On Mon, Aug 8, 2011 at 5:01 PM, Robert J Molerio <[email protected]> wrote: > Hello, > I was told the NAGIOS CORE logfile would log any changes made to host > command execution ie: External commands:who turned off what and when. > Upon examination of my logfile it sems that this is not the case. > The log file indicates only that a particular service was enabled or disable > but it does not indiacte the user id that performed the change. > > Can anyone point me in the right direction to make this happen?
Users / Authentication are not as such managed by Nagios core. We use the Nagios cgis running through Apache, so if we want to see which user issued a command we look in the Apache log files. HTH Ritchie, -- <-- http://23.me.uk/2 --> <--Time flies like an arrow; fruit flies like a banana. --> > > Snippet of log file : > > [root@its019-lap-v:var]# pwd > /usr/local/nagios/var > [root@its019-lap-v:var]# ls -lat > total 188 > drwxrwxr-x 5 nagios nagios 4096 Aug 8 11:15 . > -rw-rw-r-- 1 nagios nagios 51204 Aug 8 11:15 status.dat > -rw-r--r-- 1 nagios nagios 4561 Aug 8 11:09 nagios.log > -rw------- 1 nagios nagios 50697 Aug 8 11:09 retention.dat > drwxrwxr-x 2 nagios nagios 4096 Aug 8 00:00 archives > -rw-r--r-- 1 nagios nagios 41229 Aug 5 15:09 objects.cache > -rw-r--r-- 1 nagios nagios 6 Aug 1 13:24 nagios.lock > drwxrwsr-x 2 nagios nagcmd 4096 Aug 1 13:24 rw > drwxrwxr-x 9 nagios nagios 4096 Jul 1 15:06 .. > drwxrwxr-x 3 nagios nagios 4096 Jun 27 15:54 spool > [root@its019-lap-v:var]# cat nagios.log > [1312776000] LOG ROTATION: DAILY > [1312776000] LOG VERSION: 2.0 > [1312776541] Auto-save of retention data completed successfully. > [1312780141] Auto-save of retention data completed successfully. > [1312783741] Auto-save of retention data completed successfully. > [1312787341] Auto-save of retention data completed successfully. > [1312790941] Auto-save of retention data completed successfully. > [1312794541] Auto-save of retention data completed successfully. > [1312798141] Auto-save of retention data completed successfully. > [1312801741] Auto-save of retention data completed successfully. > [1312805172] EXTERNAL COMMAND: DEL_ALL_SVC_COMMENTS;TPC Server;root space > [1312805341] Auto-save of retention data completed successfully. > [1312808941] Auto-save of retention data completed successfully. > [1312812541] Auto-save of retention data completed successfully. > [1312816017] EXTERNAL COMMAND: ENABLE_SVC_NOTIFICATIONS;Nagios Server;HTTP > [1312816033] EXTERNAL COMMAND: ENABLE_SVC_NOTIFICATIONS;Nagios Server;SSH > [1312816141] Auto-save of retention data completed successfully. > > > -- > Thank you, > > Bob Molerio > Systems Administrator > New York University > ITS Computer Facilities Services/Infrastructure > Level C-2 > 75 Third Avenue > New York NY 10003-5527 > email:[email protected] > > > > ------------------------------------------------------------------------------ > BlackBerry® DevCon Americas, Oct. 18-20, San Francisco, CA > The must-attend event for mobile developers. Connect with experts. > Get tools for creating Super Apps. See the latest technologies. > Sessions, hands-on labs, demos & much more. Register early & save! > http://p.sf.net/sfu/rim-blackberry-1 > _______________________________________________ > Nagios-users mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/nagios-users > ::: Please include Nagios version, plugin version (-v) and OS when reporting > any issue. > ::: Messages without supporting info will risk being sent to /dev/null > ------------------------------------------------------------------------------ uberSVN's rich system and user administration capabilities and model configuration take the hassle out of deploying and managing Subversion and the tools developers use with it. Learn more about uberSVN and get a free download at: http://p.sf.net/sfu/wandisco-dev2dev _______________________________________________ Nagios-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/nagios-users ::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. ::: Messages without supporting info will risk being sent to /dev/null
