Page 1 of 1
to many FLAPPING alert
Posted: Mon Jan 09, 2017 2:18 am
by RIDS_I2MP
Hi Team,
We are also facing frequent flapping start and stop alerts for host, there is no PROBLEM / RECOVERY notification.
These alerts are only for this windows host whereas the services monitored on that host are monitored successfully.
Flapping alerts are sent only for few servers, and we are aware that there is no network issue nor we have changed the flapping thresholds in near past.
Kindly suggest.
Re: to many FLAPPING alert
Posted: Mon Jan 09, 2017 10:14 am
by avandemore
XI > Admin > System Profile > Download Profile
Please include the zip file in your response. You can PM myself or other support personnel if you have privacy concerns.
Re: to many FLAPPING alert
Posted: Tue Jan 17, 2017 9:19 am
by RIDS_I2MP
Hi Team,
We cant share the requested data with you due to some privacy issue.
Kindly can you let us know if you suggest some other checks or configuration changes.
Re: to many FLAPPING alert
Posted: Tue Jan 17, 2017 10:35 am
by rkennedy
Please post your /usr/local/nagios/var/objects.cache for us to view, feel free to sanitize it.
We will also need the same of the host / service that is flapping with no problem / recovery notifications.
Re: to many FLAPPING alert
Posted: Tue Jan 17, 2017 10:37 am
by bwallace
1) Check the Host's Alert Settings tab (post a screenshot of it permissible) - is 'Flapping' enabled under 'Notification options'?
2) Run a notification report. In the UI go to Reports > Available Reports > Notifications The output is actual notifications that XI sent out - you'll have to compare the time stamps seen here to what is logged on your mail Server. If you seen zero notifications, then we'll have to check your configuration. If you see that XI had sent notifications, time to look upstream of XI starting with your mail server.
Re: to many FLAPPING alert
Posted: Tue Jan 24, 2017 9:10 am
by RIDS_I2MP
Hi Team,
bwallace wrote:1) Check the Host's Alert Settings tab (post a screenshot of it permissible) - is 'Flapping' enabled under 'Notification options'?
2) Run a notification report. In the UI go to Reports > Available Reports > Notifications The output is actual notifications that XI sent out - you'll have to compare the time stamps seen here to what is logged on your mail Server. If you seen zero notifications, then we'll have to check your configuration. If you see that XI had sent notifications, time to look upstream of XI starting with your mail server.
Please find the attached screenshot of "Alerts settings" tab. and answer for second suggestion is I have checked in Nagios XI under notifications and alerts are sent from Nagios server for that particular server.
rkennedy wrote:Please post your /usr/local/nagios/var/objects.cache for us to view, feel free to sanitize it.
We will also need the same of the host / service that is flapping with no problem / recovery notifications.
We cant share the complete objects.cache file, I am sharing a part(objects_file) of it consisting all the host related info on which we are facing the issue. Kindly let me know if any more information is required.
Kindly suggest.
Thanks in advance.
Re: to many FLAPPING alert
Posted: Tue Jan 24, 2017 9:12 am
by RIDS_I2MP
Attachments
Re: to many FLAPPING alert
Posted: Tue Jan 24, 2017 3:35 pm
by avandemore
If you wish to resolve this without revealing any information you can see our documentation on the settings here:
https://assets.nagios.com/downloads/nag ... pping.html
It should be apparent what fields in XI maps to Nagios Core. Other settings can be found in
/usr/local/nagios/etc/nagios.cfg. Any changes to that file need a restart or reload of Nagios to pick up the changes.