# How to configure logstash-output-nagios, getting error Unknown setting 'nagios\_host' for nagios **URL:** \ **Category:** Logstash\ **Created:** [January 25, 2019, 12:59pm UTC](https://discuss.elastic.co/t/how-to-configure-logstash-output-nagios-getting-error-unknown-setting-nagios-host-for-nagios/165776 "2019-01-25T12:59:54Z")\ **Posts on this page:** 10\ **Page:** 1
**Author:** ![abhijitnt](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/abhijitnt/32/36537_2.png) [@abhijitnt](https://discuss.elastic.co/u/abhijitnt)\ **Post date:** [January 25, 2019, 12:59pm UTC](https://discuss.elastic.co/t/how-to-configure-logstash-output-nagios-getting-error-unknown-setting-nagios-host-for-nagios/165776/1 "2019-01-25T12:59:54Z")
Hi All. I am trying to setup a Logstash Nagios plugin which can direct send logstash file errors to Nagios server. Here is what I have done so far. Its failing on logstash test config. Any help is appreciated on this. _$ ../bin/logstash-plugin install logstash-output-nagios_ _io/console on JRuby shells out to stty for most operations_ _Validating logstash-output-nagios_ _Installing logstash-output-nagios_ _Installation successful_ created logstash-nagios.conf file- file { path =\> "/opt/app/23vbklg/apps/logstash/logstash-6.4.0/logs/logstash-plain.log" start\_position =\> "beginning" } } output { if [message] =~ /(OK|error|ERROR|CRITICAL)/ { nagios { nagios\_host =\> "[abc.def.com](http://abc.def.com)" nagios\_service =\> "LOGSTASH-POC-TEST" #commandfile =\> "/opt/app/23vbklg/apps/logstash/logstash-6.4.0/confg/nagios-command.cmd" id =\> "Nagios\_plugin\_3462" } stdout { codec =\> rubydebug } } } _../bin/logstash -t -f logstash-nagios.conf\_ \_Sending Logstash logs to /opt/app/23vbklg/apps/logstash/logstash-6.4.0/logs which is now configured via log4j2.properties\_ \_[2019-01-25T04:35:58,570][WARN][logstash.config.source.multilocal] Ignoring the 'pipelines.yml' file because modules or command line options are specified\_ \_[2019-01-25T04:36:02,548][ERROR][logstash.outputs.nagios] Unknown setting 'nagios\_service' for nagios\_ \_[2019-01-25T04:36:02,549][ERROR][logstash.outputs.nagios] Unknown setting 'nagios\_host' for nagios\_ \_[2019-01-25T04:36:02,576][FATAL][logstash.runner] The given configuration is invalid. Reason: Something is wrong with your configuration.\_ \_[2019-01-25T04:36:02,596][ERROR][org.logstash.Logstash] java.lang.IllegalStateException: Logstash stopped processing because of an error: (SystemExit) exit\_ \__ ---
**Author:** ![yaauie](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/yaauie/32/23363_2.png) [@yaauie](https://discuss.elastic.co/u/yaauie)\ **Post date:** [January 26, 2019, 7:45am UTC](https://discuss.elastic.co/t/how-to-configure-logstash-output-nagios-getting-error-unknown-setting-nagios-host-for-nagios/165776/2 "2019-01-26T07:45:45Z")
The Nagios Output plugin requires that the _event_ have specific fields; these are not read from the pipeline configuration. [https://www.elastic.co/guide/en/logstash/current/plugins-outputs-nagios.html](https://www.elastic.co/guide/en/logstash/current/plugins-outputs-nagios.html) ---
**Author:** ![abhijitnt](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/abhijitnt/32/36537_2.png) [@abhijitnt](https://discuss.elastic.co/u/abhijitnt)\ **Post date:** [January 28, 2019, 3:32pm UTC](https://discuss.elastic.co/t/how-to-configure-logstash-output-nagios-getting-error-unknown-setting-nagios-host-for-nagios/165776/3 "2019-01-28T15:32:02Z")
Hi Yaauie. can you elaborate pls? I am new think stuff and not sure how to do this. Perhaps an conf file example will be more helpful. Regards Abhijit ---
