NagiosXI query of death?
Posted: Fri Dec 04, 2020 12:59 pm
At our Nagios environment, NagiosXI 5.6.14 we had an issue today that a query caused the database to have to deliver or proces so much data that the NDO2DB couldn't proces any other events anymore and the ipc message queue went up to 512000 and stayed there.
the query was like:
With after the curly bracket at least 64000 oject_id's.
This query as started from the NagiosXI web interface.
And as we use php-fpm the php-session wasn't removed, so after a reboot the session started the query again, and my Nagios environment hung again.
When I stopped php-fpm, this query was stopped at the database, and nagios came back alive.
removing all php-session files stopped all of my problems.
Can you please help me in what action at the NagiosXI web interface can create such a query?
Kind regards,
Joris Weijters
the query was like:
Code: Select all
SELECT
COUNT(*) as total
FROM nagios_servicestatus
LEFT JOIN nagios_objects as obj1 ON nagios_servicestatus.service_object_id=obj1.object_id
LEFT JOIN nagios_services ON nagios_servicestatus.service_object_id=nagios_services.service_object_id
LEFT JOIN nagios_hosts ON nagios_services.host_object_id=nagios_hosts.host_object_id
WHERE TRUE AND obj1.name1 = 'dmn-bm0212397495' AND nagios_servicestatus.instance_id = '1' AND nagios_servicestatus.service_object_id IN ( This query as started from the NagiosXI web interface.
And as we use php-fpm the php-session wasn't removed, so after a reboot the session started the query again, and my Nagios environment hung again.
When I stopped php-fpm, this query was stopped at the database, and nagios came back alive.
removing all php-session files stopped all of my problems.
Can you please help me in what action at the NagiosXI web interface can create such a query?
Kind regards,
Joris Weijters