NRPE Checks Give false Positive
NRPE Checks Give false Positive
Nagios Core 4.1
I keep getting these type of issues on my VM's
Once in a great while on the Physical devices
Is it Nagios or NRPE my NRPE is version 2.15 should I upgrade?
They always clear and go back to normal after a while
Check Application Event Logs Notifications for this service have been disabled UNKNOWN 03-16-2017 23:14:20 0d 0h 1m 51s 3/3 CHECK_NRPE: Received 0 bytes from daemon. Check the remote server logs for error messages.
Check System Event LogsThis service has 1 comment associated with it Notifications for this service have been disabled This service is flapping between states UNKNOWN 03-16-2017 23:13:27 0d 0h 1m 44s 3/3 CHECK_NRPE: Received 0 bytes from daemon. Check the remote server logs for error messages.
Explorer Notifications for this service have been disabled WARNING 03-16-2017 23:14:06 0d 0h 1m 5s 1/3 No data was received from host!
I do not want a lot of emails sent on this type of event
I have set many of my checks to only check after 60 minutes 360 minutes 1 day and even once a week.
I tried escalations but they still post and send emails
Any ideas
Thanks in advance
Tom
I keep getting these type of issues on my VM's
Once in a great while on the Physical devices
Is it Nagios or NRPE my NRPE is version 2.15 should I upgrade?
They always clear and go back to normal after a while
Check Application Event Logs Notifications for this service have been disabled UNKNOWN 03-16-2017 23:14:20 0d 0h 1m 51s 3/3 CHECK_NRPE: Received 0 bytes from daemon. Check the remote server logs for error messages.
Check System Event LogsThis service has 1 comment associated with it Notifications for this service have been disabled This service is flapping between states UNKNOWN 03-16-2017 23:13:27 0d 0h 1m 44s 3/3 CHECK_NRPE: Received 0 bytes from daemon. Check the remote server logs for error messages.
Explorer Notifications for this service have been disabled WARNING 03-16-2017 23:14:06 0d 0h 1m 5s 1/3 No data was received from host!
I do not want a lot of emails sent on this type of event
I have set many of my checks to only check after 60 minutes 360 minutes 1 day and even once a week.
I tried escalations but they still post and send emails
Any ideas
Thanks in advance
Tom
Re: NRPE Checks Give false Positive
Just so we have all the necessary pieces, can you share this machine's nrpe.cfg as well as the service definitions producing those false positives?
Former Nagios employee
https://www.mcapra.com/
https://www.mcapra.com/
Re: NRPE Checks Give false Positive
Ok here they are
Maybe escalation settings would be good check mine out maybe I have something incorrect.
Maybe escalation settings would be good check mine out maybe I have something incorrect.
- Attachments
-
- supporttar.tar.gz
- Config files
- (53.35 KiB) Downloaded 418 times
Re: NRPE Checks Give false Positive
We can turn on NRPE debugging to collect more information.
On one of the remote servers, please edit this file:
Change the debug setting to:
Save the file and then run:
Now we need to add an option to the rsyslog server so it processes debug messages, edit this file:
Find the /var/log/messsages line in the config file, it will look like this:
Change it to:
Save the file and restart rsyslog:
Now there should be more information logged in /var/log/messages when there is a failure, keep an eye on it and then when it occurs again, run this command from the remote NRPE server, please run this command and send us the output:
Thank you
On one of the remote servers, please edit this file:
Code: Select all
/usr/local/nagios/etc/nrpe.cfg
Code: Select all
debug=1
Code: Select all
service xinetd restart
Code: Select all
/etc/rsyslogd.conf
Find the /var/log/messsages line in the config file, it will look like this:
Code: Select all
*.info;mail.none;authpriv.none;cron.none /var/log/messages
Change it to:
Code: Select all
*.info;mail.none;authpriv.none;cron.none;daemon.debug /var/log/messages
Save the file and restart rsyslog:
Code: Select all
service rsyslog restart
Now there should be more information logged in /var/log/messages when there is a failure, keep an eye on it and then when it occurs again, run this command from the remote NRPE server, please run this command and send us the output:
Code: Select all
tail -n 100 /var/log/messages
Re: NRPE Checks Give false Positive
What server ?
This happens on all VM machines most are Windows Servers and Desktop computers
They do not have nrpe.cfg
Should I do it on the Nagios Server ???
This happens on all VM machines most are Windows Servers and Desktop computers
They do not have nrpe.cfg
Should I do it on the Nagios Server ???
-
- Former Nagios Staff
- Posts: 4583
- Joined: Wed Sep 21, 2016 10:29 am
- Location: NoLo, Minneapolis, MN
- Contact:
Re: NRPE Checks Give false Positive
Did you use https://assets.nagios.com/downloads/nag ... -0.3.x.pdf to set up the Windows machines?
If so, can you send us a nsc.ini file (if you installed a newer version of NSClient, the file will be called nsclient.ini)
If you did not use that documentation, what documentation did you use?
As an aside, you seem to be having many problems with NRPE. Have you read through https://assets.nagios.com/downloads/nag ... e/NRPE.pdf ?
If so, can you send us a nsc.ini file (if you installed a newer version of NSClient, the file will be called nsclient.ini)
If you did not use that documentation, what documentation did you use?
As an aside, you seem to be having many problems with NRPE. Have you read through https://assets.nagios.com/downloads/nag ... e/NRPE.pdf ?
Re: NRPE Checks Give false Positive
Most of my VM desktops and Servers run NSCLIENT 4.1.3
Yes I saw that doc even tho it is for Nagios XI I run Nagios Core 4.1
I saw that NRPE doc before too
I am doing Direct Checks I do not have any remote devices all on same network
See attached sample nsclient.ini
Yes I saw that doc even tho it is for Nagios XI I run Nagios Core 4.1
I saw that NRPE doc before too
I am doing Direct Checks I do not have any remote devices all on same network
See attached sample nsclient.ini
- Attachments
-
- nsclient for server.ini
- server example
- (16.16 KiB) Downloaded 432 times
-
- nsclient for desktop.ini
- desktop example
- (14.23 KiB) Downloaded 416 times
Re: NRPE Checks Give false Positive
Post your nsclient log file for us to look at.
Former Nagios Employee
-
- Former Nagios Staff
- Posts: 4583
- Joined: Wed Sep 21, 2016 10:29 am
- Location: NoLo, Minneapolis, MN
- Contact:
Re: NRPE Checks Give false Positive
Yes, the NSClient log would be very useful.
You must be very careful about NSClient versions. We did not write that. Our Windows tool is called NCPA. It is fine to use NSClient, and obviously we write documentation for it, but the developer changes the configs a lot between versions, which can make it very frustrating to work with. Thanks for the info on the version!
You must be very careful about NSClient versions. We did not write that. Our Windows tool is called NCPA. It is fine to use NSClient, and obviously we write documentation for it, but the developer changes the configs a lot between versions, which can make it very frustrating to work with. Thanks for the info on the version!
Re: NRPE Checks Give false Positive
Ok so what can we do to fix this ?