Notifications do not stop

[svengo]

Hi

For starters, don't shoot the newbie lol

I had nagios configured with alerts for a specific host, when the host went down notifications started to arrive as per default config every 5min. I have not been able to get the notifications to stop! Even after setting notifications to ff for both the host an its services. In desperation I deleted the host and all its services but the notifications kept coming. After several stop & restarts of nagios and deleting the retention file nothing changed.

I have now stopped the nagios service and still the mail are coming? What am I missing to get the mails to stop?

I have looked at the contacts in XI and only nagiosadmin is defined as a contact but the mail are arriving from root?

------------------------------------------------------------------------------------------
From: Cron Daemon <[email protected]>
To: [email protected]

Subject: Cron <root@nagios-cs> LANG=C LC_ALL=C /usr/bin/mrtg /etc/mrtg/mrtg.cfg --lock-file /var/lock/mrtg/mrtg_l --confcache-file /var/lib/mrtg/mrtg.ok

SNMP Error:
no response received
SNMPv2c_Session (remote host: "XXX.XXXXX.co.za" [XXX.XXX.0.26].161)
community: "kingsley"
request ID: 394144985
PDU bufsize: 8000 bytes
timeout: 2s
retries: 5
backoff: 1)
at /usr/bin/../lib/mrtg2/SNMP_util.pm line 492 SNMPGET Problem for ifInOctets.1 ifOutOctets.1 on [email protected]:::::2:v4only
at /usr/bin/mrtg line 2203
2013-09-08 11:45:02: WARNING: skipping because at least the query for ifInOctets.1 on rooiels2.kingsley.co.za did not succeed
2013-09-08 11:45:02: WARNING: no data for ifInOctets&ifOutOctets:[email protected]. Skipping further queries for Host XXXX.XXXXX.co.za in this round.


=====================================================

[slansing]

Well nagios will send the notifications as the system they originated on, the contact's are simply addresses which you designate to receive notifications. It is possible there was a misconfiguration somewhere and a TON of notifications got spooled up by your server and are now being let out slowly. I would kill your mail transfer agent to stop them if you have to. I suppose we can't see the configuration of the host + service now as you deleted them, but can we have an example of a notification you are receiving? Is it possible they are coming from a host/service that is named similarly but is set up somewhere else?