nagios用NRPE監控Linux主機 服務端和客戶端的安裝配置

安裝配置nagios服務端：

安裝前的準備工作

yum -y install httpd gcc glibc glibc-common gd gd-devel php php-mysql mysql mysql-devel mysql-server
groupadd nagcmd
useradd -G nagcmd nagios
passwd nagios
usermod -a -G nagcmd apache

vim /etc/httpd/conf/httpd.conf

DirectoryIndex index.php index.html index.html.var  #找到這一行，添加index.php

編譯安裝nagios：

wget http://prdownloads.sourceforge.net/sourceforge/nagios/nagios-4.0.5.tar.gz
tar zxf nagios-4.0.5.tar.gz
cd nagios-4.0.5
./configure --with-command-group=nagcmd --enable-event-broker
make all
make install
make install-init
make install-commandmode
make install-config

附：在解壓的時候如果提示下面的錯誤，是因為系統時間不對

tar: nagios-4.0.5/xdata/xsddefault.c: time stamp 2014-04-12 02:37:42 is 250653.223481153 s in the future

tar: nagios-4.0.5/xdata/xsddefault.h: time stamp 2014-04-12 02:37:42 is 250653.223419364 s in the future

tar: nagios-4.0.5/xdata: time stamp 2014-04-12 02:37:42 is 250653.223359922 s in the future

修改系統時間

cp /usr/share/zoneinfo/Asia/Shanghai /etc/localtime  

service ntpd stop

ntpdate asia.pool.ntp.org ; hwclock -w

需要在httpd的配置文件目錄(conf.d)中生成Nagios的Web程序配置文件，繼續在此編譯安裝目錄輸入一條命令：

# make install-webconf

創建一個登錄nagios web程序的用戶，這個用戶帳號在以后通過web登錄nagios認證時所用：

# htpasswd -c /usr/local/nagios/etc/htpasswd.users nagiosadmin #輸入登陸nagios的密碼

# service httpd restart

編譯、安裝nagios-plugins

nagios的所有監控工作都是通過插件完成的，因此，在啟動nagios之前還需要為其安裝官方提供的插件。http://exchange.nagios.org/directory/Plugins nagios插件鏈接

wget http://nagios-plugins.org/download/nagios-plugins-2.0.tar.gz
tar zxf nagios-plugins-2.0.tar.gz
cd nagios-plugins-2.0
./configure --with-nagios-user=nagios --with-nagios-group=nagios
make
make install

配置并啟動Nagios

# chkconfig --add nagios

# chkconfig nagios on

檢查其主配置文件

# /usr/local/nagios/bin/nagios -v /usr/local/nagios/etc/nagios.cfg

# service nagios start

關閉selinux，

vim /etc/sysconfig/selinux  將其中的selinux后面的值“force”修改為“disable”或者

臨時性的改動selinux也可以

# setenforce 0
# getenforce
Permissive

或者將nagios的CGI程序運行于SELinux/targeted模式而不用關閉selinux：

# chcon -R -t httpd_sys_content_t /usr/local/nagios/sbin

# chcon -R -t httpd_sys_content_t /usr/local/nagios/share

通過web界面查看nagios：

http://your_nagios_IP/nagios

輸入帳號和密碼

這時候可以看到本機的服務狀態，如果沒有出現頁面，請檢查iptables的80端口是否開放

如果出現下面提示，說明是selinux的問題，setenforce 0即可

Internal Server Error
The server encountered an internal error or misconfiguration and was unable to complete your request.
Please contact the server administrator, root@localhost and inform them of the time the error occurred, and anything you might have done that may have caused the error.
More information about this error may be available in the server error log.

