Re: [monit] multiple email alerts for the same event in 4.10.1

[Martin Pala]

Hi,

there is mismatch between the global "set alert" statement (address@hidden 
) and local "noalert" statement (address@hidden) ... the  
noalert won't thu suppres the global alert since the address is  
different.

The "match" test will compare the changes in the given file and send  
alert on every match on-the-fly (when match is found for some pattern  
the alert is send immediately) ... this may be source of several  
emails in one cycle.

You can also use the -v option which enables verbose output (you will  
see when monit send mail and why ... if you'll add -I option, it will  
go to terminal as well, otherwise to log) ... we can then compare the  
output and explain the reasons.


Thanks,
Martin


On Jul 23, 2008, at 1:22 AM, Warwick Poole wrote:

> Hi
>
> Love Monit, thank you.
>
> I read in the changelog of 4.10.1 "The bottom line is that you will no
> longer get many duplicate alerts for the same problem" yet I seem to
> get multiple email alerts when I define per-service alert addresses.
>
> I define a global alert address in monitrc (This is Debian etch BTW),
> but override the global alert location in a few selected per-service
> definitions, for ex, this is one of my config files:
>
> set alert  address@hidden
>
> check file auth.log with path /var/log/auth.log
> noalert address@hidden
>     ignore match "Accepted publickey for root from xxxxx"
>     ignore match "CRON\ 
> ["                                              # cron
>
>     if match "Accepted publickey for"  then alert
>     if match "ROOT LOGIN"  then alert
>     if match "FAILED LOGIN"  then alert
>
> What happens here is I get 2 or 3 emails sent to
> address@hidden for any single event from this service, as well
> as events like monit restarts.
>
> Is this a bug, or a config issue of some kind?
>
> Thanks!
> W
>
>
> --
> To unsubscribe:
> http://lists.nongnu.org/mailman/listinfo/monit-general