转载请注明原文连接:http://my.oschina.net/caiyuanbo/blog/383916php
到Centos官网下载Centos 7 64位版系统并安装。html
http://www.centos.org/python
安装完进入系统更新应用linux
yum updateios
安装php及http服务器web
yum install httpd phpapache
安装nagios所需的库json
yum install gcc glibc glibc-common make gd gd-devel net-snmpvim
安装命令行下载软件windows
yum install wget
安装vim文本编辑软件(我的喜爱)
yum install vim
新建用户:nagios
useradd nagios
新建用户组:nagcmd
groupadd nagcmd
将用户加入用户组
usermod -G nagcmd nagios
usermod -G nagcmd apache
在/root目录下建立nagios文件夹
mkdir ~/nagios
进入/root/nagios文件夹
cd ~/nagios
下载nagios程序及nagios增长插件
wget http://prdownloads.sourceforge.net/sourceforge/nagios/nagios-4.0.8.tar.gz
wget http://www.nagios-plugins.org/download/nagios-plugins-2.0.3.tar.gz
解压nagios增长插件程序包及增长插件
tar zxvf nagios-4.0.8.tar.gz
tar zxvf nagios-plugins-2.0.3.tar.gz
进入/root/nagios/nagios-4.0.8文件夹
cd nagios-4.0.8
编译安装nagios-4.0.8
./configure --with-command-group=nagcmd
make all
make install
make install-init
make install-commandmode
make install-config
编辑nagios的contacts.cfg文件(存放设置接收报警的用户的,此布最后修改)
vim /usr/local/nagios/etc/objects/contacts.cfg
################################ 华丽分割线O(∩_∩)O~ ########################
define contact{
contact_name caiyuanbo ; Short name of user
use generic-contact ; Inherit default values from generic-contact template (defined above)
alias caiyuanbo ; Full name of user 后续要对应微信公众帐号中通信录的用户名
email 15000000000@139.com ;这里设置邮箱
pager 15000000000 ;这里是我后来添加的字段,若是要在commands.cfg配置文件中获取这个字段信息就使用 $CONTACTPAGER$ 表示(既是contact中的pager字段)。
}
define contact{
contact_name luojinping
use generic-contact
alias luojinping
email 13400000000@139.com
pager 13400000000
}
define contactgroup{
contactgroup_name admins
alias Nagios Administrators
members caiyuanbo
members luojinping
}
################################ 华丽分割线O(∩_∩)O~ ###################
make install-webconf
设置nagios登陆用户nagiosadmin的密码
htpasswd -s -c /usr/local/nagios/etc/htpasswd.users nagiosadmin
注:关于nagios监控-多用户管理,如下文章不错
http://blog.csdn.net/liqfyiyi/article/details/8778671
进入/root/nagios/nagios-plugins-2.0.3文件夹
cd ~/nagios/nagios-plugins-2.0.3
安装nagios增长插件
make
make install
使用下面的命令核对nagios配置文件是否有错误,最好每次修改nagios配置文件都测试下。
/usr/local/nagios/bin/nagios -v /usr/local/nagios/etc/nagios.cfg
chkconfig --add nagios
chkconfig --level 35 nagios on
systemctl start nagios.service
注:关于nagios在Centos7.0上的安装方法我参照的是下面这个连接的文章(洋文的)
http://www.tuicool.com/articles/vYFv2i7
启用http服务
systemctl start httpd.service
设置httpd开机启动
chkconfig httpd on
systemctl enable httpd
修改Centos 7的防火墙,使其http服务可被访问。
查看防火墙所在网络区域,默认为public
firewall-cmd --get-default-zone
查看public所容许访问的服务
firewall-cmd --zone=public --list-services
添加运行访问http服务
firewall-cmd --permanent --zone=public --add-service=http
删除不须要的服务(可选)
firewall-cmd --permanent --zone=public --remove-service=dhcpv6-client
从新加载防火墙
firewall-cmd --reload
查看public所容许访问的服务,验证是否修改为功
firewall-cmd --zone=public --list-services
配置sendEmail发送nagios邮件报警
到官网下载sendEmail安装包
http://caspian.dotconf.net/menu/Software/SendEmail/
解压sendEmail程序包(这里下载后放在我统一/root目录下)
cd /root
tar zxvf sendEmail-v1.56.tar.gz
进入解压出来后的目录
cd sendEmail-v1.56
复制sendEmail程序至/usr/local/bin
cp sendEmail /usr/local/bin
查看/usr/local/bin/sendEmail的权限,是否普通用户可读可执行
ll /usr/local/bin/sendEmail
这里可尝试用sendEmail发送邮件
/usr/local/bin/sendEmail -f fasongzhe@126.com -t jieshouzhe@qq.com -s smtp.126.com -u "这里设置主题" -xu fasongzhe -xp fasongzhedemima
解释:
-f 表示发送者的邮箱
-t 表示接收者的邮箱
-s 表示SMTP服务器的域名或者ip
-u 表示邮件的主题
-xu 表示SMTP验证的用户名
-xp 表示SMTP验证的密码(注意,这个密码貌似有限制,例如我用d!5neyland就不能被正确识别)
-m 表示邮件的内容
若是你不带-m参数的话,就会提示你自行输入
Reading message body from STDIN because the ‘-m’ option was not used.
