New install of Nagios XI - Return code of 127 monitoring Windows VM

[LACMAIS]

New Install of Nagios XI, updated to version 2024R1.4. Installed NCPA agent on a Windows VM, set some basic monitors for services and Disk usage and all items get (Return code of 127 is out of bounds. Check if plugin exists).
Aside from the standard plugins that seem to be already installed, are there other plugins that need to be installed for Windows server monitoring? All the plugins in the ZIP download appear to be the ones installed...

Thank you for any pointers/advice/direction...

[gwesterman]

Hi @LACMAIS,

I have a couple rudimentary troubleshooting steps for you to try out:
1. Make sure NCPA is installed and running (check the services on the Windows machine). Also go to https://<windows_ip>:5693 and make sure you can access the GUI.
2. Verify the plugins you are trying to run are installed (sounds like you've already done this) - check the plugins folder in your NCPA directory.
3. Make sure NCPA is accessible from the XI server. NCPA's port (default 5693) needs to be open.
4. Try running the commands directly from the command line on the XI server.

Let us know what you find.

Thank you!

[lgute]

Hi @LACMAIS,

Thanks for reaching out.

In addition to Griffin's awesome troubleshooting tips, please check that the link /usr/bin/python exists.

[LACMAIS]

Thank you both for your suggestions. I was able to confirm both the existence of the python link and that the NCPA service was running on the endpoint. The plugins are there in the directory.

However, clicking around looking for something to explain the issue, I came across a message that a database change needed to be confirmed. I confirmed it and then the code 127 issue went away and all the monitors started working properly.

Not sure what I did to cause a database config change after the initial install and update...will keep an eye on that in the future.

Thank you again for your assistance..

[LACMAIS]

Issue has returned. In an attempt to resolve the issue, I had deleted the host being monitored. It was then later that I noticed that the configuration had not been saved and applied it. That cleared all the monitors from having an issue, and then the system process the deletion of the host. I added the host again, and now all the monitors still show the code 127 issue.

[LACMAIS]

And to further answer Griffin's question, yes, I can reach the endpoint gui through the port with the token. however I did have to allow for the insecure access, but that server should have a valid certificate from our internal CA...