(一)背景介绍
zabbix是一个大型的分布式的监控系统,监控的范围比较广,是目前比较流行的监控系统,可是因为自身的缘由,历史数据不能持久保存,若是数据库的数据大于100G左右查询或其余的速度会很是的慢,会触发不少问题,通常的zabbix历史数据会不超过一个月(按实际得到的数据比例计算),咱们通常保存七天。通常为了业务的须要,每每会须要很长的历史数据来进行查看和排查问题,这就须要使zabbix的历史数据进行长久保存(不能存数据库,而能够存ES存储)。php
(二)环境
zabbix:zabbix4.0.1(安装部署省略)
ES:5.5.2 (安装部署省略)前端
(三)具体的配置mysql
3.一、首先修改zabbix_server.conf文件,启用历史数据的配置,具体以下:web
$grep '^[a-Z]' /etc/zabbix/zabbix_server.conf LogFile=/tmp/zabbix_server.log LogFileSize=0 PidFile=/var/run/zabbix/zabbix_server.pid SocketDir=/var/run/zabbix DBHost=localhost DBName=zabbix DBUser=zabbix DBPassword=zabbix HistoryStorageURL=http://X.X.X.X:9200 HistoryStorageTypes=uint,db1,str,log,text HistoryStorageDateIndex=1 SNMPTrapperFile=/var/log/snmptrap/snmptrap.log Timeout=4 AlertScriptsPath=/usr/lib/zabbix/alertscripts ExternalScripts=/usr
########################下边是具体的解释####################################sql
### Option: HistoryStorageURL # History storage HTTP[S] URL. # # Mandatory: no # Default: # HistoryStorageURL= HistoryStorageURL=http://X.X.X.X:9200 ### Option: HistoryStorageTypes # Comma separated list of value types to be sent to the history storage. # # Mandatory: no # Default: # HistoryStorageTypes=uint,db1,str,log,text HistoryStorageTypes=uint,db1,str,log,text ### Option: HistoryStorageDateIndex # Enable preprocessing of history values in history storage to store values in different indices based on date. # 0 - disable # 1 - enable # # Mandatory: no # Default: HistoryStorageDateIndex=1
备注:下边是ES所支持存储的数据类型数据库
3.二、修改zabbix前端的配置文件,添加global $DB,$HISTORY;json
$vim /etc/zabbix/web/zabbix.conf.php <?php // Zabbix GUI configuration file. global $DB,$HISTORY; #global $DB; $DB['TYPE'] = 'MYSQL'; $DB['SERVER'] = 'localhost'; $DB['PORT'] = '0'; $DB['DATABASE'] = 'zabbix'; $DB['USER'] = 'zabbix'; $DB['PASSWORD'] = 'zabbix'; // Schema name. Used for IBM DB2 and PostgreSQL. $DB['SCHEMA'] = ''; $ZBX_SERVER = 'X.X.X.X'; $ZBX_SERVER_PORT = '10051'; $ZBX_SERVER_NAME = 'zabbix'; $IMAGE_FORMAT_DEFAULT = IMAGE_FORMAT_PNG; // Elasticsearch url (can be string if same url is used for all types). $HISTORY['url'] = 'http://X.X.X.X:9200'; // Value types stored in Elasticsearch. $HISTORY['types'] = ['uint', 'text', 'log', 'str', 'db1']; //-------------------------------------------------------------------------------------------------------------------------- //若是不一样类型使用不一样的 ES 集群,能够按以下进行配置 #$HISTORY['url'] = [ # 'uint' => 'http://X.X.X.X:9200 ', # 'text' => 'http://X.X.X.X:9200 ' #]; #$HISTORY['types'] = ['uint', 'text'];
注意的要点:
一、HISTORY['url']和HISTORY['types']被更新。
二、定义zabbix GUI全局数据源路径文件 global $DB, $HISTORY;(告诉zabbix先从数据库里读取,没有的话取HISTORY读取)vim
3.三、在ES上依次建立五个索引 、五个模板、五个pipline.app
##########一、建立索引必须建立############## # uint mapping curl -X PUT \ http://10.114.23.118:9200/uint \ -H 'content-type:application/json' \ -d ' { "settings" : { "index" : { "number_of_replicas" : 1, "number_of_shards" : 5 } }, "mappings" : { "values" : { "properties" : { "itemid" : { "type" : "long" }, "clock" : { "format" : "epoch_second", "type" : "date" }, "value" : { "type" : "long" } } } } } ' # dbl mapping curl -X PUT \ http://10.114.23.118:9200/dbl \ -H 'content-type:application/json' \ -d ' { "settings" : { "index" : { "number_of_replicas" : 1, "number_of_shards" : 5 } }, "mappings" : { "values" : { "properties" : { "itemid" : { "type" : "long" }, "clock" : { "format" : "epoch_second", "type" : "date" }, "value" : { "type" : "double" } } } } } ' # str mapping curl -X PUT \ http://10.114.23.118:9200/str \ -H 'content-type:application/json' \ -d ' { "settings" : { "index" : { "number_of_replicas" : 1, "number_of_shards" : 5 } }, "mappings" : { "values" : { "properties" : { "itemid" : { "type" : "long" }, "clock" : { "format" : "epoch_second", "type" : "date" }, "value" : { "fields" : { "analyzed" : { "index" : true, "type" : "text", "analyzer" : "standard" } }, "index" : false, "type" : "text" } } } } } ' # text mapping curl -X PUT \ http://10.114.23.118:9200/text \ -H 'content-type:application/json' \ -d ' { "settings" : { "index" : { "number_of_replicas" : 1, "number_of_shards" : 5 } }, "mappings" : { "values" : { "properties" : { "itemid" : { "type" : "long" }, "clock" : { "format" : "epoch_second", "type" : "date" }, "value" : { "fields" : { "analyzed" : { "index" : true, "type" : "text", "analyzer" : "standard" } }, "index" : false, "type" : "text" } } } } } ' # log mapping curl -X PUT \ http://10.114.23.118:9200/log \ -H 'content-type:application/json' \ -d ' { "settings" : { "index" : { "number_of_replicas" : 1, "number_of_shards" : 5 } }, "mappings" : { "values" : { "properties" : { "itemid" : { "type" : "long" }, "clock" : { "format" : "epoch_second", "type" : "date" }, "value" : { "fields" : { "analyzed" : { "index" : true, "type" : "text", "analyzer" : "standard" } }, "index" : false, "type" : "text" } } } } } ' ###########二、建立索引模板################ curl -X PUT \ http://10.114.23.118:9200/_template/uint_template \ -H 'content-type:application/json' \ -d '{ "template": "uint*", "index_patterns": ["uint*"], "settings" : { "index" : { "number_of_replicas" : 1, "number_of_shards" : 5 } }, "mappings" : { "values" : { "properties" : { "itemid" : { "type" : "long" }, "clock" : { "format" : "epoch_second", "type" : "date" }, "value" : { "type" : "long" } } } } }' curl -X PUT \ http://10.114.23.118:9200/_template/text_template \ -H 'content-type:application/json' \ -d '{ "template": "text*", "index_patterns": ["text*"], "settings" : { "index" : { "number_of_replicas" : 1, "number_of_shards" : 5 } }, "mappings" : { "values" : { "properties" : { "itemid" : { "type" : "long" }, "clock" : { "format" : "epoch_second", "type" : "date" }, "value" : { "fields" : { "analyzed" : { "index" : true, "type" : "text", "analyzer" : "standard" } }, "index" : false, "type" : "text" } } } } }' curl -X PUT \ http://10.114.23.118:9200/_template/str_template \ -H 'content-type:application/json' \ -d '{ "template": "str*", "index_patterns": ["str*"], "settings" : { "index" : { "number_of_replicas" : 1, "number_of_shards" : 5 } }, "mappings" : { "values" : { "properties" : { "itemid" : { "type" : "long" }, "clock" : { "format" : "epoch_second", "type" : "date" }, "value" : { "type" : "long" } } } } }' curl -X PUT \ http://10.114.23.118:9200/_template/log_template \ -H 'content-type:application/json' \ -d '{ "template": "log*", "index_patterns": ["log*"], "settings" : { "index" : { "number_of_replicas" : 1, "number_of_shards" : 5 } }, "mappings" : { "values" : { "properties" : { "itemid" : { "type" : "long" }, "clock" : { "format" : "epoch_second", "type" : "date" }, "value" : { "fields" : { "analyzed" : { "index" : true, "type" : "text", "analyzer" : "standard" } }, "index" : false, "type" : "text" } } } } }' curl -X PUT \ http://10.114.23.118:9200/_template/dbl_template \ -H 'content-type:application/json' \ -d '{ "template": "dbl*", "index_patterns": ["dbl*"], "settings" : { "index" : { "number_of_replicas" : 1, "number_of_shards" : 5 } }, "mappings" : { "values" : { "properties" : { "itemid" : { "type" : "long" }, "clock" : { "format" : "epoch_second", "type" : "date" }, "value" : { "fields" : { "analyzed" : { "index" : true, "type" : "text", "analyzer" : "standard" } }, "index" : false, "type" : "text" } } } } }' ##########建立pipeline。 在将数据放入索引以前,pipeline能对数据进行多种预处理操做############## curl -X PUT \ http://10.114.23.118:9200/_ingest/pipeline/uint-pipeline \ -H 'content-type:application/json' \ -d '{ "description": "daily uint index naming", "processors": [ { "date_index_name": { "field": "clock", "date_formats": ["UNIX"], "index_name_prefix": "uint-", "date_rounding": "d" } } ] }' curl -X PUT \ http://10.114.23.118:9200/_ingest/pipeline/dbl-pipeline \ -H 'content-type:application/json' \ -d '{ "description": "daily dbl index naming", "processors": [ { "date_index_name": { "field": "clock", "date_formats": ["UNIX"], "index_name_prefix": "dbl-", "date_rounding": "d" } } ] }' curl -X PUT \ http://10.114.23.118:9200/_ingest/pipeline/log-pipeline \ -H 'content-type:application/json' \ -d '{ "description": "daily log index naming", "processors": [ { "date_index_name": { "field": "clock", "date_formats": ["UNIX"], "index_name_prefix": "log-", "date_rounding": "d" } } ] }' curl -X PUT \ http://10.114.23.118:9200/_ingest/pipeline/text-pipeline \ -H 'content-type:application/json' \ -d '{ "description": "daily text index naming", "processors": [ { "date_index_name": { "field": "clock", "date_formats": ["UNIX"], "index_name_prefix": "text-", "date_rounding": "d" } } ] }' curl -X PUT \ http://10.114.23.118:9200/_ingest/pipeline/str-pipeline \ -H 'content-type:application/json' \ -d '{ "description": "daily str index naming", "processors": [ { "date_index_name": { "field": "clock", "date_formats": ["UNIX"], "index_name_prefix": "str-", "date_rounding": "d" } } ] }'
3.四、在ES上查看是否生成:curl
$curl http://X.X.X.X:9200/_cat/indices?v health status index uuid pri rep docs.count docs.deleted store.size pri.store.size green open str ZTkdqhpFR9ijzTfKvtsMrQ 5 1 0 0 2.2kb 1.1kb green open text TjY6OEGySJ2AGc1rpfOEhA 5 1 0 0 2.2kb 1.1kb green open log qG-R2UhiQhypP9stSSodkw 5 1 0 0 2.2kb 1.1kb green open db1 av_V5XbiSDyDdZXW0rO6aw 5 1 0 0 2.2kb 1.1kb green open .kibana JZBiyypQSRuMxRnHxOLP1Q 1 1 1 0 8kb 4kb green open unit 2bxxvaMTTFKqTq0EDX5EjA 5 1 0 0 2.2kb 1.1kb
3.五、在kibana上建立相应的索引并查看数据。
就能够看到历史数据会存储到ES中去
(四)、查看是否经过db访问仍是es,修改该文件(/etc/zabbix/web/zabbix.conf.php)的全局变量就能够知道访问的是mysql仍是ES了。
具体能够参考官方文档(https://www.zabbix.com/documentation/4.0/manual/appendix/install/elastic_search_setup)