Nagios-users Digest, Vol 55, Issue 21

moses neah mssneah at yahoo.com
Thu Dec 30 08:45:34 CET 2010


Hi All out there,
Can anybody help me? I want to achieve the following:
Nagios should send notification when a host/service state goes critical, down, 
etc
Notification should be sent only once when a state changes
and finally I want to know how many ping packets is ideal for nagios to send

Thanking you in advance.




________________________________
From: "nagios-users-request at lists.sourceforge.net" 
<nagios-users-request at lists.sourceforge.net>
To: nagios-users at lists.sourceforge.net
Sent: Wed, December 29, 2010 2:14:35 PM
Subject: Nagios-users Digest, Vol 55, Issue 21

Send Nagios-users mailing list submissions to
    nagios-users at lists.sourceforge.net

To subscribe or unsubscribe via the World Wide Web, visit
    https://lists.sourceforge.net/lists/listinfo/nagios-users
or, via email, send a message with subject or body 'help' to
    nagios-users-request at lists.sourceforge.net

You can reach the person managing the list at
    nagios-users-owner at lists.sourceforge.net

When replying, please edit your Subject line so it is more specific
than "Re: Contents of Nagios-users digest..."


Today's Topics:

   1. Re: check_smtp doesn't support TLS? (Chris Beattie)
   2. re-enable all notifications on hosts & services (Mark A. Lappin)
   3. Re: re-enable all notifications on hosts & services
      (Chris Beattie)
   4. monitoring windows event viewer. (Toonz IT)
   5. Scheduling Queue stucked a few minutes after restart
      (Maurizio Pinotti)
   6. Plugin: nagiosVMware (Sebastian Ries)
   7. Re: Scheduling Queue stucked a few minutes after    restart
      (Chris Beattie)
   8. Host/service escalation notification (??????? ????????)
   9. Re: monitoring windows event viewer. (Chris Beattie)
  10. Re: monitoring windows event viewer. (Polifemo, Salvatore)
  11. Re: Host/service escalation notification (Marc Haber)
  12. Re: monitoring windows event viewer. (Daniel Wittenberg)
  13. Re: monitoring windows event viewer. (Polifemo, Salvatore)
  14. Disapering popup windows (stan)
  15. Re: Plugin: nagiosVMware (Sebastian Ries)
  16. Re: Disapering popup windows (Patrick Morris)
  17. Re: Disapering popup windows (diego.roccia at gmail.com)
  18. Re: Disapering popup windows (diego.roccia at gmail.com)
  19. Re: Disapering popup windows (Hugo van der Kooij)
  20. Re: monitoring windows event viewer. (Toonz IT)
  21. Re: Disapering popup windows (stan)


----------------------------------------------------------------------

Message: 1
Date: Mon, 27 Dec 2010 09:55:13 -0500
From: Chris Beattie <cbeattie at geninfo.com>
Subject: Re: [Nagios-users] check_smtp doesn't support TLS?
To: Nagios Users List <nagios-users at lists.sourceforge.net>
Message-ID: <4D18A8D1.9090808 at geninfo.com>
Content-Type: text/plain; charset="iso-8859-1"; format="flowed"

talonx at gmail.com wrote:
> I'm trying to setup the check_smtp plugin for a remote mail server. I 
> downloaded the latest version of nagios-plugins, built and installed 
> it. This is what I get when I invoke check_smtp from the command line 
> (actual data removed) -
>
> received 530 5.7.0 Must issue a STARTTLS command first
>
> I'm including the -S flag for it to use TLS. I couldn't see any other 
> options that might be relevant. Any pointers?
I had something similar happen to me with SSL once.  I compiled and 
installed the plugins, but I could not get SSL to work for the 
check_http command.  I had installed the openssl package, but I had 
forgotten to install the openssl-devel package before I compiled the 
plugins.

When you ./configure the plugins, does it say "--with-gnutls: no" at the 
end?  You may have to install the gnutls-devel package first.

Nothing in this message is intended to make or accept an offer or to form a 
contract, except that an attachment that is an image of a contract bearing the 
signature of an officer of our company may be or become a contract. This message 
(including any attachments) is intended only for the use of the individual or 
entity to whom it is addressed. It may contain information that is non-public, 
proprietary, privileged, confidential, and exempt from disclosure under 
applicable law or may constitute as attorney work product. If you are not the 
intended recipient, we hereby notify you that any use, dissemination, 
distribution, or copying of this message is strictly prohibited. If you have 
received this message in error, please notify us immediately by telephone and 
delete this message immediately.

Thank you.




------------------------------

Message: 2
Date: Mon, 27 Dec 2010 09:42:37 -0600
From: "Mark A. Lappin" <MarkL at lmfj.com>
Subject: [Nagios-users] re-enable all notifications on hosts &
    services
To: Nagios Users List <nagios-users at lists.sourceforge.net>
Message-ID:
    <0227B653B3DC82438B8291BC5218612F6737768BE8 at lmfjex07.lmfj.com>
Content-Type: text/plain; charset="us-ascii"

We have a notifications on services which were disabled via the web interface 
for hosts and all services on hosts.  Dozens it seems.  Is there an easy way to 
turn all notifications back on for all services and all hosts in one fell 
swoop?  We had a lot of htem turned off while we were tweaking commands and 
configuration and I'm ready to have them all back on....

ML




Mark A. Lappin, CCNA, MCITP: Enterprise Administrator | Lee Michaels Fine 
Jewelry
Director of Information Technology
11314 Cloverland Ave | Baton Rouge, LA 70809

Ph: 225.291.9094 ext 245 | Fax: 225.368.3675  | Mobile: 225-362-2770
www.lmfj.com <http://www.lmfj.com/>

[http://www.lmfj.com/images/lmfjsig.gif]

________________________________
This communication is privileged and confidential.  If you are not the intended 
recipient, please notify the sender by reply e-mail and destroy all copies of 
this communication .
-------------- next part --------------
An HTML attachment was scrubbed...

