auto check of explorer.exe

[JohnFLi]

Whenever I add a new WIndows machine to be checked by Nagios XI, it includes checking explorer.exe.
I cannot find how to make it stop checking for that.
I want to have it stop checking becasue it seems to fail everytime I restart a machine and I have to log into the machine for it to start reading that explorer is really running.

btw, I'm very new to Nagios, so please have pitty on me.

[abrist]

Are you checking the explorer box under "Processess" in the widows server wizard? If so, that is what is causing the checks to be added. If not, how are you checking these systems? There is a chance that you added the explorer.exe check to a hostgroup and that check is now inherited by all the members of that hostgroup

[JohnFLi]

THe last one I setup up, i made sure I did not check the "Explorer" option (thinking that would fix it, but it did not)
I'm thinking it is in a group, but i cannot find where to go to correct that.

Could you point me in the correct place?

Thank you

[lmiltchev]

Go to the Core Config Manager->Services, type "explorer" in the search bar and hit "Enter". Click on the service and see if it is added to a hostgroup by clicking on the "Manage Hostgroups" button under the "Common Settings" tab. If you have more than one service, check all of them.

[abrist]

These can be tough to hunt down as Ludmil mentioned, not knowing your environment. In addition to Ludmil's suggestion, what is the output of:

Code: Select all

grep -10 explorer /usr/local/nagios/etc/services/* | grep hostgroup

[JohnFLi]

Ok, went there.
the search returns a handfull of hosts.

when I click on the Manage Host Groups button, some show it is part of a host group, some do not.

Next step please?

[abrist]

Can we actually see the output of these commands? (feel free to obfuscate sensitive bits)

Code: Select all

grep -10 explorer /usr/local/nagios/etc/services/* 
grep -10 explorer /usr/local/nagios/etc/services/* | grep hostgroup

You will want to remove the hostgroup from those services as those are the causes of the inheritance.

[JohnFLi]

Here you go This first line:

Code: Select all

[root@localhost ~]# grep -10 explorer /usr/local/nagios/etc/services/*
/usr/local/nagios/etc/services/10.100.192.108.cfg-      notification_period    xi_timeperiod_24x7
/usr/local/nagios/etc/services/10.100.192.108.cfg-      contacts               nagiosadmin
/usr/local/nagios/etc/services/10.100.192.108.cfg-      _xiwizard              windowsserver
/usr/local/nagios/etc/services/10.100.192.108.cfg-      register               1
/usr/local/nagios/etc/services/10.100.192.108.cfg-      }
/usr/local/nagios/etc/services/10.100.192.108.cfg-
/usr/local/nagios/etc/services/10.100.192.108.cfg-define service {
/usr/local/nagios/etc/services/10.100.192.108.cfg-      service_description    Explorer
/usr/local/nagios/etc/services/10.100.192.108.cfg-      use                    xiwizard_windowsserver_nsclient_service
/usr/local/nagios/etc/services/10.100.192.108.cfg-      hostgroup_name         windows-servers
/usr/local/nagios/etc/services/10.100.192.108.cfg:      check_command          check_xi_service_nsclient!!PROCSTATE!-l explorer.exe -d SHOWALL!!!!!
/usr/local/nagios/etc/services/10.100.192.108.cfg-      max_check_attempts     5
/usr/local/nagios/etc/services/10.100.192.108.cfg-      check_interval         5
/usr/local/nagios/etc/services/10.100.192.108.cfg-      retry_interval         1
/usr/local/nagios/etc/services/10.100.192.108.cfg-      check_period           xi_timeperiod_24x7
/usr/local/nagios/etc/services/10.100.192.108.cfg-      notification_interval  60
/usr/local/nagios/etc/services/10.100.192.108.cfg-      notification_period    xi_timeperiod_24x7
/usr/local/nagios/etc/services/10.100.192.108.cfg-      contacts               nagiosadmin
/usr/local/nagios/etc/services/10.100.192.108.cfg-      _xiwizard              windowsserver
/usr/local/nagios/etc/services/10.100.192.108.cfg-      register               1
/usr/local/nagios/etc/services/10.100.192.108.cfg-      }
--
/usr/local/nagios/etc/services/G1VTcenter02.cfg-        contacts               litsterj,nagiosadmin
/usr/local/nagios/etc/services/G1VTcenter02.cfg-        contact_groups         admins,Contact Group1,Contact Group2,xi_contactgroup_all
/usr/local/nagios/etc/services/G1VTcenter02.cfg-        _xiwizard              windowsserver
/usr/local/nagios/etc/services/G1VTcenter02.cfg-        register               1
/usr/local/nagios/etc/services/G1VTcenter02.cfg-        }
/usr/local/nagios/etc/services/G1VTcenter02.cfg-
/usr/local/nagios/etc/services/G1VTcenter02.cfg-define service {
/usr/local/nagios/etc/services/G1VTcenter02.cfg-        host_name              G1VTcenter02
/usr/local/nagios/etc/services/G1VTcenter02.cfg-        service_description    Explorer
/usr/local/nagios/etc/services/G1VTcenter02.cfg-        use                    xiwizard_windowsserver_nsclient_service
/usr/local/nagios/etc/services/G1VTcenter02.cfg:        check_command          check_xi_service_nsclient!!PROCSTATE!-l explorer.exe -d SHOWALL!!!!!
/usr/local/nagios/etc/services/G1VTcenter02.cfg-        max_check_attempts     5
/usr/local/nagios/etc/services/G1VTcenter02.cfg-        check_interval         5
/usr/local/nagios/etc/services/G1VTcenter02.cfg-        retry_interval         1
/usr/local/nagios/etc/services/G1VTcenter02.cfg-        check_period           xi_timeperiod_24x7
/usr/local/nagios/etc/services/G1VTcenter02.cfg-        notification_interval  60
/usr/local/nagios/etc/services/G1VTcenter02.cfg-        notification_period    xi_timeperiod_24x7
/usr/local/nagios/etc/services/G1VTcenter02.cfg-        contacts               litsterj,nagiosadmin
/usr/local/nagios/etc/services/G1VTcenter02.cfg-        contact_groups         admins,Contact Group1,Contact Group2,xi_contactgroup_all
/usr/local/nagios/etc/services/G1VTcenter02.cfg-        _xiwizard              windowsserver
/usr/local/nagios/etc/services/G1VTcenter02.cfg-        register               1