**Author:** ![Badger](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/badger/32/25190_2.png) [@Badger](https://discuss.elastic.co/u/Badger)\ **Post date:** [January 28, 2019, 5:34pm UTC](https://discuss.elastic.co/t/how-to-configure-logstash-output-nagios-getting-error-unknown-setting-nagios-host-for-nagios/165776/4 "2019-01-28T17:34:20Z")
> [@abhijitnt](#): > > Unknown setting 'nagios\_service' for nagios The nagios output does not have nagios\_service or nagios\_host options. It reads them from fields on the event. You could add them using a mutate filter ``` mutate { add_field => { nagios_host => "abc.def.com" nagios_service => "LOGSTASH-POC-TEST" } } ``` ---
**Author:** ![abhijitnt](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/abhijitnt/32/36537_2.png) [@abhijitnt](https://discuss.elastic.co/u/abhijitnt)\ **Post date:** [February 1, 2019, 12:53pm UTC](https://discuss.elastic.co/t/how-to-configure-logstash-output-nagios-getting-error-unknown-setting-nagios-host-for-nagios/165776/5 "2019-02-01T12:53:30Z")
Thx Badger. This is how I edited logstash-nagios.conf(see below) and logs. It still says skipping commandfile during start. Is that a must? what should I put in there? Also Nothing on nagios server side. I think we need to specify port as well after (hostname:port) Is there any working example we have? _input {_ _file {_ _path =\> "/opt/app/23vbklg/apps/logstash/logstash-6.4.0/logs/logstash-plain.log"_ _start\_position =\> "beginning"_ _}_ _}_ _filter {_ _mutate {_ \_ add\_field =\> {\_ \_ "nagios\_host" =\> "[abc.def.com](http://abc.def.com)"\_ \_ "nagios\_service" =\> "LOGSTASH-POC-TEST"\_ \_ }\_ \_ }\_ _}_ _output {_ _if [message] =~ /(OK|error|ERROR|CRITICAL)/ {_ _nagios {_ _id =\> "Nagios\_plugin\_3462"_ _}_ _stdout { codec =\> rubydebug }_ _}_ _}_ logs- $ ../bin/logstash -f logstash-nagios.conf --path.data=/opt/app/23vbklg/apps/logstash/logstash-6.4.0/data2/ Sending Logstash logs to /opt/app/23vbklg/apps/logstash/logstash-6.4.0/logs which is now configured via log4j2.properties [2019-01-28T12:43:10,531][INFO][logstash.setting.writabledirectory] Creating directory {:setting=\>"path.queue", :path=\>"/opt/app/23vbklg/apps/logstash/logstash-6.4.0/data2/queue"} [2019-01-28T12:43:10,548][INFO][logstash.setting.writabledirectory] Creating directory {:setting=\>"path.dead\_letter\_queue", :path=\>"/opt/app/23vbklg/apps/logstash/logstash-6.4.0/data2/dead\_letter\_queue"} [2019-01-28T12:43:10,961][WARN][logstash.config.source.multilocal] Ignoring the 'pipelines.yml' file because modules or command line options are specified [2019-01-28T12:43:11,027][INFO][logstash.agent] No persistent UUID file found. Generating new UUID {:uuid=\>"e8058432-cb1b-4049-9d3b-b916f718f70e", :path=\>"/opt/app/23vbklg/apps/logstash/logstash-6.4.0/data2/uuid"} [2019-01-28T12:43:11,850][INFO][logstash.runner] Starting Logstash {"logstash.version"=\>"6.4.0"} [2019-01-28T12:43:20,027][INFO][logstash.pipeline] Starting pipeline {:pipeline\_id=\>"main", "pipeline.workers"=\>64, "pipeline.batch.size"=\>125, "pipeline.batch.delay"=\>50} [2019-01-28T12:43:20,626][INFO][logstash.inputs.file] No sincedb\_path set, generating one based on the "path" setting {:sincedb\_path=\>"/opt/app/23vbklg/apps/logstash/logstash-6.4.0/data2/plugins/inputs/file/.sincedb\_4e7f4d08e52b6c8ec9d2d9593924baef", :path=\>["/opt/app/23vbklg/apps/logstash/logstash-6.4.0/logs/logstash-plain.log"]} [2019-01-28T12:43:20,684][INFO][logstash.pipeline] Pipeline