Nagios Support Forum

Is there a way to see who put something into downtime after the downtime has already expired?

If external command logging is enabled in nagios.cfg (log_external_commands=1), they will be in the nagios core logs.
Nonetheless, NDO should have them so it is easiest to get it from the Nagios XI event log. Go to --> Home --> Event Log --> Search for DOWNTIME.

Using my History Tab component I do see older downtime events under Comment History.

I'm a bit lazy and only use the user nagiosadmin so I assume if other users had done it then it would show their name.

Oh nice, thanks Troy. I think I saw that component awhile back (since I already had it downloaded) I just never installed it for some reason. Best guess is that I just forgot to. That's perfect though, exactly what we're looking for, thanks! Feel free to close this up.