bug 412816: add nrpe daemon to production grade tinderboxen - basic nagios configs. r=rhelmer, patch=me
git-svn-id: svn://10.0.0.236/trunk@246722 18797224-902f-48f8-a5cc-f745e15eee43
This commit is contained in:
bhearsum%mozilla.com
parent
f062134582
commit
9decacd40c
104
mozilla/tools/nagios/NSC.ini
Normal file
104
mozilla/tools/nagios/NSC.ini
Normal file
@ -0,0 +1,104 @@
|
||||
;#############################################################################
|
||||
;# Stock Mozilla Build/Release nsc.ini - Windows
|
||||
;# Written by: Ben Hearsum
|
||||
;#
|
||||
;# Last Modified: 02-27-2008
|
||||
;#
|
||||
;# NOTES:
|
||||
;# This file generally lives as C:\Program Files\nscp\nsc.ini
|
||||
;#############################################################################
|
||||
|
||||
[modules]
|
||||
;# NSCLIENT++ MODULES
|
||||
;# A list with DLLs to load at startup.
|
||||
; You will need to enable some of these for NSClient++ to work.
|
||||
FileLogger.dll
|
||||
CheckSystem.dll
|
||||
CheckDisk.dll
|
||||
NRPEListener.dll
|
||||
SysTray.dll
|
||||
CheckEventLog.dll
|
||||
CheckHelpers.dll
|
||||
CheckWMI.dll
|
||||
|
||||
[Settings]
|
||||
password=
|
||||
|
||||
;# ALLOWED HOST ADDRESSES
|
||||
; This is a comma-delimited list of IP address of hosts that are allowed to talk to the all daemons.
|
||||
; If leave this blank anyone can access the deamon remotly (NSClient still requires a valid password).
|
||||
; The syntax is host or ip/mask so 192.168.0.0/24 will allow anyone on that subnet access
|
||||
allowed_hosts=10.2.71.20,127.0.0.1
|
||||
|
||||
;# USE THIS FILE
|
||||
; Use the INI file as opposed to the registry if this is 0 and the use_reg in the registry is set to 1
|
||||
; the registry will be used instead.
|
||||
use_file=1
|
||||
|
||||
[log]
|
||||
;# LOG DEBUG
|
||||
; Set to 1 if you want debug message printed in the log file (debug messages are always printed to stdout when run with -test)
|
||||
debug=0
|
||||
;
|
||||
;# LOG FILE
|
||||
; The file to print log statements to
|
||||
file=NSC.log
|
||||
;
|
||||
;# LOG DATE MASK
|
||||
; The format to for the date/time part of the log entry written to file.
|
||||
;date_mask=%Y-%m-%d %H:%M:%S
|
||||
|
||||
[Check System]
|
||||
;# CPU BUFFER SIZE
|
||||
; Can be anything ranging from 1s (for 1 second) to 10w for 10 weeks. Notice that a larger buffer will waste memory
|
||||
; so don't use a larger buffer then you need (ie. the longest check you do +1).
|
||||
;CPUBufferSize=1h
|
||||
;
|
||||
;# CHECK RESOLUTION
|
||||
; The resolution to check values (currently only CPU).
|
||||
; The value is entered in 1/10:th of a second and the default is 10 (which means ones every second)
|
||||
;CheckResolution=10
|
||||
;
|
||||
;# CHECK ALL SERVICES
|
||||
; Configure how to check services when a CheckAll is performed.
|
||||
; ...=started means services in that class *has* to be running.
|
||||
; ...=stopped means services in that class has to be stopped.
|
||||
; ...=ignored means services in this class will be ignored.
|
||||
;check_all_services[SERVICE_BOOT_START]=ignored
|
||||
;check_all_services[SERVICE_SYSTEM_START]=ignored
|
||||
;check_all_services[SERVICE_AUTO_START]=started
|
||||
;check_all_services[SERVICE_DEMAND_START]=ignored
|
||||
;check_all_services[SERVICE_DISABLED]=stopped
|
||||
|
||||
|
||||
[NRPE]
|
||||
port=5666
|
||||
;# COMMAND TIMEOUT
|
||||
; This specifies the maximum number of seconds that the NRPE daemon will allow plug-ins to finish executing before killing them off.
