check_ssh

[Tomáš Tomčák]

Hello,

I would like to ask you if you were facing issue with plugin check_ssh as I
do .

The problem is that even the check is green and output is displayed
correctly I am getting error messages in /var/log/audit on targets which
are caused by  check_ssh.

type=USER_LOGIN msg=audit(05/13/2021 09:28:05.018:4011474) : pid=1147767
uid=root auid=unset ses=unset subj=system_u:system_r:sshd_t:s0-s0:c0.c1023
msg='op=login acct=(unknown) exe=/usr/sbin/sshd hostname=?
addr=XXXX.XXXX.XXXX.XXXX  terminal=ssh res=failed'

Do you know please how to prevent or get rid of this behaviour ? Looks like
plugin can not authenticate maybe with some authentication method and
eventually it success but will cause these failed login messages on targets.

Thank you a lot in advance
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://www.monitoring-plugins.org/archive/help/attachments/20210513/1c02ff53/attachment.html>