Mystery Alerts.

[matson-itops]

We have a service with no contact/contact group under "alert settings"
However, we are getting emails saying it is in alert. status.

How is this possible? We checked for templates, and don't believe we set a default alert contact.

can someone help point me in the right direction.

[gwesterman]

Hi @matson-itops,

What is your goal? Do you want the alerts to stop sending or do you want to determine exactly why this situation is occurring (because there may be some roundabout methods to stop the alerts without actually solving the specific issue). Are you in a situation where you can delete and remake the service? Are there any templates attached (you can see in the CCM)? If you deliberately specify a contact, does it correctly send only to that contact? Can you provide the service's config file for more complete debugging?

Thank you!

[matson-itops]

goal is to dig deeper and understand why the alerts are coming.
I do not see any templates attached that have notifications.

below is the config. the SSL is alerting without ANY contact.



[]$ more chassis.matson.com.cfg
###############################################################################
#
# Services configuration file
#
# Created by: Nagios CCM 3.1.4
# Date: 2024-05-15 23:14:35
# Version: Nagios Core 4.x
#
# --- DO NOT EDIT THIS FILE BY HAND ---
# Nagios CCM will overwrite all manual settings during the next update if you
# would like to edit files manually, place them in the 'static' directory or
# import your configs into the CCM by placing them in the 'import' directory.
#
###############################################################################

define service {
host_name chassis.matson.com
service_description HTTP
use xiwizard_website_http_service
check_command check_xi_service_http! -f follow -I chassis.matson.com -u "/" -S -p 443!!!!!!!
max_check_attempts 5
check_interval 5
retry_interval 1
check_period xi_timeperiod_24x7
notification_interval 60
notification_period xi_timeperiod_24x7
notifications_enabled 1
contact_groups AlertGroup_PROD_OPS
_xiwizard website
register 1
}

define service {
host_name chassis.matson.com
service_description SSL Certificate
use xiwizard_website_http_cert_service
check_command check_xi_service_http_cert!30!!!!!!!
max_check_attempts 5
check_interval 5
retry_interval 1
check_period xi_timeperiod_24x7
notification_interval 60
notification_period xi_timeperiod_24x7
_xiwizard website
register 1
}

###############################################################################
#
# Services configuration file
#
# END OF FILE
#
###############################################################################

[sgardil]

goal is to dig deeper and understand why the alerts are coming.
I do not see any templates attached that have notifications.

below is the config. the SSL is alerting without ANY contact.



[]$ more chassis.matson.com.cfg
###############################################################################
#
# Services configuration file
#
# Created by: Nagios CCM 3.1.4
# Date: 2024-05-15 23:14:35
# Version: Nagios Core 4.x
#
# --- DO NOT EDIT THIS FILE BY HAND ---
# Nagios CCM will overwrite all manual settings during the next update if you
# would like to edit files manually, place them in the 'static' directory or
# import your configs into the CCM by placing them in the 'import' directory.
#
###############################################################################

define service {
host_name chassis.matson.com
service_description HTTP
use xiwizard_website_http_service
check_command check_xi_service_http! -f follow -I chassis.matson.com -u "/" -S -p 443!!!!!!!
max_check_attempts 5
check_interval 5
retry_interval 1
check_period xi_timeperiod_24x7
notification_interval 60
notification_period xi_timeperiod_24x7
notifications_enabled 1
contact_groups AlertGroup_PROD_OPS
_xiwizard website
register 1
}

define service {
host_name chassis.matson.com
service_description SSL Certificate
use xiwizard_website_http_cert_service
check_command check_xi_service_http_cert!30!!!!!!!
max_check_attempts 5
check_interval 5
retry_interval 1
check_period xi_timeperiod_24x7
notification_interval 60
notification_period xi_timeperiod_24x7
_xiwizard website
register 1
}

###############################################################################
#
# Services configuration file
#
# END OF FILE
#
###############################################################################

Hey @matson-itops

Does the Host have a template associated with it? Sometimes the inheritance passed to the host can also be passed down to the services for that host.

[gwesterman]

Also try setting all notification options to off or 0 or none (depending). And make sure the xiwizard_website_http_cert_service does not have notifications enabled.

[matson-itops]

tha'ts why i'm checking here. far as I can tell no inherited templates are being used.