Cheshire Cat Computing

Wondering if anyone has ever run into this issue?

I am attempting to have the Service Control Manger monitior the Security log for audit failures. It successfully finds each event but will only send a notification on the first event. The manger sends it to nagios but nagios will only display the failure it will not send out any notification about the event.

Once the service goes back to an OK status and any event fires off it will then send a notification again but only once.

SO i get no notification about events till the service goes to an OK status.

Has anyone run into anything similar? Thanks in advance for your help!

You need to set the Nagios service to 'state stalking' on critical, and/or set the 'volatile' option. Also make sure max_check_attempts is 1. This will cause an alert on each message. See the example Nagios config that comes with the package.

_________________
Steve Shipway
UNIX Systems, ITSS, University of Auckland, NZ
Woe unto them that rise up early in the morning... -- Isaiah 5:11