NRPE:Unable to read output

[bsivavani]

Hi Support,

I am receiving below error with critical severity. Also attached screenshot.
NRPE:Unable to read output

Please let us know is there any way to change severity of alert.

[lmiltchev]

This error could be caused by incorrect path to plugins or NRPE not being properly installed...

Can you show us the actual check run from the command line along with the output of it? Also, show us how the command is defined on the client (remote machine).

On the remote box, run the command below, and show the output:

Code: Select all

find / -name nrpe

[bsivavani]

Hi Support,

I am able to see data for remaining services. I would like to know how to change severity from CRITICAL to UNKNOWN.

[lmiltchev]

It is very strange you are getting critical. It should be "UNKNOWN". Can you run the actual command from the command line, and check the output status?

Code: Select all

/usr/local/nagios/libexec/check_nrpe -H <remote ip> -c <command> -a <args>
echo $?

What is the version of Nagios XI that you are currently running?

[bsivavani]

Here is output.

[nagios@XXXX root]$ /usr/local/nagios/libexec/check_nrpe -H s930l3085.rwe.com -t 120 -c check_init_service -a 'cron'
NRPE: Unable to read output
[nagios@XXXX root]$
[nagios@XXXX root]$ echo $?
2
[nagios@XXXX root]$

[bsivavani]

We are using Nagios XI 5.2.5.

[lmiltchev]

I see. Well, one way to change the status is to use the negate plugin. You can create a custom command, for example:

Code: Select all

define command {
       command_name                  		negate_cron
       command_line                  		$USER1$/negate -c UNKNOWN $USER1$/check_nrpe -H $HOSTADDRESS$  -t 120 -c $ARG1$ $ARG2$
}

Then, you can modify your service to use this command, for example:

Code: Select all

define service {
	host_name			<host name>
	service_description		<service description>
	use				xiwizard_nrpe_service
	check_command			negate_cron!check_init_service!-a 'cron'!!!!!!
	...
	}

Save, and apply configuration. Schedule an immediate forced check. You will see something like this:

example01.PNG

Read more about the negate plugin here:
https://assets.nagios.com/downloads/nag ... ios-XI.pdf

BTW, what is the actual service name - "cron" or "crond"? What is the output of the following command?

Code: Select all

/usr/local/nagios/libexec/check_nrpe -H s930l3085.rwe.com -t 120 -c check_init_service -a 'crond'

You should try fixing the problem (if possible) before trying to negate the status output.

Hope this helps.

[bsivavani]

My actual query is if any server reboot/shutdown we generally receives host unreachable alert and service related errors like connection refused errors,unable to read output,255 out of bounds etc... that's fine.

But we need service related errors to be suppressed or UNKNOWN to avoid notification/incident creation. Host related error (Host unreachable) is enough for incident creation.

Please let us know if there is any option to achieve this.

[tgriep]

On your remote server called s930l3085.rwe.com, can you login as root, run the following commands and post the output?

Code: Select all

netstat -an |grep 5666
ps -ef
find / -name nrpe.cfg

What is the operating system and version the remote server is running?

[bsivavani]

