Nagios CCM - Login creation / Nagios Audit Log

[rajasegar]

Nagios XI 2014R1.2

1) Can you please advice how to create login for Nagios CCM?
We want to create individual ID for the admins.

2) How do we export Nagios audit logs in syslog format to a central syslog server?

Thanks

[lmiltchev]

1) Can you please advice how to create login for Nagios CCM?
We want to create individual ID for the admins.

Admin->Manage System Config->Separate CCM Login = checked->Update Settings
CCM->Config Manager Admin->Manage Config Access->Add New

2) How do we export Nagios audit logs in syslog format to a central syslog server?

I can certainly see a value in this. I will be posting an internal feature request for adding this functionality to Nagios XI.

[rajasegar]

1) Can you please advice how to create login for Nagios CCM?
We want to create individual ID for the admins.

Admin->Manage System Config->Separate CCM Login = checked->Update Settings
CCM->Config Manager Admin->Manage Config Access->Add New

2) How do we export Nagios audit logs in syslog format to a central syslog server?

I can certainly see a value in this. I will be posting an internal feature request for adding this functionality to Nagios XI.

Thanks. In the meantime where do I find the audit log in the server? Any particular file?

[lmiltchev]

Thanks. In the meantime where do I find the audit log in the server? Any particular file?

It's not in a file - it's in PostgresQL database. That's why it's not easy to send it to a "central log server". I already posted a feature request (TASK ID 4297) about adding this functionality.

[rajasegar]

Thanks. In the meantime where do I find the audit log in the server? Any particular file?

It's not in a file - it's in PostgresQL database. That's why it's not easy to send it to a "central log server". I already posted a feature request (TASK ID 4297) about adding this functionality.

Ok. Which table in PostgresQL then?

[tmcdonald]

xi_auditlog:

Code: Select all

nagiosxi=> \d xi_auditlog;
                                          Table "public.xi_auditlog"
   Column    |            Type             |                             Modifiers
-------------+-----------------------------+-------------------------------------------------------------------
 auditlog_id | integer                     | not null default nextval('xi_auditlog_auditlog_id_seq'::regclass)
 log_time    | timestamp without time zone |
 source      | text                        |
 user        | text                        |
 type        | integer                     |
 message     | text                        |
 ip_address  | text                        |
Indexes:
    "xi_auditlog_pkey" PRIMARY KEY, btree (auditlog_id)
    "xi_auditlog_ip_address" btree (ip_address)
    "xi_auditlog_log_time" btree (log_time)
    "xi_auditlog_source" btree (source)
    "xi_auditlog_type" btree (type)
    "xi_auditlog_user" btree ("user")

nagiosxi=>

[rajasegar]

xi_auditlog:

Code: Select all

nagiosxi=> \d xi_auditlog;
                                          Table "public.xi_auditlog"
   Column    |            Type             |                             Modifiers
-------------+-----------------------------+-------------------------------------------------------------------
 auditlog_id | integer                     | not null default nextval('xi_auditlog_auditlog_id_seq'::regclass)
 log_time    | timestamp without time zone |
 source      | text                        |
 user        | text                        |
 type        | integer                     |
 message     | text                        |
 ip_address  | text                        |
Indexes:
    "xi_auditlog_pkey" PRIMARY KEY, btree (auditlog_id)
    "xi_auditlog_ip_address" btree (ip_address)
    "xi_auditlog_log_time" btree (log_time)
    "xi_auditlog_source" btree (source)
    "xi_auditlog_type" btree (type)
    "xi_auditlog_user" btree ("user")

nagiosxi=>

Thanks, please close this case.