This video provides a guided walk-through covering each step of how to Monitor Windows 11 with SNMP in Nagios XI:

You can also refer to this documentation for full details:

Here is a direct link to the PDF as well:

How To Monitor Windows Using SNMP With Nagios XI.pdf

Prerequisites

Before starting, ensure you have the following:

• Nagios Log Server (NLS) up and running
• Administrator privileges on your Windows 11 machine
• A stable network connection between the Windows machine and Nagios Log Server

Step 1: Add a Windows Log Source in Nagios Log Server

1. Log in to the Nagios Log Server web interface.

2. On the Home page, navigate to the bottom left and click the + Windows button or select + Add Log Source and choose Windows.

• Alternatively, click + Add Log Source in the navigation bar, then select Windows.

3. This will guide you to the configuration page for setting up Windows logs.

Step 2: Install NXLog CE on Windows 11

1. On the Windows source page, locate the Getting Started section.

2. Click the link to download the NXLog Community Edition installer from your Nagios Log Server instance.

3. Run the downloaded installer.

4. Follow the installation steps:

• Accept the license agreement.
• Click Install.

5. Wait for the installation to complete.

6. Click Finish to close the installer.

Step 3: Configure NXLog CE

1. On the Windows source page of Nagios Log Server, locate the Configuration Setup section.
2. Copy the provided configuration block by clicking the Select All icon and copying the highlighted text.
3. Open Notepad on your Windows 11 machine.
4. Navigate to C:\Program Files (x86)\nxlog\conf\nxlog.conf.
   • Select All Files (.) in the file type dropdown to locate the file.
5. Open the nxlog.conf file.
6. Press CTRL + A to select all content and delete it.
7. Paste the copied configuration from Nagios Log Server.
8. Save the file by selecting File > Save.

Step 4: Start NXLog CE Service

1. Open Command Prompt as Administrator.

2. Start the NXLog service by executing the command:

net start nxlog

net start nxlog

3. Ensure the service starts automatically by configuring its startup type in the Windows Services Manager.

Step 5: Verify Incoming Logs

1. Navigate to the Dashboards page in Nagios Log Server.
2. Perform a query using the IP address of the Windows 11 machine: host:<Windows Host Address>
3. Check the ALL EVENTS panel to confirm that logs are being received.

Here is an example that shows the received logs appearing in the ALL EVENTS panel.

Troubleshooting Tips

• NXLog Service Fails to Start:
  • Ensure you have administrative privileges.
  • Verify the syntax of the nxlog.conf file.
• No Logs in Nagios Log Server:
  • Check the network connectivity between the Windows machine and Nagios Log Server.
  • Double-check the NXLog configuration.
• Firewall Issues:
  • Ensure firewalls on both Windows and Nagios Log Server allow traffic on required ports.

Conclusion

By following these steps, you have successfully configured a Windows 11 machine to send logs to Nagios Log Server using NXLog CE. This setup provides valuable insights for effective monitoring and troubleshooting of your IT infrastructure.

For additional support, visit the Nagios Support Forums or check the Nagios Knowledgebase.

Active vs. Passive Monitoring

NCPA supports two types of monitoring methods:

• Active Monitoring: Nagios actively performs checks on a schedule.
• Passive Monitoring: NCPA submits check results to Nagios.

Recommendation: Active monitoring is typically preferred for most use cases, as it allows Nagios to schedule and control checks.

Prerequisites

Before beginning the installation, ensure the following requirements are met:

• A system running Windows 11
• Administrator privileges
• Stable internet connection

Verify your Windows version by running the following command in PowerShell:

systeminfo | findstr /B /C:"OS Name" /C:"OS Version"

systeminfo | findstr /B /C:"OS Name" /C:"OS Version"

Example Output:

OS Name:                   Microsoft Windows 11 Pro
OS Version:                10.0.22631 N/A Build 22631

OS Name:                   Microsoft Windows 11 Pro
OS Version:                10.0.22631 N/A Build 22631

Step 1: Download the NCPA Package

To download the latest NCPA package for Windows, visit:

Nagios NCPA Downloads Page

Download the appropriate installer package for your system.

Step 2: Install the NCPA Package (Graphical Method)

1. Navigate to the location where the installer was downloaded.
2. Double-click the installer to launch the installation wizard.
3. Follow these steps:
   • Click Next on the Welcome screen.

4. Accept the license agreement by clicking I Agree.

5. Configure passive checks (optional) by providing a token for authentication. Keep the default Bind IP (0.0.0.0) and port (5693) settings.

6. Click Next and proceed through the installation steps, selecting the installation directory if needed.

7. Click Install to begin the installation.

8. Once the installation is complete, click Finish.

Step 2 (Alternative): Silent Installation Method

Silent installation is useful for deploying NCPA on multiple machines.

Command Syntax

ncpa-<version>.exe /S /TOKEN='mytoken' /<variable>='<value>' /D=<base directory>

ncpa-<version>.exe /S /TOKEN='mytoken' /<variable>='<value>' /D=<base directory>

Key Configuration Variables

• TOKEN: (Required) Token for the web GUI and API access.
• IP: IP address to bind to (default: 0.0.0.0).
• PORT: Port to bind to (default: 5693).
• NRDPURL: URL for passive check submissions.
• NRDPTOKEN: Authentication token for NRDP.
• NRDPHOSTNAME: Hostname for NRDP passive checks.

