nagios部署文檔實戰(zhàn).doc

實戰(zhàn)nagios配置文檔作者:chenzhj郵箱:QQ:158664987一、nagios服務(wù)器安裝：1、 nagios server軟件安裝要求：操作系統(tǒng)：RedHat AS 5 EnterpriseNagios服務(wù)器軟件安裝環(huán)境：httpd；gcc；glibc；glibc-common；gd gd-devel；phpNagios軟件包：nagios-3.2.1.tar.gz；nagios-plugins-1.4.14.tar.gz2、 nagios server環(huán)境安裝：yum y install httpd gcc glibc glibc-common gd gd-devel php3、 nagios server服務(wù)器程序安裝：創(chuàng)建nagios用戶：#useradd nagios#groupadd nagcmd#usermod -G nagcmd nagios#/usr/sbin/usermod -G nagcmd apache安裝nagios主程序軟件包：A）#tar zxvf nagios-3.2.0.tar.gz#./configure -prefix=/usr/local/nagios -with-nagios-user=nagios -with-command-group=nagcmdB）#make allC）使用make install來安裝主程序,CGI和HTML文件；D）使用make install-init在/etc/rc.d/init.d安裝啟動腳本；E）使用make install-cofig來安裝示例配置文件,安裝的路徑是/usr/local/nagios/etc；.F）使用make install-commandmode來配置目錄權(quán)限；G）使用make install-webconf安裝Nagios的WEB配置文件到Apache的conf.d目錄下；4、 創(chuàng)建一個nagiosadmin的用戶用于Nagios的WEB接口登錄：#htpasswd -c /usr/local/nagios/etc/htpasswd.users nagiosadmin5、 安裝Nagios插件：#tar xzf nagios-plugins-1.4.14.tar.gz#./configure#make;make install6、 配置htpd和nagios啟動方式：Chkconfig add httpdChkconfig add nagiosChkconfig level 3 httpd onChkconfig level 3 nagios on二、 Nagios服務(wù)器配置：1、 修改nagios.cfg主配置文件（添加修改信息）：cfg_file=/usr/local/nagios/etc/objects/commands.cfgcfg_file=/usr/local/nagios/etc/objects/contacts.cfgcfg_file=/usr/local/nagios/etc/objects/contactsgroups.cfgcfg_file=/usr/local/nagios/etc/objects/timeperiods.cfgcfg_file=/usr/local/nagios/etc/objects/templates.cfgcfg_file=/usr/local/nagios/etc/objects/hosts.cfgcfg_file=/usr/local/nagios/etc/objects/hostgroup.cfgcfg_file=/usr/local/nagios/etc/objects/servergroup.cfg把server目錄配置前面的去掉，記得手動創(chuàng)建目錄cfg_dir=/usr/local/nagios/etc/servers2、 修改CGI腳本控制文件cgi.cfg修改 /usr/local/nagios/etc/cgi.cfg是否開啟驗證，1是開啟0是關(guān)閉use_authentication=1修改默認用戶default_user_name=test多個用戶之間用逗號隔開authorized_for_system_information=nagiosadmin,test authorized_for_configuration_information=nagiosadmin,testauthorized_for_system_commands=test authorized_for_all_services=nagiosadmin,testauthorized_for_all_hosts=nagiosadmin,testauthorized_for_all_service_commands=nagiosadmin,testauthorized_for_all_host_commands=nagiosadmin,test3、 定義監(jiān)控時段，配置文件timeperiods.cfg（一般不用修改）修改/usr/local/nagios/etc/objects/timeperiods.cfg# notifications, etc. The classic 24x7 support nightmare. :-)define timeperiod timeperiod_name 24x7 alias 24 Hours A Day, 7 Days A Week sunday 00:00-24:00 monday 00:00-24:00 tuesday 00:00-24:00 wednesday 00:00-24:00 thursday 00:00-24:00 friday 00:00-24:00 saturday 00:00-24:00 # workhours timeperiod definitiondefine timeperiod timeperiod_name workhours alias Normal Work Hours monday 09:00-17:00 tuesday 09:00-17:00 wednesday 09:00-17:00 thursday 09:00-17:00 friday 09:00-17:00 4、 定義聯(lián)系人,配置文件contacts.cfgvi /usr/local/nagios/etc/objects/contacts.cfgdefine contact contact_name nagiosadminuse generic-contact