NLS and XI

[blariv]

hi,

i'm trying to figure out how generate an alert from log server w/ the actual message, not just the count of warning or critical events. I see that it is available sending it through nagios reactor then to nagiosxi but unsure how to set that piece up. Is there any information on how to build the workflow for this?

thanks,

brian

[jolson]

What message are you looking for exactly? Currently the only messages that are sent are the 'entries found' messages - the most full messages that are capable are sent from NLS directly via email.

A changeable mail template is definitely on the roadmap - but it's certainly a few releases out at least.

One thing I want to mention is the XI Wizard called 'Nagios Log Server' - which allows very simple setup of monitoring your queries. I'd recommend giving that a shot if you have not already!

[blariv]

I have not added that wizard yet, but I will now.

however I see that if you send from nls to reactor then you get more information. I only see that when I select the alert method as reactor chain.


Alerts will automatically send these context variables:
count - The total # of events
status - The status (ok, warning, critical)
output - The output from the alert
lastrun - The timestamp of the last run

[jolson]

I am currently doing some testing regarding those macros - I will get back to you soon. I am currently under the impression that the 'output' is already included in the alert emails generated by NLS, but I would love to be proven wrong here. I will report back soon with my results.

[jolson]

NLS reported the following variables to reactor:

Code: Select all

count:
    10
status:
    critical
output:
    CRITICAL: 10 matching entries found |logs=10;1;1
lastrun:
    1431021353
__reactor__:
remote_addr: x.x.x.x

file.png

Unfortunately this is not likely the information you're looking for.

[blariv]

no its ok, i can wait till there is more documentation on the subject. thanks

[jolson]

No problem - if you're using XI, I definitely recommend the monitoring wizard for Nagios Log Server, as I've found it to be rock solid. Is there anything else I can help you with here?

[blariv]

nope, i'm all set. appreciate the help