nagios用NRPE监控Linux主机服务端和客户端的安装配置
安装配置nagios服务端：
让客户满意是我们工作的目标，不断超越客户的期望值来自于我们对这个行业的热爱。我们立志把好的技术通过有效、简单的方式提供给客户，将通过不懈努力成为客户在信息化领域值得信任、有价值的长期合作伙伴，公司提供的服务项目有：域名申请、虚拟主机、营销软件、网站建设、灵山网站维护、网站推广。
安装前的准备工作
yum -y install httpd gcc glibc glibc-common gd gd-devel php php-MySQL mysql mysql-devel mysql-server groupadd nagcmd useradd -G nagcmd nagios passwd nagios usermod -a -G nagcmd apache
vim /etc/httpd/conf/httpd.conf
DirectoryIndex index.php index.html index.html.var #找到这一行，添加index.php
编译安装nagios：
wget http://prdownloads.sourceforge.net/sourceforge/nagios/nagios-4.0.5.tar.gz tar zxf nagios-4.0.5.tar.gz cd nagios-4.0.5 ./configure --with-command-group=nagcmd --enable-event-broker make all make install make install-init make install-commandmode make install-config
附：在解压的时候如果提示下面的错误，是因为系统时间不对
tar: nagios-4.0.5/xdata/xsddefault.c: time stamp 2014-04-12 02:37:42 is 250653.223481153 s in the future
tar: nagios-4.0.5/xdata/xsddefault.h: time stamp 2014-04-12 02:37:42 is 250653.223419364 s in the future
tar: nagios-4.0.5/xdata: time stamp 2014-04-12 02:37:42 is 250653.223359922 s in the future
修改系统时间
cp /usr/share/zoneinfo/Asia/Shanghai /etc/localtime
service ntpd stop
ntpdate asia.pool.ntp.org ; hwclock -w
需要在httpd的配置文件目录(conf.d)中生成Nagios的Web程序配置文件，继续在此编译安装目录输入一条命令：
# make install-webconf
创建一个登录nagios web程序的用户，这个用户帐号在以后通过web登录nagios认证时所用：
# htpasswd -c /usr/local/nagios/etc/htpasswd.users nagiosadmin #输入登陆nagios的密码
# service httpd restart
编译、安装nagios-plugins
nagios的所有监控工作都是通过插件完成的，因此，在启动nagios之前还需要为其安装官方提供的插件。http://exchange.nagios.org/directory/Plugins nagios插件链接
wget http://nagios-plugins.org/download/nagios-plugins-2.0.tar.gz tar zxf nagios-plugins-2.0.tar.gz cd nagios-plugins-2.0 ./configure --with-nagios-user=nagios --with-nagios-group=nagios make make install
配置并启动Nagios
# chkconfig --add nagios
# chkconfig nagios on
检查其主配置文件
# /usr/local/nagios/bin/nagios -v /usr/local/nagios/etc/nagios.cfg
# service nagios start
关闭selinux，
vim /etc/sysconfig/selinux 将其中的selinux后面的值“force”修改为“disable”或者
临时性的改动selinux也可以
# setenforce 0 # getenforce Permissive
或者将nagios的CGI程序运行于SELinux/targeted模式而不用关闭selinux：
# chcon -R -t httpd_sys_content_t /usr/local/nagios/sbin
# chcon -R -t httpd_sys_content_t /usr/local/nagios/share
通过web界面查看nagios：
http://your_nagios_IP/nagios
输入帐号和密码
这时候可以看到本机的服务状态，如果没有出现页面，请检查iptables的80端口是否开放
如果出现下面提示，说明是selinux的问题，setenforce 0即可
Internal Server Error The server encountered an internal error or misconfiguration and was unable to complete your request. Please contact the server administrator, root@localhost and inform them of the time the error occurred, and anything you might have done that may have caused the error. More information about this error may be available in the server error log.
