主机监控：nagios安装配置

dirtysea · 发表于 2010-4-18 20:13:49

安装 nagios之前的准备

设置IP地址。关闭SELinux
设置时间，保持跟本地时间一致!
# yum -y install gcc glibc glibc-common gd gd-devel openssl-devel
必须安装gd-devel，安装nagios时需要加--with-gd-lib=/usr/lib --with-gd-inc=/usr/include
不然不能生成statusmap.cgi 也就不能看状态图了！

添加用户，建立安装目录
# groupadd nagios
# useradd -g nagios -d /usr/local/nagios -s /sbin/nologin nagios
# usermod -G nagios apache
[root@localhost nagios]# grep ^User /etc/httpd/conf/httpd.conf
User apache
[root@localhost nagios]#usermod -G nagios apache

1.Nagios监控linux服务器平台及所用组件,
监控服务器:CentOS 5.3x64(192.168.1.202)+nagios-3.2.1+ nagios-plugins-1.4.15+ nrpe_2.8.1
被监控端： CentOS 5.3x64(192.168.1.203)+ nagios-plugins-1.4.15+ nrpe_2.8.1

注意：两端nrpe的版本要一致，不然无法相连接

NRPE总共由两部分组成:

check_nrpe插件,运行在监控主机上。

NRPE daemon,运行在远程的linux主机上(通常就是被监控机)

2.配置监控端

安装nagios

cd nagios-3.2.1
./configure --prefix=/usr/local/nagios --with-command-group=nagcmd --with-gd-lib=/usr/lib --with-gd-inc=/usr/include
make all
make install
make install-init
make install-config
make install-commandmode
make install-webconf
#可以自动配置httpd.conf

安装nagios-plugins

cd nagios-plugins-1.4.15
./configure --with-nagios-user=nagios --with-nagios-group=nagios --enable-redhat-pthread-workaround
make
make install

安装NRPE

#yum install openssl-devel （安装 openssl包）

cd nagios-nrpe_2.8.1
./configure

#默认自动添加了openssl
#因为传送过程要加密,如果后面make报错,加如下参数
rpm -qa| grep ssl
openssl-devel-0.9.7a-43.17.el4_6.1
rpm -ql openssl-devel-0.9.7a-43.17.el4_6.1 | more
./configure --enable-ssl --with-ssl-lib=/lib/(当然前提要有openssl)
make all
make install-plugin

commands.cfg定义外部构件nrpe

vi /usr/local/nagios/etc/objects/commands.cfg
#添加
#check nrpe
define command{
      command_name check_nrpe
      command_line $USER1$/check_nrpe -H $HOSTADDRESS$ -c $ARG1$
      }

配置要监控的linux主机

vi /usr/local/nagios/etc/nagios.cfg
#中间添加
cfg_file=/usr/local/nagios/etc/objects/mylinux.cfg

新建mylinux.cfg 设置监控内容

vi /usr/local/nagios/etc/objects/mylinux.cfg
define host{
         use
linux-server
      host_name    mylinux
      alias
mylinux
      address       192.168.1.203(客户端IP既被监控的IP)
      }
define service{
      use
  generic-service
      host_name
mylinux
      service_description    check-swap
      check_command
  check_nrpe!check_swap
            }
define service{
      use
  generic-service
      host_name

  mylinux
      service_description    check-load
   check_command       check_nrpe!check_load
            }
define service{
      use
  generic-service
      host_name

  mylinux
   service_description
check-disk

check_command       check_nrpe!check_had1
            }

define service{
      use

generic-service
      host_name

mylinux
   service_description

check-users
   check_command

check_nrpe!check_users
            }
define service{
      use

generic-service
      host_name


mylinux
      service_description  otal_procs
      check_command    check_nrpe!check_total_procs
}
#这5个是默认的监控服务，如需自定义服务可在这里添加
自定义服务可参考：http://saplingidea.javaeye.com/blog/514013
如有必要则需更改check阈值，在被监控端的/usr/local/nagios/etc/nrpe.cfg，下面会提到

