NRPE logging to syslog
Jamie Pratt
jpratt at norwich.edu
Tue Dec 6 17:37:09 CET 2005
Thanks guys... However, i'm still trying to get rid of these, and can't
seem to get it right?...
Dec 6 11:28:07 mail4 nrpe[23417]: INFO: SSL/TLS initialized. All
network traffic will be encrypted.
my /etc/xinetd.d/nrpe file is:
service nrpe
{
disable = no
flags = REUSE
socket_type = stream
wait = no
user = nagios
server = /usr/sbin/nrpe
server_args = -c /usr/local/nagios/etc/nrpe.cfg --inetd
log_on_failure += USERID
log_type = SYSLOG authpriv err
only_from = 192.168.10.111
}
and my xinetd.conf is:
defaults
{
instances = 60
log_type = SYSLOG authpriv err
# log_on_success = HOST PID
log_on_failure = HOST
cps = 25 30
}
(I tried upping the syslog level to authpriv.err to try and get theese
INFO messages to go away, but still no luck..? crit,warning,, same
deal.. ?)
thanks again,
jamie
Marc Powell wrote:
>
>>-----Original Message-----
>>From: nagios-users-admin at lists.sourceforge.net [mailto:nagios-users-
>>admin at lists.sourceforge.net] On Behalf Of Jamie Pratt
>>Sent: Monday, December 05, 2005 3:31 PM
>>To: nagios-users at lists.sourceforge.net
>>Subject: [Nagios-users] NRPE logging to syslog
>>
>>Hi. I have debugging set to 0 in nrpe.cfg, yet my /var/log/messages
>
> and
>
>>/var/log/secure files are filling up fast with this kind of stuff:
>>
>>Dec 1 03:20:16 gentoo1 xinetd[5777]: START: nrpe pid=27547
>>from=192.168.10.111
>>Dec 1 03:20:16 gentoo1 xinetd[5777]: START: nrpe pid=27549
>>from=192.168.10.111
>
>
> [chop]
>
>
>>Any way to shut this off completely so logs stop filling up?
>
>
> This is xinetd logging, not nrpe. Do you have anything like
>
> log_on_success = PID HOST
>
> in your nrpe xinetd definition or the defaults?
>
> --
> Marc
>
>
> -------------------------------------------------------
> This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
> for problems? Stop! Download the new AJAX search engine that makes
> searching your log files as easy as surfing the web. DOWNLOAD SPLUNK!
> http://ads.osdn.com/?ad_idv37&alloc_id865&op=click
> _______________________________________________
> Nagios-users mailing list
> Nagios-users at lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/nagios-users
> ::: Please include Nagios version, plugin version (-v) and OS when reporting any issue.
> ::: Messages without supporting info will risk being sent to /dev/null
-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems? Stop! Download the new AJAX search engine that makes
searching your log files as easy as surfing the web. DOWNLOAD SPLUNK!
http://ads.osdn.com/?ad_id=7637&alloc_id=16865&op=click
_______________________________________________
Nagios-users mailing list
Nagios-users at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting any issue.
::: Messages without supporting info will risk being sent to /dev/null
More information about the Users
mailing list