安装NRPE，服务端需要自己的check_nrpe，和被监控端联系
下载页面
http://downloads.sourceforge.net/project/nagios/nrpe-2.x/nrpe-2.15/nrpe-2.15.tar.gz?r=&ts=1363788540&use_mirror=hivelocity
tar -zxvf nrpe-2.15.tar.gz cd nrpe-2.15 ./configure --with-nrpe-user=nagios \ --with-nrpe-group=nagios \ --with-nagios-user=nagios \ --with-nagios-group=nagios \ --enable-command-args \ --enable-ssl make all make install-plugin make install-daemon make install-daemon-config
如果./configure时候出现下面错误
checking for SSL headers... SSL headers found in /usr/local/ssl checking for SSL libraries... configure: error: Cannot find ssl libraries
则
# find /usr/ -name libssl.so /usr/local/ssl/lib/libssl.so # ./configure --with-nrpe-user=nagios --with-nrpe-group=nagios --with-nagios-user=nagios --with-nagios-group=nagios --enable-command-args --enable-ssl --with-ssl-lib=/usr/local/ssl/lib
安装配置被监控端：
yum -y install gcc glibc glibc-common gd gd-devel
或者
yum grouplist #检查 yum -y groupinstall "Development Tools" "Development Libraries"
添加nagios用户
useradd -s /sbin/nologin nagios tar zxf nagios-plugins-2.0.tar.gz cd nagios-plugins-2.0 ./configure --with-nagios-user=nagios --with-nagios-group=nagios --with-mysql=/usr/local/mysql make all make install
安装NRPE
下载页面
http://downloads.sourceforge.net/project/nagios/nrpe-2.x/nrpe-2.15/nrpe-2.15.tar.gz?r=&ts=1363788540&use_mirror=hivelocity
tar -zxvf nrpe-2.15.tar.gz cd nrpe-2.15 ./configure --with-nrpe-user=nagios \ --with-nrpe-group=nagios \ --with-nagios-user=nagios \ --with-nagios-group=nagios \ --enable-command-args \ --enable-ssl make all make install-plugin make install-daemon make install-daemon-config
注：如果./configure有下面提示，请 yum install openssl-devel
checking for SSL headers... SSL headers found in /usr/local/ssl
checking for SSL libraries... configure: error: Cannot find ssl libraries
配置NRPE
# vim /usr/local/nagios/etc/nrpe.cfg 找到相应的做修改
log_facility=daemon pid_file=/var/run/nrpe.pid server_address=172.16.100.11 #本机ip，本机提供nrpe服务，所以自己为服务端,此行需手动添加 server_port=5666 nrpe_user=nagios nrpe_group=nagios allowed_hosts=172.16.100.1 #监控端的ip command_timeout=60 connection_timeout=300 debug=0
启动NRPE
# /usr/local/nagios/bin/nrpe -c /usr/local/nagios/etc/nrpe.cfg -d
为了便于NRPE服务的启动，可以将如下内容定义为/etc/init.d/nrped脚本,用service nrped start 启动：vim /etc/init.d/nrped
#!/bin/bash # chkconfig: 2345 88 12 # description: NRPE DAEMON NRPE=/usr/local/nagios/bin/nrpe NRPECONF=/usr/local/nagios/etc/nrpe.cfg case "$1" in start) echo -n "Starting NRPE daemon..." $NRPE -c $NRPECONF -d echo " done." ;; stop) echo -n "Stopping NRPE daemon..." pkill -u nagios nrpe echo " done." ;; restart) $0 stop sleep 2 $0 start ;; *) echo "Usage: $0 start|stop|restart" ;; esac exit 0
chmod +x /etc/init.d/nrped
基于NRPE的监控
配置允许远程主机监控的对象
vim /usr/local/nagios/etc/nrpe.cfg
command[check_users]=/usr/local/nagios/libexec/check_users -w 5 -c 10
command[check_load]=/usr/local/nagios/libexec/check_load -w 15,10,5 -c 30,25,20
command[check_hda1]=/usr/local/nagios/libexec/check_disk -w 20% -c 10% -p /dev/hda1
command[check_zombie_procs]=/usr/local/nagios/libexec/check_procs -w 5 -c 10 -s Z
command[check_total_procs]=/usr/local/nagios/libexec/check_procs -w 150 -c 200
上面是系统自带的，下面是添加的
