# # bbwarnrules.cfg # # BIG BROTHER Notification rules configuration file # Sean MacGuire # Version 1.9 # Mar 13th, 2002 # # (c) Copyright Quest Software, Inc. 1997-2002 All rights reserved. # # # *** Please edit the bbwarnsetup.cfg file before editing # this file # # # *** This file is only required on the BBPAGER host *** # # # Rules are written in the following format: # # hosts;exhosts;services;exservices;day;time;recipients # # hosts: match on these hosts (* is a wildcard for all hosts) # exhosts: exclude these hosts # services: match on these services (* is wildcard for all hosts) # exservices: exclude these services # day: 0-6 (sunday-saturday) # time: 0000-2359 # recipients: email address, numeric pager, sms number # # NB The value set by "cfgdelim" (in bbwarnsetup.cfg) is your delimiter # In this case the value is ';' # NB Even though egrep regular expressions are allowed do not use # the .* construct, just set * It will be replaced with # .* in the regexp. It's just that * is more readable than .* # # e.g. # host1 host2;;conn disk;;2;0600-2000;mailuser@mailhost 999-9999 # Check for host1 and host2 (exact match) for conn and disk services on tuesday # between 6am-8pm and notify by mail only to mailuser and # page 999-9999 # # host1.* host2.*;;conn disk;;2;0600-2000;mailuser@mailhost 999-9999 # Check for all hosts that match the regular expression # host1.* and host2.* for conn and disk services on tuesday # between 6am-8pm and notify by mail only to mailuser and # page 999-9999 # # *;exhost3;*;disk;0-6;0000-2359;999-9999 # for all hosts except exhost3 (exact match) check all services but disk all # week and all day, no mail but page 999-9999 # # *;exhost3.*;*;disk;0-3 4 5-6;0000-1159 1200-2359;sms-999-9999 # Same as previous one but with different format (date,time) and # SMS message and it matches any host with exhost3.* # # Also the default "pagedelay" (see bbwarnsetup.cfg) which indicates how # long before the next notification occurs can be overridden on # the rule line # # *;;*;;*;*;root@localhost:0 # # This sets the "pagedelay" at 0 for this recipient. # It will always be notified ! # # Send at most one notification to 9999999 per "pagedelay" # *;;*;;*;*;9999999 # # Send at most one notification to 8888888 # per 120 minutes (overriding "pagedelay") # *;;*;;*;*;8888888:120 # # There are 3 types of overriding pagedelay # # XXX - a simple numeric value # ^XXX - an escalation delay (does not notify 'til the delay has passed) # This delay cannot be acknowledged by someone else # (which could delay it even more) # ~XXX - an initial delay (waits XXX minutes before an notificaition # can be sent to recipient). This delay CAN be acknowledged. # ^XXX & ~XXX can be specified with the overriding pagedelay when they # are notified: # ~XXX-YYY # ^XXX-YYY # e.g.: ~30-15 , wait 30 minutes then notify every 15 # ^60-30 , escalate after 60 minutes and then notify # every 30 minutes # You can also write rules to exclude recipients based on the # previous syntax. Just prefix with ! and any recipient # specified in the rule line will be removed from the # list of recipients that matches the regular rules # # for all hosts don't send any notifications from # 12AM to 6AM and 8PM to 12AM # # !*;;*;;*;0000-0600 2000-2359;* # # for all hosts that start with host, don't send any # notifications on sat & sun to robert@localhost # # !host*;;*;;0 6;*;robert@localhost # # To temporarely disable notifications for a host # # !host1;;*;;*;*;* # # # **** NOTE ***** # # If the same recipient is defined on multiple rules AND # it also has the overriding "pagedelay" value AND the event # matches multiples lines with that recipient then the # lowest pagedelay specification for that recipient will be used to notify ... # e.g. matching rules for that event # rule 1: ... robert@localhost:0 # rule 2: ... sean@localhost # rule 3: ... robert@localhost:15 sean@localhost:15 # real recipients will be robert@localhost:0 sean@localhost # # N.B. All rule lines are scanned to create the list of recipients # It does NOT stop on the first match... # # # Don't forget that you can create clean rule lines by using # the hg- (hostsgroup) and pg- (pagegroup) tokens in the # bbwarsetup.cfg file # # hg-mtlsvrs hg-tosvrs;;*;;*;*;pg-srvsadmins # ################################################################## # # Enter your rules here # *;;*;;*;*;bbuser@localhost # This line is used to specify which admins gets to respond # at HTML form page request (from a BB web page) # Hopefully, you won't have any hosts called "notify-admin" ! # or you'll have some fiddling around to do # uncomment if you want to use the pagehelp facility #notify-admin;;pagehelp;;*;*;bbuser@localhost # This line will always return unmatched hosts to # at least one recipient or to know when a host is not in the # bb-hosts file unmatched-*;;*;;*;*;bbuser@localhost