mk-livestatus on my Nagios server

[lafargeuser]

I have integrated Splunk to Nagios.
Here, I mean to say, I can able to see Nagios alerts in Splunk dashboard.
Further to this, but I dont see any alerts in Livestatus Dashboard & Livestatus alert Dashboard. Going through the below link it says...

REQUIRED:•You must also edit NagiosLivestatus.xml and change the "src_host" name to a relevant device name in nagios.
•netcat must be installed on your splunk server for the lookup scripts to work (usually included by default in most Linux Distributions)
•there is a bug in netcat on Ubuntu 10.04, please install the latest version from 11.10 :-
•<http://packages.ubuntu.com/oneiric/netcat-openbsd>
•You must ensure that the ip address of your splunk server is listed next to "only_from" in /etc/xinetd.d/livestatus on your nagios server.

But I dont see file mentioned above NagiosLivestatus.xml & /etc/xinetd.d/livestatus on Nagios Server.

Is that mean, I have to install mk-livestatus on my Nagios server ?

What should I put Nagios server pot ? i have put 5666 is this right ?

[abrist]

Find the file (it should be with the splunk perf ui):

Code: Select all

find / -name NagiosLivestatus.xml 

[lafargeuser]

I have installed & configured mk-livestatus on Nagios.

but not able to find below xml file.

find / -name NagiosLivestatus.xml

pasting logs for your information.

ndo2db: Error: mysql_query() failed for 'INSERT INTO nagios_logentries SET instance_id='1', logentry_time=FROM_UNIXTIME(1372338827), entry_time=FROM_UNIXTIME(1372338827), entry_time_usec='642779', logentry_type='262144', logentry_data='ndomod: Error writing to data sink! Some output may get lost\.\.\.', realtime_data='1', inferred_data_extracted='1''
Jun 27 13:14:03 VSHIMSNAGIOSXI ndo2db: mysql_error: 'Table './nagios/nagios_logentries' is marked as crashed and should be repaired'
Jun 27 13:14:03 VSHIMSNAGIOSXI ndo2db: Error: mysql_query() failed for 'DELETE FROM nagios_systemcommands WHERE instance_id='1' AND start_time<FROM_UNIXTIME(1371734043)'
Jun 27 13:14:03 VSHIMSNAGIOSXI ndo2db: mysql_error: 'Table './nagios/nagios_systemcommands' is marked as crashed and should be repaired'
Jun 27 13:14:03 VSHIMSNAGIOSXI ndo2db: Error: mysql_query() failed for 'INSERT INTO nagios_logentries SET instance_id='1', logentry_time=FROM_UNIXTIME(1372338827), entry_time=FROM_UNIXTIME(1372338827), entry_time_usec='642895', logentry_type='262144', logentry_data='ndomod: Please check remote ndo2db log, database connection or SSL Parameters', realtime_data='1', inferred_data_extracted='1''

[abrist]

Was that xml file on your splunk server instead? I appears that the splunk integration may not have completed successfully.
Your database is crashed as well. Try repairing by following the document below:
http://assets.nagios.com/downloads/nagi ... tabase.pdf