The following are examples of service and command configurations that are useful for monitoring Cisco IPS devices with Nagios. ## Service Definitions for cisco_ips.pl checks # Sample health service definition define service{ use generic-service service_description Health max_check_attempts 2 normal_check_interval 20 retry_check_interval 5 notification_options w,c,r check_command check_cisco_ips_health event_handler reset_cisco_ips } # Sample user service definition define service{ use generic-service service_description Users max_check_attempts 5 normal_check_interval 60 retry_check_interval 30 notification_options c,r check_command check_cisco_ips_users } ## Command Definitions # 'cisco_ips.pl -c' Cisco IPS Health Check define command{ command_name check_cisco_ips_health # PASSWORD AUTH EXAMPLE command_line $USER1$/cisco_ips.pl -c -H $HOSTNAME$ -u -p # --OR-- # KEY AUTH EXAMPLE command_line $USER1$/cisco_ips.pl -c -H $HOSTNAME$ -u -i /.ssh/ -U #(OPTIONAL: -D -d -U -l -L -t -v ) } # 'cisco_ips.pl -e' Cisco IPS User Check define command{ command_name check_cisco_ips_users command_line $USER1$/cisco_ips.pl -e -H $HOSTNAME$ -U -C } # 'cisco_ips.pl -r' Cisco IPS Reset Event Handler define command{ command_name reset_cisco_ips # PASSWORD AUTH EXAMPLE command_line $USER1$/cisco_ips_.pl -r "$SERVICESTATE$,$SERVICEOUTPUT$" -H $HOSTNAME$ -u -p -l # --OR-- # KEY AUTH EXAMPLE command_line $USER1$/cisco_ips_.pl -r "$SERVICESTATE$,$SERVICEOUTPUT$" -H $HOSTNAME$ -u -i /.ssh/ -l #(OPTIONAL: -D -t ) } ## Extra Cisco IPS command/service definitions independent of cisco_ips.pl # Use SNMP to query the IPS for CPU utilization define service{ use generic-service service_description CPU Utilization - Past 5 Mins normal_check_interval 5 check_command check_cisco_ips_cpu } # Sample definition to verify that HTTPS is running/accessible on the IPS define service{ use generic-service service_description HTTPS max_check_attempts 3 normal_check_interval 30 retry_check_interval 1 notification_options c,r check_command check_https!10!20 } # 'check_cisco_ips_cpu' command definition define command{ command_name check_cisco_ips_cpu command_line $USER1$/check_snmp -H $HOSTADDRESS$ -o "1.3.6.1.4.1.9.9.109.1.1.1.1.8.1" -w 75 } # 'check_https' command definition define command{ command_name check_https command_line $USER1$/check_http --ssl -H $HOSTADDRESS$ }