[nagios@XXXX ~]$ netstat -an |grep 5666
tcp 0 0 :::5666 :::* LISTEN
[nagios@XXXX ~]$ ps -ef
UID PID PPID C STIME TTY TIME CMD
root 1 0 0 Mar11 ? 00:00:02 /sbin/init
root 2 0 0 Mar11 ? 00:00:00 [kthreadd]
root 3 2 0 Mar11 ? 00:00:12 [migration/0]
root 4 2 0 Mar11 ? 00:00:05 [ksoftirqd/0]
root 5 2 0 Mar11 ? 00:00:00 [stopper/0]
root 6 2 0 Mar11 ? 00:00:04 [watchdog/0]
root 7 2 0 Mar11 ? 00:00:08 [migration/1]
root 8 2 0 Mar11 ? 00:00:00 [stopper/1]
root 9 2 0 Mar11 ? 00:00:04 [ksoftirqd/1]
root 10 2 0 Mar11 ? 00:00:03 [watchdog/1]
root 11 2 0 Mar11 ? 00:02:13 [events/0]
root 12 2 0 Mar11 ? 00:25:52 [events/1]
root 13 2 0 Mar11 ? 00:00:00 [events/0]
root 14 2 0 Mar11 ? 00:00:00 [events/1]
root 15 2 0 Mar11 ? 00:00:00 [events_long/0]
root 16 2 0 Mar11 ? 00:00:00 [events_long/1]
root 17 2 0 Mar11 ? 00:00:00 [events_power_ef]
root 18 2 0 Mar11 ? 00:00:00 [events_power_ef]
root 19 2 0 Mar11 ? 00:00:00 [cgroup]
root 20 2 0 Mar11 ? 00:00:00 [khelper]
root 21 2 0 Mar11 ? 00:00:00 [netns]
root 22 2 0 Mar11 ? 00:00:00 [async/mgr]
root 23 2 0 Mar11 ? 00:00:00 [pm]
root 24 2 0 Mar11 ? 00:00:13 [sync_supers]
root 25 2 0 Mar11 ? 00:00:16 [bdi-default]
root 26 2 0 Mar11 ? 00:00:00 [kintegrityd/0]
root 27 2 0 Mar11 ? 00:00:00 [kintegrityd/1]
root 28 2 0 Mar11 ? 00:00:02 [kblockd/0]
root 29 2 0 Mar11 ? 00:01:00 [kblockd/1]
root 30 2 0 Mar11 ? 00:00:00 [kacpid]
root 31 2 0 Mar11 ? 00:00:00 [kacpi_notify]
root 32 2 0 Mar11 ? 00:00:00 [kacpi_hotplug]
root 33 2 0 Mar11 ? 00:00:00 [ata_aux]
root 34 2 0 Mar11 ? 00:00:00 [ata_sff/0]
root 35 2 0 Mar11 ? 00:00:00 [ata_sff/1]
root 36 2 0 Mar11 ? 00:00:00 [ksuspend_usbd]
root 37 2 0 Mar11 ? 00:00:00 [khubd]
root 38 2 0 Mar11 ? 00:00:00 [kseriod]
root 39 2 0 Mar11 ? 00:00:00 [md/0]
root 40 2 0 Mar11 ? 00:00:00 [md/1]
root 41 2 0 Mar11 ? 00:00:00 [md_misc/0]
root 42 2 0 Mar11 ? 00:00:00 [md_misc/1]
root 43 2 0 Mar11 ? 00:00:00 [linkwatch]
root 45 2 0 Mar11 ? 00:00:01 [khungtaskd]
root 46 2 0 Mar11 ? 00:00:00 [kswapd0]
root 47 2 0 Mar11 ? 00:00:00 [ksmd]
root 48 2 0 Mar11 ? 00:00:08 [khugepaged]
root 49 2 0 Mar11 ? 00:00:00 [aio/0]
root 50 2 0 Mar11 ? 00:00:00 [aio/1]
root 51 2 0 Mar11 ? 00:00:00 [crypto/0]
root 52 2 0 Mar11 ? 00:00:00 [crypto/1]
root 59 2 0 Mar11 ? 00:00:00 [kthrotld/0]
root 60 2 0 Mar11 ? 00:00:00 [kthrotld/1]
root 61 2 0 Mar11 ? 00:00:00 [pciehpd]
root 63 2 0 Mar11 ? 00:00:00 [kpsmoused]
