nagios监控部署 | 易学教程

nagios监控部署。

在部署之前把依赖包安装了。

[root@tiandong63 ~]# yum install -y gcc glibc glibc-common php gd gd-devel libpng libmng libjpeg zlib

[root@tiandong63 ~]# yum install -y httpd ; service httpd restart

[root@tiandong63 ~]# useradd nagios
[root@tiandong63 ~]# groupadd nagcmd
[root@tiandong63 ~]# usermod -G nagcmd nagios
[root@tiandong63 ~]# usermod -G nagcmd apache

核心包的安装：

[root@tiandong63 ~]#tar xf nagios-3.5.1.tar.gz -C /usr/local/src/

[root@tiandong63 ~]#cd /usr/local/src/nagios

[root@tiandong63 nagios]# ./configure --with-command-group=nagcmd #指定nagios运行用户组

[root@tiandong63 nagios]# make all

[root@tiandong63 nagios]# make install && make install-init && make install-commandmode && make install-config && make install-webconf

//若是单步执行，每次执行一部，都会提示你下一步需要干什么，非常easy

//make install安装生成/usr/local/nagios/，其中/usr/local/nagios/share即nagiosWEB访问界面的站点目录

//make install-init 安装生成/etc/rc.d/init.d/nagios 启动脚本

//make install-config 安装生成/usr/local/nagios/etc下的nagios相关配置文件

//make install-commandmode 设定相应nagios工作目录的权限

//make install-webconf 安装Nagios的WEB配置文件到Apache的conf.d目录下

[root@tiandong63 nagios]# ll /usr/local/nagios/ #生成安装目录

total 24

drwxrwxr-x 2 nagios nagios 4096 Mar 19 23:06 bin

drwxrwxr-x 3 nagios nagios 4096 Mar 19 23:06 etc

drwxrwxr-x 2 nagios nagios 4096 Mar 19 23:06 libexec 脚本文件

drwxrwxr-x 2 nagios nagios 4096 Mar 19 23:06 sbin

drwxrwxr-x 10 nagios nagios 4096 Mar 19 23:06 share 浏览器访问的页面文件

drwxrwxr-x 5 nagios nagios 4096 Mar 19 23:06 var

[root@tiandong63 ~]# ll /usr/local/nagios/libexec/ 此时这个文件夹下面是空的

nagios主目录

[root@XueGod63 Nagios]# ll /usr/local/nagios/

bin #Nagios执行程序所在目录

etc #nagios配置文件所在目录，初始安装只有几个*.cfg文件

libexec #监控所用命令，需要安装了nagios-plugins插件了才会有，检测命令，不装是空的

sbin #Nagios的Cgi文件所在目录，外部命令所需要的文件存放目录

share #Nagios前端页面

var #日志文件，pid文件等

nagios的配置文件：

[root@tiandong63 nagios]# vim /usr/local/nagios/etc/nagios.cfg

log_file=/var/log/nagios/nagios.log #日志位置

cfg_file=/etc/nagios/objects/commands.cfg #这个文件定义了很多命令

cfg_file=/etc/nagios/objects/contacts.cfg #定义联系人，怎么联系

cfg_file=/etc/nagios/objects/timeperiods.cfg #定义了时间段

cfg_file=/etc/nagios/objects/templates.cfg #模板（联系人，主机，时间）

cfg_file=/etc/nagios/objects/localhost.cfg #监控本机相关配置文件

#cfg_file=/etc/nagios/objects/windows.cfg #windows，默认不监控

#cfg_file=/etc/nagios/objects/switch.cfg #交换机路由器监控，默认不监控

#cfg_file=/etc/nagios/objects/printer.cfg #打印机监控，默认不监控

#cfg_dir=/etc/nagios/servers #定义了服务合集（多个使用）

#cfg_dir=/etc/nagios/printers #定义了打印机合集（多个使用）

#cfg_dir=/etc/nagios/switches #定义了交换合集（多个使用）

#cfg_dir=/etc/nagios/routers #定义了路由合集（多个使用）

resource_file=/etc/nagios/private/resource.cfg 资源变量配置文件，包括$USER1$变量（一个路径）等

status_update_interval=10 #状态更新时间，单位s

log_rotation_method=d #日志滚动，默认天

