Networking for VMHost;CRITICAL;SOFT;1;ESX3 CRITICAL

[mariusdi]

Hi,

Our NagiosXI server constantly get in the /var/log/messages file messages like the following:

Feb 17 11:13:00 localhost nagios: SERVICE ALERT: esxi01.test.local;Networking for VMHost;CRITICAL;SOFT;1;ESX3 CRITICAL - all 4 NICs are connected
Feb 17 11:13:59 localhost nagios: SERVICE ALERT: esxi01.test.local;Networking for VMHost;CRITICAL;SOFT;2;ESX3 CRITICAL - all 4 NICs are connected
Feb 17 11:14:58 localhost nagios: SERVICE ALERT: esxi01.test.local;Networking for VMHost;CRITICAL;SOFT;3;ESX3 CRITICAL - all 4 NICs are connected
Feb 17 11:15:58 localhost nagios: SERVICE ALERT: esxi01.test.local;Networking for VMHost;OK;SOFT;4;ESX3 OK - net receive=1982.00 KB/s, send=27888.00 KB/s, all 4 NICs are connected

The messages are only for esxi01.test.local host out of many esxi hosts we have.

We checked the VMware infrastructure and did not find any issues with the networking components.

We use:
vSphere SDK for Perl version: 5.1.0
Script 'check_vmware.pl' version: 1.0
Nagios XI 2014R1.0

Why we get the above messages if we have no issues in the vSphere infrastructure?

Best regards,
Marius

[mariusdi]

Hi,

We use:
# perl check_esx3.pl --version
check_esx3.pl 0.2.0

Regards,
Marius

[mariusdi]

Hi,

Seartching through past /var/log/messages-* files we also found the above messages for other esxi hosts.

Please help.

Best regards,
Marius

[rkennedy]

Can you navigate to the core config manager -> Click '### Services' -> Find the service related to esxi01.test.local - Networking for VMHost.

Do you have a warning / critical value set for this check?

[mariusdi]

Hi,

I do not have any warning or critical value set. See below

XI_core_config.png

Best regards,
Marius

[rkennedy]

Can you also paste the full $ARG1$ value (since it's getting cut off)?

[mariusdi]

Hi,

$ARG1$ value is /usr/local/nagiosxi/etc/components/vmware/esxi01_test_local_auth.txt

Regards,
Marius

[mariusdi]

Hi,

In the picture below you can see the notifications we received today, although the host didn't have any network issue.

notifications.png

Best regards,
Marius

[lmiltchev]

What happens if you set up warning and critical thresholds? Does the check work as intended then? When you pass "-l NET", you get all of the values below (usage, receive, and send):

* net - shows net info
+ usage - overall network usage in KB/s
+ receive - receive in KB/s
+ send - send in KB/s
^ all net info

You could set up a more "granular" checks by running a sub-command, for example:

Code: Select all

[root@localhost ~]# /usr/local/nagios/libexec/check_esx3.pl -H "x.x.x.x" -f "/usr/local/nagiosxi/etc/components/vmware/VMwareHost_auth.txt" -l "NET" -s send -w 500 -c 1000
ESX3 OK - net send=96.00 KB/s | net_send=96.00KB;500;1000

[root@localhost ~]# /usr/local/nagios/libexec/check_esx3.pl -H "x.x.x.x" -f "/usr/local/nagiosxi/etc/components/vmware/VMwareHost_auth.txt" -l "NET" -s send -w 50 -c 100
ESX3 WARNING - net send=96.00 KB/s | net_send=96.00KB;50;100

[root@localhost ~]# /usr/local/nagios/libexec/check_esx3.pl -H "x.x.x.x" -f "/usr/local/nagiosxi/etc/components/vmware/VMwareHost_auth.txt" -l "NET" -s send -w 5 -c 10
ESX3 CRITICAL - net send=160.00 KB/s | net_send=160.00KB;5;10

[mariusdi]

Hi,

Sorry for the late replay.

I have run the commands
# /usr/local/nagios/libexec/check_esx3.pl -H "x.x.x.x" -f "/usr/local/nagiosxi/etc/components/vmware/VMwareHost_auth.txt" -l "NET" -s send -w 500 -c 1000
# /usr/local/nagios/libexec/check_esx3.pl -H "x.x.x.x" -f "/usr/local/nagiosxi/etc/components/vmware/VMwareHost_auth.txt" -l "NET" -s receive -w 500 -c 1000
with various values for -w and -c and the commands return OK, WARNING or CRITICAL as expected.

Best regards,
Marius