Example Command:

ncpa-2.1.6.exe /S /TOKEN='Str0ngT0k3n' /NRDPURL='http://10.25.5.12/nrdp/'
/NRDPTOKEN='NRDP_T0k3n' /NRDPHOSTNAME='S1601'

ncpa-2.1.6.exe /S /TOKEN='Str0ngT0k3n' /NRDPURL='http://10.25.5.12/nrdp/'
/NRDPTOKEN='NRDP_T0k3n' /NRDPHOSTNAME='S1601'

Step 3: Configure NCPA

After installation, configure NCPA by editing the configuration file:

1. Open ncpa.cfg located in the NCPA installation directory.
2. Set your token by updating the following line: community_string = mytoken
3. Save and close the file.

Step 4: Restart NCPA Service

To apply the changes, restart the NCPA service:

Restart-Service ncpa_listener
Restart-Service ncpa_passive

Restart-Service ncpa_listener
Restart-Service ncpa_passive

Step 5: Configure Firewall (if enabled)

If your firewall is enabled, allow traffic on port 5693:

1. Open PowerShell as Administrator.
2. Run the following command:

New-NetFirewallRule -DisplayName "Allow NCPA" -Direction Inbound -Protocol TCP -LocalPort 5693 -Action Allow

New-NetFirewallRule -DisplayName "Allow NCPA" -Direction Inbound -Protocol TCP -LocalPort 5693 -Action Allow

Step 6: Test NCPA Installation

1. Open the Windows search bar and type Services.

2. Scroll down and locate Nagios Cross-Platform Agent.

3. Verify that the service is running.

4. Additionally, open a web browser and navigate to:

https://<NCPA_IP_Address>:5693/

https://<NCPA_IP_Address>:5693/

5. Bypass the security warning for the self-signed certificate by clicking Advanced and selecting Proceed.

6. On the NCPA login page, enter the API token you configured earlier and click Log In.

Configuring Nagios XI

To monitor the Windows system using Nagios XI and the NCPA agent:

1. Navigate to the Nagios XI dashboard.
2. Open the NCPA wizard by selecting Configure > Run a Monitoring Wizard > NCPA.
3. Enter the required details, including the IP address of the Windows server and the API token.
4. Complete the wizard setup and apply configuration changes.

Verifying Monitoring Setup

After completing the wizard, Nagios XI should display the monitored host and its services:

1. Navigate to the Service Status page to confirm that the system is being monitored.

Troubleshooting Tips

• Issue: NCPA agent not starting.
  • Solution: Verify that the token and port configurations are correct.
• Issue: Passive checks are not received by Nagios.
  • Solution: Ensure the NRDP URL and token match the Nagios server settings.
• Issue: Firewall blocking NCPA communication.
  • Solution: Allow traffic on port 5693.

Conclusion

By following this guide, you have successfully installed and configured the Nagios Cross Platform Agent on your Windows system. For additional support, refer to the Nagios Support Forum or the Nagios Knowledge Base.

Target Audience

This guide is intended for Nagios XI administrators responsible for network and system monitoring.

Prerequisites

• Access to a Windows 11 machine
• An instance of Nagios XI with administrative privileges
• Basic understanding of Windows and Nagios configurations.

Step 1: Install SNMP on Windows 11

1. Open Settings on your Windows machine.
2. Navigate to System > Optional Features.

3. Click View Features near the top right corner.

4. Search for SNMP and check the boxes for:

• Simple Network Management Protocol (SNMP)
• WMI SNMP Provider

5. Click Next and then select Add.

6. Wait for the installation to complete.

7. Verify the installation by searching for SNMP under the Added Features section.

Step 2: Configure SNMP

1. Open Services by typing it into the Windows search bar.

2. Scroll down to SNMP Service, right-click, and select Properties.

3. Under the General tab, set the Startup Type to Automatic.

4. Navigate to the Agent tab and select the services you want SNMP to monitor.

5. Go to the Security tab:

• Add an accepted community name (default is public).
• Set the rights to READ ONLY.

6. Choose whether to accept SNMP packets from any host or specific IP addresses (e.g., your Nagios XI instance).

7. Click Apply to save your configuration.

Troubleshooting

• Issue: Unable to connect due to incorrect community name.
  • Solution: Ensure the correct community name is entered in both SNMP settings and Nagios XI.
• Issue: SNMP service not starting.
  • Solution: Ensure the startup type is set to Automatic.

Step 3: Configure Windows Firewall

1. Open Windows Defender Firewall with Advanced Security.

2. Select Inbound Rules and click New Rule….

3. Choose Port and click Next.

4. Select UDP and enter 161-162 in the Specific local ports textbox.

5. Click Next through the remaining steps, give the rule a name, and click Finish.

Step 4: Set Up SNMP Monitoring in Nagios XI

1. Open Nagios XI in your browser.
2. Hover over the gear icon and select Configuration Wizards.

3. Search for SNMP.

4. Enter the following information:

• IP address of the Windows 11 machine.
• Select Windows 10 as the operating system.
• Enter the SNMP community string configured earlier.
• Keep SNMP version and port as default.

5. Click Next.

6.Select the services and hardware information to monitor.

7. Click Finish with Defaults or adjust monitoring settings as required.

8. Go back to the host and confirm that it has been added with your selected services being monitored.

Step 5: Verify Monitoring

1. Navigate to the Host/Service Details in Nagios XI.
2. Confirm that the Windows 11 machine and its selected services are being monitored.

Conclusion

This guide provided a detailed walkthrough for setting up SNMP on a Windows 11 machine and configuring it for monitoring in Nagios XI. If you encounter any issues, please visit the Nagios Support Forum or the Nagios Knowledge Base.

By following these steps, you can ensure effective and comprehensive monitoring of your Windows 11 systems using Nagios XI.