Hello,
I was told the NAGIOS CORE logfile would log any changes made to host
command execution ie: External commands:who turned off what and when.
Upon examination of my logfile it sems that this is not the case.
The log file indicates only that a particular service was enabled or disable
but it does not indiacte the user id that performed the change.
Can anyone point me in the right direction to make this happen?
Snippet of log file :
[root@its019-lap-v:var]# pwd
/usr/local/nagios/var
[root@its019-lap-v:var]# ls -lat
total 188
drwxrwxr-x 5 nagios nagios 4096 Aug 8 11:15 .
-rw-rw-r-- 1 nagios nagios 51204 Aug 8 11:15 status.dat
-rw-r--r-- 1 nagios nagios 4561 Aug 8 11:09 nagios.log
-rw------- 1 nagios nagios 50697 Aug 8 11:09 retention.dat
drwxrwxr-x 2 nagios nagios 4096 Aug 8 00:00 archives
-rw-r--r-- 1 nagios nagios 41229 Aug 5 15:09 objects.cache
-rw-r--r-- 1 nagios nagios 6 Aug 1 13:24 nagios.lock
drwxrwsr-x 2 nagios nagcmd 4096 Aug 1 13:24 rw
drwxrwxr-x 9 nagios nagios 4096 Jul 1 15:06 ..
drwxrwxr-x 3 nagios nagios 4096 Jun 27 15:54 spool
[root@its019-lap-v:var]# cat nagios.log
[1312776000] LOG ROTATION: DAILY
[1312776000] LOG VERSION: 2.0
[1312776541] Auto-save of retention data completed successfully.
[1312780141] Auto-save of retention data completed successfully.
[1312783741] Auto-save of retention data completed successfully.
[1312787341] Auto-save of retention data completed successfully.
[1312790941] Auto-save of retention data completed successfully.
[1312794541] Auto-save of retention data completed successfully.
[1312798141] Auto-save of retention data completed successfully.
[1312801741] Auto-save of retention data completed successfully.
[1312805172] EXTERNAL COMMAND: DEL_ALL_SVC_COMMENTS;TPC Server;root space
[1312805341] Auto-save of retention data completed successfully.
[1312808941] Auto-save of retention data completed successfully.
[1312812541] Auto-save of retention data completed successfully.
[1312816017] EXTERNAL COMMAND: ENABLE_SVC_NOTIFICATIONS;Nagios Server;HTTP
[1312816033] EXTERNAL COMMAND: ENABLE_SVC_NOTIFICATIONS;Nagios Server;SSH
[1312816141] Auto-save of retention data completed successfully.
--
Thank you,
Bob Molerio
Systems Administrator
New York University
ITS Computer Facilities Services/Infrastructure
Level C-2
75 Third Avenue
New York NY 10003-5527
email:robert.mole...@nyu.edu <robert.mole...@nyu.edu>
------------------------------------------------------------------------------
BlackBerry® DevCon Americas, Oct. 18-20, San Francisco, CA
The must-attend event for mobile developers. Connect with experts.
Get tools for creating Super Apps. See the latest technologies.
Sessions, hands-on labs, demos & much more. Register early & save!
http://p.sf.net/sfu/rim-blackberry-1
_______________________________________________
Nagios-users mailing list
Nagios-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting
any issue.
::: Messages without supporting info will risk being sent to /dev/null
