I would like to be able to create an action for a group or type of trigger. I think it would be nice to have an additional field for a trigger type. Here is my example for this feature:
I want to create an action for sending a different style message for a service UP/DOWN than an item that is HIGH/LOW, ON/OFF, or just a NOTICE (such as passwd file changed). This was I could make services such as httpd, ftp, smtpd, etc in a 'Services' group and then create an action for a TRUE trigger AND trigger.type = 'Services' and send the appropriate message for UP/DOWN service.
Currently I get messages such as:
In this case I would have a different action message for group 'Checks' (where vfs.file.cksum would be in) that would send a message about it being changed or modified instead of being down.
I had been playing with categorizing using the severities. But I'd rather not give up severity for categorizing.
Hope this makes sense... Anyone else interested in something like this?
I want to create an action for sending a different style message for a service UP/DOWN than an item that is HIGH/LOW, ON/OFF, or just a NOTICE (such as passwd file changed). This was I could make services such as httpd, ftp, smtpd, etc in a 'Services' group and then create an action for a TRUE trigger AND trigger.type = 'Services' and send the appropriate message for UP/DOWN service.
Currently I get messages such as:
Code:
Status has changed on the following host: z1.xxxxxxxxxxx.xxx Please see the details below on the service that has been triggered as DOWN: vfs.file.cksum[/etc/passwd] is DOWN Severity: Average Timestamp: 2007.09.13 09:48:04 PST Event ID: 117 Host: z1.xxxxxxxxxxx.xxx IP: 127.0.0.1
I had been playing with categorizing using the severities. But I'd rather not give up severity for categorizing.
Hope this makes sense... Anyone else interested in something like this?

Comment