Add rsyslog to Icinga2

Icinga 2
1

Hi,

first of all I´m new in Icinga so maybe that´s the main reason why my project doesn´t work. I need to send the syslogs of the Icinga-Nagios Server to an external Logserver (this works fine) and I was asked to add a check to Icinga to watch it´s own rsyslog-deamon, so I´m able to monitore if the service falls.

In the service_ssh.conf file already existed this service, so like with another ones I thought in simply adding the icinga-Host. Well, even if I runned “icinga2 daemon -C” and syntax comes correct, when I stop rsyslog-deamon icinga doesn´t seem to react at all.

This is what I found, so I added:

service_ssh.conf
#######################
apply Service “ssh_procs_rsyslogd” {
import “gl_generic-service_5m”
import “gl_generic_service_ssh_procs”
vars.by_ssh_arguments= {
“-w” = “1:2”
“-c” = “1:3”
“-C” = “rsyslogd”
}
assign where host.name == “ICINGA-SERVER”
}
#######################

But when I stop the rsyslog service it doesn´t seem to do anything at all.

Any ideas are welcome

Icinga2 Version: r2.6.0-1
OS: Debian 9
Enabled features: apt checker command ido-pqsql mainlog notification
Config validation: yes

2

Hi & welcome,

your config would run ssh against itself, that’s not necessary. This is easier:

apply Service "rsyslog" {
   check_command = "procs"
   vars.procs_command = "rsyslogd"
   vars.procs_critical = "1:"

   assign where host.name == “ICINGA-SERVER”
}
3

of course! what was the need of using ssh…
Thank you very much Roland