NagiosXI Service (Contact Group) Restriction not working

This support forum board is for support questions relating to Nagios XI, our flagship commercial network monitoring solution.
Locked
mlopez
Posts: 62
Joined: Fri Oct 19, 2012 11:35 am

NagiosXI Service (Contact Group) Restriction not working

Post by mlopez »

Hi All,
I'm trying to figure out how to restrict specific services to specific contact groups but it doesn't seem to be working, all contactgroups see all services under "Service Detail" even if I add the restriction.

Version: Nagios XI Version : 2012R2.9

As per the Host (ContactGroup) this is working fine (If I remove the contact group from a HOST the users under that contactgroup no longer see the host), it's only the Service (ContactGroup) which is not working properly.



Below is an example of 1 of my hosts (if I remove engineering or noc) the users under those groups will no longer see the host and none of the services associated to the host (This works fine).

Code: Select all

define host {
        host_name                       TMB12
        use                             snmptrap_host
        alias                           SERVER3
        address                         192.168.1.55
        hostgroups                      host
        check_command                   check_dummy!!!!!!!!
        max_check_attempts              1
        check_interval                  1
        retry_interval                  1
        check_period                    none
        contacts                        nagiosadmin
        contact_groups                  admins,engineering,noc
        notification_period             none
        notifications_enabled           0
        register                        1
        }





BTW These are (SERVICE TEMPLATES)


SERVICE (With NOC contact group)

Code: Select all

define service {
       name                                     BypassNotify_service
       host_name                                *
       hostgroup_name                           host
       service_description                      BypassNotify SNMP Traps
       servicegroups                            BypassNotify_servicegroup
       use                                      generic-service
       check_command                            check_dummy!!!!!!!!
       is_volatile                              1
       initial_state                            o
       max_check_attempts                       1
       check_interval                           1
       retry_interval                           1
       active_checks_enabled                    0
       passive_checks_enabled                   1
       check_period                             xi_timeperiod_24x7
       flap_detection_enabled                   0
       notification_interval                    1
       notification_period                      xi_timeperiod_24x7
       notification_options                     w,c,u,r,
       notifications_enabled                    1
       contacts                                 nagiosadmin
       contact_groups                           admins,noc
       icon_image                               snmptrap.png
       register                                 0

}

SERVICE (This is one without the contact group in this case NOC)

Code: Select all

define service {
       name                                     upsFailureNotify_service
       host_name                                *
       hostgroup_name                           host
       service_description                      upsFailureNotify SNMP Traps
       servicegroups                            upsFailureNotify_servicegroup
       check_command                            check_dummy!!!!!!!!
       is_volatile                              1
       initial_state                            o
       max_check_attempts                       1
       check_interval                           1
       retry_interval                           1
       active_checks_enabled                    0
       passive_checks_enabled                   1
       check_period                             xi_timeperiod_24x7
       flap_detection_enabled                   0
       notification_interval                    1
       notification_period                      xi_timeperiod_24x7
       notification_options                     w,c,u,r,
       notifications_enabled                    1
       contacts                                 nagiosadmin
       contact_groups                           admins
       icon_image                               snmptrap.png
       register                                 0

}
Any help would be greatly appreciated.
slansing
Posts: 7698
Joined: Mon Apr 23, 2012 4:28 pm
Location: Travelling through time and space...

Re: NagiosXI Service (Contact Group) Restriction not working

Post by slansing »

Currently, when you assign a contact to a service the user attached to that contact will be able to see every service under that host. Since you are assigning this contact group to a host/service it is reasonable to believe each user which has their contact in that group will be able to see that object. Is that what you are asking about?
mlopez
Posts: 62
Joined: Fri Oct 19, 2012 11:35 am

Re: NagiosXI Service (Contact Group) Restriction not working

Post by mlopez »

Hi slansing,
What I did is the following:

Host -> Contact Group -> ADMIN, NOC, Engineering
SERVICE 1 -> Contact Group -> ADMIN
SERVICE 2 -> Contact Group -> ADMIN, NOC
SERVICE 3 -> Conctact Group -> ADMIN, NOC, Engineering

In the scenario above (ADMIN, NOC, Engineering) can see all services under HOST but NOC should only be able to see SERVICE 2 and SERVICE 3, Engineering should only be able to see SERVICE 3 and ADMIN should be able to see SERVICE1, SERVICE2, SERVICE3.

Is my analogy correct?

- Mike
slansing
Posts: 7698
Joined: Mon Apr 23, 2012 4:28 pm
Location: Travelling through time and space...

Re: NagiosXI Service (Contact Group) Restriction not working

Post by slansing »

Correct, that is how it should be working **UNLESS** you have cross pollinated members between groups, if you have one contact in the engineering group that is also in NOC, or ADMIN, that contact's user will be able to see the other group.
Locked