------------------------------

Message: 3
Date: Mon, 27 Dec 2010 18:25:49 -0500
From: Chris Beattie <cbeattie at geninfo.com>
Subject: Re: [Nagios-users] re-enable all notifications on hosts &
    services
To: Nagios Users List <nagios-users at lists.sourceforge.net>
Message-ID: <4D19207D.1030103 at geninfo.com>
Content-Type: text/plain; charset="iso-8859-1"; format="flowed"

Mark A. Lappin wrote:
> interface for hosts and all services on hosts.  Dozens it seems.  Is 
> there an easy way to turn all notifications back on for all services and 
> all hosts in one fell swoop?  We had a lot of htem turned off while we 

You can use Nagios' external commands to do that.

http://old.nagios.org/developerinfo/externalcommands/commandlist.php

If I didn't have to be too careful, I'd do something like this 
(apologies for the line wrapping):

#!/bin/sh

now=`date +%s`
commandfile='/usr/local/nagios/var/rw/nagios.cmd'
statusfile='/usr/local/nagios/var/status.dat'

for i in `grep host_name $statusfile | sort --unique | sed 
"s/\thost_name=//"`
do
    /bin/printf "[%lu] ENABLE_HOST_NOTIFICATIONS;$i\n" $now > $commandfile
    /bin/printf "[%lu] ENABLE_HOST_SVC_NOTIFICATIONS;$i\n" $now > $commandfile
done

Nothing in this message is intended to make or accept an offer or to form a 
contract, except that an attachment that is an image of a contract bearing the 
signature of an officer of our company may be or become a contract. This message 
(including any attachments) is intended only for the use of the individual or 
entity to whom it is addressed. It may contain information that is non-public, 
proprietary, privileged, confidential, and exempt from disclosure under 
applicable law or may constitute as attorney work product. If you are not the 
intended recipient, we hereby notify you that any use, dissemination, 
distribution, or copying of this message is strictly prohibited. If you have 
received this message in error, please notify us immediately by telephone and 
delete this message immediately.

Thank you.




------------------------------

Message: 4
Date: Tue, 28 Dec 2010 17:33:53 +0530
From: Toonz IT <it.toonz at gmail.com>
Subject: [Nagios-users] monitoring windows event viewer.
To: Nagios Users List <nagios-users at lists.sourceforge.net>
Message-ID:
    <AANLkTin1mpLhBsYevjsbT8JxZXT3jJDa+_eB4ZsRR7p6 at mail.gmail.com>
Content-Type: text/plain; charset="iso-8859-1"

Is it possible to monitor specific event ids like disk error, fro windows
event viewer logs??

We recently had a sever hard disk error and we detected it a bit late! :-(

Please let us know. At present we just have basic monitoring like ping, disk
space usage etc...

we are using FAN 2.0.

anth!
-------------- next part --------------
An HTML attachment was scrubbed...

------------------------------

Message: 5
Date: Tue, 28 Dec 2010 12:44:31 +0100
From: Maurizio Pinotti <m.pinotti at cineca.it>
Subject: [Nagios-users] Scheduling Queue stucked a few minutes after
    restart
To: nagios-users at lists.sourceforge.net
Message-ID: <4D19CD9F.8050304 at cineca.it>
Content-Type: text/plain; charset=UTF-8

hello,

I have a really odd issue running Nagios: a few minutes after starting the
scheduling queue seems to freeze and no more active checks are performed. The
queue remains stucked for hours until I have to manually restart Nagios.

Passive checks are processed normally.

I'm running Nagios 3.0.6 (deb package) on a Debian lenny system. The harware is
an 8-core Xeon CPU with 16GB RAM. Nagios is monitoring about 1K hosts and 10K
services.

Reverting back the configuration to "last known good configuration" did not
help, neither did rebooting the server and several Nagios restarts and reloads.

Already tried fixes:

- disabled all active hosts checks
- increased ulimit for nagios user
- disabled all event handlers
- disabled all "obsess" stuff



Any help or hint would be appreciated.











nagios.cfg follows

*******************

log_file=/nagios_fe/var/log/nagios3/nagios.log
cfg_file=/etc/nagios3/commands.cfg
cfg_dir=/etc/nagios-plugins/config
cfg_dir=/nagios_fe/etc/cmon/nagios3
cfg_dir=/nagios_fe/etc/nagiosgrapher/nagios3
object_cache_file=/nagios_fe/var/cache/nagios3/objects.cache
precached_object_file=/nagios_fe/var/lib/nagios3/objects.precache
resource_file=/nagios_fe/etc/cmon/nagios3/macros.res
status_file=/nagios_fe/var/cache/nagios3/status.dat
status_update_interval=10
nagios_user=nagios
nagios_group=nagios
check_external_commands=1
command_check_interval=-1
command_file=/nagios_fe/var/lib/nagios3/rw/nagios.cmd
external_command_buffer_slots=4096
lock_file=/nagios_fe/var/run/nagios3/nagios3.pid
temp_file=/nagios_fe/var/cache/nagios3/nagios.tmp
temp_path=/tmp
event_broker_options=-1
log_rotation_method=d
log_archive_path=/nagios_fe/var/log/nagios3/archives
use_syslog=0
log_notifications=1
log_service_retries=0
log_host_retries=0
log_event_handlers=1
log_initial_states=0
log_external_commands=1
log_passive_checks=0
service_inter_check_delay_method=s
max_service_check_spread=30
service_interleave_factor=s
host_inter_check_delay_method=s
max_host_check_spread=30
max_concurrent_checks=0
check_result_reaper_frequency=10
max_check_result_reaper_time=30
check_result_path=/nagios_fe/var/lib/nagios3/spool/checkresults
max_check_result_file_age=3600
cached_host_check_horizon=15
cached_service_check_horizon=15
enable_predictive_host_dependency_checks=1
enable_predictive_service_dependency_checks=1
soft_state_dependencies=0
auto_reschedule_checks=0
auto_rescheduling_interval=30
auto_rescheduling_window=180
sleep_time=0.25
service_check_timeout=60
host_check_timeout=30
event_handler_timeout=30
notification_timeout=30
ocsp_timeout=5
perfdata_timeout=5
retain_state_information=1
state_retention_file=/nagios_fe/var/lib/nagios3/retention.dat
retention_update_interval=60
use_retained_program_state=1
use_retained_scheduling_info=1
retained_host_attribute_mask=0
retained_service_attribute_mask=0
retained_process_host_attribute_mask=0
retained_process_service_attribute_mask=0
retained_contact_host_attribute_mask=0
retained_contact_service_attribute_mask=0
interval_length=60
use_aggressive_host_checking=0
execute_service_checks=1
accept_passive_service_checks=1
execute_host_checks=1
accept_passive_host_checks=1
enable_notifications=1
enable_event_handlers=0
process_performance_data=1
service_perfdata_file=/nagios_fe/var/lib/nagiosgrapher/ngraph.pipe
service_perfdata_file_template=$HOSTNAME$\t$SERVICEDESC$\t$SERVICEOUTPUT$\t$SERVICEPERFDATA$\t$TIMET$\n

