Monitoring of Login attempts through Nagios

[Samreen Mardhani]

Is there any plugin or way to monitor the number of login attempts to a website through Nagios? If yes then can you please share the plugin name and how to configure it!

Thanks in Advance.

[mcapra]

What authentication mechanism is being used? There are a *bunch* of different authentication mechanisms out in the wild. It would depend on the specific authentication/session management system your website is using.

Are you looking to validate whether or not a user *can* login to a website, or are you attempting to monitor how many login attempts have occurred in a time period?

If the former, check_http can handle basic authentication:

Code: Select all

     -a, --authorization=AUTH_PAIR
        Username:password on sites with basic authentication

For forms-based authentication, you could try the Web Transaction configuration wizard mentioned in this documentation:
https://assets.nagios.com/downloads/nag ... ios-XI.pdf

If the latter, and it's just basic authentication, you could use an agent like check_log3.pl executed via NRPE/NCPA on the remote web server to keep track of the number of attempts/successes/failures by parsing the webserver logs.

There are also a few different plugins for tracking active Tomcat sessions. Here's one of them:
https://exchange.nagios.org/directory/P ... ns/details

[npolovenko]

Thanks, @mcapra!
@Samreen Mardhani, Let us know if you have any follow up questions?