show only most recent event

[_asp_]

Hi,

I want to visualize the status of a server (up / down)
From the event series I would only like to see the current / most recent status in my dashboard?

How do I do that?

Thanks,
Andreas

[eloyd]

The dashboard does not allow you to limit based on number of occurrences, but it does allow you to limit based on time. However, using Nagios Log Server for this purpose is like using a hammer to put in screws - it will work, but it is the wrong tool. You might want to look into Nagios Core or Nagios XI to determine the current state of a server. Nagios Log Server can only tell you what was in a system log, which may not reflect the current state of a machine.

[_asp_]

it will work, but it is the wrong tool

and how can it work? We do not want to use an additional tool. the server is up / down is just a simple example. The probes may be much more complex, based on data parsed and aggregated from logs.
I would like to create one single dashboard, where we can see some histograms and some absolute / most recent status

[eloyd]

Log server looks at logs. Meaning, it looks at something generated by a system or an application or a security event, and puts it into a searchable index. You can then query that index for things that match your criteria and display the results in tabular or graphic form on dashboards. At no time is Log Server determining the state of something NOW. It only shows you what was sent to it from whatever it was that generated the log entry.

It is designed to search for, and display, events matching criteria such as time, source, and fields that are matched against the text that was sent to it. Something as "simple" as whether or not a server is up or down is really beyond what NLS is designed for specifically, though you could use it as such to some degree, to look for text that usually precedes a system crash in a system log file. But even that's not 100% positive.

If you're looking for a tool to determine if servers are up or down or applications are responding properly or network devices are working, then NLS is the wrong tool. Nagios Core or Nagios XI is a monitoring tool designed specifically for that purpose, and would be much better.

However, if you insist on using NLS to monitor server states and so forth, I know of no way to create a dashboard that only shows the most recent event.

[rkennedy]

Log server looks at logs. Meaning, it looks at something generated by a system or an application or a security event, and puts it into a searchable index. You can then query that index for things that match your criteria and display the results in tabular or graphic form on dashboards. At no time is Log Server determining the state of something NOW. It only shows you what was sent to it from whatever it was that generated the log entry.

It is designed to search for, and display, events matching criteria such as time, source, and fields that are matched against the text that was sent to it. Something as "simple" as whether or not a server is up or down is really beyond what NLS is designed for specifically, though you could use it as such to some degree, to look for text that usually precedes a system crash in a system log file. But even that's not 100% positive.

If you're looking for a tool to determine if servers are up or down or applications are responding properly or network devices are working, then NLS is the wrong tool. Nagios Core or Nagios XI is a monitoring tool designed specifically for that purpose, and would be much better.

However, if you insist on using NLS to monitor server states and so forth, I know of no way to create a dashboard that only shows the most recent event.

Thanks @eloyd! This pretty much sums it up. You would need to use Core or XI to accomplish this. The other option, is writing an application that spits all of the information you're looking for into NLS.