RHEL 8 Nagios xi 5.8.7 Fresh install

This support forum board is for support questions relating to Nagios xi, our flagship commercial network monitoring solution.
hbouma
Posts: 483
Joined: Tue Feb 27, 2018 9:31 am

RHEL 8 Nagios xi 5.8.7 Fresh install

Post by hbouma »

Good afternoon,

We performed a fresh install of Nagios xi on a RHEL 8.5 VM. After the install, we started seeing some oddities such as the check_ncpa_service_warning command having no definition. I have fixed this definition, ran a forced upgrade (/tmp/nagiosxi/upgrade -f).

We are hoping someone can help us check if everything installed properly. I have the install.log and upgrade.log file available.
Top
User avatar
pbroste
Posts: 1288
Joined: Tue Jun 01, 2021 1:27 pm

Re: RHEL 8 Nagios xi 5.8.7 Fresh install

Post by pbroste »

Hello @hbouma

Sure, sounds good please PM me the install.log, upgrade.log, and the System Profile, and will run through them and check.

Thanks,
Perry
Top
User avatar
pbroste
Posts: 1288
Joined: Tue Jun 01, 2021 1:27 pm

Re: RHEL 8 Nagios xi 5.8.7 Fresh install

Post by pbroste »

Hello @hbouma

Thanks for following up, appears that the Nagios xi server is not able to connect to the offloaded database server (10.201.252.48). Verify the instructions found here:

https://assets.nagios.com/downloads/nag ... Server.pdf

Thanks,
Perry
Top
hbouma
Posts: 483
Joined: Tue Feb 27, 2018 9:31 am

Re: RHEL 8 Nagios xi 5.8.7 Fresh install

Post by hbouma »

Interesting, we had done all of that prior to opening the ticket. I just went through and doublechecked with the STATUS command and can communicate properly. I also double checked all the configuration files and verified that usernames/passwords/IP addresses are all correct.

Can you let me know what dates/times you see the error occuring?

I can run the following commands without issues:

Code: Select all

[root@SERVERNAME ~]# mysql -u nagios -p'SECUREPASSWORD' -h 10.201.252.48 -e STATUS;
mysql: [Warning] Using a password on the command line interface can be insecure.
--------------
mysql  Ver 8.0.26 for Linux on x86_64 (Source distribution)

Connection id:          349282
Current database:
Current user:           nagios@FQDN
SSL:                    Not in use
Current pager:          stdout
Using outfile:          ''
Using delimiter:        ;
Server version:         5.5.5-10.3.28-MariaDB MariaDB Server
Protocol version:       10
Connection:             10.201.252.48 via TCP/IP
Server characterset:    latin1
Db     characterset:    latin1
Client characterset:    latin1
Conn.  characterset:    latin1
TCP port:               3306
Binary data as:         Hexadecimal
Uptime:                 5 days 15 hours 55 min 14 sec

Threads: 80  Questions: 5361261  Slow queries: 0  Opens: 22838  Flush tables: 2  Open tables: 30  Queries per second avg: 10.956
--------------

[root@SERVERNAME ~]# mysql -u nagiosql -p'SECUREPASSWORD' -h 10.201.252.48 -e STATUS;
mysql: [Warning] Using a password on the command line interface can be insecure.
--------------
mysql  Ver 8.0.26 for Linux on x86_64 (Source distribution)

Connection id:          349283
Current database:
Current user:           nagiosql@FQDN
SSL:                    Not in use
Current pager:          stdout
Using outfile:          ''
Using delimiter:        ;
Server version:         5.5.5-10.3.28-MariaDB MariaDB Server
Protocol version:       10
Connection:             10.201.252.48 via TCP/IP
Server characterset:    latin1
Db     characterset:    latin1
Client characterset:    latin1
Conn.  characterset:    latin1
TCP port:               3306
Binary data as:         Hexadecimal
Uptime:                 5 days 15 hours 55 min 14 sec

Threads: 80  Questions: 5361265  Slow queries: 0  Opens: 22838  Flush tables: 2  Open tables: 30  Queries per second avg: 10.956
--------------

[root@SERVERNAME ~]# mysql -u nagiosxi -p'SECUREPASSWORD' -h 10.201.252.48 -e STATUS;
mysql: [Warning] Using a password on the command line interface can be insecure.
--------------
mysql  Ver 8.0.26 for Linux on x86_64 (Source distribution)

