This is an sec rulle file to help prevent an email storm with Icinga/Nagios caused by excessive notifications.

email_throttle2.conf

type=SingleWithThreshold
ptype=RegExp
pattern=test
desc=$0
action=eval %e {'[email protected]'} ; \
       eval %c {'/var/spool/icinga/cmd/icinga.cmd'} ; \
       pipe 'The email threshold was tripped at %t /n Stopping the sendmil service' /bin/mail -s "Email Storm Alert" %e ;  \
       shellcmd /usr/bin/printf "[%%lu] DISABLE_NOTIFICATIONS" %u > %c
window=60
thresh=25