Continuous Warning Messages in Windows Event Log with Icinga2

Issue Title
Continuous Warning Messages in Windows Event Log with Icinga2 r2.14.3-1

Environment

  • Icinga2 version: r2.14.3-1
  • Distributed setup (no Director)
  • Linux and Windows commands configured in Satellite
  • Monitoring Windows systems

Issue Description
We are experiencing continuous warning messages in the Windows Event Log on our monitored systems. The messages are:

  1. warning/ApiListener: Ignoring config update from endpoint ‘xxxxxxxxxxxx’ for unknown zone ‘global-templates’.
  2. warning/ApiListener: Ignoring config update from endpoint ‘XXXXXX’ for unknown zone ‘global-templates’.


Configuration
We have the following zones configured:

object Zone “global-templates” { global = true }
object Zone “windows-commands” { global = true }
object Zone “linux-commands” { global = true }

Troubleshooting Steps
We have checked the following possible solutions:

  • Verified Icinga2 configuration
  • Checked network connectivity
  • Restarted Icinga2 service
  • Analyzed Icinga2 logs

Expected Behavior
No continuous warning messages in the Windows Event Log.

Actual Behavior
Continuous warning messages in the Windows Event Log.

Has anyone else encountered this issue? Any guidance or suggestions would be greatly appreciated!

Thanks in advance for your help!

Hi @suresh.kumar , since this is likely a Windows “agent”, the zone global-templates is probably not needed there (assuming your Icinga setup is configured in the more common way), so everything should be working correctly apart from the annoying log message.

If you are using the Icinga Director, this should be the case.

As for a workaround, you could lower the severity level of the logger component to “error”.

Assuming these are the zones configured in the zones.conf file of the parent (satellite or master) of the windows agent:
The “global-templates” zone also needs to be configured on the agent as well.
Either run the setup wizard again or manually add it to the zones.conf file on the agent.

If you don’t use the global-templates zones, meaning you have no config under /etc/icinga2/zones.d/global-templates of your config master, you could also remove it from the zones.conf file of the master, if it is also not present on the agents.
Though it should be present on both sides be default, as it is a default zone.

From Best Practice - Global Zone for Config Sync

The default global zones generated by the setup wizards are called global-templates and director-global.

While you can and should use global-templates for your global configuration, director-global is reserved for use by Icinga Director. Please don’t place any configuration in it manually.