Service Alerts

[aosetek]

So I've been configuring our new Nagios XI over the past week or so and I'm starting to test the alerts.

I chose a desktop PC to monitor and test for now using WMI to monitor services of my choice.

First issue:

If i view the machine being monitored I can see everything is green across the board, cpu usage, mem usage, and print spooler which is the one windows service i chose at random to monitor. Problem is i can go into that machine, stop print spooler and nagios does not flag that as an issue, I can see that it is stopped via the "Status Information" column but it does not come up as a problem, just remains green as if nothing happened. On the other hand i do get the service alert once the entire system is down (see second issue). We have lots of servers entered in our old Nagios 2.0 (still currently in service) with services such as this being monitored and I will know instantly if one stops. I would like to create the same scenario here.

Second Issue:

When i receive my alert emails about this host being up or down the alert message comes through correctly.

With Service related alerts I get this:

----------------------------------------------------------------------

***** Nagios Monitor XI Alert *****

Notification Type: PROBLEM

Service: $
Host: HostName
Address: IP Address
State: $

Date/Time: Thu Aug 11 15:06:04 EDT 2011

Additional Info:

$

-----------------------------------------------------------------------------------------------

I have no idea what these dollar signs are, but they should be something along the lines of "print spooler" being that is the only name I've given this service via CCM




I would like to have Nagios XI up and running soon, please help.

Your assistance is much appreciated.

[lmiltchev]

On the first issue...
You are absolutely right about the print spooler. Even if the service is stopped, Nagios XI would show "OK" (green) status and would display a message:
"OK - Found 1 Services(s), 0 OK and 1 with problems. 'Print Spooler' (Spooler) is Stopped."
This is a problem with the wmi plugin's logic and I would suggest contacting the plugin's developer for more information.
If I am not mistaken, you should contact:
Matthew Jurgens
e-mail: [email protected]

On the second issue we need a little bit more info. Can you post your notification command and the notification message you are getting?

[aosetek]

On the first issue...
You are absolutely right about the print spooler. Even if the service is stopped, Nagios XI would show "OK" (green) status and would display a message:
"OK - Found 1 Services(s), 0 OK and 1 with problems. 'Print Spooler' (Spooler) is Stopped."
This is a problem with the wmi plugin's logic and I would suggest contacting the plugin's developer for more information.
If I am not mistaken, you should contact:
Matthew Jurgens
e-mail: [email protected]

On the second issue we need a little bit more info. Can you post your notification command and the notification message you are getting?

Not sure what you mean by "Notification Command" but I posted the actual notification I am receiving via email in my first post. I am including my check / alert settings for the service in this post. Please review

[lmiltchev]

OK, in the Core Config Manager, go to "Contacts", select the contact that you would like to send notifications to, click on the "Modify" action button and see what is currently selected as your "Host command" and your "Service command". They should be: "xi_host_notification_handler" and "xi_service_notification_handler".

Also, go to Configure->My Account Settings->Notification Messages, copy the text under "Email Notifications" (Host/Service Alert Subject/Message) and post it, so we can take a look at it.

[aosetek]

Subject:

%type% Service Alert - %hostalias%/%service% is %servicestate%


Message:

***** Nagios XI Alert *****

Notification Type: %type%

Service: %service%
Host: %hostalias%
Address: %hostaddress%
State: %servicestate%
Info:
%serviceoutput%
Date/Time: %datetime%

Nagios URL: %xiserverurl%

[mguthrie]

Can you send us a screenshot of the Admin->Manage Email Settings page?

Then can you also post your notification command for this service (it should be "xi_service_notification_handler"). Go to the Core Config Manager->Commands, and select the "Modify" icon. It should look like the following, note the quotes on the service description and the service output:

Code: Select all

/usr/bin/php /usr/local/nagiosxi/scripts/handle_nagioscore_notification.php --notification-type=service --contact="$CONTACTNAME$" --contactemail="$CONTACTEMAIL$" --type=$NOTIFICATIONTYPE$ --escalated="$NOTIFICATIONISESCALATED$" --author="$NOTIFICATIONAUTHOR$" --comments="$NOTIFICATIONCOMMENT$" --host="$HOSTNAME$" --hostaddress="$HOSTADDRESS$" --hostalias="$HOSTALIAS$" --hostdisplayname="$HOSTDISPLAYNAME$" --service="$SERVICEDESC$" --hoststate=$HOSTSTATE$ --hoststateid=$HOSTSTATEID$ --servicestate=$SERVICESTATE$ --servicestateid=$SERVICESTATEID$ --lastservicestate=$LASTSERVICESTATE$ --lastservicestateid=$LASTSERVICESTATEID$ --servicestatetype=$SERVICESTATETYPE$ --currentattempt=$SERVICEATTEMPT$ --maxattempts=$MAXSERVICEATTEMPTS$ --serviceeventid=$SERVICEEVENTID$ --serviceproblemid=$SERVICEPROBLEMID$ --serviceoutput="$SERVICEOUTPUT$" --longserviceoutput="$LONGSERVICEOUTPUT$" --datetime="$LONGDATETIME$"