其它设置

chkconfig --add nagios
#配置机器启动时自动启动Nagios
chkconfig nagios on
/usr/local/nagios/bin/nagios -v /usr/local/nagios/etc/nagios.cfg
#检查Nagios配置文件
vi /etc/selinux/config
#关闭SELinux
SELINUX=disabled
service iptables stop
#关闭SELinux,或打开80,5666端口
service nagios start

2.配置被监控端1.安装nagios-plugin

useradd nagios
passwd nagios
tar -zxvf nagios-plugins-1.4.15.tar.gz
cd nagios-plugins-1.4.15
./configure --with-nagios-user=nagios --with-nagios-group=nagios --enable-redhat-pthread-workaround
Make
make install

改变主目录权限

chown –R
nagios.nagios /usr/local/nagios
[root@client nagios]# ll
drwxr-xr-x
2 nagios nagios 4096 Jun
1 00:07 libexec
drwxr-xr-x
3 nagios nagios 4096 Jun
1 00:07 share

安装客户端的nrpe

yum install openssl-devel （安装 openssl包）

tar -zxvf nagios-nrpe_2.8.1.orig.tar.gz

cd nagios-nrpe_2.8.1
./configure
(会自动加载SSL)
#如果后面make报错,加如下参数
./configure --enable-ssl --with-ssl-lib=/usr/lib/(当然前提要有openssl)
make all
make install-plugin
make install-daemon
make install-daemon-config

配置nrpe信息

vi /usr/local/nagios/etc/nrpe.cfg
allowed_hosts=127.0.0.1,192.168.1.202

启动nrpe

/usr/local/nagios/bin/nrpe -c /usr/local/nagios/etc/nrpe.cfg –d
#上面这一步在本机上可以运行，如通过ssh连接，则需用：/usr/local/nagios/bin/nrpe -d

vi /etc/rc.d/rc.local
/usr/local/nagios/bin/nrpe -c /usr/local/nagios/etc/nrpe.cfg –d

验证nrpe

netstat -an | grep 5666
tcp
0
0 0.0.0.0:5666

0.0.0.0:*
LISTEN
/usr/local/nagios/libexec/check_nrpe -H 127.0.0.1
NRPE v2.8.1
#服务端测试
/usr/local/nagios/libexec/check_nrpe -H l92.168.1.203
NRPE v2.8.1

#常见错误
/usr/local/nagios/libexec/check_nrpe -H 127.0.0.1
CHECK_NRPE: Error - Could not complete SSL handshake.
配置allowed_hosts=127.0.0.1,192.168.1.202然后kill进程再重启就OK了
2./usr/local/nagios/libexec/check_nrpe -H 127.0.0.1
Connection refused by host
Nrpe进程没有启动

配置监控对像(关键)
由监控原理可知被监控端做监控然后传给监控服务器绘总,设置监控详细参数主要是设置被监控端的nrpe.cfg文件

可以看到里面监控对象

vi /usr/local/nagios/etc/nrpe.cfg
command[check_users]=/usr/local/nagios/libexec/check_users -w 5 -c 10
command[check_load]=/usr/local/nagios/libexec/check_load -w 15,10,5 -c 30,25,20
command[check_hda1]=/usr/local/nagios/libexec/check_disk -w 20 -c 10 -p /dev/hda1
command[check_zombie_procs]=/usr/local/nagios/libexec/check_procs -w 5 -c 10 -s Z
command[check_total_procs]=/usr/local/nagios/libexec/check_procs -w 150 -c 200
command[check_swap]=/usr/local/nagios/libexec/check_swap -w 20% -c 10%
#这里就是上面提到的check阈值，如需更改，加减后面的数值即可