|
||||
command_timeout=15
|
||||
|
||||
;# COMMAND ARGUMENT PROCESSING
|
||||
; This option determines whether or not the NRPE daemon will allow clients to specify arguments to commands that are executed.
|
||||
allow_arguments=1
|
||||
|
||||
;# USE SSL SOCKET
|
||||
; This option controls if SSL should be used on the socket.
|
||||
;use_ssl=1
|
||||
|
||||
;# ALLOWED HOST ADDRESSES
|
||||
; This is a comma-delimited list of IP address of hosts that are allowed to talk to NRPE deamon.
|
||||
; If you leave this blank the global version will be used instead.
|
||||
;allowed_hosts=
|
||||
|
||||
;# SOCKET TIMEOUT
|
||||
; Timeout when reading packets on incoming sockets. If the data has not arrived withint this time we will bail out.
|
||||
;socket_timeout=30
|
||||
|
||||
|
||||
|
||||
[NRPE Handlers]
|
||||
check_load=inject checkCPU warn=$ARG1$ crit=$ARG2$ time=1m time=5m time=15m
|
||||
check_disk=inject CheckDriveSize MinWarnFree=$ARG1$ MinCritFree=$ARG2$ Drive=$ARG3$
|
||||
check_procs=inject checkCounter "Counter=\Objects\Processes" ShowAll MaxWarn=$ARG1$ MaxCrit=$ARG2$
|
||||
;# No way to check for a certain number of processes here
|
||||
check_buildbot=inject CheckProcState ShowAll python.exe=started
|
||||
198
mozilla/tools/nagios/nrpe-linux.cfg
Normal file
198
mozilla/tools/nagios/nrpe-linux.cfg
Normal file
@ -0,0 +1,198 @@
|
||||
#############################################################################
|
||||
# Stock Mozilla Build/Release nrpe.cfg - Linux
|
||||
# Written by: Ben Hearsum
|
||||
#
|
||||
# Last Modified: 02-27-2008
|
||||
#
|
||||
# NOTES:
|
||||
# This file generally lives as /etc/nagios/nrpe.cfg
|
||||
# It depends on the following packages (CentOS/RHEL names used):
|
||||
# * nagios-nrpe
|
||||
# * nagios-plugins
|
||||
# * nagios-plugins-nrpe
|
||||
#############################################################################
|
||||
|
||||
|
||||
# PID FILE
|
||||
# The name of the file in which the NRPE daemon should write it's process ID
|
||||
# number. The file is only written if the NRPE daemon is started by the root
|
||||
# user and is running in standalone mode.
|
||||
|
||||
pid_file=/var/run/nrpe.pid
|
||||
|
||||
|
||||
|
||||
# PORT NUMBER
|
||||
# Port number we should wait for connections on.
|
||||
# NOTE: This must be a non-priviledged port (i.e. > 1024).
|
||||
# NOTE: This option is ignored if NRPE is running under either inetd or xinetd
|
||||
|
||||
server_port=5666
|
||||
|
||||
|
||||
|
||||
# SERVER ADDRESS
|
||||
# Address that nrpe should bind to in case there are more than one interface
|
||||
# and you do not want nrpe to bind on all interfaces.
|
||||
# NOTE: This option is ignored if NRPE is running under either inetd or xinetd
|
||||
|
||||
#server_address=192.168.1.1
|
||||
|
||||
|
||||
|
||||
# NRPE USER
|
||||
# This determines the effective user that the NRPE daemon should run as.
|
||||
# You can either supply a username or a UID.
|
||||
#
|
||||
# NOTE: This option is ignored if NRPE is running under either inetd or xinetd
|
||||
|
||||
nrpe_user=nagios
|
||||
|
||||
|
||||
|
||||
# NRPE GROUP
|
||||
# This determines the effective group that the NRPE daemon should run as.
|
||||
# You can either supply a group name or a GID.
|
||||
#
|
||||
# NOTE: This option is ignored if NRPE is running under either inetd or xinetd
|
||||
|
||||
nrpe_group=nagios
|
||||
|
||||
|
||||
|
||||
# ALLOWED HOST ADDRESSES
|
||||
# This is an optional comma-delimited list of IP address or hostnames
|
||||
# that are allowed to talk to the NRPE daemon.
|
||||
#
|
||||
# Note: The daemon only does rudimentary checking of the client's IP
|
||||
# address. I would highly recommend adding entries in your /etc/hosts.allow
|
||||
# file to allow only the specified host to connect to the port
|
||||
# you are running this daemon on.
|
||||
#
|
||||
# NOTE: This option is ignored if NRPE is running under either inetd or xinetd
|
||||
|
||||
allowed_hosts=10.2.71.20,127.0.0.1
|
||||
|
||||
|
||||
|
||||
# COMMAND ARGUMENT PROCESSING
|
||||
# This option determines whether or not the NRPE daemon will allow clients
|
||||
# to specify arguments to commands that are executed. This option only works
|
||||
# if the daemon was configured with the --enable-command-args configure script
|
||||
# option.
|
||||
#
|
||||
# *** ENABLING THIS OPTION IS A SECURITY RISK! ***
|
||||
# Read the SECURITY file for information on some of the security implications
|
||||
# of enabling this variable.
|
||||
#
|
||||
# Values: 0=do not allow arguments, 1=allow command arguments
|
||||
|
||||
dont_blame_nrpe=1
|
||||
|
||||
|
||||
|
||||
# COMMAND PREFIX
|
||||
# This option allows you to prefix all commands with a user-defined string.
|
||||
# A space is automatically added between the specified prefix string and the
|
||||
# command line from the command definition.
|
||||
#
|
||||
# *** THIS EXAMPLE MAY POSE A POTENTIAL SECURITY RISK, SO USE WITH CAUTION! ***
|
||||
# Usage scenario:
|
||||
# Execute restricted commmands using sudo. For this to work, you need to add
|
||||
# the nagios user to your /etc/sudoers. An example entry for alllowing
|
||||
# execution of the plugins from might be:
|
||||
