Still getting Alerts while removed hosts

[sreinhardt]

Let's not grep the entire directory, as you found there will likely be lots of garbage. Try these two instead:

Code: Select all

grep -Ri "RADshare 27" /usr/local/nagios/etc/*
grep -Ri "RADshare 27" /usr/local/nagios/var/objects.cache

[Rupender]

Is it any problem in sendmail log in between bold statement


Aug 30 11:39:59 localusarad sendmail[16713]: r7UFdwgM016713: to=[email protected], ctladdr=[email protected] (500/100), delay=00:00:01, xdelay=00:00:01, mailer=relay, pri=31355, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (r7UFdwmj016714 Message accepted for delivery)
Aug 30 11:39:59 localusarad sendmail[16716]: r7UFdwmj016714: to=<[email protected]>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=121566, relay=ms1.pixelrivertech.com. [169.131.130.19], dsn=2.0.0, stat=Sent (Ok: queued as 883C712C065)
Aug 30 12:39:59 localusarad sendmail[2312]: r7UGdxUW002312: Authentication-Warning: localusarad.pixelriver.com: nagios set sender to [email protected] using -f
Aug 30 12:40:00 localusarad sendmail[2312]: r7UGdxUW002312: from=[email protected], size=1355, class=0, nrcpts=1, msgid=<[email protected]>, relay=nagios@localhost


Because we got below unnecessary Alert at Date/Time: 2013-08-30 11:59:37

To: <[email protected]>
Subject: PROBLEM Host Alert - RADshare 27 is DOWN
Reply-To: Nagios XI <[email protected]>

***** Nagios XI Alert *****

Notification Type: PROBLEM
Host: RADshare 27
State: DOWN
Address: 172.25.24.27
Info: CRITICAL - 172.25.24.27: rta nan, lost 100%
Date/Time: 2013-08-30 11:59:37

Nagios URL: http://169.131.130.107/nagiosxi/

[lmiltchev]

Can you run the commands that sreinhardt asked you to, and show the output?

Code: Select all

grep -Ri "RADshare 27" /usr/local/nagios/etc/*
grep -Ri "RADshare 27" /usr/local/nagios/var/objects.cache

[Rupender]

Hi,

Output is nothing...


Last login: Fri Aug 30 13:00:36 2013 from 172.25.24.205
[root@localusarad ~]# grep -Ri "RADshare 27" /usr/local/nagios/etc/*
[root@localusarad ~]# grep -Ri "RADshare 27" /usr/local/nagios/var/objects.cache
[root@localusarad ~]#

[Rupender]

When i traced the Sendmail log as well as Nagios log which is
NAGIOS LOG

#cat /usr/local/nagios/var/archives/nagios-09-01-2013-00.log |grep RADshare 27
#cat /usr/local/nagios/var/archives/nagios-09-01-2013-00.log |grep 172.25.24.27 Outpout is nothing

SENDMAIL LOG

Sep 1 20:47:47 localusarad sendmail[28874]: r820llQi028874:
ocalhost.localdomain>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
ler=relay, pri=31354, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (r820llQi028874 Message accepted for delivery)
lrivertech.com. [169.131.130.19], dsn=2.0.0, stat=Sent (Ok: queued as AD2CE12C065)
-f
alhost.localdomain>, relay=nagios@localhost
Sep 1 21:52:37 localusarad sendmail[16003]: r821qbtb016003:
ocalhost.localdomain>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
ler=relay, pri=31354, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (r821qbtb016003 Message accepted for delivery)
lrivertech.com. [169.131.130.19], dsn=2.0.0, stat=Sent (Ok: queued as F3FF512C065)
f
lhost.localdomain>, relay=nagios@localhost
Sep 1 22:52:46 localusarad sendmail[1599]: r822qkmG001599:
calhost.localdomain>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
er=relay, pri=31354, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (r822qkmG001599 Message accepted for delivery)
rivertech.com. [169.131.130.19], dsn=2.0.0, stat=Sent (Ok: queued as 4F39F12C065)

but i am surprised how this Alert come at Date/Time: 2013-09-01 21:59:36 while in mail log there is no any mail dilevered:

To: <[email protected]>
Subject: PROBLEM Host Alert - RADshare 27 is DOWN
Reply-To: Nagios XI <[email protected]>

***** Nagios XI Alert *****

Notification Type: PROBLEM
Host: RADshare 27
State: DOWN
Address: 172.25.24.27
Info: CRITICAL - 172.25.24.27: rta nan, lost 100%
Date/Time: 2013-09-01 21:59:36

Nagios URL: http://169.131.130.107/nagiosxi/

Is this possible email sent without Sendmail MTA?
one thing more is that, Nagios support provide Remote support?

please help me as soon as possible.

[sreinhardt]

We do provide customers with remote support in some cases. Let's take a look at your configs though, could you please send us the latest good snapshot from your server. PM any/all of the support staff, please do not attach on the forums.