nagios笔记.docx

安装笔记一、 环境：VM-Workstation +CentOS6.4x86_64二、安装nagios1、下载nagios/downloads/nagios-core/thanks/?t=1450161713（下载的是free版本）2、依赖软件、GD库和开发库开发库（如果没有的话）yum install -y zlib gcc openssl-develyum install -y httpd php glibc glibc-common gd gd-devel perl makeyum install -y mysql mysql-devel mysql-server php-mysql (如果需要监控mysql的情况需要安装)#yum -y groupinstall Development tools Development Libraries （确保开发包组已安装,没有的话先安装）3、安装nagios#groupadd nagios#useradd -s /bin/false -g nagios nagios#useradd -s /bin/false -g nagios nagioscmd#tar zxvf nagios-4.1.1.tar.gz#cd nagios-4.1.1#./configure -with-command-group=nagios -enable-event-broker配置脚本输出：#make all#make install #make install-init#make install-config#make install-commandmode4、在httpd的配置文件目录（conf.d）中创建nagios的web程序配置文件#make install-webconf (前提是已经装好了apache服务)三、 安装插件源码包1、 下载/downloads/nagios-plugins/2、 安装# tar -zxvf nagios-plugins-2.1.1.tar.gz# cd nagios-plugins-2.1.1#./configure -with-nagios-user=nagios -with-nagios-group=nagios(如果监控mysql：-with-mysql=DIR 可以查看选项 ./configure -help)插件的“configure”的脚本输出#make#make install(可选步骤)安装nagios汉化插件（此步，我跳过了）四、 安装NRPE1、 下载/projects/nagios/files/nrpe-2.x/nrpe-2.15/2、 安装# tar -zxvf nrpe-2.15.tar.gz# cd nrpe-2.15# ./configure -with-nrpe-user=nagios -with-nrpe-group=nagios -with-nagios-user=nagios -with-nagios-group=nagios -enable-ssl -enable-command-args -(开启更强大功能,开启参数传递功能，想命令传递参数，用不到可不用开启)# make all# make install# make install-plugin五、 配置Apache1、安装 yum y install apache （在开始安装软件依赖的时候已经装好了，此处无需再安装了）2、usermod -a -G nagios apache （将httpd用户加到nagios组中）3、到nagios安装程序包中把http.conf 文件复制到apache的扩展配置文件目录中#cp /nagios-4.1.1/sample-config/httpd.conf /etc/httpd/conf.d/ （此步骤与上面nagios安装中的 #make intall-webconf 功能一样。）4、创建htpasswd.users文件，提供web登录的身份验证功能：#htpasswd -c -m /usr/local/nagios/etc/htpasswd.users nagiosadmin 设置密码：nagiosadmin (-c：创建 -m MD5加密)注意：nagiosadmin是系统默认账户，如果使用其它的，需要同时修改或者添加contacts.cfg配置文件中对应的联系人名字5 、启动apache服务#service httpd start (如已启动，需要restart重启)启动时如果报如下错误：原因：这个问题应该是没有在 /etc/httpd/conf/httpd.conf 中设定 ServerName。所以apache会用主机上的名称来取代，首先会去找 /etc/hosts 中有没有主机的定义。解决办法：（1）可以设定httpd.conf文件中的 ServerName，如下：ServerName localhost:80 （2）在 /etc/hosts 中填入自己的主机名称 bogon，如下： shiwei (用户名称) 参考网址：/blog/1096296/uid-21516619-id-1824989.html/lyjtynet/article/details/4213173 修改后 再次重启服务：# service httpd restart六、 启动nagios服务1、 检查配置文件 （-v 是检查参数）# /usr/local/nagios/bin/nagios -v /usr/local/nagios/etc/nagios.cfg2、 启动#service nagios start访问打开浏览器输入 0/nagios 3、 问题：Unable to get process status 问题解决办法：检查SElinux是否关闭，可以使用如下指令关闭SElinux修改/etc/selinux/config文件中的SELINUX= 为 disabled ，然后重启。或者 # setenforce 0或者也可以通过以下方式将nagios的CGI程序运行于SELINUX/targeted模式而不用关闭SElinux：#chcon R t httpd_sys_content_t /usr/local/nagios/sbin#chcon R t httpd_sys_content-t /usr/locat/nagios/share图1 七、 服务器自启动设置1、 nagios服务自启动#chkconfig add nagios#chkconfig nagios on2、Apache服务开机自启动#chkconfig httpd on至此，监控服务器软件安装完毕，服务运行正常。