Nagios Core 3 - Log Description

[nino.novak]

Can somebody please send me a link on doc where I can find a description of this logs or post some description of its:
CURRENT HOST STATE
CURRENT SERVICE STATE
EXTERNAL COMMAND
HOST ALERT
HOST NOTIFICATION
LOG ROTATION
LOG VERSION
SERVICE ALERT
SERVICE EVENT HANDLER

I found something (https://exchange.nagios.org/directory/D ... ns/details) but that page has a recursion and I can not access to the docs.

[tmcdonald]

The link you posted should be working now, we had some issues with our main content site.

In regards to your post, those are not exactly logs, they are just various terms we use in some of our documentation. I'm not sure where you found that list, but if you could expand a bit on what you are looking to do it would help us a lot in getting you an answer.

[nino.novak]

Great, but in this document are just Log locations. Do you have descriptions of:
CURRENT HOST STATE
CURRENT SERVICE STATE
EXTERNAL COMMAND
HOST ALERT
HOST NOTIFICATION
LOG ROTATION
LOG VERSION
SERVICE ALERT
SERVICE EVENT HANDLER
Somebody?

[tmcdonald]

A lot of these are fairly self-explanitory:

CURRENT HOST STATE = Current state of a host (Up, Down, Unreachable)
CURRENT SERVICE STATE = Current state of a service (OK, Warning, Critical, Unknown)
EXTERNAL COMMAND = External commands are used to submit commands to the Nagios system (submit a check result, disable notifications, etc.)
HOST ALERT = An alert (notification) for a host
HOST NOTIFICATION = Basically the same as an alert
LOG ROTATION = Log rotation is when you keep a log file from getting too large by starting a new file once the current one has gotten to a certain size
LOG VERSION = I am not sure what this would mean in this context
SERVICE ALERT = Like a host alert, but for a service

Again, it would help to know where you found these terms so we can have some context for providing answers.

[nino.novak]

I found that in /usr/local/netsaint/var/archives/

[1448838000] LOG ROTATION: DAILY
[1448838000] LOG VERSION: 2.0
[1448838000] CURRENT HOST STATE: Alertme-api;UP;HARD;1;PING OK - Packet loss = 0%, RTA = 1.05 ms
[1448838000] CURRENT HOST STATE: Alertme-api1;UP;HARD;1;PING OK - Packet loss = 0%, RTA = 1.16 ms
[1448838000] CURRENT HOST STATE: Alertme-api2;UP;HARD;1;PING OK - Packet loss = 0%, RTA = 1.08
.... (Just for Current Host State)
[1448838000] CURRENT SERVICE STATE: Alertme-api;Website - Port 443;OK;HARD;1;HTTP OK: HTTP/1.1 200 OK - 2000 bytes in 0.025 second response time
[1448838000] CURRENT SERVICE STATE: Alertme-api1;Ping test;OK;HARD;1;OK - 195.1.1.1: rta 0.937ms, lost 0%
[1448838000] CURRENT SERVICE STATE: Alertme-api1;Website - Port 443;OK;HARD;1;HTTP OK: HTTP/1.1 200 OK - 2000 bytes in 0.024 second response time
[1448838000] CURRENT SERVICE STATE: Alertme-api2;Ping test;OK;HARD;1;OK - 195.1.1.1: rta 0.850ms, lost 0%
.... (Just for Current Service State)
[1448838001] Auto-save of retention data completed successfully.
[1448841601] Auto-save of retention data completed successfully.
[1448845201] Auto-save of retention data completed successfully.
[1448848801] Auto-save of retention data completed successfully.
[1448851201] SERVICE ALERT: pbx;PING;WARNING;SOFT;1;PING WARNING - Packet loss = 28%, RTA = 4.92 ms
[1448851201] SERVICE EVENT HANDLER: pbx;PING;WARNING;SOFT;1;send-trap
[1448851253] SERVICE ALERT: pbx;PING;OK;SOFT;2;PING OK - Packet loss = 0%, RTA = 4.87 ms
[1448851253] SERVICE EVENT HANDLER: pbx;PING;OK;SOFT;2;send-trap
....
[1448874426] EXTERNAL COMMAND: ENABLE_SVC_NOTIFICATIONS;imenik;SSL Certificate
...
[1448881531] SERVICE ALERT: dd1;HTTP;CRITICAL;SOFT;1;CRITICAL - Socket timeout after 10 seconds
[1448881531] SERVICE EVENT HANDLER: dd1;HTTP;CRITICAL;SOFT;1;send-trap
[1448881581] SERVICE ALERT: dd1;HTTP;OK;SOFT;2;HTTP OK: HTTP/1.1 301 Moved Permanently - 410 bytes in 0.003 second response time
[1448881581] SERVICE EVENT HANDLER: dd1;HTTP;OK;SOFT;2;send-trap
[1448882181] SERVICE ALERT: dd1;HTTP;CRITICAL;SOFT;1;Connection refused
[1448882181] SERVICE EVENT HANDLER: dd1;HTTP;CRITICAL;SOFT;1;send-trap
[1448882201] HOST ALERT: dd1;DOWN;HARD;1;PING CRITICAL - Packet loss = 100%
[1448882201] HOST NOTIFICATION: dezurni;dd1;DOWN;host-notify-by-sms;PING CRITICAL - Packet loss = 100%

Can you please explain why Current Host State is everywhere on begining of the file, and on the end of the file are Service Alerts and Hosts Alerts.
Better name for Current Host State is Start Host State?

[tmcdonald]

Okay, it makes much more sense in this context. Yes, "START STATE" might be more clear but I think given the location in the logs it can be inferred what is meant. The alerts later on indicate that a host or service was checked and found to be in a non-OK state.