Differences

This shows you the differences between two versions of the page.

--- docpublic:reseaux:services:monitor [2011/06/10 07:16]
PROCACCIA created
+++ docpublic:reseaux:services:monitor [2018/05/21 18:08] (current)
procacci@tem-tsp.eu [postfix]
@@ Line 5: / Line 5: @@
-%TOC%
+=====  Objectives and tools =====
----#   Objectives and tools
@@ Line 20: / Line 18: @@
-  Snmp
+=====  Snmp =====
-*=*=*=*
    Configure the snmp server through the ` snmpd.conf ' file and test.
----##   Configuration
+====  Configuration ====
-<<
+<code>
   $ vi /etc/snmp/snmpd.conf
@@ Line 72: / Line 69: @@
   syscontact Root <root@localhost> (configure /etc/snmp/snmp.local.conf)
->>
+</code>
-.2  Tests
+==== Tests ====
-==========
    Start the snmpd server and configure the system so that it start at
 reboot. (exp from RedHat commands !)
-<<
+<code>
   $ /etc/init.d/snmpd start
   Starting snmpd:                                            [  OK  ]
@@ Line 86: / Line 82: @@
   $ chkconfig --list | grep snmpd
   snmpd           0:off   1:off   2:off   3:on    4:on    5:on    6:off
->>
+</code>
   Use snmp tools to check that everything works fine.
-<<
+<code>
   $ snmpget -c secret -v 1 localhost .1.3.6.1.4.1.2021.10.1.5.1
   UCD-SNMP-MIB::laLoadInt.1 = INTEGER: 59
->>
+</code>
-  MRTG/RRD
+=====  MRTG/RRD =====
-*=*=*=*=*=*
-.1  Configuration
+====  Configuration ====
-==================
    Creation of a configuration file that creates the "targets" ->
 `Target[name]', followed by the 2 oids that we want to have on the same
@@ Line 109: / Line 101: @@
 -> http://people.ee.ethz.ch/~oetiker/webtools/mrtg/reference.html for
 details.
-<<
+<code>
   $ vi /etc/mrtg/corbeau.cfg
@@ Line 202: / Line 194: @@
   Options[tcp_established]: growright, integer, gauge, noinfo, nopercent
->>
+</code>
-.2  Launch
+==== Launch ====
-===========
   First launch:
-<<
+<code>
   $ /usr/bin/mrtg /etc/mrtg/corbeau.cfg
   $ ls -ltra /var/www/html/mrtg/serveur/corbeau/
@@ Line 225: / Line 216: @@
   -rw-r--r--    1 root     root        94660 Jan 14 11:27
 corbeaueth0.rrd
->>
+</code>
   Automatic launch every 5mn with cron:
-<<
+<code>
   $ cat /etc/cron.d/mrtg
 -59/5 * * * * root /usr/bin/mrtg /etc/mrtg/corbeau.cfg
->>
+</code>
   Check the content of rrd files.
-<<
+<code>
   $ rrdtool fetch corbeauload.rrd AVERAGE
   ....
@@ Line 243: / Line 234: @@
   1042540500: 1.6000000000e-01 2.0000000000e-01
   1042540800: nan nan
->>
+</code>
-.3  index HTML file
+==== index HTML file ====
-====================
   Creation of an index.html file, which will be the gate to the other
 (per target) graph files.
-<<
+<code>
   $ indexmaker /etc/mrtg/corbeau.cfg --output
 /var/www/html/mrtg/serveur/corbeau/index.html
->>
+</code>
-.4  cgi-bin file
+==== cgi-bin file ====
-=================
    Final display is made by default through the cgi-bin ` 14all.cgi '
 file, if we used the above `indexmaker' command. In that case the file
 has to be copied to the right destination, and configured to read the
 right mrtg file:
-<<
+<code>
   $ rpm -qli mrtg | grep 14all.cgi
   /usr/share/doc/mrtg-2.9.17/contrib/14all/14all.cgi
@@ Line 273: / Line 262: @@
   #$cfgfile = '/home/mrtg/mrtg.cfg';
   $cfgfile = '/etc/mrtg/corbeau.cfg';
->>
+</code>
-  Scripts for application datas
+=====  Scripts for application datas =====
-*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=
@@ Line 288: / Line 276: @@
-.1  back monitor
+==== back monitor ====
-=================
   Openldap configuration.
