Escalations Explained (RFC)

[Justin Freeman]

Help with escalations

Justin,

Since you got a better understanding how to configure this, please tell me how I can make an action which need to be repeated for every 30 minutes?

Thanks

consultorpc

Just sent you a private msg. Sorry did not see your request consultorpc.

Justin

[geniesis]

Multiple escalations with the same email.

Thanks Geno , helped a lot.

One other thing I found was that if I have multiple esacaltion items in an action with the same email address, I end up with a whole lot of recovery messages.

Essentially, what I want to accomplish is to have an initial email be sent out then another 1 hour later, then every 24hours thereafter.

Is this at all possible?

[bashman]

Hi Geno,

This is my escalations configuration:

1. Enabled escalations with a period of 300 sec (5 min).

2. I have 4 actions in 4 steps to do:
1. Immediately send a message to tomcat admins .
2. After 5 minutes send a message to Responsible.
3. After 30 minutes send a message to Boss.
4. After 2 hours send a message to Director.

3. Firstly I had established 4 steps like this:
1. step from 1 to 1 with period 0. (Immediately send mail to Tomcat Admins)
2. step from 2 to 2 with period 0. (After 5 min send mail to Responsible)
3. step from 3 to 3 with period 1800. (After 30 min send mail to Boss)
4. step from 4 to 4 with period 7200. (After 2 hours send mail to Director)

4. But it didn't work, the mails in step 3 were send in 10 min after the problem and mails in step 4 were send in 15 min after the problem.

5. So I decided not to use new period in steps:

Steps Details Period Delay
1 Send message to Group "Tomcat Admin" Default Immediately
2 Send message to Group "Responsible" Default 00:05:00
7 Send message to Group "Boss" Default 00:30:00
25 Send message to Group "Director" Default 02:00:00

I haven't tried this solution yet, I hope it'll work.

[bashman]

How to delay an action?

I have an action that runs a remote command and depends on 3 triggers.

I want to delay the action for 5 minutes, if during this period trigger becomes false (OK), don't run the remote command, but if trigger remains true (PROBLEM), run the remote command.

I don't want to affect the rest of actions by modifying Server configuration file, parameter SenderFrequency.

Also I wouldn't like to affect other actions that depend on the same triggers by modifying triggers' expressions.

Escalations will retard the execution of the command, but if during the delay period if trigger becomes false (OK), will the action be executed? or just aborted?. If it's aborted then it will work for what I want.

[bashman]

I think I can use escalations, I understand that escalations check if the trigger is still true (PROBLEM) in each step, so If triggers becomes false (OK) before 5 minutes (before the step that runs the remote command) the action will be aborted and no command will be executed.

[phoeneous]

Has anyone figured out how to do repeat notifications yet? Say a server goes down, my action will send out an email only once for the problem and once for the recovery. How do I set it up to repeatedly email me until the problem has been fixed?

[bashman]

Take a look at:

http://www.zabbix.com/documentation/..._notifications

And remember to type a "0" in the "to" step so that the messages repeat to infinity until the problem gets resolved.

[phoeneous]

Take a look at:

http://www.zabbix.com/documentation/..._notifications

And remember to type a "0" in the "to" step so that the messages repeat to infinity until the problem gets resolved.

Yeah, I read that and tried it but the Recovery messages were also being resent to infinity even though I added the 'PROBLEM' condition. I deleted the Action and then recreated it with '0' in the 'To' step and now it works properly. Must be a bug with the 1.8.3 appliance. Thanks for your help.

[subba5678]

Hey phoeneous,

Try to create more action in the below window for repeated notifications.

Thanks,
Subbu

[sire]

I think that escalations should be explained in Zabbix manual in a more detailed way with some examples.

[Slash]

thank you

I just wanted to thank you for posting. I was looking for a documentation about the escalation configuration and your post saved me a ton of time :-)

[WernerCD]

+1. Top notch. Many Thanks.