Page 3 of 4

Re: Removing Scheduled Downtime Problem

Posted: Mon Dec 29, 2014 12:04 pm
by scottwilkerson
What version of XI are you running?

Do you have scripts that are sending commands to the nagios command pipe?

Does the log contain lines near those lines that start with

Code: Select all

EXTERNAL COMMAND: 
Can you show the results of the following

Code: Select all

grep log_external_commands /usr/local/nagios/etc/nagios.cfg
If it doesn't equal 1 you may want to edit that line and restart nagios to log the commands that are being sent to the system

Re: Removing Scheduled Downtime Problem

Posted: Wed Jan 07, 2015 1:23 pm
by highness
I work with Costanza2k1 - here are some of the answers to your previous questions
scottwilkerson wrote:What version of XI are you running?
Nagios XI 2014R1.5
scottwilkerson wrote:Do you have scripts that are sending commands to the nagios command pipe?
While we do plan on doing that down the road, not yet.

scottwilkerson wrote:Does the log contain lines near those lines that start with

Code: Select all

EXTERNAL COMMAND: 
Didn't see any.

scottwilkerson wrote:Can you show the results of the following

Code: Select all

grep log_external_commands /usr/local/nagios/etc/nagios.cfg
[root@nagios]# grep log_external_commands /usr/local/nagios/etc/nagios.cfg
log_external_commands=0
scottwilkerson wrote:If it doesn't equal 1 you may want to edit that line and restart nagios to log the commands that are being sent to the system
Done.

Re: Removing Scheduled Downtime Problem

Posted: Wed Jan 07, 2015 2:50 pm
by highness
So far, only one external command:

scottwilkerson wrote:Can you show the results of the following

Code: Select all

grep log_external_commands /usr/local/nagios/etc/nagios.cfg

Code: Select all

[1420659328] EXTERNAL COMMAND: SCHEDULE_FORCED_SVC_CHECK;Dns2.xxxxxxxxxxxx.com;DNS Resolution - Dns2.xxxxxxxxxxxx.com;1420659324

Re: Removing Scheduled Downtime Problem

Posted: Wed Jan 07, 2015 6:05 pm
by abrist
Alright. Are you seeing any more "malformed Commands"?

Re: Removing Scheduled Downtime Problem

Posted: Thu Jan 08, 2015 11:10 am
by highness
abrist wrote:Alright. Are you seeing any more "malformed Commands"?
Nope. Haven't seen any for quite a while.

Any idea how we can get these hosts out of the recurring downtime spiral?

Re: Removing Scheduled Downtime Problem

Posted: Thu Jan 08, 2015 12:41 pm
by highness
I really need to see if we can get this resolved today. Where does Nagios keep the list of hosts that need to have downtime scheduled? Can I manually go in and remove those?

I've tried going to the Incident Management / Scheduled Downtime link and the host(s) show up there. I can delete the hosts from there, but a few minutes later, they automagically reappear. :evil:

Re: Removing Scheduled Downtime Problem

Posted: Thu Jan 08, 2015 1:07 pm
by abrist
Well, if the downtime was created as "recurring", it will reappear in the standard downtime lists. You will need to remove the recurring downtime from: home --> incident management --> recurring downtime.

Re: Removing Scheduled Downtime Problem

Posted: Thu Jan 08, 2015 1:22 pm
by highness
abrist wrote:Well, if the downtime was created as "recurring", it will reappear in the standard downtime lists. You will need to remove the recurring downtime from: home --> incident management --> recurring downtime.
The recurring hosts there (under home --> incident management --> recurring downtime --> services are correct. Where the issue is, is when I got to home --> incident management --> Scheduled Downtime there are a TON of hosts listed here. THESE are the ones I for some reason can't remove... :?

Re: Removing Scheduled Downtime Problem

Posted: Thu Jan 08, 2015 3:34 pm
by abrist
No hosts in the recurring downtime interface?
Lets check the recurring config:

Code: Select all

cat /usr/local/nagios/etc/recurringdowntime.cfg

Re: Removing Scheduled Downtime Problem

Posted: Thu Jan 08, 2015 5:09 pm
by highness
abrist wrote:No hosts in the recurring downtime interface?
Lets check the recurring config:

Code: Select all

cat /usr/local/nagios/etc/recurringdowntime.cfg
There are a ton of hosts in that file (and many of offending members are in that file). Can I remove the

define schedule {
sid 1d4e7bff1aba8e14716d41fe4bc7023a
user franma
comment Scheduled down from 18:00pm to 08:00am
time 18:00:00
duration 840
days_of_week
days_of_month
schedule_type service
service_description CPU Usage
host_name wakkawakkawakka.ourdomain.com
}

section for each server I want out of there? If so, do I need to restart nagios?