-<<
+<code>
   $ vi /etc/openldap/slapd.conf
@@ Line 300: / Line 287: @@
        by dn.subtree=dc=int-evry,dc=fr read
        by * none
->>
+</code>
   Test with openldap shell tools.
-<<
+<code>
   $ ldapsearch -x -b "cn=Total,cn=connections,cn=monitor" -D
 "cn=admin,dc=int-evry,dc=fr" -W description -LLL
@@ Line 309: / Line 296: @@
   dn: cn=Total,cn=Connections,cn=Monitor
   description: 95
->>
+</code>
-.2  Monitor Script
+====  Monitor Script ====
-===================
-  Vincent Mathieu (Vincent.Mathieu@univ-nancy2.fr) wrote a script that
+  Vincent Mathieu (Vincent.Mathieu AT univ-nancy2.fr) wrote a script that
 gets values from ldap queries on the monitor backend. I modified it to
 enable the retrieve of single value data to cope with MRTG/RRD witch
@@ Line 324: / Line 310: @@
   Example, console display of openldap stats, followed by a single value
 request example for mrtg (cf script header for details of usage)
-<<
+<code>
   $ /root/monitor-jp.pl
   TotConnexions : 99
@@ Line 344: / Line 330: @@
   $ /root/monitor-jp.pl 1 mrtg valTotConnexions
->>
+</code>
-.3  Monitor script for openldap 2.2.X
+==== Monitor script for openldap 2.2.X ====
-======================================
   The monitor database schema has change from 2.1.X to 2.2.X. A very
@@ Line 359: / Line 344: @@
-.3.1  Perl Pakages
+==== Perl Pakages ====
--------------------
    This new version of the monitor script includes an enhancement, it
 allows SALS authentificated connexions (optionnaly, just comment out the
 start-tls line), so it needs new perl packages
-<<
+<code>
   [root@corbeau ~]
   $ yum install perl-Authen-SASL perl-IO-Socket-SSL
@@ Line 372: / Line 356: @@
   Dep Installed:  perl-Net_SSLeay.pm 1.25-2.rhfc2.at.i386
 perl-Digest-HMAC 1.01-12.noarch perl-Digest-SHA1 2.07-4.i386
->>
+</code>
-.3.2  LdapSearch monitor database
+====  LdapSearch monitor database ====
-----------------------------------
   Here's an exemple of `ldapsearch' under 2.2.X
-<<
+<code>
   [root@corbeau /usr/local/openldap-2.2.17-1]
   $ ./etc/rc.d/init.d/ldap start
@@ Line 391: / Line 374: @@
   monitorOpInitiated: 39
   monitorOpCompleted: 38
->>
+</code>
-.3.3  Browse the monitor database with the script
+==== Browse the monitor database with the script ====
---------------------------------------------------
-<<
+<code>
   $ perl /tmp/monitor-jp-2.2.X.pl
   TotConnexions : 12
@@ Line 416: / Line 398: @@
   TotSearch : 54
   TotUnbind : 10
->>
+</code>
-.3.4  Search with mrtg output
+==== Search with mrtg output ====
-------------------------------
-<<
+<code>
   $ perl /tmp/monitor-jp-2.2.X.pl 1 mrtg valTotConnexions
->>
+</code>
-.4  Snmpd configuration
+===== Snmpd configuration =====
-========================
    Associate the script to snmpd
-<<
+<code>
   $ grep monitor-jp /etc/snmp/snmpd.conf
   exec monitor-jp.pl /usr/bin/perl /root/monitor-jp.pl 1 mrtg
@@ Line 442: / Line 422: @@
   Stopping snmpd:                                            [  OK  ]
   Starting snmpd:                                            [  OK  ]
->>
+</code>
-.5  MRTG configuration
+==== MRTG configuration ====
-=======================
    The first script `snmpd.conf' is accessible through the oid
 `.1.3.6.1.4.1.2021.8.1.101.1', the second with `...101.2', etc ...