Connection id:          349284
Current database:
Current user:           nagiosxi@FQDN
SSL:                    Not in use
Current pager:          stdout
Using outfile:          ''
Using delimiter:        ;
Server version:         5.5.5-10.3.28-MariaDB MariaDB Server
Protocol version:       10
Connection:             10.201.252.48 via TCP/IP
Server characterset:    latin1
Db     characterset:    latin1
Client characterset:    latin1
Conn.  characterset:    latin1
TCP port:               3306
Binary data as:         Hexadecimal
Uptime:                 5 days 15 hours 55 min 16 sec

Threads: 80  Questions: 5361282  Slow queries: 0  Opens: 22838  Flush tables: 2  Open tables: 30  Queries per second avg: 10.956
Top
User avatar
pbroste
Posts: 1288
Joined: Tue Jun 01, 2021 1:27 pm

Re: RHEL 8 Nagios xi 5.8.7 Fresh install

Post by pbroste »

Hello @hbouma

Thanks for following up, with the details appears that the database is connected. I was caught off guard by the database logging events associated with localhost we believe that is noise in the logging.

Please verify the status of SELinux, as we see log event messages that state:
SELinux policy enabled; httpd running as context system_u:system_r:httpd_t:s0
Status:

Code: Select all

sestatus
Disable:

Code: Select all

sudo setenforce Permissive
Then run through the reconfig script and let us know how thing look:

Code: Select all

/usr/local/nagiosxi/scripts/reconfigure_nagios.sh
Thanks,
Perry
Top
hbouma
Posts: 483
Joined: Tue Feb 27, 2018 9:31 am

Re: RHEL 8 Nagios xi 5.8.7 Fresh install

Post by hbouma »

SELinux is in permissive mode already:

Code: Select all

 sestatus
SELinux status:                 enabled
SELinuxfs mount:                /sys/fs/selinux
SELinux root directory:         /etc/selinux
Loaded policy name:             targeted
Current mode:                   permissive
Mode from config file:          permissive
Policy MLS status:              enabled
Policy deny_unknown status:     allowed
Memory protection checking:     actual (secure)
Max kernel policy version:      33
The reconfigure does have some errors about no default contact, which is expected as we have not yet migrated our contacts and groups from the old server to the new server.

Code: Select all

/usr/local/nagiosxi/scripts/reconfigure_nagios.sh

--- reset_config_perms.sh ------------
> Setting script permissions
> Setting CCM script permissions
> Setting special script permissions
> Setting special component script permissions
> Setting migrate permissions
> Setting configuration file/directory permissions
> Setting perfdata directory and RRD permissions
> Setting libexec directory permissions
> Setting Nagios xi config permissions
> Setting NOM checkpoint user:group permissions
> + Setting Recurring Downtime file user:group permissions
> + Setting BPI configuration file user:group permissions
--------------------------------------

--- ccm_import.php -------------------
> Setting import directory: /usr/local/nagios/etc/import/
> Importing config files into the CCM
  No files to import
--------------------------------------

--- ccm_export.php -------------------
> Writing CCM configuration to Nagios files
  Finished writing out configuraton
--------------------------------------

--------------------------------------
> Verifying configuration with Nagios Core
> Output:
Nagios Core 4.4.6
Copyright (c) 2009-present Nagios Core Development Team and Community Contributors
Copyright (c) 1999-2009 Ethan Galstad
Last Modified: 2020-04-28
License: GPL

Website: https://www.nagios.org
Reading configuration data...
   Read main config file okay...
   Read object config files okay...

Running pre-flight check on configuration data...