放一个我做的图，这里监控了两个主机，方法同上

下一章讲nagios各个模块的作用和通知

来源：http://blog.163.com/qingfeng_0105@126/blog/static/75062738201093095021704/

dirtysea · 发表于 2010-8-19 17:28:48

Nagios飞信linux短信报警脚本配置

1.编写发送脚本
vi sendsms.sh
#!/bin/bash
fetionDir=/usr/local/fetion/
cd $fetionDir
DIR=`pwd`
user=13724506486
pwd=gjb88888
for phone in `cat $DIR/phonelist.txt`
do
echo "$phone" | sed ‘/^[ \t]*$/d’ | sed ‘s/^[ \t]*//’ | sed ‘s/[ \t]*$//’ | grep ‘^1[0-9][0-9][0-9][0-9][0-9][0-9][0-9][0-9][0-9][0-9]‘
if (($? == 0 ));then
   if [[ -f $DIR/msg.txt ]];then
         echo "================" >> msg.txt
      fi
      phone=`echo "$phone" | sed ‘s/^[ \t]*//’ | sed ‘s/[ \t]*$//’`
      echo "sms $phone $1" >> $DIR/msg.txt
      echo "quit" >> $DIR/msg.txt
      $fetionDir/fetion –mobile=$user –pwd=$pwd –to=$phone –msg-utf8="$1"
else
      continue
fi
done

2.接收者电话号码
vi /usr/local/fetion/phonelist.txt
#hugwww
13724506486

3.修改飞信目录权限（否则运行Nagios的用户不能写入信息内容到/usr/local/fetion/msg.txt）
chown -R nagios.nagios /usr/local/fetion
chmod +x /usr/local/fetion/sendsms.sh

4.配置Nagios
vi commands.cfg
###################################################################
#
# notify-host-by-sendmsg/notify-service-by-sendmsg  //定义发送飞信报警的命令
#
###################################################################
define command {
command_name  notify-host-by-fetion
command_line  /usr/local/fetion/sendsms.sh "Host $HOSTSTATE$ alert for $HOSTNAME$($HOSTADDRESS$) on $TIME$."
}
define command {
command_name  notify-service-by-fetion
command_line  /usr/local/fetion/sendsms.sh ""$TIME$":$SERVICEDESC$($HOSTADDRESS$) is $SERVICESTATE$."
}

5.定义联系人
vi contacts.cfg
define contact {
   contact_name                   admin
   alias                         system admin
   host_notification_period       24×7
   service_notification_period    24×7
   host_notification_options    d,r
   service_notification_options w,u,c,r
   service_notification_commands notify-service-by-email,notify-service-by-fetion
   host_notification_commands    notify-host-by-email,notify-host-by-fetion
   email                         hugwww@115.com
   pager                         13724506486
  }

测试故障时是否能够触发短信报警
/usr/local/fetion/sendsms.sh "nagios Host alert"