-<<
+<code>
   $ snmpget -c secret -v 1 localhost .1.3.6.1.4.1.2021.8.1.101.1
   UCD-SNMP-MIB::extOutput.1 = STRING: 104
->>
+</code>
   Now we can define an ` MRTG  target' for these oids:
-<<
+<code>
   $ grep Slapd /etc/mrtg/corbeau.cfg
   Target[corbeauSlapdCx]: .1.3.6.1.4.1.2021.8.1.101.1\
@@ Line 471: / Line 450: @@
   Legend1[corbeauSlapdCx]: Connexions
   Legend2[corbeauSlapdCx]: Search
->>
+</code>
-  System configuration and packages used
+=====  snmp tools =====
-*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*
-   For information, here is the system configuration I used:
-.1  Fedora core 2
-==================
-<<
-  $ cat /etc/redhat-release
-  Fedora Core release 2 (Tettnang)
-  $ uname -a
-  Linux corbeau 2.6.7-1.494.2.2 #1 Tue Aug 3 09:39:58 EDT 2004 i686 i686
-i386 GNU/Linux
-  $ rpm -qa | egrep "mrtg|ldap|rrd|snmp"
-  openldap-2.2.17-1
-  net-snmp-5.1.1-2
-  openldap-servers-2.2.17-1
-  mrtg-2.10.5-3
-  net-snmp-utils-5.1.1-2
-  nss_ldap-217-1
-  openldap-clients-2.2.17-1
-  rrdtool-1.0.49-17.rhfc2.at
->>
-.2  Redhat 8
-=============
-<<
-  $ cat /etc/redhat-release
-  Red Hat Linux release 8.0 (Psyche)
-  $ uname -a
-  Linux corbeau.int-evry.fr 2.4.18-14 #1 Wed Sep 4 13:35:50 EDT 2002 \
-  i686 i686 i386 GNU/Linux
-  $ rpm -qa | egrep "mrtg|ldap|rrd|snmp"
-  nss_ldap-198-3
-  net-snmp-5.0.6-8.80.2
-  net-snmp-utils-5.0.6-8.80.2
-  openldap-servers-2.1.11-2
-  rrdtool-1.0.39-1.8.0
-  openldap-2.1.11-2
-  openldap-clients-2.1.11-2
-  php-ldap-4.2.2-8.0.5
-  openldap-devel-2.1.11-2
-  mrtg-2.9.17-8
->>
-  snmp tools
-*=*=*=*=*=*=*
    net-snmp shell commands can help to debug mrtg. For example, we can
 check snmp variable queries, check oids etc ...
-<<
+<code>
   $ snmpget -v1 -c secret corbeau \
   .iso.org.dod.internet.mgmt.mib-2.interfaces.ifTable.ifEntry.ifInOctets
@@ Line 559: / Line 485: @@
   cf man snmpcmd for common options to snmp* utils.
->>
+</code>
----## Contrib
+===== Contrib =====
 contrib sur le forum cacti a ce sujet  :
-http://forums.cacti.net/viewtopic.php?p=116900#116900
+  * http://forums.cacti.net/viewtopic.php?p=116900#116900
 On a donc un tracé des mailq complet et efficasse sur:
----## snmp translate tools cisco
+URL sur le forum cacti pour debuger
+  * http://forums.cacti.net/viewtopic.php?f=2&t=42720
+  * http://docs.cacti.net/manual:087:4_help.2_debugging
+  * http://docs.cacti.net/manual:087:3a_advanced_topics.1_data_input_methods#making_your_scripts_work_with_cacti
+===== snmp translate tools cisco =====
 http://tools.cisco.com/Support/SNMP/do/BrowseOID.do?local=en&translate=Translate&objectInput=1.3.6.1.4.1.9.9.166.1.19.1.1.13
+===== rrdtool ======
+il se peut qu'un datasource (fichier rrd) sature suivant la façon dont-il a été crée a verifier avec un rrdtool info nom_fichier_rrd
+j'avais posté a ce sujet sur le forum cacti http://forums.cacti.net/viewtopic.php?p=116900#116900
+extrait:
+I also had to modify the data-template for deferred and hold to increase the max number from 2000 to 20000 (x10 !)
+that increase is available for new data sources, but for previous one , you have to tune the rrd file, exemple:
+bash-3.1# rrdtool info smtp1_sodome_incoming_732.rrd | grep deferred
+ds[deferred].max = 2.0000000000e+03
+ds[deferred].last_ds = "14913"
+<code>
+bash-3.1# rrdtool tune smtp1_sodome_incoming_732.rrd --maximum deferred:20000
+bash-3.1# rrdtool info smtp1_sodome_incoming_732.rrd | grep deferred
+ds[deferred].max = 2.0000000000e+04
+ds[deferred].last_ds = "14746"
+ds[deferred].value = 1.4746000000e+04
+</code>
+Now it work for "long queues" .... !
