System Monitoring module

[nickb]

The documentation for the SystemMonitoring module is a little... lacking.

I'm investigating using the module to manage emails sent to OTRS from PRTG. My work flow has been to manually merge tickets when alarms come in for the same issue, and I am hoping that the SystemMonitoring module can be used to automate this process.

I'm a bit unclear on what Postmaster:PreFilterModule###1-SystemMonitoring options do, specifically the HostRegExp and NewTicketRegExp. In what way do these interact with the inbound email?

Further, it's not clear from the documentation what the module is actually doing with these tickets. Does it merge them all together based on the HostRegExp?

[root]

Hi Nick,

the emails are not merged. The purpose of this add-on is to detect if an e-mail is a follow-up to an existing ticket for a host or service problem.

- Roy

[nickb]

Is there any way to merge these tickets automatically?

I grow weary of merging hundreds of tickets a day.

[root]

Nick,

You have to adjust the SysConfig for PostMaster::PreFilterModule###1-SystemMonitoring

- CloseTicketRegExp is a regex to determine the value of a host or service check when the ticket should be closed (Service OK, Host UP)
- FromAddressRegExp is the e-mail PRTG is using as the sender address
- HostRegExp regex to grep the affected hostname from the email
- NewTicketRegExp is a regex to determine the value of a host or service check when a new ticket should be opened (Service CRITICAL, Host DOWN)
- ServiceRegExp regex to parse the name of the affected service
- StateRegExp regex to parse the value which is checked against CloseTicketRegExp and NewTicketRegExp

Hope this helps. If not show us the (anonymized) e-mails from PRTG

- Roy