started successfully {:pipeline\_id=\>"main", :thread=\>"#\"} [2019-01-28T12:43:20,769][INFO][logstash.agent] Pipelines running {:count=\>1, :running\_pipelines=\>[:main], :non\_running\_pipelines=\>} [2019-01-28T12:43:20,789][INFO][filewatch.observingtail] START, creating Discoverer, Watch with file and sincedb collections [2019-01-28T12:43:21,627][INFO][logstash.agent] Successfully started Logstash API endpoint {:port=\>9601} [2019-01-28T12:43:22,404][WARN][logstash.outputs.nagios] Skipping nagios output; command file is missing {:commandfile=\>"/var/lib/nagios3/rw/nagios.cmd", :missed\_event=\>#LogStash::Event:0x15cf5710} [2019-01-28T12:43:22,407][WARN][logstash.outputs.nagios] Skipping nagios output; command file is missing {:commandfile=\>"/var/lib/nagios3/rw/nagios.cmd", :missed\_event=\>#LogStash::Event:0x64945712} [2019-01-28T12:43:22,413][WARN][logstash.outputs.nagios] Skipping nagios output; command file is missing {:commandfile=\>"/var/lib/nagios3/rw/nagios.cmd", :missed\_event=\>#LogStash::Event:0x4f42583a} [2019-01-28T12:43:22,415][WARN][logstash.outputs.nagios] Skipping nagios output; command file is missing {:commandfile=\>"/var/lib/nagios3/rw/nagios.cmd", :missed\_event=\>#LogStash::Event:0x1c0cd50} [2019-01-28T12:43:22,416][WARN][logstash.outputs.nagios] Skipping nagios output; command file is missing {:commandfile=\>"/var/lib/nagios3/rw/nagios.cmd", :missed\_event=\>#LogStash::Event:0x54e83f7b} [2019-01-28T12:43:22,417][WARN][logstash.outputs.nagios] Skipping nagios output; command file is missing {:commandfile=\>"/var/lib/nagios3/rw/nagios.cmd", :missed\_event=\>#LogStash::Event:0xe8020cb} [2019-01-28T12:43:22,417][WARN][logstash.outputs.nagios] Skipping nagios output; command file is missing {:commandfile=\>"/var/lib/nagios3/rw/nagios.cmd", :missed\_event=\>#LogStash::Event:0x75cd72a} [2019-01-28T12:43:22,420][WARN][logstash.outputs.nagios] Skipping nagios output; command file is missing {:commandfile=\>"/var/lib/nagios3/rw/nagios.cmd", :missed\_event=\>#LogStash::Event:0x75e590b2} [2019-01-28T12:43:22,421][WARN][logstash.outputs.nagios] Skipping nagios output; command file is missing {:commandfile=\>"/var/lib/nagios3/rw/nagios.cmd", :missed\_event=\>#LogStash::Event:0x3889f8f9} [2019-01-28T12:43:22,422][WARN][logstash.outputs.nagios] Skipping nagios output; command file is missing {:commandfile=\>"/var/lib/nagios3/rw/nagios.cmd", :missed\_event=\>#LogStash::Event:0xb8a9643} [2019-01-28T12:43:22,423][WARN][logstash.outputs.nagios] Skipping nagios output; command file is missing {:commandfile=\>"/var/lib/nagios3/rw/nagios.cmd", :missed\_event=\>#LogStash::Event:0x4eac5b40} { "@timestamp" =\> 2019-01-28T20:43:22.126Z, "message" =\> "[2019-01-28T12:20:13,497][ERROR][org.logstash.Logstash] java.lang.IllegalStateException: Logstash stopped processing because of an error: (SystemExit) exit", "path" =\> "/opt/app/23vbklg/apps/logstash/logstash-6.4.0/logs/logstash-plain.log", "nagios\_service" =\> "LOGSTASH-POC-TEST", "@version" =\> "1", "host" =\> "ostst143", "nagios\_host" =\> "[abc.def.com](http://abc.def.com)" } { "@timestamp" =\> 2019-01-28T20:43:22.120Z, "message" =\> "[2019-01-28T12:13:22,445][ERROR][logstash.outputs.nagios] Unknown setting 'nagios\_host' for nagios", "path" =\> "/opt/app/23vbklg/apps/logstash/logstash-6.4.0/logs/logstash-plain.log", "nagios\_service" =\> "LOGSTASH-POC-TEST", "@version" =\> "1", "host" =\> "ostst143", "nagios\_host" =\> "[abc.def.com](http://abc.def.com)" } { "@timestamp" =\> 