False positive detection with a second Nagios

Support forum for Nagios Core, Nagios Plugins, NCPA, NRPE, NSCA, NDOUtils and more. Engage with the community of users including those using the open source solutions.
Locked
meliezer
Posts: 8
Joined: Thu Aug 20, 2015 7:28 am

False positive detection with a second Nagios

Post by meliezer »

Hello,
I would like to avoid false positive logs. I'm open to alternative suggestions, but I wonder if my plan is feasible:
The event handler reads the JSON reply for a query for the same monitored service from a second Nagios, right before arriving to the max_check_attempts.
If the second Nagios says the service is OK, it sends an external command to Nagios for temporarily disabling alert sending. Then it alerts the admin, etc.
Once the local Nagios thinks the service is OK, an external command re-enables the email notifications.
In theory, it can be done. However, the local Nagios would still produce wrong availabiliy reports, since the logs will state that the state is critical.

Can an event handler tell Nagios that a service is OK, so no wrong logs will be written?
Otherwise, a manual or script intervention is required for "correcting" the logs.
Another problem is that in the above design the email notification is disabled for all the services, not only the problematic service.
I could permanently disable Nagios email notifications, and let the event handler send messages reading the Nagios config files, but I prefer a simple solution which can be quickly developed.

Any thoughts, please?

Best regards,
Menashè
tmcdonald
Posts: 9117
Joined: Mon Sep 23, 2013 8:40 am

Re: False positive detection with a second Nagios

Post by tmcdonald »

Please do not open multiple threads. You have the same problem described here: https://support.nagios.com/forum/viewto ... 279#149381

I will be closing this thread and we can continue in the original.
Former Nagios employee
Locked