Cheshire Cat Computing

Hello,

We had a problem with the nagios server and so, the nagios event log service was not able to connect to it.
The nagios server is back and I wanted to restart the nagios event log services of my windows servers but I can't: service stay in state "Stopping".

I tried to kill the nagevlog.exe process using kill, taskkill, pskill but I'm still not able to kill it (Access Denied). The only way is to reboot the server.

Do you have a method to restart the service when nagevlog.exe hangs?

Regards,

Bertrand.

The nagevlog hang is a known bug with a (currently) unknown solution. Basically, what's going on is that it is unable to contact the NSCA daemon, so it tries to shut down. Before shutting down, it tries to notify the NSCA daemon that is going down. But it can't, so it decides to shut down... and so on, and so forth. This also causes GPFs when you shut down windows while NagEvLog is running, on occasion.

The solution is, of course, for the code to NOT try and notify NSCA of the problem when NSCA itself was the original fault. Due to the nature of the code, though, this is not so easy as you'd think (due to histroical reasons in the code).

You can kill the nagevlog.exe process to fix things, but this of course requires sysadmin privs. The hang on shutdown is not a real problem since everything is going down anyway (the TCPIP stack gets taken away before nagevlog gets to notifcy NSCA is appears).

I'll keep looking for a solution, once I get back to having development time (currently working on VMWare monitoring).

_________________
Steve Shipway
UNIX Systems, ITSS, University of Auckland, NZ
Woe unto them that rise up early in the morning... -- Isaiah 5:11

Hello,

Thank you for your reply.

I initiated this post because I can't kill nagevlog.exe even as administrator. I always have the same error: Access Denied.
I tried with several utilities (kill, taskkill, pskill)

It does the same thing with several windows servers.

So, I rebooted some of them and it's Ok but for some other servers, I can't reboot them at this time.

That's why I am looking for a solution to restart the service without rebooting the servers.

regards,

Bertrand

OK, this is a new one on me. I've never been unable to kill the nagevlog.exe process before.

One possible workaround is to disable the heartbeat notifications (set the heartbeat service name to blank) which will prevent it from trying to send error messages via NSCA. This might prevent it from occurring.

If you are not using the heartbeat notification then there may be a different issue.

_________________
Steve Shipway
UNIX Systems, ITSS, University of Auckland, NZ
Woe unto them that rise up early in the morning... -- Isaiah 5:11