Cannot Log into Nagios Log Server

[sbarrera]

Hi i´m having a problem while login into Nagios Log Server for first time, i put the credentials and it pop me again to log in (like a simple reload).

I think that the problem is whit logstash because of this but i don´t know how to solve it:

Code: Select all

service logstash status

Code: Select all

Logstash Daemon● logstash.service - LSB: Logstash
   Loaded: loaded (/etc/rc.d/init.d/logstash; bad; vendor preset: disabled)
   Active: active (exited) since Fri 2018-05-11 09:46:49 UTC; 2h 28min ago
     Docs: man:systemd-sysv-generator(8)
  Process: 11170 ExecStop=/etc/rc.d/init.d/logstash stop (code=exited, status=0/SUCCESS)
  Process: 11182 ExecStart=/etc/rc.d/init.d/logstash start (code=exited, status=0/SUCCESS)

May 11 09:46:49 ip-172-31-1-24.eu-west-1.compute.internal systemd[1]: Starting LSB: Logstash...
May 11 09:46:49 ip-172-31-1-24.eu-west-1.compute.internal runuser[11192]: pam_unix(runuser:session): session opened for user nagios by (uid=0)
May 11 09:46:49 ip-172-31-1-24.eu-west-1.compute.internal logstash[11182]: Starting Logstash Daemon: [  OK  ]
May 11 09:46:49 ip-172-31-1-24.eu-west-1.compute.internal systemd[1]: Started LSB: Logstash.
May 11 09:47:25 ip-172-31-1-24.eu-west-1.compute.internal runuser[11192]: pam_unix(runuser:session): session closed for user nagios

[scottwilkerson]

I think that the problem is whit logstash because of this but i don´t know how to solve it:

Logstash is not part of the login process.

Do you see a red error above the username after clicking login?

Have you tried multiple browsers?

Are there any errors in /var/log/httpd/error_log

[sbarrera]

Hi, the error message that pop me is "The username specified does not exist" whit the nagiosadmin user.

Yes i´ve tried multiple browser.

And this is the log:

Code: Select all

 $sudo tail -n 5 /var/log/httpd/error_log
[Fri May 11 12:21:12.349779 2018] [suexec:notice] [pid 762] AH01232: suEXEC mechanism enabled (wrapper: /usr/sbin/suexec)
[Fri May 11 12:21:12.412488 2018] [auth_digest:notice] [pid 762] AH01757: generating secret for digest authentication ...
[Fri May 11 12:21:12.413204 2018] [lbmethod_heartbeat:notice] [pid 762] AH02282: No slotmem from mod_heartmonitor
[Fri May 11 12:21:12.510150 2018] [mpm_prefork:notice] [pid 762] AH00163: Apache/2.4.6 (Red Hat Enterprise Linux) PHP/5.4.16 configured -- resuming normal operations
[Fri May 11 12:21:12.510177 2018] [core:notice] [pid 762] AH00094: Command line: '/usr/sbin/httpd -D FOREGROUND'

[scottwilkerson]

Something happened to the nagiosadmin user or the nagioslogserver index which stores the user info.

I would recommend restoring a system backup, details can be found starting on the bottom of page 7 in this document
https://assets.nagios.com/downloads/nag ... Server.pdf\

Make sure you puck a backup from BEFORE this started happening.

[sbarrera]

Great i´ve already did that and it works Thank you so much¡. This ticket can be close.

[scottwilkerson]

Excellent! Closing