Nagios Support Forum

Nagios XI 2014R1.2

1) Can you please advice how to create login for Nagios CCM?
We want to create individual ID for the admins.

2) How do we export Nagios audit logs in syslog format to a central syslog server?

Thanks

1) Can you please advice how to create login for Nagios CCM?
We want to create individual ID for the admins.

Admin->Manage System Config->Separate CCM Login = checked->Update Settings
CCM->Config Manager Admin->Manage Config Access->Add New

2) How do we export Nagios audit logs in syslog format to a central syslog server?

I can certainly see a value in this. I will be posting an internal feature request for adding this functionality to Nagios XI.

lmiltchev wrote:

1) Can you please advice how to create login for Nagios CCM?
We want to create individual ID for the admins.

Admin->Manage System Config->Separate CCM Login = checked->Update Settings
CCM->Config Manager Admin->Manage Config Access->Add New

2) How do we export Nagios audit logs in syslog format to a central syslog server?

I can certainly see a value in this. I will be posting an internal feature request for adding this functionality to Nagios XI.

Thanks. In the meantime where do I find the audit log in the server? Any particular file?

Thanks. In the meantime where do I find the audit log in the server? Any particular file?

It's not in a file - it's in PostgresQL database. That's why it's not easy to send it to a "central log server". I already posted a feature request (TASK ID 4297) about adding this functionality.

lmiltchev wrote:

Thanks. In the meantime where do I find the audit log in the server? Any particular file?

It's not in a file - it's in PostgresQL database. That's why it's not easy to send it to a "central log server". I already posted a feature request (TASK ID 4297) about adding this functionality.

Ok. Which table in PostgresQL then?

xi_auditlog:

tmcdonald wrote:xi_auditlog:

Code: Select all

nagiosxi=> \d xi_auditlog;
                                          Table "public.xi_auditlog"
   Column    |            Type             |                             Modifiers
-------------+-----------------------------+-------------------------------------------------------------------
 auditlog_id | integer                     | not null default nextval('xi_auditlog_auditlog_id_seq'::regclass)
 log_time    | timestamp without time zone |
 source      | text                        |
 user        | text                        |
 type        | integer                     |
 message     | text                        |
 ip_address  | text                        |
Indexes:
    "xi_auditlog_pkey" PRIMARY KEY, btree (auditlog_id)
    "xi_auditlog_ip_address" btree (ip_address)
    "xi_auditlog_log_time" btree (log_time)
    "xi_auditlog_source" btree (source)
    "xi_auditlog_type" btree (type)
    "xi_auditlog_user" btree ("user")

nagiosxi=>

Thanks, please close this case.