How to set NLS to alert on Specific Time Interval

[Mitchell]

I am looking for some alerts to fire at certain time , please can you tell us how we can achieve this in Nagios Log Server ?

Thanks,
Ramesh

[hsmith]

Are you talking about time of day, or an amount of minutes apart?

[Mitchell]

time of the day , say from 9:30 AM to 5 PM and 10 PM to 2 AM

Thanks,
Ramesh

[jolson]

At the moment this is not a possibility in Nagios Log Server - I could certainly submit a feature request on your behalf. Would that be alright?

Thanks!

Jesse

[Mitchell]

yes , please submit a feature request , but currently is there any work around if i want to alert on specific time of the day ?

Thanks,
Ramesh

[Mitchell]

to be specific , if i want to alerts to run on just one time frame like 9 AM to 6 PM , is this possible to do or no ?

Thanks,
Ramesh

[hsmith]

This is not currently possible. There is currently a feature request in our system (6108) for this to be added. I can't provide an ETA, but I can say that it is on the roadmap.

[Jklre]

This is not currently possible. There is currently a feature request in our system (6108) for this to be added. I can't provide an ETA, but I can say that it is on the roadmap.

I have something kinda related to this.

I have a filter for a range setup in NLS out of the message field

for example:

field must
field : message
query : [09:30:00 TO 17:00:00]

The message looks like This <13>Jan 29 17:10:01 ibm570b4 ALERT*CRIT: Que: DP.ERROR has a message over 60 minutes old. (ECS) Ver 6.0.2.5

This was working previously. but it looks like I can not filter by this range anymore.

rangenotworking.jpg

Actually looking at another alert I am able to filter it. But not with the new alert I'm trying to setup.

rangeisworking.jpg

Kinda funky Any ideas? Thanks.

[hsmith]

@jklre

Could this be a discrepancy between using the UTC time in one filter, in the first screenshot, and not using it in the other?

[Jklre]

@jklre

Could this be a discrepancy between using the UTC time in one filter, in the first screenshot, and not using it in the other?

I believe They both use the same time format In the message.

Message one
<13>Feb 1 08:55:01 ibm570b4 ALERT*CRIT: Que: TRAVELERS.GLASS.INBOUND has a message over 333.333333333333 minutes old. (ECS) Ver 6.0.2.5

<13>Jan 29 23:50:02 ibm570b4 ALERT*CRIT: Que: TRAVELERS.GLASS.INBOUND has a message over 333.333333333333 minutes old. (ECS) Ver 6.0.2.5

Message 2
<13>Jan 29 16:05:01 ibm570b4 ALERT*CRIT: Que: TRAVELERS.DP.ERROR has a message over 60 minutes old. (ECS) Ver 6.0.2.5

<13>Jan 29 01:20:02 ibm570b4 ALERT*CRIT: Que: TRAVELERS.DP.ERROR has a message over 60 minutes old. (ECS) Ver 6.0.2.5

I also was playing around with the range on the messages:

[17:00:00 TO 17:30:00] works

[16:00:00 TO 17:30:00] works

[15:00:00 TO 17:30:00] works

[14:00:00 TO 17:30:00] does not work.

Working

works.jpg

broken

broken.jpg

Thank you