Your message dated Sat, 16 Aug 2025 13:30:12 +0100
with message-id 
<caj3buoqg5lkjynjeu_giqs5cslf6psickehzj5imy4f0uqe...@mail.gmail.com>
and subject line Re: ignore.d.server/nagios: SERVICE FLAPPING line doesn't 
allow whitespace
has caused the Debian Bug report #651319,
regarding nagios rules - flapping
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)


-- 
651319: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=651319
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: logcheck-database
Version: 1.3.13
Severity: minor

in most cases whitespace is allowed in SERVICE names, but for the
SERVICE FLAPPING ALERT it is not.  using the cases where
whitespace is allowed as a template, i made the following change:

--- /etc/logcheck/ignore.d.server/nagios        2010-09-03 01:25:15.000000000 
-0700
+++ /tmp/nagios 2011-12-07 09:34:25.000000000 -0800
@@ -16,7 +16,7 @@
 ^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ nagios(2|3)?: Nagios 
(1|2)\.[[:digit:]] starting\.\.\. \(PID=[[:digit:]]+\)$
 ^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ nagios(2|3)?: SERVICE ALERT: 
[._[:alnum:]-]+;[^;]+;(CRITICAL|WARNING|OK|UNKNOWN);(SOFT|HARD);.*$
 ^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ nagios(2|3)?: SERVICE ALERT: 
[[:alnum:]]+;PING;(WARNING|OK).*$
-^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ nagios(2|3)?: SERVICE FLAPPING ALERT: 
[._[:alnum:]-]+;[._[:alnum:]-]+;(STARTED|STOPPED); Service appears to have 
(started|stopped) flapping \([[:digit:].]+% change (<|>=?) [.[:digit:]]+% 
threshold\)$
+^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ nagios(2|3)?: SERVICE FLAPPING ALERT: 
[._[:alnum:]-]+;[^;]+;(STARTED|STOPPED); Service appears to have 
(started|stopped) flapping \([[:digit:].]+% change (<|>=?) [.[:digit:]]+% 
threshold\)$
 ^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ nagios(2|3)?: SERVICE NOTIFICATION: 
[._[:alnum:]-]+;[._[:alnum:]-]+;[^;]+;(ACKNOWLEDGEMENT 
\()?(CRITICAL|WARNING|OK|UNKNOWN)(\))?;.*$
 ^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ nagios(2|3)?: SERVICE NOTIFICATION: 
[._[:alnum:]-]+;[._[:alnum:]-]+;[^;]+;CRITICAL;.*$
 ^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ nagios(2|3)?: Warning: Host 
'[[:alnum:]]+' has no services associated with it\!$

and that seems to have resolved the issue.

thank you for your time and effort!

        andy

-- System Information:
Debian Release: 6.0.3
  APT prefers stable
  APT policy: (990, 'stable'), (500, 'stable-updates')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.32-5-amd64 (SMP w/1 CPU core)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

-- no debconf information



--- End Message ---
--- Begin Message ---
On Sat, 1 Jun 2024 13:47:12 +0100 Richard Lewis
<[email protected]> wrote:
> On Wed, 07 Dec 2011 09:39:55 -0800 andrew bezella <[email protected]> 
> wrote:

> > in most cases whitespace is allowed in SERVICE names, but for the
> > SERVICE FLAPPING ALERT it is not.  using the cases where
> > whitespace is allowed as a template, i made the following change:
>
> Is there still a need for this rule in 2024, and is there still
> interest in adding it to logcheck?
>
> The proposed change was to add
>
> ^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ nagios(2|3)?: SERVICE
> FLAPPING ALERT: [._[:alnum:]-]+;[^;]+;(STARTED|STOPPED); Service
> appears to have (started|stopped) flapping \([[:digit:].]+% change
> (<|>=?) [.[:digit:]]+% threshold\)$
>
> however, i think this needs an update:
> - missing a pid
> - the package is nagios4 now, so presumably the "(2|3)?" needs amending
>
> If an updated rule is provided we can consider adding it, but i
> suspect we may end up closing this bug

A year later: closing: i dont tihnk nagios2 or nagios3 are in debian
any more, and the rule doesnt look correct (is it even correct to hide
this message? i dont know what service flapping means, but if it's an
error then you would want to know).

If there is something to do for the latest version of nagios4 please
open a new bug with the details

--- End Message ---

Reply via email to