Page 1 of 1
comments only show some of the acknowledgements
Posted: Thu Jul 09, 2015 4:31 pm
by jssingh
I wanted to see historical information on system acknowledgements. I'm using Nagios Core 4.08 and I clicked on the "Comments" link under System and it shows me some of the acknowledgements. However, if I look in nagios.log I see more. Is there a reason that only some of them would show up?
Re: comments only show some of the acknowledgements
Posted: Thu Jul 09, 2015 4:35 pm
by abrist
Acknowledgements are removed (unless stickied) once the problem state recovers.
Re: comments only show some of the acknowledgements
Posted: Thu Jul 09, 2015 5:52 pm
by jssingh
I just want to make sure I understand. I expect the comment to go away when I look at that particular service. But you're saying, if it is not sticky, then it will not show up in any sort of history either?
I'm asking because I need the sticky bit to be turned off to get the functionality I need (I even turned it off as default), but management wants to have a historical record of who acknowledged what and when (and why), and I was hoping there was something in place, so I don't have to write something that combs through the logs. If you have any ideas, let me know.
Re: comments only show some of the acknowledgements
Posted: Fri Jul 10, 2015 11:05 am
by jdalrymple
In my environment I can still view service acknowledgements in the "Notifications" area (assuming there was a notification) even after the service has returned to OK - this is irrespective of sticky or persistent.
You're not seeing the same behaviour?
Re: comments only show some of the acknowledgements
Posted: Tue Jun 14, 2016 2:58 pm
by eloyd
I love hunting down old, still open posts.
If you haven't figured something out yet, I offer you
http://everwatch.global/nagios/nlog.zip. It's a perl script that checks nagios logs and archives for lots of things. So you don't have to reinvent the wheel. You can look for:
Code: Select all
nlog -f YYYY-MM-DD -t YYYY-MM-DD -a NOTIFICATION | grep ACKNOWLEDGEMENT | awk -F\; '{print $2, $3, $NF}'
This would print out something like (host service ack_message):
Code: Select all
svip-d01.localdomain Memory this is a test
svip-d01.localdomain Memory asdf
svip-d01.localdomain Memory Acknowledgement via Alert Email
svip-d01.localdomain Memory Acknowledgement via Alert Email
From ack's during that date range. Lots of other possibilities with my little nlog Nagios log processor.
Re: comments only show some of the acknowledgements
Posted: Tue Jun 14, 2016 3:34 pm
by jssingh
Oh wow, I forgot about this.
Thanks for the log processor!!
Re: comments only show some of the acknowledgements
Posted: Tue Jun 14, 2016 3:57 pm
by eloyd
I only share with those I like.

Re: comments only show some of the acknowledgements
Posted: Tue Jun 14, 2016 4:28 pm
by tgriep
Thanks eloyd for the information.
jssingh, is is alright to close and lock this post?
Re: comments only show some of the acknowledgements
Posted: Tue Jun 14, 2016 4:31 pm
by jssingh
yes, thanks.
Re: comments only show some of the acknowledgements
Posted: Tue Jun 14, 2016 4:54 pm
by mcapra
Locking this up!