NRPE logging to syslog

Jamie Pratt jpratt at norwich.edu
Tue Dec 6 17:37:09 CET 2005


Thanks guys... However, i'm still trying to get rid of these, and can't 
seem to get it right?...

Dec  6 11:28:07 mail4 nrpe[23417]: INFO: SSL/TLS initialized. All 
network traffic will be encrypted.


my /etc/xinetd.d/nrpe file is:

service nrpe
{
         disable = no
                 flags           = REUSE
                 socket_type     = stream
                 wait            = no
                 user            = nagios
                 server          = /usr/sbin/nrpe
                 server_args     = -c /usr/local/nagios/etc/nrpe.cfg --inetd
                 log_on_failure  += USERID
                 log_type        = SYSLOG authpriv err
                 only_from       = 192.168.10.111
}

and my xinetd.conf is:

defaults
{
         instances               = 60
         log_type                = SYSLOG authpriv err
#       log_on_success          = HOST PID
         log_on_failure          = HOST
         cps                     = 25 30
}


(I tried upping the syslog level to authpriv.err to try and get theese 
INFO messages to go away, but still no luck..?  crit,warning,, same 
deal.. ?)

thanks again,
jamie


Marc Powell wrote:
> 
>>-----Original Message-----
>>From: nagios-users-admin at lists.sourceforge.net [mailto:nagios-users-
>>admin at lists.sourceforge.net] On Behalf Of Jamie Pratt
>>Sent: Monday, December 05, 2005 3:31 PM
>>To: nagios-users at lists.sourceforge.net
>>Subject: [Nagios-users] NRPE logging to syslog
>>
>>Hi. I have debugging set to 0 in nrpe.cfg, yet my /var/log/messages
> 
> and
> 
>>/var/log/secure files are filling up fast with this kind of stuff:
>>
>>Dec  1 03:20:16 gentoo1 xinetd[5777]: START: nrpe pid=27547
>>from=192.168.10.111
>>Dec  1 03:20:16 gentoo1 xinetd[5777]: START: nrpe pid=27549
>>from=192.168.10.111
> 
> 
> [chop]
> 
> 
>>Any way to shut this off completely so logs stop filling up?
> 
> 
> This is xinetd logging, not nrpe. Do you have anything like 
> 
> log_on_success      = PID HOST
> 
> in your nrpe xinetd definition or the defaults?
> 
> --
> Marc
> 
> 
> -------------------------------------------------------
> This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
> for problems?  Stop!  Download the new AJAX search engine that makes
> searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
> http://ads.osdn.com/?ad_idv37&alloc_id865&op=click
> _______________________________________________
> Nagios-users mailing list
> Nagios-users at lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/nagios-users
> ::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. 
> ::: Messages without supporting info will risk being sent to /dev/null


-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems?  Stop!  Download the new AJAX search engine that makes
searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
http://ads.osdn.com/?ad_id=7637&alloc_id=16865&op=click
_______________________________________________
Nagios-users mailing list
Nagios-users at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. 
::: Messages without supporting info will risk being sent to /dev/null





More information about the Users mailing list