1) Notify immediately "contact1"when w,c,u states is detected the FIRST time and send only ONE notification.
2) If not ACK'd in 5mins, escalate by sending only ONE notification to "contact2". And all future notifications should not be sent to any of them.
What I do not understand from Nagios documentation is, how is there two seriviceescalations defined without actually defining service. Also
Code: Select all
define service{
name app-service
active_checks_enabled 1
obsess_over_service 0
notifications_enabled 1
event_handler_enabled 1
retain_status_information 1
retain_nonstatus_information 1
check_period 24x7
max_check_attempts 1 ; Number of times to check before entering HARD State
normal_check_interval 10 ; When OK, check every 10 mins
retry_check_interval 5 ; When not OK, check every 5 mins
first_notification_delay 0 ; Delay in sending first notification
notification_interval 5 ; Time between notifications and is used for escalation
notification_period 24x7
register 0
}
define service{
use app-service
hostgroup_name app-alert-hosts
service_description Market Alert
servicegroups market-alerts
contact_groups contact1
notification_options w,c,u
}
define serviceescalation{
hostgroup_name app-alert-hosts
service_description Market Alert
first_notification 2
last_notification 2
notification_interval 0
contacts contact2
escalation_options w,c
escalation_period 24x7
}