Passive Checks

[rentsys]

I have two Nagios servers configured with NRDP.
I realized recently that I wasn't getting passive alerts anymore.
How do I fix this?

[slansing]

You are not getting notifications? OR you are not getting status updates on the passive services?

[rentsys]

I am not getting back any status updates on the passive checks.

[lmiltchev]

How did you set up the passive checks? Are you using Inbound/Outbound transfers in XI?

Can you manually submit data? Go to:

Code: Select all

http://<server ip>/nrdp

Enter the token in the "Token" textbox and click on "Submit Check Data" button. Wait for a while and check to see if the "somehost" host showed up in the Unconfigured objects.

Run the following commands and show us the output in code wraps:

Code: Select all

tail -50 /var/log/messages
tail -50 /usr/local/nagios/var/nagios.log
/usr/local/nagios/bin/nagios -v /usr/local/nagios/etc/nagios.cfg | head -n 2

[rentsys]

I set up Inbound/Outbound transfers in XI. How do I check the server that sends the passive checks?

Code: Select all

[root@blvmmon ~]# tail -50 /var/log/messages
Apr  7 14:08:08 blvmmon auditd[1489]: Audit daemon rotating log files
Apr  7 14:51:42 blvmmon nagios: Warning: Check result queue contained results for host 'somehost', but the host could not be found!  Perhaps you forgot to define the host in your config files?
Apr  7 14:51:42 blvmmon nagios: Warning: Check result queue contained results for service 'someservice' on host 'somehost', but the service could not be found!  Perhaps you forgot to define the service in your config files?
Apr  7 14:52:32 blvmmon nagios: Auto-save of retention data completed successfully.

[root@blvmmon ~]# tail -50 /usr/local/nagios/var/nagios.log
[1396900302] Warning: Check result queue contained results for host 'somehost', but the host could not be found!  Perhaps you forgot to define the host in your config files?
[1396900302] Warning: Check result queue contained results for service 'someservice' on host 'somehost', but the service could not be found!  Perhaps you forgot to define the service in your config files?
[1396900352] Auto-save of retention data completed successfully.

[root@blvmmon ~]# /usr/local/nagios/bin/nagios -v /usr/local/nagios/etc/nagios.cfg | head -n 2

Nagios Core 3.5.0
[root@blvmmon ~]#

[lmiltchev]

On the server that sends checks, you can go to Admin->Outbound Transfers, and verify that the IP address entered is the correct IP that NRDP data will be sent to. Make sure that you have the correct authentication token, and that "Enable NRDP Output" checkbox is selected.

Are ports 80 and 443 open on the remote box?

Code: Select all

iptables -L -n

BTW, do you have anything in the unconfigured objects?

[rentsys]

It does have the correct token and then correct IP address. "Enable NRDP Output" checkbox is selected. there is only the somehost and someservice from the previous test.

Code: Select all

[root@csvmmon01 ~]# iptables -L -n
Chain INPUT (policy ACCEPT)
target     prot opt source               destination
ACCEPT     all  --  0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED
ACCEPT     icmp --  0.0.0.0/0            0.0.0.0/0
ACCEPT     all  --  0.0.0.0/0            0.0.0.0/0
ACCEPT     tcp  --  0.0.0.0/0            0.0.0.0/0           state NEW tcp dpt:22
ACCEPT     tcp  --  0.0.0.0/0            0.0.0.0/0           state NEW tcp dpt:80
ACCEPT     tcp  --  0.0.0.0/0            0.0.0.0/0           state NEW tcp dpt:443
ACCEPT     udp  --  0.0.0.0/0            0.0.0.0/0           state NEW udp dpt:162
REJECT     all  --  0.0.0.0/0            0.0.0.0/0           reject-with icmp-host-prohibited

Chain FORWARD (policy ACCEPT)
target     prot opt source               destination
REJECT     all  --  0.0.0.0/0            0.0.0.0/0           reject-with icmp-host-prohibited

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination
[root@csvmmon01 ~]#

[lmiltchev]

On the sending box, run the following command:

Code: Select all

/usr/bin/php /usr/local/nrdp/clients/send_nrdp.php --url=http://<receiving box ip>/nrdp --token=<your token>--host=TEST --state=0 --output="This is a test"

Then, go to the "receiving" box, and check the unconfigured objects. Can you see the "TEST" host?

[rentsys]

I can see the TEST host.

[lmiltchev]

OK, so sending/receiving seems to be working fine...

Can you show a host or service that doesn't get updated?

Please, post a screenshots from both, the sending and the receiving XI box.