Nagios Support Forum

Noticed that a number of system passwords are in clear text in the Nagios Configuration files. Would NagiosXI support a method to encrypt those files or obfuscate them in any method?

We have a situation where we have two identical systems one in development the other in production. We have created a XI host and service configuration on the development system. We would like to export that and import that into the production system, however the IP addresses of the hosts are differ...

What I've discovered in the meantime was the host was a VM, which was having 50ms delayed storage write times which was creating the ndo2db not to be able to keep up and thus creating all this havoc. Once the storage was tuned for no latency vs. throughput then the iowait times went down and the app...

While executing the update, when it does the ./configure it has an issue with the MySQL library could not be located, but the script continues on. However when complete the ndo2db is not running, and when look at the /etc/init.d/ndo2db status is states ndo2db is not running but subsystem is locked. ...

If we go to NagiosXI 5 is there updated guidance on how to harden? Or become STIG complaint between the OS and application? We noticed there were a few embedded passwords in the install scripts for XI version 4 which we needed to modify during install time to make our security folks happy.

Using Nagios XI 2014R2.6, Core version is 4.0.8

Would there be anything we could do in the current version to help the situation without having to upgrade?

We are experiencing via the XI hosts and service detail GUIs in XI that as the system runs the last check times are progressively falling behind. If we go to Nagios Core directly (https://xxxx/nagios) these last check times seems to be current. If you let this run for a day or more the times can get...

Understand, thanks. Correct I suppose most of it would be accessible via SNMP. Trying to tease out the CPU, memory usages, fans, temperatures, and things like that. So probably all depends on what the appliance allows access to via SNMP.

Is there a way to export the Nagios XI audit logs or set them to be sent to a syslog server? If they can't be set to send to syslog where are they located (flat file, database, etc) ?

Is there a Nagios XI hardening guide to support something like STIG (Security Technical Implementation Guide) compliance? My customer requires everything on the box to be secure from web interfaces, databases, etc, and need to make sure this application is as buttoned up as possible. Thanks.