This has happened a few times where all of a sudden alerts isn't really pickup up the queries? looking at the alert and it is claiming 0 matching which is not true....
when clicking on the show alert in dashboard, I get hits
Last time I had to reset all jobs. Why does it keep doing this? There's also no way to tell whether alerting is stuck like this also, so unless someone checks, we won't know and won't get alerted.
Jobs says successful
Now even a reset will not fix this... it is staying at 0 matches... ?! please help.
Alerts - all showing 0
-
CFT6Server
- Posts: 506
- Joined: Wed Apr 15, 2015 4:21 pm
Alerts - all showing 0
You do not have the required permissions to view the files attached to this post.
-
jolson
- Attack Rabbit
- Posts: 2560
- Joined: Thu Feb 12, 2015 12:40 pm
Re: Alerts - all showing 0
When you click through the alert to go to the query you have setup, what is the URL of that query? Please post that URL here.Now even a reset will not fix this... it is staying at 0 matches... ?! please help.
-
CFT6Server
- Posts: 506
- Joined: Wed Apr 15, 2015 4:21 pm
Re: Alerts - all showing 0
I've left this for the weekend and came back to the alerts checking again. Not sure if this is just temporary? Have you seen that behavior?
here's a sample of the url as requested
here's a sample of the url as requested
Code: Select all
https://<IP>/nagioslogserver/index.php/dashboard#/dashboard/script/logserver.js?from=30m&services=%7B%22query%22:%7B%22list%22:%7B%220%22:%7B%22query%22:%22kdcnap*%20AND%20%5C%22failed%20password%5C%22%22,%22alias%22:%22%22,%22color%22:%22%234D89F9%22,%22id%22:0,%22pin%22:false,%22type%22:%22lucene%22,%22enable%22:true%7D%7D,%22ids%22:%5B0%5D%7D,%22filter%22:%7B%22list%22:%7B%220%22:%7B%22type%22:%22time%22,%22field%22:%22@timestamp%22,%22from%22:%22now-24h%22,%22to%22:%22now%22,%22mandate%22:%22must%22,%22active%22:true,%22alias%22:%22%22,%22id%22:0%7D%7D,%22ids%22:%5B0%5D%7D%7D-
jolson
- Attack Rabbit
- Posts: 2560
- Joined: Thu Feb 12, 2015 12:40 pm
Re: Alerts - all showing 0
I have not seen this behavior until recently, and I'm not sure what might cause it. How many alerts do you have on your Nagios Log Server node? You might reference the following post: https://support.nagios.com/forum/viewto ... 37&t=33937Have you seen that behavior?
-
CFT6Server
- Posts: 506
- Joined: Wed Apr 15, 2015 4:21 pm
Re: Alerts - all showing 0
We only have 4 alerts configured currently, so not too much. I will update the interval to see if this improves on anything if this comes up again. Once the checks is running, looks like it doesn't run into any issues.
-
jolson
- Attack Rabbit
- Posts: 2560
- Joined: Thu Feb 12, 2015 12:40 pm
Re: Alerts - all showing 0
Sounds good - let us know what you experience, and if there are any correlations that might allow us to reproduce this on our end.