Page 1 of 1

Monitoring JBOSS AS without Jolokia Agent

Posted: Tue Aug 22, 2017 7:12 am
by sarfarosh
Hi Team,
We usually monitoring Java based applications using jolokia. But one of our client is not agreed on this due to security breaches of deploying third-party jolokia.war and allowing multiple ports in iptables as there will be multiple instances running on same application server, so multiple port needs to be allowed from nagios xi to access the App Server.
We found the below document that uses nrpe . But i am getting error when i am trying this and not able to figure out the reason for the error. Please guide me if i am doing something wrong or missing something here. I have attached the screenshot.

https://assets.nagios.com/downloads/nag ... 1488194238

Re: Monitoring JBOSS AS without Jolokia Agent

Posted: Tue Aug 22, 2017 8:39 am
by mcapra
check_jmx was designed to work with the native Java RMI. Jolokia provides an endpoint that returns JSON data, which is not data in a form that the JRMP recognizes as indicated by the exception thrown (non-JRMP server at remote endpoint). Therefore, pointing it at a Jolokia endpoint will result in errors.

You might instead try using something like check_jvm which doesn't require local JMX access:
https://exchange.nagios.org/directory/P ... vm/details

After setting up check_jvm on the remote machine, you can execute it remotely from Nagios XI using an agent line NRPE/NCPA coupled with check_nrpe/check_ncpa.

For JBoss, Weblogic, and Tomcat, I've taken to including native RMI configuration in my startup scripts for the applications. That might not be cool with some stakeholders that have security concerns, though.

@SteveBeauchemin also had a pretty comprehensive post regarding monitoring Jolokia setups that might be useful:
https://support.nagios.com/forum/viewto ... 66#p226188

Re: Monitoring JBOSS AS without Jolokia Agent

Posted: Tue Aug 22, 2017 2:09 pm
by dwhitfield
@sarfarosh, I'm confused. You say you aren't using jolokia for this server, but then your screenshots suggest you are. @mcapra seems to have taken it that you are still using jolokia, but just trying to do it in a different way. Is that correct?

Please let us know if you have any questions about @mcapra's response.

Re: Monitoring JBOSS AS without Jolokia Agent

Posted: Wed Aug 23, 2017 7:56 am
by sarfarosh
Hi dwhitfield,
Actually i am able to achieve JBoss monitoring using jolokia agent but our client is not willing to use jolokia agent due to security measures. So i am expecting that can be run on remote JBoss application server using NRPE.
MCapra got me correct here.

Re: Monitoring JBOSS AS without Jolokia Agent

Posted: Wed Aug 23, 2017 7:57 am
by sarfarosh
Hi mcapra,
I will give a try on this and update the status.
Thank you.

Re: Monitoring JBOSS AS without Jolokia Agent

Posted: Wed Aug 23, 2017 9:01 am
by dwhitfield
sarfarosh wrote: I will give a try on this and update the status.
Excellent! Let us know how it goes!

Re: Monitoring JBOSS AS without Jolokia Agent

Posted: Wed Aug 23, 2017 9:02 am
by scottwilkerson
@sarfarosh Let us know if you need additional assistance.

Thanks.