Class: LogStash::Outputs::Nagios

Inherits:
Base
  • Object
show all
Defined in:
lib/logstash/outputs/nagios.rb

Overview

The Nagios output is used for sending passive check results to Nagios via the Nagios command file. This output currently supports Nagios 3.

For this output to work, your event must have the following Logstash event fields:

* `nagios_host`
* `nagios_service`

These Logstash event fields are supported, but optional:

* `nagios_annotation`
* `nagios_level` (overrides `nagios_level` configuration option)

There are two configuration options:

* `commandfile` - The location of the Nagios external command file. Defaults
  to '/var/lib/nagios3/rw/nagios.cmd'
* `nagios_level` - Specifies the level of the check to be sent. Defaults to
  CRITICAL and can be overriden by setting the "nagios_level" field to one
  of "OK", "WARNING", "CRITICAL", or "UNKNOWN"
source,ruby

output{

if [message] =~ /(error|ERROR|CRITICAL)/ {
  nagios {
    # your config here
  }
}

}

Instance Method Summary collapse

Instance Method Details

#receive(event) ⇒ Object

def register



49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
 
# File 'lib/logstash/outputs/nagios.rb', line 49

def receive(event)
  

  if !command_file_exist?
    @logger.warn("Skipping nagios output; command file is missing",
                 :commandfile => @commandfile, :missed_event => event)
    return
  end

  # TODO(petef): if nagios_host/nagios_service both have more than one
  # value, send multiple alerts. They will have to match up together by
  # array indexes (host/service combos) and the arrays must be the same
  # length.

  host = event.get("nagios_host")
  if !host
    @logger.warn("Skipping nagios output; nagios_host field is missing",
                 :missed_event => event)
    return
  end

  service = event.get("nagios_service")
  if !service
    @logger.warn("Skipping nagios output; nagios_service field is missing",
                 "missed_event" => event)
    return
  end

  annotation = event.get("nagios_annotation")
  level = @nagios_level

  if event.get("nagios_level")
    event_level = [*event.get("nagios_level")]
    case event_level[0].downcase
    when "ok"
      level = "0"
    when "warning"
      level = "1"
    when "critical"
      level = "2"
    when "unknown"
      level = "3"
    else
      @logger.warn("Invalid Nagios level. Defaulting to CRITICAL", :data => event_level)
    end
  end

  cmd = "[#{Time.now.to_i}] PROCESS_SERVICE_CHECK_RESULT;#{host};#{service};#{level};"
  if annotation
    cmd += "#{annotation}: "
  end
  # In the multi-line case, escape the newlines for the nagios command file
  cmd += (event.get("message") || "<no message>").gsub("\n", "\\n")

  @logger.debug("Opening nagios command file", :commandfile => @commandfile,
                :nagios_command => cmd)
  begin
    send_to_nagios(cmd)
  rescue => e
    @logger.warn("Skipping nagios output; error writing to command file",
                 :commandfile => @commandfile, :missed_event => event,
                 :exception => e, :backtrace => e.backtrace)
  end
end

#register ⇒ Object 



45
46
47
 
# File 'lib/logstash/outputs/nagios.rb', line 45

def register
  # nothing to do
end