Removing Scheduled Downtime Problem

[scottwilkerson]

What version of XI are you running?

Do you have scripts that are sending commands to the nagios command pipe?

Does the log contain lines near those lines that start with

Code: Select all

EXTERNAL COMMAND: 

Can you show the results of the following

Code: Select all

grep log_external_commands /usr/local/nagios/etc/nagios.cfg

If it doesn't equal 1 you may want to edit that line and restart nagios to log the commands that are being sent to the system

[highness]

I work with Costanza2k1 - here are some of the answers to your previous questions

What version of XI are you running?

Nagios XI 2014R1.5

Do you have scripts that are sending commands to the nagios command pipe?

While we do plan on doing that down the road, not yet.

Does the log contain lines near those lines that start with

Code: Select all

EXTERNAL COMMAND: 

Didn't see any.

Can you show the results of the following

Code: Select all

grep log_external_commands /usr/local/nagios/etc/nagios.cfg

[root@nagios]# grep log_external_commands /usr/local/nagios/etc/nagios.cfg
log_external_commands=0

If it doesn't equal 1 you may want to edit that line and restart nagios to log the commands that are being sent to the system

Done.

[highness]

So far, only one external command:

Can you show the results of the following

Code: Select all

grep log_external_commands /usr/local/nagios/etc/nagios.cfg

Code: Select all

[1420659328] EXTERNAL COMMAND: SCHEDULE_FORCED_SVC_CHECK;Dns2.xxxxxxxxxxxx.com;DNS Resolution - Dns2.xxxxxxxxxxxx.com;1420659324

[abrist]

Alright. Are you seeing any more "malformed Commands"?

[highness]

Alright. Are you seeing any more "malformed Commands"?

Nope. Haven't seen any for quite a while.

Any idea how we can get these hosts out of the recurring downtime spiral?

[highness]

I really need to see if we can get this resolved today. Where does Nagios keep the list of hosts that need to have downtime scheduled? Can I manually go in and remove those?

I've tried going to the Incident Management / Scheduled Downtime link and the host(s) show up there. I can delete the hosts from there, but a few minutes later, they automagically reappear.

[abrist]

Well, if the downtime was created as "recurring", it will reappear in the standard downtime lists. You will need to remove the recurring downtime from: home --> incident management --> recurring downtime.

[highness]

Well, if the downtime was created as "recurring", it will reappear in the standard downtime lists. You will need to remove the recurring downtime from: home --> incident management --> recurring downtime.

The recurring hosts there (under home --> incident management --> recurring downtime --> services are correct. Where the issue is, is when I got to home --> incident management --> Scheduled Downtime there are a TON of hosts listed here. THESE are the ones I for some reason can't remove...

[abrist]

No hosts in the recurring downtime interface?
Lets check the recurring config:

Code: Select all

cat /usr/local/nagios/etc/recurringdowntime.cfg

[highness]

No hosts in the recurring downtime interface?
Lets check the recurring config:

Code: Select all

cat /usr/local/nagios/etc/recurringdowntime.cfg

There are a ton of hosts in that file (and many of offending members are in that file). Can I remove the

define schedule {
sid 1d4e7bff1aba8e14716d41fe4bc7023a
user franma
comment Scheduled down from 18:00pm to 08:00am
time 18:00:00
duration 840
days_of_week
days_of_month
schedule_type service
service_description CPU Usage
host_name wakkawakkawakka.ourdomain.com
}

section for each server I want out of there? If so, do I need to restart nagios?