Nagios Support Forum

In one of our Nagios monitoring servers, we found that the following entries in daemon.log file located under /var/log/all directory.

May 17 10:21:49 usa7061lv955 xinetd[28054]: START: nsca pid=28332 from=::ffff:13.129.109.69
May 17 10:21:49 usa7061lv955 xinetd[28054]: START: nsca pid=28333 from=::ffff:13.132.76.36
May 17 10:21:49 usa7061lv955 xinetd[28054]: START: nsca pid=28334 from=::ffff:13.129.109.69
May 17 10:21:49 usa7061lv955 xinetd[28054]: EXIT: nsca status=0 pid=28329 duration=0(sec)
May 17 10:21:50 usa7061lv955 xinetd[28054]: EXIT: nsca status=0 pid=28332 duration=1(sec)

We find these entries regularly in daemon.log file Is there a way to stop these entries if they are not required.

This is our nagios master server. The /var FS is filling rapidly causing outage frequently.

Blocking entries in rsyslog is explained in this StackExchange post:

http://askubuntu.com/questions/18970/is ... rom-syslog

It's written for Ubuntu but worked for me on CentOS.

You can try commenting out the log_on_failure line in /etc/xinet.d/nsca file. Then restart xinetd with a: