Nagios Support Forum

Code: Select all

$options = 'report=long';
$scriptpath = '/bin';
$protocolretention = '3';
$postscript = 'mailx';
$postscriptparams = '-s Nagios_Audit nagiosalerts@<your-email>.com < $CL_PROTOCOLFILE$';
@searches = ({
  tag => 'audit',
  logfile => '/usr/local/nagiosxi/var/components/auditlog.log',
  criticalpatterns => [
    'Pattern is Critical',              # place holder
  ],
  warningpatterns => [
    #'Pattern is Warning',   # place holder
    #'ACKNOWLEDGE',          # Ack a Service of Host issue
    'NOTIFICATIONS',        # Nagios Notification disabled or enabled
    #'FORCED',               # Nagios Force a check to run
    #'asqueraded',           # User is Masquerading
    #'applied a new configuration',   # Updated the Configuration
    #'account has not been setup',    # User login attempt but has no account
    #'nvalid username or password',   # User login attempt failure
    #'ser logged out',       # User manually logged out
  ],
  okpatterns => [
    'Pattern is Okay',       # This will override previous critical or warning matches - place holder
  ],
  criticalexceptions => [
    'Pattern is not Critical after all',   # This was seen as critical but is not - place holder
  ],
  warningexceptions => [
    'Pattern is not Warning after all',    # This was seen as warning but is not - place holder
  ],
  options => 'noperfdata',
});

Code: Select all

svc-NRPE-Linux-Check-Logfile-Scrape-Nagios_Audit

Code: Select all

Check_Log_Nagios_Audit

Code: Select all

/usr/local/nagios/libexec/check_nrpe --unknown-timeout --timeout 120:3 --host $HOSTADDRESS$ --command $ARG1$ $ARG2$ $ARG3$ $ARG4$ $ARG5$ $ARG6$ $ARG7$ $ARG8$

Code: Select all

$ARG1$ = check_logfiles
$ARG2$ = -a nagios-auditlog.cfg

Code: Select all

command[check_logfiles]=/usr/local/nagios/libexec/check_logfiles.pl --config /usr/local/nagios/libexec/cfg.d/$ARG1$ $ARG2$

Code: Select all

echo "SELECT * FROM xi_users\G;" | mysql -uroot -pnagiosxi nagiosxi