Page 1 of 1

Help understanding Flapping...

Posted: Tue May 26, 2015 12:35 pm
by JakeHatMacys
I have some servers host checks that have "flapped" and alerted very quickly on devices down when the devices are not down. The major concern is that it managed to hit the hard state in 3 minutes opposed to 15 minutes due to flapping.

My checks run every 5 minutes and upon error run every 5 minutes and will hit a hard state on the 3rd 5 minute check. Is there a way I can disable flapping for good? I don't see a scenario where I'll need it.

Is it as simple as setting this to "off" on the bulk modification tool?
Capture.JPG

Re: Help understanding Flapping...

Posted: Tue May 26, 2015 1:29 pm
by jdalrymple
Yes,

Or you could adjust it once in the upstream templates depending on how many you have. For most point and click deployments it could be changed in xiwizard_host_template or xiwizard_service_template - no bulk modification needed.

Or you could leave detection in place and just disable notifications for it as an alternative.

Re: Help understanding Flapping...

Posted: Tue May 26, 2015 2:05 pm
by JakeHatMacys
For services the option seems to be there but built in host checks I'm not seeing a way to turn it off. The main one is:

check_xi_host_ping

Only options available under commands in core:
Capture.JPG
Is there another place I need to change the options for host commands? Or is there something I could run from a command line on the server and make this easier???

Re: Help understanding Flapping...

Posted: Tue May 26, 2015 2:14 pm
by jdalrymple
flapping is not a construct of a command, it's a construct of a host or service itself:

Re: Help understanding Flapping...

Posted: Tue May 26, 2015 2:24 pm
by JakeHatMacys
So for Hosts i'll have to use the bulk modification.

Thanks.

Re: Help understanding Flapping...

Posted: Tue May 26, 2015 2:27 pm
by jdalrymple
If you want - as I mentioned if you've point & clicked most of your hosts out using wizards you could probably change it up top in the xiwizard_host_template

Either way is fine.