Page 2 of 3

Re: Nagios alerts for removed services

Posted: Tue May 02, 2017 12:12 pm
by Aikanaro
Also, event log doesnt have port-channel220 alerting at all
Also, event log doesnt have port-channel220 alerting at all
Here is notifications list for this day
Here is notifications list for this day
Nagios-ghost-alerts.PNG
dwhitfield wrote:I don't really know much about splunk but are you sure it's not splunk sending out the messages? Can you attach one of the emails with the headers for us to review. Also, can you attach any splunk logs?

Hello dwhitfield,

no we are not using splunk, you can see its commented out #

I will upload as a attachment

Re: Nagios alerts for removed services

Posted: Tue May 02, 2017 12:33 pm
by dwhitfield
Looks like you need to remove /usr/local/nagios/var/nagios.tmpsZsBA6. It hasn't been updated since the 18th.

If you continue to have problems after removing the file, you'll want to take a look at ll -d /usr/local/nagios/var

Re: Nagios alerts for removed services

Posted: Tue May 02, 2017 12:58 pm
by Aikanaro
dwhitfield wrote:Looks like you need to remove /usr/local/nagios/var/nagios.tmpsZsBA6. It hasn't been updated since the 18th.

If you continue to have problems after removing the file, you'll want to take a look at ll -d /usr/local/nagios/var

dwhitfield,

thanks alot, lets see if that helps, i kind of feel that this will fix my issue!!!

I will let you know if that helped!

Re: Nagios alerts for removed services

Posted: Tue May 02, 2017 1:46 pm
by dwhitfield
No need to post if resolved. :)

If not resolved, then we'll want to take a look at ll -d /usr/local/nagios/var. Might as well take a look at ll /usr/local/nagios/var too.

Re: Nagios alerts for removed services

Posted: Tue May 02, 2017 1:58 pm
by Aikanaro
dwhitfield wrote:No need to post if resolved. :)

If not resolved, then we'll want to take a look at ll -d /usr/local/nagios/var. Might as well take a look at ll /usr/local/nagios/var too.

Dwhitfield,

here is

Code: Select all

ll -d /usr/local/nagios/var : 
drwxr-xr-x 5 nagios nagios 4096 May  2 11:57 /usr/local/nagios/var/

Code: Select all

root@ATL-NM-02:/usr/local/nagios/var# ll /usr/local/nagios/var
total 2392
drwxr-xr-x  5 nagios nagios   4096 May  2 11:57 ./
drwxr-xr-x 10 nagios nagios   4096 Aug  9  2016 ../
drwxrwxrwx  2 nagios nagios  20480 May  1 23:59 archives/
-rw-r--r--  1 nagios nagios    851 May  2 11:00 nagios.configtest
-rw-r--r--  1 nagios nagios      5 May  2 11:00 nagios.lock
-rw-r--r--  1 nagios nagios 129066 May  2 11:57 nagios.log
-rw-r--r--  1 nagios nagios 458559 May  2 11:00 objects.cache
-rw-r--r--  1 nagios nagios 458559 May  2 11:00 objects.precache
-rw-------  1 nagios nagios 677276 May  2 11:00 retention.dat
drwxrwsr-x  2 nagios nagcmd   4096 May  2 11:00 rw/
drwxr-xr-x  3 nagios nagios   4096 Apr 27  2016 spool/
-rw-rw-r--  1 nagios nagios 673371 May  2 11:57 status.dat

thanks for your help, i appreciate it alot =) :)

Re: Nagios alerts for removed services

Posted: Tue May 02, 2017 2:38 pm
by dwhitfield
Is it not resolved? Those permissions look good to me.

*If* not, what is the output of the following:

Code: Select all

ls -l /var/spool
ls -l /var/spool/mail
ls -l  /var/spool/mqueue-client/
getenforce

Re: Nagios alerts for removed services

Posted: Tue May 02, 2017 2:55 pm
by Aikanaro
dwhitfield wrote:Is it not resolved? Those permissions look good to me.

*If* not, what is the output of the following:

Code: Select all

ls -l /var/spool
ls -l /var/spool/mail
ls -l  /var/spool/mqueue-client/
getenforce
dwhitfield,

i wont be able to tell you today or tomorrow, problem is we receive an email 6 hours after its being sent to our email..... Our IT department says its due to issue with google mail itself, smtp server works without any issues. I will try my adding my personal email, and see if i get an alert.


thanks,
Igor

Re: Nagios alerts for removed services

Posted: Tue May 02, 2017 3:01 pm
by dwhitfield
Oh, I assumed the 6 hour thing was temporary, but looks like it's still going 25 hours later. I guess we have about 4 more hours to see if it's fixed.

Re: Nagios alerts for removed services

Posted: Mon Jun 12, 2017 12:46 pm
by Aikanaro
dwhitfield wrote:Oh, I assumed the 6 hour thing was temporary, but looks like it's still going 25 hours later. I guess we have about 4 more hours to see if it's fixed.

dwhitfield,

thanks for your help, we found the issue. Basically, one of our co-workers, cloned that server and nagios was running on the new server as well. So it was alerting for old service that was removed long time ago.

Re: Nagios alerts for removed services

Posted: Mon Jun 12, 2017 1:14 pm
by dwhitfield
It sounds like this issue has been resolved. Is it okay if we lock this thread? Thanks for choosing the Nagios forums!