--

Code: Select all

/usr/local/nagios/etc/services/g1vtosssql01-SQL server for devtest sharepoint.cfg-      notification_period             xi_timeperiod_24x7
/usr/local/nagios/etc/services/g1vtosssql01-SQL server for devtest sharepoint.cfg-      contacts                        litsterj,nagiosadmin
/usr/local/nagios/etc/services/g1vtosssql01-SQL server for devtest sharepoint.cfg-      _xiwizard                       windowsserver
/usr/local/nagios/etc/services/g1vtosssql01-SQL server for devtest sharepoint.cfg-      register                        1
/usr/local/nagios/etc/services/g1vtosssql01-SQL server for devtest sharepoint.cfg-      }
/usr/local/nagios/etc/services/g1vtosssql01-SQL server for devtest sharepoint.cfg-
/usr/local/nagios/etc/services/g1vtosssql01-SQL server for devtest sharepoint.cfg-define service {
/usr/local/nagios/etc/services/g1vtosssql01-SQL server for devtest sharepoint.cfg-      host_name                       g1vtosssql01-SQL server for devtest sharepoint
/usr/local/nagios/etc/services/g1vtosssql01-SQL server for devtest sharepoint.cfg-      service_description             Explorer
/usr/local/nagios/etc/services/g1vtosssql01-SQL server for devtest sharepoint.cfg-      use                             xiwizard_windowsserver_nsclient_service
/usr/local/nagios/etc/services/g1vtosssql01-SQL server for devtest sharepoint.cfg:      check_command                   check_xi_service_nsclient!!PROCSTATE!-l explorer.exe -d SHOWALL!!!!!
/usr/local/nagios/etc/services/g1vtosssql01-SQL server for devtest sharepoint.cfg-      max_check_attempts              5
/usr/local/nagios/etc/services/g1vtosssql01-SQL server for devtest sharepoint.cfg-      check_interval                  5
/usr/local/nagios/etc/services/g1vtosssql01-SQL server for devtest sharepoint.cfg-      retry_interval                  1
/usr/local/nagios/etc/services/g1vtosssql01-SQL server for devtest sharepoint.cfg-      check_period                    xi_timeperiod_24x7
/usr/local/nagios/etc/services/g1vtosssql01-SQL server for devtest sharepoint.cfg-      notification_interval           60
/usr/local/nagios/etc/services/g1vtosssql01-SQL server for devtest sharepoint.cfg-      notification_period             xi_timeperiod_24x7
/usr/local/nagios/etc/services/g1vtosssql01-SQL server for devtest sharepoint.cfg-      contacts                        litsterj,nagiosadmin
/usr/local/nagios/etc/services/g1vtosssql01-SQL server for devtest sharepoint.cfg-      _xiwizard                       windowsserver
/usr/local/nagios/etc/services/g1vtosssql01-SQL server for devtest sharepoint.cfg-      register                        1
/usr/local/nagios/etc/services/g1vtosssql01-SQL server for devtest sharepoint.cfg-      }
[root@localhost ~]#

The second line:

[root@localhost ~]# grep -10 explorer /usr/local/nagios/etc/services/* | grep hostgroup
/usr/local/nagios/etc/services/10.100.192.108.cfg- hostgroup_name windows-servers
[root@localhost ~]#

[abrist]

Alright. Go to the CCM: Configure --> Core Config Manager --> Monitoring --> Services.
Search for: 10.100.192.108
Click on the Result with the description: Explorer
Click the "Manage Hostgroups" Button and remove the hostgroup windows-servers from the right hand pane. Save out and apply configuration.

[JohnFLi]

great....that was easier enough.

How can I get that check out of the Windows-Servers host group?

Or maybe remove that group all together and re-make a new one??