Nagios Support Forum

Hi all

Is there any way to know which local admin user has modified any host/service in Nagios xi????

We need to know it to check possible error modifying host/service config???

I do not knowif it is possible.

Thanks and regards

I think some versions of Nagios xi might offer a configuration history feature that shows when a configuration file was changed. This wouldn't pinpoint the user, but it could indicate when a potential error occurred. Consider setting up a system to monitor the configuration files for Nagios xi. This could involve tools that alert you when these files are modified. However, this wouldn't directly identify the user but could help identify changes for further investigation.

Hello @rambertnala,

The Core Config Manager has a feature called Configuration Snapshots that lists all past changes to your configurations. This section under Core Config Manager->Quick Tools->Configuration Snapshots lists your past configurations and whether they were valid or not. It unfortunately does not list who made the changes. If you'd like for who made the changes to show in the future, I could file a feature request with the Nagios dev team if you'd like.

Upvote! This information should be in Audit Log. (Admin/System Info). Checking "show details" should be where the kind of info OP asks for is found. Ideally value before change, and value after change. And while we're talking about audit log -- could you make it searchable, at least for a simple string, if not regex?

Hi @gregbeyer - thanks for the feedback! I agree, and I've filed a feature request on your behalf.
-Sebastian