Page 1 of 2

Where unkown NRDP checks show up?

Posted: Wed Aug 03, 2016 11:51 am
by vmesquita
Hello,

I am trying to test NRDP. I have configured everything and and when I send a check on the web interface I get this response:

Code: Select all

<result>
<status>0</status>
<message>OK</message>
<meta>
<output>2 checks processed.</output>
</meta>
</result>
However the check doesn't show up on Unconfigured Objects... Is it supposed to show up there or am I looking on the wrong place? I also don't see them in /va/rlog/messages, but I am not sure it is supposed to be there like the passive checks from NSCA.

Re: Where unkown NRDP checks show up?

Posted: Wed Aug 03, 2016 1:40 pm
by lmiltchev
My check data output looks different when I submit check data in the web UI...

Code: Select all

<?xml version='1.0'?> 
<checkresults>
	<checkresult type='host'>
		<hostname>somehost</hostname>
		<state>0</state>
		<output>Everything looks okay!|perfdata</output>
	</checkresult>
	<checkresult type='service'>
		<hostname>somehost</hostname>
		<servicename>someservice</servicename>
		<state>1</state>
		<output>WARNING: Danger Will Robinson!|perfdata</output>
	</checkresult>
</checkresults>
What is the Nagios XI version, that you are currently using? Run the following commands, and show the output:

Code: Select all

ll -d /usr/local/nagiosxi/var
ll /usr/local/nagiosxi/var/corelog.newobjects
cat /usr/local/nagiosxi/var/corelog.newobjects
Is the listener for unconfigured objects enabled in XI?

Admin->Performance Settings->Subsystem tab

Re: Where unkown NRDP checks show up?

Posted: Wed Aug 03, 2016 4:18 pm
by vmesquita
Hi Lmiltchev,
lmiltchev wrote:My check data output looks different when I submit check data in the web UI...

Code: Select all

<?xml version='1.0'?> 
<checkresults>
	<checkresult type='host'>
		<hostname>somehost</hostname>
		<state>0</state>
		<output>Everything looks okay!|perfdata</output>
	</checkresult>
	<checkresult type='service'>
		<hostname>somehost</hostname>
		<servicename>someservice</servicename>
		<state>1</state>
		<output>WARNING: Danger Will Robinson!|perfdata</output>
	</checkresult>
</checkresults>
Actually it looks like this to me before I submit the check... After submiting, it looks like I showed before.
What is the Nagios XI version, that you are currently using?
Nagios XI 5.2.9
Run the following commands, and show the output:

Code: Select all

[root@nagios ~]# ll -d /usr/local/nagiosxi/var
drwxr-xr-x. 5 nagios nagios 4096 Aug  3 18:15 /usr/local/nagiosxi/var
[root@nagios ~]# ll /usr/local/nagiosxi/var/corelog.newobjects
-rwxrwxr-x. 1 nagios nagios 1537 Aug  3 18:01 /usr/local/nagiosxi/var/corelog.newobjects
[root@nagios ~]# cat /usr/local/nagiosxi/var/corelog.newobjects
a:10:{s:14:"vb154.selic.bc";a:2:{s:9:"last_seen";i:1470258061;s:8:"services";a:1:{s:20:"check_rsync_jboss_dc";i:1470258061;}}s:14:"va154.selic.bc";a:2:{s:9:"last_seen";i:1470258061;s:8:"services";a:1:{s:20:"check_rsync_jboss_dc";i:1470258061;}}s:14:"vx574.selic.bc";a:4:{s:9:"last_seen";i:1470254561;s:8:"services";a:1:{s:13:"DW_MENSAGERIA";i:1470254561;}s:15:"hidden_services";N;s:8:"hide_all";b:0;}s:5:"va157";a:4:{s:9:"last_seen";i:1470254461;s:8:"services";a:1:{s:10:"SNMP Traps";i:1470254461;}s:15:"hidden_services";N;s:8:"hide_all";b:0;}s:5:"vb157";a:4:{s:9:"last_seen";i:1470254421;s:8:"services";a:1:{s:10:"SNMP Traps";i:1470254421;}s:15:"hidden_services";N;s:8:"hide_all";b:0;}s:5:"vx257";a:4:{s:9:"last_seen";i:1470254321;s:8:"services";a:1:{s:10:"SNMP Traps";i:1470254321;}s:15:"hidden_services";N;s:8:"hide_all";b:0;}s:12:"172.27.192.1";a:4:{s:9:"last_seen";i:1470253170;s:8:"services";a:1:{s:10:"SNMP Traps";i:1470253170;}s:15:"hidden_services";N;s:8:"hide_all";b:0;}s:14:"vb100.selic.bc";a:4:{s:9:"last_seen";i:1470239142;s:8:"services";a:1:{s:9:"Yadayada2";i:1470239142;}s:15:"hidden_services";a:1:{i:0;s:9:"Yadayada2";}s:8:"hide_all";b:0;}s:14:"va100.selic.bc";a:4:{s:9:"last_seen";i:1470239041;s:8:"services";a:2:{s:8:"Yadayada";i:1470239041;i:5;i:1470238541;}s:15:"hidden_services";a:2:{i:0;s:1:"5";i:1;s:8:"Yadayada";}s:8:"hide_all";b:0;}s:14:"va213.selic.bc";a:4:{s:9:"last_seen";i:1470238321;s:8:"services";a:1:{s:10:"FILE_TESTE";i:1470238321;}s:15:"hidden_services";a:1:{i:0;s:10:"FILE_TESTE";}s:8:"hide_all";b:0;}}
Is the listener for unconfigured objects enabled in XI?

