Login to web failed using the same set of user and password

[cdcsysadmin]

Dear support,

I can login to my syslog server in SSH.
However, when I tried to login through web using the same set of user and password, it promted me 'Invalid username or password.' after 3-min loading.

[cdienger]

The credentials used to login via ssh are different from the ones used to log into the web interface. For the web interface, try using the username 'nagiosadmin'.

You can reset the nagiosadmin password from the command line with the below if needed:

Code: Select all

/usr/local/nagioslogserver/scripts/reset_nagiosadmin_password.sh

[cdcsysadmin]

Dear cdienger,

I ran the script, entered the password.
However, it did not seem to succeed as the prompt does not appear again unit I pressed 'ctrl+z'.
When I login as nagiosadmin with the newly set password, it still shows 'Invalid username or password'.

[cdienger]

Is there anything logged in the elasticsearch logs when you try to logging? Run:

Code: Select all

tail -f /var/log/elasticsearch/*

and then attempt to login and provide the output.

[cdcsysadmin]

When I ran the script, the screen started jumping as shown in the gif.
It could be stopped by pressing 'ctrl+z', it looks so weird.
Do you think a remote session is needed for the investigation of the problem?

[cdienger]

It looks like there are transaction logs that need to be cleared out. Run the following and then try logging in:

Code: Select all

service elasticsearch stop
find /usr/local/nagioslogserver/elasticsearch/data/ -type f -name *.recovering​ -exec rm -f {} \;
service elasticsearch start

If there are still any problems, please PM me a profile and a copy of the nagioslogserver index.

The profile can be gathered under Admin > System > System Status > Download System Profile or from the command line with:

Code: Select all

/usr/local/nagioslogserver/scripts/profile.sh

This will create /tmp/system-profile.tar.gz.

Note that this file can be very large and may not be able to be uploaded through the ticketing system. This is usually due to the logs in the Logstash and/or Elasticsearch directories found in it. If it is too large, please open the profile, extract these directories/files and send them separately.

The index can be gathered with:

Code: Select all

curl -XPOST http://localhost:9200/nagioslogserver/_export?path=/tmp/nagioslogserver.tar.gz

The file it creates and that we'd like to see is /tmp/nagioslogserver.tar.gz.

[cdcsysadmin]

After clearing out transaction logs, I have been able to reset 'nagiosadmin' password and login through web.
Thanks!

[cdienger]

Glad to hear!