Some Dashboards disappeared?

[GhostRider2110]

Had some dashboards a co-worker had created and was using daily. They were working yesterday. Now they are gone? They don't show up logged in as that user nor as nagiosadmin. Very strange. Only work that had been going on, I had created and been working on a new dashboard. Most of the other dashboards seem to be there, just a handful that this user had created. Only one of the 4 or 5 he had is there.

Not really sure where to look for answers?


Nagios XI - System Info
System:
Nagios XI Version : 5.4.2
iganagios.iga.local 2.6.32-642.11.1.el6.x86_64 x86_64
CentOS release 6.8 (Final)
Gnome is not installed
Apache Information
PHP Version: 5.3.3
Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0
Server Name: iganagios.iga.local
Server Address: 10.100.30.8
Server Port: 80
Date/Time
PHP Timezone: America/New_York
PHP Time: Wed, 01 Mar 2017 10:04:17 -0500
System Time: Wed, 01 Mar 2017 10:04:17 -0500
Nagios XI Data
License ends in: QRQSQP

nagios (pid 97138) is running...
NPCD running (pid 1944).
ndo2db (pid 101416) is running...
CPU Load 15: 1.97
Total Hosts: 239
Total Services: 5259
Function 'get_base_uri' returns: http://iganagios.iga.local/nagiosxi/
Function 'get_base_url' returns: http://iganagios.iga.local/nagiosxi/
Function 'get_backend_url(internal_call=false)' returns: http://iganagios.iga.local/nagiosxi/inc ... rofile.php
Function 'get_backend_url(internal_call=true)' returns: https://localhost/nagiosxi/backend/
Ping Test localhost
Running:

/bin/ping -c 3 localhost 2>&1

PING localhost (127.0.0.1) 56(84) bytes of data.
64 bytes from localhost (127.0.0.1): icmp_seq=1 ttl=64 time=0.030 ms
64 bytes from localhost (127.0.0.1): icmp_seq=2 ttl=64 time=0.064 ms
64 bytes from localhost (127.0.0.1): icmp_seq=3 ttl=64 time=0.039 ms

--- localhost ping statistics ---
3 packets transmitted, 3 received, 0% packet loss, time 2000ms
rtt min/avg/max/mdev = 0.030/0.044/0.064/0.015 ms
Test wget To localhost
WGET From URL: https://localhost/nagiosxi/includes/components/ccm/
Running:

/usr/bin/wget https://localhost/nagiosxi/includes/components/ccm/

--2017-03-01 10:04:19-- https://localhost/nagiosxi/includes/components/ccm/
Resolving localhost... ::1, 127.0.0.1
Connecting to localhost|::1|:443... connected.
ERROR: cannot verify localhost's certificate, issued by "/C=US/O=DigiCert Inc/CN=DigiCert SHA2 Secure Server CA":
unable to get issuer certificate
ERROR: no certificate subject alternative name matches
requested host name "localhost".
To connect to localhost insecurely, use '--no-check-certificate'.
Network Settings

1: lo: mtu 65536 qdisc noqueue state UNKNOWN

link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00

inet 127.0.0.1/8 scope host lo

inet6 ::1/128 scope host

valid_lft forever preferred_lft forever

2: eth1: mtu 1500 qdisc mq state UP qlen 1000

link/ether 00:50:56:a3:36:cd brd ff:ff:ff:ff:ff:ff

inet 172.26.20.5/22 brd 172.26.23.255 scope global eth1

inet6 fe80::250:56ff:fea3:36cd/64 scope link

valid_lft forever preferred_lft forever

3: eth0: mtu 1500 qdisc pfifo_fast state UP qlen 1000

link/ether 00:50:56:a3:63:66 brd ff:ff:ff:ff:ff:ff

inet 10.100.30.8/24 brd 10.100.30.255 scope global eth0

inet6 fe80::250:56ff:fea3:6366/64 scope link

valid_lft forever preferred_lft forever


10.100.30.0/24 dev eth0 proto kernel scope link src 10.100.30.8

10.26.20.0/24 via 172.26.20.1 dev eth1

172.26.20.0/22 dev eth1 proto kernel scope link src 172.26.20.5

169.254.0.0/16 dev eth1 scope link metric 1002

169.254.0.0/16 dev eth0 scope link metric 1003

default via 10.100.30.1 dev eth0

[dwhitfield]

Code: Select all

echo "desc xi_usermeta;" | mysql -uroot -pnagiosxi nagiosxi
echo "select * from xi_usermeta where keyname like '%dash%';" | mysql -uroot -pnagiosxi nagiosxi > /tmp/dash_output.txt

Can you post the output of the two commands above. The output of the second will be a file, so if you could attach that, that would be great.

Also, was this a fresh install or an upgrade?

[GhostRider2110]

This has been an upgrade for many version. Started as the VM image.

Those are not working. That DB is not in mysql, but in postgres.

[mcapra]

For postgres using default credentials:

Code: Select all

psql -U nagiosxi -c "SELECT * FROM xi_usermeta WHERE keyname LIKE '%dash%'" > /tmp/dash_output.txt
psql -U nagiosxi -c "\d xi_usermeta;"

[GhostRider2110]

For postgres using default credentials:

Code: Select all

psql -U nagiosxi -c "SELECT * FROM xi_usermeta WHERE keyname LIKE '%dash%'" > /tmp/dash_output.txt
psql -U nagiosxi -c "\d xi_usermeta;"

Code: Select all

[root@iganagios ~]# psql -U nagiosxi -c "\d xi_usermeta;"
                                        Table "public.xi_usermeta"
   Column    |          Type          |                             Modifiers                             
-------------+------------------------+-------------------------------------------------------------------
 usermeta_id | integer                | not null default nextval('xi_usermeta_usermeta_id_seq'::regclass)
 user_id     | integer                | not null
 keyname     | character varying(255) | not null
 keyvalue    | text                   | 
 autoload    | smallint               | default (0)::smallint
Indexes:
    "xi_usermeta_pkey" PRIMARY KEY, btree (usermeta_id)
    "xi_usermeta_user_id_key" UNIQUE, btree (user_id, keyname)
    "xi_usermeta_autoload_idx" btree (autoload)

[mcapra]

Hmm, all of the dashboards appear to deserialize just fine. Can you share the output of:

Code: Select all

psql -U nagiosxi -c "SELECT user_id,username FROM xi_users WHERE username='your_username';"

Replacing your_username with the username of this user (or users) encountering the issues?

[GhostRider2110]

Hmm, all of the dashboards appear to deserialize just fine. Can you share the output of:

Code: Select all

psql -U nagiosxi -c "SELECT user_id,username FROM xi_users WHERE username='your_username';"

Replacing your_username with the username of this user (or users) encountering the issues?

[root@iganagios ~]# psql -U nagiosxi -c "SELECT user_id,username FROM xi_users WHERE username='eric.reid';"
user_id | username
---------+-----------
53 | eric.reid
(1 row)

All of the dashboards that went missing started with ER- Only one remained showing and that is ER-Internet.

[GhostRider2110]

He has since rebuilt several,

ER-Email
ER-IGA-Internet
ER-Network
ER-Public-Wifi

But he is pretty sure that the new ones were named differently from the ones that no longer show up.

[mcapra]

Was a backup restored at any point? That's about the only situation I can imagine causing this data loss other than some really really specific disk activity.

[GhostRider2110]

A restore would have to have been very old to remove those dashboards. They had been in place for more than a year. Other things that are in place now would have been missing.. Really strange. Like I said, he has them rebuilt, we just wanted to try to figure out why they disappeared.