Monitoring NagiosLS Logstash with NagiosXI Showing Critical

This board serves as an open discussion and support collaboration point for Nagios XI. NOTE: Nagios XI customers should use the Customer Support forum to obtain expedited support.

Monitoring NagiosLS Logstash with NagiosXI Showing Critical

Postby klg » Tue Sep 03, 2019 7:43 am

Good Morning,

I am trying to monitor the status of my NagiosLS Logstash from my NagiosXI. My LS is up and running perfectly according to the GUI, and running "system logstash status" in the CLI confirms that Logstash is running. However, XI is showing "CRITICAL: logstash is stopped (should be running)". I am using this command to monitor the service (this is the same command I am using for Elasticsearch, which returns correctly):
"check_xi_ncpa!-t <my token> -P <my port> -M services -q service=logstash,status=running"

Thanks. Any help would be appreciated.
klg
 
Posts: 3
Joined: Mon Jul 22, 2019 7:57 am

Re: Monitoring NagiosLS Logstash with NagiosXI Showing Criti

Postby cdienger » Tue Sep 03, 2019 4:57 pm

What is the output of:

Code: Select all
curl 'http://localhost:9200/nagioslogserver/_search?q=_type:node&pretty'
?

Does the PID returned in that response match the ID returned by "system logstash status" ? If you run either of the commands multiple times, does the PID in the output change ?

Are there any errors/warnings in /var/log/logstash/logstash.log ?
As of May 25th, 2018, all communications with Nagios Enterprises and its employees are covered under our new Privacy Policy.
User avatar
cdienger
Support Tech
 
Posts: 3577
Joined: Tue Feb 07, 2017 11:26 am

Re: Monitoring NagiosLS Logstash with NagiosXI Showing Criti

Postby klg » Wed Sep 04, 2019 8:44 am

When I ran the curl command, I got two pids, one for each instance of our logserver cluster. The numbers did match the pids shown when running a status check on each instance, and they did not change when running the commands multiple times. There are errors in my logstash.log file, most of which are "A plugin had an unrecoverable error"
klg
 
Posts: 3
Joined: Mon Jul 22, 2019 7:57 am

Re: Monitoring NagiosLS Logstash with NagiosXI Showing Criti

Postby cdienger » Wed Sep 04, 2019 4:18 pm

If you force the check on the XI side, do you see the Last Check time change?

Please provide a screenshot of the service's Advanced tab as well as the output of this command run from the command line:

Code: Select all
/usr/local/nagios/libexec/check_ncpa -H <nls_ip> -t <token> -P <port> -M services -q service=logstash,status=running
Attachments
detail.png
As of May 25th, 2018, all communications with Nagios Enterprises and its employees are covered under our new Privacy Policy.
User avatar
cdienger
Support Tech
 
Posts: 3577
Joined: Tue Feb 07, 2017 11:26 am


Return to Nagios XI

Who is online

Users browsing this forum: No registered users and 3 guests