Bring Nagios Log Server forward.
Posted: Fri Nov 25, 2016 4:28 pm
I feel there are several things needed to advance Nagios Log Server outlined below:
1.) Incorporate latest technologies:
a.) Latest stable ELK stack (5.0.1)
b.) Latest PHP 7 stack.
c.) Postfix over Sendmail.
2.) Provide detailed instructions OR FIX INSTALL SCRIPT for installation on Enterprise-grade OS/systems. (Are you really going to run a central-logging solution on un-hardened servers or a desktop OS?)
(Current NLS install script does not work on hardened systems with SEL, DoD STIG'd, etc.
NLS does not work correctly after install because of SEL permissions/ACLs on /usr/local/nagioslogserver directories presumably.)
a.) CentOS 7 / RHEL7 with SELinux enabled.
b.) SLES with SEL / AppArmor configured.
c.) Install script on CentOS7/RHEL7 should recognize latest software versions and not try to re-install old/outdated packages.
(i.e: CentOS7 with PHP 5.6 installed, the install script tries to install PHP 5.4, the way-out-dated default from CentOS/RH.)
3.) Provide actual administrator guides to NLS. Not the "dumbed-down" end-user guide that gives no details to what is happening on the system, or what to do if "click here" doesn't work.
a.) Explain the contents/purpose of each directory tree and what processes/user accounts need access to them. (/usr/local/nagioslogserver; /store; /var/www/html/nagioslogserver; &etc.
b.) Please explain how to set the most restrictive permissions, etc. on each directory, etc. (This should be set by default with the installation script.)
c.) Provide "sizing/capacity" recommendations for deployments. (i.e.: [Not an actual answer] For 50,000,000 entries per second with 1yr log retention, you should have an 8-node NLS cluster of 8GB/2CPU/2TB CentOS 7/RHEL7 64-bit each.)
All of the above facilitates deployment in commercial deployments, as well as supporting them in enterprise-wide deployments.
Thank you.
1.) Incorporate latest technologies:
a.) Latest stable ELK stack (5.0.1)
b.) Latest PHP 7 stack.
c.) Postfix over Sendmail.
2.) Provide detailed instructions OR FIX INSTALL SCRIPT for installation on Enterprise-grade OS/systems. (Are you really going to run a central-logging solution on un-hardened servers or a desktop OS?)
(Current NLS install script does not work on hardened systems with SEL, DoD STIG'd, etc.
NLS does not work correctly after install because of SEL permissions/ACLs on /usr/local/nagioslogserver directories presumably.)
a.) CentOS 7 / RHEL7 with SELinux enabled.
b.) SLES with SEL / AppArmor configured.
c.) Install script on CentOS7/RHEL7 should recognize latest software versions and not try to re-install old/outdated packages.
(i.e: CentOS7 with PHP 5.6 installed, the install script tries to install PHP 5.4, the way-out-dated default from CentOS/RH.)
3.) Provide actual administrator guides to NLS. Not the "dumbed-down" end-user guide that gives no details to what is happening on the system, or what to do if "click here" doesn't work.
a.) Explain the contents/purpose of each directory tree and what processes/user accounts need access to them. (/usr/local/nagioslogserver; /store; /var/www/html/nagioslogserver; &etc.
b.) Please explain how to set the most restrictive permissions, etc. on each directory, etc. (This should be set by default with the installation script.)
c.) Provide "sizing/capacity" recommendations for deployments. (i.e.: [Not an actual answer] For 50,000,000 entries per second with 1yr log retention, you should have an 8-node NLS cluster of 8GB/2CPU/2TB CentOS 7/RHEL7 64-bit each.)
All of the above facilitates deployment in commercial deployments, as well as supporting them in enterprise-wide deployments.
Thank you.