I have a set of rules setup to monitor 3 different processes. I have a handful of nodes that the rules trigger but the processes are running on the node.
Is there a way to see why the alerts are triggering when they shouldn’t be?
validate
===========================================
| Component | Version |
|---|---|
| LibreNMS | 24.7.0-27-g520e44b0e (2024-07-29T12:57:37-07:00) |
| DB Schema | 2024_07_19_120719_update_ports_stack_table (296) |
| PHP | 8.2.7 |
| Python | 3.8.10 |
| Database | MariaDB 10.3.39-MariaDB-0ubuntu0.20.04.2 |
| RRDTool | 1.7.2 |
| SNMP | 5.8 |
| =========================================== |
[OK] Composer Version: 2.7.7
[OK] Dependencies up-to-date.
[OK] Database connection successful
[OK] Database Schema is current
[OK] SQL Server meets minimum requirements
[OK] lower_case_table_names is enabled
[OK] MySQL engine is optimal
[OK] Database and column collations are correct
[OK] Database schema correct
[OK] MySQL and PHP time match
[OK] Active pollers found
[OK] Dispatcher Service not detected
[OK] Locks are functional
[OK] Python poller wrapper is polling
[OK] Redis is unavailable
[OK] rrdtool version ok
[OK] Connected to rrdcached
Rules
Rule name: API Proxy Service: Gunicorn
Alert rule: processes.command LIKE ‘%gunicorn%’
Alert query: SELECT * FROM devices,processes WHERE (devices.device_id = ? AND devices.device_id = processes.device_id) AND processes.command LIKE ‘%gunicorn%’
Rule match: no match
Rule name: API Proxy Service: Nginx
Alert rule: processes.command LIKE ‘%nginx%’
Alert query: SELECT * FROM devices,processes WHERE (devices.device_id = ? AND devices.device_id = processes.device_id) AND processes.command LIKE ‘%nginx%’
Rule match: no match
Rule name: API Proxy Service: Squid
Alert rule: processes.command LIKE ‘%squid%’
Alert query: SELECT * FROM devices,processes WHERE (devices.device_id = ? AND devices.device_id = processes.device_id) AND processes.command LIKE ‘%squid%’
Rule match: no match
Any help or direction on where to look at why they are failing when they are actually good.
I have removed and re-added, check all the snmpd.conf files etc…