service_perfdata_file_mode=a
service_perfdata_file_processing_interval=5
service_perfdata_file_processing_command=ngraph-process-service-perfdata-pipe
obsess_over_services=0
obsess_over_hosts=0
translate_passive_host_checks=0
passive_host_checks_are_soft=0
check_for_orphaned_services=1
check_for_orphaned_hosts=1
check_service_freshness=1
service_freshness_check_interval=60
check_host_freshness=0
host_freshness_check_interval=60
additional_freshness_latency=15
enable_flap_detection=1
low_service_flap_threshold=5.0
high_service_flap_threshold=20.0
low_host_flap_threshold=5.0
high_host_flap_threshold=20.0
date_format=euro
p1_file=/usr/lib/nagios3/p1.pl
enable_embedded_perl=0
use_embedded_perl_implicitly=1
illegal_object_name_chars=`~!$%^&*|'"<>?,()=
illegal_macro_output_chars=`~$|'"<>
use_regexp_matching=0
use_true_regexp_matching=0
admin_email=root at localhost
admin_pager=pageroot at localhost
daemon_dumps_core=0
use_large_installation_tweaks=1
enable_environment_macros=0
debug_level=144
debug_verbosity=1
debug_file=/nagios_fe/var/log/nagios3/nagios.debug
max_debug_file_size=2000000000

*******************




------------------------------

Message: 6
Date: Tue, 28 Dec 2010 14:23:45 +0100
From: Sebastian Ries <Sebastian.Ries at dtnet.de>
Subject: [Nagios-users] Plugin: nagiosVMware
To: nagios-users-ML <nagios-users at lists.sourceforge.net>
Message-ID: <1293542625.8847.27.camel at bofh.dtnet.de>
Content-Type: text/plain

Hi

I am trying to Configure the nagiosVMware plugin I found on
https://www.monitoringexchange.org/inventory/Check-Plugins/Virtualization/VMWare-%2528ESX%2529/nagiosVMware


Generally it works but now I found that most of the time the CPU and
MEM-checks give no result:

[nagios at nagios-check-vc ~]$ ./nsca_vmware.pl 5min
Processing host esx19.dtnet.de
... overcommit -1, cpuload -1 on 0 cpus, memtot -1, memfree -1
esx19   ESX-OVERCMMT    3       Memory overcommitment -1
esx19   ESX-CPU-LOAD    3       CPU load average -1 on 0 CPUs
esx19   ESX-MEMORY      3       Memory use -1 total -1 free
... mem/cpu took 8 seconds
... host esx19 took 8 seconds
Processing host esx20.dtnet.de

but sometimes it works:

[nagios at nagios-check-vc ~]$ ./nsca_vmware.pl 5min
Processing host esx19.dtnet.de
... overcommit 0.00, cpuload 0.19 on 8 cpus, memtot 32766, memfree 11680
esx19   ESX-OVERCMMT    0       Memory overcommitment 0%
esx19   ESX-CPU-LOAD    0       CPU load average 19% on 8 CPUs
esx19   ESX-MEMORY      0       Memory use 64% (21086 of 32766 MB used)
... mem/cpu took 8 seconds
... host esx19 took 8 seconds


This is the same effect with all ESX servers. All are ESX4.0

in the ....cmd file I get this error
[2010-12-28 14:17:16.275 7324B90 warning 'App'] Closing Response
processing in unexpected state: 3


Has anyone managed to run this without errors?
s_teeter: are you on this list?
  (I did not find an email address)

Regards
Sebastian Ries

-- 
------------------------------------------------------------
DT Netsolution GmbH -  Talaeckerstr. 30 -  D-70437 Stuttgart
Tel: +49-711-849910-36               Fax: +49-711-849910-936
WEB: http://www.dtnet.de/     email: Sebastian.Ries at dtnet.de



------------------------------

Message: 7
Date: Tue, 28 Dec 2010 09:13:14 -0500
From: Chris Beattie <cbeattie at geninfo.com>
Subject: Re: [Nagios-users] Scheduling Queue stucked a few minutes
    after    restart
To: Nagios Users List <nagios-users at lists.sourceforge.net>
Message-ID: <4D19F07A.1060306 at geninfo.com>
Content-Type: text/plain; charset="iso-8859-1"; format="flowed"

Maurizio Pinotti wrote:
> I have a really odd issue running Nagios: a few minutes after starting the
> scheduling queue seems to freeze and no more active checks are performed. The
> queue remains stucked for hours until I have to manually restart Nagios.
> 
> I'm running Nagios 3.0.6 (deb package) on a Debian lenny system. The harware 
is

I think that is a bug in that version of Nagios.  I had the same 
problem.  It got fixed, but I still go look at my service checks every 
morning to make sure.  Also, I see where the server guys acknowledge 
problems and then forget about them, heh heh.

