Network Analyzer VM failed to integrate with XI

[monit_burb]

Hi,

I have been testing the Network analyzer using the .ova in vmware and so far so god but when I try to integrate it with NagiosXI I get a Failed connect to API. I added the NNA IP and the nagiosadmin user API key on the NagiosXI integration component and I did not configure SSL on the NNA as it's 100% out of the box. My NagiosXI does not any firewall installed but it does use HTTPS.

Is there any log I can check about this?

[npolovenko]

Hello, @monit_burb. Please go to the NNA web interface and click on the username in the top right corner. In that menu underneath the API Access Key click on "generate a new key". Next, please go to the XI web interface, click on the Admin menu, then Manage Config Wizards(in the left column). Click on "check for updates", and then "install updates".
When done please update the API key and try to run the wizard one more time. Did that fix the issue?

[monit_burb]

Hello, @monit_burb. Please go to the NNA web interface and click on the username in the top right corner. In that menu underneath the API Access Key click on "generate a new key". Next, please go to the XI web interface, click on the Admin menu, then Manage Config Wizards(in the left column). Click on "check for updates", and then "install updates".
When done please update the API key and try to run the wizard one more time. Did that fix the issue?

Hi, I had already tried to generate a new key on the NNA and update the components but it didn't work. I tried again generating new keys and updating the Config Wizards but still the same results. My NagiosXI version is 5.4.10 and the NNA is 2.3.1

[npolovenko]

@monit_burb, Please run the following command from the Network Analyzer server:

Code: Select all

nmap <nagios_xi_ip>

Also, please run the wizard one more time till you get an API error, and then run this command:

Code: Select all

tail -f /var/log/httpd/*_log

And show us the output.
Thanks.

[monit_burb]

Here are the commands.

I'm using my NagiosXI test environment but just to be double sure, I also tried to add the Network analyzer to my productive NagiosXI and got the same result. My test environment is a clone of the production one with some changes like no HTTPS but I'm starting to think that the NNA is to blame.

Code: Select all

[root@localhost ~]# nmap 10.30.108.19

Starting Nmap 5.51 ( http://nmap.org ) at 2018-01-19 07:42 GMT
Nmap scan report for esbarlmonapp05.burberry.corp (10.30.108.19)
Host is up (0.00045s latency).
Not shown: 995 closed ports
PORT     STATE SERVICE
22/tcp   open  ssh
80/tcp   open  http
443/tcp  open  https
3306/tcp open  mysql
5666/tcp open  nrpe

Nmap done: 1 IP address (1 host up) scanned in 11.20 seconds

This is the output I get once I press the wizard of Network Analyzer

Code: Select all

==> /var/log/httpd/access_log <==
::1 - - [19/Jan/2018:07:41:18 +0000] "OPTIONS * HTTP/1.0" 200 - "-" "Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/5.4.16 (internal dummy connection)"

==> /var/log/httpd/ssl_error_log <==
[Fri Jan 19 07:41:18.747012 2018] [:error] [pid 4521] [client 10.130.173.191:9214] PHP Warning:  explode() expects parameter 2 to be string, array given in /usr/local/nagiosxi/html/includes/utils-macros.inc.php on line 0, referer: https://10.30.108.19/nagiosxi/config/monitoringwizard.php?&=
[Fri Jan 19 07:41:18.747074 2018] [:error] [pid 4521] [client 10.130.173.191:9214] PHP Warning:  Invalid argument supplied for foreach() in /usr/local/nagiosxi/html/includes/utils-macros.inc.php on line 0, referer: https://10.30.108.19/nagiosxi/config/monitoringwizard.php?&=

==> /var/log/httpd/ssl_access_log <==
10.130.173.191 - - [19/Jan/2018:07:41:18 +0000] "GET /nagiosxi/config/monitoringwizard.php?update=1&nextstep=2&nsp=aefd63e90457fa2c548be69f1328610d4267c60f0162e3e32abea297f38e542f&wizard=nna HTTP/1.1" 200 50476

