监测基础知识¶

object主机"my-server1" {address = "10.0.0.1" check_command = "hostalive"} object服务"ping4" {host_name = "my-server1" check_command = "ping4"} object服务"http" {host_name = "my-server1" check_command = "http"}

object主机"router" {check_command = "hostalive" address = "10.0.0.1"}

object主机"dummy- Host " {check_command = "dummy" vars. object//Up vars. dummy_state = 0假_text = "Everything OK." }

template服务"generic-service" {max_check_attempts = 3 check_interval = 5m retry_interval = 1m enable_perfdata = true} apply服务"ping4" {import "generic-service" check_command = "ping4" assign where host. template " general - Service " {max_check_attempts = 3 check_interval = 5m retry_interval = 1m enable_perfdata = true}{import " general - Service " check_command = "ping6" assign where host. address}应用服务"ping6" {import " general - Service " check_command = "ping6"address6}

模板主机"web-server" {import "generic-host" vars = {webserver_type = "apache"}}

模板主机"wordpress -server" {vars += {application_type = "wordpress"}}

object主机"wp.example.com" {import "web-server" import "wp-server" address = "192.168.56.200"}

{import "web-server" import "wp-server" vars. object主机"wp1.example.com" {import "web-server" import "wp-server"webserver_type= "nginx" //overrides attribute from base template address = "192.168.56.201" }

object主机"localhost" {check_command = "ssh" vars. exeSsh_port = 2222}

Vars = {ssh_port = 2222}

var(“ssh_port”)= 2222

var。磁盘["disk /"] = { disk_partitions = "/" }

Vars = {disks = {"disk /" = {disk_partitions = "/"}}}

var。不ification["mail"] = { groups = [ "icingaadmins" ] }

var。不ification = { mail = { groups = [ "icingaadmins" ] } }

object CheckCommand "random-value" {command = [PluginDir + "/check_dummy"， "0"， "$text$"] vars. object CheckCommand "random-value" {command = [PluginDir + "/check_dummy"， "0"， "$text$"]text = {{Math.random() * 100}}}

var。文本={{主机。check_interval｝｝

var。text = {{if(宏("$address$") == "127.0.0.1") {log("正在对localhost进行检查!")}返回"Some text"}}

arguments = {"-C" = {{var command =宏("$by_ssh_command$") var arguments =宏("$by_ssh_arguments$") if (typeof(command) == String && !arguments) {return command} var escaped_args = [] for (resolve_arguments(command, arguments)中的arg) {escaped_args.add(escape_shell_arg(arg))} return escaped_args. if (typeof(command) == String && !Join(" ")}}…｝

object CheckCommand "my-ping" {command = [PluginDir + "/check_ping"] arguments = {"-H" = "$ping_address$" "-w" = "$ping_wrta$，$ping_wpl$%" "-c" = "$ping_crta$，$ping_cpl$%" "-p" = "$ping_packets$"} //从主机属性或自定义变量解析var。平_address = "$address$" // Default values vars.ping_wrta = 100 vars.ping_wpl = 5 vars.ping_crta = 250 vars.ping_cpl = 10 vars.ping_packets = 5 } object Host "router" { check_command = "my-ping" address = "10.0.0.1" }

object服务"ping" {host_name = "localhost" check_command = "my-ping" vars. Service "ping" {host_name = "localhost" check_command = "my-ping"ping_packets = 10 //覆盖命令中的默认值5}

service.vars.ping_wrta美元

object Service "ping4" {check_command = "ping4" host_name = "icinga2-agent1. {check_command = "ping4"localdomain "}

应用服务"ping4" {check_command = "ping4"分配给主机。地址}

var。application_type = host.vars.application_type

var。不ification["mail"] = { groups = [ "icingaadmins" ] }

应用通知“mail- icingadmin”到主机{[…]user_groups = host.vars.notification.mail.groups

var。磁盘["disk /"] = { disk_partitions = "/" }

application for (disk => config in host.vars.disks){[…]var。磁盘_partitions = config.disk_partitions }

分配在host.vars.attribute_does_not_exist

指定host.groups中“hostgroup-dev”的位置

host.vars分配。application_type== "database" assign where service.vars.sms_notify == true

分配在host.vars.app_dict.contains(“应用程序”)

指定where match("webserver*"， host.name)