完成！

dirtysea · 发表于 2010-9-14 11:07:20

nagios+LAMP自动安装脚本

#!/bin/sh
# Nagios V3.03 install script
# Write by zhengyp
#Date:2008-10-8
# Softwares are all store in /usr/local/src
cd /usr/local/src
#Install LAMP for Nagios
# Step 1. Install Apache
tar zxvf httpd-2.2.9.tar.gz
cd httpd-2.2.9
./configure --prefix=/usr/local/apache --enable-so --enable-mods-shared=all
make && make install
#Configure the apache server for PHP
sed -i 's#DirectoryIndex index.html#& index.php#' /usr/local/apache/conf/http.conf
sed -i '/AddType application\/x-gzip .gz .tgz/i\AddType application/x-httpd-php .php\
AddType application/x-httpd-php-source .phps' /usr/local/apache/conf/http.conf
#Step 2. Install Mysql As a server
#Add a mysql user
/usr/sbin/groupadd mysql
/usr/sbin/useradd -g mysql mysql
cd ..
tar zxvf mysql-5.1.26-rc.tar.gz
cd mysql-5.1.26-rc/
./configure --prefix=/usr/local/mysql/ --without-debug --with-unix-socket-path=/usr/local/mysql/mysql.sock --with-client-ldflags=-all-static --with-mysqld-ldflags=-all-static --enable-assembler --with-extra-charsets=gbk,gb2312,utf8 --with-pthread --enable-thread-safe-client
make && make install
chmod +w /usr/local/mysql
chown -R mysql:mysql /usr/local/mysql
cp support-files/my-medium.cnf /usr/local/mysql/my.cnf
cd ../
#Initialize the database
#You can change the data directory by set "--datadir="
#mkdir /data
#chown -R mysql:mysql /data
/usr/local/mysql/bin/mysql_install_db --defaults-file=/usr/local/mysql/my.cnf --basedir=/usr/local/mysql --datadir=/usr/local/mysql/data --user=mysql --pid-file=/usr/local/mysql/mysql.pid --skip-locking --port=3306 --socket=/tmp/mysql.sock
#Start Mysql
/bin/sh /usr/local/mysql/bin/mysqld_safe --defaults-file=/usr/local/mysql/my.cnf &
#Step 3. Install PHP
#If you use CentOS, Please run yum to check that the graphics library have installed.Also it will update for these softwares
#If you use Redhat , Install the graphics library by "rpm" command
cd ..
yum -y install gcc gcc-c++ autoconf libjpeg libjpeg-devel libpng libpng-devel freetype freetype-devel libpng libpng-devel libxml2 libxml2-devel zlib zlib-devel glibc glibc- devel glib2 glib2-devel bzip2 bzip2-devel ncurses ncurses-devel curl curl-devel
tar zxvf php-5.2.6.tar.gz
cd php-5.2.6
./configure --prefix=/usr/local/php5 --with-mysql=/usr/local/mysql --with-mysqli=/usr/local/mysql/bin/mysql_config --with-iconv-dir=/usr/local --with-apxs2=/usr/local/apache/bin/apxs --with-freetype --with-jpeg --with-png --with-zlib --with-libxml-dir=/usr --enable-xml --disable-rpath --with-curl --with-curlwrappers --with-gd --enable-gd-native-ttf --with-openssl
make && make install
cd ..
#Step 4.Install Nagios 3.03
#Add nagios user
adduser nagios
mkdir /usr/local/nagios
chown nagios:nagios /usr/local/nagios
groupadd nagcmd
usermod -G nagcmd nagios
tar zxvf nagios-3.0.3.tar.gz
cd nagios-3.0.3
sed -i 's#wav#x-mplayer2#' cgi/status.c
#Configure and make
./configure --prefix=/usr/local/nagios --with-command-group=nagcmd --with-httpd-conf=/usr/local/apache/conf/httpd.conf --with-gd
make all
make install
make install-init
make install-config
make install-commandmode
#Add a user for nagios ,You can change the passwd for the user you add
/usr/local/apache/bin/htpasswd -c /usr/local/nagios/etc/htpasswd nagios <<EOF
123
123
EOF
sed -i '/AddType application\/x-gzip .gz .tgz/i\AddType application/x-httpd-php .php\
AddType application/x-httpd-php-source .phps' /usr/local/apache/conf/http.conf
sed -i '/<\/IfModule>/a\Alias /nagios/cgi-bin/images/ "/usr/local/nagios/share/images/"\
<Directory "/usr/local/nagios/share/images/">\
AllowOverride None\
Options None\
Order allow,deny\
Allow from all\
AuthType Basic\
AuthName "Login User"\
AuthUserFile /usr/local/nagios/etc/htpasswd\
require user nagios\
</Directory>\
ScriptAlias /nagios/cgi-bin/ "/usr/local/nagios/sbin/"\
<Directory "/usr/local/nagios/sbin/">\
AllowOverride None\
Options None\
Order allow,deny\
Allow from all\
AuthType Basic\
AuthName "Login User"\
AuthUserFile /usr/local/nagios/etc/htpasswd\
require user nagios\
</Directory>\
Alias /nagios/ "/usr/local/nagios/share/"\
<Directory "/usr/local/nagios/share/">\
AllowOverride None\
Options None\
Order allow,deny\
Allow from all\
AuthType Basic\
AuthName "Login User"\
AuthUserFile /usr/local/nagios/etc/htpasswd\
require user nagios\
</Directory>' /usr/local/apache/conf/http.conf
sed -i 's#ServerName www.temple.com:80#ServerName 127.0.0.1#' /usr/local/apache/conf/http.conf
/usr/local/apache/bin/apachectl start
#Step 5. Install Naigos plugins
#Install plugins
cd /usr/local/src
tar xvzf nagios-plugins-1.4.12.tar.gz
cd nagios-plugins-1.4.11
./configure --prefix=/usr/local/nagios --with-nagios-user=nagios --with-nagios-group=nagios --enable-redhat-pthread-workaround --with-nagios-user=nagios --with-mysql=/usr/local/mysql
make && make install
# Install nrpe
cd /usr/local/src
tar zxvf nrpe-2.12.tar.gz
cd nrpe-2.12
./configure --enable-ssl --with-ssl-lib=/usr/local/nagios/openssl/lib --with-kerberos-inc=/usr/local/nagios/openssl/include --enable-command-args
make;make install
make install-plugin
make install-daemon
make install-daemon-config
chown nagios:nagios /usr/local/nagios/etc/nrpe.cfg
sed 's#dont_blame_nrpe=0#dont_blame_nrpe=1#' /usr/local/nagios/etc/nrpe.cfg
#Add nrpe to service
echo "nrpe 5666/tcp # NRPE" >>/etc/service
echo " " > /etc/xinetd.d/nrpe
sed -i '/ /i\service nrpe\
{\
disable = no\
flags = REUSE\
socket_type = stream\
wait = no\
user = nagios\
server = /usr/local/nagios/bin/nrpe\
server_args = -c /usr/local/nagios/etc/nrpe.cfg --inetd\
log_on_failure += USERID\
only_from = 192.168.0.200 #nagiosServer IP\
}' /etc/xinetd.d/nrpe
#Step 6. Configure Naigos
#Add the user who you've create in step 4 by htpasswd for nagios
cd /usr/local/nagios/etc
sed -i 's#default_user_name=guest#default_user_name=nagios' cgi.cfg
sed -i 's#=nagiosadmin#=nagiosadmin,nagios' cgi.cfg
#Start nagios
/usr/local/nagios/bin/nagios -d /usr/local/nagios/etc/nagios.cfg
service nagios start
#Step 7 . Set all servers start after system boot
echo "/usr/local/nagios/bin/nagios -d /usr/local/nagios/etc/nagios.cfg" >> /etc/rc.local
echo "service nagios start" >> /etc/rc.local
echo "/bin/sh /usr/local/mysql/bin/mysqld_safe --defaults-file=/usr/local/mysql/my.cnf &" >> /etc/rc.local
echo "/usr/local/apache/bin/apache/bin/apachectl start" >> /etc/rc.local