==> /var/log/httpd/ssl_request_log <==
[19/Jan/2018:07:41:18 +0000] 10.130.173.191 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nagiosxi/config/monitoringwizard.php?update=1&nextstep=2&nsp=aefd63e90457fa2c548be69f1328610d4267c60f0162e3e32abea297f38e542f&wizard=nna HTTP/1.1" 50476

==> /var/log/httpd/ssl_access_log <==
10.130.173.191 - - [19/Jan/2018:07:41:18 +0000] "GET /nagiosxi/includes/css/bootstrap.3.min.css?1505764847 HTTP/1.1" 200 120968

==> /var/log/httpd/ssl_request_log <==
[19/Jan/2018:07:41:18 +0000] 10.130.173.191 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nagiosxi/includes/css/bootstrap.3.min.css?1505764847 HTTP/1.1" 120968

==> /var/log/httpd/ssl_access_log <==
10.130.173.191 - - [19/Jan/2018:07:41:18 +0000] "GET /nagiosxi/includes/css/themes/modern.css?1505764847 HTTP/1.1" 200 12916

==> /var/log/httpd/ssl_request_log <==
[19/Jan/2018:07:41:18 +0000] 10.130.173.191 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nagiosxi/includes/css/themes/modern.css?1505764847 HTTP/1.1" 12916

==> /var/log/httpd/ssl_access_log <==
10.130.173.191 - - [19/Jan/2018:07:41:18 +0000] "GET /nagiosxi/includes/css/base.css?1505764847 HTTP/1.1" 200 59502

==> /var/log/httpd/ssl_request_log <==
[19/Jan/2018:07:41:18 +0000] 10.130.173.191 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nagiosxi/includes/css/base.css?1505764847 HTTP/1.1" 59502

==> /var/log/httpd/ssl_access_log <==
10.130.173.191 - - [19/Jan/2018:07:41:19 +0000] "GET /nagiosxi/ajaxhelper.php?cmd=getusermeta&opts=view_rotation_enabled&nsp=aefd63e90457fa2c548be69f1328610d4267c60f0162e3e32abea297f38e542f HTTP/1.1" 200 1

==> /var/log/httpd/ssl_request_log <==
[19/Jan/2018:07:41:19 +0000] 10.130.173.191 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nagiosxi/ajaxhelper.php?cmd=getusermeta&opts=view_rotation_enabled&nsp=aefd63e90457fa2c548be69f1328610d4267c60f0162e3e32abea297f38e542f HTTP/1.1" 1

==> /var/log/httpd/ssl_access_log <==
10.130.173.191 - - [19/Jan/2018:07:41:19 +0000] "GET /nagiosxi/includes/components/usermacros/?mode=query&raw=0 HTTP/1.1" 200 125

==> /var/log/httpd/ssl_request_log <==
[19/Jan/2018:07:41:19 +0000] 10.130.173.191 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nagiosxi/includes/components/usermacros/?mode=query&raw=0 HTTP/1.1" 125

==> /var/log/httpd/ssl_access_log <==
127.0.0.1 - - [19/Jan/2018:07:41:22 +0000] "POST /nagiosxi/backend/ HTTP/1.1" 200 816

==> /var/log/httpd/ssl_request_log <==
[19/Jan/2018:07:41:22 +0000] 127.0.0.1 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /nagiosxi/backend/ HTTP/1.1" 816

This is the nmap from my NagiosXI to the Network Analyzer.

Code: Select all

Starting Nmap 6.47 ( http://nmap.org ) at 2018-01-19 07:49 GMT
Nmap scan report for 10.30.110.17
Host is up (0.0021s latency).
Not shown: 997 filtered ports
PORT    STATE  SERVICE
22/tcp  open   ssh
80/tcp  open   http
443/tcp closed https

[lmiltchev]

The NNA integration with XI won't work if only one of the products is using SSL. If your Nagios XI server is using SSL, you need to configure SSL on the Nagios Network Analyzer server as well.

[monit_burb]

The NNA integration with XI won't work if only one of the products is using SSL. If your Nagios XI server is using SSL, you need to configure SSL on the Nagios Network Analyzer server as well.

Thank you for your help. I will to set up SSL then on the NNA.

[npolovenko]

@monit_burb, Sounds good. Keep us updated on whether this fixed the problem.