service_notification_period 24x7 host_notification_period 24x7 service_notification_options w,u,c,r host_notification_options d,u,r service_notification_commands notify-service-by-sms, notify-service-by-email host_notification_commands notify-host-by-sms, notify-host-by-email alias Nagios Admin email pager 1357082xxxxdefine contact contact_name gandj use generic-contact service_notification_period 24x7 host_notification_period 24x7 service_notification_options w,u,c,r host_notification_options d,u,r service_notification_commands notify-service-by-email host_notification_commands notify-host-by-sms alias Nagios Admin email pager 1356082xxxx # service_notification_period24x7; 服務(wù)出了狀況通知的時間段# host_notification_period24x7; 主機出了狀況通知的時間段# service_notification_options w,u,c,r;當(dāng)服務(wù)出現(xiàn)w報警(warning),u未 知(unkown),c嚴(yán)重(critical),或者r從異常情況恢復(fù)正常,在這四種情況下通知聯(lián)系人# host_notification_optionsd,u,r; 當(dāng)主機出現(xiàn)d當(dāng)機(down),u返回不可達(unreachable),r從異常情況恢復(fù)正常,在這3種情況下通知聯(lián)系人#service_notification_commands notify-service-by-email;服務(wù)出問題通知采用的命令notify-service-by-email,這個命令是在commands.cfg中定義的；,作用是給聯(lián)系人發(fā)郵件.#host_notification_commandsnotify-host-by-sms ; 主機出問題時采用手機方式通知聯(lián)系人#email 聯(lián)系人的郵箱賬號；#sms 聯(lián)系人的手機號；5、 定義聯(lián)系人組，,配置文件contactsgroups.cfg修改/usr/local/nagios/etc/objects/contactsgroups.cfg# shanghai contactgroup#define contactgroup contactgroup_name shanghai-center alias Nagios Administrators members changyzh,gandj # shenzhen contactgroup#define contactgroup contactgroup_name shenzhen-center alias Nagios Administrators members lifeng, gandj 三、 采用nrpe方式進行主動監(jiān)控：1、 Nagios服務(wù)器1.1、nrpe安裝：#tar xzvf nrpe-2.12.tar.gz#./configure#make all#make install-plugin 在Nagios服務(wù)器端只要make install-plugin安裝nrpe監(jiān)控插件就可以1.2、修改配置文件 /usr/local/nagios/etc/objects/commands.cfg,增加主動監(jiān)測調(diào)用命令define command command_name check_nrpe command_line /usr/local/nagios/libexec/check_nrpe -H $HOSTADDRESS$ -c $ARG1$ 1.3、nagios定義監(jiān)控主機配置文件：#BBS#define host host_name BBS alias bbs address check_period 24x7 check_interval 10 retry_interval 1 max_check_attempts 10 check_command check-host-alive notification_period 24x7 notification_interval 120 notification_options d,u,r contact_groups Shenzhen-center #product#define host host_name product alias product address check_period 24x7 check_interval 10 retry_interval 1 max_check_attempts 10 check_command check-host-alive notification_period 24x7 notification_interval 120 notification_options d,u,r contact_groups shanghai-center #check_period 24x7 檢查的時間段24x7,來自于在timeperiods.cfg中定義的#check_interval 10 檢查間隔，每十分鐘檢查一次。#retry_interval 1 重新檢查間隔1分鐘。