以外为具体配置监控内容。监控其他linux服务器（被监控服务器安装 nagios nagios-plugins（插件） nrpe）# Yum install -y zlib gcc openssl-devel openssl gd gd-devel php glibc glibc-common perl make一、 被监控节点安装配置1、 创建nagios用户, nagios组2、安装开发包组 #yum -y groupinstall Development tools （确保开发包组已安装,没有的话先安装）#yum -y groupinstall Development Libraries （确保开发包组已安装,没有的话先安装）3、安装nagios插件# cd nagios-plugins-2.1.1#./configure -with-nagios-user=nagios -with-nagios-group=nagios#make all#make install4、 安装nrpe# tar -zxvf nrpe-2.15.tar.gz# cd nrpe-2.15# ./configure -with-nrpe-user=nagios -with-nrpe-group=nagios -with-nagios-user=nagios -with-nagios-group=nagios -enable-ssl -enable-command-args -(开启更强大功能，想命令传递参数，用不到可不用开启)#make all#make install#make install-plugin#make install-daemon -守护进程# make install-daemon-config5、init方式启动（启动前先设置配置文件）（1）#cd nrpe-2.15#cp init-script /etc/init.d/nrpe#chmod a+x /etc/init.d/nrpe#vim /usr/local/nagios/etc/nrpe.cfg增加服务ip：allowed_hosts=,0 -nagios服务器地址#service nrpe start#chkconfig nrpe on （2） 或者设置成超级守护进程，或者使用脚本写到服务中。6、注意事项：确认iptables允许或关闭确认selinux为关闭:修改/etc/selinux/config文件中的SELINUX= 为 disabled ，然后重启。或者# setenforce 0确认check_*文件完全创建（ls /usr/local/nagios/etc/libexec）确认xinted为关闭。？二Nrpe 一些相关监控的内容和参数1.先用表格列举一下我的监控对象和阀值：监控对象监控阀值主机资源主机存活：check_ping-w 3000.0,80% -c 5000.0,100% -p 5(3000毫秒响应时间内，丢包率超过80%报警告，5000毫秒响应时间内，丢包率超过100%报危急，一共发送5个包）登录用户：check_user-w 5 -c 10(w为警告，c为危急)系统负载：check_load-w 15,10,5 -c 30,25,20(1分钟，5分钟，15分钟大于对应的等待进程数则警告或危急)磁盘占用率：check_disk-w 20% -c 10% -p /（根分区剩余空间为总大小的20%警告，10%危急，-p后是根分区）脚本检测磁盘I/O：check_iostat-w 5 c 10 (磁盘I/O的iowait超过5%报警告,超过10%报危急)检测僵尸进程：check_zombie _procs-w 5 -c 10 -s Z（有5个僵尸进程报警告，10个报危急）检测总进程数：check_total_procs-w 150 -c 200（总进程到150个警告，200个报危急）脚本检测内存剩余：check_mem-w 90% -c 95%(内存空闲率90%以上报警告，95%以上报危急)检测交换分区使用率：check_swap-w 20% -c 10%（交换分区剩余空间为总大小的20%警告，10%危急）应用服务监控监控服务端口：check_tcp-H localhost2 -p 80(主机与对应的端口号)监控页面响应时间：check_http-H localhost2 -u http:/localhost2/test.jsp w 5 c 10(检查页面，超过5s报警告，超过10s报危急)脚本检测IP连接数：check_ips-w 200 c 250(IP连接数超过200报警告，超过250报危急)流量监控监控server流量:Check_traffic-V 2c -C public -H localhost2 -I 2 -w 12,30 -c 15,35 -M b(snmp版本,用户,主机,对应网卡,警告阀值,危急阀值)被监控机的 nrpe配置文件中的 命令部分vim /usr/local/nagios/etc/nrpe.cfg /内容如下： # The following examples use hardcoded command arguments. commandcheck_users=/usr/local/nagios/libexec/check_users -w 5 -c 10 commandcheck_load=/usr/local/nagios/libexec/check_load -w 15,10,5 -c 30,25,20 commandcheck_hda1=/usr/local/nagios/libexec/check_disk -w 20 -c 10 -p /dev/hda1 commandcheck_zombie_procs=/usr/local/nagios/libexec/check_procs -w 5 -c 10 -s Z commandcheck_total_procs=/usr/local/nagios/libexec/check_procs -w 150 -c 200 Nagios 服务组的创建规则：查看文本打印1. 