Page 1 of 1

Tactical Overview vs Multi-Tenancy

Posted: Wed Aug 07, 2013 4:22 pm
by jwelch
I'm experimenting with multi-tenancy on my XI server and noticed that the Tactical Overview
in Fusion does not match the Tactical Overvew in XI for users with restricted access to hosts
and services (based on contacts/contact groups for hosts and services).

For example I have a non-admin user who can see 1 unhandled host problem and 3 unhandled services.
problems in XI, but using that same login, Fusion shows 2 unhandled hosts and 8 unhandled services.

Essentially, Fusion is not filtering the data based on the current logged in user. And it may not be possible
for Fusion to filter the data. I don't know if it knows or cares what hosts/services a particular user has
access to when it pulls data from XI or Core.

Is this the expected behaviour?

Re: Tactical Overview vs Multi-Tenancy

Posted: Wed Aug 07, 2013 4:41 pm
by lmiltchev
What is the version of Nagios Fusion that you are using?
For example I have a non-admin user who can see 1 unhandled host problem and 3 unhandled services.
problems in XI, but using that same login, Fusion shows 2 unhandled hosts and 8 unhandled services.
Can you "drill down" and what are the "extra" hosts/services, and if your non-admin user is authorized to view them?

Re: Tactical Overview vs Multi-Tenancy

Posted: Thu Aug 08, 2013 9:53 am
by lmiltchev
Essentially, Fusion is not filtering the data based on the current logged in user.
Actually, this is correct and it is the default behavior. Multi-tenancy is a Nagios XI feature, not a Fusion feature. Nagios Fusion is meant to be a tool for administrators to get a centralized overview of the network infrastructure. Even though you can set up the server's credentials for a "read-only" user, under the Tactical Overview, you will be able to see the info that admins see.

Re: Tactical Overview vs Multi-Tenancy

Posted: Thu Aug 08, 2013 11:58 am
by jwelch
Yes, I kinda expected that was the designed behavior. You might want to look at the marketing literature and make it a little clearer what it's intended usage is. Multi-tenancy would be a nice feature to add, so that different groups can use Fusion to get an overview of hosts and services they are responsible for and not have to keep 3 (so far) open windows. For example, our NOC only cares about production systems, but the various groups have their Dev/Test systems monitored also. Fusion does not distinguish between the two groups so the NOC can't easily use Fusion to keep track of multiple XI/Core installs due to the unhandled non-production issues that they are not responsible for. But anyway, no is an acceptable answer.

Re: Tactical Overview vs Multi-Tenancy

Posted: Thu Aug 08, 2013 12:55 pm
by abrist
This would be a good feature to request. If not multi-tenancy, at least filtering (exclude/include) of host/service groups per XI/core instance would be nice in fusion. I would suggest filing a feature request at http://tracker.nagios.com