Nagios alerts for removed services

Support forum for Nagios Core, Nagios Plugins, NCPA, NRPE, NSCA, NDOUtils and more. Engage with the community of users including those using the open source solutions.
Aikanaro
Posts: 16
Joined: Fri Apr 28, 2017 3:07 pm

Re: Nagios alerts for removed services

Post by Aikanaro »

Also, event log doesnt have port-channel220 alerting at all
Also, event log doesnt have port-channel220 alerting at all
Here is notifications list for this day
Here is notifications list for this day
Nagios-ghost-alerts.PNG
dwhitfield wrote:I don't really know much about splunk but are you sure it's not splunk sending out the messages? Can you attach one of the emails with the headers for us to review. Also, can you attach any splunk logs?

Hello dwhitfield,

no we are not using splunk, you can see its commented out #

I will upload as a attachment
dwhitfield
Former Nagios Staff
Posts: 4583
Joined: Wed Sep 21, 2016 10:29 am
Location: NoLo, Minneapolis, MN
Contact:

Re: Nagios alerts for removed services

Post by dwhitfield »

Looks like you need to remove /usr/local/nagios/var/nagios.tmpsZsBA6. It hasn't been updated since the 18th.

If you continue to have problems after removing the file, you'll want to take a look at ll -d /usr/local/nagios/var
Aikanaro
Posts: 16
Joined: Fri Apr 28, 2017 3:07 pm

Re: Nagios alerts for removed services

Post by Aikanaro »

dwhitfield wrote:Looks like you need to remove /usr/local/nagios/var/nagios.tmpsZsBA6. It hasn't been updated since the 18th.

If you continue to have problems after removing the file, you'll want to take a look at ll -d /usr/local/nagios/var

dwhitfield,

thanks alot, lets see if that helps, i kind of feel that this will fix my issue!!!

I will let you know if that helped!
dwhitfield
Former Nagios Staff
Posts: 4583
Joined: Wed Sep 21, 2016 10:29 am
Location: NoLo, Minneapolis, MN
Contact:

Re: Nagios alerts for removed services

Post by dwhitfield »

No need to post if resolved. :)

If not resolved, then we'll want to take a look at ll -d /usr/local/nagios/var. Might as well take a look at ll /usr/local/nagios/var too.
Aikanaro
Posts: 16
Joined: Fri Apr 28, 2017 3:07 pm

Re: Nagios alerts for removed services

Post by Aikanaro »

dwhitfield wrote:No need to post if resolved. :)

If not resolved, then we'll want to take a look at ll -d /usr/local/nagios/var. Might as well take a look at ll /usr/local/nagios/var too.

Dwhitfield,

here is

Code: Select all

ll -d /usr/local/nagios/var : 
drwxr-xr-x 5 nagios nagios 4096 May  2 11:57 /usr/local/nagios/var/

Code: Select all

root@ATL-NM-02:/usr/local/nagios/var# ll /usr/local/nagios/var
total 2392
drwxr-xr-x  5 nagios nagios   4096 May  2 11:57 ./
drwxr-xr-x 10 nagios nagios   4096 Aug  9  2016 ../
drwxrwxrwx  2 nagios nagios  20480 May  1 23:59 archives/
-rw-r--r--  1 nagios nagios    851 May  2 11:00 nagios.configtest
-rw-r--r--  1 nagios nagios      5 May  2 11:00 nagios.lock
-rw-r--r--  1 nagios nagios 129066 May  2 11:57 nagios.log
-rw-r--r--  1 nagios nagios 458559 May  2 11:00 objects.cache
-rw-r--r--  1 nagios nagios 458559 May  2 11:00 objects.precache
-rw-------  1 nagios nagios 677276 May  2 11:00 retention.dat
drwxrwsr-x  2 nagios nagcmd   4096 May  2 11:00 rw/
drwxr-xr-x  3 nagios nagios   4096 Apr 27  2016 spool/
-rw-rw-r--  1 nagios nagios 673371 May  2 11:57 status.dat

thanks for your help, i appreciate it alot =) :)
Last edited by dwhitfield on Tue May 02, 2017 2:25 pm, edited 1 time in total.
Reason: code blocks FTW
dwhitfield
Former Nagios Staff
Posts: 4583
Joined: Wed Sep 21, 2016 10:29 am
Location: NoLo, Minneapolis, MN
Contact:

Re: Nagios alerts for removed services

Post by dwhitfield »

Is it not resolved? Those permissions look good to me.

*If* not, what is the output of the following:

Code: Select all

ls -l /var/spool
ls -l /var/spool/mail
ls -l  /var/spool/mqueue-client/
getenforce
Aikanaro
Posts: 16
Joined: Fri Apr 28, 2017 3:07 pm

Re: Nagios alerts for removed services

Post by Aikanaro »

dwhitfield wrote:Is it not resolved? Those permissions look good to me.

*If* not, what is the output of the following:

Code: Select all

ls -l /var/spool
ls -l /var/spool/mail
ls -l  /var/spool/mqueue-client/
getenforce
dwhitfield,

i wont be able to tell you today or tomorrow, problem is we receive an email 6 hours after its being sent to our email..... Our IT department says its due to issue with google mail itself, smtp server works without any issues. I will try my adding my personal email, and see if i get an alert.


thanks,
Igor
Last edited by Aikanaro on Wed May 03, 2017 1:42 pm, edited 1 time in total.
dwhitfield
Former Nagios Staff
Posts: 4583
Joined: Wed Sep 21, 2016 10:29 am
Location: NoLo, Minneapolis, MN
Contact:

Re: Nagios alerts for removed services

Post by dwhitfield »

Oh, I assumed the 6 hour thing was temporary, but looks like it's still going 25 hours later. I guess we have about 4 more hours to see if it's fixed.
Aikanaro
Posts: 16
Joined: Fri Apr 28, 2017 3:07 pm

Re: Nagios alerts for removed services

Post by Aikanaro »

dwhitfield wrote:Oh, I assumed the 6 hour thing was temporary, but looks like it's still going 25 hours later. I guess we have about 4 more hours to see if it's fixed.

dwhitfield,

thanks for your help, we found the issue. Basically, one of our co-workers, cloned that server and nagios was running on the new server as well. So it was alerting for old service that was removed long time ago.
dwhitfield
Former Nagios Staff
Posts: 4583
Joined: Wed Sep 21, 2016 10:29 am
Location: NoLo, Minneapolis, MN
Contact:

Re: Nagios alerts for removed services

Post by dwhitfield »

It sounds like this issue has been resolved. Is it okay if we lock this thread? Thanks for choosing the Nagios forums!
Locked