utilizing ncpa windowscounters and logs

[doneil326]

Do you have any detailed examples on how to use the windowscounters function of the ncpa agent? It appears that it fails to read counters such as \RPC/HTTP Proxy\Number of Failed Back-End Connection Attempts per Second because it can't handle the "/". I have not found a way to escape the character so that it will work. Is this supported?

also, for the logs do you have syntax examples for windows/linux in using this part of the api?

[lmiltchev]

You could try using the "Check-Performance-Counters.ps1" script with NCPA. Download the script from here:

https://github.com/sreinhardt/Nagios_Pe ... e_Counters

Save it in the NCPA plugins directory. Test it from the PS prompt (it works with PS version 3 or higher). Here's the usage:

example01.PNG

From the Nagios XI:

Code: Select all

[root@localhost ~]# /usr/local/nagios/libexec/check_ncpa.py -H x.x.x.x -t mytoken -M agent/plugin/Check-Performance-Counters.ps1 -a '-n "\Processor(_Total)\% Processor Time" -w 80 -c 90'
OK: Counter \Processor(_Total)\% Processor Time returned results 1.96596481211161 | 'Counter 0'=2;;;;

Hope this helps.

[doneil326]

Thanks, do you have any insight to the command usage for the /api/logs format on windows/linux.

[lmiltchev]

Here's what our developers had to say about eventlog monitoring with NCPA:

https://github.com/NagiosEnterprises/ncpa/issues/143

From the command line, you can run:

Code: Select all

/usr/local/nagios/libexec/check_ncpa.py -H x.x.x.x -t mytoken -M logs -q name=System

This is a very simple query. I am not sure what the syntax would be for more complex queries. I will have to discuss this with our developers.

Having said that, I would like to point out that for log monitoring, you will be better off using the Nagios Log Server. It will save you tons of time in the long run.

[doneil326]

thanks for the update. when i try to pass the eventid or time paramaters it seems to fail. can you provide an example with these as well.

[rkennedy]

Can you provide an example of what you're currently trying to run? It may just need some quotations / changes to your current command.

[doneil326]

/check_ncpa.py -H server -t 'pass' -M logs -q name=System&event_id=1008&time_generated=5m

[lmiltchev]

It seems like there is a bug with passing multiple arguments.

The issue is described here:

https://github.com/NagiosEnterprises/ncpa/issues/47

I expect this to be fixed in NCPA 1.9.0. Thank you!

[doneil326]

When is the expected release of 1.9.0? This bug is about 18 months old? I am just curious as it doesn't seem like there is active development by nagios on ncpa but it was suggested as a client to be used when we purchased the product, but with no active development we have run across multiple issues that don't seem to be resolved.

[lgroschen]

Hello doneil326,

NCPA is an open source project that Nagios started to try and create an agent that would encompass a larger range of functionality over other agents that are out there. We have gone through a few versions of it and had made some pretty big changes to allow certain things to work after version 1.7.x. There are issues opened in GitHub, similar to the one you are facing now, and they may take some time due to development, testing and the build process. At the moment we are not able to devote developer time to this project until more work is done in getting to the bottom of the Issues that exist. To be very clear, we are developing and working on NCPA, but putting out a release that works on all platforms is one of the major time sinks.

The issue in question that breaks the querying of multiple arguments in the API is one of 3 larger bugs that have to do with the the framework. Fixing this will require a large amount of testing- especially since there is a lot of potential for breaking existing parts such as name collision, etc.

Another developer and I are currently working on a 1.8.2 release of NCPA that will address breaking issues such as the API, Passive Checks and other things. We do not have a time frame for when this will be finished- and we don't want to set a day- until we know exactly how to move forward on these bugs. I know this is probably not the answer you were hoping for and I apologize for not being able to deliver a solution at this time, but with multiple products being maintained it is proving challenging to keep up with the demand that NCPA has generated.

With all the above being said, I am confident that NCPA will be getting more attention in the next 2-3 months. Until some of these bugs are resolved the best solution I can offer is for you to utilize another agent such as NSClient++ to handle performance counters: http://docs.nsclient.org/0.4.4/howto/counters.html