#max_check_attemp 10 嘗試檢查linux主機十次#check_command check-host-alive 監(jiān)控的命令check-host-alive,這個命令來自commands.cfg,用來監(jiān)控主機是否存活,#notification_period 24x7 提醒的周期, 24x7,來自于我們之前在timeperiods.cfg中定義的#notification_interval 120 提醒的間隔,每隔120秒提醒一次#notification_options d,u,r 指定什么情況下提醒,具體含義見之前contacts.cfg部 分的介紹#contact_groups shanghai-center 聯(lián)系人組,來自于在contactgroups.cfg中定義的1.4、Nagios定義監(jiān)控主機組：修改cfg_file=/usr/local/nagios/etc/objects/hostgroup.cfg#shanghai zone#define hostgroup hostgroup_name shanghai cener alias shanghai center Servers members BBS,product # members BBS,product 主機名稱在hosts.cfg中定義的1.5、Nagios定義監(jiān)控的服務(wù)：在/usr/local/nagios/etc/文件目錄下面添加一個目錄：servers在service目錄下面創(chuàng)建一個文件以主機的名稱或ip命名文件名，以方便以后針對特定的主機進行修改。vi /usr/local/nagios/etc/servers/shanghaicenter.cfgdefine service host_name shanghaicenter service_description CHECK-HTTP check_command check_nrpe!check_http max_check_attempts 5 normal_check_interval 10 retry_check_interval 2 check_period 24x7 notification_interval 300 notification_period 24x7 notification_options w,u,c,r contact_groups admins define service host_name shanghaicenter service_description CHECK-MYSQL check_command check_nrpe!check_mysql max_check_attempts 5 normal_check_interval 10 retry_check_interval 2 check_period 24x7 notification_interval 300 notification_period 24x7 notification_options w,u,c,r contact_groups admins #host_name shanghaicenter 主機名稱，在hosts.cfg文件中定義#service_description CHECK-MYSQL 對監(jiān)控的服務(wù)進行描述#check_command check_nrpe!check_mysql 監(jiān)控調(diào)用的命令check_nrpe在文件為commands.cfg中定義；檢查mysql命令定義在被監(jiān)控機器的nrpe.cfg文件定義。#max_check_attempts 5 嘗試檢查服務(wù)5次#normal_check_interval 10 正常檢查間隔10分鐘。#retry_check_interval 2 重試間隔2分鐘。#check_period 24x7 檢查為24小時乘以7。#notification_interval 300 通知間隔300分鐘。#notification_period 24x7 通知時間為24小時乘以7。#notification_options w,u,c,r 通知類型。#contact_groups admins 聯(lián)系組。2、 Nrpe被監(jiān)控主機安裝配置：2.1、nagios-plugins插件安裝：#tar xzf nagios-plugins-1.4.14.tar.gz#./configure#make;make install2.2、nrpe安裝：#tar xzvf nrpe-2.12.tar.gz#./configure#make all2.3、修改文件/etc/services:nrpe 5666/tcp # NRPE2.4、添加nrpe到/etc/xinetd.dCp cp sample-config/nrpe.xinetd /etc/xinetd.d/nrpe編輯/etc/xinetd.d/nrpe# default: on# description: NRPE (Nagios Remote Plugin Executor)service nrpe flags = REUSE socket_type = stream port = 5666 wait = no user = nagios group = nagios server = /usr/local/nagios/bin/nrpe server_args = -c /usr/local/nagios/etc/nrpe.cfg -inetd log_on_failure += USERID disable = no only_from = 57.60.xxx.xx #nagios服務(wù)器ip2.5、編輯nrpe配置文件nrpe.cfgCopy nrpe配置文件 cp sample-config/nrpe.cfg /usr/local/nagios/etc/修改/usr/local/nagios/etc/nrpe.cfgallowed_hosts=,58.60.xxx.xx,58.60.xxx.xx #58.60.xxx.xx是nagios服務(wù)器ipcommandcheck_zombie_procs=/usr/local/nagios/libexec/check_procs -w 5 -c 10 -s Zcommandcheck_total_procs=/usr/local/nagios/libexec/check_procs -w 150 -c 200commandcheck_http=/usr/local/nagios/libexec/check_http -w 5 -c 10 -ssl -I -vcommandcheck_mysql=/usr/local/nagios/libexec/check_mysql -u root -p xxx -d database#定義監(jiān)控的執(zhí)行命令2.6、使用xinetd啟動nrpe，檢查運行。