Admin->Performance Settings->Subsystem tab
Yes, I just checked. Also NSCA and SNMP traps are working fine.

Re: Where unkown NRDP checks show up?

Posted: Wed Aug 03, 2016 4:37 pm
by ssax
Run this command:

Code: Select all

tail -f /usr/local/nagiosxi/var/feedproc.log
Then submit them again and send us the output from the tail command (may take a minute or so to show up)

Also, check your /var/log/cron and send the output of these commands:

Code: Select all

grep feedproc /etc/cron.d/nagiosxi
chage -l nagios
ipcs -q
ps aux |grep nagios.cfg
Thank you

Re: Where unkown NRDP checks show up?

Posted: Wed Aug 03, 2016 4:52 pm
by vmesquita
The results are below:

Code: Select all

[root@nagios ~]# tail -f /usr/local/nagiosxi/var/feedproc.log
..
PROCESSED 0 COMMANDS
tail: /usr/local/nagiosxi/var/feedproc.log: file truncated
.
PROCESSED 0 COMMANDS

Code: Select all

[root@nagios ~]# grep feedproc /etc/cron.d/nagiosxi
*   * * * * nagios /usr/bin/php -q /usr/local/nagiosxi/cron/feedproc.php > /usr/local/nagiosxi/var/feedproc.log 2>&1
[root@nagios ~]# chage -l nagios
Last password change                                    : Mar 24, 2014
Password expires                                        : never
Password inactive                                       : never
Account expires                                         : never
Minimum number of days between password change          : 0
Maximum number of days between password change          : 99999
Number of days of warning before password expires       : 7
[root@nagios ~]# ipcs -q

------ Message Queues --------
key        msqid      owner      perms      used-bytes   messages
0xea000002 196608     nagios     600        0            0

[root@nagios ~]# ps aux |grep nagios.cfg
nagios   22192  1.0  0.1  56304 31356 ?        Ss   17:01   1:13 /usr/local/nagios/bin/nagios -d /usr/local/nagios/etc/nagios.cfg
nagios   22230  0.0  0.0  55764  7560 ?        S    17:01   0:00 /usr/local/nagios/bin/nagios -d /usr/local/nagios/etc/nagios.cfg
root     25214  0.0  0.0 103312   912 pts/0    S+   18:51   0:00 grep nagios.cfg
[root@nagios ~]#

Re: Where unkown NRDP checks show up?

Posted: Thu Aug 04, 2016 9:24 am
by ssax
That looks fine, please run this command:

Code: Select all

service crond stop
Then submit a few of them and run these commands and see if any output is generated:

Code: Select all

su - nagios
/usr/bin/php /usr/local/nagiosxi/cron/feedproc.php
When you are done, start the cron service back up:

Code: Select all

service crond start

Thank you

Re: Where unkown NRDP checks show up?

Posted: Thu Aug 04, 2016 10:34 am
by vmesquita
Hi Sean!

Still no output:

Code: Select all

[root@nagios ~]# service crond stop
Stopping crond:                                            [  OK  ]
[root@nagios ~]# su - nagios
-bash-4.1$ /usr/bin/php /usr/local/nagiosxi/cron/feedproc.php
...
PROCESSED 0 COMMANDS
-bash-4.1$ service crond start
User has insufficient privilege.
-bash-4.1$ ^Crvice crond start
-bash-4.1$ exit
logout
[root@nagios ~]# service crond start
Starting crond:                                            [  OK  ]

Re: Where unkown NRDP checks show up?

Posted: Thu Aug 04, 2016 4:49 pm
by tgriep
Can you provide a screen capture of how you ran the check?
If a new host was used, it would show up in the unconfigured objects but an existing one wont show up in the log.

Re: Where unkown NRDP checks show up?

Posted: Fri Aug 05, 2016 10:19 am
by vmesquita
Hi tgriep,


I am attaching the screenshot of before and after the check is sent. I tried both with a random new host and a existing one.

Re: Where unkown NRDP checks show up?

Posted: Fri Aug 05, 2016 12:33 pm
by scottwilkerson
Can you also confirm that apache is part of the nagios group

Code: Select all

cat /etc/group|grep nag