复制代码

dirtysea · 发表于 2010-12-1 11:15:29

配置 Nagios 使用 FetionRobot 短信报警

一、概述

  Nagios 是 Linux 环境下使用率最高的监控软件，它善于监控服务，容易进行二次定制。
  Feition Robot 是一款基于移动飞信服务的类 Unix 实现。通过 FetionRobot 可以很方便的在 shell 下发送免费短信。
  本文介绍介绍了如何通过 FetionRobot 使得 Nagios 可以免费发送报警短信。

  平台：CentOS 5.2 x86_64

二、Fetion Robot

  写此文时，使用的 fetion 软件版本为：fetion20080910047-lin64.tar.gz md5sum：9265d8f57556672220ee6a22c77c65af。使用的支持库 library64_linux.tar.gz md5sum 为：2e858e9184c4761bb0d1f9cea14dc49e 。

  安装 Fetion Robot

  下载 Fetion Robot 以及依赖库。

http://www.it-adv.net/fetion/download/fetion20080910047-lin64.tar.gz
http://www.it-adv.net/fetion/library64_linux.tar.gz

复制代码

解压缩 library64_linux.tar.gz 内库文件至

/usr/lib64

复制代码

。完成后记得执行一下

ldconfig

复制代码

刷新一下。

解压缩 fetion20080910047-lin64.tar.gz 得到二进制文件。直接运行 fetion 即可：

[root@cacti install]# ./fetion -h
************************ IMPORTANT STATEMENT ************************
**                                                                **
** PLEASE DON'T USE THIS SOFTWARE TO SEND JUNK SHORT MESSAGES. **
** OTHERWISE PLEASE BEAR YOUR OWN CONSEQUENCES.                **
**                                                                **
**                               Version:[20080910047-lin64]    **
*********************************************************************
This program is the console version of China Fetion!
It's free for personal user.
Fetion official website: http://www.fetion.com.cn/
This project website: http://www.it-adv.net/

