Nagios安裝部署與Cacti整合文檔

?

?

?

?

系統環境：CentOS5.4

文檔版本：V2.0.1

整理：Kevin

更新時間：2011-05-31

備注：運維專用

時間

修改人

版本號

修改說明

2010.09.07

Kevin

1.0.0

建立文檔

2010.09.24

Kevin

1.0.1

添加報警設置

2011.01.07

Kevin

1.0.2

添加每日健康檢查報警機制

2011.02.16

Kevin

1.0.3

更新文檔生成pdf文檔

2011.02.22

Kevin

1.0.4

添加新的troubleshooting項

2011.03.10

Kevin

1.0.5

添加nagios飛信機器人報警

2011.05.31

Kevin

1.0.8

更新troubleshooting

#yum install httpd

#yum install gcc

#yum install glibc glibc-common

#yum install gd gd-devel

#yum install php nagios3.2.0以后的版本必須安裝php，nagios頁面訪問才正常

#/usr/sbin/useradd -m nagios 添加一個名為nagios的用戶用以專門跑nagios

#passwd nagios 設置密碼

#/usr/sbin/groupadd nagcmd 添加nagcmd用戶組，用以通過web頁面提交外部控制命令

#/usr/sbin/usermod -a -G nagcmd nagios 將nagios用戶加入nagcmd組

#/usr/sbin/usermod -a -G nagcmd apache 將apache用戶加入nagcmd組

#cd ~/downloads

#tar xzf nagios-plugins-1.4.15.tar.gz

#cd nagios-plugins-1.4.15

#./configure --with-nagios-user=nagios --with-nagios-group=nagios

#make

#make install
安裝插件，安裝后所有插件命令將被安裝到/usr/local/nagios/libexec 目錄下

#cd ~/downloads

#wget http://nagios.manubulon.com/nagios-snmp-plugins.1.1.1.tgz

#tar xzf nagios-snmp-plugins.1.1.1.tgz

#cd nagios_plugins

?

配置check_snmp_int.pl這些插件的使用時需要配置cpan，CPAN是Comprehensive Perl Archive Network的縮寫.。它是一個巨大的Perl軟件收藏庫，收集了大量有用的Perl模塊(modules)及其相關的文件。這里主要是使用Perl-Net-SNMP模塊。有兩種方式安裝：

A）通過CPAN來安裝

#perl -MCPAN -e shell

cpan> install Net::SNMP

B) 手工安裝

?

首先去官方網站www.cpan.org下載以下幾個模塊

Crypt::DES

Digest::MD5

Digest::SHA1

Digest::HMAC

Net::SNMP

?

下載后對于每個模塊依次按照下面的方式安裝

#tar zxf <module>.tar.gz <module>表示模塊名，具體請按上面提到的模塊替換

#cd <module> <module>表示模塊名，具體請按上面提到的模塊替換

#perl Makefile.pl

#make test

#make install

注意：Net::SNMP模塊必須在最后安裝。至此Net::SNMP手動安裝完畢

?

#./install.sh?
執行nagios-snmp-plugins安裝腳本,執行之后會將插件命令安裝到/usr/local/nagios/libexec下

至此nagios基本已經安裝完畢，但這時還不能馬上啟動nagios，需要以下設置。

?

#chkconfig --add nagios 將nagios添加到服務中

#chkconfig nagios on 設置服務為自啟動

#/usr/local/nagios/bin/nagios -v /usr/local/nagios/etc/nagios.cfg
檢測nagios的配置是否正確，在后面配置nagios過程中我們為了檢測配置的是否正確需要不斷執行該命令來檢查配置文件。

#service nagios start 啟動nagios

需要注意的是，Centos默認打開了selinux并且運行于強制安全模式，這將導致在打開nagios的web界面時會出現Internet Server Error的錯誤。

#getenforce 查看是否運行于強制模式，結果為1表示是

#setenforce 0 更改selinux運行于寬容模式

?

但是這個設置重啟后就會失效，如需要重啟后保持該設置需要修改/etc/sysconfig/selinux，將其中的SELINUX= enforcing更改為SELINUX= permissive并重啟系統。當然你也可以改成disable禁用selinux。

?

