Alerts are not working

[gimeb]

I have successfully configured Mail Setting and received “This email is a test from Nagios Log Server” email into my mailbox. However, when I have setup an Alert I did not receive any notifications. This is a very simple alert just to validate its functionality. The Alert is set for my query to monitor response code 200 from Apache logs. I see from apache logs that 200 messages are generated every minute. I have attached screen prints for the Alerts and the Dashboard. Please advise.

[hsmith]

Can we please see what is under the 'advanced (manage query)' section of your alert?

Also try setting the threshold's to 0 and 0.

[gimeb]

The following is on the Advanced section. Please let me know if I should proceed with threshold's to 0 and 0.

{"query":{"filtered":{"query":{"bool":{"should":[{"query_string":{"query":"200"}}]}},"filter":{"bool":{"must":[{"range":{"@timestamp":{"from":1455046238707,"to":1455219038707}}}],"must_not":[{"fquery":{"query":{"query_string":{"query":"host:(\"0:0:0:0:0:0:0:1\")"}},"_cache":true}},{"fquery":{"query":{"query_string":{"query":"host:(\"136.133.231.211\")"}},"_cache":true}},{"fquery":{"query":{"query_string":{"query":"type:(\"eventlog\")"}},"_cache":true}}]}}}}}

[hsmith]

Please let me know if I should proceed with threshold's to 0 and 0.

Give that a shot and let me know if it fixes your issue.

[gimeb]

I have changed the threshold's to 0 and 0. There results are still the same - no alert notifications

[jolson]

I see that the 'IBM' alert you've generating is returning 0 results. It's likely that there was a mis-configuration somewhere - I recommend taking a look at the following forum post:
https://support.nagios.com/forum/viewto ... 37&t=32548

Let me know if you have any questions about the above. I believe you'll need to delete your current alert and re-make it using an appropriate query. If you're having problems after reading the above and remaking the alert, please post back and let us know. Thanks!

[gimeb]

I have repeated the same steps as in the link you have provided and still not getting alerts. I have attached screen prints of every step to illustrate. Please let me know what I am doing wrong

[hsmith]

What happens if you change Check Interval and Lookback Period to 60s?

[gimeb]

I have updated the alert to 60s and activated it. I can see the matching is 1. However, no e-mail was sent. See the attached and advise

[jolson]

I have updated the alert to 60s and activated it. I can see the matching is 1. However, no e-mail was sent. See the attached and advise

It looks like your thresholds are still set to 1, could you try setting them to 0 and re-running the alert?