NSCA not starting on server

[antshippley]

I'm trying to configure NSCA on my nagiosXI server, but the service isnt working. It's set up to run under xinetd and the port is listening, but I cant get a response even when use send_nsca to the local host. I've added a rule in the iptables and cant seem to see where it's having an issue at, theres nothing getting logged to var/log/messages. I'm completely new to this and have no clue where to look. Any help would be appreciated.

[sreinhardt]

If possible I might suggest disabling iptables while diagnosing this. Otherwise run a "iptables -Ln" to show us the present rules enabled. Also are you confused on seeing things coming into the nagios server, or wondering if they are at all being sent? You might start by checking the unconfigured objects list in XI.

[antshippley]

Part of my issue was that I forgot to verify user/group owners on the config files so the service wasn't even starting up. But I'm still confused on where I should be seeing logs at and/or errors. The server install and all of the client (nrpe) installs were pretty smooth, extract/untar and start a service and done. Since nsca is running under xinetd I'm not familiar with all of the things I should be looking for such as processes. I followed the instructions @ http://nagios.sourceforge.net/download/ ... _Setup.pdf but since nsca came installed with XI I only followed them partially...When i got to the testing phase it's not returning the whole "1 data packet sent to host" and Im not seeing anything in the nagios.log file. I do see the nsca service starting and stopping when i run the command


[root@Gimli nagios]# /usr/local/nagios/libexec/send_nsca localhost -c /usr/local/nagios/etc/send_nsca.cfg < test
0 data packet(s) sent to host successfully.

from var/log/messages
Jul 2 15:19:40 Gimli xinetd[11734]: START: nsca pid=17891 from=::ffff:127.0.0.1
Jul 2 15:19:40 Gimli xinetd[11734]: EXIT: nsca status=0 pid=17891 duration=0(sec)

test consists of:

localhost TestMessage 0 This is a test message

I also made sure I set the password and encryption for inbound connections in the GUI and then matched then in the config file(s)

thanks again

[slansing]

You should be seeing results in the nagios server's system log as well "/var/log/messages." Did you verify that the nagios XI server has port 5667 open, "also on the remote server?" Do you have anything in the Xi server's Unconfigured Objects list?

[antshippley]

You should be seeing results in the nagios server's system log as well "/var/log/messages." Did you verify that the nagios XI server has port 5667 open, "also on the remote server?" Do you have anything in the Xi server's Unconfigured Objects list?

I don't see any entries for processing or nsca besides the start/exit messages I posted above in any of the logs. Also verified the port is open and listening on the server:

[root@Gimli init.d]# netstat -a | grep nsca
tcp 0 0 *:nsca *:* LISTEN
root@Gimli audit]# netstat -an | grep 5667
tcp 0 0 :::5667 :::* LISTEN

and I have checked for any unconfigured objects

[lmiltchev]

Restart xinetd and check the "/var/log/messages" again:

Code: Select all

service xinetd restart
tail /var/log/messages

Do you see any entries?

[antshippley]

yep,

Jul 3 11:53:15 Gimli xinetd[10631]: Exiting...
Jul 3 11:53:15 Gimli xinetd[23024]: xinetd Version 2.3.14 started with libwrap loadavg labeled-networking options compiled in.
Jul 3 11:53:15 Gimli xinetd[23024]: Started working: 2 available services

[slansing]

What version of nagios XI are you on, and what version of NSCA did you install on the remote host?

[antshippley]

Nagios XI 2012R2.2 with NSCA Client 2.7.2, the nagios xi server is running on centOS and Ive tried nsca on both SUSE SLES11 and AIX 6.1 boxes.

[slansing]

What version of NSCA is running on the remote systems? The same as above?