#
|
||||
# nagios ALL=(ALL) NOPASSWD: /usr/lib/nagios/plugins/
|
||||
#
|
||||
# This lets the nagios user run all commands in that directory (and only them)
|
||||
# without asking for a password. If you do this, make sure you don't give
|
||||
# random users write access to that directory or its contents!
|
||||
|
||||
# command_prefix=/usr/bin/sudo
|
||||
|
||||
|
||||
|
||||
# DEBUGGING OPTION
|
||||
# This option determines whether or not debugging messages are logged to the
|
||||
# syslog facility.
|
||||
# Values: 0=debugging off, 1=debugging on
|
||||
|
||||
debug=0
|
||||
|
||||
|
||||
|
||||
# COMMAND TIMEOUT
|
||||
# This specifies the maximum number of seconds that the NRPE daemon will
|
||||
# allow plugins to finish executing before killing them off.
|
||||
|
||||
command_timeout=60
|
||||
|
||||
|
||||
|
||||
# WEEK RANDOM SEED OPTION
|
||||
# This directive allows you to use SSL even if your system does not have
|
||||
# a /dev/random or /dev/urandom (on purpose or because the necessary patches
|
||||
# were not applied). The random number generator will be seeded from a file
|
||||
# which is either a file pointed to by the environment valiable $RANDFILE
|
||||
# or $HOME/.rnd. If neither exists, the pseudo random number generator will
|
||||
# be initialized and a warning will be issued.
|
||||
# Values: 0=only seed from /dev/[u]random, 1=also seed from weak randomness
|
||||
|
||||
#allow_weak_random_seed=1
|
||||
|
||||
|
||||
|
||||
# INCLUDE CONFIG FILE
|
||||
# This directive allows you to include definitions from an external config file.
|
||||
|
||||
#include=<somefile.cfg>
|
||||
|
||||
|
||||
|
||||
# INCLUDE CONFIG DIRECTORY
|
||||
# This directive allows you to include definitions from config files (with a
|
||||
# .cfg extension) in one or more directories (with recursion).
|
||||
|
||||
#include_dir=<somedirectory>
|
||||
#include_dir=<someotherdirectory>
|
||||
|
||||
|
||||
|
||||
# COMMAND DEFINITIONS
|
||||
# Command definitions that this daemon will run. Definitions
|
||||
# are in the following format:
|
||||
#
|
||||
# command[<command_name>]=<command_line>
|
||||
#
|
||||
# When the daemon receives a request to return the results of <command_name>
|
||||
# it will execute the command specified by the <command_line> argument.
|
||||
#
|
||||
# Unlike Nagios, the command line cannot contain macros - it must be
|
||||
# typed exactly as it should be executed.
|
||||
#
|
||||
# Note: Any plugins that are used in the command lines must reside
|
||||
# on the machine that this daemon is running on! The examples below
|
||||
# assume that you have plugins installed in a /usr/local/nagios/libexec
|
||||
# directory. Also note that you will have to modify the definitions below
|
||||
# to match the argument format the plugins expect. Remember, these are
|
||||
# examples only!
|
||||
|
||||
# The following examples use hardcoded command arguments...
|
||||
|
||||
command[check_load]=/usr/lib/nagios/plugins/check_load -w $ARG1$ -c $ARG2$
|
||||
command[check_users]=/usr/lib/nagios/plugins/check_users -w $ARG1$ -c $ARG2$
|
||||
command[check_disk]=/usr/lib/nagios/plugins/check_disk -w $ARG1$ -c $ARG2$ -p $ARG3$
|
||||
command[check_procs]=/usr/lib/nagios/plugins/check_procs -w $ARG1$ -c $ARG2$ -s $ARG3$
|
||||
# Adjust this to suit the number of buildbot processes running
|
||||
# Ex, 1:1 for 1 process, 2:2 for 2 processes, etc.
|
||||
command[check_buildbot]=/usr/lib/nagios/plugins/check_procs -w 2:2 -C buildbot
|
||||
|
||||
# The following examples allow user-supplied arguments and can
|
||||
# only be used if the NRPE daemon was compiled with support for
|
||||
# command arguments *AND* the dont_blame_nrpe directive in this
|
||||
# config file is set to '1'...
|
||||
|
||||
#command[check_users]=/usr/lib/nagios/plugins/check_users -w $ARG1$ -c $ARG2$
|
||||
#command[check_load]=/usr/lib/nagios/plugins/check_load -w $ARG1$ -c $ARG2$
|
||||
#command[check_disk]=/usr/lib/nagios/plugins/check_disk -w $ARG1$ -c $ARG2$ -p $ARG3$
|
||||
#command[check_procs]=/usr/lib/nagios/plugins/check_procs -w $ARG1$ -c $ARG2$ -s $ARG3$