There is a much newer version of Nagios available in lenny-backports.  I 
would give it a shot if you can.

http://packages.debian.org/source/lenny-backports/backports/nagios3

-- 
-Chris

------


Nothing in this message is intended to make or accept an offer or to form a 
contract, except that an attachment that is an image of a contract bearing the 
signature of an officer of our company may be or become a contract. This message 
(including any attachments) is intended only for the use of the individual or 
entity to whom it is addressed. It may contain information that is non-public, 
proprietary, privileged, confidential, and exempt from disclosure under 
applicable law or may constitute as attorney work product. If you are not the 
intended recipient, we hereby notify you that any use, dissemination, 
distribution, or copying of this message is strictly prohibited. If you have 
received this message in error, please notify us immediately by telephone and 
delete this message immediately.

Thank you.




------------------------------

Message: 8
Date: Tue, 28 Dec 2010 16:19:21 +0200
From: ??????? ????????     <dmitry.leonenko at gmail.com>
Subject: [Nagios-users] Host/service escalation notification
To: nagios-users at lists.sourceforge.net
Message-ID:
    <AANLkTimX90s2-tbVyOKt5S3s-J5=Wy5xqFA2btV3gMrp at mail.gmail.com>
Content-Type: text/plain; charset="utf-8"

Hi.
I want to create several levels of host and service escalation. Say 3
levels. In notification I want to know on which escalation level this
particular notification occurred. Can't find any variable reflecting
escalation level.

Thanks a lot!
Dmytro Leonenko
-------------- next part --------------
An HTML attachment was scrubbed...

------------------------------

Message: 9
Date: Tue, 28 Dec 2010 09:31:41 -0500
From: Chris Beattie <cbeattie at geninfo.com>
Subject: Re: [Nagios-users] monitoring windows event viewer.
To: Nagios Users List <nagios-users at lists.sourceforge.net>
Message-ID: <4D19F4CD.7040408 at geninfo.com>
Content-Type: text/plain; charset="iso-8859-1"; format="flowed"

Toonz IT wrote:
> Is it possible to monitor specific event ids like disk error, fro 
> windows event viewer logs??

Yes, but you may have to use the NSClient++ agent on your Windows boxes 
and create custom commands to do it.

http://nsclient.org/nscp/wiki/CheckEventLog/CheckEventLog

Unfortunately, I deleted the Windows event log checks after I didn't 
need them any more, so I don't have a working example configuration to 
show you.


-- 
-Chris

------


Nothing in this message is intended to make or accept an offer or to form a 
contract, except that an attachment that is an image of a contract bearing the 
signature of an officer of our company may be or become a contract. This message 
(including any attachments) is intended only for the use of the individual or 
entity to whom it is addressed. It may contain information that is non-public, 
proprietary, privileged, confidential, and exempt from disclosure under 
applicable law or may constitute as attorney work product. If you are not the 
intended recipient, we hereby notify you that any use, dissemination, 
distribution, or copying of this message is strictly prohibited. If you have 
received this message in error, please notify us immediately by telephone and 
delete this message immediately.

Thank you.




------------------------------

Message: 10
Date: Tue, 28 Dec 2010 09:37:57 -0500
From: "Polifemo, Salvatore" <polifemos at conedsolutions.com>
Subject: Re: [Nagios-users] monitoring windows event viewer.
To: "Nagios Users List" <nagios-users at lists.sourceforge.net>
Message-ID:
    <5BE7D0404F28DC44B780100927AA4CB018664C5C at whplex3.int.cecdes.net>
Content-Type: text/plain;    charset="us-ascii"

If you will be monitoring event logs, you may want to look at
applications made for monitoring event logs.
One application that works well for us is syslog-ng.

Salvatore Polifemo
Sr. Systems Security Specialist
ConEdison Solutions
100 Summit Lake Drive
Valhalla, NY 10595

-----Original Message-----
From: Chris Beattie [mailto:cbeattie at geninfo.com] 
Sent: Tuesday, December 28, 2010 9:32 AM
To: Nagios Users List
Subject: Re: [Nagios-users] monitoring windows event viewer.

Toonz IT wrote:
> Is it possible to monitor specific event ids like disk error, fro 
> windows event viewer logs??

Yes, but you may have to use the NSClient++ agent on your Windows boxes 
and create custom commands to do it.

http://nsclient.org/nscp/wiki/CheckEventLog/CheckEventLog

Unfortunately, I deleted the Windows event log checks after I didn't 
need them any more, so I don't have a working example configuration to 
show you.


-- 
-Chris

------


Nothing in this message is intended to make or accept an offer or to
form a contract, except that an attachment that is an image of a
contract bearing the signature of an officer of our company may be or
become a contract. This message (including any attachments) is intended
only for the use of the individual or entity to whom it is addressed. It
may contain information that is non-public, proprietary, privileged,
confidential, and exempt from disclosure under applicable law or may
constitute as attorney work product. If you are not the intended
recipient, we hereby notify you that any use, dissemination,
distribution, or copying of this message is strictly prohibited. If you
have received this message in error, please notify us immediately by
telephone and delete this message immediately.

Thank you.


