Nagios BPI

This support forum board is for support questions relating to Nagios XI, our flagship commercial network monitoring solution.
Locked
User avatar
richleone
Posts: 2
Joined: Tue Nov 18, 2014 12:05 pm
Location: Denver CO

Nagios BPI

Post by richleone »

I am trying to make it so that a NOC worker can log into Nagios XI and see what I want them to see, to alleviate clutter and only see the areas I deem relevant.

One of these areas is the BPI
I have made nagios user login as read only, as instructed by my contractor, then went to the BPI and added the user to each group.
the user is only able to see the top level groups and nothing below!
UGHHHH
Any ideas?
seems apparent its a permission issue, I have edited the BPI Config file and verified EVERY group has the user listed as auth user

please advise
R
RocketMan
slansing
Posts: 7698
Joined: Mon Apr 23, 2012 4:28 pm
Location: Travelling through time and space...

Re: Nagios BPI

Post by slansing »

If I recall correctly, BPI displays don't deal with if a contact is assigned to an object or not, as they are completely detached from the normal nagios display/check logic. All the same, have you tried assigning this read only user's contact to a host/service and see if they can drill down to them? What priority group are they seeing, and can you provide a screenshot of what you are currently seeing, that you want to get around?
User avatar
richleone
Posts: 2
Joined: Tue Nov 18, 2014 12:05 pm
Location: Denver CO

Re: Nagios BPI

Post by richleone »

I have made the user part of a contact group,, then added that contact group as a contact for the desired hosts and services. Ive also int he BPI config file, given that user permission to see the host and services.
Im at a loss, it seems that only an admin can drill down in the BPI
RocketMan
User avatar
lmiltchev
Bugs find me
Posts: 13589
Joined: Mon May 23, 2011 12:15 pm

Re: Nagios BPI

Post by lmiltchev »

You will need to make sure that:

1. This contact is added to ALL BPI groups/sub-groups that he/she needs to see
2. These BPI groups contain ONLY hosts/services the user is allowed to see in Nagios XI.

If there is a single service, that this contact doesn't have a right to see, he/she won't be able to view subgroups down the tree in BPI...
Be sure to check out our Knowledgebase for helpful articles and solutions!
sreinhardt
-fno-stack-protector
Posts: 4366
Joined: Mon Nov 19, 2012 12:10 pm

Re: Nagios BPI

Post by sreinhardt »

I believe this is one case, where BPI permissions are definitely restricting you. Considering BPI respects nagios permissions regardless of it's own internal settings. I would suggest going into BPI, in the upper right there is a Edit BPI settings, open that and check the "Show All Groups To All Users" box. This will disable bpi's internal permissions, and force it to respect contact settings from nagios and should display just what he is a contact for.
Nagios-Plugins maintainer exclusively, unless you have other C language bugs with open-source nagios projects, then I am happy to help! Please pm or use other communication to alert me to issues as I no longer track the forum.
User avatar
mikew
Posts: 243
Joined: Sun Feb 05, 2012 7:05 pm

Re: Nagios BPI

Post by mikew »

I have recently done a lot of work with BPI and found that it is exacting. If you set permissions incorrectly for hosts/services it will not work. You have to be exactly right for it to work correctly. If you set the contact to have rights to the exact hosts and services it will work perfectly. But if you make a mistake on one host/service it will not work. The process is cumbersome but it must be exact and it will work correctly.....learned the hard way.
Mike Weber

Nagios Training/Consulting
sreinhardt
-fno-stack-protector
Posts: 4366
Joined: Mon Nov 19, 2012 12:10 pm

Re: Nagios BPI

Post by sreinhardt »

Thanks Mike! Sounds about right, it's a pain, but when it works it works wonderfully!
Nagios-Plugins maintainer exclusively, unless you have other C language bugs with open-source nagios projects, then I am happy to help! Please pm or use other communication to alert me to issues as I no longer track the forum.
Locked