赋值where regex("^webserver-[\\d+]"， host.name)

object主机组"MySQL - Server" {display_name = "MySQL Server" assign where match("* MySQL *"， host.name) && match("db-*"， host.vars.prod_mysql_db) ignore where host.vars. Server" {display_name = "MySQL Server"Test_server == true忽略where match("*internal"， host.name)}

template Notification " cuast -xy- Notification " {users = ["noc-xy"， "mgmt-xy"] command = "mail-service-notification"}将Notification "notify- cuast -xy-mysql"应用到Service {import " cuast -xy- Notification " assign where match("*has gold support 24x7*"， Service .notes) && (host.vars. txt)客户端== " Customer -xy" || host.vars. "always_notify== true) ignore where match("*internal", host.name) || (service.vars.priority < 2 && host.vars.is_clustered == true) }

apply Service "ssh" {import " general - Service " check_command = "ssh" assign where host. "address && host.vars.os == "Linux"}

{import "mail-service-notification" user_groups = ["noc"] assign where host.vars.notification.mail}

apply Notification " Host -mail-noc" to Host {import "mail-host-notification" //将继承自"mail-host-notification"模板的间隔替换为新的通知间隔，该间隔由主机自定义变量设置if (Host .vars.notification_interval) {interval = Host .vars。if (host.vars.notification_period) {period = host.vars. Notification_interval} //与通知周期相同。通知_period } // Send SMS instead of email if the host's custom variable `notification_type` is set to `sms` if (host.vars.notification_type == "sms") { command = "sms-host-notification" } else { command = "mail-host-notification" } user_groups = [ "noc" ] assign where host.address }

{import " Host -linux-prod" display_name = "host1" address = "192.168.1.50" vars. object主机"host1" {import " Host -linux-prod" display_name = "host1" address = "192.168.1.50"Notification_interval = 1h vars。通知_period = "24x7" vars.notification_type = "sms" }

object主机"router-v6" {check_command = "hostalive" address6 = "2001:db8:1234::42"Oids ["if01"] = "1.1.1.1.1" vars. oid ["if01"] = "1.1.1.1.1"Oids ["temp"] = "1.1.1.1.2" vars. oid ["temp"] = "1.1.1.1.2"oid ["bgp"] = "1.1.1.1.5"}

application Service for (identifier => oid in host.vars.oids) {check_command = "snmp" display_name = identifier vars.oid。Snmp_oid = oid ignore where identifier == "bgp" //不为bgp检查生成服务}

忽略在正则表达式(“^ \ d。\ d。\ \ d d。5美元”,oid)

const IftrafficSnmp欧宝app官网网址Community = "public"

object主机"cisco-catalyst-6509-34" {import "generic-host" display_name = "Catalyst 6509 #34 VIE21" address = "127.0.1.4" /* "GigabitEthernet0/2"为接口名，*在服务和关键的名字申请以后* / vars.interfaces GigabitEthernet0/2[” "] = { /* 定义具有相同名称的所有自定义变量所需的命令参数/参数*服务应用(看着CheckCommand定义)* / iftraffic_units =“g”iftraffic_community = IftrafficSnmpCommunity iftraffic_bandwidth = 1 vlan =“内部”qos =“禁用”}vars.interfaces(“GigabitEthernet0/4”)= {iftraffic_un欧宝app官网网址its = / / iftraffic_community = IftrafficSnmpCommunity“g”iftraffic_bandwidth = 1 vlan = "remote" qos = "enabled"} vars.interfaces["MgmtInterface1"] = {iftraffic_co欧宝app官网网址mmunity = IftrafficSnmpCommunity vlan = "mgmt" interface_address = "127.99.0.100" #特殊管理ip}}

/*循环遍历host. vres .interfaces字典* for (key => value in dict)表示' interface_name '作为键*，' interface_config '作为值。使用indexer(' . ')字符访问配置属性*。*/ apply Service "if-" for (interface_name => interface_config in host.vars.interfaces) {

import " general -service" check_command = "iftraffic" display_name = "IF-" + interface_name .