------------------------------------------------------------------------
------
Learn how Oracle Real Application Clusters (RAC) One Node allows
customers
to consolidate database storage, standardize their database environment,
and, 
should the need arise, upgrade to a full multi-node Oracle RAC database 
without downtime or disruption
http://p.sf.net/sfu/oracle-sfdevnl
_______________________________________________
Nagios-users mailing list
Nagios-users at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when
reporting any issue. 
::: Messages without supporting info will risk being sent to /dev/null



------------------------------

Message: 11
Date: Tue, 28 Dec 2010 15:38:28 +0100
From: Marc Haber <mh+nagios-users at zugschlus.de>
Subject: Re: [Nagios-users] Host/service escalation notification
To: Nagios Users List <nagios-users at lists.sourceforge.net>
Message-ID: <20101228143828.GA25548 at torres.zugschlus.de>
Content-Type: text/plain; charset=utf-8

On Tue, Dec 28, 2010 at 04:19:21PM +0200, ??????? ???????? wrote:
> I want to create several levels of host and service escalation. Say 3
> levels. In notification I want to know on which escalation level this
> particular notification occurred. Can't find any variable reflecting
> escalation level.

Escalation levels are connected to the notification number, and
escalations can be kind of orthogonal. Do the Notification Number
($SERVICENOTIFICATIONNUMBER$ and/or $HOSTNOTIFICATIONNUMBER$) macros
the job?

Greetings
Marc

-- 
-----------------------------------------------------------------------------
Marc Haber         | "I don't trust Computers. They | Mailadresse im Header
Mannheim, Germany  |  lose things."    Winona Ryder | Fon: *49 621 72739834
Nordisch by Nature |  How to make an American Quilt | Fax: *49 3221 2323190



------------------------------

Message: 12
Date: Tue, 28 Dec 2010 07:46:05 -0700
From: "Daniel Wittenberg" <daniel.wittenberg.r0ko at statefarm.com>
Subject: Re: [Nagios-users] monitoring windows event viewer.
To: "Nagios Users List" <nagios-users at lists.sourceforge.net>
Message-ID:
    <31B0FE0A1A8166409E9DF35C6DEECB240555C774 at WPSCV6MM.OPR.STATEFARM.ORG>
Content-Type: text/plain;    charset="us-ascii"

Doesn't syslog-ng just consolidate the logs, it doesn't really monitor
anything right?

Dan

-----Original Message-----
From: Polifemo, Salvatore [mailto:polifemos at conedsolutions.com] 
Sent: Tuesday, December 28, 2010 8:38 AM
To: Nagios Users List
Subject: Re: [Nagios-users] monitoring windows event viewer.

If you will be monitoring event logs, you may want to look at
applications made for monitoring event logs.
One application that works well for us is syslog-ng.

Salvatore Polifemo
Sr. Systems Security Specialist
ConEdison Solutions
100 Summit Lake Drive
Valhalla, NY 10595

-----Original Message-----
From: Chris Beattie [mailto:cbeattie at geninfo.com] 
Sent: Tuesday, December 28, 2010 9:32 AM
To: Nagios Users List
Subject: Re: [Nagios-users] monitoring windows event viewer.

Toonz IT wrote:
> Is it possible to monitor specific event ids like disk error, fro 
> windows event viewer logs??

Yes, but you may have to use the NSClient++ agent on your Windows boxes 
and create custom commands to do it.

http://nsclient.org/nscp/wiki/CheckEventLog/CheckEventLog

Unfortunately, I deleted the Windows event log checks after I didn't 
need them any more, so I don't have a working example configuration to 
show you.


-- 
-Chris

------


Nothing in this message is intended to make or accept an offer or to
form a contract, except that an attachment that is an image of a
contract bearing the signature of an officer of our company may be or
become a contract. This message (including any attachments) is intended
only for the use of the individual or entity to whom it is addressed. It
may contain information that is non-public, proprietary, privileged,
confidential, and exempt from disclosure under applicable law or may
constitute as attorney work product. If you are not the intended
recipient, we hereby notify you that any use, dissemination,
distribution, or copying of this message is strictly prohibited. If you
have received this message in error, please notify us immediately by
telephone and delete this message immediately.

Thank you.


------------------------------------------------------------------------
------
Learn how Oracle Real Application Clusters (RAC) One Node allows
customers
to consolidate database storage, standardize their database environment,
and, 
should the need arise, upgrade to a full multi-node Oracle RAC database 
without downtime or disruption
http://p.sf.net/sfu/oracle-sfdevnl
_______________________________________________
Nagios-users mailing list
Nagios-users at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when
reporting any issue. 
::: Messages without supporting info will risk being sent to /dev/null

------------------------------------------------------------------------
------
Learn how Oracle Real Application Clusters (RAC) One Node allows
customers
to consolidate database storage, standardize their database environment,
and, 
should the need arise, upgrade to a full multi-node Oracle RAC database 
without downtime or disruption
http://p.sf.net/sfu/oracle-sfdevnl
_______________________________________________
Nagios-users mailing list
Nagios-users at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when
reporting any issue. 
::: Messages without supporting info will risk being sent to /dev/null



------------------------------

Message: 13
Date: Tue, 28 Dec 2010 09:56:33 -0500
From: "Polifemo, Salvatore" <polifemos at conedsolutions.com>
Subject: Re: [Nagios-users] monitoring windows event viewer.
To: "Nagios Users List" <nagios-users at lists.sourceforge.net>
Message-ID:
    <5BE7D0404F28DC44B780100927AA4CB018664C5F at whplex3.int.cecdes.net>
Content-Type: text/plain;    charset="us-ascii"

One use of syslog to set up rules and then take an action.
We look for error then send out an email.

Take a look at the syslog-ng forum.

Salvatore Polifemo
Sr. Systems Security Specialist
ConEdison Solutions
100 Summit Lake Drive
Valhalla, NY 10595


-----Original Message-----
From: Daniel Wittenberg [mailto:daniel.wittenberg.r0ko at statefarm.com] 
Sent: Tuesday, December 28, 2010 9:46 AM
To: Nagios Users List
Subject: Re: [Nagios-users] monitoring windows event viewer.

Doesn't syslog-ng just consolidate the logs, it doesn't really monitor
anything right?

