Receiving duplicate notifications: 1 for Service 1 for Host

[qcmonitor]

Hello
I didn't find yet why I'm receiving duplicate notifications when 1 alert occurs:
I've setup one host, and multiple services to monitor on this host.
I have disabled notification on the host config itself and set the notification on each individual service.
When I try for example to stop one monitored Windows service, I receive 1 email notification for a PROBLEM Service Alert and 1 email notification for a PROBLEM Host Alert.

Can someone explain where Nagios is setup to send also a Host Alert when a service is down?

Thanks.

Chris

[mmestnik]

Short answer, it isn't.

I should point out the the text displayed is taken from the config file and it arbitrary. Just because the email says it's a host alert does not necessarily mean it is. Though I wouldn't suspect you problem being simply that the config is crossed some where. The thing to look at is the Event Log. With this you can match emails received that are created using arbitrary text and Events that reflect what Nagios is doing using compiled in messages.

Please provide more information if this does not solve your problem.

[qcmonitor]

Hi

Sorry for my delay, I was out of office for a few weeks.
On the Windows server event log, the only related event I can see is the service stopped.
I setup Nagios to send an alert every 10 minutes if the service is still down.
Every 10 minutes, I'm receiving to messages.
But the second alert seems not to be an alert, as you mentionned. It indicates that the host is up.
So why do I receive an alert to tell that the host is up? I only want to receive real alert like the first one.

1- PROBLEM Service Alert - hostname.domain.com/HP Systems Insight Manager is CRITICAL
***** Nagios XI Alert ***** Notification Type: PROBLEM Service: HP Systems Insight Manager Host: hostname.domain.com Address: 192.168.10.12 State: CRITICAL Info: HP Systems Insight Manager: Stopped Date/Time: Nagios URL: http://nagioshost/nagiosxi/

2- PROBLEM Host Alert - hostname.domain.com is UP
***** Nagios XI Alert ***** Notification Type: PROBLEM Host: hostname.domain.com State: UP Address: 192.168.10.12 Info: OK - 192.168.10.12: rta 3.850ms, lost 0% Date/Time: Nagios URL: http://nagioshost/nagiosxi/

Thanks

Chris

[mmestnik]

That's configured as part of the service, you want to remove "r" from the Notification options.

notification_options: This directive is used to determine when notifications for the service should be sent out. Valid options are a combination of one or more of the following: w = send notifications on a WARNING state, u = send notifications on an UNKNOWN state, c = send notifications on a CRITICAL state, r = send notifications on recoveries (OK state), f = send notifications when the service starts and stops flapping, and s = send notifications when scheduled downtime starts and ends. If you specify n (none) as an option, no service notifications will be sent out. If you do not specify any notification options, Nagios will assume that you want notifications to be sent out for all possible states. Example: If you specify w,r in this field, notifications will only be sent out when the service goes into a WARNING state and when it recovers from a WARNING state.

[qcmonitor]

Hi

It sounds good.
But let me give you more details:
I would like to keep the alert on recovery state to be notified when a service become available again.

So here are the steps:
I have configured a service to monitor a Windows service.
I let empty all the notification option, which by default enables all options.
If I stop the service, I will be notified that the service is down, but I'm receiving 2 notifications for PROBLEM Service Alert and PROBLEM Host Alert(same as described above).

If I let the service down, every 10 minutes (as configured), I will continue to receive these 2 alerts.

When I bring up the service, I still receive 2 emails for RECOVERY Service Alert and RECOVERY Host Alert.

So it appears that the problem is not related to the recovery state, but maybe I'm wrong.
So to be sure, I set the service with all option without the r.
I stopped the service, but still received 2 alerts: PROBLEM Host Alert and PROBLEM Service Alert.

And on each PROBLEM Host Alert, the State is UP for the host:
***** Nagios XI Alert *****

Notification Type: PROBLEM
Host: host.domain.com
State: UP
Address: 192.168.10.12
Info: OK - 192.168.10.12: rta 0.194ms, lost 0%
Date/Time:

Nagios URL: http://nagioshost/nagiosxi/


I also updated nagios XI to the latest version (manually, because I cannot update it behind a proxy - other topic).


Thanks

Chris

[Michael_Schou]

Did you ever solve this problem, because I'm seeing the same in my setup and it's very annoying.

[mmestnik]

Getting duplicate emails or are you getting 2 emails? It may not matter at all, but how identical are these emails? Do they share the same headers/id? Having a copy of these emails and there fulle headers as well as server logs containing the email's envelope would be interesting.

I'd wonder if you had two contacts or something simple like that. Could you provide us with a dump of your servers config so we could check? I'm not sure how it's done but I understand that recent version have a feature to dump/restore a configuration.

[mariusp]

The problem I believe the original poster is having is that for every service alert there is an accompanying alert that states that HOST is UP. This is happening to me as well at present. For every service alert that I receive I also get a secondary alert stating that the host is up:

***** Nagios Monitor XI Alert *****

Notification Type: PROBLEM
Host: xxxx
State: UP
Address: xxxx
Info: OK - xxxx: rta 1.682ms, lost 0%

Date/Time: Mon Oct 25 02:38:27 EEST 2010

The above message arrived at exactly the same time that a service alert for memory usage arrived. I have looked throughout the configuration and do not understand why this happens. I have not had time to look through the logs though.

Marius