Monitoring NagiosLS Logstash with NagiosXI Showing Critical

This support forum board is for support questions relating to Nagios XI, our flagship commercial network monitoring solution.
Locked
klg
Posts: 6
Joined: Mon Jul 22, 2019 7:57 am

Monitoring NagiosLS Logstash with NagiosXI Showing Critical

Post by klg »

Good Morning,

I am trying to monitor the status of my NagiosLS Logstash from my NagiosXI. My LS is up and running perfectly according to the GUI, and running "system logstash status" in the CLI confirms that Logstash is running. However, XI is showing "CRITICAL: logstash is stopped (should be running)". I am using this command to monitor the service (this is the same command I am using for Elasticsearch, which returns correctly):
"check_xi_ncpa!-t <my token> -P <my port> -M services -q service=logstash,status=running"

Thanks. Any help would be appreciated.
User avatar
cdienger
Support Tech
Posts: 5045
Joined: Tue Feb 07, 2017 11:26 am

Re: Monitoring NagiosLS Logstash with NagiosXI Showing Criti

Post by cdienger »

What is the output of:

Code: Select all

curl 'http://localhost:9200/nagioslogserver/_search?q=_type:node&pretty'
?

Does the PID returned in that response match the ID returned by "system logstash status" ? If you run either of the commands multiple times, does the PID in the output change ?

Are there any errors/warnings in /var/log/logstash/logstash.log ?
As of May 25th, 2018, all communications with Nagios Enterprises and its employees are covered under our new Privacy Policy.
klg
Posts: 6
Joined: Mon Jul 22, 2019 7:57 am

Re: Monitoring NagiosLS Logstash with NagiosXI Showing Criti

Post by klg »

When I ran the curl command, I got two pids, one for each instance of our logserver cluster. The numbers did match the pids shown when running a status check on each instance, and they did not change when running the commands multiple times. There are errors in my logstash.log file, most of which are "A plugin had an unrecoverable error"
User avatar
cdienger
Support Tech
Posts: 5045
Joined: Tue Feb 07, 2017 11:26 am

Re: Monitoring NagiosLS Logstash with NagiosXI Showing Criti

Post by cdienger »

If you force the check on the XI side, do you see the Last Check time change?

Please provide a screenshot of the service's Advanced tab as well as the output of this command run from the command line:

Code: Select all

/usr/local/nagios/libexec/check_ncpa -H <nls_ip> -t <token> -P <port> -M services -q service=logstash,status=running
You do not have the required permissions to view the files attached to this post.
As of May 25th, 2018, all communications with Nagios Enterprises and its employees are covered under our new Privacy Policy.
Locked