Nagios Support Forum

Hi,

We have a Nagios XI version 5.4.2 VM ,the server Data Base admin found error on his server as below

event_time sequence_number action_id succeeded permission_bitmask is_column_permission session_id server_principal_id database_principal_id target_server_principal_id target_database_principal_id object_id class_type session_server_principal_name server_principal_name server_principal_sid database_principal_name target_server_principal_name target_server_principal_sid target_database_principal_name server_instance_name database_name schema_name object_name statement additional_information file_name audit_file_offset user_defined_event_id user_defined_information audit_schema_version sequence_group_id

he founded 62000 record in audit database related to tried Nagios access on Data Base server, please your advice.

As far as I can tell, that's a MS SQL audit. We don't use MS SQL. You'll need to give me some logs if this is something going on in MySQL or Postgres.

Are you using the MS SQL Query Wizard? If so, this seems like a non-issue.

That all said, can you PM me your Profile? You can download it by going to Admin > System Config > System Profile and click the ***Download Profile*** button towards the top. If for whatever reason you *cannot* download the profile, please put the output of View System Info (5.3.4+, Show Profile if older) in the thread (that will at least get us some info). This will give us access to many of the logs we would otherwise ask for individually. If security is a concern, you can unzip the profile take out what you like, and then zip it up again. We may end up needing something you remove, but we can ask for that specifically.

After you PM the profile, please update this thread. Updating this thread is the only way for it to show back up on our dashboard.