Page 1 of 1

Disable soft check alerts

Posted: Tue Mar 16, 2021 12:59 pm
by capgemtools
Hello Support,

we have a situation where our Nagios XI servers are integrated with Service Now using pull method from Service Now. the problem is service Now connector pulls metric data from hostchecks and servicechecks tables. Depending on the frequency and the maximum retry parameter set it generates number of soft alerts. service Now pulls these alert data and generates incidents. Currently its generating Incidents for first alert itself which is soft alert. We want service now to generate alert for ONLY hard type of alert.

We checked with service now developers about it and there is no mechanism in service now which can differentiate between soft and hard alerts. So we want Nagios to not to create soft alerts. For this we disabled log_service_retry and log_host_retry but its just stopped the logging in Nagios event logs but it still enter the data in hostchecks and servicechecks tables. We want the checks to be performed number of times set in maximum attempts field but don't want to log it into DB's.

Could you please help us to disable putting this for soft alerts in DB's so that there will be only single type of entry for any alert i.e hard.

Re: Disable soft check alerts

Posted: Wed Mar 17, 2021 2:24 pm
by lmiltchev
It is not possible to do that in Nagios XI, unless you set up all of your max_check_attempts to 1. I don't believe this is something you want to do though.

Re: Disable soft check alerts

Posted: Wed Mar 17, 2021 2:33 pm
by swolf
Hi Sandeep,

I think this is definitely something you will need to revisit with the servicenow developers. If you're using the servicechecks and hostchecks tables, you can differentiate between HARD/SOFT states using the `state_type` column. You may be able to convince them to add a feature that has them ignore SOFT alerts altogether using this criteria.

Otherwise, I agree with Ludmil - as far as I know, what you're describing isn't currently an option in Nagios Core/XI.