Page 1 of 1

comments only show some of the acknowledgements

Posted: Thu Jul 09, 2015 4:31 pm
by jssingh
I wanted to see historical information on system acknowledgements. I'm using Nagios Core 4.08 and I clicked on the "Comments" link under System and it shows me some of the acknowledgements. However, if I look in nagios.log I see more. Is there a reason that only some of them would show up?

Re: comments only show some of the acknowledgements

Posted: Thu Jul 09, 2015 4:35 pm
by abrist
Acknowledgements are removed (unless stickied) once the problem state recovers.

Re: comments only show some of the acknowledgements

Posted: Thu Jul 09, 2015 5:52 pm
by jssingh
I just want to make sure I understand. I expect the comment to go away when I look at that particular service. But you're saying, if it is not sticky, then it will not show up in any sort of history either?

I'm asking because I need the sticky bit to be turned off to get the functionality I need (I even turned it off as default), but management wants to have a historical record of who acknowledged what and when (and why), and I was hoping there was something in place, so I don't have to write something that combs through the logs. If you have any ideas, let me know.

Re: comments only show some of the acknowledgements

Posted: Fri Jul 10, 2015 11:05 am
by jdalrymple
In my environment I can still view service acknowledgements in the "Notifications" area (assuming there was a notification) even after the service has returned to OK - this is irrespective of sticky or persistent.

You're not seeing the same behaviour?

Re: comments only show some of the acknowledgements

Posted: Tue Jun 14, 2016 2:58 pm
by eloyd
I love hunting down old, still open posts. :-)

If you haven't figured something out yet, I offer you http://everwatch.global/nagios/nlog.zip. It's a perl script that checks nagios logs and archives for lots of things. So you don't have to reinvent the wheel. You can look for:

Code: Select all

nlog -f YYYY-MM-DD -t YYYY-MM-DD -a NOTIFICATION | grep ACKNOWLEDGEMENT | awk -F\; '{print $2, $3, $NF}'
This would print out something like (host service ack_message):

Code: Select all

svip-d01.localdomain Memory this is a test
svip-d01.localdomain Memory asdf
svip-d01.localdomain Memory Acknowledgement via Alert Email
svip-d01.localdomain Memory Acknowledgement via Alert Email
From ack's during that date range. Lots of other possibilities with my little nlog Nagios log processor.

Re: comments only show some of the acknowledgements

Posted: Tue Jun 14, 2016 3:34 pm
by jssingh
Oh wow, I forgot about this. :)

Thanks for the log processor!!

Re: comments only show some of the acknowledgements

Posted: Tue Jun 14, 2016 3:57 pm
by eloyd
I only share with those I like. :lol:

Re: comments only show some of the acknowledgements

Posted: Tue Jun 14, 2016 4:28 pm
by tgriep
Thanks eloyd for the information.
jssingh, is is alright to close and lock this post?

Re: comments only show some of the acknowledgements

Posted: Tue Jun 14, 2016 4:31 pm
by jssingh
yes, thanks.

Re: comments only show some of the acknowledgements

Posted: Tue Jun 14, 2016 4:54 pm
by mcapra
Locking this up!