If you are manually typing in a message:
- First line must be received within 60 seconds.
- End manual input with a CTRL-D on its own line
输入完成后使用CTRL-D来结束
既然nagios要使用sendEmail来发警告邮件,那么就要修改commands.cfg中关于发邮件的命令的定义,咱们如今来修改notify-by-email这个命令,以下
################################ 华丽分割线O(∩_∩)O~ ####################
# 'notify-host-by-email' command definition
define command{
command_name notify-host-by-email
command_line /usr/bin/printf "%b" "***** Nagios *****\n\nNotification Type: $NOTIFICATIONTYPE$\nHost: $HOSTNAME$\nState: $HOSTSTATE$\nAddress: $HOSTADDRESS$\nInfo: $HOSTOUTPUT$\n\nDate/Time: $LONGDATETIME$\n" | /usr/local/bin/sendEmail -f fasongzhe@126.com -t $CONTACTEMAIL$ -s smtp.126.com -u "** $NOTIFICATIONTYPE$ alert - $HOSTNAME$ $HOSTADDRESS$ is $HOSTSTATE$ **" -xu fasongzhe -xp fasongzhedemima
}
# 'notify-service-by-email' command definition
define command{
command_name notify-service-by-email
command_line /usr/bin/printf "%b" "***** Nagios *****\n\nNotification Type: $NOTIFICATIONTYPE$\n\nService: $SERVICEDESC$\nHost: $HOSTALIAS$\nAddress: $HOSTADDRESS$\nState: $SERVICESTATE$\n\nDate/Time: $LONGDATETIME$\n\nAdditional Info:\n\n$SERVICEOUTPUT$\n" | /usr/local/bin/sendEmail -f fasongzhe@126.com -t $CONTACTEMAIL$ -s smtp.126.com -u "** $NOTIFICATIONTYPE$ alert - $HOSTALIAS$ $HOSTADDRESS$/$SERVICEDESC$ is $SERVICESTATE$ **" -xu fasongzhe -xp fasongzhedemima
}
################################ 华丽分割线O(∩_∩)O~ ########################
修改templates.cfg文件,修改报警方式为邮件报警
vim /usr/local/nagios/etc/objects/templates.cfg
################################ 华丽分割线O(∩_∩)O~ #############################
define contact{
name generic-contact ; The name of this contact template
service_notification_period 24x7 ; service notifications can be sent anytime
host_notification_period 24x7 ; host notifications can be sent anytime
service_notification_options w,u,c,r,f,s ; send notifications for all service states, flapping events, and scheduled downtime events
host_notification_options d,u,r,f,s ; send notifications for all host states, flapping events, and scheduled downtime events
service_notification_commands notify-service-by-email ; send service notifications via email
host_notification_commands notify-host-by-email ; send host notifications via email
register 0 ; DONT REGISTER THIS DEFINITION - ITS NOT A REAL CONTACT, JUST A TEMPLATE!
