I'd suggest shooting an email to security@nagios.com.

https://www.nagios.com/products/security/

I think a simple disclaimer at the top of the docs to the effect of "don't do this in prod, it exposes your influxdb instance to anything with a network connection" would go a long way.

I'd have to see the full contents of at least the files mentioned to have a clue of what's going on:

Code: Select all

/etc/apache2/apache2.conf
/etc/apache2/sites-enabled/pnp4nagios.conf

Was there particular documentation you were following to make this change?

I noticed that several of the servers are being queried over NRPE and referenced by their public IP address. Is this a security risk? It's not good practice to have any "monitoring stuff" be public facing, regardless of whether that's NRPE or NCPA or a Prometheus exporter or a Telegraf ag...

NRPE does not run commands in a shell (it uses popen), and subsequently cannot perform Bash substitution as you're attempting to do here:

Code: Select all

`date +%Y-%m-%d`

I can't say for certain if that's what is causing your issue, but it stands out.

In Nagios Core, there's a pretty finite number of things that would spike httpd specifically, and it's usually the CGIs or pnp4nagios. Are you running any sort of reporting behind-the-scenes?

In Nagios XI, there's several things that could spike httpd specifically.

The JSON Query Generator might be of interest: https://labs.nagios.com/2014/06/19/exploring-the-new-json-cgis-in-nagios-core-4-0-7-part-1/ Should be included in Nagios Core by default at this point -- no need to install anything additional, just navigate to: http://<nagios server>/nagios/jsonquery.h...

Correct, you could also submit the check results passively. https://assets.nagios.com/downloads/nagioscore/docs/nagioscore/4/en/passivechecks.html If NCPA is your weapon of choice: https://www.nagios.org/ncpa/help/2.2/passive.html Or if you're still hip to the cron idea, you could pipe those check r...

This is not possible. If it's a check being executed via a Nagios command definition, it must honor the service_check_timeout or host_check_timeout. You may consider having a separate process, orchestrated by something like cron, which is responsible for caching this data to disk somewhere periodica...

The page referenced by that plugin no longer exists, as far as I can tell. Using the WayBackMachine the last snapshot I can find was on July 9th . I suspect the plugin would need to be modified to pull either from the RSS feed , or this JSON history of incidents: https://www.google.com/appsstatus/d...

It would be helpful to know where you got that script from.

This is a pretty comprehensive tutorial for how to leverage custom plugins/scripts in Nagios Core:
https://www.howtoforge.com/tutorial/wri ... ck-plugin/