AUTHOR:KelvinH MSN/EMAIL:shichangguo@msn.com

Usage:
fetion -h
      -h: help
fetion -u mobile -p pwd [-b batchfile] [-EN] [-d]
fetion -c [config_file] -id [n]  [-EN] [-d]
      -u: Fetion user account(only supports mobile phone No.)
      -p: Account password
      -b: Batch file name
      -d: Debug on and write logs to [mobile]-debug.log
      -c: config file name, refer to fetion.conf
      -i: id,  refer to fetion.conf
      -EN: English
[root@cacti install]#

  关于 fetionrobot 命令行更具体的使用，请参考此文。这里不再重复。

  可能出现的问题

  在 64 位系统下会出现 libstdc++ 包版本过低的问题。具体表现为：

[root@cacti ~]# fetion -h
fetion: /usr/lib64/libstdc++.so.6: version `GLIBCXX_3.4.9' not found (required by /usr/lib64/libACE.so.5.4.7)

复制代码

出现此问题，是由于 gcc 的版本太低，同时导致 libstdc++ 库版本过低。CentOS 5.2 使用 libstdc++-4.1.2-42.el5 版本。而通过 rpm 查询可以看到，此版本最高只提供了 GLIBCXX_3.4.8 。

如果你有足够的时间，可以自己编译高版本的 gcc。并且在运行 fetion 时指定 lib 地址。
另外你还可以找一个 Fedora Core 9 中的 libstdc++ 。它包含了所需要的库。

[root@cacti ~]# rpm -Uvh --force libstdc++-4.3.0-8.x86_64.rpm
warning: libstdc++-4.3.0-8.x86_64.rpm: Header V3 DSA signature: NOKEY, key ID 4f2a6fd2
Preparing... ########################################### [100%]
1:libstdc++ ########################################### [100%]

复制代码

三、perl 脚本准备

  此脚本从论坛上这篇文章修改而来。稍微做了一点加工。

  脚本的作用是将 nagios 中的报警信息以及要通知的**号码格式化的输入到其他文本中。这里的“格式化”是符合 fetion 脚本模式的格式化。在输出完成后，调用 fetion 去依照文本发短信。

  我修改的内容是让脚本支持一次通知多个**。

#!/usr/bin/perl
use strict;
use Fcntl qw(:flock);
open SMS, "]/tmp/sms.txt" or die "NO OK";
flock(SMS,LOCK_EX);
my @mobile = split /\s+/, $ARGV[1];
foreach (@mobile) {
print SMS "sms $_ $ARGV[0]\n";
}
print SMS "quit\n";
system "/usr/bin/fetion -u 136xxxxxx -p xxxxxxxx -b /tmp/sms.txt";
#unlink "/home/sms/sms.txt";
flock(SMS,LOCK_UN);
close SMS;

#unlink "/home/sms/sms.txt";

复制代码

推荐将此脚本放在

nagios/libexec/

复制代码

下。
记得在 /tmp 下创建 sms.txt 文件，777。

四、Nagios 配置

  nagios 配置2个点：

  1.定义短信提醒方式。调用前面写的 perl 脚本。同时将报警信息和**号码传入脚本。
  2.定义管理员接受报警方式。

直接贴配置文件了：

定义短信提醒调用脚本

   define command {
   command_name host-notify-by-sms
   command_line /usr/local/nagios/libexec/sms "IP: $HOSTADDRESS$($HOSTNAME$) is $HOSTSTATE$\n$SHORTDATETIME$" "$CONTACTPAGER$"
   }

   define command {
   command_name service-notify-by-sms
   command_line /usr/local/nagios/libexec/sms "'$HOSTADDRESS$' $HOSTALIAS$/$SERVICEDESC$ is $SERVICESTATE$" "$CONTACTPAGER$"
   }

   定义管理员接受报警方式

   define contact{
   contact_name nagiosadmin ; Short name of user
   use generic-contact ; Inherit default values from generic-contact template (defined above)
   alias Nagios Admin ; Full name of user
   service_notification_commands notify-service-by-email,service-notify-by-sms
   host_notification_commands notify-host-by-email,host-notify-by-sms
   email youremailaddress;
   pager 136xxxxxxx 136xxxxxx
   }

		自动登录	找回密码
密码			注册