root 64 2 0 Mar11 ? 00:00:00 [usbhid_resumer]
root 65 2 0 Mar11 ? 00:00:00 [deferwq]
root 98 2 0 Mar11 ? 00:00:00 [kdmremove]
root 99 2 0 Mar11 ? 00:00:00 [kstriped]
root 251 2 0 Mar11 ? 00:01:11 [mpt_poll_0]
root 252 2 0 Mar11 ? 00:00:00 [mpt/0]
root 256 2 0 Mar11 ? 00:00:00 [scsi_eh_0]
root 257 2 0 Mar11 ? 00:01:06 [mpt_poll_1]
root 258 2 0 Mar11 ? 00:00:00 [mpt/1]
root 259 2 0 Mar11 ? 00:00:00 [scsi_eh_1]
root 290 2 0 Mar11 ? 00:00:00 [scsi_eh_2]
root 291 2 0 Mar11 ? 00:00:00 [scsi_eh_3]
root 592 2 0 Mar11 ? 00:00:00 [kdmflush]
root 594 2 0 Mar11 ? 00:00:00 [kdmflush]
root 665 2 0 Mar11 ? 00:03:21 [jbd2/dm-0-8]
root 666 2 0 Mar11 ? 00:00:00 [ext4-dio-unwrit]
root 760 1 0 Mar11 ? 00:00:00 /sbin/udevd -d
root 974 2 0 Mar11 ? 00:01:22 [vmmemctl]
root 1027 2 0 Mar11 ? 00:00:40 [flush-253:0]
root 1348 2 0 Mar11 ? 00:00:00 [kdmflush]
root 1354 2 0 Mar11 ? 00:00:00 [kdmflush]
root 1397 2 0 Mar11 ? 00:00:00 [jbd2/dm-3-8]
root 1398 2 0 Mar11 ? 00:00:00 [ext4-dio-unwrit]
root 1473 2 0 Mar11 ? 00:00:09 [kauditd]
root 1706 1 0 Mar11 ? 00:00:31 auditd
root 1728 1 0 Mar11 ? 00:00:54 /sbin/rsyslogd -i /var/run/syslogd.pid -c 5
root 1762 1 0 Mar11 ? 00:09:53 irqbalance --pid=/var/run/irqbalance.pid
rpc 1780 1 0 Mar11 ? 00:00:04 rpcbind
rpcuser 1802 1 0 Mar11 ? 00:00:00 rpc.statd
root 1841 1 0 Mar11 ? 00:01:27 /var/itlm/tlmagent.bin
dbus 1857 1 0 Mar11 ? 00:00:00 dbus-daemon --system
root 1885 1 0 Mar11 ? 00:13:45 /opt/quest/sbin/.vasd -p /var/opt/quest/vas/vasd/.vasd.pid
daemon 1898 1885 0 Mar11 ? 00:16:52 /opt/quest/sbin/.vasd -p /var/opt/quest/vas/vasd/.vasd.pid
daemon 1899 1898 0 Mar11 ? 00:43:32 /opt/quest/sbin/.vasd -p /var/opt/quest/vas/vasd/.vasd.pid
daemon 1900 1898 0 Mar11 ? 00:02:52 /opt/quest/sbin/.vasd -p /var/opt/quest/vas/vasd/.vasd.pid
root 1959 2 0 Mar11 ? 00:00:00 [rpciod/0]
root 1960 2 0 Mar11 ? 00:00:07 [rpciod/1]
root 1964 2 0 Mar11 ? 00:00:00 [kslowd000]
root 1965 2 0 Mar11 ? 00:00:00 [kslowd001]
root 1966 2 0 Mar11 ? 00:00:00 [nfsiod]
root 1967 2 0 Mar11 ? 00:00:00 [lockd]
root 1978 1 0 Mar11 ? 00:00:00 /usr/sbin/acpid
68 2007 1 0 Mar11 ? 00:00:21 hald
root 2008 2007 0 Mar11 ? 00:00:00 hald-runner
root 2041 2008 0 Mar11 ? 00:00:00 hald-addon-input: Listening on /dev/input/event2 /dev/input/event0
68 2057 2008 0 Mar11 ? 00:00:00 hald-addon-acpi: listening on acpid socket /var/run/acpid.socket
