Event Timeline

[WillemDH]

Hello,

Just noticed our event timeline is empty. Anyone got an idea what's going wrong?

Grtz

[abrist]

Do a running tail on the httpd error log, and while the tail is running, reopen the timeline. Post the errors here.

Code: Select all

tail -f /var/log/httpd/error_log

[WillemDH]

Hello,

I did the tail -f as you asked and went to the timeline, but it's still enmpty and no errors about this timeline in error_log.

Willem

[scottwilkerson]

Are you referring to the "Monitoring Engine Event Queue"

A couple things that could cause this. If you do not get the graph at all it could be that your workstation doesn't have access to the Internet, as this uses google charts.

If it shows but is blank, it could be a time discrepancy. Have you offloaded mysql?

[WillemDH]

Hi Scott,

No, I'm referring to Aler TImeline under the Data Visualizations in the Reports Menu. I added a screenshot of how it looks.

Grtz

[slansing]

Depending on how far back you are trying to go it can take quite some time to load the events. Be sure they are not "off the screen" by scrolling either left or right. I would set it to the last month, then wait a bit for it to load and try to see if you can find any alerts, or events which occurred. If this does not solve the issue, try the following:

Code: Select all

tail -f /var/log/httpd/error_log

-Then try to open the report, send us any output from the console you see during this

Code: Select all

tail -f /var/log/httpd/access_log

-The same as above.

[WillemDH]

Hi,

Wel as the alert timeline should start by default with period last 24 hours, I suppose this shouldn't take so long to load? I already tried several other timeperiods, but still no result.
When I do a "tail -f /var/log/httpd/error_log", after trying to load the timeline at 13:12, I get the following result:

[Tue Jul 09 10:04:07 2013] [error] [client 172.19.x.x] PHP Warning: in_array() expects parameter 2 to be array, null given in /usr/local/nagiosxi/html/admin/missingobjects.php on line 279, referer: http://nagiosserver/nagiosxi/admin/?xiw ... bjects.php
[Tue Jul 09 10:04:07 2013] [error] [client 172.19.x.x] PHP Warning: in_array() expects parameter 2 to be array, null given in /usr/local/nagiosxi/html/admin/missingobjects.php on line 279, referer: http://nagiosserver/nagiosxi/admin/?xiw ... bjects.php
sh: warning: setlocale: LC_ALL: cannot change locale (en): No such file or directory
sh: warning: setlocale: LC_ALL: cannot change locale (en): No such file or directory
sh: warning: setlocale: LC_ALL: cannot change locale (en): No such file or directory
sh: warning: setlocale: LC_ALL: cannot change locale (en): No such file or directory

The errors around 10:04 have something to do with another issue I had, so I guess there are no logs about this timeline in the error_log

When I do a "tail -f /var/log/httpd/access_log", it seems I continuously receive new access log entries. I have no idea if they have anything to do with the alert timeline. The following is a small part of the access log


127.0.0.1 - - [09/Jul/2013:13:17:15 +0200] "POST /nagiosxi/backend/ HTTP/1.1" 200 1654 "-" "BinGet/1.00.A (http://www.bin-co.com/php/scripts/load/)"
172.19.x.x - - [09/Jul/2013:13:17:15 +0200] "GET /nagiosxi/ajaxhelper.php?cmd=getxicoreajax&opts=%7B%22func%22%3A%22get_pagetop_alert_content_html%22%2C%22args%22%3A%22%22%7D&nsp=6260f46423bda9c630716a9501f11fbe HTTP/1.1" 200 1015 "http://nagiosserver/nagiosxi/reports/" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3; Tablet PC 2.0)"
172.19.x.x - - [09/Jul/2013:13:17:16 +0200] "GET /nagiosxi/ajaxhelper.php?cmd=getxicoreajax&opts=%7B%22func%22%3A%22get_service_status_quick_actions_html%22%2C%22args%22%3A%7B%22hostname%22%3A%22SRX+CPF%22%2C%22servicename%22%3A%22Uptime%22%2C%22service_id%22%3A%221932%22%2C%22display%22%3A%22simple%22%7D%7D&nsp=bd68bc7f83e5dd2549ae45a038617362 HTTP/1.1" 200 40 "http://nagiosserver/nagiosxi/includes/c ... &dest=auto" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3; Tablet PC 2.0)"
172.19.x.x - - [09/Jul/2013:13:17:16 +0200] "GET /nagiosxi/ajaxhelper.php?cmd=getxicoreajax&opts=%7B%22func%22%3A%22get_service_status_detailed_info_html%22%2C%22args%22%3A%7B%22hostname%22%3A%22SRX+CPF%22%2C%22servicename%22%3A%22Uptime%22%2C%22service_id%22%3A%221932%22%2C%22display%22%3A%22simple%22%7D%7D&nsp=bd68bc7f83e5dd2549ae45a038617362 HTTP/1.1" 200 40 "http://nagiosserver/nagiosxi/includes/c ... &dest=auto" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3; Tablet PC 2.0)"
172.19.x.x - - [09/Jul/2013:13:17:16 +0200] "GET /nagiosxi/ajaxhelper.php?cmd=getxicoreajax&opts=%7B%22func%22%3A%22get_service_status_state_summary_html%22%2C%22args%22%3A%7B%22hostname%22%3A%22SRX+CPF%22%2C%22servicename%22%3A%22Uptime%22%2C%22service_id%22%3A%221932%22%2C%22display%22%3A%22simple%22%7D%7D&nsp=bd68bc7f83e5dd2549ae45a038617362 HTTP/1.1" 200 40 "http://nagiosserver/nagiosxi/includes/c ... &dest=auto" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3; Tablet PC 2.0)"

172.19.x.x is my ip, so all these logs should be caused by my pc. Still nothing on this timeline though.

[scottwilkerson]

When I do a "tail -f /var/log/httpd/access_log", it seems I continuously receive new access log entries. I have no idea if they have anything to do with the alert timeline.

This is normal as these are all of the ajax update calls for different page parts.

How many items to you have listed if you run the last 24 hour "State History" report?

[WillemDH]

Hi,

From: 2013-07-09 16:17:57 To: 2013-07-10 16:17:57

Showing 1-25 of 847 total records

State history for the last 24 hours.

Grtz

[slansing]

How long does it take you to load other reports normally? Such as the Executive Reports? How long have you waiting for the timeline to populate? Do you see any blue bars in the time indexes on the bottom?