Auditing External Commands

[Mikael Fridh]

On Thu, Sep 18, 2008 at 10:36 PM, Ton Voon <ton.voon at altinity.com> wrote:
> On 18 Sep 2008, at 20:15, Laack,Jacob C wrote:
>> Is there a native way for Nagios to attach to attach the CGI user,
>> ekaj in this case, to the DISABLE_SVC_NOTIFICATIONS command in
>> either the nagios.log file or somewhere else?  Any non-native way to
>> do it?
>>
> We had this request from a customer to add into Opsview. Patch is
> here: http://trac.opsview.org/browser/trunk/opsview-base/patches/nagios_store_cmd_cgi_submissions.patch
>
> This tells the CGIs to write an additional line API LOG: to the
> nagios.log file and includes the user's name.

What about adding a comment automatically for each submitted command
(attached to the actual host/service the command is for), would it be
doable?

It would be an auditing solution instead of a hack.
It would be logged automatically.
It would be viewable in the CGI UI.
Generally no need to check logs for mistakes made (unless the user is
malicious and sends another command for comment deletion).

You'd need to filter so that you don't create comments on comment
deletion commands :).

What I guess is an issue, is that all services and hosts for which
you've ever sent a command, will have comments attached, and a little
icon saying "comments exists for XXX" on the overview ...
There should be a certain comment type, probably.... which you could
expire or type-set from the get-go so you can determine if a comment
is actual or historical...

--
Fridh

-------------------------------------------------------------------------
This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
Build the coolest Linux based applications with Moblin SDK & win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/
_______________________________________________
Nagios-users mailing list
Nagios-users at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. 
::: Messages without supporting info will risk being sent to /dev/null