Logged in User details for NCPA(linux\unix)

[RIDS_I2MP]

Hi Team,

Please let us know if any plugin is available to fetch users logged to a particular server and it should send alert if there name is not present in argument list. This plugin should be for NCPA linux\Aix server.

We have a plugin that does same for NRPE agent. Attaching it can this same plugin work for NCPA to for linux\AIX servers.
If so then what all changes needs to be done. Can you please help us.

show_users.sh

Thanks

[ssax]

You can use the same plugin.

Put the plugin in the /usr/local/ncpa/plugins directory on the system. Then set owner/group/permissions:

Code: Select all

chown nagios.nagios /usr/local/ncpa/plugins/show_users.sh
chmod ug+x /usr/local/ncpa/plugins/show_users.sh

Then test it from the XI server:

Code: Select all

/usr/local/nagios/libexec/check_ncpa.py -H X.X.X.X -t 'yourtoken' -M plugins/show_users.sh -a '-s -m root,someotheraccount'

See here:

https://support.nagios.com/kb/article/n ... a-722.html
https://www.nagios.org/ncpa/help.php#ap ... es-plugins

Then you can add it through the NCPA wizard or manually:

https://assets.nagios.com/downloads/nag ... gement.pdf

[RIDS_I2MP]

Hi ssax,

Thanks for the help solution worked .

Can you please check and let us know if we can use same plugin for NSC client for windows servers also.

If yes please let us know what all changes are needs to be done.

Thanks in advance.

[ssax]

This script should work:

https://support.nagios.com/forum/viewto ... 94#p191894

Put it in this directory on the remote server:

Code: Select all

C:\Program Files (x86)\Nagios\NCPA\Plugins

Call it:

Code: Select all

/usr/local/nagios/libexec/check_ncpa.py -H X.X.X.X -t 'yourtoken' -M plugins/check_users.ps1

[RIDS_I2MP]

The requirement is for NSC client for windows servers. we don't use NCPA to monitor our windows servers.
Can you please help us with a plugin that supports NSC client.

Thanks in advance.

[pbroste]

Hello @RIDS_I2MP

Thanks for following up, with the additional info. Appears that you are using NRPE with N and appears that this support article will assist in setting up a PowerShell script that will pull User login from the Event Security log by implementing example to pull info:

Code: Select all

Get-EventLog security | Where-Object {($_.InstanceID -eq 4634) -or ($_.InstanceID -eq 4624)} | Select-Object Index,TimeGenerated,InstanceID,Message

Thanks,
Perry

[RIDS_I2MP]

Hi Team,

It would be great if you can find a script that does the same the work and share it with us.

Thanks in advance.

[ssax]

This link specifically gives you a plugin and the nsclient commands you should define:

https://support.nagios.com/forum/viewto ... 94#p191894