service_check_timeout=60 #服务检查超时时间

host_check_timeout=30 #主机检查超时时间

event_handler_timeout=30

notification_timeout=30

ocsp_timeout=5

perfdata_timeout=5

[root@tiandong63 nagios]# vim /usr/local/nagios/etc/cgi.cfg 在这里查看默认的认证用户

//此配置文件比nagios.cfg优先级高

main_config_file= /usr/local/nagios/etc/nagios.cfg #主配置文件

physical_html_path= /usr/local/nagios/share #物理路径

url_html_path=/nagios #在URL后面加上/nagios才能访问

use_authentication=1 #使用认证

use_ssl_authentication=0 #不使用ssl

authorized_for_system_information=nagiosadmin #认证用户

重启httpd服务，测试。

需要用户名和密码，现在来创建用户名和密码。

[root@tiandong63 ~]# vim /etc/httpd/conf.d/nagios.conf 查看密码为位置

[root@tiandong63 ~]# htpasswd -c /usr/local/nagios/etc/htpasswd.users nagiosadmin 生成用户名和密码
New password:
Re-type new password:
Adding password for user nagiosadmin
[root@tiandong63 ~]# cat /usr/local/nagios/etc/htpasswd.users
nagiosadmin:MwGeiyh1pyQuY

重启服务再次访问

此时点击其中的东西是报错的，nagios服务没有启动

[root@tiandong63 ~]# /usr/local/nagios/bin/nagios -d /usr/local/nagios/etc/nagios.cfg

指定配置文件，以守护进程方式启动此时就可以了（默认是对本地主机进行监控的）

检查配置文件：

[root@tiandong63 ~]# /usr/local/nagios/bin/nagios -v /usr/local/nagios/etc/nagios.cfg

Total Warnings: 0

Total Errors: 0 此时表示配置文件没有问题

安装插件

[root@tiandong63 ~]# tar -xf nagios-plugins-2.1.1.tar.gz -C /usr/local/src/

[root@tiandong63 nagios-plugins-2.1.1]# ./configure --with-nagios-user=nagios --with-nagios-group=nagcmd

[root@tiandong63 nagios-plugins-2.1.1]# make && make install

此时来看/usr/local/nagios/libexec/ 之前的时候下面是空的，此时下面没有check-mysql

[root@tiandong63 ~]# yum install mysql mysql-devel -y 安装了MySQL的包，在重新编译主要是devel这个包

[root@tiandong63 nagios-plugins-2.1.1]# ./configure --with-nagios-user=nagios --with-nagios-group=nagcmd

[root@tiandong63 nagios-plugins-2.1.1]# make && make install

重启httpd服务和nagios服务

监控本地nfs服务：

[root@tiandong63 ~]# cd /usr/local/nagios/etc/objects/
[root@tiandong63 objects]# ls
commands.cfg localhost.cfg switch.cfg timeperiods.cfg
contacts.cfg printer.cfg templates.cfg windows.cfg
[root@tiandong63 objects]# cp localhost.cfg localhost.cfg.bak 备份本地的配置文件

安装一下nfs

[root@tiandong63 ~]# yum install -y nfs*

[root@tiandong63 ~]# /etc/init.d/nfs restart （先开启rpc服务）

[root@tiandong63 ~]# vim /etc/exports 配置共享的目录

/tmp *(rw)

[root@tiandong63 ~]# /etc/init.d/nfs restart

[root@tiandong63 ~]# showmount -e 192.168.1.63

Export list for 192.168.1.63:

/tmp *

重启web服务和nagios服务

[root@tiandong63 ~]# service httpd restart && service nagios restart

此时监控里面就有nfs了。

监控远端MySQL：

[root@tiandong64 ~]# yum install mysql-server mysql -y

[root@tiandong64 ~]# mysql -uroot -p123456

mysql> create database nagiosdb;
Query OK, 1 row affected (0.00 sec)

mysql> grant select on nagiosdb.* to nagiosdb@192.168.1.63;
Query OK, 0 rows affected (0.00 sec)

