Nagios Core Log file

[Michael Friedrich]

On 2011-08-08 18:01, Robert J Molerio wrote:
> Hello,
>
> I was told the NAGIOS CORE  logfile  would log any changes made to 
> host command  execution ie:  External commands:who turned off what 
> and  when.
> Upon examination of my logfile it sems that this is not the case.
> The log file indicates only that a particular service was enabled or 
> disable but it does not indiacte the user id that performed the change.
> Can anyone point me in the right direction to make this happen?

this isn't possible with nagios core. you'd better catch up on your 
application sending the external commands, logging that to somewhere. 
e.g. if you are using the nagios classic ui with the cmd.cgi, you might 
hack that to log the user into a seperate file.
we did hack that in icinga classic and cmd.cgi so that each user and ip 
address are logged into a seperated file (see 
https://dev.icinga.org/issues/1161 for more information). but vanilla 
nagios cgis don't support that - supposingly you'll open a feature 
request (if not already there) on tracker.nagios.org to get that feature 
into nagios too.

kind regards,
michael

> Snippet of log file :
> [root at its019-lap-v:var]# pwd
> /usr/local/nagios/var
> [root at its019-lap-v:var]# ls -lat
> total 188
> drwxrwxr-x 5 nagios nagios  4096 Aug  8 11:15 .
> -rw-rw-r-- 1 nagios nagios 51204 Aug  8 11:15 status.dat
> -rw-r--r-- 1 nagios nagios  4561 Aug  8 11:09 nagios.log
> -rw------- 1 nagios nagios 50697 Aug  8 11:09 retention.dat
> drwxrwxr-x 2 nagios nagios  4096 Aug  8 00:00 archives
> -rw-r--r-- 1 nagios nagios 41229 Aug  5 15:09 objects.cache
> -rw-r--r-- 1 nagios nagios     6 Aug  1 13:24 nagios.lock
> drwxrwsr-x 2 nagios nagcmd  4096 Aug  1 13:24 rw
> drwxrwxr-x 9 nagios nagios  4096 Jul  1 15:06 ..
> drwxrwxr-x 3 nagios nagios  4096 Jun 27 15:54 spool
> [root at its019-lap-v:var]# cat nagios.log
> [1312776000] LOG ROTATION: DAILY
> [1312776000] LOG VERSION: 2.0
> [1312776541] Auto-save of retention data completed successfully.
> [1312780141] Auto-save of retention data completed successfully.
> [1312783741] Auto-save of retention data completed successfully.
> [1312787341] Auto-save of retention data completed successfully.
> [1312790941] Auto-save of retention data completed successfully.
> [1312794541] Auto-save of retention data completed successfully.
> [1312798141] Auto-save of retention data completed successfully.
> [1312801741] Auto-save of retention data completed successfully.
> [1312805172] EXTERNAL COMMAND: DEL_ALL_SVC_COMMENTS;TPC Server;root space
> [1312805341] Auto-save of retention data completed successfully.
> [1312808941] Auto-save of retention data completed successfully.
> [1312812541] Auto-save of retention data completed successfully.
> [1312816017] EXTERNAL COMMAND: ENABLE_SVC_NOTIFICATIONS;Nagios Server;HTTP
> [1312816033] EXTERNAL COMMAND: ENABLE_SVC_NOTIFICATIONS;Nagios Server;SSH
> [1312816141] Auto-save of retention data completed successfully.
>
>
> -- 
> Thank you,
>
> Bob Molerio
> Systems Administrator
> New York University
> ITS Computer Facilities Services/Infrastructure
> Level C-2
> 75 Third Avenue
> New York NY 10003-5527
> email:robert.molerio at nyu.edu <mailto:robert.molerio at nyu.edu>
>
>
> ------------------------------------------------------------------------------
> BlackBerry® DevCon Americas, Oct. 18-20, San Francisco, CA
> The must-attend event for mobile developers. Connect with experts.
> Get tools for creating Super Apps. See the latest technologies.
> Sessions, hands-on labs, demos&  much more. Register early&  save!
> http://p.sf.net/sfu/rim-blackberry-1
>
>
> _______________________________________________
> Nagios-users mailing list
> Nagios-users at lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/nagios-users
> ::: Please include Nagios version, plugin version (-v) and OS when reporting any issue.
> ::: Messages without supporting info will risk being sent to /dev/null


-- 
DI (FH) Michael Friedrich

Vienna University Computer Center
Universitaetsstrasse 7 A-1010 Vienna, Austria

email:     michael.friedrich at univie.ac.at
phone:     +43 1 4277 14359
mobile:    +43 664 60277 14359
fax:	   +43 1 4277 14338
web:       http://www.univie.ac.at/zid
            http://www.aco.net

Icinga Core&  IDOUtils Developer
http://www.icinga.org


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://www.monitoring-lists.org/archive/users/attachments/20110808/13537f87/attachment.html>
-------------- next part --------------
------------------------------------------------------------------------------
BlackBerry® DevCon Americas, Oct. 18-20, San Francisco, CA
The must-attend event for mobile developers. Connect with experts. 
Get tools for creating Super Apps. See the latest technologies.
Sessions, hands-on labs, demos & much more. Register early & save!
http://p.sf.net/sfu/rim-blackberry-1
-------------- next part --------------
_______________________________________________
Nagios-users mailing list
Nagios-users at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. 
::: Messages without supporting info will risk being sent to /dev/null