Nagios Support Forum

We are using 16 nagios XI instances and our customer devices are spread across them.

We are building a portal on top of the nagiosxi database where customers could have the restricted/customized details of devices/services. Currently we are using the api with user autologon & token to pull up the performance graphs ( eg. URL below).

https://nagiosxiserver/perfgraphs/porta ... &dest=auto

We want to restrict users from hacking the URL by replacing another restricted host name in place and view graphs for unauthorized devices.

** Can nagios team provide us some kind of functionality where hostname placed in the URL has to be encrypted and the XI interface decrypts it before rendering the graph.
** Can we have some patch so that we pass on some additional keys in the URL which gets authenticated locally on nagios server.
** Is there a patch/tool which can generate graphs from local rrd files copied over from nagios xi server . This should be independent of nagiosxi/nagioscore authentication.

And if any of the above could be done for us. Is there any cost involved in that ?

I don't know how you built this portal page, but users should only be allowed access to graphs they are contacts for.

So your user shouldn't be able to access a graph for a host by just guessing the name unless they are a contact for the host, or are allowed to view all hosts, or are an admin.

How many contacts can be created per nagiosxi instance ? Is there a limit ?

vivekb wrote:How many contacts can be created per nagiosxi instance ? Is there a limit ?

It is not limited

okay , so if I pull out rrd files from all different nagios server to a single remote server . Is there any standalone tool /patch available using which I could generate the same performance graph on the remote server. ?

vivekb wrote:okay , so if I pull out rrd files from all different nagios server to a single remote server . Is there any standalone tool /patch available using which I could generate the same performance graph on the remote server. ?

We do not have a standalone tool like you describe.

We do have Nagios Fusion which can pull Performance Graphs from multiple Nagios XI servers
https://www.nagios.com/products/nagios-fusion/