I'd like to have Icinga checks for certain events.
I think the easiest way for the user would be to make them IcingaCLI checks.
While I can think of a lot of different ways this might be useful, a simple one might be sufficient. For example:
Use the filters from one of the "Event Type" configurations
Add simple conditions like "[icinga][severity]": "Critical"
Add thresholds like "warning: 1", "critical:5"
Add timewindows like "15 minutes"
"A check has a name" like "criticalicinga"
The check could then work like icingacli elasticsearch criticalicinga -h [hostname]. If there are more than 5 events matching the filters of the Eventtype and have the field [icinga][severity] set to "Critical" on that host it returns Critical.
Hi,
I'd like to have Icinga checks for certain events.
I think the easiest way for the user would be to make them IcingaCLI checks.
While I can think of a lot of different ways this might be useful, a simple one might be sufficient. For example:
The check could then work like
icingacli elasticsearch criticalicinga -h [hostname]
. If there are more than 5 events matching the filters of the Eventtype and have the field[icinga][severity]
set to "Critical" on that host it returns Critical.Cheers,