安裝NRPE，服務端需要自己的check_nrpe，和被監控端聯系

下載頁面

http://downloads.sourceforge.net/project/nagios/nrpe-2.x/nrpe-2.15/nrpe-2.15.tar.gz?r=&ts=1363788540&use_mirror=hivelocity

tar -zxvf nrpe-2.15.tar.gz
cd nrpe-2.15
./configure --with-nrpe-user=nagios \
--with-nrpe-group=nagios \
--with-nagios-user=nagios \
--with-nagios-group=nagios \
--enable-command-args \
--enable-ssl
make all
make install-plugin
make install-daemon
make install-daemon-config

如果./configure時候出現下面錯誤

checking for SSL headers... SSL headers found in /usr/local/ssl
checking for SSL libraries... configure: error: Cannot find ssl libraries

則

# find /usr/ -name libssl.so
/usr/local/ssl/lib/libssl.so
# ./configure --with-nrpe-user=nagios --with-nrpe-group=nagios --with-nagios-user=nagios  --with-nagios-group=nagios --enable-command-args --enable-ssl --with-ssl-lib=/usr/local/ssl/lib

安裝配置被監控端：

yum -y install gcc glibc glibc-common gd gd-devel 

或者

yum grouplist  #檢查  yum -y groupinstall "Development Tools" "Development Libraries"

添加nagios用戶

useradd -s /sbin/nologin nagios
tar zxf nagios-plugins-2.0.tar.gz
cd nagios-plugins-2.0
./configure --with-nagios-user=nagios --with-nagios-group=nagios --with-mysql=/usr/local/mysql
make all
make install

安裝NRPE

下載頁面

http://downloads.sourceforge.net/project/nagios/nrpe-2.x/nrpe-2.15/nrpe-2.15.tar.gz?r=&ts=1363788540&use_mirror=hivelocity

tar -zxvf nrpe-2.15.tar.gz
cd nrpe-2.15
./configure --with-nrpe-user=nagios \
     --with-nrpe-group=nagios \
     --with-nagios-user=nagios \
     --with-nagios-group=nagios \
     --enable-command-args \
     --enable-ssl
make all
make install-plugin
make install-daemon
make install-daemon-config

 注：如果./configure有下面提示，請 yum install openssl-devel
checking for SSL headers... SSL headers found in /usr/local/ssl
checking for SSL libraries... configure: error: Cannot find ssl libraries

配置NRPE

# vim /usr/local/nagios/etc/nrpe.cfg  找到相應的做修改

log_facility=daemon
pid_file=/var/run/nrpe.pid
server_address=172.16.100.11  #本機ip，本機提供nrpe服務，所以自己為服務端,此行需手動添加
server_port=5666
nrpe_user=nagios
nrpe_group=nagios
allowed_hosts=172.16.100.1  #監控端的ip
command_timeout=60
connection_timeout=300
debug=0

啟動NRPE

# /usr/local/nagios/bin/nrpe -c /usr/local/nagios/etc/nrpe.cfg -d

為了便于NRPE服務的啟動，可以將如下內容定義為/etc/init.d/nrped腳本,用service nrped start 啟動：vim /etc/init.d/nrped

#!/bin/bash
# chkconfig: 2345 88 12
# description: NRPE DAEMON
NRPE=/usr/local/nagios/bin/nrpe
NRPECONF=/usr/local/nagios/etc/nrpe.cfg
case "$1" in
 start)
  echo -n "Starting NRPE daemon..."
  $NRPE -c $NRPECONF -d
  echo " done."
  ;;
 stop)
  echo -n "Stopping NRPE daemon..."
  pkill -u nagios nrpe
  echo " done."
 ;;
 restart)
  $0 stop
  sleep 2
  $0 start
  ;;
 *)
  echo "Usage: $0 start|stop|restart"
  ;;
 esac
exit 0

chmod +x /etc/init.d/nrped

基于NRPE的監控

配置允許遠程主機監控的對象

vim /usr/local/nagios/etc/nrpe.cfg

command[check_users]=/usr/local/nagios/libexec/check_users -w 5 -c 10

command[check_load]=/usr/local/nagios/libexec/check_load -w 15,10,5 -c 30,25,20

command[check_hda1]=/usr/local/nagios/libexec/check_disk -w 20% -c 10% -p /dev/hda1

command[check_zombie_procs]=/usr/local/nagios/libexec/check_procs -w 5 -c 10 -s Z