Checking objects...
Warning: Service 'CPU Usage' on host 'cxonaitomrv0301' has no default contacts or contactgroups defined!
Warning: Service 'Carbon Black' on host 'cxonaitomrv0301' has no default contacts or contactgroups defined!
Warning: Service 'DNS IP Match' on host 'localhost' has no default contacts or contactgroups defined!
Warning: Service 'DNS Resolution' on host 'localhost' has no default contacts or contactgroups defined!
Warning: Service 'Disk Usage on /' on host 'localhost' has no default contacts or contactgroups defined!
Warning: Service 'Disk Usage on /boot' on host 'localhost' has no default contacts or contactgroups defined!
Warning: Service 'Disk Usage on /dev/mapper/vg00-home' on host 'localhost' has no default contacts or contactgroups defined!
Warning: Service 'Disk Usage on /dev/mapper/vg00-opt' on host 'localhost' has no default contacts or contactgroups defined!
Warning: Service 'Disk Usage on /dev/mapper/vg00-root' on host 'localhost' has no default contacts or contactgroups defined!
Warning: Service 'Disk Usage on /dev/mapper/vg00-tmp' on host 'localhost' has no default contacts or contactgroups defined!
Warning: Service 'Disk Usage on /dev/mapper/vg00-usr' on host 'localhost' has no default contacts or contactgroups defined!
Warning: Service 'Disk Usage on /dev/mapper/vg00-var' on host 'localhost' has no default contacts or contactgroups defined!
Warning: Service 'Disk Usage on /dev/mapper/vg00-var_log' on host 'localhost' has no default contacts or contactgroups defined!
Warning: Service 'Disk Usage on /dev/mapper/vg00-var_log_audit' on host 'localhost' has no default contacts or contactgroups defined!
Warning: Service 'Disk Usage on /dev/mapper/vgapps01-lvhttpd' on host 'localhost' has no default contacts or contactgroups defined!
Warning: Service 'Disk Usage on /dev/mapper/vgapps01-lvncpa' on host 'localhost' has no default contacts or contactgroups defined!
Warning: Service 'Disk Usage on /dev/mapper/vgapps01-lvsnmptt' on host 'localhost' has no default contacts or contactgroups defined!
Warning: Service 'Disk Usage on /dev/mapper/vgapps01-lvstore' on host 'localhost' has no default contacts or contactgroups defined!
Warning: Service 'Disk Usage on /dev/mapper/vgapps01-lvtidal' on host 'localhost' has no default contacts or contactgroups defined!
Warning: Service 'Disk Usage on /dev/mapper/vgapps01-lvusr_local_nagios' on host 'localhost' has no default contacts or contactgroups defined!
Warning: Service 'Disk Usage on /dev/mapper/vgapps01-lvusr_local_nagiosmobile' on host 'localhost' has no default contacts or contactgroups defined!
Warning: Service 'Disk Usage on /dev/mapper/vgapps01-lvusr_local_nagiosxi' on host 'localhost' has no default contacts or contactgroups defined!
Warning: Service 'Disk Usage on /dev/mapper/vgapps01-lvusr_local_nagvis' on host 'localhost' has no default contacts or contactgroups defined!
Warning: Service 'Disk Usage on /dev/mapper/vgapps01-lvusr_local_nrdp' on host 'localhost' has no default contacts or contactgroups defined!
Warning: Service 'Disk Usage on /dev/mapper/vgapps01-lvusr_local_nsis' on host 'localhost' has no default contacts or contactgroups defined!
Warning: Service 'Disk Usage on /dev/sda1' on host 'localhost' has no default contacts or contactgroups defined!
Warning: Service 'Disk Usage on /home' on host 'localhost' has no default contacts or contactgroups defined!
Warning: Service 'Disk Usage on /opt' on host 'localhost' has no default contacts or contactgroups defined!
Warning: Service 'Disk Usage on /opt/TIDAL' on host 'localhost' has no default contacts or contactgroups defined!
Warning: Service 'Disk Usage on /srv/bit9' on host 'localhost' has no default contacts or contactgroups defined!
Warning: Service 'Disk Usage on /tmp' on host 'localhost' has no default contacts or contactgroups defined!
Warning: Service 'Disk Usage on /usr' on host 'localhost' has no default contacts or contactgroups defined!
Warning: Service 'Disk Usage on /usr/local/integrate' on host 'localhost' has no default contacts or contactgroups defined!
Warning: Service 'Disk Usage on /usr/local/nagios' on host 'localhost' has no default contacts or contactgroups defined!
Warning: Service 'Disk Usage on /usr/local/nagiosmobile' on host 'localhost' has no default contacts or contactgroups defined!
Warning: Service 'Disk Usage on /usr/local/nagiosxi' on host 'localhost' has no default contacts or contactgroups defined!
Warning: Service 'Disk Usage on /usr/local/ncpa' on host 'localhost' has no default contacts or contactgroups defined!
Warning: Service 'Disk Usage on /usr/local/nrdp' on host 'localhost' has no default contacts or contactgroups defined!
Warning: Service 'Disk Usage on /usr/local/nsis' on host 'localhost' has no default contacts or contactgroups defined!
Warning: Service 'Disk Usage on /var' on host 'localhost' has no default contacts or contactgroups defined!
Warning: Service 'Disk Usage on /var/crash' on host 'localhost' has no default contacts or contactgroups defined!
Warning: Service 'Disk Usage on /var/log' on host 'localhost' has no default contacts or contactgroups defined!
Warning: Service 'Disk Usage on /var/log/audit' on host 'localhost' has no default contacts or contactgroups defined!
Warning: Service 'Disk Usage on /var/log/httpd' on host 'localhost' has no default contacts or contactgroups defined!
Warning: Service 'Disk Usage on /var/log/snmptt' on host 'localhost' has no default contacts or contactgroups defined!
