Page 1 of 1

nrpe log options and limit the log volume

Posted: Mon Sep 28, 2020 6:19 am
by mladen.bogoev
Hello All,
I am using Nagios Core 4.4.6 and I have a problem with nrpe logging .

So nrpe is logging too much messages in syslog.(on servers that I monitor) Are there possibilities to limit messages like shown below.

Sep 28 09:54:04 vpn-box nrpe[4074885]: Could not read request from client "this is the Nagios core IP address", bailing out...
Sep 28 09:54:04 vpn-box nrpe[4074885]: INFO: SSL Socket Shutdown.
Sep 28 09:54:05 vpn-box nrpe[4074902]: Error: (use_ssl == true): Request packet version was invalid!
Sep 28 09:54:05 vpn-box nrpe[4074902]: Could not read request from client "this is the Nagios core IP address", bailing out...
Sep 28 09:54:05 vpn-box nrpe[4074902]: INFO: SSL Socket Shutdown.
Sep 28 09:54:06 vpn-box nrpe[4074912]: Error: (use_ssl == true): Request packet version was invalid!
Sep 28 09:54:06 vpn-box nrpe[4074912]: Could not read request from client "this is the Nagios core IP address", bailing out...
Sep 28 09:54:06 vpn-box nrpe[4074912]: INFO: SSL Socket Shutdown.


I've checked the log options at /etc/nagios/nrpe.cfg and the only solution I could find was to stop all logging.

# This option allows you to enable or disable logging error messages to the syslog facilities.
# If this option is not set, the error messages will be logged.
disable_syslog=1

NRPE v 4.0.0

Best Regards,
Mladen

Re: nrpe log options and limit the log volume

Posted: Mon Sep 28, 2020 12:49 pm
by gormank
There's a parameter for logging to an nrpe.log or whatever you name it. Maybe try disabling syslog and defining the nrpe log. If it grows a lot don't forget a logrotate for it...