+===== apache tomcat ======
+http://forums.cacti.net/about19744.html
+JMX
+http://forums.cacti.net/about32320.html
+===== Mysql =====
+  * http://forums.cacti.net/about6108.html
+  * http://www.percona.com/doc/percona-monitoring-plugins/1.0/cacti/mysql-templates.html
+recuperer l'archive ( mysql_stats.zip) et suivre le README.TXT en gros :
+<code>
+    autoriser l'acces "stat" sur mysql GRANT PROCESS ON * TO cactiuser@'cactihost.com' IDENTIFIED by 'cactipasswd';
+    ici au final
+    GRANT PROCESS ON *.* TO cactiuser@'mon.cactihost.fr' IDENTIFIED by 'secret';
+    charger les template xml via l'import de l'interface cacti
+    copier le script dans les scripts de cacti /usr/share/cacti/scripts/mysql_stats.php
+    enfin creer les graphs via l'interface web de cacti
+</code>
+==== postfix ====
+==== percona ====
+  * https://www.percona.com/doc/percona-monitoring-plugins/LATEST/cacti/installing-templates.html
+  * https://www.percona.com/doc/percona-monitoring-plugins/LATEST/cacti/ssh-based-templates.html
+recuperation des sources
+<code>
+[root@mon ~]# wget https://www.percona.com/downloads/percona-monitoring-plugins/percona-monitoring-plugins-1.1.8/binary/redhat/7/x86_64/percona-cacti-templates-1.1.8-1.noarch.rpm
+[root@mon ~]# rpm -Uvh percona-cacti-templates-1.1.8-1.noarch.rpm --nodeps
+Scripts are installed to /usr/share/cacti/scripts
+Templates are installed to /usr/share/cacti/resource/percona
+</code>
+avec la fonction d'import de cacti :
+<code>
+Cacti has imported the following items for the Template:
+CDEF
+[succès] Percona Turn Into Bits CDEF [nouveau]
+[succès] Percona Negate CDEF [updated]
+Table: cdef, Column: name, New Value: 'Percona Negate CDEF', Old Value: 'X Negate CDEF'
+[succès] Percona Disk Write Time per IO Request CDEF [nouveau]
+[succès] Percona Disk Write Time per IO Request Negate CDEF [nouveau]
+[succès] Percona Disk Read Time per IO Request CDEF [nouveau]
+GPRINT Preset
+[succès] Percona GNU/Linux Server Checksum 611ca2224c24387fc25a62daf58371a2 [nouveau]
+[succès] Percona GNU/Linux Server Version t1.1.8:s1.1.8 [nouveau]
+[succès] Percona Normal [updated]
+Table: graph_templates_gprint, Column: name, New Value: 'Percona Normal', Old Value: 'X Normal'
+Métode d'entrée
+[succès] Percona Get Proc Stats/Interrupts IM [nouveau]
+[succès] Percona Get Proc Stats/Context Switches IM [nouveau]
+[succès] Percona Get Proc Stats/Forks IM [nouveau]
+[succès] Percona Get Proc Stats/CPU Usage IM [nouveau]
+[succès] Percona Get W/Load Average IM [nouveau]
+[succès] Percona Get W/Number of Users IM [nouveau]
+[succès] Percona Get Memory/Memory IM [nouveau]
+[succès] Percona Get Disk Stats/Disk Operations IM [nouveau]
+[succès] Percona Get Disk Stats/Disk Sectors Read/Written IM [nouveau]
+[succès] Percona Get Disk Stats/Disk Read/Write Time (ms) IM [nouveau]
+[succès] Percona Get Disk Stats/Disk Read/Write Time per IO Request (ms) IM [nouveau]
+[succès] Percona Get Disk Stats/Disk Elapsed IO Time (ms) IM [nouveau]
+[succès] Percona Get Disk Stats/Disk IOPS IM [nouveau]
+[succès] Percona Get Disk Space/Disk Space IM [nouveau]
+[succès] Percona Get Network Traffic/Network Traffic IM [nouveau]
+[succès] Percona Get Network Errors/Network Errors IM [nouveau]
+[succès] Percona Get Network Connection States/Network Connection States IM [nouveau]
