Just discovered that the new Network Status Map doesn't display anything (except for the Nagios Process icon) for a User.
The user is configured with just the "Can Access Advanced Features" selected. They are a member of a Host Group (under Contacts).
So when they use NagiosXI, they only see the devices in that HostGroup.
This works fine for Admin Users, so it appears that something is preventing them from seeing these devices in the Network Status Map.
BTW - the Legacy Network Status Map works for the User.
regards... Fred
Network Status Map not displaying for normal user
-
Fred Kroeger
- Posts: 588
- Joined: Wed Oct 19, 2011 11:36 pm
- Location: Perth, Western Australia
- Contact:
Re: Network Status Map not displaying for normal user
I believe this is by design - if you select 'Can see all objects' then they'll be able to see the Network Status Map in its entirety. Otherwise, it's restricted to the hosts a user is a contact on.
Former Nagios Employee
-
Fred Kroeger
- Posts: 588
- Joined: Wed Oct 19, 2011 11:36 pm
- Location: Perth, Western Australia
- Contact:
Re: Network Status Map not displaying for normal user
The problem is that they can't see the hosts in the Network Status Map that they can normally see if they look at the hosts detail page.
This is a multi-tenant system and they are not allowed to "See all objects" - only those that they are a contact for.
The only icon that appears on the Network Status Map is an icon marked as Nagios Process.
This is a multi-tenant system and they are not allowed to "See all objects" - only those that they are a contact for.
The only icon that appears on the Network Status Map is an icon marked as Nagios Process.
Re: Network Status Map not displaying for normal user
Could you post a copy of your /usr/local/nagios/var/objects.cache (or PM it over)? With the testing I did, Frank is only a contact to the host google.com / 192.168.1.1, when looking at the Network Status Map I'm able to see specifically these two hosts. When looking at the Host Detail page, it is only showing me the two hosts mentioned above.
Also, what version of XI are you on?
Also, what version of XI are you on?
You do not have the required permissions to view the files attached to this post.
Former Nagios Employee
-
Fred Kroeger
- Posts: 588
- Joined: Wed Oct 19, 2011 11:36 pm
- Location: Perth, Western Australia
- Contact:
Re: Network Status Map not displaying for normal user
I think I figured out what is happening and it is all related to the devices each user can see.
You should be able to simulate it in your example.
If you were to create a another device as a parent of google.com and set another user as the contact of it. I think you'll find that Frank can't see google.com anymore on the Network Status Map because he isn't able to see the parent.
BTW - am running NagiosXI 5.3.3
You should be able to simulate it in your example.
If you were to create a another device as a parent of google.com and set another user as the contact of it. I think you'll find that Frank can't see google.com anymore on the Network Status Map because he isn't able to see the parent.
BTW - am running NagiosXI 5.3.3
Re: Network Status Map not displaying for normal user
Can Frank see google.com in Nagios Core (http://ipaddress/nagios/)?
Be sure to check out our Knowledgebase for helpful articles and solutions!
-
Fred Kroeger
- Posts: 588
- Joined: Wed Oct 19, 2011 11:36 pm
- Location: Perth, Western Australia
- Contact:
Re: Network Status Map not displaying for normal user
In my situation the user can see all the devices they are a contact for, however they can't see the parent as it's a Network device and they are not a contact.
However, when they Select the Network Status Map, they get nothing because it won't display the parent which is in between their servers and the Nagios Process.
Fred
However, when they Select the Network Status Map, they get nothing because it won't display the parent which is in between their servers and the Nagios Process.
Fred
Re: Network Status Map not displaying for normal user
Fred, we were able to recreate the issue, and filed an internal bug report. The bug is already fixed in our "pre-release" revision.
Can you show us an example configs (hosts - parent & child, contact, etc.)? I would like to lab it in-house just to be sure the bug is fixed. Thanks!
Can you show us an example configs (hosts - parent & child, contact, etc.)? I would like to lab it in-house just to be sure the bug is fixed. Thanks!
Be sure to check out our Knowledgebase for helpful articles and solutions!
