Nagios Support Forum

Is it possible to limit who can see what on the nagioslogserver?

Right now every user can see all logstash entries. Is it possible to restrict views?

I wouldn't want a developer(who is watching apache logs) querying logstash for firewall entries as well.

Is this feature working in this version of nagioslogserver? Is it coming soon?

This would be doable by customizing your dashboard. Let's say your developer is watching apache logs, all you would have to do is setup the query to look for "apache*" or something similar and maybe set a time and host filter. All users are going to see all logs from the cluster you are currently part of.

Something to note here is that when you use a filter on your dashboard the filter is cached in log server so that any time you access that dashboard again it will quickly query the logs that have been already filtered after the first time that dashboard is loaded. So in that way filtering would be a good option for your developers to make sure they are only looking for logs they need since it will not include the firewall entry logs in the query, for example.

If you create a developer dashboard with filters and specific queries you can then set it as the default dashboard. You can also just create a number of dashboards for the developers and make them global. Once they are global any user can access the dashboard from the home page or from the saved dashboard drop down on the main dashboard page.

Here is our documentation for Nagios Log Server which can be a great resource (especially the Analyzing Logs document which will help explain how to create dashboards):

http://library.nagios.com/library/produ ... umentation

/Luke

This is not currently in Log Server, but is on the roadmap to add filters to limit what servers a user or group can see.