Archive logs

[Arfobank]

We are upgrading from Core to XI. Our Core system was configured to keep about 6 months of log archives in nagios/var/archives and each log file is a single day and about 100mb in size.

We are not wanting to import the old log archives to the new system.

What I'd like to know is, when we install XI and it starts it's own log archive, will XI access its log archives for any reason? e.g. reports Or are the logs files in the archives folder just that... archives, and the reports come from somewhere else like the database?

The reason I am asking is because our current Cores system is holding about 15GB of archive files... seems to be a lot of wasted space if they are never accessed.

Please advise

Jason

[rdedon]

The archived logs will not be imported by default so unless specifically exported and imported those would not show up.

[Arfobank]

The archived logs will not be imported by default so unless specifically exported and imported those would not show up.

Thanks but that is not what I was asking....

Let me rephrase.... Let's say we build a brand new XI system... (no imports) and set on its merry way to checking and alerting. 12 months later we look in the archives folder... what will be in there and how is it used?

Is it accessed to build reports by XI or is it just logs that would need to be massaged by custom scripts to get useful history?

Does it server a useful purpose to keep these archives or is the reporting data stored in the database or elsewhere?

Thanks

[mguthrie]

No, the log archives are not used for reports in any way in XI. The ndoutils table maintains a history of events, object states, notifications, etc, and those are all used for reporting. There is also a logentries table in the ndoutils database as well. The length of time to keep your nagios logs is at your discretion, but generally, it contains more information than would be useful to hang on to for more than a few weeks.

The log files are still archived in Nagios XI, but the XI interfaces accesses everything via the ndoutils database, not the physical files. You can also edit the nagios.cfg file to adjust what is being logged to that file & DB table. The XI interface also has DB settings that can be set to limit the age of data in your tables if desired.

Let us know if you need more information.