Nagios Log Server - migration to 2026

[NMFSTeam]

Looks like it is still going. Perhaps 30 days was too much, and I should truncate further.

[jmichaelson]

You're still running that command manually correct? And it's still producing fresh output?

[NMFSTeam]

Yeah it's still running.

[jmichaelson]

From the command I had you run? Yes eventually it will finish. Unfortunately though, that's not one that we put together any metrics on the migration of since it all goes into one index on the destination.

[NMFSTeam]

I kind of just meant the migration in general, really the migration of the audit log. The migration is still going. I am not keeping that php command going all the time, I just run it every now and then to see if it is still going. Should I keep it running all the time? If so, I'll have to use "screen" or "tmux."

[NMFSTeam]

This was the latest, after I let the command run for a few mins:

Code: Select all

Migrating index nagioslogserver_history hit type: alert id: AZ6uL4lcpLgffXOe-n88
index: nagioslogserver_history, type: alert, id: AZ6uL4lcpLgffXOe-n88, upsert: 
Migrating index nagioslogserver_history hit type: alert id: AZ6uMWBopLgffXOe_gmt
index: nagioslogserver_history, type: alert, id: AZ6uMWBopLgffXOe_gmt, upsert: 
 to record 981291
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
  0     0    0     0    0     0      0      0 --:--:--  0:02:12 --:--:--     0
curl: (28) Failed to connect to 10.27.25.5 port 80 after 132837 ms: Couldn't connect to server
Failed to retrieve LDAP certs
tar: /tmp/certs.1781039059.tar: Cannot open: No such file or directory
tar: Error is not recoverable: exiting now
Updated Destination Logstash Config
root@hqnaglogi2:~#

[NMFSTeam]

I have the new server up and running, looks like it did migrate the settings over, including LDAP settings, accounts, certificates. However, when we try to login using our LDAP credentials, it is not working. On the old server, I remember we had to do something special to get it working... something like create a hash, then create a symbolic link using the hash. Do we need to do that on the new server? I have been reviewing the documentation, and I don't see that mentioned anywhere.

[jmichaelson]

You shouldn't have to do anything with symlinks with the ad/ldap certificates; the migration script is supposed to be handling that behind the scenes when it gets the certificates from the source server. Did I ever ask which distribution of Linux you're running? I want to try and reproduce that in house because the different versions handle those certificates differenly.

As a quick sanity check what happens when you go to the admin-> users page and try and add a user from that ldap server? are you able to get past the server authentication level and get a user list from the server?

[NMFSTeam]

We are running on Ubuntu 24.04 LTS.

We never used that method to add users, it never seem to work for us previously. We always just manually configured each user to authenticate against LDAP. I've opened a ticket with Nagios Support.

From the output of the php command, it looks like the migration process tried to connect to the old server on port 80 and download some of the certificates, and it was unable to do so. That makes sense, since we did not have port 80 open.