EventLogging Icinga alerts happen regularly as false positive because of delay in graphite data ingestion.
Icinga finds a big difference between raw and validated events, then recovers 2/3 minutes after.
While looking at graphite charts, no diff is shown.
The problem seems to come from delay in data ingestion (or transfer) for eventlogging-validated data in graphite.
Description
Description
Status | Subtype | Assigned | Task | ||
---|---|---|---|---|---|
Duplicate | None | T106495 Change Icinga graphite alert for EventLogging delay | |||
Resolved | mforns | T105167 Troubleshoot EventLogging validation alerts {oryx} [3 pts] |