NRPE and Remote Checks

Use NRPE com escopo mínimo, TLS e comandos permitidos explicitamente; evite argumentos remotos irrestritos.

This module follows an evidence-first workflow: isolate collection, processing, storage, state evaluation, and presentation before changing production settings.

1. Define the operational objective and expected result.
2. Record version, topology, dependencies, and required flows.
3. Test the underlying protocol or plugin outside the monitoring scheduler.
4. Validate configuration before reload/restart when the platform supports it.
5. Apply the smallest change and watch logs plus one full collection cycle.
6. Keep a tested rollback path.

sudo systemctl status nagios-nrpe-server
/usr/lib/nagios/plugins/check_nrpe -H 192.0.2.20 -c check_disk

• Main process is healthy and logs show no recurring error.
• Manual collection returns the expected value.
• Scheduled collection finishes within its time budget.
• Frontend timestamps and states match the source.
• A controlled failure and recovery produce the expected lifecycle.

Monitoring systems expose topology, inventory, versions, credentials, and operational state. Apply segmentation, least privilege, secure protocols, protected secrets, and explicit administrative access controls.

• Nagios Core releases
• Nagios Core documentation
• Nagios Plugins
• CERT.br security practices