Page 2 of 2
Re: Reporting on SCheduled Downtime
Posted: Wed May 20, 2015 11:46 am
by tmcdonald
That might have to do with external commands, which would not be tied to a specific XI user that could be identified. Just a guess though - we'll leave this open for Troy's comments.
Re: Reporting on SCheduled Downtime
Posted: Wed May 20, 2015 4:41 pm
by Box293
Glad it works as expected
Yeah I could not determine who the user is that submits these actions. The user is not recorded in nagios.log and more specifically it not recorded in the database from whence I pull the data. I think this needs to be a nagios core feature request. I did see an old feature request for Nagios 3.3.1 that was submittied in 2011 but nothing happened with it
http://tracker.nagios.org/view.php?id=236
Re: Reporting on SCheduled Downtime
Posted: Wed May 20, 2015 7:41 pm
by Fred Kroeger
Thanks Troy .
Nagios - Can this be progressed? I can't see much point in submitting feature requests for this if they get ignored for 4years?
If we're promoting Nagios as an Enterprise monitoring solution, then all user actions need to be logged eg: Start/End/cancelling downtime, Enable/disable notifications,etc.
regards... Fred
Re: Reporting on SCheduled Downtime
Posted: Thu May 21, 2015 2:56 am
by WillemDH
As the disable notifications is getting abused sometimes by colleagues who don't understand downtime and acknowledgments, it does seem like a nice feature to know who did it. It would maybe be worth to make a new feature request for Nagios Core 4 or so? I'll +1 it if someone makes it.
Re: Reporting on SCheduled Downtime
Posted: Thu May 21, 2015 10:07 am
by lmiltchev
Willem, this info is available in the "Audit Log", i.e.
Code: Select all
2015-05-21 09:47:48 24056 Nagios XI SECURITY adele 192.168.x.x User logged out
2015-05-21 09:47:44 24055 Nagios XI INFO localhost cmdsubsys: User submitted a command to Nagios Core: DISABLE_HOST_NOTIFICATIONS;CentOS-NCPA
2015-05-21 09:47:44 24054 Nagios XI INFO adele 192.168.x.x User submitted a command to the subsystem (ID=16)
2015-05-21 09:46:40 24053 Nagios XI SECURITY adele 192.168.x.x User 'nagiosadmin' masqueraded as user 'adele'
Re: Reporting on SCheduled Downtime
Posted: Thu May 21, 2015 10:54 am
by WillemDH
Ah cool tx!
Re: Reporting on SCheduled Downtime
Posted: Thu May 21, 2015 1:00 pm
by lmiltchev
I'm glad I could help!
Re: Reporting on SCheduled Downtime
Posted: Thu May 21, 2015 7:07 pm
by Box293
Thanks Ludmill, I did not think to look in the Audit Log.
I had a look at the audit log and the possibility of updating the History Tab to include this information.
I have decided not to, based on two reasons.
1) The Audit Log in the Admin menu is an "Enterprise License" feature. Hence I feel that this is a license value add which my free component should not contradict.
2) The Audit Log is only available to Admins. The History tab can be used by read-only users so providing information which is only accessible via the Admin tab would feel like a security/privacy hole.
At least we know the information is available, it's just an extra click or two away.
However ... maybe Nagios Enterprises could acquire the History Tab from me (at a nominal fee), improve it to include this information (and take into account security/privacy stuff) and make it part of the XI Product .... we can dream anyway