1.#vimnagios.cfg2. 3. cfg_file=/usr/local/nagios/etc/objects/servicegroups.cfg#添加这一行4. 5. 2.在/usr/local/nagios/etc/objects/下建立servicegroups.cfg文件6. 7. 3.#vimservicegroups.cfg8. 9. #checkweb10. defineservicegroup11. servicegroup_namecheck_web12. aliascheck_web13. members155,check_w1,156,check_w2,157,check_w314. 15. 16. #注意：members这里要写成：主机1，服务，主机2，服务.的形式，我之前就是这里出错了。17. 18. 4.#checknagios#检测配置文件19. 20. 5.#servicenagiosrestartNagios 邮件报警设置1、安装启动sendmail #yum -y install sendmail#service sendmail start#chkconfig sendmail on -开机启动2 设置hosts文件#vim /etc/hosts增加本机地址对应本机计算机名的一行记录（本机计算机名要跟 /etc/sysconfig/network中一致）3修改 /usr/local/nagios/etc/objects/contacts.cfg文件 增加自己的邮箱，多个邮箱地址之间用空格分开。 4 设置需要报警的服务器或主机。以下是xinetd方式启动服务 仅供参考6、编辑/etc/xinetd.d/nrpeservice nrpe flags = REUSE socket_type = stream port = 5666 wait = no user = nagios group = nagios server = /usr/local/nagios/bin/nrpe server_args = -c /usr/local/nagios/etc/nrpe.cfg -inetd log_on_failure += USERID disable = no only_from = 54 #监控服务器主机(nagios-core地址)7、编辑/etc/services，在最后一行加上Nrpe 5666/tcp # NRPE重启xinetd服务Service xinetd restart检查服务是否启动正常，执行如下命令netstat-nltp |grep 5666、参考资料:1、安装详解/5635432/12939332、安装nrpe/directory/addons/monitoring-agents/nrpe2d-nagios-remote-plugin-executor/details/index.php?option=com_mtree&task=search&Itemid=74&searchword=nrpe3、/art/201103/250197.htm4、/art/201108/285278.htm5、Nagios系统监控实践 （原书第2版）（美）David Josephsen 著，康锦龙 译6、飞信机器人（有linux和windows版）7、/lesson/id-11386.html 马哥linux培训高级-nagios监控应用:/art/201312/424952.htm二、被监控端安装Nagios-plugins插件和NRPE1、添加nagios用户1. rootClientNrpe#useradd-s/sbin/nologinnagios2、安装nagios-plugins，因为NRPE依赖此插件1. rootClientNrpe#yum-yinstallgccgcc-c+makeopensslopenssl-devel 2. 3. rootClientNrpe#tarxfnagios-plugins-2.0.3.tar.gz 4. rootClientNrpe#cdnagios-plugins-2.0.3 5. rootClientNrpenagios-plugins-2.0.3#./configure-with-nagios-user=nagios-with-nagios-group=nagios 6. rootClientNrpenagios-plugins-2.0.3#make&makeinstall 7. 8. #注意：如何要监控mysql需要添加-with-mysql3、安装NRPE1. rootClientNrpe#tarxfnrpe-2.15.tar.gz 2. rootClientNrpe#cdnrpe-2.15 3. rootClientNrpenrpe-2.15#./configure-with-nrpe-user=nagios 4. -with-nrpe-group=nagios 5. -with-nagios-user=nagios 6. -with-nagios-group=nagios 7. -enable-command-args 8. -enable-ssl 9. rootClientNrpenrpe-2.15#makeall 10. rootClientNrpenrpe-2.15#makeinstall-plugin 11. rootClientNrpenrpe-2.15#makeinstall-daemon 12. rootClientNrpenrpe-2.15#makeinstall-daemon-config4、配置NRPE1. rootClientNrpe#grep-v#/usr/local/nagios/etc/nrpe.cfg|sed/$/d 2. log_facility=daemon 3. pid_file=/var/run/nrpe.pid 4. server_port=5666#监听的端口 5. nrpe_user=nagios 6. nrpe_group=nagios 7. allowed_hosts=05#允许的地址通常是Nagios服务器端 8. 