Dan

-----Original Message-----
From: Polifemo, Salvatore [mailto:polifemos at conedsolutions.com] 
Sent: Tuesday, December 28, 2010 8:38 AM
To: Nagios Users List
Subject: Re: [Nagios-users] monitoring windows event viewer.

If you will be monitoring event logs, you may want to look at
applications made for monitoring event logs.
One application that works well for us is syslog-ng.

Salvatore Polifemo
Sr. Systems Security Specialist
ConEdison Solutions
100 Summit Lake Drive
Valhalla, NY 10595

-----Original Message-----
From: Chris Beattie [mailto:cbeattie at geninfo.com] 
Sent: Tuesday, December 28, 2010 9:32 AM
To: Nagios Users List
Subject: Re: [Nagios-users] monitoring windows event viewer.

Toonz IT wrote:
> Is it possible to monitor specific event ids like disk error, fro 
> windows event viewer logs??

Yes, but you may have to use the NSClient++ agent on your Windows boxes 
and create custom commands to do it.

http://nsclient.org/nscp/wiki/CheckEventLog/CheckEventLog

Unfortunately, I deleted the Windows event log checks after I didn't 
need them any more, so I don't have a working example configuration to 
show you.


-- 
-Chris

------


Nothing in this message is intended to make or accept an offer or to
form a contract, except that an attachment that is an image of a
contract bearing the signature of an officer of our company may be or
become a contract. This message (including any attachments) is intended
only for the use of the individual or entity to whom it is addressed. It
may contain information that is non-public, proprietary, privileged,
confidential, and exempt from disclosure under applicable law or may
constitute as attorney work product. If you are not the intended
recipient, we hereby notify you that any use, dissemination,
distribution, or copying of this message is strictly prohibited. If you
have received this message in error, please notify us immediately by
telephone and delete this message immediately.

Thank you.


------------------------------------------------------------------------
------
Learn how Oracle Real Application Clusters (RAC) One Node allows
customers
to consolidate database storage, standardize their database environment,
and, 
should the need arise, upgrade to a full multi-node Oracle RAC database 
without downtime or disruption
http://p.sf.net/sfu/oracle-sfdevnl
_______________________________________________
Nagios-users mailing list
Nagios-users at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when
reporting any issue. 
::: Messages without supporting info will risk being sent to /dev/null

------------------------------------------------------------------------
------
Learn how Oracle Real Application Clusters (RAC) One Node allows
customers
to consolidate database storage, standardize their database environment,
and, 
should the need arise, upgrade to a full multi-node Oracle RAC database 
without downtime or disruption
http://p.sf.net/sfu/oracle-sfdevnl
_______________________________________________
Nagios-users mailing list
Nagios-users at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when
reporting any issue. 
::: Messages without supporting info will risk being sent to /dev/null

------------------------------------------------------------------------
------
Learn how Oracle Real Application Clusters (RAC) One Node allows
customers
to consolidate database storage, standardize their database environment,
and, 
should the need arise, upgrade to a full multi-node Oracle RAC database 
without downtime or disruption
http://p.sf.net/sfu/oracle-sfdevnl
_______________________________________________
Nagios-users mailing list
Nagios-users at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when
reporting any issue. 
::: Messages without supporting info will risk being sent to /dev/null



------------------------------

Message: 14
Date: Tue, 28 Dec 2010 17:02:08 -0500
From: stan <stanb at panix.com>
Subject: [Nagios-users] Disapering popup windows
To: nagios List <nagios-users at lists.sourceforge.net>
Message-ID: <20101228220208.GA5294 at teddy.fas.com>
Content-Type: text/plain; charset=us-ascii

I have a 3.1.0 instnace which ahs been in service for a long time. Over the
years, we have had some issues with the popup windows in the browser
flashing up for a fraction of a second and disapering. I have always 
chrged this off to wierd browser behavior, however, I am now setting up a
child instance, and it is at 3.2.0.

Today I observed this ebhavior on the same browser, running on the smae
machine in the 3.1.0 instnace, but not in the 3.2.0 instnace. I am
reluctnat to upgrade the 3,1,0 instnace, as it is failry big, and in
production. Does nayone have any thoughts as to what might have chnaged
between these 2 versions that fixed this?


-- 
A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?
A: Top-posting.
Q: What is the most annoying thing in e-mail?



------------------------------

Message: 15
Date: Wed, 29 Dec 2010 11:07:17 +0100
From: Sebastian Ries <Sebastian.Ries at dtnet.de>
Subject: Re: [Nagios-users] Plugin: nagiosVMware
To: nagios-users-ML <nagios-users at lists.sourceforge.net>
Message-ID: <1293617237.20786.11.camel at bofh.dtnet.de>
Content-Type: text/plain

Hi

> I am trying to Configure the nagiosVMware plugin I found on
>https://www.monitoringexchange.org/inventory/Check-Plugins/Virtualization/VMWare-%2528ESX%2529/nagiosVMware
>e

> This is the same effect with all ESX servers. All are ESX4.0
> 
> in the ....cmd file I get this error
> [2010-12-28 14:17:16.275 7324B90 warning 'App'] Closing Response
> processing in unexpected state: 3

OK

I found that this error is printed to stdout from resxtop and therefore
the plugin comes into an error while parsing the output.

