Frequent State: UP Notifications when state never went down

[rarosswa]

Hey all,

I'm using Nagios XI. We are getting a lot needless alerts and I am struggling to find documentation to help me so I'm reaching out here.

Basically we are getting many alerts for things that don't seem to be an issue. I use both ncpa and nrpe due to the variation of the environment I'm working on due to necessity.

What is happening as of recently is that we will get timeout alerts or just UP alerts for services that aren't actually having any issues, the Nagios server itself just couldn't connect to the service for a short period of time and I was notified. Another example is that a linux server will appear fine in Nagios XI and then I get an alert saying...

Host: (host)
State: UP
Address: (host address)
Info: (host) rta 0.194 lost 0%
Date/Time: (date)

So the host never actually showed as down or warning at all it just alerted me that it was good to go out of the blue. Even worse is I have set the "first notification delay" to 5 minutes and I'm still getting an alert. I think maybe nagios is suppressing the notification for 5 minutes but still is sending the "all clear" within the 5 minute window, but I am not certain.

Moving forward I've been trying to look into flapping detection but I haven't found a guide on that. Do you think that will help/if so can you help me turn that detection on so I am not getting these false alerts? Is there another setting I am overlooking that would solve this problem?

Thank you all so much,

rarosswa

[kg2857]

You seem to be asking about several issues.

"the Nagios server itself just couldn't connect to the service for a short period of time"

Well, that's an issue nagios should report on.

If you don't want to be notified on up, or flapping, disable them. It seems that the system is doing exactly what it's configured to do, but you don't like the noise from what you've configured it to do...

[rarosswa]

Basically how to I suppress short term "clearing" alerts? I have the first notification delay set to 5 minutes but I am still getting flapping alerts/alerts for something clearing.