}
################################ 华丽分割线O(∩_∩)O~ ###########################
注:关于邮件报警配置我参考的是如下这个连接的文章
http://xiaosa.blog.51cto.com/665033/381310/
微信报警配置
首先注册个微信公共平台帐号
一、基本信息---->二、邮箱激活
https://mp.weixin.qq.com/cgi-bin/readtemplate?t=register/step1_tmpl&lang=zh_CN
---->三、选择类型
选择“企业号”
---->四、信息登记---->五、公众号信息
(注:“我选的是“其余组织”,能够在百度查下本身公司的“组织机构代码”)
登陆微信公共平台进行配置
打开通信录添加成员
打开应用中心添加应用
查看并记住发送报警使用的应用的ID
点击设置号本身的帐号信息,点击“权限管理”右边的“管理”按键进入权限管理页面,新建管理组(名字本身定)
根据添加管理员(内部)
根据实际状况修改“通信录权限”、“应用权限”、“敏感接口权限”的配置。
在该页面最下方有个开发者凭据,这个是客户端与服务器创建链接须要用到的。
简单的使用nagios发微信报警主要用到微信API如下两个格动做:
一、创建链接:获取AccessToken;
二、发送消息。
可在微信企业号接口调试工具的页面测试下。
一、发送请求地址,获取AccessToken
二、发送请求地址,发送消息
其中的body部分能够这样定义:
{
"touser": "这里设置公众平台通信录中的用户名,可用@all表明全部用户",
"msgtype": "text",
"agentid": "0",
"text": {
"content": "发送的内容,稍后会用python发送请求地址,暂不能发送中文"
},
"safe":"0"
}
详细接口信息可参考微信官方接口文档介绍
http://qydev.weixin.qq.com/wiki/index.php?title=%E9%A6%96%E9%A1%B5
安装Python-3.4
科普下:
有些人在linux下使用python发送微信链接时会报urllib2.URLError: <urlopen error unknown url type: https>这个错误,是由于python没有SSL模块,需从新编译安装python。步骤以下
安装openssl与openssl-devel包
yum install openssl
yum install openssl-devel
到官网下载Python3的最新版
https://www.python.org/ftp/python/3.4.3/Python-3.4.3.tgz
解压Python安装包(我默认放在/root下)
cd /root
tar xzvf Python-3.4.3.tgz
进入python源代码文件夹,进入Modules文件夹,修改Setup.dist,使其支持发送https请求。
cd /root/Python-3.4.3/Modules
vim Setup.dist
将
# Socket module helper for SSL support; you must comment out the other
# socket line above, and possibly edit the SSL variable:
#SSL=/usr/local/ssl
#_ssl _ssl.c \
# -DUSE_SSL -I$(SSL)/include -I$(SSL)/include/openssl \
# -L$(SSL)/lib -lssl -lcrypto
修改成
# Socket module helper for SSL support; you must comment out the other
# socket line above, and possibly edit the SSL variable:
SSL=/usr/local/ssl
_ssl _ssl.c \
-DUSE_SSL -I$(SSL)/include -I$(SSL)/include/openssl \
-L$(SSL)/lib -lssl -lcrypto
编译安装,设置安装目录为/usr/local/python-3.4,以避免与系统已安装的python2冲突。
./configure --prefix=/usr/local/python-3.4
make
make install
#############################这部分有兴趣能够弄,可忽略###################
为方便后续测试可在PATH中添加python-3.4的运行路径,之后在终端可直接输入命令python3.4执行文件。
vim /etc/profile
在文档最后,添加:
export PATH="/usr/local/python-3.4/bin:$PATH"
保存,退出,而后运行
source /etc/profile
可验证是否修改无误。
################################ 华丽分割线O(∩_∩)O~ #########################
安装完成后开始编辑python脚本调用微信公众平台。
我将编辑好的脚本放在/usr/local/nagios/python目录下
mkdir /usr/local/nagios/python
cd /usr/local/nagios/python
编辑主机报警调用脚本
vim notify-host-by-weixin.py
代码以下:
################################ 华丽分割线O(∩_∩)O~ #########################
import urllib.request
import json
import sys
#以上是导入模块
#建立获取AccessToken的方法
def gettoken(corp_id,corp_secret):
gettoken_url = 'https://qyapi.weixin.qq.com/cgi-bin/gettoken?corpid=' + corp_id + '&corpsecret=' + corp_secret
try:
token_file = urllib.request.urlopen(gettoken_url)
except urllib.error.HTTPError as e:
