Prerequisites

Here is what you need before you begin:

• A system running Kali Linux
• Nagios Log Server instance to access the web interface
• Root or sudo access for advanced operations
• Internet access to download packages

Step 1: Install Rsyslog

Open the terminal and update your packages, and then install rsyslog, which is typically used for log management.

sudo apt update
sudo apt install rsyslog

Step 2: Configure the Rsyslog File

Configure rsyslog by editing the rsyslog configuration file in /etc/rsyslog.conf.

sudo nano /etc/rsyslog.conf

Add the following lines to the end of the file; switch nagios_log_server_ip with the IP address of your Nagios Log Server.

*.* @nagios_log_server_ip:5544

Save your file and restart rsyslog.

sudo systemctl restart rsyslog

Step 3. Add a New Log Source in Nagios Log Server

Boot up a browser and login to your Nagios Log Server web interface.

From the homepage, click + Linux to configure your logs.

On the Linux configuration page, Nagios Log Server provides a setup script to configure rsyslog from the box below.

Run the setup using curl and execute the downloaded script to configure rsyslog. Change <your-nagios-log-server-address> to your IP address of your Nagios Log Server.

curl -sS -O http://<your-nagios-log-server-address>/nagioslogserver/scripts/setup-linux.sh

sudo bash setup-linux.sh -s <your-nagios-log-server-address> -p 5544

Put your Kali Linux IP address and check if the logs are being sent to the Nagios Log Server.

Step 4: Verify the Logs from the Dashboard

Navigate to the Nagios Log Server dashboard by clicking the four squares icon. Verify that logs from your Kali Linux machine are being received by running a query for its IP address.

Conclusion

By following these steps, you can efficiently send logs from Kali Linux to Nagios Log Server, centralizing your log data for easier monitoring and analysis. This setup helps you track system events, troubleshoot issues, and maintain a secure network environment. If you have additional questions or other support-related questions, please visit us at our Nagios Support Forum, Nagios Knowledge Base, or Nagios Library.

Prerequisites

The requirements to do the guide:

• A system running Kali Linux
• Nagios XI instance to access the web interface
• Root or sudo access for advanced operations
• Internet access to download packages

Step 1: Install SNMP Packages

First, ensure that the necessary SNMP packages are installed on your Kali Linux system. Open a terminal and run the following commands.

sudo apt update
sudo apt install snmp snmpd snmp-mibs-downloader

sudo apt update
sudo apt install snmp snmpd snmp-mibs-downloader

Step 2: Configure the SNMP File

The main configuration file for the SNMP daemon is /etc/snmp/snmpd.conf. Edit this file to define the SNMP community string, system information, and access control. Remember to back up the original file first.

sudo cp /etc/snmp/snmpd.conf /etc/snmp/snmpd.conf.bak
sudo nano /etc/snmp/snmpd.conf

sudo cp /etc/snmp/snmpd.conf /etc/snmp/snmpd.conf.bak
sudo nano /etc/snmp/snmpd.conf

Find the line that have community lines and add or modify the community string for your Nagios XI server. Replace your_read_only_community_string with a strong, secure community string, and update nagios_xi_server_ip to the IP address of your Nagios XI server.

rocommunity your_read_only_community_string nagios_xi_server_ip

rocommunity your_read_only_community_string nagios_xi_server_ip

Save and close the file.

Step 3: Restart the SNMP Daemon

After making changes to the configuration file, restart the SNMP daemon to apply the changes and check the status of the service.

sudo systemctl restart snmpd
sudo systemctl status snmpd

sudo systemctl restart snmpd
sudo systemctl status snmpd

Step 4: Configure Nagios XI

Add the Kali Linux host to Nagios XI by logging in to your Nagios XI web interface.

Click the gear icon on the Configure tab, then navigate to the Configuration Wizards and select the Linux Server from the wizard list.

Follow the wizard instructions by entering the IP address of your Kali Linux machine and specifying your SNMP community string you added earlier.

Configure the rest of the wizard SNMP checks. You have the choice to add more specific SNMP checks using the SNMP Walk or SNMP Query services within Nagios XI or by manually defining service checks.

Step 5: Verify your SNMP Checks

After adding the host and configuring the checks, ensure that Nagios XI is successfully receiving SNMP data from your Kali Linux machine from your status page.

Important Security Considerations

• Use strong community strings: Never use default community strings like public or private.
• Restrict SNMP access: Limit SNMP access to only the necessary IP addresses or networks.
• Firewall rules: Ensure that your firewall allows SNMP traffic (UDP port 161) from your Nagios XI server to the Kali Linux machine.

Conclusion

By following this guide, you can successfully configure SNMP on Kali Linux for monitoring with Nagios XI. This setup will help you track your system’s performance and promptly address any issues, ensuring optimal reliability. If you have additional questions or other support-related questions, please visit us at our Nagios Support Forum, Nagios Knowledge Base, or Nagios Library.

Prerequisites

Key factors before beginning the guide:

• A system running Kali Linux
• Nagios XI instance to access the web interface
• Root or sudo access for advanced operations
• Internet access to download packages

Step 1: Download NCPA

First, you need to install the NCPA agent on your Kali Linux machine. You can download the NCPA package from the Nagios website and use the DEB file to download that is based on Debian.

