BPI keeps spinning

[rjmon]

When i tried to view Medium priority tab on BPI, it just spins and all the other tabs seem fine. And this behavior started yesterday. Any help..

[lmiltchev]

What is the version of Nagios XI and Nagios BPI component that you are currently using?

Do you see any errors in the apache error log? Try loading the page (Medium Priority tab), then run the following command, and post the output on the forum, wrapped in code wraps:

Code: Select all

tail -50 /var/log/httpd/error_log

If you are using Nagios XI Enterprise edition, try syncing the hostgroups and servicegroups to see if this is going to solve your issue.

BPI > Hostgroups > Sync Hostgroups
BPI > Servicegroups > Sync Servicegroups

Also, to rule out any permission issues, go to BPI > Edit BPI Settings, select the "Show All Groups To All Users" check-box, and click on "Apply Settings". Try viewing the failing page again.

Note: After you tried loading the page, you can revert to the previous setting.

[rjmon]

Code: Select all

Nagios XI Version : 5.2.8
Red Hat Enterprise Linux Server release 6.9 (Santiago)

Here is the apache logs

Code: Select all

root@nagio01aplpd /]# tail -50 ./usr/local/httpd/logs/error_log
[Sun Apr 15 03:28:05 2018] [notice] Digest: generating secret for digest authentication ...
[Sun Apr 15 03:28:05 2018] [notice] Digest: done
[Sun Apr 15 03:28:06 2018] [notice] Apache/2.2.15 (Unix) DAV/2 PHP/5.3.3 mod_ssl/2.2.15 OpenSSL/1.0.1e-fips configured -- resuming normal operations
[Wed Apr 18 01:10:54 2018] [error] [client 10.12.112.82] client sent HTTP/1.1 request without hostname (see RFC2616 section 14.23): /
[Wed Apr 18 01:11:04 2018] [error] [client 10.12.112.82] Invalid URI in request GET /../../../../../../../../../../../ HTTP/1.1
[Wed Apr 18 01:11:41 2018] [error] [client 10.12.112.82] Invalid URI in request GET mediawiki-1.16.0beta2 HTTP/1.1
[Wed Apr 18 01:11:41 2018] [error] [client 10.12.112.82] Invalid URI in request GET bad397 HTTP/1.1
[Wed Apr 18 01:11:49 2018] [error] [client 10.12.112.82] Invalid URI in request GET CMS/ HTTP/1.1
[Wed Apr 18 01:11:49 2018] [error] [client 10.12.112.82] Invalid URI in request GET bad397/ HTTP/1.1
[Wed Apr 18 01:11:49 2018] [error] [client 10.12.112.82] Invalid URI in request GET cms/ HTTP/1.1
[Wed Apr 18 01:11:51 2018] [error] [client 10.12.112.82] Invalid URI in request GET boards/ HTTP/1.1
[Wed Apr 18 01:11:54 2018] [error] [client 10.12.112.82] Invalid URI in request GET /servlet/com.livesoftware.jrun.plugins.ssi.SSIFilter/../../../../../../../etc/passwd HTTP/1.1
[Wed Apr 18 01:11:56 2018] [error] [client 10.12.112.82] Invalid URI in request GET \\ HTTP/1.1
[Wed Apr 18 01:12:06 2018] [error] [client 10.12.112.82] Invalid URI in request GET /%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/passwd HTTP/1.1
[Wed Apr 18 01:12:50 2018] [error] [client 10.12.112.82] client sent HTTP/1.1 request without hostname (see RFC2616 section 14.23): /RaNdoM_JuNk
[Wed Apr 18 01:12:52 2018] [error] [client 10.12.112.82] Invalid URI in request GET /../"><script>alert(73541);</script> HTTP/1.1
[Wed Apr 18 01:12:58 2018] [error] [client 10.12.112.82] Invalid URI in request GET /../../makebook-2.2/bookfile.html HTTP/1.1
[Wed Apr 18 01:13:00 2018] [error] [client 10.12.112.82] client sent HTTP/1.1 request without hostname (see RFC2616 section 14.23): etc/passwd
[Wed Apr 18 01:13:02 2018] [error] [client 10.12.112.82] Invalid URI in request GET /../../../../../../../ HTTP/1.1
[Wed Apr 18 01:13:05 2018] [error] [client 10.12.112.82] Invalid URI in request GET /../../../../../../../../../ HTTP/1.1
[Wed Apr 18 01:13:06 2018] [error] [client 10.12.112.82] Invalid URI in request GET @www.q5u4a3l2y1s.com HTTP/1.0
[Wed Apr 18 01:13:06 2018] [error] [client 10.12.112.82] Invalid URI in request GET @www.q5u4a3l2y1s.com HTTP/1.0
[Wed Apr 18 01:13:07 2018] [error] [client 10.12.112.82] Invalid URI in request GET qualys:@www.q5u4a3l2y1s.com HTTP/1.0
[Wed Apr 18 01:13:07 2018] [error] [client 10.12.112.82] Invalid URI in request GET qualys:@www.q5u4a3l2y1s.com HTTP/1.0
[Wed Apr 18 01:13:09 2018] [error] [client 10.12.112.82] client sent HTTP/1.1 request without hostname (see RFC2616 section 14.23): /
[Wed Apr 18 01:13:09 2018] [error] [client 10.12.112.82] request failed: error reading the headers
[Wed Apr 18 01:13:14 2018] [error] [client 10.12.112.82] request failed: error reading the headers
[Wed Apr 18 01:13:31 2018] [error] [client 10.12.112.82] client sent HTTP/1.1 request without hostname (see RFC2616 section 14.23): /
[Wed Apr 18 01:13:52 2018] [error] [client 10.12.112.82] request failed: error reading the headers
[Wed Apr 18 01:13:52 2018] [error] [client 10.12.112.82] request failed: error reading the headers
[Wed Apr 18 01:14:21 2018] [error] [client 10.12.112.82] Invalid URI in request GET /%22%3e%3cscript%3ealert(document.domain)%3c/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/passwd HTTP/1.1
[Wed Apr 18 01:14:23 2018] [error] [client 10.12.112.82] Invalid URI in request GET /admin/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/passwd HTTP/1.1
[Wed Apr 18 01:14:25 2018] [error] [client 10.12.112.82] Invalid URI in request GET /install/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/passwd HTTP/1.1
[Wed Apr 18 01:16:48 2018] [error] [client 10.12.112.82] Invalid URI in request GET /%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/passwd HTTP/1.1
[Wed Apr 18 01:29:09 2018] [error] [client 10.12.112.82] client sent HTTP/1.1 request without hostname (see RFC2616 section 14.23): /cgi-bin/cgitest
[Wed Apr 18 01:29:09 2018] [error] [client 10.12.112.82] client sent HTTP/1.1 request without hostname (see RFC2616 section 14.23): /cgi-bin/index.cgi

I ran sync for hostgroups and servicegroups no luck. Show All groups to All users is already set.

[rjmon]

How to check Priority config?

[lmiltchev]

Can you PM me (or anyone else on the Nagios Support team) your BPI config? We will need to review it, and try recreating the issue in house. Thank you!

[rjmon]

just PM the bpi.conf file

[lmiltchev]

I sent you a PM.

[rjmon]

I see in my outbox to your PM. With the attached file. Before this i accidently sent it to myself.

[lmiltchev]

Can you also PM me the "/usr/local/nagiosxi/var/components/bpi.log"? Thank you!

[rjmon]

PM 'd the bpi.log