Page 1 of 1

How to tell who submitted a command to Nagios

Posted: Thu Jun 13, 2013 11:05 am
by ecarrasq
System Info:

Linux Distribution and version? CentOS, 2.6.18-348.6.1.el5PAE
32 or 64bit? 32bit
VMware Image or Manual Install of XI? VMware Image
Are there specials configurations on your system, ie; is Gnome installed? No
Are you using a proxy? No
Are you using SSL? Yes
Nagios Version? Nagios XI 2012R2.2

Question:

Is there a way to tell who submitted a command to Nagios Core? A user disabled alerts, but in the Audit Log it does not show a user nor IP (please see screenshot):
Selection_035.jpeg
Thanks,
Eddie

Re: How to tell who submitted a command to Nagios

Posted: Thu Jun 13, 2013 12:03 pm
by lmiltchev
Is there a way to tell who submitted a command to Nagios Core?
Not really - anyone can submit a command (even from the command line, without being logged in as a particular user).

Re: How to tell who submitted a command to Nagios

Posted: Thu Jun 13, 2013 12:39 pm
by ecarrasq
I just verified with the user that disabled the alerts, and validated they used the "Disable notifications" from NagiosXi. When a user used to disable notifications that way, it would show up in the Audit Log, but it's not showing any more. Any chance of getting that feature back?
Selection_036.jpeg
Thanks

Re: How to tell who submitted a command to Nagios

Posted: Thu Jun 13, 2013 2:39 pm
by lmiltchev
I don't believe we ever had this feature (functionality). If you made changes via the CCM, the username would show up in the Audit Log. If you used external command, it wouldn't.