Alerts are not working

[gimeb]

After the last change of setting the thresholds to 0 and 0 I started receiving the alerts. See below and let me know what is the issue, i.e. what should be done to correctly set the values

Apache-200-Response came back with a CRITICAL state at Mon, 15 Feb 2016 15:28:51 -0800
The alert was processed with the following thresholds:
• Lookback period: 60s
• Warning: 0
• Critical: 0
Here is the full alert output:
CRITICAL: 1 matching entries found |logs=1;0;0
See the last 60s in the Nagios Log Server dashboard.
Nagios Log Server

[jolson]

See below and let me know what is the issue, i.e. what should be done to correctly set the values

I'm not sure what you're asking for - what result are you hoping to achieve? It looks like everything is working fine now.

[gimeb]

My understanding that my original settings of Check Interval 5m and Loopback of 5min with thresholds of 1 and 3 should produce alerts for the "200" messages occurring every minute. See the attachments of the query I have provided before. And I do not have to tweak the settings to 60sec with thresholds to 0 and 0 to force them. Please let me know if my understanding is correct

[jolson]

My understanding that my original settings of Check Interval 5m and Loopback of 5min with thresholds of 1 and 3 should produce alerts for the "200" messages occurring every minute.

It is worth understanding that the threshold setting is by default a _greater than_ setting - meaning that if you set it to 1, Nagios Log Server will send you an alert when _more than 1_ log shows up in your query.

[gimeb]

As such if the "200" messages are occurring in the log every minute I should be alerted within 5min interval since I will have 5 of "200" messages which will satisfy my critical threshold of 1 and 3. As I correct?

[jolson]

As such if the "200" messages are occurring in the log every minute I should be alerted within 5min interval since I will have 5 of "200" messages which will satisfy my critical threshold of 1 and 3. As I correct?

Yes. If you have 5 events enter the dashboard (and your thresholds are 1 and 3 respectively) you'll receive alerts when you have more than one or three alerts.

[gimeb]

The original settings did not worked and we had to tweak the setting to force the alerts. This is the reason I am posing the question and would like to know if this an issue with the product or am I doing something wrong.

[hsmith]

I thought it was working with the new thresholds? What would you like us to clarify on?

[gimeb]

I have created a dashboard that shows hits for particular application. How to set up an alert on the hit count that was exceeded. For example: Recall Service application was hit more than 15 times during 10 sec interval. I have attached the document with screen print of the dashboard and Recall Service application.

[Box293]

Does this work:

Selection_024.png