[root@tiandong63 ~]# vim /usr/local/nagios/etc/nagios.cfg

34 cfg_file=/usr/local/nagios/etc/objects/hosts.cfg

35 cfg_file=/usr/local/nagios/etc/objects/service.cfg

[root@tiandong63 objects]# vim /usr/local/nagios/etc/objects/hosts.cfg

define host {

use linux-server

host_name xuegod64

alias mysql-server

address 192.168.1.64

}

[root@tiandong63 objects]# vim /usr/local/nagios/etc/objects/service.cfg

define service{

use local-service

host_name xuegod64

service_description mysqlser

check_command check_mysql

}

[root@tiandong63 objects]# vim /usr/local/nagios/etc/objects/commands.cfg

212 #'check mysql'

213 define command{

214 command_name check_mysql

215 command_line $USER1$/check_mysql -H $HOSTADDRESS$ -u nagiosdb -d nagiosdb

216 }

[root@tiandong63 objects]# /usr/local/nagios/libexec/check_mysql -H 192.168.1.64 -u nagiosdb -d nagiosdb #手动探测监控的MySQL

Uptime: 1067 Threads: 1 Questions: 31 Slow queries: 0 Opens: 16 Flush tables: 1 Open tables: 9 Queries per second avg: 0.29|Connections=15c;;; Open_files=18;;; Open_tables=9;;; Qcache_free_memory=0;;; Qcache_hits=0c;;; Qcache_inserts=0c;;; Qcache_lowmem_prunes=0c;;; Qcache_not_cached=0c;;; Qcache_queries_in_cache=0;;; Queries=31c;;; Questions=31c;;; Table_locks_waited=0c;;; Threads_connected=1;;; Threads_running=1;;; Uptime=1067c;;;

[root@tiandong63 objects]# service nagios restart 重启服务
Running configuration check...done.
Stopping nagios: done.
Starting nagios: done.

此时去测试：（多了远端的监控）

关闭远程的MySQL服务时：

[root@tiandong64 ~]# /etc/init.d/mysqld stop
Stopping mysqld: [ OK ]

在去查看：

监控远端web服务：

[root@tiandong64 ~]# yum install httpd -y

[root@tiandong64 ~]# /etc/init.d/httpd start
Starting httpd: httpd: Could not reliably determine the server's fully qualified domain name, using 192.168.1.64 for ServerName
[ OK ]

每监控一台主机都必须写一个hosts.cfg文件

[root@tiandong63 objects]# vim /usr/local/nagios/etc/objects/hosts.cfg

define host {

use linux-server

host_name xuegod64

alias mysql-server

address 192.168.1.64

}

由于监控的是同一台主机的服务，所以主机不用再定义了

[root@tiandong63 objects]# vim /usr/local/nagios/etc/objects/service.cfg

define service{

use local-service

host_name xuegod64

service_description mysqlser

check_command check_mysql

}

define service{

use local-service

host_name xuegod64

service_description apache

check_command check_apache

}

[root@tiandong63 objects]# vim /usr/local/nagios/etc/objects/commands.cfg

218 define command{

219 command_name check_apache

220 command_line $USER1$/check_tcp -H $HOSTADDRESS$ -p 80

221 }

手工探测是否可以探测到：

[root@tiandong63 objects]# /usr/local/nagios/libexec/check_tcp -H 192.168.1.64 -p 80
TCP OK - 0.002 second response time on 192.168.1.64 port 80|time=0.001831s;;;0.000000;10.000000

[root@tiandong63 objects]# service nagios restart 重启服务
Running configuration check...done.
Stopping nagios: done.
Starting nagios: done.