/*使用键作为命令参数(不重复host.vars.interfaces中的值)iftraffic_interface = interface_name

interface_config = {iftraffic_units = "g" iftraffic_c欧宝app官网网址ommunity = IftrafficSnmpCommunity iftraffic_bandwidth = 1 vlan = "internal" qos = "disabled"}

将自定义变量映射为命令参数*/ vars。iftraffic_units = interface_config。iftraffic_units var。iftraffic_community = interface_config.iftraffic_community

/*如果host.vars.interfaces *中的名称与check命令*定义所要求的命令参数_exact_相同，则可以以更短的方式实现上述功能。*/ vars += interface_config

/*设置单元和带宽的默认值*/ if (interface_config. config)Iftraffic_units == "") {vars. Iftraffic_units == "iftraffic_units = "m" } if (interface_config.iftraffic_bandwidth == "") { vars.iftraffic_bandwidth = 1 } if (interface_config.vlan == "") { vars.vlan = "not set" } if (interface_config.qos == "") { vars.qos = "not set" }

*/ if (len(interface_config.iftraffic_community) == 0 || len(vars.iftraffic_community) == 0) {vars.iftraffic_community == 0欧宝app官网网址iftraffic_欧宝app官网网址community = IftrafficSnmpCommunity}

/*在填充' vars '字典后计算一些额外的对象属性*/ notes = "接口检查" + interface_name + "(单元:'" + interface_config。iftraffic_units + "') in VLAN '" + vars。vlan + "' with ' QoS '" + vars。Qos + "'" notes_url = "https://foreman.company.com/hosts/" + host.name action_url = "https://snmp.checker.company.com/" + host.name + "/if-" + interface_name}

# icinga2 daemon -C # icinga2对象列表——type Service——name *catalyst* object 'cisco-catalyst-6509-34!if-GigabitEthernet0/2'，类型为'Service': ......* var % =修改/ etc / icinga2 / conf.d iftraffic.conf”,行59:3-59:26 * iftraffic_bandwidth = 1 * iftraffic_community =“公共欧宝app官网网址”% =修改/ etc / icinga2 / conf.d iftraffic.conf”,行53:3-53:65 * iftraffic_interface = % =“GigabitEthernet0/2”修改“/ etc / icinga2 / conf.d / iftraffic.conf”,行49:3-49:43 * iftraffic_units =“g”% =修改/ etc / icinga2 / conf.d iftraffic.conf”,行52:3-52:57 * qos =“禁用”* vlan =“内部”对象的思科-催化剂- 6509 - 34 !if-GigabitEthernet0/4' of type 'Service':…* var % =修改/ etc / icinga2 / conf.d iftraffic.conf”,行59:3-59:26 * iftraffic_bandwidth = 1 * iftraffic_community =“公共欧宝app官网网址”% =修改/ etc / icinga2 / conf.d iftraffic.conf”,行53:3-53:65 % =修改/ etc / icinga2 / conf.d iftraffic.conf”,行79:5-79:53 * iftraffic_interface = % =“GigabitEthernet0/4”修改“/ etc / icinga2 / conf.d / iftraffic.conf”,行49:3-49:43 * iftraffic_units =“g”% =修改/ etc / icinga2 / conf.d iftraffic.conf”,第52:3-52:57 * qos = "enabled" * vlan = "remote" Object 'cisco-catalyst-6509-34!if-MgmtInterface1' of type 'Service':…* var % =修改/ etc / icinga2 / conf.d iftraffic.conf”,行59:3-59:26 * iftraffic_bandwidth = 1% =修改/ etc / icinga2 / conf.d iftraffic.conf”,行66:5-66:32 * iftraffic_community =“公共”% =修改/ etc / 欧宝app官网网址icinga2 / conf.d iftraffic.conf”,行53:3-53:65 * iftraffic_interface = % =“MgmtInterface1”修改“/ etc / icinga2 / conf.d / iftraffic.conf”,行49:3-49:43 * iftraffic_units =“m”% =修改/ etc / icinga2 / conf.d iftraffic.conf”,第52:3-52:57 % = modified in '/etc/icinga2/conf.d/iftraffic.conf'，第63:5-63:30 * interface_address = "127.99.0.100" * qos = "not set" % = " modified in '/etc/icinga2/conf.d/iftraffic.conf'，第72:5-72:24 * vlan = "mgmt"

object主机" open星云- Host " {import "generic-host" address = "10.1.1.2" vars. net举办["cust1"] = { http_uri = "/shop" customer_name = "Customer 1" customer_id = "7568" support_contract = "gold" } vars.hosting["cust2"] = { http_uri = "/" customer_name = "Customer 2" customer_id = "7569" support_contract = "silver" } }

