Record Type in nagios.log

[sholdings]

What's different between record type "HOST ALERT" and "CURRENT HOST STATE"?

When have then been logged? The format looks the same but what event trigger these 2 entries been logged?

Thanks.

[mguthrie]

I haven't personally worked the event handlers much, but event changes in XI are usually handled by the commands x-_host_event_handler, which is a command that can be viewed in the Core Config Manager. A Host Alert would generally be sent regarding a state change of the host. The Current Host State is referring to a state code of 0-2, which translates to either UP, DOWN, or UNREACHABLE.

Here's some further documentation on understanding and tweaking event handlers if you're interested. Hopefully I answered your question, let me know if I didn't ; )

http://assets.nagios.com/downloads/nagi ... ndlers.pdf

[sholdings]

Thanks for the answer.

You answer of "HOST ALERT" is same as what I observe. but the "CURRENT HOST STATE" is a little bit different than what I observe.

Since our customer have accidentally found they did not receive notification but console showing host down. When I looked at the nagios.log, there is no any log entry during that time frame. Actually there is no log entry, either HOST ALERT,CURRENT HOST STATE or HOST NOTIFICATON be found in log.

That is why I wonder how "HOST ALERT" or "CURRENT HOST STATE" been logged. Does the data showing on the console from data base instead of logfile?

Thanks a lot

[mguthrie]

I'll have to do some more investigating on how nagios handles logging events, I don't know off hand and I'd like to give you accurate information.

If you have issues with user receiving notifications correctly, I would guess that has to do the configuration of the notification settings for either that service, or that particular contact. I would verify your settings in the Core Config Manager for both in order to make sure that notifications are being sent the way you want.

[sholdings]

Thanks. I will double check configuation for notification.

What it puzzle me is, the screenshot receive from my customer showing host is down but I do not see any evidence on nagios log saying it is down. So, I don't even sure if customer should receive a notification or not.

Really appreciate the help

[mguthrie]

One thing to note as well for notification settings is the setting for "first notification delay." The default setting for this in the Core Config Manager is 60 minutes, so they may not get a notification right away.