User management and who can see what ?

[Interrex]

Hi.

I'm redesigning our NagiosXI setup since we are expanding and we will be 5 or more different teams handling the Hosts and Services in our Nagios installation.

The problem is that the teams are responsible for different services on the same host, and the teams only want to see problems that they need to take action on. And all teams want to see if the host is down.
The question is, how should we design the hosts, services and users ?


Will I have to create specific services or hosts for the different contact groups ?
I see that if I add a contact group for a host, I automatically get all services for that host on the users in the contact group.
How can I hide some of the services from the view ?

brgds
interrex

[lmiltchev]

You are correct - contacts added to a host would be able to view all services on that host. I would recommend adding your contacts or contact groups to all relevant services in bulk via the Bulk Modifications Tool.

example01.PNG

The Bulk Modifications Tool is a part of Nagios XI Enterprise Edition. You can either purchase it or use the free tiral to get the job done. It can save you lots of time. Adding many contacts to lots of services manually would be a really tedious job, and I would say almost impossible in an enterprise environment.

[Interrex]

Thank you for your respons.

We have the enterprise edition, so the bulk modification tool is a good timesaver
I will create som test scenarios to check out the bulk modification.
And let you know if I got some follow up questions.

[lmiltchev]

Sure. Let us know how it went. We will keep the topic open for the time being. Thank you!

[Interrex]

Hi.

I'm not sure if I do this the correct way.

I have 2 different teams.
Team 1 is admins.
Team 2 is application.

Host 1 have 10 services - 5 system based, 5 application + Host Status up/down.

Both teams are monitoring the same host (Host1)
Team 1 only wants to see the 5 system services.
Team 2 only wants to see the 5 application services.

I have set the different teams to the different services. - OK
If I check the Servicegroup Summary I see only the service checks that I have specified. - OK
If I open the default Operation Screen that we use for monitoring it shows a total number of times I have used the Service in total.
I also see alerts on hosts I have not specified.

I have buildt my basic service checks as an default CPU check that I set to hostgroup, and then add computers to the different hostgroups.
So, I guess one solution is to create all service checks specific for each host...

And if I do that, how can I get the host status in my Operation Screen view and still filter what services the different teams see.. ?
On the example over t says 0/0 Hosts in the operation screen view.

It's very importent for my organization to filter the different services and check to different teams.

[lmiltchev]

And if I do that, how can I get the host status in my Operation Screen view and still filter what services the different teams see.. ?
On the example over t says 0/0 Hosts in the operation screen view.

Unfortunately, this is by design and cannot be changed. If you added a contact to a host, he/she would be able to see ALL of the services under this host. If you added a contact to let's say only a few services on this host (but not to the host itself), he/she would be able to see only these services but not the host. In this case, the contact wouldn't be able to see the host under "Host Status Detail", Tactical Overview, Operations Center, Operations Screen, etc. The contact would be able to see the host under the "Service Status Detail", however he/she would not be able to access it. A "Not Authorized" error would be displayed.

[Interrex]

Ok, I understand.
Thank you for your response, I will filter it as much as possible.

[Interrex]

Hi, another question regarding host groups.
Is there any way to only see one of the host groups if a host is member of 2 or more groups ?

[npolovenko]

@Interrex, Nagios automatically discovers all hostgroups that a host belongs to. So you will see the hostgroup but if you click on it you will only see hosts that you are "subscribed" to.

[Interrex]

Ok, Thank you for your respond.