Efficient log management is essential for system monitoring, security, and troubleshooting. Nagios Log Server (NLS) provides centralized log collection, real-time data analysis, and alerting to ensure your systems run smoothly.

This guide will walk you through the installation and configuration of Nagios Log Server on SUSE Linux Enterprise Server 11.

Prerequisites

Before proceeding, ensure the following:

• A system running SUSE Linux Enterprise Server 11
• Root privileges
• Internet access or an offline method to transfer the Nagios Log Server package

Verify Your SUSE Version

Run the following command to check your system version:

cat /etc/os-release

cat /etc/os-release

Example Output:

NAME="SUSE Linux Enterprise Server"
VERSION="11"
VERSION_ID="11"

NAME="SUSE Linux Enterprise Server"
VERSION="11"
VERSION_ID="11"

Step 1: Download the Nagios Log Server Package

To download the latest Nagios Log Server package for SUSE 11, visit the Nagios Log Server Downloads page or use wget:

wget https://repo.nagios.com/nagios/logserver-latest.sles11.x86_64.rpm

wget https://repo.nagios.com/nagios/logserver-latest.sles11.x86_64.rpm

Step 2: Install Nagios Log Server

Method 1: Standard Installation

Update system packages:

zypper refresh
zypper update

zypper refresh
zypper update

Install required dependencies:

zypper install java-1_8_0-openjdk curl

zypper install java-1_8_0-openjdk curl

Install the Log Server package:

zypper install ./logserver-latest.sles11.x86_64.rpm

zypper install ./logserver-latest.sles11.x86_64.rpm

Method 2: Silent Installation (For automated deployments)

rpm -ivh logserver-latest.sles11.x86_64.rpm --quiet

rpm -ivh logserver-latest.sles11.x86_64.rpm --quiet

Step 3: Configure Nagios Log Server

After installation, configure the Log Server to accept logs from monitored systems.

Edit the configuration file:

nano /usr/local/nagioslogserver/etc/logserver.cfg

nano /usr/local/nagioslogserver/etc/logserver.cfg

Set the admin user password and enable external access:

[admin]
password = your_secure_password
allow_external_access = true

[admin]
password = your_secure_password
allow_external_access = true

Save and exit (Press CTRL + X, then Y, then Enter).

Step 4: Start and Enable Nagios Log Server Service

Run the following commands to start the Log Server and enable it at boot:

service nagioslogserver start
chkconfig nagioslogserver on

service nagioslogserver start
chkconfig nagioslogserver on

Verify the service is running:

service nagioslogserver status

service nagioslogserver status

Step 5: Configure SUSE Firewall (if enabled)

If the firewall is active, allow traffic on port 5544 (default Log Server port for receiving logs):

iptables -A INPUT -p tcp --dport 5544 -j ACCEPT
iptables-save > /etc/sysconfig/iptables

iptables -A INPUT -p tcp --dport 5544 -j ACCEPT
iptables-save > /etc/sysconfig/iptables

For firewalld (if installed):

firewall-cmd --add-port=5544/tcp --permanent
firewall-cmd --reload

firewall-cmd --add-port=5544/tcp --permanent
firewall-cmd --reload

Step 6: Access Nagios Log Server Web Interface

To verify Nagios Log Server is running, open a web browser and navigate to:

http://<SUSE_IP>:80

http://<SUSE_IP>:80

Log in using the admin credentials you configured earlier.

Step 7: Configure a Log Source

To collect logs from a remote system, configure a syslog client to send logs to Nagios Log Server.

On a monitored system, edit the syslog configuration file:

nano /etc/rsyslog.conf

nano /etc/rsyslog.conf

Add the following line:

*.* @@<NAGIOS_LOG_SERVER_IP>:5544

*.* @@<NAGIOS_LOG_SERVER_IP>:5544

Save and restart the syslog service:

service rsyslog restart

service rsyslog restart

Step 8: Verify Log Collection

To verify that the Log Server is successfully receiving logs, enter the IP address of your SUSE 11 host where it prompts you to ‘Verify Incoming Logs’ in the Nagios Log Server web interface. This will confirm that the logs from your host are being properly sent to and received by the Log Server, ensuring everything is functioning as expected.

Once verified, you should see a confirmation message indicating that logs are being received from your new SUSE 11 host. This confirms that all setup steps have been completed successfully, and Nagios Log Server is now properly receiving logs from the newly added host.

Troubleshooting Tips

Conclusion

By following this guide, you have successfully installed and configured Nagios Log Server on SUSE 11. Your system logs are now centrally collected and monitored, helping you detect and resolve issues efficiently.

For additional support, refer to:

• Nagios Support Forum: https://support.nagios.com/forum/
• Nagios Knowledge Base: https://support.nagios.com/kb/

Whether you’re managing a single server or an entire network, SNMP provides real-time insights into system performance, helping you catch issues before they escalate.

