Page 1 of 2
Host and service notifications "ghosts"
Posted: Mon Feb 11, 2019 2:15 pm
by ecastillo
Greetings.
We have a very particular case of host notifications and services that were deleted in Nagios XI.
In one case the Host was deleted, we checked CCM, object files and the database and there is no record of the configuration of that host exists, however, notifications are still received per state down.
The log files and the status histories also do not leave records of the generated notifications.
Any idea of the cause of the problem?
We have a Nagios XI version 5.5.2 in Centos 6.7
Re: Host and service notifications "ghosts"
Posted: Mon Feb 11, 2019 2:26 pm
by scottwilkerson
Can you show the output of the following:
Re: Host and service notifications "ghosts"
Posted: Mon Feb 11, 2019 2:38 pm
by ecastillo
Attached results
Thanks!
Re: Host and service notifications "ghosts"
Posted: Mon Feb 11, 2019 2:41 pm
by scottwilkerson
How long after removing the host did you receive an alert? It is possible it was in queue waiting to send
Re: Host and service notifications "ghosts"
Posted: Mon Feb 11, 2019 2:45 pm
by ecastillo
We think about the same thing, but it has been a few weeks since the removal of the host.
We have also reviewed the message queue of our smtp server and we do not see messages queued
Re: Host and service notifications "ghosts"
Posted: Mon Feb 11, 2019 2:50 pm
by scottwilkerson
Can you show the message obfuscating any sensitive information?
Re: Host and service notifications "ghosts"
Posted: Mon Feb 11, 2019 3:16 pm
by ecastillo
I have the case of a service that has the same behavior as the host.
The host does not exist in XI, I do not have any record or evidence of the notifications
In the case of the service, not-ok notifications are received, but the state has been in a stable way in ok.
You can see that the notification delivery dates, the historical status of the service, and the latest notifications sent do not match.
Re: Host and service notifications "ghosts"
Posted: Mon Feb 11, 2019 3:20 pm
by scottwilkerson
I'm confused, I thought the host was deleted and wasn't being monitored any longer.
One this I do note is that you are running 5.5.2 and there were several bug relating to incorrect notification being sent that the latest and last known fix was in 5.5.9 for this.
Re: Host and service notifications "ghosts"
Posted: Mon Feb 11, 2019 3:24 pm
by ecastillo
##I'm confused, I thought the host was deleted and wasn't being monitored any longer.
I feel the confusion.
Yes, the host was removed. The example sent is just an example of another service that presents the same problem in another host
##One this I do note is that you are running 5.5.2 and there were several bug relating to incorrect notification being sent that the latest and last known fix was in 5.5.9 for this.
We will see if it is possible to update Nagios to its latest stable version.
The operating system is Centos 6.5 Is the new version compatible?
Re: Host and service notifications "ghosts"
Posted: Mon Feb 11, 2019 4:02 pm
by scottwilkerson
ecastillo wrote:The operating system is Centos 6.5 Is the new version compatible?
Yes
https://assets.nagios.com/downloads/nag ... ctions.pdf