guys how to I get the answers for the following questions from my log server:
1. How much data traffic is going in and out on a daily?
2. What is the exact type of data per host that is being logged?
quick question
quick question
Proudly running:
NagiosXI 5.4.12 2 node Prod Env 2500 hosts, 13,000 services
Nagiosxi 5.5.7(test env) 2500 hosts, 13,000 services
Nagios Logserver 2 node Prod Env 500 objects sending
Nagios Network Analyser
Nagios Fusion
NagiosXI 5.4.12 2 node Prod Env 2500 hosts, 13,000 services
Nagiosxi 5.5.7(test env) 2500 hosts, 13,000 services
Nagios Logserver 2 node Prod Env 500 objects sending
Nagios Network Analyser
Nagios Fusion
Re: quick question
You can see the size of each day's index under Admin > System > Cluster Status and you can find the type of data a host is sending by adding a term panel that displays the type field. See attached screenshot. Does this help get you what you need?
You do not have the required permissions to view the files attached to this post.
As of May 25th, 2018, all communications with Nagios Enterprises and its employees are covered under our new Privacy Policy.
Re: quick question
well sorta but its mostly a question of the actual log server itself.
How do I find out how many windows eventlogs are being sent to the server as well as the syslogs.
Also how much throughput does each type of logs consume?
or to rephrase
how many servers are sending windows eventlogs to my log server or how many devices are sending syslogs and how much bandwith is being used by each type.
How do I find out how many windows eventlogs are being sent to the server as well as the syslogs.
Also how much throughput does each type of logs consume?
or to rephrase
how many servers are sending windows eventlogs to my log server or how many devices are sending syslogs and how much bandwith is being used by each type.
Proudly running:
NagiosXI 5.4.12 2 node Prod Env 2500 hosts, 13,000 services
Nagiosxi 5.5.7(test env) 2500 hosts, 13,000 services
Nagios Logserver 2 node Prod Env 500 objects sending
Nagios Network Analyser
Nagios Fusion
NagiosXI 5.4.12 2 node Prod Env 2500 hosts, 13,000 services
Nagiosxi 5.5.7(test env) 2500 hosts, 13,000 services
Nagios Logserver 2 node Prod Env 500 objects sending
Nagios Network Analyser
Nagios Fusion
Re: quick question
Switching the term filed to host will show the unique hosts. Getting a count though would need to be done from the command line. For example, a count of unique hosts that sent syslog data for the last day:
The amount of bandwidth being used by each is a bit trickier. The best way I can think of to measure this would be look at the size of results returned by a query for each. The default 'All Events' panel has an 'Export as CSV' option that you can use to export the results and compare.
Code: Select all
curl -XGET 'http://localhost:9200/_all/_search?q=type:syslog&pretty' -d '{
"aggs" : {
"clients" : { "cardinality" : { "field" : "host.raw" } }
},
"query":{
"range" : {
"date" : {
"gte" : "now-1d",
"lte" : "now"
}
}
},
"size": 999
}'
You do not have the required permissions to view the files attached to this post.
As of May 25th, 2018, all communications with Nagios Enterprises and its employees are covered under our new Privacy Policy.
Re: quick question
Hey thanks man! you can lock it
Proudly running:
NagiosXI 5.4.12 2 node Prod Env 2500 hosts, 13,000 services
Nagiosxi 5.5.7(test env) 2500 hosts, 13,000 services
Nagios Logserver 2 node Prod Env 500 objects sending
Nagios Network Analyser
Nagios Fusion
NagiosXI 5.4.12 2 node Prod Env 2500 hosts, 13,000 services
Nagiosxi 5.5.7(test env) 2500 hosts, 13,000 services
Nagios Logserver 2 node Prod Env 500 objects sending
Nagios Network Analyser
Nagios Fusion