more fixes, make runbook optional

- fix a bug when CRITICAL would be used instead of WARNING
- use runbook from cluster check if it is defined
- code cleanups