All Apps and Add-ons

SplunkForNagios not querying Nagios

chrismralph
New Member

Hi,

I have been through various installation guidelines for this app using livestatus and am stuck.

Live status is workin and I can query as follows:

nc nagios 6557 < nagios-hosts | grep host1

Result:

host1,10.20.53.64,host1,0

Based on tis result I know that the mk-Livestatus agent is responding. I have modified all xml and py files as instructed but when I open the livestatus dashboard the query is not even made to the server which I can see through a tcpdump that is running.

Any ideas?

Regards

Chris

Tags (1)
0 Karma

ivedasolutions
New Member

I know this is extremely old, but did you ever figure this out? I am having massive problems with the Livestatus dashboard not working on my install. Thank you.

0 Karma

chrismralph
New Member

ok so after configuring the reciver and sending data using a universal forwarder it became clear that the livestatus check only runs if there is a known host in the index not the nagios instance.

The problem I have now is that whilst the livestatus query is being made, it is only returining details for the single host configured as the src_host.

Any ideas?

0 Karma
Get Updates on the Splunk Community!

Improve Your Security Posture

Watch NowImprove Your Security PostureCustomers are at the center of everything we do at Splunk and security ...

Maximize the Value from Microsoft Defender with Splunk

 Watch NowJoin Splunk and Sens Consulting for this Security Edition Tech TalkWho should attend:  Security ...

This Week's Community Digest - Splunk Community Happenings [6.27.22]

Get the latest news and updates from the Splunk Community here! News From Splunk Answers ✍️ Splunk Answers is ...