escalation noti send to lv1 and lv2 at the same time

[vtrac]

Hi Hang,
Here's an example of the "Reports > Notifications" page looks like:

T1.png

Please share screenshot of that notification report for the escalation period of Lv1, Lv2 and Lv3.

Best Regards,
Vinh

[sacom01]

hi Vinh,
Pls find attach file. I have sent you all config related to the service and escalation. Pls help me review.
thanks Vinh.

[vtrac]

Hi Hang,
Can you use other host to test this?
"localhost" is your Nagios XI machine, right?
If you can not PING localhost, then your Nagios XI is down.

How did you make your "localhost" not ping able? .... since this is your Nagios XI machine, if you are not able to PING localhost, then Nagios XI is not checking.

Based on the picture provided below, notification #1 already send out at "01:43:20" .... did you receive mail at that time?

w1.png

Best Regards,
Vinh

[sacom01]

Based on the picture provided below, notification #1 already send out at "01:43:20" .... did you receive mail at that time? --> no, did not receive this notification for all three level. You can see the picture, 3 levels are same.

How did you make your "localhost" not ping able? .... since this is your Nagios XI machine, if you are not able to PING localhost, then Nagios XI is not checking. --> plugin Ping i write to check range of ips (fixed on code), not include localhost. Just add to localhost for easier manage Vinh.

[vtrac]

Hi Hang,
How are you doing?

I looked at the "objects.cache" file and noticed this service below, which is why you got the email notification to all three LV1, LV2 and LV3 right away if "ping' service is down.

contacts notify_teams_LV3_alert,notify_teams_LV2_alert,notify_teams_LV1_alert

Based on this settings, when PING check fail at 1st notification, email will be sent out to all notify_teams_LV3_alert, notify_teams_LV2_alert and notify_teams_LV1_alert.

Code: Select all

define service {
	host_name	localhost
	service_description	check PING server
	check_period	24x7
	check_command	check_PING_tritc!!!!!!!!
	contacts	notify_teams_LV3_alert,notify_teams_LV2_alert,notify_teams_LV1_alert
	notification_period	24x7
	initial_state	o
	importance	0
	check_interval	2.000000
	retry_interval	2.000000
	max_check_attempts	5
	is_volatile	0
	parallelize_check	1
	active_checks_enabled	1
	passive_checks_enabled	1
	obsess	1
	event_handler_enabled	1
	low_flap_threshold	0.000000
	high_flap_threshold	0.000000
	flap_detection_enabled	1
	flap_detection_options	a
	freshness_threshold	0
	check_freshness	0
	notification_options	c
	notifications_enabled	1
	notification_interval	120.000000
	first_notification_delay	0.000000
	stalking_options	n
	process_perf_data	1
	retain_status_information	1
	retain_nonstatus_information	1
	}

Best Regards,
Vinh

[sacom01]

hi Vinh,
Dont understand why you always ask me "how are you doing"
i can not specify where is my mistake in the config.
All my configs i was sent you in previous comments. So pls help me review any mistake in there.
Tell me if you need more information.

[ssax]

You don't have any escalations setup for check PING server that I can see.

Please edit ALL of your service escalations and change the service from check application process to check PING server or test with the check application process service instead of check PING server. Then apply configuration.

[benjaminsmith]

HI sacom01,

Vinh is out and I'm assisting on this ticket. I'd like to gather up the nagios log files from the time periods in question to check the notification events in the logs.

Those are in the following directory. The logs are rotated daily and labeled by date, so any logs dated 8-6 would contain the date from 8-5.

Code: Select all

/usr/local/nagios/var/archives

I would also like to get the most current phpmailer log. Are all the contacts receiving 3 notifications?

Code: Select all

 /usr/local/nagiosxi/tmp/phpmailer.log

Lastly, is an offline system like the other one. We may need to set up a remote if necessary.


Thanks,
Benjamin

[sacom01]

Capture.PNG

hi ben,

"Are all the contacts receiving 3 notifications?" --> yes they are.

our system is offline system so unable to remote to.

i can not find phpmailer.log from here /usr/local/nagiosxi/tmp/phpmailer.log

[vtrac]

Hi @Sacom01,
I'm very sorry!! ... In our training, we always started out with some kind of greetings ... just to be friendly and nice!!!
I usually used "How are you doing?" or "Hope you have a great day!!".

Any way, as stated in the last replied by Sean, you were testing with a service that did not have any escalation defined.

Looks like you were testing with the below service, which is why you got all three levels of notifications.

Code: Select all

define service {
   host_name   localhost
   service_description   check PING server
   check_period   24x7
   check_command   check_PING_tritc!!!!!!!!
   contacts   notify_teams_LV3_alert,notify_teams_LV2_alert,notify_teams_LV1_alert
   notification_period   24x7
   initial_state   o
   importance   0
   check_interval   2.000000
   retry_interval   2.000000
   max_check_attempts   5
   is_volatile   0
   parallelize_check   1
   active_checks_enabled   1
   passive_checks_enabled   1
   obsess   1
   event_handler_enabled   1
   low_flap_threshold   0.000000
   high_flap_threshold   0.000000
   flap_detection_enabled   1
   flap_detection_options   a
   freshness_threshold   0
   check_freshness   0
   notification_options   c
   notifications_enabled   1
   notification_interval   120.000000
   first_notification_delay   0.000000
   stalking_options   n
   process_perf_data   1
   retain_status_information   1
   retain_nonstatus_information   1
   }

Best Regards,
Vinh