Page 1 of 1

Nagios vs. Icinga in the logfile

Posted: Fri Feb 06, 2015 3:28 pm
by smcracraft
I'm looking at wanting to parse the logfile for some verifications.

An example record:

ip-address [encoded-numeric-date] CURRENT SERVICE STATE: FULLY-QUALIFIED-HOSTNAME;SERVICE;OK;HARD;1;(null)

What does this mean?

Is there an online document which describes the format of the Nagios/Icinga logfile.

Are there differences between the two solutions in regards to the above?

Thanks!

Re: Nagios vs. Icinga in the logfile

Posted: Fri Feb 06, 2015 3:44 pm
by abrist
smcracraft wrote:s there an online document which describes the format of the Nagios/Icinga logfile.
Not that I have seen.
smcracraft wrote: What does this mean?
Could you clarify? Are you looking for a breakdown of the macros used to create a standard log file line? If so, what type of log line? (alert, check, startup notice, etc)

Re: Nagios vs. Icinga in the logfile

Posted: Fri Feb 06, 2015 4:46 pm
by smcracraft
I am just looking to find out when things go to a hard down state, how it
is logged in the record and then are in soft and then full recovery.

Poking around in the file without a definition of its syntax only gets one so far.

Re: Nagios vs. Icinga in the logfile

Posted: Mon Feb 09, 2015 1:19 pm
by tmcdonald
smcracraft wrote: Are there differences between the two solutions in regards to the above?
I can't really say much about Icinga because I don't use it, but considering it is a fork of the Nagios project it should have a similar logging format.

That said, I would read up on the state types:

http://nagios.sourceforge.net/docs/nagi ... types.html

and some related config entries:

http://nagios.sourceforge.net/docs/nagi ... ce_retries
http://nagios.sourceforge.net/docs/nagi ... st_retries