也可以不更改selinux的運行模式，解決辦法為：

#chcon -R -t httpd_sys_content_t /usr/local/nagios/sbin/

#chcon -R -t httpd_sys_content_t /usr/local/nagios/share/

cfg_file=/usr/local/nagios/etc/objects/commands.cfg 包含配置文件，下同

cfg_file=/usr/local/nagios/etc/objects/contacts.cfg

cfg_file=/usr/local/nagios/etc/objects/timeperiods.cfg

cfg_file=/usr/local/nagios/etc/objects/templates.cfg

cfg_file=/usr/local/nagios/etc/objects/localhost.cfg

cfg_file=/usr/local/nagios/etc/objects/switch.cfg

cfg_dir=/usr/local/nagios/etc/services 包含配置目錄，目錄下所有cfg文件將被包含；下同

cfg_dir=/usr/local/nagios/etc/hosts

cfg_dir=/usr/local/nagios/etc/commands

cfg_dir=/usr/local/nagios/etc/switches

cfg_dir=/usr/local/nagios/etc/routers

[root@localhost etc]# /usr/local/nagios/libexec/check_snmp_storage.pl -H 192.168.1.200 -C mypublic -2 -m "^Virtual Memory$" -w 70 -c 90

Virtual Memory: 21%used(531MB/2472MB) (<70%) : OK

[root@localhost etc]# cat resource.cfg |grep -v '#'| sed /^$/d 查看resource.cfg配置

$USER1$=/usr/local/nagios/libexec

$USER7$=-C mypublic -2

define command{

command_name check_snmp_storage

command_line $USER1$/check_snmp_storage.pl -H $HOSTADDRESS$ $USER7$ $ARG1$ -w $ARG2$ -c $ARG3$

}

define host{

use windows-server 定義使用的模板

host_name web83 定義主機名為web83

alias web server on 111.83 主機別名

address 192.168.1.200 主機IP地址

hostgroups linuxtoneweb 將該主機歸到linuxtoneweb這個組，如果要歸到多個組里，用逗號分隔組名

}

define hostgroup{

hostgroup_name linuxtoneweb

alias linuxtone web servers

}

define hostgroup{

hostgroup_name linuxtoneweb

alias linuxtone web servers
members web83 設置該組的成員，需要是在host中定義的主機名，多個成員請用逗號分隔

}

define service {

hostgroup_name linuxtone,linuxtoneweb,database 定義監控對象

name memory 設置服務名

service_description check memory 服務描述

check_period 24x7 監控周期設置

max_check_attempts 4 最大檢測嘗試次數

normal_check_interval 3 正常檢測間隔時間

retry_check_interval 2 重試檢測間隔時間

contact_groups admins 報警聯系組

notification_interval 10 通知間隔

notification_period 24x7 通知周期設置

notification_options w,u,c,r 定義什么狀態時報警

check_command check_snmp_storage!-m "^Virtual Memory$"!70!90

}

# Windows host definition template - This is NOT a real host, just a template!

?

define host{

name windows-server ; The name of this host template

use generic-host ; Inherit default values from the generic-host template

check_period 24x7 ; By default, Windows servers are monitored round the clock

check_interval 5 ; Actively check the server every 5 minutes

retry_interval 1 ; Schedule host check retries at 1 minute intervals

max_check_attempts 10 ; Check each server 10 times (max)

check_command check-host-alive ; Default command to check if servers are "alive"

notification_period 24x7 ; Send notification out at any time - day or night

notification_interval 30 ; Resend notifications every 30 minutes

notification_options d,r ; Only send notifications for specific host states

contact_groups admins ; Notifications get sent to the admins by default

hostgroups windows-servers ; Host groups that Windows servers should be a member of

register 0 ; DONT REGISTER THIS - ITS JUST A TEMPLATE

}

define contact{

contact_name nagiosadmin ; Short name of user

use generic-contact ; Inherit default values from generic-contact template (defined above)

alias Nagios Admin ; Full name of user

?

email netkey@linuxtone.com ; <<***** CHANGE THIS TO YOUR EMAIL ADDRESS ******

address1 alarm@hotmail.com ;這里是個自定義的變量設置，定義了一個SMS地址用以接收SMS報警信息，聯系人的自定義變量只能使用address1-address6；通過這個設置你可以實現多種報警方式，如電話，手機短信等，通過在這里設置你的電話，手機號，然后到報警命令定義里定義一個命令即可。