Service xinetd startNetstat ant|grep 5666tcp 0 0 :5666 :* LISTEN四、 fetion和郵件進行報警配置1、 fetion報警配置1.1、fetion機器人安裝：參考網(wǎng)站：wget /fetion/downng/library_linux.tar.gzwget /fetion/dow . 406003-linux.tar.gzwget /fetion/downng/fetion20091117-linux.tar.gz#在安裝飛信之前需要在/usr/lib目錄下加上libACE 庫文件，以便使飛信能夠正常使用rootlocalhost src# tar zxvf library_linux.tar.gzrootlocalhost src# mv libACE* libcrypto.so.0.9.8 libssl.so.0.9.8/usr/lib#正式安裝飛信 tar zxvf fetion20090406003-linux.tar.gz mv install/* /usr/local/fetion chmod -R 755 /usr/local/fetion chown -R nagios:nagios /usr/local/fetion#移動服務(wù)器更新，需要更新軟件 tar zxvf fetion20091117-linux.tar.gz cp fx/* /usr/local/fetion vi /etc/ld.so.conf include ld.so.conf.d/*.conf ldconfig#測試fetion：Vi /etc/fetion.conf# This config file is for fetion robot tool.# Usage demo: ./fetion -config=/etc/fetion.conf -index=2# ID Mobile Password1 1355486* XXXXXX#/usr/local/fetion/fetion config=/etc/fetion.conf index=1 tomsg-gb=fetion test1.2、修改nagios命令調(diào)用文件commands.cfgVi /usr/local/nagios/etc/objects/commands.cfg#fetion2008# notify-host-by-sms command definitiondefine command command_name notify-host-by-sms command_line /usr/bin/printf %b * Nagios *nnNotification Type: $NOTIFICATIONTYPE$nHost: $HOSTNAME$nState: $HOSTSTATE$nAddress: $HOSTADDRESS$nInfo: $HOSTOUTPUT$nnDate/Time: $LONGDATETIME$n | /usr/local/fetion/fetion -config=/etc/fetion.conf -index=1 -to=$CONTACTPAGER$ -msg-gb=* $NOTIFICATIONTYPE$ Host Alert: $HOSTNAME$ is $HOSTSTATE$ * # notify-service-by-sms command definitiondefine command command_name notify-service-by-sms command_line /usr/bin/printf %b * Nagios *nnNotification Type: $NOTIFICATIONTYPE$nnService: $SERVICEDESC$nHost: $HOSTALIAS$nAddress: $HOSTADDRESS$nState: $SERVICESTATE$nnDate/Time: $LONGDATETIME$nnAdditional Info:nn$SERVICEOUTPUT$ | /usr/local/fetion/fetion -config=/etc/fetion.conf -index=1 -to=$CONTACTPAGER$ -msg-gb=* $NOTIFICATIONTYPE$ Host Alert: $HOSTNAME$ is $HOSTSTATE$ * 1.3、報警接受者配置vi /usr/local/nagios/etc/objects/contacts.cfgdefine contact contact_name nagiosadminuse generic-contact service_notification_period 24x7 host_notification_period 24x7 service_notification_options w,u,c,r host_notification_options d,u,r service_notification_commands notify-service-by-sms, notify-service-by-email host_notification_commands notify-host-by-sms, notify-host-by-email alias Nagios Admin email pager 1357082xxxx2、 郵件報警配置2.1、sendEmail安裝：tar zxvf sendEmail-v1.55.tar.gzcd sendEmail-v1.55cp sendEmail /usr/local/binchmod 0755 /usr/local/bin/sendEmailchown nagios:nagios /usr/local/bin/sendEmail#測試sendEmail發(fā)郵件：/usr/local/bin/sendEmail t s u “from nagios” xu chenzhj xp * m “nagios test”#解釋:-f 表示發(fā)送者的郵箱-t 表示接收者的郵箱-s 表示SMTP服務(wù)器的域名或者ip-u 表示郵件的主題-xu 表示SMTP驗證的用戶名-xp 表示SMTP驗證的密碼(注意,這個密碼貌似有限制,例如我用d!5neyland就不能被正確識別)-m 表示郵件的內(nèi)容2.2、修改nagios命令調(diào)用文件commands.cfg# notify-host-by-email command definitiondefine command command_name notify-host-by-email command_line /usr/bin/printf %b * Nagios *nnNotificati