Page 1 of 2

Real time Alerts monitoring

Posted: Fri Aug 30, 2013 11:26 am
by Rupender
Hi All,


Is this possible to monitor the Real time Alerts which are sent to User's email id.

Re: Real time Alerts monitoring

Posted: Fri Aug 30, 2013 12:11 pm
by GldRush98
You may want to clarify what you mean by monitor them.
On the service or host though you can click the "View Service Notifications" icon (looks like a little cell phone) and this will show you all the notifications that have been sent out for that service or host in your defined time period.

Re: Real time Alerts monitoring

Posted: Fri Aug 30, 2013 12:22 pm
by lmiltchev
Rupender, did GldRush98 answer your question?

Re: Real time Alerts monitoring

Posted: Mon Sep 02, 2013 11:12 am
by Rupender
Actually i just want to monitor all Alerts which are sent to User's or Contact's Email id.

Is this possible with below command:

tailf /var/log/maillog

Re: Real time Alerts monitoring

Posted: Tue Sep 03, 2013 9:26 am
by slansing
Sure, you could tail and grep for the email address, or something unique to the contact.

Re: Real time Alerts monitoring

Posted: Wed Sep 04, 2013 3:54 am
by Rupender
When i traced the Sendmail log as well as Nagios log which is
NAGIOS LOG

#cat /usr/local/nagios/var/archives/nagios-09-01-2013-00.log |grep RADshare 27
#cat /usr/local/nagios/var/archives/nagios-09-01-2013-00.log |grep 172.25.24.27 Outpout is nothing

SENDMAIL LOG

Sep 1 20:47:47 localusarad sendmail[28874]: r820llQi028874:
ocalhost.localdomain>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
ler=relay, pri=31354, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (r820llQi028874 Message accepted for delivery)
lrivertech.com. [169.131.130.19], dsn=2.0.0, stat=Sent (Ok: queued as AD2CE12C065)
-f
alhost.localdomain>, relay=nagios@localhost
Sep 1 21:52:37 localusarad sendmail[16003]: r821qbtb016003:
ocalhost.localdomain>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
ler=relay, pri=31354, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (r821qbtb016003 Message accepted for delivery)
lrivertech.com. [169.131.130.19], dsn=2.0.0, stat=Sent (Ok: queued as F3FF512C065)
f
lhost.localdomain>, relay=nagios@localhost
Sep 1 22:52:46 localusarad sendmail[1599]: r822qkmG001599:
calhost.localdomain>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
er=relay, pri=31354, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (r822qkmG001599 Message accepted for delivery)
rivertech.com. [169.131.130.19], dsn=2.0.0, stat=Sent (Ok: queued as 4F39F12C065)

but i am surprised how this Alert come at Date/Time: 2013-09-01 21:59:36 while in mail log there is no any mail dilevered:

To: <[email protected]>
Subject: PROBLEM Host Alert - RADshare 27 is DOWN
Reply-To: Nagios XI <[email protected]>

***** Nagios XI Alert *****

Notification Type: PROBLEM
Host: RADshare 27
State: DOWN
Address: 172.25.24.27
Info: CRITICAL - 172.25.24.27: rta nan, lost 100%
Date/Time: 2013-09-01 21:59:36

Nagios URL: http://169.131.130.107/nagiosxi/

How this Alerts sent while there is no existence of this Alerts in Sendmail log, Is this possible email sent without Sendmail MTA?


Please help me as soon as possible.
Thanks

Re: Real time Alerts monitoring

Posted: Wed Sep 04, 2013 9:25 am
by slansing
Okay you are running into notification problems now too? Do you have anything closer to "Spet 1, 21:59:36" in your mail log?

Re: Real time Alerts monitoring

Posted: Wed Sep 04, 2013 10:26 am
by Rupender
No, that is only whatever i post before...


Can anyone confirm me that Is this possible email is sent without Sendmail MTA?

Re: Real time Alerts monitoring

Posted: Wed Sep 04, 2013 12:37 pm
by lmiltchev
What is the mail method that you are using - Sendmail or SMTP?

Code: Select all

Admin->Manage Email Settings

Re: Real time Alerts monitoring

Posted: Thu Sep 05, 2013 4:41 am
by Rupender
Definitely Sendmail..