Nagios XI isn't sending alerts corretly

[paulol]

Sometimes Nagios XI doesn't send notification. It was to send 8 alerts in last 24 hours, but nagios only send 4 alerts.

[dwhitfield]

Can you PM me your Profile? You can download it by going to Admin > System Config > System Profile and click the Download Profile button towards the top. If for whatever reason you *cannot* download the profile, please put the output of Show Profile in the thread (that will at least get us some info).

Also, any additional mail logs if you use a non-standard setup would be useful. Thanks!

After you PM the profile, please update this thread. Updating this thread is the only way for it to show back up on our dashboard.

UPDATE: Profile received and shared with techs.

[paulol]

The file is attached.

[dwhitfield]

Your notification_timeout is pretty low at 30, although we have conflicting documentation about that. our configmain.html and our objectdefinitions.html suggest different things. It's at least worth a shot.

Assuming that doesn't do it...

Can you post the output of tail -100 /usr/local/nagios/var/nagios.log? That should be in the profile, but tail: cannot open `/usr/local/nagios/var/nagios.log\r' for reading: No such file or directory. I checked your nagios.cfg and log_file=/usr/local/nagios/var/nagios.log, so I'm a bit lost on that.

I see you have some contacts set up for notify-*-by-email so, could you post the output of tail -100 /var/log/maillog.

Please also send any additional logs you think would be useful. Either PM or scrub as necessary.

[paulol]

Nagios.log attached

[paulol]

maillog attached

[paulol]

I have some contacts set up notify-*-by-email by default, but i think they are not enable to send notification.

[dwhitfield]

Can you generate a notification that will fail and then run tail -f /usr/local/nagiosxi/var/eventman.log?

Also, if you've got anything in /usr/local/nagiosxi/tmp/phpmailer.log can you post it?

Lastly, I mentioned notification_timeout as a possible source of the issue. Did you increase that?

I meant to ask this before, but it seems I left it off: are you still seeing this issue and is it still just with that single host status check? (and now I guess I am re-asking this with the timeout now increased)

[paulol]

I already know whats happened. The host become Hard before service and Suppressed the notification.


2016-12-13 16:13:25 MPLS_BSA_VIVO CRITICAL HARD 1 of 1 CRITICAL: Fora do ar. /
2016-12-13 16:13:09 MPLS_BSA_VIVO DOWN HARD 3 of 3 CRITICAL - 10.101.61.129: rta nan, lost 100%
2016-12-13 16:12:49 MPLS_BSA_VIVO DOWN SOFT 2 of 3 CRITICAL - 10.101.61.129: rta nan, lost 100%
2016-12-13 16:12:12 MPLS_BSA_VIVO DOWN SOFT 1 of 3 CRITICAL - 10.101.61.129: rta nan, lost 100%

[dwhitfield]

And you received all of the host notifications properly? If so, are we ready to lock this up?