Warning: Service 'Disk Usage on /var/nagiosramdisk' on host 'localhost' has no default contacts or contactgroups defined!
Warning: Service 'Disk Usage on /var/tmp' on host 'localhost' has no default contacts or contactgroups defined!
Warning: Service 'I/O Wait' on host 'localhost' has no default contacts or contactgroups defined!
Warning: Service 'Load' on host 'localhost' has no default contacts or contactgroups defined!
Warning: Service 'Memory Usage' on host 'localhost' has no default contacts or contactgroups defined!
Warning: Service 'Nagios xi Daemons' on host 'localhost' has no default contacts or contactgroups defined!
Warning: Service 'Nagios xi Jobs' on host 'localhost' has no default contacts or contactgroups defined!
Warning: Service 'Proccess count for: httpd' on host 'localhost' has no default contacts or contactgroups defined!
Warning: Service 'Proccess count for: npcd' on host 'localhost' has no default contacts or contactgroups defined!
Warning: Service 'Proccess count for: ntpd' on host 'localhost' has no default contacts or contactgroups defined!
Warning: Service 'Proccess count for: snmptrapd' on host 'localhost' has no default contacts or contactgroups defined!
Warning: Service 'Proccess count for: snmptt' on host 'localhost' has no default contacts or contactgroups defined!
Warning: Service 'Service status for: Carbon Black' on host 'localhost' has no default contacts or contactgroups defined!
Warning: Service 'Service status for: auditd' on host 'localhost' has no default contacts or contactgroups defined!
Warning: Service 'Service status for: clamav' on host 'localhost' has no default contacts or contactgroups defined!
Warning: Service 'Service status for: crond' on host 'localhost' has no default contacts or contactgroups defined!
Warning: Service 'Service status for: ncpa_listener' on host 'localhost' has no default contacts or contactgroups defined!
Warning: Service 'Service status for: ncpa_passive' on host 'localhost' has no default contacts or contactgroups defined!
Warning: Service 'Service status for: ntpd' on host 'localhost' has no default contacts or contactgroups defined!
Warning: Service 'Service status for: rsyslog' on host 'localhost' has no default contacts or contactgroups defined!
Warning: Service 'Service status for: snmpd' on host 'localhost' has no default contacts or contactgroups defined!
Warning: Service 'Service status for: sshd' on host 'localhost' has no default contacts or contactgroups defined!
Warning: Service 'Service status for: sssd' on host 'localhost' has no default contacts or contactgroups defined!
Warning: Service 'Service status for: tidal' on host 'localhost' has no default contacts or contactgroups defined!
Warning: Service 'Swap Usage' on host 'localhost' has no default contacts or contactgroups defined!
Warning: Service 'auditd' on host 'localhost' has no default contacts or contactgroups defined!
Warning: Service 'checkresults folder watch: File Count query of /var/nagiosramdisk/spool/checkresults/' on host 'localhost' has no default contacts or contactgroups defined!
Warning: Service 'chronyd' on host 'localhost' has no default contacts or contactgroups defined!
Warning: Service 'crond' on host 'localhost' has no default contacts or contactgroups defined!
Warning: Service 'ens192 Bandwidth - Inbound' on host 'localhost' has no default contacts or contactgroups defined!
Warning: Service 'ens192 Bandwidth - Outbound' on host 'localhost' has no default contacts or contactgroups defined!
Warning: Service 'httpd' on host 'localhost' has no default contacts or contactgroups defined!
Warning: Service 'nagios' on host 'localhost' has no default contacts or contactgroups defined!
Warning: Service 'ncpa_listener' on host 'localhost' has no default contacts or contactgroups defined!
Warning: Service 'ncpa_passive' on host 'localhost' has no default contacts or contactgroups defined!
Warning: Service 'npcd' on host 'localhost' has no default contacts or contactgroups defined!
Warning: Service 'perfdata folder watch: File Count query of /var/nagiosramdisk/spool/perfdata' on host 'localhost' has no default contacts or contactgroups defined!
Warning: Service 'rsyslogd' on host 'localhost' has no default contacts or contactgroups defined!
Warning: Service 'snmptrapd' on host 'localhost' has no default contacts or contactgroups defined!
Warning: Service 'snmptt folder watch: File Count query of /var/spool/snmptt/' on host 'localhost' has no default contacts or contactgroups defined!
Warning: Service 'sshd' on host 'localhost' has no default contacts or contactgroups defined!
Warning: Service 'sssd' on host 'localhost' has no default contacts or contactgroups defined!
Warning: Service 'xidpe folder atch: File Count query of /var/nagiosramdisk/spool/xidpe' on host 'localhost' has no default contacts or contactgroups defined!
        Checked 108 services.
Warning: Host 'localhost' has no default contacts or contactgroups defined!
        Checked 2 hosts.
        Checked 1 host groups.
        Checked 0 service groups.
        Checked 1 contacts.
        Checked 2 contact groups.
        Checked 140 commands.
        Checked 8 time periods.
        Checked 0 host escalations.
        Checked 0 service escalations.
Checking for circular paths...
        Checked 2 hosts
        Checked 0 service dependencies
        Checked 0 host dependencies
        Checked 8 timeperiods
Checking global event handlers...
Checking obsessive compulsive processor commands...
Checking misc settings...

