No email notifications for the host being down

[IT-OPS-SYS]

below are the logs for the host: <servername> and the contact is mrush and sschramm. no1 got the email notifications on the host being down.

nagios.log:

logs removed at customer request

[mbellerue]

Can you PM me your system profile. I will dig into it and see if I can figure out what happened with the email alert for this host.

[IT-OPS-SYS]

here you go. i am getting the below errors in the mail logs as well:



logs removed at customer request

Moderator's Note: The profile has been shared with the support team but has been removed from the public forum.

[mbellerue]

So that looks like you're having connection issues between your Nagios server and your SMTP server. Is your SMTP server local to your network, or is it off-site? Do you have any monitoring in Nagios setup to monitor whether or not the SMTP server is up, like via ping, or something?

[IT-OPS-SYS]

no we are not monitoring the smtp server via nagios.

SMTP server is local to the network. how can i check via command or GUI that it is failing to reach to the SMTP server.

i am able to telnet as well on the port 25 to my smtp server:



it is connecting to the external hosted <servername> instead of <servername>

attached is my email settings

[mbellerue]

I would recommend setting up the SMTP server as a host to monitor in Nagios, using just a simple check_ping to check to see if the host is alive. And then add a service for it and use the check_smtp command for the service.

Once you get that set up, I would let that monitor for a week or two, and just see if either XI's connection to the SMTP service, or XI's connection tot he SMTP server as a whole drops at any point.

[IT-OPS-SYS]

done that but my question is why is it directing the postfix service to the ip x.x.x.x which i have not mentioned in the email setting.

we have mentioned the Smtp server as mailhost.ellucian.com so the postfix should reach to this server not the x.x.x.x
it should go to smtp server directly rather then going to the ip address x.x.x.x.

kindly explain

[lmiltchev]

First, I would recommend that you set your contacts as "xi users". "xi users" and "contacts" are similar but not the same. Please review the two documents below to learn more on the differences between the two:

https://assets.nagios.com/downloads/nag ... ntacts.pdf

https://assets.nagios.com/downloads/nag ... ios-XI.pdf

In your profile, I see that only "sschramm" is set as "xi user", however it is configured with both notification handlers (the "default" one, and the one for "contacts only").

host_notification_commands notify-host-by-email,xi_host_notification_handler
service_notification_commands notify-service-by-email,xi_service_notification_handler

This should be:

Code: Select all

host_notification_commands      xi_host_notification_handler
service_notification_commands   xi_service_notification_handler

When you are using SMTP, nagios will send emails to "xi users", who are also contacts. The "old" notification handlers (notify-host-by-email and notify-service-by-email) will work on "contacts only", provided you are using sendmail/postfix, and you are not being blocked by your email provider.

The "mrush" contact doesn't seem to be listed as a "xi user", at least I don't see it in the profile. Do you see "mrush" when you go to Admin > Users > Manage Users?

Make sure that your "xi users" ( Admin > Users > Manage Users) correspond to the "contacts only" (CCM > Alerting > Contacts).

As far as configuring postfix, this is out of scope of Nagios support. You can view the basic postfix configuration steps here:

http://www.postfix.org/BASIC_CONFIGURATION_README.html

Lastly, if you are trying to see why the emails have not been sent/received when using SMTP, you should be looking at the "/usr/local/nagiosxi/tmp/phpmailer.log". If you are using postfix, then you could check the /var/log/maillog. Hope this helps. Thanks!

[IT-OPS-SYS]

/usr/local/nagiosxi/tmp/phpmailer.log : it says messages sent

logs removed at customer request

[lmiltchev]

Did you make sure that mrush and sschramm are set as "xi users", who are also contacts? Please PM me your new profile, so that we can verify these changes.

Does your SMTP server require authentication? You don't have anything listed under username/password. Also, there is a little discrepancy here. In the screenshot of your SMTP settings, you show "Security = TLS", but in the profile and in the phpmailer.log, I see "security=none"... Which one is it? Is your SMTP server configured correctly?

Can you go to Reports > Available Reports > Notifications, and post a screenshot on the forum, that shows a notification sent to mrush and sschramm contact?

From the web UI, click on a host or a service that has mrush and/or sschramm contact added to it, go to Advanced tab, and click on "Send custom notification". Select the "Forced" and "Broadcast" check-boxes, type something in the "Comment" text field, and click "Submit". Did your contact(s) receive the custom notification email?