QuTS hero 5.3.1 unable to find queue from NotificationCenter, NC keeps sending mails, from warnings

Hi,
yesterday I enabled syslogserver on tcp and udp port 514 to receive syslogs from Qnap and a switch.
Also I activated the mailnotification for warnings and errors, which is done via outlook.com.
By mistake the first notification was set incl. information, which I corrected.
Afterwards I saw the pfsense logs a all 60 seconds a warning about a duplicate packet.

So I modified the syslog filter NOT to log this messages anymore.
Keeps sending mails

Then i stopped syslog, deleted the messages file and restarted syslog

keeps sending mails

afterwards I rebootet the complete Qnap

keeps sending mails

In the meantime Microsoft blocked the mailsender as over quota (which is expected)

so my questions are

  1. where the the syslog notifications get sent to?

  2. where is the queue from the NofiicationsCenter?

  3. how can the Queue get cleared out?

many greetings

Tom

what I found so far

ps xa |grep notif brings sometime this processes

/usr/local/sbin/ncdb --defaults-file=/mnt/ext/opt/NotificationCenter/etc/nc-mariadb.conf

When I login to this MariaDB with
/mnt/ext/opt/mariadb/bin/mysql -S /tmp/nc-mariadb.sock

this database contains only

information_schema

test

where test is empty and information_schema is the default MySQL|MariaDB information_schema for the database itself.

some other time the response for ps xa |grep is

26669 admin 7824 R python /usr/local/sbin/notify send2 -A A035 -C C004 -M 18 -l warn -t 2 [{0}] {1} %V001% ServerName:pfsense01;dpinger ….

Where is exactly sending a message, which was there yesterday, but is now filtered out..

not listed in the messages file

notification in syslog is even completly disabled

but still the notificationCenter gets messages.

ah, and in NotificationCenter Queue nothing is listed

any ideas

Tom

Hi Tom:

What’s your NC settings in this two pages?

In addition, you may check and see if this FAQ helps.

We recommend that you open a support ticket for us. Our Support Team can review the details and assist you. Thanks!

Hm,

  1. opened the entry for Syslogserver, not Rule-1 as this is the generic entry.

The link itself didn’t help to solve directly, but brought an additional insight.

  • within the notification queue there is NOT a long list
  • but when the script “python /usr/local/sbin/notify send2 -A A035 -C C004 -M 18 -l warn -t 2 [{0}] {1} %V001% ServerName:pfsense01;dpinger…” runs there is afterwards ONE notice in the queue and afterwards an entry in the history about the failed (cause over quota) try to send.

As I was unable to find the reason so far, I removed the notificiation smtp account (unfortunatly it’s not possible to disable it, unless adding a second one and reconfigure all notices)

br

Tom

Hi @SteveKo ,

thanks for the offer, I would try next week after after creating a new extra account only for Qnap.

Is it possible to relate to this post in the forum?

br

Tom

Hi,
some update on this topic.

Now I created a new @outlook account to sendout the messages from the Qnap.

As soon as this activates Rule-1 the old syslog messages, which include warning sent in from Pfsense get immediatly tried to get sent out with the new mailaddress (until it get locked)

This happens as soon, as I active the Rule-1

the rule is visible by the sender in the journal of notification center as I create a “broken” entry to distinguishe between the rules in journal.

So my questions are:

  1. what is the differenence of “Syslog-Server” in Rule-1 and the Syslog Server at the same level the rules for system notifications?
  2. where does the Rule-1 store the queue to send out the notifications? cause the messages is still tries to send out are not there anymore.
    They where listed in syslog/messages, where I deleted the file and setup a syslog-filter to avoid the logging fo the mentioned entries

br

Tom

I think you may contact QNAP support for assistance.