apply Service for (customer => config in host.vars. hosts) {import " general - Service " check_command = "ping4" vars. vars. conf {Qos = "disabled" vars += config vars。http_uri = "/" + customer + "/" + config.http_uri display_name = "Shop Check for " + vars.customer_name + "-" + vars.customer_id notes = "Support contract: " + vars.support_contract + " for Customer " + vars.customer_name + " (" + vars.customer_id + ")." notes_url = "https://foreman.company.com/hosts/" + host.name action_url = "https://snmp.checker.company.com/" + host.name + "/" + vars.customer_id }

customer = "cust 1" config = {http_uri = "/shop" customer_name = " customer 1" customer_id = "7568" support_contract = "gold"}

customer = "cust2" config = {http_uri = "/" customer_name = " customer 2" customer_id = "7569" support_contract = "silver"}

var + =配置

customer = "cust 1" vars = {http_uri = "/shop" customer_name = " customer 1" customer_id = "7568" support_contract = "gold"}

var。http_uri = ... + config.http_uri

Vars += config Vars。http_uri =…+ vars.http_uri

object主机组"windows" {display_name = "windows Servers"}

模板主机"windows-server" {groups += ["windows"]} object主机"mssql-srv1" {import "windows-server" vars. template "windows-server" {groups += ["windows"]} objectmssql_port = 1433} object主机" mssql_srv2 "{导入"windows-server" vars. mssql_port = 1433}Mssql_port = 1433}

object用户组"Windows - MSSQL - Admins" {display_name = "Windows MSSQL Admins"}模板用户"generic-windows-mssql-users" {groups += ["Windows - MSSQL - Admins"} object用户"win-mssql-noc" {import "generic-windows-mssql-users" email = "noc@example.com"} object用户"win-mssql-ops" {import "generic-windows-mssql-users" email = "ops@example.com"}

object主机组" prodd - MSSQL " {display_name = "生产MSSQL服务器"分配到mssql_port & & host.vars。prod_mysql_dbignore where host.vars.test_server == true ignore where match("*internal", host.name) }

object用户"icingaadmin" {display_name = "Icinga 2 Admin" enable_notifications = true states = [OK, Warning, Critical] types = [Problem, Recovery] email = "icinga@localhost"}

template Notification "generic-notification" {interval = 15m command = "mail-service-notification" states = [Warning, Critical, Unknown] types = [Problem, Acknowledgement, Recovery, Custom, FlappingStart, FlappingEnd, DowntimeStart, DowntimeEnd, DowntimeRemoved] period = "24x7"}

{import "generic-notification" users = ["noc-xy"， "mgmt-xy"] assign where match("*has gold support 24x7*"， Service .notes) && (host.vars. mysql)客户端== " Customer -xy" || host.vars. "always_notify== true ignore where match("*internal", host.name) || (service.vars.priority < 2 && host.vars.is_clustered == true) }

types =[确认，恢复]

icinga2-agent1对象主机”。localdomain“{[…var。不ification["mail"] = { groups = [ "icingaadmins" ] users = [ "icingaadmin" ] } vars.notification["sms"] = { users = [ "icingaadmin" ] } }

关键/配置:主机icinga2-client3。Localdomain '没有为通知'mail-icingaadmin'指定所需的用户/user_groups配置属性。

应用通知“mail-host-notification”到主机{[…]/*未指定用户/user_groups属性的主机日志。这将在配置验证期间立即失败，并提供很大帮助。*/ if (len(host.vars.notification.mail.users) == 0 && len(host.vars.notification.mail.user_groups) == 0) {log(LogCritical， "config"，"Host '" + Host .name + "'没有为通知'" + name + "'指定所需的用户/user_groups配置属性}users = Host .vars.notification.mail.users user_groups = Host .vars.notification.mail && typeof(Host .vars.notification.mail) == Dictionary}将通知"sms-host-notification"应用到主机{[…]/*未指定用户/user_groups属性的主机日志。这将在配置验证期间立即失败，并提供很大帮助。*/ if (len(Host .vars.notification.sms.users) == 0 && len(Host .vars.notification.sms.user_groups) == 0) {log(LogCritical， "config"， "Host '" + Host .name + "'没有为notification '" + name + "'.")指定所需的用户/user_groups配置属性}users = Host .vars.notification.sms.users user_groups = Host .vars.notification.sms && typeof(Host .vars.notification.sms) ==字典}

vars.notification.mail = "是的"