As a workaround I put:
   |grep -v \"Closing Response processing in unexpected state: 3\"
into the command within nsca_vmware.pl

so for me the Problem is solved ;-)

Regards
Sebastian Ries

-- 
------------------------------------------------------------
DT Netsolution GmbH -  Talaeckerstr. 30 -  D-70437 Stuttgart
Tel: +49-711-849910-36               Fax: +49-711-849910-936
WEB: http://www.dtnet.de/     email: Sebastian.Ries at dtnet.de



------------------------------

Message: 16
Date: Wed, 29 Dec 2010 02:19:35 -0800
From: Patrick Morris <patrick.morris at hp.com>
Subject: Re: [Nagios-users] Disapering popup windows
To: nagios-users at lists.sourceforge.net
Message-ID: <4D1B0B37.5030808 at hp.com>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed

On 12/28/2010 2:02 PM, stan wrote:
> I have a 3.1.0 instnace which ahs been in service for a long time. Over the
> years, we have had some issues with the popup windows in the browser
> flashing up for a fraction of a second and disapering. I have always
> chrged this off to wierd browser behavior, however, I am now setting up a
> child instance, and it is at 3.2.0.
>
> Today I observed this ebhavior on the same browser, running on the smae
> machine in the 3.1.0 instnace, but not in the 3.2.0 instnace. I am
> reluctnat to upgrade the 3,1,0 instnace, as it is failry big, and in
> production. Does nayone have any thoughts as to what might have chnaged
> between these 2 versions that fixed this?

Popup windows?  I've never seen Nagios use them.



------------------------------

Message: 17
Date: Wed, 29 Dec 2010 11:31:32 +0100
From: "diego.roccia at gmail.com" <diego.roccia at gmail.com>
Subject: Re: [Nagios-users] Disapering popup windows
To: Nagios Users List <nagios-users at lists.sourceforge.net>
Message-ID:
    <AANLkTim5w4Db+-5Ab8mQ+F0VRKEAbLdAA3LbhFWE0fey at mail.gmail.com>
Content-Type: text/plain; charset=UTF-8

Do you mean actual popup windows or overlay frames, like the ones
used, for example, by pnp4nagios to embed graphs?

On Tue, Dec 28, 2010 at 11:02 PM, stan <stanb at panix.com> wrote:
> I have a 3.1.0 instnace which ahs been in service for a long time. Over the
> years, we have had some issues with the popup windows in the browser
> flashing up for a fraction of a second and disapering. I have always
> chrged this off to wierd browser behavior, however, I am now setting up a
> child instance, and it is at 3.2.0.
>
> Today I observed this ebhavior on the same browser, running on the smae
> machine in the 3.1.0 instnace, but not in the 3.2.0 instnace. I am
> reluctnat to upgrade the 3,1,0 instnace, as it is failry big, and in
> production. Does nayone have any thoughts as to what might have chnaged
> between these 2 versions that fixed this?
>
>
> --
> A: Because it messes up the order in which people normally read text.
> Q: Why is top-posting such a bad thing?
> A: Top-posting.
> Q: What is the most annoying thing in e-mail?
>
> ------------------------------------------------------------------------------
> Learn how Oracle Real Application Clusters (RAC) One Node allows customers
> to consolidate database storage, standardize their database environment, and,
> should the need arise, upgrade to a full multi-node Oracle RAC database
> without downtime or disruption
> http://p.sf.net/sfu/oracle-sfdevnl
> _______________________________________________
> Nagios-users mailing list
> Nagios-users at lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/nagios-users
> ::: Please include Nagios version, plugin version (-v) and OS when reporting 
>any issue.
> ::: Messages without supporting info will risk being sent to /dev/null
>



-- 
Diego Roccia
diego.roccia (at) gmail (dot) com



------------------------------

Message: 18
Date: Wed, 29 Dec 2010 11:32:07 +0100
From: "diego.roccia at gmail.com" <diego.roccia at gmail.com>
Subject: Re: [Nagios-users] Disapering popup windows
To: Nagios Users List <nagios-users at lists.sourceforge.net>
Message-ID:
    <AANLkTinWHEhfDxLnwcOidHdHffgcDDYZG_-O_8-UOoWK at mail.gmail.com>
Content-Type: text/plain; charset=UTF-8

On Wed, Dec 29, 2010 at 11:31 AM, diego.roccia at gmail.com
<diego.roccia at gmail.com> wrote:
> Do you mean actual popup windows or overlay frames, like the ones
> used, for example, by pnp4nagios to embed graphs?
>
> On Tue, Dec 28, 2010 at 11:02 PM, stan <stanb at panix.com> wrote:
>> I have a 3.1.0 instnace which ahs been in service for a long time. Over the
>> years, we have had some issues with the popup windows in the browser
>> flashing up for a fraction of a second and disapering. I have always
>> chrged this off to wierd browser behavior, however, I am now setting up a
>> child instance, and it is at 3.2.0.
>>
>> Today I observed this ebhavior on the same browser, running on the smae
>> machine in the 3.1.0 instnace, but not in the 3.2.0 instnace. I am
>> reluctnat to upgrade the 3,1,0 instnace, as it is failry big, and in
>> production. Does nayone have any thoughts as to what might have chnaged
>> between these 2 versions that fixed this?
>>
>>
>> --
>> A: Because it messes up the order in which people normally read text.
>> Q: Why is top-posting such a bad thing?
>> A: Top-posting.
>> Q: What is the most annoying thing in e-mail?
>>
>> 
------------------------------------------------------------------------------
>> Learn how Oracle Real Application Clusters (RAC) One Node allows customers
>> to consolidate database storage, standardize their database environment, and,
>> should the need arise, upgrade to a full multi-node Oracle RAC database
>> without downtime or disruption
>> http://p.sf.net/sfu/oracle-sfdevnl
>> _______________________________________________
>> Nagios-users mailing list
>> Nagios-users at lists.sourceforge.net
>> https://lists.sourceforge.net/lists/listinfo/nagios-users
>> ::: Please include Nagios version, plugin version (-v) and OS when reporting 
>>any issue.
>> ::: Messages without supporting info will risk being sent to /dev/null
>>
>
>
>
> --
> Diego Roccia
> diego.roccia (at) gmail (dot) com
>

OPS, sorry for the top posting :)

-- 
Diego Roccia
diego.roccia (at) gmail (dot) com



------------------------------

Message: 19
Date: Wed, 29 Dec 2010 12:05:34 +0100
From: Hugo van der Kooij <hvdkooij at vanderkooij.org>
Subject: Re: [Nagios-users] Disapering popup windows
To: Nagios Users List <nagios-users at lists.sourceforge.net>
Message-ID: <4d2a6d2c87528eb7d1934ffa337c5d78 at vps517.directvps.nl>
Content-Type: text/plain; charset=UTF-8; format=flowed

On Tue, 28 Dec 2010 17:02:08 -0500, stan <stanb at panix.com> wrote:
> I have a 3.1.0 instnace which ahs been in service for a long time.