|
||||
192
mozilla/tools/nagios/nrpe-mac.cfg
Normal file
192
mozilla/tools/nagios/nrpe-mac.cfg
Normal file
@ -0,0 +1,192 @@
|
||||
#############################################################################
|
||||
# Stock Mozilla Build/Release nrpe.cfg - Mac
|
||||
# Written by: Ben Hearsum
|
||||
#
|
||||
# Last Modified: 02-27-2008
|
||||
#
|
||||
# NOTES:
|
||||
# This file generally lives as /usr/local/nagios/etc/nrpe.cfg
|
||||
#############################################################################
|
||||
|
||||
# PID FILE
|
||||
# The name of the file in which the NRPE daemon should write it's process ID
|
||||
# number. The file is only written if the NRPE daemon is started by the root
|
||||
# user and is running in standalone mode.
|
||||
|
||||
pid_file=/var/run/nrpe.pid
|
||||
|
||||
|
||||
|
||||
# PORT NUMBER
|
||||
# Port number we should wait for connections on.
|
||||
# NOTE: This must be a non-priviledged port (i.e. > 1024).
|
||||
# NOTE: This option is ignored if NRPE is running under either inetd or xinetd
|
||||
|
||||
server_port=5666
|
||||
|
||||
|
||||
|
||||
# SERVER ADDRESS
|
||||
# Address that nrpe should bind to in case there are more than one interface
|
||||
# and you do not want nrpe to bind on all interfaces.
|
||||
# NOTE: This option is ignored if NRPE is running under either inetd or xinetd
|
||||
|
||||
#server_address=192.168.1.1
|
||||
|
||||
|
||||
|
||||
# NRPE USER
|
||||
# This determines the effective user that the NRPE daemon should run as.
|
||||
# You can either supply a username or a UID.
|
||||
#
|
||||
# NOTE: This option is ignored if NRPE is running under either inetd or xinetd
|
||||
|
||||
nrpe_user=nagios
|
||||
|
||||
|
||||
|
||||
# NRPE GROUP
|
||||
# This determines the effective group that the NRPE daemon should run as.
|
||||
# You can either supply a group name or a GID.
|
||||
#
|
||||
# NOTE: This option is ignored if NRPE is running under either inetd or xinetd
|
||||
|
||||
nrpe_group=nagios
|
||||
|
||||
|
||||
|
||||
# ALLOWED HOST ADDRESSES
|
||||
# This is an optional comma-delimited list of IP address or hostnames
|
||||
# that are allowed to talk to the NRPE daemon.
|
||||
#
|
||||
# Note: The daemon only does rudimentary checking of the client's IP
|
||||
# address. I would highly recommend adding entries in your /etc/hosts.allow
|
||||
# file to allow only the specified host to connect to the port
|
||||
# you are running this daemon on.
|
||||
#
|
||||
# NOTE: This option is ignored if NRPE is running under either inetd or xinetd
|
||||
|
||||
allowed_hosts=10.2.71.20,127.0.0.1
|
||||
|
||||
|
||||
|
||||
# COMMAND ARGUMENT PROCESSING
|
||||
# This option determines whether or not the NRPE daemon will allow clients
|
||||
# to specify arguments to commands that are executed. This option only works
|
||||
# if the daemon was configured with the --enable-command-args configure script
|
||||
# option.
|
||||
#
|
||||
# *** ENABLING THIS OPTION IS A SECURITY RISK! ***
|
||||
# Read the SECURITY file for information on some of the security implications
|
||||
# of enabling this variable.
|
||||
#
|
||||
# Values: 0=do not allow arguments, 1=allow command arguments
|
||||
|
||||
dont_blame_nrpe=1
|
||||
|
||||
|
||||
|
||||
# COMMAND PREFIX
|
||||
# This option allows you to prefix all commands with a user-defined string.
|
||||
# A space is automatically added between the specified prefix string and the
|
||||
# command line from the command definition.
|
||||
#
|
||||
# *** THIS EXAMPLE MAY POSE A POTENTIAL SECURITY RISK, SO USE WITH CAUTION! ***
|
||||
# Usage scenario:
|
||||
# Execute restricted commmands using sudo. For this to work, you need to add
|
||||
# the nagios user to your /etc/sudoers. An example entry for alllowing
|
||||
# execution of the plugins from might be:
|
||||
#
|
||||
# nagios ALL=(ALL) NOPASSWD: /usr/lib/nagios/plugins/
|
||||
#
|
||||
# This lets the nagios user run all commands in that directory (and only them)
|
||||