command[check_total_procs]=/usr/local/nagios/libexec/check_procs -w 150 -c 200

上面是系統自帶的，下面是添加的

command[check_rootdisk]=/usr/local/nagios/libexec/check_disk -w 20% -c 10% -p /
command[check_swap]=/usr/local/nagios/libexec/check_disk -w 40% -c 20%
command[check_sensors]=/usr/local/nagios/libexec/check_sensors
command[check_zombies]=/usr/local/nagios/libexec/check_procs -w 5 -c 10 -s Z
command[check_sda1]=/usr/local/nagios/libexec/check_disk -w 20% -c 10% -p /dev/sda1
command[check_sda3]=/usr/local/nagios/libexec/check_disk -w 20% -c 10% -p /dev/sda3
#對mysql監控：
command[check_mysql]=/usr/local/nagios/libexec/check_mysql -utest -ptest -s /var/lib/mysql/mysql.sock -H localhost
#為了監控mysql需要在被監控的mysql加授權
#create database test;
#grant select on test.* to test@localhost identified by "test";
#flush privileges;

因為我這里是sda1和sda3,磁盤檢測請添加自己的

# service nrped restart

再回到nagios服務端  定義配置

cd /usr/local/nagios/libexec

./check_nrpe -H 172.16.100.11 #測試一下

如果提示CHECK_NRPE: Socket timeout after 10 seconds. 那就把iptables的5666端口打開

/usr/local/nagios/libexec/check_nrpe -H 172.16.100.11 -c check_load

OK - load average: 1.55, 1.31, 1.30|load1=1.550;15.000;30.000;0; load5=1.310;10.000;25.000;0; load15=1.300;5.000;20.000;0; 

配置服務端

先定義命令  commands.cfg  

vim /usr/local/nagios/etc/objects/commands.cfg

在最后添加

define command{

 command_name check_nrpe

 command_line $USER1$/check_nrpe -H "$HOSTADDRESS$" -c $ARG1$

       }

再定義主機和服務

vim /usr/local/nagios/etc/objects/linuxhost.cfg  

define host{
        use                     linux-server
        host_name               my linux server
        alias                   mylinux server
        address                 172.16.100.11 #被監控端的ip
        }
define service{
        use                             generic-service
        host_name                       my linux server
        service_description             check users
        check_command                   check_nrpe!check_users
        }
define service{
        use                             generic-service
        host_name                       my linux server
        service_description             check load
        check_command                   check_nrpe!check_load
        }
define service{
        use                             generic-service
        host_name                       my linux server
        service_description             check zombie proce
        check_command                   check_nrpe!check_zombie_procs
        }
define service{
        use                             generic-service
        host_name                       my linux server
        service_description             check total proce
        check_command                   check_nrpe!check_total_procs
        }
define service{
        use                             generic-service
        host_name                       my linux server
        service_description             check rootdisk
        check_command                   check_nrpe!check_rootdisk
        }
define service{
        use                             generic-service
        host_name                       my linux server
        service_description             check swap
        check_command                   check_nrpe!check_swap
        }
define service{
        use                             generic-service
        host_name                       my linux server
        service_description             check sda1
        check_command                   check_nrpe!check_sda1
        }
define service{
        use                             generic-service
        host_name                       my linux server
        service_description             check sda3
        check_command                   check_nrpe!check_sda3
        }
define service{
        use                             generic-service
        host_name                       my linux server
        service_description             check mysql
        check_command                   check_nrpe!check_mysql
        }

vim /usr/local/nagios/etc/nagios.cfg  #添加剛才的配置文件

cfg_file=/usr/local/nagios/etc/objects/linuxhost.cfg

/usr/local/nagios/bin/nagios -v /usr/local/nagios/etc/nagios.cfg #檢查配置是否正確

service nagios restart

到網頁查看nagios

如果出現下面的提示，是說明iptables開啟了，不過開啟的是udp 5666端口，而不是tcp，這里需要開啟tcp的5666

[1416991726] Warning: Return code of 255 for check of service 'check total proce' on  host 'my linux server' was out of bounds