Windows SNMP wizard failing

[mbeebe]

Hello,

We're running Nagios XI 5.6.10 on RHEL and we're running into an issue:

When running the Nagios Windows SNMP Configuration Wizard against a Windows Server 2016 server, it comes back with the following failure:

The wizard detected that this server does not have snmpwalk permission on the target host. This will prevent the automatic scan of services and processes and prevent services from running successfully, but you can continue with the wizard manually. To troubleshoot this ensure that these OIDs are available on the target host: "HOST-RESOURCES-MIB::hrStorageDescr", "SNMPv2-SMI::enterprises.77.1.2.3.1.1" and "HOST-RESOURCES-MIB::hrSWRunName"

However, a SNMPwalk from the Nagios host shows the following:

snmpwalk -v 2c -c community-string x.x.x.x | head
SNMPv2-MIB::sysDescr.0 = STRING: Hardware: Intel64 Family 6 Model 63 Stepping 0 AT/AT COMPATIBLE - Software: Windows Version 6.3 (Build 14393 Multiprocessor Free)
SNMPv2-MIB::sysObjectID.0 = OID: SNMPv2-SMI::enterprises.311.1.1.3.1.2
DISMAN-EVENT-MIB::sysUpTimeInstance = Timeticks: (5576430) 15:29:24.30
SNMPv2-MIB::sysContact.0 = STRING: Systems Operations Center
SNMPv2-MIB::sysName.0 = STRING: <host.fqdn>
SNMPv2-MIB::sysLocation.0 = STRING: syscon@<fqdn>
SNMPv2-MIB::sysServices.0 = INTEGER: 75
IF-MIB::ifNumber.0 = INTEGER: 7
IF-MIB::ifIndex.1 = INTEGER: 1
IF-MIB::ifIndex.2 = INTEGER: 2

Are we doing something wrong?

-- Mike Beebe

[lmiltchev]

I haven't been able to recreate the issue in-house.

Can you run the following commands and show the output?

Code: Select all

snmpwalk -v 2c -c community-string x.x.x.x | grep 'HOST-RESOURCES-MIB::hrStorageDescr'
snmpwalk -v 2c -c community-string x.x.x.x | grep 'HOST-RESOURCES-MIB::hrSWRunName'

[tgriep]

Does the community string have any special characters in it?
Some of them causes issues in the wizard, especially the ! as it is used as a delimiter.
If you can remove the special characters, try that.

Try this as well to see if it fixes the issue.
To increase the memory and timeout values that PHP uses, follow this procedure.
Edit the /etc/php.ini file and change the following from

Code: Select all

max_execution_time = 30
max_input_time = 60
memory_limit = 128M

to

Code: Select all

max_execution_time = 120
max_input_time = 240
memory_limit = 2048M

add this to the bottom of that file (If it exists, increase it)

Code: Select all

max_input_vars=100000

Save the file

Then edit this file

Code: Select all

/etc/httpd/conf/httpd.conf

add this to the bottom of that file

Code: Select all

LimitRequestLine 100000

Save the file and restart Apache for the changes to take affect.

Code: Select all

service httpd restart

If the above variables have been changed already on the server to values larger than the examples, increase them further.

Try the wizard again and see if it displays the data in the GUI.

[mbeebe]

snmpwalk -v 2c -c community x.x.x.x | grep 'HOST-RESOURCES-MIB::hrStorageDescr'
HOST-RESOURCES-MIB::hrStorageDescr.1 = STRING: C:\ Label: Serial Number (number)
HOST-RESOURCES-MIB::hrStorageDescr.2 = STRING: D:\ Label:APPS Serial Number (number)
HOST-RESOURCES-MIB::hrStorageDescr.3 = STRING: R:\
HOST-RESOURCES-MIB::hrStorageDescr.4 = STRING: Virtual Memory
HOST-RESOURCES-MIB::hrStorageDescr.5 = STRING: Physical Memory

snmpwalk -v 2c -c community x.x.x.x | grep 'HOST-RESOURCES-MIB::hrSWRunName'
(a long list of .exe files)

Any help?

-- Mike Beebe

[lmiltchev]

OK, so these OIDs are available. This doesn't seem to be the problem.

Can you follow tgriep's instructions to see if this is going to fix your issue? It's possible that a special character in the community string is causing the issue or you need to increase your resource limits in the php.ini file.

[mbeebe]

OK, so these OIDs are available. This doesn't seem to be the problem.

Can you follow tgriep's instructions to see if this is going to fix your issue? It's possible that a special character in the community string is causing the issue or you need to increase your resource limits in the php.ini file.

Same thing -- wizard does the "three dots" thing for a few minutes, then fails as previously noted.

Also, the community string is straight letters and nothing else.

Any logs I can check?

-- Mike Beebe

[tgriep]

Open a root shell and run the following command.

Code: Select all

tail -f /var/log/httpd/*_log

Then run the Windows SNMP wizard against the windows host.
Wait for 10 minutes and post the output of the shell running the tail command.

[mbeebe]

Open a root shell and run the following command.

Code: Select all

tail -f /var/log/httpd/*_log

Then run the Windows SNMP wizard against the windows host.
Wait for 10 minutes and post the output of the shell running the tail command.

Output sent.

Thanks,

-- Mike Beebe

[tgriep]

Take a look in the txt file and you'll see an Invalid address message, it the address correct?

Try this.
Log in to the XI GUI and go to the Admin > Manage Config Wizards menu.
Click the Check for Updates button and update the wizards on the server.
Run the wizard, does it work now?

[mbeebe]

Take a look in the txt file and you'll see an Invalid address message, it the address correct?

Try this.
Log in to the XI GUI and go to the Admin > Manage Config Wizards menu.
Click the Check for Updates button and update the wizards on the server.
Run the wizard, does it work now?

Yes, the address is correct. I've checked it over and over because that's what I thought it was, too.

Updated the Wizard: same result and same error about not being able to connect.
The weird thing is the wizard worked on another box with the same configuration.

Why would snmpwalk work and the wizard fail for the same IP?

-- Mike Beebe