Home » Categories » Products » Nagios XI » Documentation » Architecture

Nagios XI - Event Manager Architecture

Event Manager Subsystem Overview

This Event Manager subsystem of Nagios XI is responsible for processing callback functions for each event that are initiated from the Nagios or other connected systems.  Events can be items like state change for a host or service, a notification being triggered to send out or other timed events.  These callbacks are executed by the Event Manager subsystem, which passes the information from the event to the callback for further processing.


Architecture Components And Execution Flow

The diagram below shows the different parts of the Event Manager subsystem and how they relate to each other.  Each part of the subsystem is explained in greater detail below.


The general flow of execution of the Event Manager subsystem works as follows:

  1. An event is initiated from Nagios Core or another attached system (e.g. state changed for a host or service)

  2. The added event is saved in the xi_events table of the nagiosxi postgresql (mysql in XI 5+) database

  3. The eventman.php script runs as a background process and watches for new events added to the database.  The eventman.php script is located at /usr/local/nagiosxi/cron/eventman.php and runs under cron every minute.  The cron job is defined in /etc/cron.d/nagiosxiWhile the cron job itself runs every minute, the script enters into a loop that lasts 59 seconds - this ensures that the processing is done constantly as opposed to only once every 60 seconds.

  4. The eventman.php script executes the callbacks created targeting specific event types

  5. The eventman.php script saves the results of the event processing in the xi_events table of the nagiosxi postgresql database


Builtin Components that use Event Manager

The following are all processed through the Event Manager Subsystem:

  1. Notifications for XI users

  2. Global Event Handlers

  3. Global Notification Handlers

  4. SNMP Trap Sender

  5. Nagios Reactor Component

  6. Nagios Incident Manager Component


Troubleshooting Problems

Some potential problems with the Event Manager subsystem, as well as troubleshooting information are listed below:

Problem: Notifications for XI users are not being received, however Core contacts receive their messages

Potential Causes:

  • The eventman.php scripts may not be running. Run the following command to see if the script is running:

    • ps axuw | grep eventman.php 
  • There may be a problem with the cron job.  Check the cron file /etc/cron.d/nagiosxi to ensure the job is not commented out.

  • Check the /usr/local/nagiosxi/var/eventman.log log file for errors

  • The nagios user account is expired causing the cron to not run.


Final Thoughts

For any support related questions please visit the Nagios Support Forums at:


0 (0)
Article Rating (No Votes)
Rate this article
  • Icon PDFExport to PDF
  • Icon MS-WordExport to MS Word
Attachments Attachments
There are no attachments for this article.
Related Articles RSS Feed
Nagios XI - Monitoring Using the Full Power of Nagios XI Enterprise - NWC15
Viewed 3804 times since Mon, Feb 8, 2016
Nagios XI - Cron Jobs
Viewed 4618 times since Thu, Feb 5, 2015
Nagios XI - Recurring Downtime System
Viewed 3114 times since Thu, Feb 5, 2015
Nagios XI - Performance Data Architecture
Viewed 3705 times since Wed, Jan 28, 2015
Nagios XI - Architecture Overview
Viewed 5683 times since Tue, Jan 27, 2015
Nagios XI - Cleaner Cron Architecure
Viewed 2233 times since Sun, Feb 8, 2015
Nagios XI - Web Interface Architecture
Viewed 3690 times since Wed, Jan 28, 2015
Nagios XI - How XI Works
Viewed 3099 times since Wed, Jul 19, 2017
Nagios XI - Best Practices - NWC15
Viewed 4636 times since Thu, Feb 4, 2016
Nagios XI - Maximizing Performance In Nagios XI
Viewed 2887 times since Thu, Jan 28, 2016