}

define contact{

name generic-contact ; The name of this contact template

service_notification_period 24x7 ; service notifications can be sent anytime

host_notification_period 24x7 ; host notifications can be sent anytime

service_notification_options w,u,c,r,f,s ; send notifications for all service states, flapping events, and scheduled downtime events

host_notification_options d,u,r,f,s ; send notifications for all host states, flapping events, and scheduled downtime events

service_notification_commands notify-service-by-email,notify-service-by-sms ; send service notifications via email

host_notification_commands notify-host-by-email,notify-host-by-sms ; send host notifications via email

register 0 ; DONT REGISTER THIS DEFINITION - ITS NOT A REAL CONTACT, JUST A TEMPLATE!

}

define timeperiod{

timeperiod_name 24x7

alias 24 Hours A Day, 7 Days A Week

sunday 00:00-24:00

monday 00:00-24:00

tuesday 00:00-24:00

wednesday 00:00-24:00

thursday 00:00-24:00

friday 00:00-24:00

saturday 00:00-24:00

}

define command{

command_name notify-host-by-email

command_line /usr/bin/printf "%b" "***** Nagios *****\n\nNotification Type: $NOTIFICATIONTYPE$\nHost: $HOSTNAME$\nState: $HOSTSTATE$\nAddress: $HOSTADDRESS$\nInfo: $HOSTOUTPUT$\n\nDate/Time: $LONGDATETIME$\n" | /bin/mail -s "** $NOTIFICATIONTYPE$ Host Alert: $HOSTNAME$ is $HOSTSTATE$ **" $CONTACTEMAIL$

}

?

# 'notify-service-by-email' command definition

define command{

command_name notify-service-by-email

command_line /usr/bin/printf "%b" "***** Nagios *****\n\nNotification Type: $NOTIFICATIONTYPE$\n\nService: $SERVICEDESC$\nHost: $HOSTALIAS$\nAddress: $HOSTADDRESS$\nState: $SERVICESTATE$\n\nDate/Time: $LONGDATETIME$\n\nAdditional Info:\n\n$SERVICEOUTPUT$" | /bin/mail -s "** $NOTIFICATIONTYPE$ Service Alert: $HOSTALIAS$/$SERVICEDESC$ is $SERVICESTATE$ **" $CONTACTEMAIL$

}

?

# 'notify-host-by-sms' command definition

define command{

command_name notify-host-by-sms

command_line php /usr/local/nagios/share/sms/smssendmsg.php $CONTACTADDRESS1$ "***** Nagios *****\n\nNotification Type: $NOTIFICATIONTYPE$\nHost: $HOSTNAME$\nState: $HOSTSTATE$\nAddress: $HOSTADDRESS$\nInfo: $HOSTOUTPUT$\n\nDate/Time: $LONGDATETIME$\n"

}

?

?

# 'notify-service-by-sms' command definition

define command{

command_name notify-service-by-sms

command_line php /usr/local/nagios/share/sms/smssendmsg.php $CONTACTADDRESS1$ "***** Nagios *****\n\nNotification Type: $NOTIFICATIONTYPE$\n\nService: $SERVICEDESC$\nHost: $HOSTALIAS$\nAddress: $HOSTADDRESS$\nState: $SERVICESTATE$\n\nDate/Time: $LONGDATETIME$\n\nAdditional Info:\n\n$SERVICEOUTPUT$"

}

安裝rrdtool，rrdtool不能直接通過yum安裝，可以加入Dag RPM Repository以便讓yum能找到rrdtool

#wget http://dag.wieers.com/rpm/packages/rpmforge-release/rpmforge-release-0.3.6-1.el5.rf.i386.rpm

#rpm -Uvh rpmforge-release-0.3.6-1.el5.rf.i386.rpm

#yum install rrdtool

安裝net-snmp

# yum -y install net-snmp net-snmp-utils net-snmp-libs php-mysql

?

