【移動應(yīng)用開發(fā)技術(shù)】Nagios_監(jiān)測系統(tǒng)信息

1.1設(shè)計概覽NRPE擴展插件包含兩個部分：a)check_nrpe插件，在監(jiān)測主機上運行b)NRPE守護進程，運行在遠(yuǎn)程機器上，用于監(jiān)測遠(yuǎn)程Linux/Unix機器當(dāng)Nagios需要監(jiān)測遠(yuǎn)程主機的服務(wù)資源時：a)Nagios將執(zhí)行check_nrpe插件并告訴它需要監(jiān)測的服務(wù)b)check_nrpe插件通過受保護的加密方式（可選）來連接遠(yuǎn)程主機上的NRPE守護進程c)NRPE守護進程通過運行相應(yīng)的Nagios插件來監(jiān)測本機上的服務(wù)或資源d)來自NRPE守護進程的服務(wù)監(jiān)測結(jié)果被反饋給監(jiān)測主機上的check_nrpe插件，這一監(jiān)測結(jié)果表示Nagios進程的監(jiān)測結(jié)果。注意：NRPE守護進程要求遠(yuǎn)程Linux/Unix主機必須安裝Nagios插件，否則，守護進程發(fā)揮不了任何作用。2.1前提條件為了完成以下安裝操作，你必須要：a)以root身份來訪問遠(yuǎn)程Linux/Unix主機b)以nagios用戶賬戶來訪問監(jiān)測主機2.2在遠(yuǎn)程主機上的操作：2.2.1創(chuàng)建用戶/usr/sbin/useraddnagios–s/sbin/nologinpasswdnagios2.2.2下載安裝Nagio插件wget/download/nagios-plugins-2.0.tar.gz2.2.3解壓tarxvfnagios-plugins-2.0.tar.gzcdnagios-plugins-2.02.2.4編譯安裝./configure&&make&&makeinstall2.2.5修改目錄權(quán)限chownnagios.nagios/usr/local/nagioschown-Rnagios.nagios/usr/local/nagios/libexec2.2.6安裝xinetdyuminstallxinetd2.2.7安裝NRPE服務(wù)#解壓tarxvfnrpe-2.15.tar.gzcdnrpe-編譯安裝./configuremakeall2.2.9安裝NRPE插件（測試用），服務(wù)，以及一些簡單的配置文件樣例makeinstall-pluginmakeinstall-daemonmakeinstall-daemon-config2.2.10安裝NRPE進程為xinetd的一個服務(wù)makeinstall-xinetd2.2.11編輯/etc/xinetd.d/nrpe文件，添加監(jiān)測服務(wù)器的IP地址和本機IP地址vim/etc/xinetd.d/nrpeonly_from=<nagios_ip_address>#我修改的內(nèi)容如下（逗號之間沒有空格）only_from=,11,122.2.12在/etc/services文件中添加NRPE進程的端口號vim/etc/servicesnrpe

5666/tcp

#NRPE2.2.13重啟xinetd服務(wù)servicexinetdrestart2.2.14測試本地NRPE進程netstat-at|grepnrpe

#顯示下面的結(jié)果是正確的tcp

0

0*:nrpe

*:*

LISTEN如果不正確，請確定您已經(jīng)完成了一下內(nèi)容：–Youaddedthenrpeentrytoyour/etc/servicesfile–Theonly_fromdirectiveinthe/etc/xinetd.d/nrpefilecontainsanentryfor""–xinetdisinstalledandstarted–Checkthesystemlogfilesforreferencesaboutxinetdornrpeandfixanyproblemsthatarereported2.2.15測試進程/usr/local/nagios/libexec/check_nrpe-Hlocalhost

#出現(xiàn)下面的結(jié)果不要擔(dān)心，試試下一條命令CHECK_NRPE:Error-CouldnotcompleteSSLhandshake.