print(e.code)
print(e.read().decode("utf8"))
token_data = token_file.read().decode('utf-8')
token_json = json.loads(token_data)
token_json.keys()
token = token_json['access_token']
return token
#这里是发送消息的方法
def senddata(access_token,notify_str):
send_url = 'https://qyapi.weixin.qq.com/cgi-bin/message/send?access_token=' + access_token
#我传入的参数是一段字符串每一个信息用separator连起来,只要再用字符串的split("separator")方法分开信息就能够了。
notifydata = notify_str.split("separator")
user = notifydata[0]
cationtype = notifydata[1]
name = notifydata[2]
state = notifydata[3]
address = notifydata[4]
output = notifydata[5]
datatime = notifydata[6]
content = '[擦汗][擦汗] Nagios警报 [擦汗][擦汗] \n\n类型: ' + cationtype + '\n主机名: ' + name + '\n状态: ' + state + '\nIP地址: ' + address + '\n[猪头]日志: ' + output + '\n\n[瓢虫]时间: ' + datatime + '\n'
send_values = {
"touser":user,
"msgtype":"text",
"agentid":"0",
"text":{
"content":content
},
"safe":"0"
}
send_data = json.dumps(send_values, ensure_ascii=False).encode(encoding='UTF8')
#设置为非ascii解析,使其支持中文
send_request = urllib.request.Request(send_url, send_data)
response = urllib.request.urlopen(send_request)
#这个是返回微信公共平台的信息,调试时比较有用
msg = response.read()
return msg
default_encoding = 'utf-8'
if sys.getdefaultencoding() != default_encoding:
reload(sys)
sys.setdefaultencoding(default_encoding)
#我编辑的脚本是要获取nagios传入的一段参数的(字符串),下面这条代码是获取执行脚本后获取的第一个参数(经测试nagios只能传入一个参数进python,因此把全部包括用户名跟报警主机报警信息放进一个字符串里)
notifystr = str(sys.argv[1])
corpid = '这里输入你的微信公众平台corpid'
corpsecret = '这里输入你的微信公众平台corpsecret'
accesstoken = gettoken(corpid,corpsecret)
msg = senddata(accesstoken,notifystr)
print(msg)
################################ 华丽分割线O(∩_∩)O~ ############################
编辑服务报警调用脚本
vim notify-service-by-weixin.py
代码以下:
################################ 华丽分割线O(∩_∩)O~ #########################
import urllib.request
import json
import sys
def gettoken(corp_id,corp_secret):
gettoken_url = 'https://qyapi.weixin.qq.com/cgi-bin/gettoken?corpid=' + corp_id + '&corpsecret=' + corp_secret
try:
token_file = urllib.request.urlopen(gettoken_url)
except urllib.error.HTTPError as e:
print(e.code)
print(e.read().decode("utf8"))
token_data = token_file.read().decode('utf-8')
token_json = json.loads(token_data)
token_json.keys()
token = token_json['access_token']
return token
def senddata(access_token,notify_str):
send_url = 'https://qyapi.weixin.qq.com/cgi-bin/message/send?access_token=' + access_token
notifydata = notify_str.split("separator")
user = notifydata[0]
cationtype = notifydata[1]
desc = notifydata[2]
alias = notifydata[3]
address = notifydata[4]
state = notifydata[5]
datatime = notifydata[6]
output = notifydata[7]
content ='[擦汗][擦汗] Nagios警报 [擦汗][擦汗] \n\n类型: ' + cationtype + '\n\n服务名: ' + desc + '\n主机名: ' + alias + '\nIP地址: ' + address + '\n状态: ' + state + '\n\n[瓢虫]时间: ' + datatime + '\n\n[猪头]日志:\n\n' + output + '\n'
send_values = {