Please elaborate and please fix your output before sending something to 
a mailinglist with plenty of errors that make your message hard to read.

Hugo.

-- 
hvdkooij at vanderkooij.org  http://hugo.vanderkooij.org/
PGP/GPG? Use: http://hugo.vanderkooij.org/0x58F19981.asc



------------------------------

Message: 20
Date: Wed, 29 Dec 2010 16:51:17 +0530
From: Toonz IT <it.toonz at gmail.com>
Subject: Re: [Nagios-users] monitoring windows event viewer.
To: Nagios Users List <nagios-users at lists.sourceforge.net>
Message-ID:
    <AANLkTinKaRojHKZNrAowJWtWnZziNZux8idO_XNjwLS=@mail.gmail.com>
Content-Type: text/plain; charset="iso-8859-1"

Thank You, exactly what we wanted!!

:-)



On Tue, Dec 28, 2010 at 8:01 PM, Chris Beattie <cbeattie at geninfo.com> wrote:

> Toonz IT wrote:
> > Is it possible to monitor specific event ids like disk error, fro
> > windows event viewer logs??
>
> Yes, but you may have to use the NSClient++ agent on your Windows boxes
> and create custom commands to do it.
>
> http://nsclient.org/nscp/wiki/CheckEventLog/CheckEventLog
>
> Unfortunately, I deleted the Windows event log checks after I didn't
> need them any more, so I don't have a working example configuration to
> show you.
>
>
> --
> -Chris
>
> ------
>
>
> Nothing in this message is intended to make or accept an offer or to form a
> contract, except that an attachment that is an image of a contract bearing
> the signature of an officer of our company may be or become a contract. This
> message (including any attachments) is intended only for the use of the
> individual or entity to whom it is addressed. It may contain information
> that is non-public, proprietary, privileged, confidential, and exempt from
> disclosure under applicable law or may constitute as attorney work product.
> If you are not the intended recipient, we hereby notify you that any use,
> dissemination, distribution, or copying of this message is strictly
> prohibited. If you have received this message in error, please notify us
> immediately by telephone and delete this message immediately.
>
> Thank you.
>
>
>
> ------------------------------------------------------------------------------
> Learn how Oracle Real Application Clusters (RAC) One Node allows customers
> to consolidate database storage, standardize their database environment,
> and,
> should the need arise, upgrade to a full multi-node Oracle RAC database
> without downtime or disruption
> http://p.sf.net/sfu/oracle-sfdevnl
> _______________________________________________
> Nagios-users mailing list
> Nagios-users at lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/nagios-users
> ::: Please include Nagios version, plugin version (-v) and OS when
> reporting any issue.
> ::: Messages without supporting info will risk being sent to /dev/null
>
-------------- next part --------------
An HTML attachment was scrubbed...

------------------------------

Message: 21
Date: Wed, 29 Dec 2010 09:14:27 -0500
From: stan <stanb at panix.com>
Subject: Re: [Nagios-users] Disapering popup windows
To: Patrick Morris <patrick.morris at hp.com>
Cc: nagios-users at lists.sourceforge.net
Message-ID: <20101229141427.GA25090 at teddy.fas.com>
Content-Type: text/plain; charset=us-ascii

On Wed, Dec 29, 2010 at 02:19:35AM -0800, Patrick Morris wrote:
> On 12/28/2010 2:02 PM, stan wrote:
> > I have a 3.1.0 instnace which ahs been in service for a long time. Over the
> > years, we have had some issues with the popup windows in the browser
> > flashing up for a fraction of a second and disapering. I have always
> > chrged this off to wierd browser behavior, however, I am now setting up a
> > child instance, and it is at 3.2.0.
> >
> > Today I observed this ebhavior on the same browser, running on the smae
> > machine in the 3.1.0 instnace, but not in the 3.2.0 instnace. I am
> > reluctnat to upgrade the 3,1,0 instnace, as it is failry big, and in
> > production. Does nayone have any thoughts as to what might have chnaged
> > between these 2 versions that fixed this?
> 
> Popup windows?  I've never seen Nagios use them.
> 

OK, perhaps my termionology s imprecise. Here is an example, from the main
page go to Configuration -> View Config At that point you have a pulldown
for Object type. On the old system, it flashes up for less than a second
and the disappers.

Make more sense, now?
-- 
A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?
A: Top-posting.
Q: What is the most annoying thing in e-mail?



------------------------------

------------------------------------------------------------------------------
Learn how Oracle Real Application Clusters (RAC) One Node allows customers
to consolidate database storage, standardize their database environment, and, 
should the need arise, upgrade to a full multi-node Oracle RAC database 
without downtime or disruption
http://p.sf.net/sfu/oracle-sfdevnl

------------------------------

_______________________________________________
Nagios-users mailing list
Nagios-users at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users


End of Nagios-users Digest, Vol 55, Issue 21
********************************************



      
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://www.monitoring-lists.org/archive/users/attachments/20101229/378e23c7/attachment.html>
-------------- next part --------------
------------------------------------------------------------------------------
Learn how Oracle Real Application Clusters (RAC) One Node allows customers
to consolidate database storage, standardize their database environment, and, 
should the need arise, upgrade to a full multi-node Oracle RAC database 
without downtime or disruption
http://p.sf.net/sfu/oracle-sfdevnl
-------------- next part --------------
_______________________________________________
Nagios-users mailing list
Nagios-users at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. 
::: Messages without supporting info will risk being sent to /dev/null


More information about the Users mailing list