nagios监控外部主机私有信息

解决依赖：

[root@tiandong63 ~]# yum install -y openssl openssl-devel

[root@tiandong64 ~]# yum install -y openssl openssl-devel

[root@tiandong63 ~]# tar xf nrpe-2.15.tar.gz -C /usr/local/src/

[root@tiandong63 nrpe-2.15]# ./configure && make && make install

[root@tiandong63 nrpe-2.15]# make install-plugin && make install-daemon 前者安装插件，后者以守护进程来运行

[root@tiandong63 nrpe-2.15]# ll /usr/local/nagios/libexec/check_nrpe 主要是为了查看是否生成如下的插件
-rwxrwxr-x 1 nagios nagios 76785 Sep 24 08:47 /usr/local/nagios/libexec/check_nrpe 这个命令需要安装nrpe之后才有

被监控端配置：

[root@tiandong64 ~]# yum install -y openssl openssl-devel

[root@tiandong64 ~]# useradd -s /sbin/nologin nagios
[root@tiandong64 ~]# groupadd nagcmd
[root@tiandong64 ~]# usermod -G nagcmd nagios

[root@tiandong64 ~]# tar -xf nrpe-2.15.tar.gz -C /usr/local/src/

[root@tiandong64 ~]# tar -xf nagios-plugins-2.1.1.tar.gz -C /usr/local/src/

[root@tiandong64 nagios-plugins-2.1.1]# ./configure && make && make install

[root@tiandong64 nrpe-2.15]# ./configure && make && make install

[root@tiandong64 nrpe-2.15]# make install-daemon-config
/usr/bin/install -c -m 775 -o nagios -g nagios -d /usr/local/nagios/etc
/usr/bin/install -c -m 644 -o nagios -g nagios sample-config/nrpe.cfg /usr/local/nagios/etc
[root@tiandong64 nrpe-2.15]#

[root@tiandong64 nrpe-2.15]# make install-xinetd
/usr/bin/install -c -m 644 sample-config/nrpe.xinetd /etc/xinetd.d/nrpe
[root@tiandong64 nrpe-2.15]#

[root@tiandong64 nrpe-2.15]# vim /etc/xinetd.d/nrpe

[root@tiandong64 nrpe-2.15]# echo "nrpe 5666/tcp # NRPE" >> /etc/services 端口注册

nrpe 5666/tcp # NRPE

#/etc/services文件的作用：

#作用1：xinet.d来启动服务时他就会在/etc/services找相应服务对应的端口来启动服务。找不到对应端口，将不启动服务。

#作用2: 显示对应端口对应的协议名。

#例如 iptables -L 不加-n参数，查看时，把 80转 -> www http

#作用3：查看常用端口

[root@tiandong64 nrpe-2.15]# yum install -y xinetd

[root@tiandong64 nrpe-2.15]# /etc/init.d/xinetd start
Starting xinetd: [ OK ]
[root@tiandong64 nrpe-2.15]#

[root@tiandong64 ~]# netstat -antup|grep 5666
tcp 0 0 :::5666 :::* LISTEN 26870/xinetd

客户端nrpe命令

[root@tiandong64 ~]# vim /usr/local/nagios/etc/nrpe.cfg

command[check_sda1]=/usr/local/nagios/libexec/check_disk -w 38% -c 35% -p /dev/sda1

command[check_sda2]=/usr/local/nagios/libexec/check_disk -w 42% -c 43% -p /dev/sda2

command[check_swap]=/usr/local/nagios/libexec/check_swap -w 20% -c 10%

#-w为警告 -C为告急 sda2中，我们是指占用42%

[root@tiandong64 ~]# /etc/init.d/xinetd restart

服务端手动测试

[root@tiandong63 ~]# /usr/local/nagios/libexec/check_nrpe -H 192.168.1.64
NRPE v2.15 对端的版本

[root@tiandong63 ~]# /usr/local/nagios/libexec/check_nrpe -H 192.168.1.64 -c check_sda1
DISK OK - free space: /boot 154 MB (84% inode=99%);| /boot=28MB;119;125;0;193
主机在上面的时候就已经定义了。

定义服务：

[root@tiandong63 ~]# vim /usr/local/nagios/etc/objects/service.cfg