Nagios Support Forum

After the last change of setting the thresholds to 0 and 0 I started receiving the alerts. See below and let me know what is the issue, i.e. what should be done to correctly set the values

Apache-200-Response came back with a CRITICAL state at Mon, 15 Feb 2016 15:28:51 -0800
The alert was processed with the following thresholds:
• Lookback period: 60s
• Warning: 0
• Critical: 0
Here is the full alert output:
CRITICAL: 1 matching entries found |logs=1;0;0
See the last 60s in the Nagios Log Server dashboard.
Nagios Log Server

See below and let me know what is the issue, i.e. what should be done to correctly set the values

I'm not sure what you're asking for - what result are you hoping to achieve? It looks like everything is working fine now.

My understanding that my original settings of Check Interval 5m and Loopback of 5min with thresholds of 1 and 3 should produce alerts for the "200" messages occurring every minute. See the attachments of the query I have provided before. And I do not have to tweak the settings to 60sec with thresholds to 0 and 0 to force them. Please let me know if my understanding is correct

My understanding that my original settings of Check Interval 5m and Loopback of 5min with thresholds of 1 and 3 should produce alerts for the "200" messages occurring every minute.

It is worth understanding that the threshold setting is by default a _greater than_ setting - meaning that if you set it to 1, Nagios Log Server will send you an alert when _more than 1_ log shows up in your query.

As such if the "200" messages are occurring in the log every minute I should be alerted within 5min interval since I will have 5 of "200" messages which will satisfy my critical threshold of 1 and 3. As I correct?

As such if the "200" messages are occurring in the log every minute I should be alerted within 5min interval since I will have 5 of "200" messages which will satisfy my critical threshold of 1 and 3. As I correct?

Yes. If you have 5 events enter the dashboard (and your thresholds are 1 and 3 respectively) you'll receive alerts when you have more than one or three alerts.

The original settings did not worked and we had to tweak the setting to force the alerts. This is the reason I am posing the question and would like to know if this an issue with the product or am I doing something wrong.

I thought it was working with the new thresholds? What would you like us to clarify on?

I have created a dashboard that shows hits for particular application. How to set up an alert on the hit count that was exceeded. For example: Recall Service application was hit more than 15 times during 10 sec interval. I have attached the document with screen print of the dashboard and Recall Service application.

Does this work: