Grabbing events from one NagiosXI server to another

[gsl_ops_practice]

Hello,

We are looking at centralizing events in one location. We have a NagiosXI server in the central location and a few others ones scattered in remote sites. Is it possible to use outbound connections only from the central server, to connect to remote NagiosXI servers and grab all their events and display centrally?

The central server has SNMP Sender enabled, and we are looking to pipe all events, central and remote, from the central server over SNMP to another tool.

Please advise if something like this is doable.

Thanks,
Alex

[rkennedy]

Yes, you can do this using SNMP. Take a look at this article for how to send the traps in XI - https://assets.nagios.com/downloads/nag ... ios_XI.pdf - from there you just need to receive the information and parse it.

The other option, is using Nagios Fusion to sit in front of all your Nagios machines. It polls on an interval to provide a centralized view of what's going on. https://www.nagios.com/products/nagios-fusion/

[gsl_ops_practice]

Hello,

My issue is that I am not able to send traffic directly from the remote sites to the central site. I am, however, able to establish connections from the central site to the remote ones. I am not sure SNMP will work in this case. Can you please clarify?

Thank you,
Alex

[dwhitfield]

Yes SNMP will work. What you won't be able to do is use SNMP traps: https://assets.nagios.com/downloads/nag ... ios_XI.pdf

Do you need help setting up SNMP or was that enough clarification?

[gsl_ops_practice]

I'm not sure this is actually clear, let me make a simple diagram:

Allowed network traffic:
Central NagiosXI --> Remote NagiosXI

Blocked network graffic:
Central NagiosXI <-- Remote NagiosXI

Only traffic that is initiated from the Central location can reach the remote sites, but I am looking for a way to grab events from the remote sites and have them show up in the central NagiosXI. SNMP will not work in this case. Once the events are on the Central NagiosXI, it can then send SNMP to another tool as required.

Is there any other mechanism that I can use?

[rkennedy]

That's tricky - since communication is blocked incoming. Is the Central machine able to initiate a persistent connection to the Remote site, so that the remote site can then send data through the socket?

In that case, you'd probably want to leverage a tunnel of some sort.

[gsl_ops_practice]

Thank you, we will look at a tunnel. Please consider this request resolved.