Nagios Support Forum

Dear Team,

We observed that our Nagios XI set up was upgraded recently, would like to the user ID through which it got upgraded. We verified the upgrade log and didn't find any user id in it, is there any other log file where can I get this(User ID ), unfortunately we are having more than 15 users with admin privileges.

-Mohan

nagios does not update itself. It must be executed as an upgrade procedure from the command line. You would have to look at your Unix accounting logs to find out what commands were typed by which person to determine who issued the upgrade command. This is not something nagios keeps track of.

Stat with the "lastcomm" command and check for each of your users with root access to see which one became root and executed the upgrade.

Thanks Eric. That's on point.

Perhaps someone upgraded through the Web Interface?

True, in which case the /var/log/httpd/access.log would have a mention of "/nagiosxi/admin/updates.php" in the log file, along with the IP address of the computer that initiated it.

steelwedge, did eloyd answer your question?

Thank you all, I am able to find the user ID who did the upgrade using web interface in the access log files in the below location.

/var/log/httpd

Glad to be of help.

Thank you all, I am able to find the user ID who did the upgrade using web interface in the access log files in the below location.

Great! I am glad your issue has been resolved! I am locking this topic.