安裝cacti
#cd ~/downloads
#wget http://www.cacti.net/downloads/cacti-0.8.7d.tar.gz
#tar zxvf cacti-0.8.7d.tar.gz
#mkdir –p /usr/local/wwwroot
#cp –rf cacti-0.8.7.d /usr/local/wwwroot/cacti

下面開始導入數據庫，mysql數據庫的基本安全配置這里不做說明，請參考以前的postfix郵件安裝文檔中的mysql設置部分。

#mysql –u root –p
mysql>create database cacti; 創建一個數據庫供cacti使用
mysql>use cacti;

Mysql>source /usr/local/cacti/cacti.sql 導入mysql數據庫
mysql> grant all privileges on cacti.* to cacti@localhost identified by "cacti";

Query OK, 0 rows affected (0.03 sec)

添加一個數據庫賬號cacti 密碼為cacti用以訪問cacti庫
Mysql>flush privileges; 刷新權限信息

?

Apache設置
#vi /etc/http/conf.d/cacti.conf 編輯cacti站點的配置文件，文件內容如下：

Alias /cacti "/var/www/html/cacti"

?

<Directory "/var/www/html/cacti ">

Options FollowSymLinks MultiViews

AllowOverride None

Order allow,deny

Allow from all

</Directory>

修改cacti的配置文件

#vi /usr/local/wwwroot/cacti/include/config.php

/* load up old style plugins here */

$plugins = array();

$url_path = "/cacti/";
修改其中的數據庫連接信息，設置好數據庫主機地址，用戶，密碼信息。
#chmod 777 -R rra log

至此安裝完成，訪問http://ip/cacti/install根據提示安裝cacti （ip換成你對應的主機ip地址）

接下來安裝cacti的插件管理
#cd ~/download/

#wget http://mirror.cactiusers.org/downloads/plugins/cacti-plugin-0.8.7d-PA-v2.4.zip
#unzip cacti-plugin-0.8.7d-PA-v2.4.zip
#mysql –u root –p cacti<pa.sql 導入sql到cacti庫中
#cd files-0.8.7d/
#cp –rf * /usr/local/wwwroot/cacti 復制相關文件到cacti下

首先需要安裝ndoutils以將nagios的數據能導入到mysql數據庫中。
#yum -y install mysql-devel 安裝mysql開發包以編譯ndoutils

#wget http://nchc.dl.sourceforge.net/sourceforge/nagios/ndoutils-1.4b7.tar.gz

#tar zxvf ndoutils-1.4b7.tar.gz
#cd ndoutils

#./configure --prefix=/usr/local/nagios LDFLAGS=-L/usr/lib --with-mysql-inc=/usr/include/mysql --with-mysql-lib=/usr/lib/mysql --enable-mysql --disable-pgsql --with-ndo2db-user=nagios --with-ndo2db-group=nagios

#make

#make install //此命令可不用執行

#./db/installdb -ucacti -pcacti -h localhost -d cacti

#cp config/ndomod.cfg /usr/local/nagios/etc

修改nagios主配置文件
#vi /usr/local/nagios/etc/nagios.cfg
添加以下內容
check_external_commands=1

command_check_interval=-1

event_broker_options=-1

broker_module=/usr/local/nagios/bin/ndomod.o config_file=/usr/local/nagios/etc/ndomod.cfg

process_performance_data=1

添加的內容至此結束

?

#cd src

# cp ndomod-3x.o ndo2db-3x log2ndo file2sock /usr/local/nagios/bin

#cd ..

#cp src/ndo2db-3x /usr/local/nagios/bin/ndo2db

# mv /usr/local/nagios/bin/ndomod-3x.o /usr/local/nagios/bin/ndomod.o //新添加

#cp config/ndo2db.cfg /usr/local/nagios/etc

修改配置文件ndocmd.cfg和ndo2db.cfg，這里我的配置文件內容為：

[root@localhost downloads]# cat /usr/local/nagios/etc/ndomod.cfg |grep -v '^#'|sed /^$/d

instance_name=default

output_type=tcpsocket

output=localhost

tcp_port=5668

output_buffer_items=5000

buffer_file=/usr/local/nagios/var/ndomod.tmp

file_rotation_interval=14400

file_rotation_timeout=60

reconnect_interval=15

reconnect_warning_interval=15

data_processing_options=-1

config_output_options=2

[root@localhost downloads]# cat /usr/local/nagios/etc/ndo2db.cfg |grep -v '^#'|sed /^$/d

