With the usual BSD syslog messages related to NFS problems: hostA kernel: nfs server hostb:/filesystem: not responding ... hostA kernel: nfs server hostb:/filesystem: is alive again
What I'm trying to do is generate an alert email if we see a "not responding" message with out a corresponding "is alive again" within 60 seconds. But if we sent out the alert email I also want to send an all-clear email when we do eventually get the "alive again" message, perhaps even hours later. I've figured out how to do one or the other: I can generate the alert email if a "not responding" message is not followed by a "alive again" message with in 60 seconds. And I can generate the all-clear message for each and every "alive again" message. But putting them together is stumping me. I only want to send the all-clear message if we already have sent out the alert email; but if we don't send out the alert there is no reason to send out the all-clear. I was thinking if when the "alive again" message came in if I could do something like: if ($age > 60) report context mail -s "NFS all-clear" rand; delete context I'm not even sure that is the right approach, seems to not fit into SEC, even if I could figure out how to do it. Advice anybody? ------------------------------------------------------------------------------ Managing the Performance of Cloud-Based Applications Take advantage of what the Cloud has to offer - Avoid Common Pitfalls. Read the Whitepaper. http://pubads.g.doubleclick.net/gampad/clk?id=121054471&iu=/4140/ostg.clktrk _______________________________________________ Simple-evcorr-users mailing list Simple-evcorr-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/simple-evcorr-users
