Service IISAdmin not found

[mpeterson]

So this is something that really seems weird, but I'm not sure what else to be trying.
I've gone through setting up a number of servers and I've got IISAdmin and Tomcat7 among other services that I am checking. However on one server, among all of the other services that are validating just fine, IISAdmin is coming back from Nagios as not found. I've gone onto the box and validated that it does exist and it is running. Any thoughts on what would be preventing Nagios and the NSClient++ from finding it?

[scottwilkerson]

I believe the name of this service may need a space in it, can you run the following from the command line on the windows machine and post the output

Code: Select all

sc queryex type= service state= all | find "IIS"

[mpeterson]

Apologies, I hadn't realized that "Notify me" wasn't defaulted to yes. So it appears that sometimes I remembered to check the box and sometimes I didn't. I've found the setting in the User Control Panel for the board, so that should be taken care of. But that's part of the reason I haven't been responding in a reasonable time when these have been udpated.

So I ran this on the box in question:

Code: Select all

sc queryex type= service state= all | find "IIS"

>sc queryex type= service state= all | find "IIS"
SERVICE_NAME: IISADMIN
DISPLAY_NAME: IIS Admin Service

[scottwilkerson]

Can you change the check to use either

Code: Select all

IISADMIN

or

Code: Select all

IIS Admin Service

but not

Code: Select all

IISAdmin

the capitalization does matter...

[mpeterson]

So I tried reconfiguring and setting both (quoting where appropriate) and in both cases I got Service Not Found.
Incidentally I had wondered about the capitalization because I know when I've gone on other boxes, I've seen the ADMIN capped as well, yet the services seemed to be OK. I tried changing one of those to IISADMIN (they had been IISAdmin) and it seemed to work.

So it seemed processes are case sensitive and services aren't (see previous item where I mentioned explorer.exe vs. Explorer.exe). However, seeing what you had posted for code, had me wondering whether Nagios did something similiar so I tried:

Code: Select all

sc queryex type= service state= all | find "IISADMIN"

And got back

Code: Select all

SERVICE_NAME: IISADMIN

Running this

Code: Select all

sc queryex type= service state= all | find "IISAdmin"

returned no results. So that's consistent with what is said, but leaves me scratching my head because I've set up 10 or so other boxes using IISAdmin and had it work just fine. And switching to IISADMIN on this box doesn't seem to fix the issue either.

I did try at least one other box where I have this set up and ran the above SC and also get a result back when checking IISADMIN, but not one when I check IISAdmin. Yet this:

Code: Select all

check_xi_service_nsclient!<removedpassword>!SERVICESTATE!-l IISAdmin -d SHOWALL

returns Started

[scottwilkerson]

Out of curiosity can you run this from the command line

Code: Select all

/usr/local/nagios/libexec/check_nt -p 12489 -H <IP_ADDRESS> -s <PASSWORD> -v PROCSTATE -l "IIS Admin Service" -d SHOWALL

[mpeterson]

Ok, I tried this as listed and got "not running". Which on the surface was a WooHoo moment and then a... "Wait, that is just as wrong" moment. So I tried "Tomcat7". Same thing ("not running"). Tried various different iterations ("IISAdmin", "IISADMIN", IISAdmin, IISADMIN, Tomcat7). All returned not running. So then I tried a server where everything is working. Same thing "not running" with various iterations. Finally tried a service I knew wouldn't exist Tomcat8 and got the same thing. If I put in a incorrect address (on purpose) I get a socket timeout, so something is happening.

I'm feeling silly at this point. No idea what's going on here.

[scottwilkerson]

Are we sure we are connecting to the same machine?

[mpeterson]

Are we sure we are connecting to the same machine?

I'm not sure how to answer that. I mean I'm using the same IP across both items (via the GUI and the command line), so it would seem as though it should be. However given the goofy behavior, without throwing on a sniffer I'm not sure how I would validate that.

With that said, I will say this. As I mentioned I put an address that absolutely should not work, and got a different message than the one where I got the "service not running". So it seems logical that it would be making it to a box that I have the NRPE item installed.

[mpeterson]

With that said, I will say this. As I mentioned I put an address that absolutely should not work, and got a different message than the one where I got the "service not running". So it seems logical that it would be making it to a box that I have the NRPE item installed.

I should also loop back and point out that what this also means (from the GUI side) is that it seems I'm hitting a box with Tomcat7 installed as well based on the value that is returned. And so the address (even if it's something specific to the box we have Nagios installed on) seems to think we're pointed at a webserver, which in our environment means IIS should be present.