#我沒有解決這個問題/usr/local/nagios/libexec/check_nrpe-H

#下面的結(jié)果是正確的，安裝成功NRPEv2.15/usr/local/nagios/libexec/check_nrpe-H12

#下面的結(jié)果是正確的，安裝成功NRPEv6修改防火墻規(guī)則（我的防火墻一直是關(guān)著的，這不是個好習(xí)慣）iptables-IRH-Firewall-1-INPUT-ptcp-mtcp–dport5666-jACCEPTserviceiptablessave2.2.17修改/usr/local/nagios/etc/nrpe.cfg，可以自定義命令vim/usr/local/nagios/etc/nrpe.cfgcommand[check_users]=/usr/local/nagios/libexec/check_users-w5-c10command[check_load]=/usr/local/nagios/libexec/check_load-w15,10,5-c30,25,20

#被我注釋掉的這個命令沒有用了，因為現(xiàn)在的磁盤不是/dev/hda1的了#command[check_hda1]=/usr/local/nagios/libexec/check_disk-w20%-c10%-p/dev/hda1

#下面這個命令是我添加的，經(jīng)測試，有效command[check_sda1]=/usr/local/nagios/libexec/check_disk-w20%-c10%-p/dev/sda1command[check_zombie_procs]=/usr/local/nagios/libexec/check_procs-w5-c10-sZcommand[check_total_procs]=/usr/local/nagios/libexec/check_procs-w150-c200

#測試我剛才自定義的命令/usr/local/nagios/libexec/check_disk-w20%-c10%-p/dev/sda1DISKOK-freespace:/boot158MB(86%inode=99%);|/boot=25MB;154;173;0;1932.2.18重啟nrpe服務(wù)/usr/local/nagios/bin/nrpe-c/usr/local/nagios/etc/nrpe.cfg–d2.3在監(jiān)測主機上操作2.3.1在已配置Nagios的主機上，需要進行以下操作：–Installthecheck_nrpeplugin–CreateaNagioscommanddefinitionforusingthecheck_nrpeplugin–CreateNagioshostandservicedefinitionsformonitoringtheremotehost2.3.2下載NRPE源碼包wget/project/nagios/nrpe-2.x/nrpe-2.15/nrpe-2.15.tar.gz2.3.3解壓tarxvfnrpe-2.15.tar.gzcdnrpe-編譯安裝./configuremakeall2.3.5安裝插件makeinstall-plugin2.3.6測試NRPE進程，IP地址為遠(yuǎn)程主機的IP/usr/local/nagios/libexec/check_nrpe-H12NRPEv修改commands.cfgvim/usr/local/nagios/etc/objects/commands.cfg

#添加以下內(nèi)容definecommand{command_name

check_nrpecommand_line

$USER1$/check_nrpe-H$HOSTADDRESS$-c$ARG1$}2.3.8創(chuàng)建host和service定義

#定義hostdefinehost{name

linux-box

;Nameofthistemplateuse

generic-host

;Inheritdefaultvaluescheck_

period24x7check_

interval5retry_

interval1max_check_

attempts10check_command

check-host-alivenotification_period

24x7notification_interval

30notification_options

d,rcontact_groups

adminsregister

0

;DONTREGISTERTHIS-ITSATEMPLATE}

#定義service

#監(jiān)測CPUdefineservice{

use

generic-service

host_name

remotehost

service_description

CPULoad

check_command

check_nrpe!check_load

}

#監(jiān)測在線用戶defineservice{

use

generic-service

host_name

remotehost

service_description

CurrentUsers

check_command

check_nrpe!check_users

}

#檢測/dev/sda1的空間defineservice{

use

generic-service

host_name

remotehost

service_description

/dev/sda1FreeSpace

check_command

check_nrpe!check_sda1

}

#監(jiān)測進程數(shù)defineservice{

use

generic-service

host_name

remotehost

service_description

TotalProcesses

check_command

check_nrpe!check_total_procs

}

#監(jiān)測僵尸進程defineservice{

use

generic-service

host_name

remotehost

service_description