Nagios XI -import

[SUB]

After import clicking 'Apply Configuration', and fixing check interval, Retry interval, Max check attempts fixed that issue, now checking services folder and make sure everything got imported to

/usr/local/nagios/etc/cfgprep/orig/services folder and Applied configuration and noticed Nagios core was updated with an updated configuration message, but getting some alerts saying the following message, Question is how do I
correct these errors, we are same error getting every hour.


Service State: CRITICAL
Date/Time: Wed Jul 20 09:50:53 EDT 2016
URL:
Comments:
Info:
CHECK_NRPE: Error - Could not complete SSL handshake.

[tgriep]

Is this a new server that is replacing another server?
If so, you will have to add the IP address of the XI server in to the allowed hosts on the remote system.
What type of system is the it?

[SUB]

Yes, This is my New VMware server that got installed Nagios XI, imported all config files from our old Nagios server.

[ssax]

More than likely you need to edit the remote hosts /etc/xinetd.d/nrpe file and add the new IP of your server to the only_from directive and restart xinetd:

Code: Select all

service xinetd restart

If you're not running NRPE with xinetd but in daemon mode, you would edit your /usr/local/nagios/etc/nrpe.cfg and add the IP to your allowed_hosts line and restart the NRPE daemon.

Edit: I should note that in /etc/xinetd.d/nrpe you would separate the IPs by a space:

Code: Select all

only_from       = 192.168.4.124 192.168.4.184 192.168.4.34

but in the nrpe.cfg they are separated with commas:
- Note that this line is ignored if you're running it with xinetd.

Code: Select all

allowed_hosts=192.168.4.124,192.168.4.184,192.168.4.34

[SUB]

Thank you, Sorry for late reply. checked one of our my remote hosts as follows, but I didn't notice /etc/xinetd.d/nrpe file, not sure this is an issue.
but on remote hosts nrpe agents are running, but still getting " CHECK_NRPE: Error - Could not complete SSL handshake" message on all of remote hosts.

checked below on our remote hosts as follows,

amradwlXX xinetd.d]# ls
chargen-dgram daytime-stream echo-dgram tcpmux-server
chargen-stream discard-dgram echo-stream time-dgram
daytime-dgram discard-stream rsync time-stream

@amradwlXX xinetd.d]# ps -ef |grep -i nrpe
nobody 2757 1 0 2015 ? 00:32:47 /usr/local/nagios/nrpe/bin/nrpe -c /usr/local/nagios/nrpe/etc/nrpe.cfg -d
root 30467 30098 0 11:07 pts/3 00:00:00 grep -i nrpe
You have new mail in /var/spool/mail/root

Restarted xinetd on Nagios server and will monitor and let you know.

[ssax]

If you are seeing nrpe running in your ps output then you will need to edit the /usr/local/nagios/nrpe/etc/nrpe.cfg file and change the allowed_hosts option since it's not running under xinetd:

Code: Select all

allowed_hosts=192.168.4.124,192.168.4.184,192.168.4.34

Then you would restart the nrpe service (maybe service nrpe restart? I'm not sure how you're starting it).

[SUB]

Thanks, After I have made entries on /usr/local/nagios/nrpe/etc/nrpe.cfg - Allowed_hosts:IP,IP,IP's and restarted nrpe, but still getting error messages,

Host State: UP
Service State: CRITICAL
Date/Time: Mon Aug 22 11:16:56 EDT 2016
URL:
Comments:
Info:
CHECK_NRPE: Error - Could not complete SSL handshake

[rkennedy]

On the client machine, what do you see in /var/log/messages? This should help us to debug why it's failing.