Page 1 of 1
Monitoring of Login attempts through Nagios
Posted: Mon Dec 17, 2018 5:21 am
by Samreen Mardhani
Is there any plugin or way to monitor the number of login attempts to a website through Nagios? If yes then can you please share the plugin name and how to configure it!
Thanks in Advance.
Re: Monitoring of Login attempts through Nagios
Posted: Mon Dec 17, 2018 9:37 am
by mcapra
What authentication mechanism is being used? There are a *bunch* of different authentication mechanisms out in the wild. It would depend on the specific authentication/session management system your website is using.
Are you looking to validate whether or not a user *can* login to a website, or are you attempting to monitor how many login attempts have occurred in a time period?
If the former,
check_http can handle basic authentication:
Code: Select all
-a, --authorization=AUTH_PAIR
Username:password on sites with basic authentication
For forms-based authentication, you could try the Web Transaction configuration wizard mentioned in this documentation:
https://assets.nagios.com/downloads/nag ... ios-XI.pdf
If the latter, and it's just basic authentication, you could use an agent like
check_log3.pl executed via
NRPE/
NCPA on the remote web server to keep track of the number of attempts/successes/failures by parsing the webserver logs.
There are also a few different plugins for tracking active Tomcat sessions. Here's one of them:
https://exchange.nagios.org/directory/P ... ns/details
Re: Monitoring of Login attempts through Nagios
Posted: Mon Dec 17, 2018 3:56 pm
by npolovenko
Thanks,
@mcapra!
@Samreen Mardhani, Let us know if you have any follow up questions?