"touser":user,
"msgtype":"text",
"agentid":"0",
"text":{
"content":content
},
"safe":"0"
}
send_data = json.dumps(send_values, ensure_ascii=False).encode(encoding='UTF8')
send_request = urllib.request.Request(send_url, send_data)
response = urllib.request.urlopen(send_request)
msg = response.read()
return msg
default_encoding = 'utf-8'
if sys.getdefaultencoding() != default_encoding:
reload(sys)
sys.setdefaultencoding(default_encoding)
notifystr = str(sys.argv[1])
corpid = '这里输入你的微信公众平台corpid'
corpsecret = '这里输入你的微信公众平台corpsecret'
accesstoken = gettoken(corpid,corpsecret)
msg = senddata(accesstoken,notifystr)
print(msg)
################################ 华丽分割线O(∩_∩)O~ #############################
编辑好python程序后可使用如下命令测试,主机报警示例(将下面命令中文改成英文):
/usr/local/python-3.4/bin/python3.4 /usr/local/nagios/python/notify-host-by-weixin.py "微信通信录中的用户名separator时间标题separator主机名separator主机状态separator主机地址separator主机输出信息separator时间"
成功后会有 b'{"errcode":0,"errmsg":"ok"}' 的提示。
接下来开始对接nagios报警
而后定义发送微信的命令,修改commands.cfg文件,定义主机报警命令notify-host-by-weixin,及服务报警命令notify-service-by-weixin。
vim /usr/local/nagios/etc/objects/commands.cfg
在文档最后面添加一下信息便可。
##############################################################################
# weixin #
##############################################################################
define command{
command_name notify-host-by-weixin
command_line /usr/local/python-3.4/bin/python3.4 /usr/local/nagios/python/notify-host-by-weixin.py "$CONTACTALIAS$separator$NOTIFICATIONTYPE$separator$HOSTNAME$separator$HOSTSTATE$separator$HOSTADDRESS$separator$HOSTOUTPUT$separator$LONGDATETIME$"
}
define command{
command_name notify-service-by-weixin
command_line /usr/local/python-3.4/bin/python3.4 /usr/local/nagios/python/notify-service-by-weixin.py "$CONTACTALIAS$separator$NOTIFICATIONTYPE$separator$SERVICEDESC$separator$HOSTALIAS$separator$HOSTADDRESS$separator$SERVICESTATE$separator$LONGDATETIME$separator$SERVICEOUTPUT$"
}
注:这部分我参考了这个网页中的部分汉化资料,仍是比较有用的,介绍配置文件很详细,能够去看看。
http://www.cnblogs.com/mchina/archive/2013/02/20/2883404.html
修改templates.cfg文件,添加微信报警(这里我删除了邮件报警,由于不必了,要添加也能够,在邮件报警后面添加个逗号和微信报警的命令就好了)
vim /usr/local/nagios/etc/objects/templates.cfg
define contact{
name generic-contact ; The name of this contact template
service_notification_period 24x7 ; service notifications can be sent anytime
host_notification_period 24x7 ; host notifications can be sent anytime
service_notification_options w,u,c,r,f,s ; send notifications for all service states, flapping events, and scheduled downtime events
host_notification_options d,u,r,f,s ; send notifications for all host states, flapping events, and scheduled downtime events
service_notification_commands notify-service-by-weixin
host_notification_commands notify-host-by-weixin
register 0 ; DONT REGISTER THIS DEFINITION - ITS NOT A REAL CONTACT, JUST A TEMPLATE!
