Nagios Support Forum

Hi Team,

I am getting a below alert from Nagios frequently:

***** Nagios *****

Notification Type: PROBLEM

Service: System Load
Host: Main Firewall
Address: 10.1.124.1
State: CRITICAL

Date/Time: Thu Apr 3 12:23:59 XXX 2014

Additional Info:

Cisco ASA CPU : 5sec = 6 %, 2min = 8 %, 5min = 4294965 % : 4294965 50 : CRITICAL



From this alert the 5min % is showing wrong (5min = 4294965 %)

Below is my Command definition
--------------------------

define command{
command_name check_Cisco_CPU
command_line $USER1$/check_cisco_ips.pl -H $HOSTADDRESS$ -2c -C default -f -T cpu -w 70%,50%,40% -c 90%,70%,50%
}


I have attached the plugin which I used.
Can anyone suggest me to fix these unwanted alerts?

What model number are you using? The plugin author specified he tested on a 5520. Your OIDs may be different.

Let's try seeing what is at that oid, my guess would be, that the plugin expecting something quite different than what the device is sending.

Mine is ASA_5510. Is there any plugin for this model to monitor CPU System load.

Well it certainly seems that most of the information is there, let's try running those commands I posted and see what we get.

[root@nagios ~]# snmpwalk -O n -v 2c -c default 10.1.124.1 1.3.6.1.4.1.9.9.109.1.1.1.1.5.1
.1.3.6.1.4.1.9.9.109.1.1.1.1.5.1 = Gauge32: 8

[root@nagios ~]# snmpwalk -O n -v 2c -c default 10.1.124.1 1.3.6.1.4.1.9.9.109.1.1.1.1
.1.3.6.1.4.1.9.9.109.1.1.1.1.2.1 = INTEGER: 1
.1.3.6.1.4.1.9.9.109.1.1.1.1.2.2 = INTEGER: 1
.1.3.6.1.4.1.9.9.109.1.1.1.1.2.3 = INTEGER: 1
.1.3.6.1.4.1.9.9.109.1.1.1.1.3.1 = Gauge32: 14
.1.3.6.1.4.1.9.9.109.1.1.1.1.3.2 = Gauge32: 14
.1.3.6.1.4.1.9.9.109.1.1.1.1.3.3 = Gauge32: 14
.1.3.6.1.4.1.9.9.109.1.1.1.1.4.1 = Gauge32: 8
.1.3.6.1.4.1.9.9.109.1.1.1.1.4.2 = Gauge32: 8
.1.3.6.1.4.1.9.9.109.1.1.1.1.4.3 = Gauge32: 8
.1.3.6.1.4.1.9.9.109.1.1.1.1.5.1 = Gauge32: 8
.1.3.6.1.4.1.9.9.109.1.1.1.1.5.2 = Gauge32: 8
.1.3.6.1.4.1.9.9.109.1.1.1.1.5.3 = Gauge32: 8
.1.3.6.1.4.1.9.9.109.1.1.1.1.9.1 = Gauge32: 5
.1.3.6.1.4.1.9.9.109.1.1.1.1.9.2 = Gauge32: 5
.1.3.6.1.4.1.9.9.109.1.1.1.1.9.3 = Gauge32: 5
.1.3.6.1.4.1.9.9.109.1.1.1.1.10.1 = Gauge32: 14
.1.3.6.1.4.1.9.9.109.1.1.1.1.10.2 = Gauge32: 14
.1.3.6.1.4.1.9.9.109.1.1.1.1.10.3 = Gauge32: 14
.1.3.6.1.4.1.9.9.109.1.1.1.1.11.1 = Gauge32: 0
.1.3.6.1.4.1.9.9.109.1.1.1.1.11.2 = Gauge32: 0
.1.3.6.1.4.1.9.9.109.1.1.1.1.11.3 = Gauge32: 0

Well that's strange, it seems that it reports a perfectly normal number, and the plugin does not math to modify the value that would be displayed here. Let's remove your % signs from the command and try running it via cli, since the plugin really doesn't have a % of load. Also how often is this happening, all the time, once in a while, almost never?

[root@nagios libexec]# ./check_cisco_ips.pl -H 10.1.124.1 -2c -C default -f -T cpu -w 70,50,40 -c 90,70,50
Cisco ASA CPU : 5sec = 8 %, 2min = 8 %, 5min = 8 % : OK | load_5_sec=8%;70;90 load_1_min=8%;50;70 load_5_min=8%;40;50

[root@nagios libexec]# ./check_cisco_ips.pl -H 10.1.124.1 -2c -C default -f -T cpu -w 70%,50%,40% -c 90%,70%,50%
Cisco ASA CPU : 5sec = 10 %, 2min = 8 %, 5min = 8 % : OK | load_5_sec=10%;70;90 load_1_min=8%;50;70 load_5_min=8%;40;50

OK so the % signs have no bearing on the output. However since this is working now, would I be correct in understanding this is an intermittent issue?

Yes, The wrong % is triggering in week or a months or not regularly.
I wonder where is the problem exactly !!! ?