Total Warnings: 89
Total Errors:   0

Things look okay - No serious problems were detected during the pre-flight check
> Return Code: 0
Top
User avatar
pbroste
Posts: 1288
Joined: Tue Jun 01, 2021 1:27 pm

Re: RHEL 8 Nagios xi 5.8.7 Fresh install

Post by pbroste »

Hello @hbouma

Discussion with colleagues and the suggestion to (temperarly) disable selinux and then go ahead and restart the nagios service by bouncing:

Code: Select all

systemctl restart nagios
Please let us know how things look.

Thanks,
Perry
Top
hbouma
Posts: 483
Joined: Tue Feb 27, 2018 9:31 am

Re: RHEL 8 Nagios xi 5.8.7 Fresh install

Post by hbouma »

pbroste wrote:Hello @hbouma

Discussion with colleagues and the suggestion to (temperarly) disable selinux and then go ahead and restart the nagios service by bouncing:

Code: Select all

systemctl restart nagios
This has been done.
Please let us know how things look.
That is the problem, we don't know what is broken. Even when things commands had blank configurations, things were showing "green" in the System Component Status' were all green. We have no idea what is broken yet and want to figure out a way to try and validate all the settings.
Top
User avatar
pbroste
Posts: 1288
Joined: Tue Jun 01, 2021 1:27 pm

Re: RHEL 8 Nagios xi 5.8.7 Fresh install

Post by pbroste »

Hello @hbouma

Thanks for setting that, and you are correct now that we have Selinux out of the way (good start) we can now move forward to see what is going on with the rest.

We know that we will reboot the server for the SELinux settings to take hold, and want to have you do that when you get a chance. Then let it run for a bit and then send over an updated System Profile so we can see how things look.

Thanks,
Perry
Top
hbouma
Posts: 483
Joined: Tue Feb 27, 2018 9:31 am

Re: RHEL 8 Nagios xi 5.8.7 Fresh install

Post by hbouma »

Ok, I already rebooted the server to make sure that SELinux was actually disabled. I will send you a profile in a few hours.
Top

Return to “Nagios xi”