3 dots in nagios log are transform in date inside event

Support forum for Nagios Core, Nagios Plugins, NCPA, NRPE, NSCA, NDOUtils and more. Engage with the community of users including those using the open source solutions.
Locked
emi65
Posts: 119
Joined: Fri Aug 17, 2012 3:41 am

3 dots in nagios log are transform in date inside event

Post by emi65 »

Hi expert
I'm using Nagios 4.2.1

When I look the event log by web user interface some time I see these messages:
gennaio 01, 1970 01:00
Informational Message[01-01-1970 01:00:00]

I attach also an image

If I check directly in the nagios.log file I find
...

I suppose that this 3 dots are converted in the date gennaio 01, 1970 01:00

I find these 3 dots using this command
grep -i "^\.\.\." nagios.log

Does it a potential problem ?
Why happens this ?

Regards
Emilio
Attachments
NagiosEventLog.jpg
rkennedy
Posts: 6579
Joined: Mon Oct 05, 2015 11:45 am

Re: 3 dots in nagios log are transform in date inside event

Post by rkennedy »

Are all of your times lining up on your system? What is the output from these commands?

Code: Select all

grep "date.timezone" /etc/php.ini
ls -l /etc/localtime
php -r 'echo date("D M j G:i:s T Y")."\n";'
date
mysql -unagiosxi -pn@gweb -e "SELECT NOW();"
Additionally, how are you managing time?
Former Nagios Employee
emi65
Posts: 119
Joined: Fri Aug 17, 2012 3:41 am

Re: 3 dots in nagios log are transform in date inside event

Post by emi65 »

here the answer

Code: Select all

grep "date.timezone" /etc/php.ini
; http://www.php.net/manual/en/datetime.configuration.php#ini.date.timezone
;date.timezone =
date.timezone = 'Europe/Rome'

Code: Select all

[root@sgsvrasnag006lx:~]# ls -l /etc/localtime
-rw-r--r--. 1 root root 2652  2 mag  2011 /etc/localtime

Code: Select all

[root@sgsvrasnag006lx:~]# php -r 'echo date("D M j G:i:s T Y")."\n";'
Fri Dec 23 8:59:43 CET 2016

Code: Select all

[root@sgsvrasnag006lx:~]# date
ven 23 dic 2016, 08.59.43, CET

Code: Select all

+---------------------+
| NOW()               |
+---------------------+
| 2016-12-23 09:02:09 |
+---------------------+
Last edited by dwhitfield on Tue Dec 27, 2016 1:38 pm, edited 2 times in total.
Reason: code blocks FTW
dwhitfield
Former Nagios Staff
Posts: 4583
Joined: Wed Sep 21, 2016 10:29 am
Location: NoLo, Minneapolis, MN
Contact:

Re: 3 dots in nagios log are transform in date inside event

Post by dwhitfield »

Is this system running in a VM (specifically VMWare)? ntpd and the VM may be arguing about the time.

Also, can you post the output of tail -1000 /usr/local/nagios/var/nagios.log. We want a couple of days. If the -1000 is way too much or way too little, adjust accordingly.

Also, do you have auditd installed by chance? It would be nice to know if anything/anybody is modifying that log other than nagios.

Based on the output of /etc/localtime it looks like you are running some sort of Debian release. Could you post the output of cat /etc/*lease? Thanks!
emi65
Posts: 119
Joined: Fri Aug 17, 2012 3:41 am

Re: 3 dots in nagios log are transform in date inside event

Post by emi65 »

Hi

sorry for my later answer
cat /etc/*lease
LSB_VERSION=base-4.0-amd64:base-4.0-noarch:core-4.0-amd64:core-4.0-noarch:graphics-4.0-amd64:graphics-4.0-noarch:printing-4.0-amd64:printing-4.0-noarch
Red Hat Enterprise Linux Server release 6.7 (Santiago)
Red Hat Enterprise Linux Server release 6.7 (Santiago)

I was in holiday and just today I checkd the presence of "..." in nagios.log file and I dind't find nothing .

I got it (...) in archives nagio log files

thanks
Emilio
dwhitfield
Former Nagios Staff
Posts: 4583
Joined: Wed Sep 21, 2016 10:29 am
Location: NoLo, Minneapolis, MN
Contact:

Re: 3 dots in nagios log are transform in date inside event

Post by dwhitfield »

If you don't feel comfortable post tail -1000 /usr/local/nagios/var/nagios.log you can PM it to me. If you choose to PM, just make sure you update this thread after you PM. I know the dots aren't there, but there might be something strange that we pick up on. If you are going to PM, you might as well go ahead and send your objects.cache. It's probably overkill, but it'll help us start connecting dots.

NagiosQL hasn't been updated since 2013-04-25, and they don't claim to support Nagios 4.x. You might want to look at other options. As time moves on, we are likely to become less and less compatible with NagiosQL.

Nagios 4.2.4 has a number of important security improvements since 4.2.1. I would strongly suggest upgrading.
Locked