Alerts not working

Hi everyone,

For some reason, I can’t use alerts anymore. I want to export a report to a Samba share after each scan. I did have this set-up before, so I know it works but it stopped working for some reason.

The logs aren’t really useful cause it says the alert was triggered:

event alert:MESSAGE:2021-04-30 14h48.04 UTC:27759: The alert Samba was triggered (Event: Task status changed to ‘Done’, Condition: Always)

When I try to “force” an alert, the GSA tells me this:

Am I missing some logfile where it will tell me where it’s failing? I can access the SMB share from smbclient on the machine itself, but for somereason GVM cannot access it.

Tried with this docker container first, same issue. Used this script for installing without docker.
If you need more information, please let me know. I hope someone can point me in the right direction!



GVM versions

gsad: 21.04.0~git-be5d79207-gsa-21.04
gvmd: 21.4.0~git-4c156c910-gvmd-21.04
openvas-scanner: 21.4.1~git-846ce6ed-openvas-21.04
gvm-libs: 21.4.1~git-0a1e41ed-gvm-libs-21.04


Operating system:
Kernel: Linux debian 4.19.0-16-amd64 #1 SMP Debian 4.19.181-1 (2021-03-19) x86_64 GNU/Linux
Installation method / source: See above

I would strace the gvmd to see what the issue might be.


Thanks for the answer! I ran a strace on the gvmd PID to see what was happening when I clicked the trigger alert button. I don’t see any issues that could cause my problem, but reading a strace is not my strongest suit.

Do you see anything thats does not look correct? Thanks.

Hmm did you ask to follow the processe ? I

t looks like you just traced the PID and not started the GVMd with strace and the follow option. “man strace” might help you here.

1 Like

I figured it out, thanks! There was indeed a lot more information if I ran the process using strace. It showed me the error message NT_STATUS_PERMISSION_DENIED, and after some digging it was because of some misconfigured permissions on the Windows Server I’m using to store the reports.

One last question, I’ve tried searching for it but can’t really find anything. Is it possible to create 1 alert and every time it runs, it wil use a different name for the report? For example, every report is called report.csv because thats what it is set to in the Alert settings, but I would like to have something like report+UID, just like when you manually download a report (e.g. report-bb4bb18a-de2e-4ffb-be3d-0a6035518c60.csv).

Thanks again!



New / unrelated question = new topic pls (should be a golden rule for every online community / forums, not only this one).