+[succès] Percona Get Swap Usage/Swap Usage IM [nouveau]
+Data Template
+[succès] Percona Interrupts DT [nouveau]
+[succès] Percona Context Switches DT [nouveau]
+[succès] Percona Forks DT [nouveau]
+[succès] Percona CPU Usage DT [nouveau]
+[succès] Percona Load Average DT [nouveau]
+[succès] Percona Number of Users DT [nouveau]
+[succès] Percona Memory DT [nouveau]
+[succès] Percona Disk Operations DT [nouveau]
+[succès] Percona Disk Sectors Read/Written DT [nouveau]
+[succès] Percona Disk Read/Write Time (ms) DT [nouveau]
+[succès] Percona Disk Read/Write Time per IO Request (ms) DT [nouveau]
+[succès] Percona Disk Elapsed IO Time (ms) DT [nouveau]
+[succès] Percona Disk IOPS DT [nouveau]
+[succès] Percona Disk Space DT [nouveau]
+[succès] Percona Network Traffic DT [nouveau]
+[succès] Percona Network Errors DT [nouveau]
+[succès] Percona Network Connection States DT [nouveau]
+[succès] Percona Swap Usage DT [nouveau]
+Modèle de graphique
+[succès] Percona Interrupts GT [nouveau]
+[succès] Percona Context Switches GT [nouveau]
+[succès] Percona Forks GT [nouveau]
+[succès] Percona CPU Usage GT [nouveau]
+[succès] Percona Load Average GT [nouveau]
+[succès] Percona Number of Users GT [nouveau]
+[succès] Percona Memory GT [nouveau]
+[succès] Percona Disk Operations GT [nouveau]
+[succès] Percona Disk Sectors Read/Written GT [nouveau]
+[succès] Percona Disk Read/Write Time (ms) GT [nouveau]
+[succès] Percona Disk Read/Write Time per IO Request (ms) GT [nouveau]
+[succès] Percona Disk Elapsed IO Time (ms) GT [nouveau]
+[succès] Percona Disk IOPS GT [nouveau]
+[succès] Percona Disk Space GT [nouveau]
+[succès] Percona Network Traffic GT [nouveau]
+[succès] Percona Network Errors GT [nouveau]
+[succès] Percona Network Connection States GT [nouveau]
+[succès] Percona Swap Usage GT [nouveau]
+Device Template
+[succès] Percona GNU/Linux Server HT [nouveau]
+</code>
+sur un client a monitorer
+[root@jap webapps]# useradd -u 1111 cacti
+[root@jap webapps]# passwd cacti
+Changement de mot de passe pour l'utilisateur cacti.
+Nouveau mot de passe : secret pass
+</code>
+on partage la clé ssh du serveur "mon" avec le client
+<code>
+[root@mon ~]# ssh-copy-id -i /etc/cacti/id_rsa.pub cacti@jap.int.fr
+</code>
+ouvrir le firewall sur le client
+<code>
+# firewall-cmd --permanent --add-rich-rule 'rule family="ipv4" source address="155.155.2.0/24" service name="snmp" log prefix="snmp-155.155.2.0/24" accept'
+# firewall-cmd --reload
+</code>
+et enable snmp au boot
+<code>
+# systemctl enable snmpd.service
+Created symlink from /etc/systemd/system/multi-user.target.wants/snmpd.service to /usr/lib/systemd/system/snmpd.service.
+</code>
+==== postfix ====
+scripts locaux
+<code>
+[root@sym1 snmp]# scp -r local-snmp-cronjob postfix-script-stats uloganalyser uloganalyser-plugin root@sym2.int.fr:/etc/snmp
+[root@sym1 cron.d]# scp local-snmp root@sym2.int.fr:/etc/cron.d/
+</code>
+repertoire dediés aux logs mail pour les scripts
+<code>
+[root@sym2]#  mkdir /var/local/snmp
+</code>
+===== php weathermap =====
+parallel link
+http://www.network-weathermap.com/articles/parallel

docpublic/reseaux/services/monitor.1307690216.txt.gz · Last modified: 2011/06/10 07:16 by PROCACCIA

Show page Old revisions

[unknown link type]Back to top