2019-01-28T20:43:22.122Z, "message" =\> "if [message] =~ /(OK|error|ERROR|CRITICAL)/ {", "path" =\> "/opt/app/23vbklg/apps/logstash/logstash-6.4.0/logs/logstash-plain.log", "nagios\_service" =\> "LOGSTASH-POC-TEST", "@version" =\> "1", "host" =\> "ostst143", "nagios\_host" =\> "[abc.def.com](http://abc.def.com)" } { "@timestamp" =\> 2019-01-28T20:43:22.119Z, "message" =\> "[2019-01-28T12:09:23,841][ERROR][logstash.outputs.nagios] Unknown setting 'nagios\_host' for nagios", "path" =\> "/opt/app/23vbklg/apps/logstash/logstash-6.4.0/logs/logstash-plain.log", "nagios\_service" =\> "LOGSTASH-POC-TEST", "@version" =\> "1", "host" =\> "ostst143", "nagios\_host" =\> "[abc.def.com](http://abc.def.com)" } **strong text** ---
**Author:** ![Badger](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/badger/32/25190_2.png) [@Badger](https://discuss.elastic.co/u/Badger)\ **Post date:** [February 1, 2019, 1:57pm UTC](https://discuss.elastic.co/t/how-to-configure-logstash-output-nagios-getting-error-unknown-setting-nagios-host-for-nagios/165776/6 "2019-02-01T13:57:55Z")
> [@abhijitnt](#): > > [2019-01-28T12:43:22,404][WARN][logstash.outputs.nagios] Skipping nagios output; command file is missing {:commandfile=\>"/var/lib/nagios3/rw/nagios.cmd", :missed\_event=\>#LogStash::Event:0x15cf5710} The nagios output [works](https://github.com/logstash-plugins/logstash-output-nagios/blob/91952f88e21b92ec06dd03a63577066db0ed1b4d/lib/logstash/outputs/nagios.rb#L120) by sending the event to an external command. The command file defaults to /var/lib/nagios3/rw/nagios.cmd, which does not exist on your server. So you need to set the commandfile option on the output to tell it where that file is. ---
**Author:** ![abhijitnt](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/abhijitnt/32/36537_2.png) [@abhijitnt](https://discuss.elastic.co/u/abhijitnt)\ **Post date:** [February 4, 2019, 1:39pm UTC](https://discuss.elastic.co/t/how-to-configure-logstash-output-nagios-getting-error-unknown-setting-nagios-host-for-nagios/165776/7 "2019-02-04T13:39:13Z")
> [@Badger](#): > > /var/lib/nagios3/rw/nagios.cmd I must say the documentation is really poor on this. If you see that page, Required column says "No". Do you have any sample nagios.cmd file for Logstash to start with? ---
**Author:** ![Badger](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/badger/32/25190_2.png) [@Badger](https://discuss.elastic.co/u/Badger)\ **Post date:** [February 4, 2019, 1:44pm UTC](https://discuss.elastic.co/t/how-to-configure-logstash-output-nagios-getting-error-unknown-setting-nagios-host-for-nagios/165776/8 "2019-02-04T13:44:47Z")
> [@abhijitnt](#): > > Do you have any sample nagios.cmd file for Logstash to start with? I have never installed or used Nagios, so no, I do not have a sample file. ---
**Author:** ![abhijitnt](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/abhijitnt/32/36537_2.png) [@abhijitnt](https://discuss.elastic.co/u/abhijitnt)\ **Post date:** [February 4, 2019, 1:48pm UTC](https://discuss.elastic.co/t/how-to-configure-logstash-output-nagios-getting-error-unknown-setting-nagios-host-for-nagios/165776/9 "2019-02-04T13:48:53Z")
Thanks for your help though. I Will start with generic commands and see where I can go from there. ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [March 4, 2019, 2:00pm UTC](https://discuss.elastic.co/t/how-to-configure-logstash-output-nagios-getting-error-unknown-setting-nagios-host-for-nagios/165776/10 "2019-03-04T14:00:34Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.