In this guide, you’ll learn how to install and configure SNMP on SUSE Linux Enterprise Server (SLES) 11, ensuring seamless monitoring and optimal system health.

SNMP Versions and Monitoring Methods

SNMP supports multiple versions, but the most commonly used are:

• SNMPv2c: Uses community strings for authentication (less secure but widely used).
• SNMPv3: Provides authentication and encryption for secure monitoring.

Recommendation: SNMPv3 is preferred for security reasons, but SNMPv2c is easier to set up and sufficient for many environments.

Prerequisites

Before starting the installation, ensure the following:

• A system running SUSE Linux Enterprise Server 11
• Root privileges
• Internet access or a way to transfer SNMP packages

Verify Your SUSE Version

Run the following command to check your system version:

cat /etc/os-release

cat /etc/os-release

Example Output:

NAME="SUSE Linux Enterprise Server"
VERSION="11"
VERSION_ID="11"

NAME="SUSE Linux Enterprise Server"
VERSION="11"
VERSION_ID="11"

Step 1: Install SNMP Packages

To install SNMP on SUSE 11, use the following command:

zypper refresh
zypper install net-snmp net-snmp-utils

zypper refresh
zypper install net-snmp net-snmp-utils

Step 2: Configure SNMP

After installation, configure SNMP to allow monitoring.

Edit the SNMP configuration file:

nano /etc/snmp/snmpd.conf

nano /etc/snmp/snmpd.conf

Modify or add the following lines based on your SNMP version:

For SNMPv2c:

rocommunity public  default    # Read-only access with community string 'public'
rwcommunity private 127.0.0.1  # Read-write access only for localhost

rocommunity public  default    # Read-only access with community string 'public'
rwcommunity private 127.0.0.1  # Read-write access only for localhost

For SNMPv3 (More Secure):

createUser monitoringUser SHA mysecurepassword AES myencryptionkey
rouser monitoringUser authPriv

createUser monitoringUser SHA mysecurepassword AES myencryptionkey
rouser monitoringUser authPriv

Save and exit (Press CTRL + X, then Y, then Enter).

Step 3: Start and Enable SNMP Service

Run the following commands to start SNMP and enable it at boot:

service snmpd start
chkconfig snmpd on

service snmpd start
chkconfig snmpd on

Verify the service is running:

service snmpd status

service snmpd status

Step 4: Configure SUSE Firewall (if enabled)

If the firewall is active, allow SNMP traffic on port 161:

iptables -A INPUT -p udp --dport 161 -j ACCEPT
iptables-save > /etc/sysconfig/iptables

iptables -A INPUT -p udp --dport 161 -j ACCEPT
iptables-save > /etc/sysconfig/iptables

For firewalld (if installed):

firewall-cmd --add-port=161/udp --permanent
firewall-cmd --reload

firewall-cmd --add-port=161/udp --permanent
firewall-cmd --reload

Step 5: Test SNMP Configuration

To verify SNMP is working, run the following command:

For SNMPv2c:

snmpwalk -v2c -c public localhost system

snmpwalk -v2c -c public localhost system

For SNMPv3:

snmpwalk -v3 -u monitoringUser -A mysecurepassword -X myencryptionkey -l authPriv localhost system

snmpwalk -v3 -u monitoringUser -A mysecurepassword -X myencryptionkey -l authPriv localhost system

Step 6: Configure Nagios to Monitor SUSE 11 with SNMP

Now that you have SNMP installed and configured on your SUSE 11 system, it’s time to integrate it with Nagios for real-time monitoring.

From your Nagios XI web interface home page, click on Run a Wizard.

Then, scroll until you find the Linux SNMP wizard.

Then enter the IP address of your SUSE 11 machine. Leave the SNMP version at 2c and the SNMP Port at 161. The SNMP Community is where you will enter the community string you created in the conf file in Step 2.

Now, you can change any settings you need and choose which metrics you would like to monitor.

Troubleshooting Tips

Conclusion

By following this guide, you have successfully installed and configured SNMP on SUSE 11 and integrated it with Nagios. Now, you can monitor uptime, CPU load, and other system metrics in real-time! For additional support, visit the Nagios Support Forum or the Nagios Knowledgebase.

Whether you’re managing a single server or an entire network, NCPA provides real-time insights into system performance, helping you catch issues before they escalate.

In this guide, you’ll learn how to install and configure NCPA on SUSE Linux Enterprise Server (SLES) 11, ensuring seamless monitoring and optimal system health.

Active vs Passive Monitoring

NCPA supports two monitoring methods:

• Active Monitoring: Nagios actively checks system metrics on a schedule.
• Passive Monitoring: NCPA submits check results to Nagios when triggered.

Recommendation: Active monitoring is preferred for most cases, as it allows Nagios to control check scheduling.

