NRPE Checks Give false Positive

An open discussion forum for obtaining help with Nagios Core. Nagios Core users of all experience levels are welcome here. Subforum have been created for the discussion of Nagios Core and Nagios Plugin development.

NOTE: The SourceForge.net mailing lists have been deprecated in favor of this forum in order to expedite support and provide additional features not available on the old mailing list.

NRPE Checks Give false Positive

Postby kwhogster » Thu Mar 16, 2017 10:22 pm

Nagios Core 4.1

I keep getting these type of issues on my VM's
Once in a great while on the Physical devices

Is it Nagios or NRPE my NRPE is version 2.15 should I upgrade?

They always clear and go back to normal after a while

Check Application Event Logs Notifications for this service have been disabled UNKNOWN 03-16-2017 23:14:20 0d 0h 1m 51s 3/3 CHECK_NRPE: Received 0 bytes from daemon. Check the remote server logs for error messages.

Check System Event LogsThis service has 1 comment associated with it Notifications for this service have been disabled This service is flapping between states UNKNOWN 03-16-2017 23:13:27 0d 0h 1m 44s 3/3 CHECK_NRPE: Received 0 bytes from daemon. Check the remote server logs for error messages.

Explorer Notifications for this service have been disabled WARNING 03-16-2017 23:14:06 0d 0h 1m 5s 1/3 No data was received from host!

I do not want a lot of emails sent on this type of event

I have set many of my checks to only check after 60 minutes 360 minutes 1 day and even once a week.

I tried escalations but they still post and send emails

Any ideas

Thanks in advance

Tom
kwhogster
 
Posts: 378
Joined: Wed Oct 14, 2015 6:51 pm
Location: Wood Ridge NJ USA

Re: NRPE Checks Give false Positive

Postby mcapra » Fri Mar 17, 2017 12:52 pm

Just so we have all the necessary pieces, can you share this machine's nrpe.cfg as well as the service definitions producing those false positives?
Former Nagios employee - https://github.com/mcapra/
User avatar
mcapra
 
Posts: 2451
Joined: Thu May 05, 2016 3:54 pm

Re: NRPE Checks Give false Positive

Postby kwhogster » Fri Mar 17, 2017 1:57 pm

Ok here they are

nrpecfg.txt
nrpe cfg
(8.31 KiB) Downloaded 16 times


Maybe escalation settings would be good check mine out maybe I have something incorrect.
Attachments
supporttar.tar.gz
Config files
(53.35 KiB) Downloaded 17 times
kwhogster
 
Posts: 378
Joined: Wed Oct 14, 2015 6:51 pm
Location: Wood Ridge NJ USA

Re: NRPE Checks Give false Positive

Postby ssax » Fri Mar 17, 2017 2:59 pm

We can turn on NRPE debugging to collect more information.

On one of the remote servers, please edit this file:

Code: Select all
/usr/local/nagios/etc/nrpe.cfg


Change the debug setting to:

Code: Select all
debug=1


Save the file and then run:

Code: Select all
service xinetd restart


Now we need to add an option to the rsyslog server so it processes debug messages, edit this file:

Code: Select all
/etc/rsyslogd.conf



Find the /var/log/messsages line in the config file, it will look like this:

Code: Select all
*.info;mail.none;authpriv.none;cron.none /var/log/messages



Change it to:

Code: Select all
*.info;mail.none;authpriv.none;cron.none;daemon.debug /var/log/messages



Save the file and restart rsyslog:

Code: Select all
service rsyslog restart



Now there should be more information logged in /var/log/messages when there is a failure, keep an eye on it and then when it occurs again, run this command from the remote NRPE server, please run this command and send us the output:

Code: Select all
tail -n 100 /var/log/messages


Thank you
Be sure to check out our Knowledgebase for helpful articles and solutions!
User avatar
ssax
Dreams In Code
 
Posts: 2902
Joined: Wed Feb 11, 2015 12:54 pm

Re: NRPE Checks Give false Positive

Postby kwhogster » Fri Mar 17, 2017 5:19 pm

What server ?

This happens on all VM machines most are Windows Servers and Desktop computers

They do not have nrpe.cfg

Should I do it on the Nagios Server ???
kwhogster
 
Posts: 378
Joined: Wed Oct 14, 2015 6:51 pm
Location: Wood Ridge NJ USA

Re: NRPE Checks Give false Positive

Postby dwhitfield » Sat Mar 18, 2017 8:24 pm

Did you use https://assets.nagios.com/downloads/nag ... -0.3.x.pdf to set up the Windows machines?

If so, can you send us a nsc.ini file (if you installed a newer version of NSClient, the file will be called nsclient.ini)

If you did not use that documentation, what documentation did you use?

As an aside, you seem to be having many problems with NRPE. Have you read through https://assets.nagios.com/downloads/nag ... e/NRPE.pdf ?
Be sure to check out our Knowledgebase for helpful articles and solutions!
User avatar
dwhitfield
The Doctor
 
Posts: 3031
Joined: Wed Sep 21, 2016 10:29 am
Location: Nagios Enterprises, LLC

Re: NRPE Checks Give false Positive

Postby kwhogster » Sat Mar 18, 2017 8:48 pm

Most of my VM desktops and Servers run NSCLIENT 4.1.3
Yes I saw that doc even tho it is for Nagios XI I run Nagios Core 4.1

I saw that NRPE doc before too

I am doing Direct Checks I do not have any remote devices all on same network

See attached sample nsclient.ini
Attachments
nsclient for server.ini
server example
(16.16 KiB) Downloaded 14 times
nsclient for desktop.ini
desktop example
(14.23 KiB) Downloaded 11 times
kwhogster
 
Posts: 378
Joined: Wed Oct 14, 2015 6:51 pm
Location: Wood Ridge NJ USA

Re: NRPE Checks Give false Positive

Postby rkennedy » Sun Mar 19, 2017 5:52 pm

Post your nsclient log file for us to look at.
rkennedy
 
Posts: 6562
Joined: Mon Oct 05, 2015 11:45 am

Re: NRPE Checks Give false Positive

Postby dwhitfield » Sun Mar 19, 2017 6:18 pm

Yes, the NSClient log would be very useful.

You must be very careful about NSClient versions. We did not write that. Our Windows tool is called NCPA. It is fine to use NSClient, and obviously we write documentation for it, but the developer changes the configs a lot between versions, which can make it very frustrating to work with. Thanks for the info on the version!
Be sure to check out our Knowledgebase for helpful articles and solutions!
User avatar
dwhitfield
The Doctor
 
Posts: 3031
Joined: Wed Sep 21, 2016 10:29 am
Location: Nagios Enterprises, LLC

Re: NRPE Checks Give false Positive

Postby kwhogster » Sun Mar 19, 2017 7:18 pm

Ok so what can we do to fix this ?
kwhogster
 
Posts: 378
Joined: Wed Oct 14, 2015 6:51 pm
Location: Wood Ridge NJ USA

Next

Return to Nagios Core

Who is online

Users browsing this forum: No registered users and 14 guests

cron