Open your terminal and update your packages.

sudo apt update

sudo apt update

Use wget and curl to put the URL for the NCPA link that you downloaded from the Nagios website.

wget https://assets.nagios.com/downloads/ncpa3/ncpa-latest-1.amd64.deb

wget https://assets.nagios.com/downloads/ncpa3/ncpa-latest-1.amd64.deb

curl -LO https://assets.nagios.com/downloads/ncpa3/ncpa-latest-1.amd64.deb

curl -LO https://assets.nagios.com/downloads/ncpa3/ncpa-latest-1.amd64.deb

Step 2: Install NCPA

Use the dpkg command to install the package of the downloaded DEB package.

sudo dpkg -i ncpa-latest-1.amd64.deb

sudo dpkg -i ncpa-latest-1.amd64.deb

If you encounter dependency issues, you might need to run this command.

sudo apt-get install -f

sudo apt-get install -f

Step 3: Configure NCPA

After installation, configure the NCPA agent by editing the ncpa.cfg file, typically located in /usr/local/ncpa/etc/. Set the necessary parameters, such as the token for authentication.

sudo nano /usr/local/ncpa/etc/ncpa.cfg

sudo nano /usr/local/ncpa/etc/ncpa.cfg

Find the line that says community_string and set it to a secure token by changing mytoken to your unique token under the [listener] section.

community_string = mytoken

community_string = mytoken

After making this change, save and close the file.

Step 4: Start and Enable NCPA

Restart and enable the NCPA service to start automatically at boot.

sudo systemctl restart ncpa
sudo systemctl enable ncpa

sudo systemctl restart ncpa
sudo systemctl enable ncpa

Step 5: Allow NCPA Port in Firewall

If your firewall is enabled, you’ll need to allow traffic on port 5693 using ufw.

sudo ufw allow 5693/tcp
sudo ufw reload

sudo ufw allow 5693/tcp
sudo ufw reload

Step 6: Test NCPA on the Web Interface

Test the NCPA functionally by visiting the NCPA web interface via a browser to see if it is working. Enter the URL from the address bar and change NCPA_IP_Address to your Kali Linux IP address or use 0.0.0.0. Furthermore, 5693 is the default port number.

https://<NCPA_IP_Address>:5693/

https://<NCPA_IP_Address>:5693/

There will be a security popup when you’re trying to access the NCPA webpage; you can skip this by clicking Advanced and then clicking Accept the Risk and Continue.

Login to the NCPA web GUI by using your token you used for your community string.

Once you’ve logged in, you can use the NCPA web interface to check out the various functionalities for monitoring your Kali Linux system.

Step 7: Configure NCPA to Nagios XI

Use your Nagios XI server to log in to the web interface.

Navigate to the Configure tab from the gear icon to the Configuration Wizards page and look for Linux Server to incorporate the NCPA monitoring on Nagios XI.

Configure your NCPA wizard by providing the IP address from your Kali Linux machine and the token for the authentication that you configured earlier.

Set up the rest of the configuration by selecting the specific checks you want to perform on your Kali Linux machine, such as CPU usage, memory usage, disk space, and more.

Finish the wizard by applying the configuration and saving the changes to start monitoring your Kali Linux device.

Step 8: Verify your Status

Verify the status of your NCPA monitoring by navigating to the status page on your home dashboard. This will allow you to check if the NCPA agent is running correctly on your Kali Linux machine within Nagios XI.

Troubleshooting

If you have any issues setting up NCPA for Kali Linux, here is a list of what to troubleshoot.

Connection Issues

• Verify that the NCPA service is running on the Kali Linux machine.
• Check the firewall settings on both the Kali Linux machine and any network firewalls.
• Ensure that the Nagios XI server can reach the Kali Linux machine on port 5693.
• Test the connection from the Nagios XI server using telnet 5693.

Authentication Issues

• Double-check the password you entered in the Nagios XI wizard.
• Verify that the password in /etc/ncpa.cfg matches the password you entered in Nagios XI.

Check Errors

• Check the NCPA logs on the Kali Linux machine for any errors (/var/log/ncpa_listener.log).
• Run the NCPA checks manually on the Kali Linux machine to verify that they are working correctly.
• Example:

/usr/local/ncpa/plugins/check_ncpa.py -H 127.0.0.1 -t '' -M 'cpu/percent'

/usr/local/ncpa/plugins/check_ncpa.py -H 127.0.0.1 -t '' -M 'cpu/percent'

Plugin Permissions

• Ensure that the Nagios user on the Nagios XI server has the correct permissions to execute the NCPA plugins.

Conclusion

By following these instructions, you should be able to successfully integrate NCPA on Kali Linux with Nagios XI, enabling effective system monitoring. This setup will help you track vital metrics, ensure optimal performance, and address potential issues promptly. If you have additional questions or other support-related questions, please visit us at our Nagios Support Forum, Nagios Knowledge Base, or Nagios Library.