应用http服务{…var。不ification["mail"] = { groups = [ "icingaadmins" ] users = [ "icingaadmin" ] } [...] }

应用通知“mail-service-notification”到服务{[…]if (service.vars.notification.mail.users) {users = service.vars.notification.mail.users} else if (host.vars.notification.mail.users) {users = host.vars.notification.mail.users} else{/*接收所有内容的默认用户。*/ users = ["icingaadmin"]} if (service.vars.notification.mail.groups) {user_groups = service.vars.notification.mail.groups) {user_groups = host.vars.notification.mail} assign where (host.vars.notification.mail && typeof(host.vars.notification.mail) == Dictionary) || (service.vars.notification.mail && typeof(service.vars.notification.mail) == Dictionary)}

object用户"Icinga -oncall-2nd- Level" {display_name = "Icinga 2nd Level" vars. "手机= "+1 555 424642"}对象用户"icinga-oncall-1st-level" { display_name = "Icinga 1st Level" vars.mobile = "+1 555 424642" }

object NotificationCommand "sms-notification" {command = [PluginDir + "/send_sms_notification"， "$mobile$"， "…"｝

应用通知“邮件”服务{导入“一般性通知”命令=“邮件通知”用户=(“icingaadmin”)分配,service.name = =“ping4”}通知“escalation-sms-2nd-level”适用于服务{进口“一般性通知”命令=“短信通知”用户=(“icinga-oncall-2nd-level”)* ={开始= 30 m结束= 1 h}分配service.name = =“ping4”}通知“escalation-sms-1st-level”适用于服务={进口“一般性通知”命令"sms-notification" users = ["icinga-oncall- first -level"] times = {begin = 1h end = 2h} assign where service.name == "ping4"}

apply Notification "mail" to Service {import "generic-notification" command = "mail- Notification " users = [" icingadmin "] interval = 5m times。Begin = 15m //延迟通知窗口分配where service.name == "ping4"}

apply Notification "notify-once" to Service {import "generic-notification" command = "mail-notification" users = [" icingadmin "] interval = 0 // disable re-notification assign where Service .name == "ping4"}

template Notification "generic-notification" {states = [OK, Warning, Critical, Unknown] types = [Problem, Acknowledgement, Recovery, Custom, FlappingStart, FlappingEnd, DowntimeStart, DowntimeEnd, DowntimeRemoved]}

icinga@icinga2 $ /usr/lib64/nagios/plugins/check_mysql——help…使用方法:check_mysql [-d database] [-H host] [-P port] [-s socket] [-u user] [-P password] [-s] [-l] [-a cert] [-k key] [-C ca-cert] [-d ca-dir] [-l cipher] [-f optfile] [-g group]

# vim /etc/icinga2/conf.d/commands.conf对象CheckCommand“my-mysql”{命令= [PluginDir + " / check_mysql "] / / constants.conf - > const PluginDir参数={“- h”=“mysql_host美元”“- u”={要求= true值=“mysql_user美元”}“p”=“mysql_password美元”“p”=“mysql_port美元”“s”=“mysql_socket美元”“——”=“mysql_cert美元”“- d”=“mysql_database美元”“- k”=“mysql_key美元”“c”=“mysql_ca_cert美元”“- d”=“mysql_ca_dir美元”“- l”=“mysql_ciphers美元”“- f”=“mysql_optfile美元”“g”=“mysql_group美元”"-S" = {set_if = "$mysql_check_slave$" description = "检查从线程是否正常运行。"} "-l" = {set_if = "$mysql_ssl$" description = "使用ssl加密"}}vars。Mysql_check_slave = false vars。Mysql_ssl = false vars。mysql_host= "$address$" }

