Audit Logs

[vmesquita]

Hello!

I have 2 questions regarding Nagios audit logs:
1) What is the max number of minutes that can be used in "Max Logbook Age" option, at performance settings, without causing issues?

2) The Full logs kept on Nagios XI are much less informational than the ones that are bound by the "Max Logbook Age". We would like to keep the more detailed logs for reference. Would there be a way of doing that? Maybe some script?

[bolson]

Hello vmesquita,

I'm not sure I understand your question. Documentation is sparse on this. I wouldn't expect that increasing the max_logbook_age would affect performance much, if at all. Let me know if you have any additional questions.

[dwhitfield]

1. As with many things, it is going to depend on your system. Size would be the largest issue here. I just set mine to 48000 and things didn't explode, but it's just me logging into the CCM. I'm happy to leave it running as long as you'd like to see if I have issues.

2. Those are in the tbl_logbook table of the nagiosql db. You could just select * from tbl_logbook; to get that info and put it wherever you like. It's just 6 columns, but of course the * might not be so great if you have rows and rows and rows.

[vmesquita]

dwhitfield and bolson,

Thanks for your replies. I set the time for 1 week (10080) and it seems to working fine. Using bolson's suggestion, I was able to come out with a command-line to export the logs:

Code: Select all

echo "use nagiosql; select * into outfile '/tmp/audit_log.csv' from tbl_logbook" | mysql -u root -pnagiosxi

[bolson]

May we close this topic?

[vmesquita]

Yes