# without asking for a password. If you do this, make sure you don't give
|
||||
# random users write access to that directory or its contents!
|
||||
|
||||
# command_prefix=/usr/bin/sudo
|
||||
|
||||
|
||||
|
||||
# DEBUGGING OPTION
|
||||
# This option determines whether or not debugging messages are logged to the
|
||||
# syslog facility.
|
||||
# Values: 0=debugging off, 1=debugging on
|
||||
|
||||
debug=0
|
||||
|
||||
|
||||
|
||||
# COMMAND TIMEOUT
|
||||
# This specifies the maximum number of seconds that the NRPE daemon will
|
||||
# allow plugins to finish executing before killing them off.
|
||||
|
||||
command_timeout=60
|
||||
|
||||
|
||||
|
||||
# WEEK RANDOM SEED OPTION
|
||||
# This directive allows you to use SSL even if your system does not have
|
||||
# a /dev/random or /dev/urandom (on purpose or because the necessary patches
|
||||
# were not applied). The random number generator will be seeded from a file
|
||||
# which is either a file pointed to by the environment valiable $RANDFILE
|
||||
# or $HOME/.rnd. If neither exists, the pseudo random number generator will
|
||||
# be initialized and a warning will be issued.
|
||||
# Values: 0=only seed from /dev/[u]random, 1=also seed from weak randomness
|
||||
|
||||
#allow_weak_random_seed=1
|
||||
|
||||
|
||||
|
||||
# INCLUDE CONFIG FILE
|
||||
# This directive allows you to include definitions from an external config file.
|
||||
|
||||
#include=<somefile.cfg>
|
||||
|
||||
|
||||
|
||||
# INCLUDE CONFIG DIRECTORY
|
||||
# This directive allows you to include definitions from config files (with a
|
||||
# .cfg extension) in one or more directories (with recursion).
|
||||
|
||||
#include_dir=<somedirectory>
|
||||
#include_dir=<someotherdirectory>
|
||||
|
||||
|
||||
|
||||
# COMMAND DEFINITIONS
|
||||
# Command definitions that this daemon will run. Definitions
|
||||
# are in the following format:
|
||||
#
|
||||
# command[<command_name>]=<command_line>
|
||||
#
|
||||
# When the daemon receives a request to return the results of <command_name>
|
||||
# it will execute the command specified by the <command_line> argument.
|
||||
#
|
||||
# Unlike Nagios, the command line cannot contain macros - it must be
|
||||
# typed exactly as it should be executed.
|
||||
#
|
||||
# Note: Any plugins that are used in the command lines must reside
|
||||
# on the machine that this daemon is running on! The examples below
|
||||
# assume that you have plugins installed in a /usr/local/nagios/libexec
|
||||
# directory. Also note that you will have to modify the definitions below
|
||||
# to match the argument format the plugins expect. Remember, these are
|
||||
# examples only!
|
||||
|
||||
command[check_load]=/usr/local/nagios/plugins/check_load -w $ARG1$ -c $ARG2$
|
||||
command[check_disk]=/usr/local/nagios/plugins/check_disk -w $ARG1$ -c $ARG2$ -p $ARG3$
|
||||
command[check_users]=/usr/local/nagios/plugins/check_users -w $ARG1$ -c $ARG2$
|
||||
command[check_procs]=/usr/local/nagios/plugins/check_procs -w $ARG1$ -c $ARG2$ -s $ARG3$
|
||||
# Adjust this to suit the number of buildbot processes running
|
||||
# Ex, 1:1 for 1 process, 2:2 for 2 processes, etc.
|
||||
command[check_buildbot]=/usr/local/nagios/plugins/check_procs -w 1:1 -a /tools/buildbot/bin/buildbot
|
||||
command[check_appleraid]=/usr/local/nagios/plugins/check_appleraid
|
||||
|
||||
# The following examples allow user-supplied arguments and can
|
||||
# only be used if the NRPE daemon was compiled with support for
|
||||
# command arguments *AND* the dont_blame_nrpe directive in this
|
||||
# config file is set to '1'...
|
||||
|
||||
#command[check_users]=/usr/lib/nagios/plugins/check_users -w $ARG1$ -c $ARG2$
|
||||
#command[check_load]=/usr/lib/nagios/plugins/check_load -w $ARG1$ -c $ARG2$
|
||||
#command[check_disk]=/usr/lib/nagios/plugins/check_disk -w $ARG1$ -c $ARG2$ -p $ARG3$
|
||||
#command[check_procs]=/usr/lib/nagios/plugins/check_procs -w $ARG1$ -c $ARG2$ -s $ARG3$
|
||||
Loading…
x
Reference in New Issue
Block a user