You might want to check your values in nagios.cfg:<br><br># INITIAL STATES LOGGING OPTION<br># If you want Nagios to log all initial host and service states to<br># the main log file (the first time the service or host is checked)<br>
# you can enable this option by setting this value to 1. If you<br># are not using an external application that does long term state<br># statistics reporting, you do not need to enable this option. In<br># this case, set the value to 0.<br>
<br>log_initial_states=0<br><br><br><br># EXTERNAL COMMANDS LOGGING OPTION<br># If you don't want Nagios to log external commands, set this value<br># to 0. If external commands should be logged, set this value to 1.<br>
# Note: This option does not include logging of passive service<br># checks - see the option below for controlling whether or not<br># passive checks are logged.<br><br>log_external_commands=1<br><br><div class="gmail_quote">
On Mon, Aug 8, 2011 at 12:01 PM, Robert J Molerio <span dir="ltr"><<a href="mailto:rjm399@nyu.edu">rjm399@nyu.edu</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">
<div>Hello,</div><div><br>I was told the NAGIOS CORE logfile would log any changes made to host command execution ie: External commands:who turned off what and when.</div><div>Upon examination of my logfile it sems that this is not the case. </div>
<div>The log file indicates only that a particular service was enabled or disable but it does not indiacte the user id that performed the change.</div><div> </div><div>Can anyone point me in the right direction to make this happen?</div>
<div> </div><div>Snippet of log file :</div><div> </div><div>[root@its019-lap-v:var]# pwd<br>/usr/local/nagios/var<br>[root@its019-lap-v:var]# ls -lat<br>total 188<br>drwxrwxr-x 5 nagios nagios 4096 Aug 8 11:15 .<br>-rw-rw-r-- 1 nagios nagios 51204 Aug 8 11:15 status.dat<br>
-rw-r--r-- 1 nagios nagios 4561 Aug 8 11:09 nagios.log<br>-rw------- 1 nagios nagios 50697 Aug 8 11:09 retention.dat<br>drwxrwxr-x 2 nagios nagios 4096 Aug 8 00:00 archives<br>-rw-r--r-- 1 nagios nagios 41229 Aug 5 15:09 objects.cache<br>
-rw-r--r-- 1 nagios nagios 6 Aug 1 13:24 nagios.lock<br>drwxrwsr-x 2 nagios nagcmd 4096 Aug 1 13:24 rw<br>drwxrwxr-x 9 nagios nagios 4096 Jul 1 15:06 ..<br>drwxrwxr-x 3 nagios nagios 4096 Jun 27 15:54 spool<br>
[root@its019-lap-v:var]# cat nagios.log<br>
[1312776000] LOG ROTATION: DAILY<br>[1312776000] LOG VERSION: 2.0<br>[1312776541] Auto-save of retention data completed successfully.<br>[1312780141] Auto-save of retention data completed successfully.<br>[1312783741] Auto-save of retention data completed successfully.<br>
[1312787341] Auto-save of retention data completed successfully.<br>[1312790941] Auto-save of retention data completed successfully.<br>[1312794541] Auto-save of retention data completed successfully.<br>[1312798141] Auto-save of retention data completed successfully.<br>
[1312801741] Auto-save of retention data completed successfully.<br>[1312805172] EXTERNAL COMMAND: DEL_ALL_SVC_COMMENTS;TPC Server;root space<br>[1312805341] Auto-save of retention data completed successfully.<br>[1312808941] Auto-save of retention data completed successfully.<br>
[1312812541] Auto-save of retention data completed successfully.<br>[1312816017] EXTERNAL COMMAND: ENABLE_SVC_NOTIFICATIONS;Nagios Server;HTTP<br>[1312816033] EXTERNAL COMMAND: ENABLE_SVC_NOTIFICATIONS;Nagios Server;SSH<br>
[1312816141] Auto-save of retention data completed successfully.<br> <br clear="all"><br>-- <br></div><div>Thank you,<br><br>Bob Molerio<br>Systems Administrator<br>New York University<br>ITS Computer Facilities Services/Infrastructure<br>
Level C-2</div>
<div>75 Third Avenue <br>New York NY 10003-5527<br><a href="mailto:robert.molerio@nyu.edu" target="_blank">email:robert.molerio@nyu.edu</a></div>
<div> </div>
<div> </div><br>
<br>------------------------------------------------------------------------------<br>
BlackBerry® DevCon Americas, Oct. 18-20, San Francisco, CA<br>
The must-attend event for mobile developers. Connect with experts.<br>
Get tools for creating Super Apps. See the latest technologies.<br>
Sessions, hands-on labs, demos & much more. Register early & save!<br>
<a href="http://p.sf.net/sfu/rim-blackberry-1" target="_blank">http://p.sf.net/sfu/rim-blackberry-1</a><br>_______________________________________________<br>
Nagios-users mailing list<br>
<a href="mailto:Nagios-users@lists.sourceforge.net">Nagios-users@lists.sourceforge.net</a><br>
<a href="https://lists.sourceforge.net/lists/listinfo/nagios-users" target="_blank">https://lists.sourceforge.net/lists/listinfo/nagios-users</a><br>
::: Please include Nagios version, plugin version (-v) and OS when reporting any issue.<br>
::: Messages without supporting info will risk being sent to /dev/null<br></blockquote></div><br>