# vim /etc/icinga2/conf.d/services.conf apply Service "mysql-icinga-db-health" {import "generic-service" check_command = "my-mysql" vars. confmysql_user = MysqlUsername vars。mysql_password= MysqlPassword vars.mysql_database = "icinga" vars.mysql_host = "192.168.33.11" assign where match("icinga2*", host.name) ignore where host.vars.no_health_check == true }

apply Service "ssh" {import " general - Service " check_command = "ssh" vars. import " general - Service " check_command = "ssh"Ssh_port = 2022 //自定义命令参数赋值where(主机。&& host.vars.os == "Linux"}

icinga2-agent1对象主机”。localdomain{…var。ssh_port = 2022 }

object主机"my-server" {import "generic-host" address = "127.0.0.1" address6 = "::1"local_disks["basic-partitions"] = {disk_partitions = [" /"， "/tmp"， "/var"， "/home"]}} apply Service for (disk => config in host.vars.local_disks) {import "generic-service" check_command = "my-disk" vars += config vars. {Disk_wfree = "10%" vars。Disk_cfree = "5%"}

参数={"——参数”= =“…”价值={描述“……”}}

/ check_systemd.py——帮助…-u UNIT，——UNIT UNIT被测试的systemd单元名称。

参数={"——unit" = {}}

<命令名称> _ <参数名称>

参数={"——unit" = {value = "$systemd_unit$"}}

var。systemd_unit = " icinga2 "

/ check_systemd.py——帮助…-u UNIT，——UNIT UNIT被测试的systemd单元名称。

arguments ={"——unit" = {value = "$systemd_unit$" description = "被测试的systemd单元的名称。"}}

参数={"——host" = {value = "…" description = "…" required = true}}

command = [PrefixDir + "/bin/icingacli"， "businessprocess"， "process"， "check"] arguments ={"——process" = {value = "$icingacli_businessprocess_process$" description = "要监视的业务流程" skip_key = true required = true order = -1}}

var。icingacli_businessprocess_process = " bp-shop-web "

“/ bin / icingacli”“businessprocess”“过程”“检查”“bp-shop-web”

command = [PluginDir + "/check_http"] arguments ={"——sni" = {set_if = "$http_sni$"}}

“/ usr / lib64 / nagios /插件/ check_http”“——sni”

command = [PluginContribDir + "/ check_postgres_pl "] arguments = {"-H" = {value = "$postgres_host$" set_if ={{宏("$postgres_unixsocket$") == false}} description = "hostname(s) to connect to;默认为none (Unix套接字)"｝

object主机“postgresql-cluster”{//…var。Postgres_host =“192.168.56.200”vars。Postgres_unixsocket = false}

“/ usr / lib64 / nagios /插件/ check_postgres.pl”“- h”“192.168.56.200”

参数={”——第一个“= {value = "…"描述=“…”= 5}”,第二次“= {value = "…"描述=“…”秩序= 4}”——去年”= {value = "…"描述=“…”秩序= 99}}

command = [NscpPath + "\\ NscpPath .exe"， "client"] arguments = {"-a" = {value = "$ NscpPath arguments$" description = "…" repeat_key = true}}

var。nscp_arguments = ["exclude=sppsvc"， "exclude=ShellHWDetection"]

ncsp .exe 'client' '-a' 'exclude=sppsvc' '-a' 'exclude=ShellHWDetection'

command = [NscpPath + "\\ NscpPath .exe"， "client"] arguments = {"-a" = {value = "$ NscpPath arguments$" description = "…" repeat_key = false}}

nssp .exe 'client' '-a' 'exclude=sppsvc' 'exclude=ShellHWDetection' '

参数={"——key1”= {value = "…"键=“-specialkey”}”——key2 = {value = "…"键= " -specialkey "}}

' -specialkey ' '…”“-specialkey“……”

object CheckCommand "mysql" {command = [PluginDir + "/check_mysql"] arguments = {"-H" = "$mysql_address$" "-d" = "$mysql_database$"} vars. {command = [PluginDir + "/check_mysql"Mysql_address = "$address$"变量。Mysql_database = "icinga" vars。mysql_user= "icinga_check" vars.mysql_pass = "password" env.MYSQLUSER = "$mysql_user$" env.MYSQLPASS = "$mysql_pass$" }

/usr/lib/nagios/plugins/check_mysql - h192.168.56.101 - d icinga

object CheckCommand "mysql_health_env" {import "mysql_health" // https://labs.consol.de/nagios/check_mysql_health/NAGIOS__SERVICEMYSQL_USER = "$mysql_health_env_username$"NAGIOS__SERVICEMYSQL_PASS = "$mysql_health_env_password$"}

Parent_host_name = "core-router" parent_service_name = "uplink-port"

disable_notifications = false

states = [OK, Critical, Unknown]