9. dont_blame_nrpe=0 10. allow_bash_command_substitution=0 11. debug=0 12. command_timeout=60 13. connection_timeout=300 14. commandcheck_users=/usr/local/nagios/libexec/check_users-w5-c10 15. commandcheck_load=/usr/local/nagios/libexec/check_load-w15,10,5-c30,25,20 16. commandcheck_hda1=/usr/local/nagios/libexec/check_disk-w20%-c10%-p/dev/hda1 17. commandcheck_zombie_procs=/usr/local/nagios/libexec/check_procs-w5-c10-sZ 18. commandcheck_total_procs=/usr/local/nagios/libexec/check_procs-w150-c2005、启动NRPE1. #以守护进程的方式启动 2. rootClientNrpe#/usr/local/nagios/bin/nrpe-c/usr/local/nagios/etc/nrpe.cfg-d 3. rootClientNrpe#netstat-tulpn|grepnrpe 4. tcp00:566:*LISTEN22597/nrpe 5. tcp00:5666:*LISTEN22597/nrpe有两种方式用于管理nrpe服务，nrpe有两种运行模式：1. -i#Runasaserviceunderinetdorxinetd 2. -d#Runasastandalonedaemon可以为nrpe编写启动脚本，使得nrpe以standard alone方式运行：1. rootClientNrpe#cat/etc/init.d/nrped 2. #!/bin/bash 3. #chkconfig:23458812 4. #description:NRPEDAEMON 5. 6. NRPE=/usr/local/nagios/bin/nrpe 7. NRPECONF=/usr/local/nagios/etc/nrpe.cfg 8. 9. case$1in10. start) 11. echo-nStartingNRPEdaemon.12. $NRPE-c$NRPECONF-d 13. echodone.14. ; 15. stop) 16. echo-nStoppingNRPEdaemon.17. pkill-unagiosnrpe 18. echodone.19. ; 20. restart) 21. $0stop 22. sleep2 23. $0start 24. ; 25. *) 26. echoUsage:$0start|stop|restart27. ; 28. esac 29. exit0 30. rootClientNrpe#chmod+x/etc/init.d/nrped 31. rootClientNrpe#chkconfig-addnrped 32. rootClientNrpe#chkconfignrpedon 33. 34. rootClientNrpe#servicenrpedstart 35. StartingNRPEdaemon.done. 36. rootClientNrpe#netstat-tnlp 37. ActiveInternetconnections(onlyservers) 38. ProtoRecv-QSend-QLocalAddressForeignAddressStatePID/Programname 39. tcp00::*LISTEN1031/sshd 40. tcp00::*LISTEN1108/master 41. tcp00:566:*LISTEN22597/nrpe 42. tcp00:22:*LISTEN1031/sshd 43. tcp00:1:25:*LISTEN1108/master 44. tcp00:5666:*LISTEN22597/nrpe三、监控端安装NRPE1、安装NRPE1. rootNagios#tarxfnrpe-2.15.tar.gz 2. rootNagios#cdnrpe-2.15 3. rootNagiosnrpe-2.15#./configure 4. -with-nrpe-user=nagios 5. -with-nrpe-group=nagios 6. -with-nagios-user=nagios 7. -with-nagios-group=nagios 8. -enable-command-args 9. -enable-ssl 10. rootNagiosnrpe-2.15#makeall 11. rootNagiosnrpe-2.15#makeinstall-plugin 12. 13. #安装完成后，会在Nagios安装目录的libexec下生成check_nrpe的插件 14. rootNagios#cd/usr/local/nagios/libexec/ 15. rootNagioslibexec#ll-dcheck_nrpe 16. -rwxrwxr-x.1nagiosnagios767699月2808:07check_nrpe2、check_nrpe的用法1. rootNagioslibexec#./check_nrpe-h 2. 3. NRPEPluginforNagios 4. Copyright(c)1999-2008EthanGalstad() 5. Version:2.15 6. LastModified:09-06-2013 7. License:GPLv2withexemptions(-lformoreinfo) 8. SSL/TLSAvailable:AnonymousDHMode,OpenSSL0.9.6orhigherrequired 9. 10. Usage:check_nrpe-H-b-4-6-n-u-p-t-c-a 11. 12. Options: 13. -n=DonouseSSL 14. -u=MakesockettimeoutsreturnanUNKNOWNstateinsteadofCRITICAL