Nagios Support Forum

hi,

We have Nagios Eventlog Service running on a number of remote hosts to perform passive checks on Windows Eventlogs.
Almost everything works fine. 2 things bother me though.

1) When an event occurs and the state changes, it is shown in Nagios Xi.
When similar events occur, they're not shown on top. I have to check out the host and/or service history to get a view of what happened after the first event change.
Successive alert notifications are also not sent out unless the first is cleared.
Is there a way to get the latest event shown in Xi Operations screen? Or better yet: show them all! This is the screen my admins react upon.

2) Say I have a Critical state check that has yet to be acknowledged or cleared.
When an immediate check is performed on the host, all Changed states are cleared.
I've looked into "Retain status information" on both the services and hosts and checked the nagios.cfg.
All settings that should be enabled are, and as far as I understand this should keep these changed states visible on restart (immediate check) but they are all cleared, no matter what setting I use. (on/off/skip)

Anyone have any experience with this type of monitoring? I'm open to alternative methods.

This almost completely has to do with what you are using to check these event logs. What are you using right now? Also sounds like your service status is not changing when a new event is detected, and passively sent back up to Nagios, correct?

When an immediate check is performed on the host, all Changed states are cleared.

If you set this up through a wizard, this is going to happen, there is a plugin set up on those services which will auto-clear the states back to 0 (OK) when you schedule it actively. This is done for things such as freshness checking.