}
修改templates.cfg文件添加监控设备类别的模板
# Define a template for switches that we can reuse
define host{
name generic-switch ; The name of this host template
use generic-host ; Inherit default values from the generic-host template
check_period 24x7 ; By default, switches are monitored round the clock
check_interval 1 ; Switches are checked every 5 minutes 检测设备的时间间隔
retry_interval 1 ; Schedule host check retries at 1 minute intervals 确认是否故障再次检测的时间间隔
max_check_attempts 1 ; Check each switch 10 times (max)
check_command check-host-alive ; Default command to check if routers are "alive"
notification_period 24x7 ; Send notifications at any time
notification_interval 30 ; Resend notifications every 30 minutes 设置为0表示只报一次警,这里设置为30分钟报一次
notification_options d,r ; Only send notifications for specific host states
contact_groups admins ; Notifications get sent to the admins by default
register 0 ; DONT REGISTER THIS - ITS JUST A TEMPLATE
}
#下面是在添加汇聚交换机模板,继承了generic-switch,这个是本身定义的,也可使用默认的例如generic-switch
# Define Convergence_Layer_Switches
define host{
name Convergence_Layer_Switches
#新建模板的名字
use generic-switch
#继承默认的generic-switch模板
statusmap_image Convergence_Layer_Switches.png
#这里是定义map中绘制的拓扑中显示的图标,能够本身定义。而后存放在/usr/local/nagios/share/images/logos目录
}
# Define Access_Layer_Switches
define host{
name Access_Layer_Switches
use generic-switch
statusmap_image Access_Layer_Switches.png
}
注:关于MAP绘图我参考的是这个连接
http://www.361way.com/nagios-map/2457.html
修改nagios.cfg修改主机配置文件的读取目录,使用额外的文件保存主机信息(方便管理)。
vim /usr/local/nagios/etc/nagios.cfg
# You can specify individual object config files as shown below:
cfg_file=/usr/local/nagios/etc/objects/commands.cfg
cfg_file=/usr/local/nagios/etc/objects/contacts.cfg
cfg_file=/usr/local/nagios/etc/objects/timeperiods.cfg
cfg_file=/usr/local/nagios/etc/objects/templates.cfg
# Definitions for monitoring the local (Linux) host
#cfg_file=/usr/local/nagios/etc/objects/localhost.cfg
#在这里我将默认的本机检测关掉取消了。
# Definitions for monitoring a Windows machine
#cfg_file=/usr/local/nagios/etc/objects/windows.cfg
# Definitions for monitoring a router/switch
#cfg_file=/usr/local/nagios/etc/objects/switch.cfg
# Definitions for monitoring a network printer
#cfg_file=/usr/local/nagios/etc/objects/printer.cfg
# You can also tell Nagios to process all config files (with a .cfg
# extension) in a particular directory by using the cfg_dir
# directive as shown below:
#cfg_dir=/usr/local/nagios/etc/servers
#cfg_dir=/usr/local/nagios/etc/printers
#cfg_dir=/usr/local/nagios/etc/switches
#cfg_dir=/usr/local/nagios/etc/routers
cfg_dir=/usr/local/nagios/etc/campus/south
#添加了一个读取配置文件的目录,想放哪本身决定,之后将主机的信息放在/usr/local/nagios/etc/campus/south这个目录即可读取。
建立文件夹/usr/local/nagios/etc/campus/south
mkdir /usr/local/nagios/etc/campus
mkdir /usr/local/nagios/etc/campus/south
建立主机配置文件(名字随便取)
cd /usr/local/nagios/etc/campus/south
vim switches.cfg
#定义主机,我下面监控的是汇聚交换机
define host{
use Convergence_Layer_Switches
#是使用的templates.cfg中的Convergence_Layer_Switches(这个是我本身定义的)
host_name S5-103_1F-RG-3760-68
#主机名
alias 192.168.1.202
#别名
address 192.168.1.222
#IP地址
hostgroups S-103
#隶属于哪一个主机组
}
#定义主机,我下面监控的是链接汇聚交换机的接入层交换机
define host{
use Access_Layer_Switches
host_name S_103_2F_RG_S2952A
alias 192.168.1.3
address 192.168.1.3
parents S5-103_1F-RG-3760-68
#上一级节点名字,填写清楚,在nagios的map页面的绘图才会清晰显示结构
hostgroups S-103
}
define host{
use Access_Layer_Switches
host_name S_103_3F_RG_S2952A
alias 192.168.1.4
address 192.168.1.4
parents S5-103_1F-RG-3760-68
hostgroups S-103
}
#建立主机组
define hostgroup{
hostgroup_name S-103
#主机组名
alias S-103-PeiXunGongYu
#主机组别名
}
#定义监控方式这里是ping
define service{
use generic-service
hostgroup_name S-103
service_description PING
check_command check_ping!200.0,20%!600.0,60%
normal_check_interval 5
retry_check_interval 1
}
核对nagios配置文件是否有错误
/usr/local/nagios/bin/nagios -v /usr/local/nagios/etc/nagios.cfg
没有报错就重启nagios服务
systemctl start nagios.service
效果图:
转载请注明原文连接:http://my.oschina.net/caiyuanbo/blog/383916
教程比较简略,可能有些纰漏,若是有问题能够跟我一块儿研究。
QQ:384152164
E-mail:caiyb@vip.qq.com