Nagios Support Forum

Posted: **Wed Nov 04, 2015 1:54 pm**

only failed header messages are in /var/mail/ubuntu.
Where can i get success message headers?

Posted: **Wed Nov 04, 2015 2:00 pm**

Look for a message in the inbox of the alerts that are working, and depending on your client you should be able to find a 'Show Headers', or 'Message Details' part.

Posted: **Wed Nov 04, 2015 2:10 pm**

alerts-warning email and alerts911 email are linked to my gmail account

Code: Select all

                                                                                                                                                                                                                                                               
Received-SPF: permerror (google.com: permanent error in processing during lookup of [email protected]) client-ip=64.78.22.121;
Resent-From: <[email protected]>
To: <[email protected]>
Subject: ** WSA PROBLEM Service Alert: weblinux01/Free memory is WARNING **
Message-ID: <[email protected]>
Date: Wed, 4 Nov 2015 12:50:39 -0600
From: <[email protected]>
MIME-Version: 1.0
Content-Type: text/plain
Resent-Message-Id: <[email protected]>
Resent-Date: Wed,  4 Nov 2015 10:50:41 -0800 (PST)

***** Nagios *****

Notification Type: PROBLEM

Service: Free memory
Host: weblinux01
Address: 10.0.1.30
State: WARNING

Date/Time: Wed Nov 4 12:50:39 CST 2015

Additional Info:

WARNING: 91% Used Memory

Posted: **Wed Nov 04, 2015 2:22 pm**

At this point, Nagios is working. I can't completely reconfigure your Postfix for you. Since it was working when you switched email addresses, you need to figure out where alerts911 is getting stopped. It looks like your email is going through multiple servers? At this point you're going to need to look through the mail logs on each one of those servers and figure out why this is happening. I think @rkennedy hit it on the head about '911' getting filtered, as it could be in a list of spam words.

Posted: **Wed Nov 04, 2015 2:53 pm**

i checked with IT guy. They dont have any filters on alerts911 email.

Posted: **Wed Nov 04, 2015 2:58 pm**

these are from syslog. is there anything out of ordinary

Code: Select all

Nov  4 19:53:32 nagios-2015 nagios: wproc: SERVICE PERFDATA job 22560 from worker Core Worker 14426 is a non-check helper but exited with return code 2
Nov  4 19:53:32 nagios-2015 nagios: wproc:   early_timeout=0; exited_ok=1; wait_status=512; error_code=0;
Nov  4 19:53:32 nagios-2015 nagios: wproc:   stderr line 01: Can't open perl script "/usr/lib/pnp4nagios/libexec/process_perfdata.pl": No such file or directory
Nov  4 19:53:32 nagios-2015 nagios: Worker 14426: Unknown jobtype: 10
Nov  4 19:53:32 nagios-2015 nagios: wproc: Unknown job type: 10
Nov  4 19:53:32 nagios-2015 nagios: wproc: SERVICE PERFDATA job 22560 from worker Core Worker 14424 is a non-check helper but exited with return code 2
Nov  4 19:53:32 nagios-2015 nagios: wproc:   early_timeout=0; exited_ok=1; wait_status=512; error_code=0;
Nov  4 19:53:32 nagios-2015 nagios: wproc:   stderr line 01: Can't open perl script "/usr/lib/pnp4nagios/libexec/process_perfdata.pl": No such file or directory
Nov  4 19:53:32 nagios-2015 nagios: Worker 14424: Unknown jobtype: 10
Nov  4 19:53:32 nagios-2015 nagios: wproc: Unknown job type: 10

Posted: **Wed Nov 04, 2015 3:02 pm**

If you use the warnings email address to get critical alerts - you receive them. = Critical alerts are working.
If you use the critical email address to get critical emails - you do not receive them. We proved earlier that critical alerts are indeed working.

If your email for "911alerts" is hosted off site, they may not have any control over the filters and what get dropped. I would look into modifying your main.cf.

Some things you should think about:

Some email provides drop spoofed email. If you are sending emails from "[email protected]", and the remote email server does a reverse DNS lookup, and sees that it is coming from an IP address other than the one associated with "examplesite1.com", it may get dropped.

The word 911 may be getting filtered by something external. Without knowing your exact email configuration, such as who is hosting it, it's hard to tell what is going on.

If warnings alerts-warning and 911alerts are on the same email provider, it would be a good clue that the string "911" is getting filtered out. You may want to try an email address without "911" in it.

Posted: **Wed Nov 04, 2015 3:02 pm**

sinkak wrote:these are from syslog. is there anything out of ordinary

Nothing that should have to do with email, no.

Posted: **Wed Nov 04, 2015 3:11 pm**

hsmith wrote: If warnings alerts-warning and 911alerts are on the same email provider, it would be a good clue that the string "911" is getting filtered out. You may want to try an email address without "911" in it.

Just an additional info.
alerts911 email is working from amazon web services monitoring system. we keep getting alerts to alerts911 email from AWS

Posted: **Wed Nov 04, 2015 3:15 pm**

sinkak wrote:Just an additional info.
alerts911 email is working from amazon web services monitoring system. we keep getting alerts to alerts911 email from AWS

That's not related to what is happening here. The AWS system could be doing something completely different to send their emails, and coming from a proper FQDN.

Nagios Support Forum

contacts.cfg is not working properly

Re: contacts.cfg is not working properly

Re: contacts.cfg is not working properly

Re: contacts.cfg is not working properly

Re: contacts.cfg is not working properly

Re: contacts.cfg is not working properly

Re: contacts.cfg is not working properly

Re: contacts.cfg is not working properly

Re: contacts.cfg is not working properly

Re: contacts.cfg is not working properly

Re: contacts.cfg is not working properly