应用依赖项"disable-host-service-checks"到服务{disable_checks = true assign where true}

object主机" dns -router" {import "generic-host" address = "192.168.1.1"} object主机"google-dns" {import "generic-host" address = "8.8.8.8"} apply服务"ping4" {import "generic-service" check_command = "ping4" assign where Host . {import "generic-service" check_command = "ping4"地址}应用依赖"internet" to Host { parent_host_name = "dsl-router" disable_checks = true disable_notifications = true assign where host.name != "dsl-router" } apply Dependency "internet" to Service { parent_host_name = "dsl-router" parent_service_name = "ping4" disable_checks = true assign where host.name != "dsl-router" }

/*你的主机*/对象主机"master.example.com"{导入"generic-host"}

/*为你的虚拟机创建通用模板

模板主机“generic-vm-example.com”{导入“generic-vm”vars。Vm_parent = "master.example.com"}

object主机“www.example1.com”{导入“generic-vm-master.example.com”}object主机“www.example2.com”{导入“generic-vm-master.example.com”}

应用“vm-host-to-parent-master”依赖关系到主机{parent_host_name = Host .vars。Vm_parent指定主机中“generic-vm”的位置。模板}

将依赖项“vm-service-to-parent-master”应用到服务{parent_host_name = host.vars。Vm_parent指定主机中“generic-vm”的位置。模板}

apply Service "agent-health" {check_command = "cluster-zone" display_name = "cluster-health-" + host.name /*遵循代理区域名称为与主机对象名称相同的FQDN的约定。* / var。Cluster_zone = host.nameagent_endpoint}

apply Dependency "agent-health-check" to Service {parent_service_name = "agent-health" states = [OK] //如果父服务状态切换为NOT-OK则失败disable_notifications = true assign where host.vars. propertiesagent_endpoint //自动为匹配主机上的子服务分配所有代理端点检查，忽略service.name == "agent-health" //避免从子服务到父服务的自引用}

object EventCommand "send_to_businesstool" {command = ["/usr/bin/curl"， "-s"， "-X PUT"] arguments = {"-H" = {value ="$businesstool_url$" skip_key = true} "-d" ="$ businesstool_message$"}Businesstool_url = "http://localhost:8080/businesstool" vars. "Businesstool_message = "$host.name$ $service.name$ $service.name$ $service. "$ $服务状态。state_type $ $服务。check_attempt $ "}

object服务"businessprocess" {host_name = "businessprocess" check_command = "icingacli-businessprocess" vars. {Icingacli_businessprocess_process = "icinga" vars。Icingacli_businessprocess_config = "training" event_command = "send_to_businesstool"}

nc - l8080

tail - f /var/log/icinga2/debug.log|grep EventCommand

# nc -l 8080 PUT /businesstool HTTP/1.1 User-Agent: curl/7.29.0 Host: localhost:8080 Accept: */* Content-Length: 47 Content-Type: application/x-www-form-urlencoded businessprocess businessprocess CRITICAL SOFT

# visudo icinga ALL=(ALL) NOPASSWD: /usr/bin/systemctl restart httpd

[root@icinga2-master1.localdomain /]# vim /etc/icinga2/zones.d/global-templates/eventcommands.conf object EventCommand "restart_service" {command = [PluginDir + "/restart_service"] arguments = {"-s" = "$service. conf。State $" "-t" = "$service。State_type $" "-a" = "$service "。check_attempt$" "-S" = "$restart_service$"}变量。Restart_service = "$procs_command$"}

[root@icinga2-agent1.localdomain /]# vim /usr/lib64/nagios/plugins/restart_service #!/bin/bash while getopts "s:t:a: s: " opt;service estate=$OPTARG;;t) servicestatetype = $ OPTARG;;) serviceattempt = $ OPTARG;;年代)服务= $ OPTARG;;Esac done if ([-z $servicestatetype] || [-z $servicestatetype] || [-z $serviceattempt] || [-z $service]);然后返回"USAGE: $0 -s servicestatetype -z servicestatetype -a serviceattempt -s service" exit 3;else #只在关键事件第三次尝试时重新启动if ([$ serviceestate == " critical "] && [$servicestatetype == "SOFT"] && [$serviceattempt -eq 3]);然后sudo /usr/bin/systemctl restart $service fi fi [root@icinga2-agent1.localdomain /]# chmod +x /usr/lib64/nagios/plugins/restart_service . txt

