How to tell who submitted a command to Nagios

This support forum board is for support questions relating to Nagios XI, our flagship commercial network monitoring solution.
Locked
ecarrasq
Posts: 244
Joined: Tue Feb 22, 2011 5:58 pm

How to tell who submitted a command to Nagios

Post by ecarrasq »

System Info:

Linux Distribution and version? CentOS, 2.6.18-348.6.1.el5PAE
32 or 64bit? 32bit
VMware Image or Manual Install of XI? VMware Image
Are there specials configurations on your system, ie; is Gnome installed? No
Are you using a proxy? No
Are you using SSL? Yes
Nagios Version? Nagios XI 2012R2.2

Question:

Is there a way to tell who submitted a command to Nagios Core? A user disabled alerts, but in the Audit Log it does not show a user nor IP (please see screenshot):
Selection_035.jpeg
Thanks,
Eddie
You do not have the required permissions to view the files attached to this post.
User avatar
lmiltchev
Bugs find me
Posts: 13589
Joined: Mon May 23, 2011 12:15 pm

Re: How to tell who submitted a command to Nagios

Post by lmiltchev »

Is there a way to tell who submitted a command to Nagios Core?
Not really - anyone can submit a command (even from the command line, without being logged in as a particular user).
Be sure to check out our Knowledgebase for helpful articles and solutions!
ecarrasq
Posts: 244
Joined: Tue Feb 22, 2011 5:58 pm

Re: How to tell who submitted a command to Nagios

Post by ecarrasq »

I just verified with the user that disabled the alerts, and validated they used the "Disable notifications" from NagiosXi. When a user used to disable notifications that way, it would show up in the Audit Log, but it's not showing any more. Any chance of getting that feature back?
Selection_036.jpeg
Thanks
You do not have the required permissions to view the files attached to this post.
User avatar
lmiltchev
Bugs find me
Posts: 13589
Joined: Mon May 23, 2011 12:15 pm

Re: How to tell who submitted a command to Nagios

Post by lmiltchev »

I don't believe we ever had this feature (functionality). If you made changes via the CCM, the username would show up in the Audit Log. If you used external command, it wouldn't.
Be sure to check out our Knowledgebase for helpful articles and solutions!
Locked