notifications for this service at all...

define service {
host_name CAVAZZINI_SBS-CAVAZZINI
service_description SERVICE_StatoServizi
use xiwizard_passive_service
max_check_attempts 1
check_interval 1
retry_interval 1
passive_checks_enabled 1
check_period 24x7
notification_interval 0
notification_period 24x7
notification_options w,r
notifications_enabled 0
contacts nagiosadmin
contact_groups admins,GRP_Alert
_xiwizard passiveobject
register 1
}

Are you seeing "sync missed" in the Core Config Manager on the services page? If so, the configuration changes haven't been applied yet.

[itSmart]

Have you been able to "Apply Configuration" successfully? According to this config you shouldn't be receiving notifications for this service at all...

define service {
host_name CAVAZZINI_SBS-CAVAZZINI
service_description SERVICE_StatoServizi
use xiwizard_passive_service
max_check_attempts 1
check_interval 1
retry_interval 1
passive_checks_enabled 1
check_period 24x7
notification_interval 0
notification_period 24x7
notification_options w,r
notifications_enabled 0
contacts nagiosadmin
contact_groups admins,GRP_Alert
_xiwizard passiveobject
register 1
}

Are you seeing "sync missed" in the Core Config Manager on the services page? If so, the configuration changes haven't been applied yet.

Yes I have "Apply Configuration" successfully. All the Services in the Core Config Manager are in "Sync Status = Synced"
F.

[mguthrie]

Hmm, can you send us an email with your latest "Configuration Snapshot"? Something doesn't add up, if "notifications_enabled 0" is set, you shouldn't be receiving any notifications for the service. Access the Configure->Core Config Manager->Configuration Snapshots page, and go ahead and email [email protected] the latest tarball. We'll post replies here.