[root@icinga2-master1.localdomain /]# vim /etc/icinga2/zone .d/master/icinga2-agent1.localdomain.conf object Service "Process httpd" {check_command = "procs" event_command = "restart_service" max_check_attempts = 4 host_name = "icinga2-agent1. properties "Localdomain " command_endpoint = "icinga2-agent1.使用实例localdomain”增值。风怒_command = "httpd" vars.procs_warning = "1:10" vars.procs_critical = "1:" }

[root@icinga2-agent1.localdomain /]# systemctl stop HTTPD

[root@icinga2-agent1.localdomain /]# tail -f /var/log/icinga2/debug.log | grep restart_service .log

[root@icinga2-master1.localdomain /]# vim /etc/ icinga1 /zone .d/global-templates/eventcommands.conf对象EventCommand "restart_service- Windows " {command = ["C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\powershell.exe"， PluginDir + "/restart_service. Windows " {ps1"]参数= {"-ServiceState" = "$service. ps1"]state$" "-ServiceStateType" = "$service. "state_type$" "-ServiceAttempt" = "$service. "check_attempt$" "-Service" = "$restart_service$";exit" = {order = 99 value = "$$LASTEXITCODE"}}变量。Restart_service = "$service_win_service "}

param([string]$Service = "， [string]$ServiceStateType = "， [string]$ ServiceAttempt = ") if (!$Service -Or !$ServiceState -Or !$ServiceStateType -Or !$ServiceAttempt) {$scriptName = GCI $MyInvocation。Select -Expand Name;写主机"USAGE: $scriptName -ServiceState servicestatetype -ServiceStateType -ServiceAttempt serviceattempt -Service service"退出3;} #如果($ServiceState -eq " critical " -And $ServiceStateType -eq "SOFT" -And $ServiceAttempt -eq 3) {restart -Service $Service;}退出0;

[root@icinga2-master1.localdomain /]# vim /etc/icinga2/zone .d/master/icinga2-agent2.localdomain.conf object Service "Service httpd" {check_command = "Service -windows" event_command = "restart_service-windows" max_check_attempts = 4 host_name = "icinga2-agent2. properties "Localdomain " command_endpoint = "icinga2-agent2。localdomain”增值。服务_win_service = "httpd" }

C:> net stop httpd

# ls /home/icinga/.ssh/authorized_keys # visudo icinga ALL=(ALL) NOPASSWD: /etc/init.d/apache2 restart

(root@icinga2-master1.localdomain /) # vim /etc/icinga2/zones.d/master/local_eventcommands.conf / *事件命令通过ssh * /对象EventCommand“event_by_ssh”{命令= [PluginDir + " / check_by_ssh "]参数={“- h”=“event_by_ssh_address美元”“p”=“event_by_ssh_port美元”“c”=“event_by_ssh_command美元”“- l”=“event_by_ssh_logname美元”“我”=“event_by_ssh_identity美元”“q”= {set_if =“event_by_ssh_quiet美元”}“- w”=“event_by_ssh_warn美元”“c”=“- t”=“event_by_ssh_crit美元”“event_by_ssh_timeout美元”}var。event_by_ssh_address = "$address$" vars.event_by_ssh_quiet = false }

object EventCommand "event_by_ssh_restart_service" {import "event_by_ssh" //只在状态> 0 (not-ok)时重新启动守护进程//要求icinga用户vars拥有sudo权限。Event_by_ssh_command = "test $service. "state_id $ gt 0& &sudo systemctl restart $event_by_ssh_service$" }

apply Service "http" {import " general - Service " check_command = "http" event_command = "event_by_ssh_restart_service" vars. apply Service "http" {import " general - Service " check_command = "http" event_command = "event_by_ssh_restart_service"event_by_ssh_service = " host.vars美元。/ / var httpd_name美元”。event_by_ssh_logname = "icinga" //vars.event_by_ssh_identity = "/home/icinga/.ssh/id_rsa.pub" assign where host.vars.httpd_name }

object主机"remote-http-host" {import "generic-host" address = "192.168.1.100" vars. confHttpd_name = "apache2"}

[root@icinga2-agent1.localdomain /]# systemctl stop HTTPD

[root@icinga2-agent1.localdomain /]# tail -f /var/log/icinga2/debug.log | grep by_ssh .log