ndo2db_user=nagios

ndo2db_group=nagios

socket_type=tcp

socket_name=/usr/local/nagios/var/ndo.sock

tcp_port=5668

db_servertype=mysql

db_host=localhost

db_port=3306

db_name=cacti

db_user=cacti

db_pass=cacti

db_prefix=npc_

max_timedevents_age=1440

max_systemcommands_age=10080

max_servicechecks_age=10080

max_hostchecks_age=10080

max_eventhandlers_age=44640

debug_level=1

debug_verbosity=1

debug_file=/usr/local/nagios/var/ndo2db.debug

max_debug_file_size=1000000

#/usr/local/nagios/bin/ndo2db -c /usr/local/nagios/etc/ndo2db.cfg 啟動ndo2db

#cd ~/downloads
#wget http://www.aurore.net/projects/php-json/php-json-ext-1.2.0.tar.bz2

#tar xvjf php-json-ext-1.2.0.tar.bz2

#cd php-json-ext-1.2.0

#phpize 編譯前初始化php環境

#./configure

#make

#make install

#vi /etc/php.d/json.ini
extension=php_json.so

#cp /usr/lib/php/modules/json.so /usr/lib/php/modules/php_json.so 這一步驟很關鍵，因為，apache否則日志報錯加載不到php_json.so文件。

#/usr/sbin/httpd -k graceful 重啟apache

?

為了驗證是否成功可使用phpinfo查看是否已支持json

#cd ~/downloads
#wget?http://www.assembla.com/spaces/npc/documents/aUjAwmdW8r3BuPab7jnrAJ/download?filename=npc-2.0.0b.166.tar.gz

wget http://dlwt.csdn.net/fd.php?i=659714146741849&s=796b68562511c6534bfc15d7b04711f4/npc-2.0.3.tar.gz 新鏈接可用
#mv npc /usr/local/wwwroot/cacti/plugins/
啟用cacti的插件功能，以admin用戶登陸cacti，在console中的user management里對admin的用戶權限進行編輯，勾選上Plugin Management，然后到插件管理中心安裝并啟用NPC即可。

在'User Management'中選擇'admin',在下邊'Realm Permissions'中鉤選'Plugin Management'。這時右側會出現'Plugin Management'連接，進去后在'uninstalled'中安裝npc，然后在'intalled'中enable npc,然后在回去admin的'Realm Permissions'中會出現'use npc'，如果沒有鉤選就把它選中。

?

接著在右側欄目中選擇settings,點選npc的標簽

鉤選Remote Commands

Nagios Command File Path： /usr/local/nagios/var/rw/nagios.cmd

<這個文件啟動nagios后會產生，根據實際的位置寫>

Nagios URL：?[url]http://yourserver/nagios/[/url]

保存就可以了。

?

至此安裝就完成了

啟動mysql httpd ndo nagios

service mysqld start

service httpd start

/usr/local/nagios/bin/ndo2db -c /usr/local/nagios/etc/ndo2db.cfg

service nagios start

?

訪問[url]http://yourserver/cacti/[/url]

選擇npc標簽就可以看到nagios所檢測的主機信息，唯一不足的是我打開這個頁面的速度有些慢，需要進一步尋找原因來進行優化.npc提供的這一套界面很好看（個人感覺）。

?

?

?

Could not open command file '/usr/local/nagios/var/rw/nagios.cmd' for update!

The permissions on the external command file and/or directory may be incorrect. Read the FAQs on how to setup proper permissions.

An error occurred while attempting to commit your command for processing.

# EXTERNAL COMMAND FILE

# This is the file that Nagios checks for external command requests.

# It is also where the command CGI will write commands that are submitted

# by users, so it must be writeable by the user that the web server

# is running as (usually 'nobody'). Permissions should be set at the

# directory level instead of on the file, as the file is deleted every

# time its contents are processed.

這段話的核心意思是apache的運行用戶要有對文件寫的權限.權限應該設置在目錄上,因為每次文件的內容被處理后文件就會被刪掉

?

command_file=/usr/local/nagios/var/rw/nagios.cmd