Page 1 of 1

The same alarm recovery without report again

Posted: Sat Dec 21, 2019 1:12 am
by DataAssure
Dear ,

The same alarm recovery without report again,as show in the screenshot information, I received three times notice, respectively is 22:03 warning,22:58 recovery, after recovery and fill up a warning 23:32 , but always have not received the final confirmation.As a matter of fact in thou the warning has been lifted.

Re: The same alarm recovery without report again

Posted: Mon Dec 23, 2019 11:40 am
by benjaminsmith
Dear @DataAssure,

Thank you for the screenshots. Have you checked the configurations to make sure the service has been set to notify on recovery? This can be checked under the "Alert Settings" tab under Host/Service Management in the CCM.

Please send us your system profile and the Nagios log from 12/20/2019 ( e.g. nagios-12--20-2019-00.log). You'll find this in the/usr/local/nagios/var/archives folder.

To send us your system profile.
Login to the Nagios XI GUI using a web browser
Click the "Admin" > "System Profile" Menu
Click the "Download Profile" button
Save the profile.zip file and share this in a private message and then reply to this post to bring it up in the queue.

Reference:
Nagios XI - Notification Problems

Re: The same alarm recovery without report again

Posted: Thu Dec 26, 2019 4:41 am
by DataAssure
I'm sure the service has been set to notify on recovery.

Re: The same alarm recovery without report again

Posted: Thu Dec 26, 2019 1:28 pm
by tgriep
I found this entry in the nagios.log file from the 20th of December
[1576856265] SERVICE FLAPPING ALERT: V12CNESZ01FRP01;4.1-Windows Server Drive Disk Usage;STARTED; Service appears to have started flapping (21.6% change >= 20.0% threshold)
1576856265 converts to Friday December 20, 2019 23:37:45 (pm) in time zone Asia/Hong Kong (HKT)

When a Host or Service goes in to a Flapping state, the Nagios process will disable the Notifications for the object so it will not generate a lot of Notifications.
https://assets.nagios.com/downloads/nag ... pping.html

This is done so you do not receive a storm of problem and recovery notifications.
That is the reason you did not receive the recovery notification.

In the link, there are instructions on changing the Flapping detection thresholds if you choose to do that.

If you want to disable it globally, login to the XI GUI, go to the Admin > Monitoring Engine Status menu and in the Monitoring Engine Process dashlet, you can disable Flap Detection and then Flap Detection will not disable the Notifications.