Home » Categories » Multiple Categories

Nagios Log Server - Monitoring Using NCPA + Nagios XI


This KB article shows you how to monitor a Nagios Log Server cluster using the Nagios Cross-Platform Agent (NCPA) and Nagios XI.

Note: Images in this article use the Nagios XI dark theme to help distinguish between XI and Log Server. Webpages may not look the same if you are using a different theme.




This KB article assumes that you have:

  • Nagios Log Server >= 2.1.0
  • Nagios XI (any version) with NCPA Wizard version >= 2.2.0 (shipped with XI 5.7+)
  • A valid network connection between these servers



Managing the Agent

The Nagios Cross-Platform Agent (NCPA) now ships by default with Nagios Log Server. A specialized management page is also available, at Admin > Management > Monitor Backend (NCPA).

On the page you should see 3 sections:

1. At the top, a button labelled Open NCPA Interface. This will open the main web interface for the agent.

2. A token management form.

Setting the token with this form will allow you to apply the same token to every agent on the cluster with one click. 

If you're using HTTPS, make sure that you've accepted the certificate in your browser, otherwise this will only work for the current machine.

3. The process list.

At the bottom, you will see a display that allows you to view and manage the NCPA processes for all members of the cluster.

You can switch the viewed instance by clicking the drop-down menu labelled Instance.





To monitor the NLS cluster, go to your Nagios XI Interface, and go to Configure > Configuration Wizards > NCPA.

Most of this configuration wizard should be self-explanatory. However, at the bottom of the second page there is now a Plugins section which is needed for monitoring NLS.



To select a plugin, click the list icon to the right of the second box.

If check_es_cluster_status.sh is selected, Plugin Arguments should be left blank.

This plugin simply checks the Elasticsearch cluster status, and alerts OK/WARNING/CRITICAL based on whether status is GREEN/YELLOW/RED. Since 1-instance clusters YELLOW at best, these will also output an OK status.

If check_es_jvm_heap.sh is selected, warning and critical thresholds should be specified in the usual way, and expressed as a percentage of the total desired elasticsearch JVM heap usage. For instance, you may choose arguments like:

-w 80 -c 90


When finished, click the Next button until configuration is applied. If you've done everything correctly, you should see the normal NCPA service status alongside the custom plugins:





Final Thoughts

For any support related questions please visit the Nagios Support Forums at:


0 (0)
Article Rating (No Votes)
Rate this article
  • Icon PDFExport to PDF
  • Icon MS-WordExport to MS Word
Attachments Attachments
There are no attachments for this article.
Related Articles RSS Feed
Moving /var/log/
Viewed 8495 times since Tue, Feb 23, 2016
Nagios XI - How to Install & Configure the Oracle Client & Plugins
Viewed 4281 times since Wed, Jan 27, 2016
Nagios XI - How To Monitor Docker Containers
Viewed 6870 times since Wed, Jul 11, 2018
Nagios XI - Monitoring Windows Servers
Viewed 4464 times since Wed, Jul 19, 2017
Nagios XI - Installing the XI Mac OS/X Agent
Viewed 3089 times since Wed, Jan 27, 2016
Nagios XI - Monitoring Microsoft SQL
Viewed 2915 times since Tue, Aug 8, 2017
Nagios XI - Core Config Manager - Escalation Wizard
Viewed 2113 times since Sun, Jul 30, 2017
Nagios XI - Monitoring Hosts Using NRPE and NRPE Monitoring Wizard
Viewed 5573 times since Thu, Jan 28, 2016
Nagios Log Server - Cluster Timezone Settings
Viewed 3480 times since Wed, Mar 9, 2016
SSL/TLS - Signing Certificates With A Microsoft Certificate Authority
Viewed 6283 times since Wed, Jun 14, 2017