root 2252 1 0 Mar11 ? 00:00:00 /opt/quest/sbin/sshd
ntp 2262 1 0 Mar11 ? 00:03:05 ntpd -u ntp:ntp -p /var/run/ntpd.pid -x
root 2341 1 0 Mar11 ? 00:00:17 /usr/libexec/postfix/master
postfix 2355 2341 0 Mar11 ? 00:00:03 qmgr -l -t fifo -u
root 2370 1 0 Mar11 ? 00:00:00 /usr/sbin/abrtd
root 2397 1 0 Mar11 ? 00:00:00 /usr/sbin/atd
root 2410 1 0 Mar11 tty1 00:00:00 /sbin/mingetty /dev/tty1
root 2412 1 0 Mar11 tty2 00:00:00 /sbin/mingetty /dev/tty2
root 2414 1 0 Mar11 tty3 00:00:00 /sbin/mingetty /dev/tty3
root 2416 1 0 Mar11 tty4 00:00:00 /sbin/mingetty /dev/tty4
root 2418 1 0 Mar11 tty5 00:00:00 /sbin/mingetty /dev/tty5
root 2420 1 0 Mar11 tty6 00:00:00 /sbin/mingetty /dev/tty6
root 16238 2 0 Mar18 ? 00:00:00 [loop0]
root 30148 2252 0 Apr05 ? 00:00:00 sshd: UI744316 [priv]
ui744316 30150 30148 0 Apr05 ? 00:00:01 sshd: ui744316@pts/1
ui744316 30151 30150 0 Apr05 pts/1 00:00:00 -ksh
root 32559 1 0 Mar23 ? 00:00:32 xinetd -stayalive -pidfile /var/run/xinetd.pid
root 33383 760 0 Apr04 ? 00:00:00 /sbin/udevd -d
daemon 37513 1898 0 Apr06 ? 00:00:00 /opt/quest/sbin/.vasd -p /var/opt/quest/vas/vasd/.vasd.pid
root 45724 760 0 Apr03 ? 00:00:00 /sbin/udevd -d
root 56902 2252 0 Apr04 ? 00:00:00 sshd: ui707119 [priv]
ui707119 56904 56902 0 Apr04 ? 00:00:02 sshd: ui707119@pts/0
ui707119 56905 56904 0 Apr04 pts/0 00:00:00 -ksh
root 56914 56905 0 Apr04 pts/0 00:00:00 sudo su -
root 56915 56914 0 Apr04 pts/0 00:00:00 su -
root 56916 56915 0 Apr04 pts/0 00:00:00 -bash
postfix 60094 2341 0 11:27 ? 00:00:00 pickup -l -t fifo -u
root 62330 2252 0 12:38 ? 00:00:00 sshd: GROUP\\ui516428 [priv]
ui516428 62332 62330 0 12:39 ? 00:00:00 sshd: ui516428@pts/2
ui516428 62333 62332 0 12:39 pts/2 00:00:00 -ksh
root 62342 2 0 12:39 ? 00:00:00 [flush-253:3]
ui516428 62343 62333 0 12:39 pts/2 00:00:00 bash
root 62356 62343 0 12:39 pts/2 00:00:00 sudo su -
root 62357 62356 0 12:39 pts/2 00:00:00 su -
root 62358 62357 0 12:39 pts/2 00:00:00 -bash
root 62376 62358 0 12:39 pts/2 00:00:00 su nagios
nagios 62377 62376 0 12:39 pts/2 00:00:00 bash
nagios 62402 62377 1 12:40 pts/2 00:00:00 ps -ef
[nagios@XXXX ~]$

---------------------------------------
[nagios@XXXX ~]$ locate nrpe.cfg
/usr/local/nagios/etc/nrpe.cfg
[nagios@XXXX ~]$

--------------------------------------
[nagios@XXXX ~]$ cat /etc/redhat-release
CentOS release 6.7 (Final)
[nagios@XXXX ~]$