command[check_rootdisk]=/usr/local/nagios/libexec/check_disk -w 20% -c 10% -p / command[check_swap]=/usr/local/nagios/libexec/check_disk -w 40% -c 20% command[check_sensors]=/usr/local/nagios/libexec/check_sensors command[check_zombies]=/usr/local/nagios/libexec/check_procs -w 5 -c 10 -s Z command[check_sda1]=/usr/local/nagios/libexec/check_disk -w 20% -c 10% -p /dev/sda1 command[check_sda3]=/usr/local/nagios/libexec/check_disk -w 20% -c 10% -p /dev/sda3 #对mysql监控： command[check_mysql]=/usr/local/nagios/libexec/check_mysql -utest -ptest -s /var/lib/mysql/mysql.sock -H localhost #为了监控mysql需要在被监控的mysql加授权 #create database test; #grant select on test.* to test@localhost identified by "test"; #flush privileges;
因为我这里是sda1和sda3,磁盘检测请添加自己的
# service nrped restart
再回到nagios服务端 定义配置
cd /usr/local/nagios/libexec
./check_nrpe -H 172.16.100.11 #测试一下
如果提示CHECK_NRPE: Socket timeout after 10 seconds. 那就把iptables的5666端口打开
/usr/local/nagios/libexec/check_nrpe -H 172.16.100.11 -c check_load
OK - load average: 1.55, 1.31, 1.30|load1=1.550;15.000;30.000;0; load5=1.310;10.000;25.000;0; load15=1.300;5.000;20.000;0;
配置服务端
先定义命令 commands.cfg
vim /usr/local/nagios/etc/objects/commands.cfg
在最后添加
define command{
command_name check_nrpe
command_line $USER1$/check_nrpe -H "$HOSTADDRESS$" -c $ARG1$
}
再定义主机和服务
vim /usr/local/nagios/etc/objects/linuxhost.cfg
define host{
use linux-server
host_name my linux server
alias mylinux server
address 172.16.100.11 #被监控端的ip
}
define service{
use generic-service
host_name my linux server
service_description check users
check_command check_nrpe!check_users
}
define service{
use generic-service
host_name my linux server
service_description check load
check_command check_nrpe!check_load
}
define service{
use generic-service
host_name my linux server
service_description check zombie proce
check_command check_nrpe!check_zombie_procs
}
define service{
use generic-service
host_name my linux server
service_description check total proce
check_command check_nrpe!check_total_procs
}
define service{
use generic-service
host_name my linux server
service_description check rootdisk
check_command check_nrpe!check_rootdisk
}
define service{
use generic-service
host_name my linux server
service_description check swap
check_command check_nrpe!check_swap
}
define service{
use generic-service
host_name my linux server
service_description check sda1
check_command check_nrpe!check_sda1
}
define service{
use generic-service
host_name my linux server
service_description check sda3
check_command check_nrpe!check_sda3
}
define service{
use generic-service
host_name my linux server
service_description check mysql
check_command check_nrpe!check_mysql
}vim /usr/local/nagios/etc/nagios.cfg #添加刚才的配置文件
cfg_file=/usr/local/nagios/etc/objects/linuxhost.cfg
/usr/local/nagios/bin/nagios -v /usr/local/nagios/etc/nagios.cfg #检查配置是否正确
service nagios restart
到网页查看nagios
如果出现下面的提示，是说明iptables开启了，不过开启的是udp 5666端口，而不是tcp，这里需要开启tcp的5666
[1416991726] Warning: Return code of 255 for check of service 'check total proce' on host 'my linux server' was out of bounds
文章标题：nagios用NRPE监控Linux主机服务端和客户端的安装配置
网页网址：http://pwwzsj.com/article/peejjh.html