Prerequisites

Before starting the installation, ensure the following:

A system running SUSE Linux Enterprise Server 11
Root privileges
Internet access or a way to transfer the NCPA package

Verify Your SUSE Version

Run the following command to check your system version:

cat /etc/os-release

cat /etc/os-release

Example Output:

NAME="SUSE Linux Enterprise Server"
VERSION="11"
VERSION_ID="11"

NAME="SUSE Linux Enterprise Server"
VERSION="11"
VERSION_ID="11"

Step 1: Download the NCPA Package

To download the latest NCPA package for SUSE 11, visit the Nagios NCPA Downloads Page or use wget:

wget https://repo.nagios.com/nagios/7/ncpa-latest.sles11.x86_64.rpm

wget https://repo.nagios.com/nagios/7/ncpa-latest.sles11.x86_64.rpm

Step 2: Install NCPA

Method 1: Standard Installation

Update the system packages

zypper refresh
zypper update

zypper refresh
zypper update

Install dependencies (if required)

zypper install python python-xml

zypper install python python-xml

Install the NCPA package

zypper install ./ncpa-latest.sles11.x86_64.rpm

zypper install ./ncpa-latest.sles11.x86_64.rpm

Method 2: Silent Installation (For automated deployments)

rpm -ivh ncpa-latest.sles11.x86_64.rpm --quiet

rpm -ivh ncpa-latest.sles11.x86_64.rpm --quiet

Step 3: Configure NCPA

After installation, configure NCPA to allow Nagios to monitor the system.

Edit the NCPA configuration file

nano /usr/local/ncpa/etc/ncpa.cfg

nano /usr/local/ncpa/etc/ncpa.cfg

Set the API token for authentication (replace "your_secure_token" with a strong password)

[api]
community_string = your_secure_token

[api]
community_string = your_secure_token

Enable passive checks if required

[passive]
sleep = 300

[passive]
sleep = 300

Save and exit (Press CTRL + X, then Y, then Enter).

Step 4: Start and Enable NCPA Service

Run the following commands to start NCPA and enable it at boot:

service ncpa_listener start
service ncpa_passive start
chkconfig ncpa_listener on
chkconfig ncpa_passive on

service ncpa_listener start
service ncpa_passive start
chkconfig ncpa_listener on
chkconfig ncpa_passive on

Verify the services are running:

service ncpa_listener status
service ncpa_passive status

service ncpa_listener status
service ncpa_passive status

Step 5: Configure SUSE Firewall (if enabled)

If the firewall is active, allow traffic on port 5693 (default NCPA port):

iptables -A INPUT -p tcp --dport 5693 -j ACCEPT
iptables-save > /etc/sysconfig/iptables

iptables -A INPUT -p tcp --dport 5693 -j ACCEPT
iptables-save > /etc/sysconfig/iptables

For firewalld (if installed):

firewall-cmd --add-port=5693/tcp --permanent
firewall-cmd --reload

firewall-cmd --add-port=5693/tcp --permanent
firewall-cmd --reload

Step 6: Test NCPA Installation

To verify NCPA is running, use the following command from your Nagios server:

curl -k "https://<SUSE_IP>:5693/api/system?token=your_secure_token"

curl -k "https://<SUSE_IP>:5693/api/system?token=your_secure_token"

If NCPA is running correctly, you will receive JSON output with system information.

Alternatively, open a web browser and navigate to:

https://<SUSE_IP>:5693/

https://<SUSE_IP>:5693/

Log in using the API token you configured earlier.

Step 7: Configure Nagios to Monitor SUSE 11

Now that you have NCPA installed and configured on your SUSE 11 system, it’s time to integrate it with Nagios for real-time monitoring. Nagios Core or Nagios XI can use NCPA to check system metrics such as CPU usage, memory utilization, disk space, and running processes.

From your Nagios GUIs home page click on Run a Wizard.

Next, pick the NCPA wizard.

Enter your SUSE machines IP address in the address bar and leave the port as 5693. The token will be whatever you changed it to in the ncpa.cfg file. For System select SLES, Hit Next

Now you can change any monitoring settings depending on your needs, or click finish with default settings.

Verifying Monitoring Setup

After completing the configuration, Nagios should display the monitored SUSE 11 host and its services:

1. Log in to the Nagios web interface.
2. Navigate to Host Status and verify that the SUSE 11 system appears.
3. Check Service Status to confirm monitoring is active.

Troubleshooting Tips

Conclusion

By following this guide, you have successfully installed and configured Nagios Cross-Platform Agent (NCPA) on SUSE 11. Your system is now actively monitored, allowing you to detect performance issues before they become critical. For additional support, refer to Nagios Support Forum: https://support.nagios.com/forum/ or the Nagios Knowledge Base: https://support.nagios.com/kb/.