-
Fred Kroeger
- Posts: 588
- Joined: Wed Oct 19, 2011 11:36 pm
- Location: Perth, Western Australia
- Contact:
Re: Network Status Map not displaying for normal user
Brilliant - thanks. Here's some hosts in one branch of the heirarchy tree. Names & IPs changed, but you'll get the idea
Code: Select all
define host {
host_name core-switch-1
alias Network Services:P2:Distribution Switch
display_name Production::Network:Switch:HP
address 10.1.1.2
hostgroups Network
check_command check-host-alive!!!!!!!!
initial_state o
max_check_attempts 4
check_interval 5
retry_interval 1
active_checks_enabled 1
check_period 24x7
contact_groups Network Security
notification_period 24x7
icon_image switch.png
statusmap_image switch.gd2
register 1
}
define host {
host_name core-switch-2
alias Network Services:P2:Distribution Switch
display_name Production::Network:Switch:HP
address 10.1.1.3
hostgroups Network
check_command check-host-alive!!!!!!!!
initial_state o
max_check_attempts 4
check_interval 5
retry_interval 1
active_checks_enabled 1
check_period 24x7
contact_groups Network Security
notification_period 24x7
icon_image switch.png
statusmap_image switch.gd2
register 1
}
define host {
host_name firewall
alias Network Services:P1:WAN Router Firewall
display_name Production::Network:Firewall:Cisco
address 10.1.1.185
parents core-switch-1,core-switch-2
hostgroups Network,Network-Switches
check_command check-host-alive!!!!!!!!
initial_state o
max_check_attempts 5
check_interval 5
retry_interval 1
active_checks_enabled 1
check_period 24x7
contact_groups Network Security
notification_period 24x7
icon_image firewall3.png
statusmap_image firewall3.gd2
register 1
}
define host {
host_name firewall-standby
alias Network Services:P1:WAN Router Firewall
display_name Production::Network:Firewall:Cisco
address 10.1.1.186
parents core-switch-1,core-switch-2
hostgroups Network,Network-Switches
check_command check-host-alive!!!!!!!!
initial_state o
max_check_attempts 5
check_interval 5
retry_interval 1
active_checks_enabled 1
check_period 24x7
contact_groups Network Security
notification_period 24x7
icon_image firewall3.png
statusmap_image firewall3.gd2
register 1
}
define host {
host_name SITE-Remote
alias Remote - Site
address 127.0.0.1
parents firewall,firewall-standby
hostgroups All
check_command check_dummy!0!!!!!!!
initial_state o
max_check_attempts 1
check_interval 10
retry_interval 1
active_checks_enabled null
passive_checks_enabled null
check_period 24x7
contact_groups Monitoring Administrators,Database Administrators,Network Security,Storage Admins,UNIX SysAdmins,Wintel SysAdmins
notification_period none
icon_image home.png
statusmap_image home.gd2
register 1
}
define host {
host_name remote-switch-1
alias Network Services:P3:Access Switch
display_name Production::Network:Switch:HP:
address 10.1.2.1
parents SITE-Remote
hostgroups Network
check_command check-host-alive!!!!!!!!
initial_state o
max_check_attempts 5
check_interval 5
retry_interval 1
active_checks_enabled 1
check_period 24x7
contact_groups Network Security
notification_period 24x7
icon_image switch.png
statusmap_image switch.gd2
register 1
}
define host {
host_name esx-1
alias Wintel Support:P2:VMWare ESXi Host
display_name Production:ESX:Server:Physical::
address 10.1.2.10
parents remote-switch-1
hostgroups Servers-ESX,vCenter1
check_command check-host-alive!!!!!!!!
initial_state o
max_check_attempts 5
check_interval 5
retry_interval 1
active_checks_enabled 1
check_period 24x7
contact_groups Wintel SysAdmins
notification_period 24x7
icon_image vmware.png
statusmap_image vmware.gd2
register 1
}
define host {
host_name remote-server
use generic-host
alias Wintel Support:P3:File Server
display_name Production:Windows:Server:Virtual::
address 10.1.2.20
parents esx-1
hostgroups Servers-Wintel
check_command check-host-alive!!!!!!!!
initial_state o
max_check_attempts 7
check_interval 5
retry_interval 1
active_checks_enabled 1
check_period 24x7
contact_groups Wintel SysAdmins
notification_period 24x7
icon_image win_server.png
statusmap_image win_server.png
register 1
}Re: Network Status Map not displaying for normal user
Which of these hosts the user is allowed to see (which are the hosts that this user is added to as a monitoring contact)?
BTW, Nagios XI 5.4.1 is already released. You could maybe try it in a test environment to see if the Network Status Map will function as expected.
BTW, Nagios XI 5.4.1 is already released. You could maybe try it in a test environment to see if the Network Status Map will function as expected.
Be sure to check out our Knowledgebase for helpful articles and solutions!