Page 1 of 2

Phantom services at Nagios XI level; not present at Nag CCM

Posted: Wed Aug 05, 2015 10:26 am
by edward.bosco
All -

I have 'phantom' services attached and shown at the Nagios XI level for hosts that I never attached those services. The services and hosts at the Nagios CCM level do not show those services. I have no files in the static or import subdirectories.

On invoking Nagios CCM->Tools->Write Config files, I get warnings that look like this:

- Note that host host1 should not have these services - such as host2.cfg - and are not listed with the hosts or services .cfg files.
- No .cfg files I could find were large enough to have 58 or 37 lines.

[Warning: Duplicate definition found for service 'Validates MWG accepts a normal URL' on host 'Host1' (config file '/usr/local/nagios/etc/services/host2.cfg', starting on line 16)
Warning: Duplicate definition found for service 'Validates MWG blocks a virus / malware URL' on host 'Host1' (config file '/usr/local/nagios/etc/services/host2.cfg', starting on line 58)
Warning: Duplicate definition found for service 'Validates MWG blocks a blocked URL' on host 'Host1' (config file '/usr/local/nagios/etc/services/host2.cfg', starting on line 37)
Warning: Duplicate definition found for service 'Validates MWG accepts a SSH connection' on host 'Host1' (config file '/usr/local/nagios/etc/services/host2.cfg', starting on line 16)
]

This issue developed (I believe) when I imported custom files I created.

I sequentially imported via cfgprep and CCM->Tools->Import Config Files three custom files I wrote from /usr/local/nagios/etc/cfgprep/orig:

These files are now at /usr/local/nagios/etc/cfgprep
- commands.cfg
- hosttemplates.cfg
- servicetemplates.cfg that shows as _empty_host.cfg as cfgprep'd; showtemplates has a 0 file size, and the contents are in _empty_host.cfg

==

What's an appropriate approach to trouble shoot this issue?
And thanks much for your time and insight.

Re: Phantom services at Nagios XI level; not present at Nag

Posted: Wed Aug 05, 2015 2:17 pm
by ssax
Go into the CCM under services and search for the config name of "host2" and edit one of the ones that is giving you the warnings.
- Click on Manage Hosts - is host1 listed in there?
- Click on Manage Hostgroups - if there are hostgroups in there you might want to check them in the CCM to see if host1 is in one of the hostgroups.

Please PM me a copy of your profile, you can download it by going to Admin > System Config > System Profile and click the Download Profile button in the top right corner. It will make it a lot easier to troubleshoot.

Edit: Received profile and placed in shared support directory.

Re: Phantom services at Nagios XI level; not present at Nag

Posted: Fri Aug 07, 2015 12:28 pm
by edward.bosco
Ssax -

Would this recent ticket be relevant?

Marquetteu Nagios Support Ticket #34014 – Services link inconsistency

Re: Phantom services at Nagios XI level; not present at Nag

Posted: Fri Aug 07, 2015 1:42 pm
by ssax
That's unrelated. Please PM me full output of all the warnings with the actual host names so that we can narrow this down.

Re: Phantom services at Nagios XI level; not present at Nag

Posted: Mon Aug 10, 2015 2:56 pm
by edward.bosco
Ssax -

Appreciate the difficulty. I'm getting permission to provide the data; difficult to make sense of it otherwise.

Re: Phantom services at Nagios XI level; not present at Nag

Posted: Tue Aug 11, 2015 9:20 am
by tmcdonald
Please post back once you have sent the requested files.

Re: Phantom services at Nagios XI level; not present at Nag

Posted: Tue Aug 11, 2015 3:54 pm
by edward.bosco
Done.

Re: Phantom services at Nagios XI level; not present at Nag

Posted: Tue Aug 11, 2015 3:57 pm
by tmcdonald
What XI version are you on?

Re: Phantom services at Nagios XI level; not present at Nag

Posted: Wed Aug 12, 2015 7:58 am
by edward.bosco
We're at current.

Latest Available Version: 2014R2.7
Installed Version: 2014R2.7
Last Update Check: 2015-08-11 16:00:02

Re: Phantom services at Nagios XI level; not present at Nag

Posted: Wed Aug 12, 2015 12:18 pm
by tmcdonald
We might want to move this to a remote session, for which a ticket must be opened.

Please email [email protected] with the same subject you used for this post, and in the body please link back to this post.