NAGIOS vs Windows perfomance counters

На виндовс клиенте установить NSClient++, в nsclient.ini добавить:
 
[/settings/NRPE/server]
; Undocumented key
allow arguments=1
allow nasty characters=true

[/settings/external scripts]
allow_nasty_meta_chars=1
allow nasty characters=true

В консоли nagios сервера, для проверки:

/usr/lib/nagios/plugins/check_nrpe -t 60 -H win0.domain.local -c  CheckCounter -a "Counter=\PhysicalDisk(_Total)\Disk Reads/sec"

OK: \PhysicalDisk(_Total)\Disk Reads/sec = 582|'\PhysicalDisk(_Total)\Disk Reads/secnone'=582;0;0

Список счетчиков смотреть в perfmon.exe Graph -> Properties->Data

В конфигурации nagios:

/etc/nagios-plugins/config/check_nrpe.cfg

#### windows

#perfomance checks

define command {

        command_name    check_win_perf

        command_line    /usr/lib/nagios/plugins/check_nrpe -t 60 -H $HOSTADDRESS$ -c CheckCounter -a "$ARG1$"

}

-----------------------

/etc/nagios3/conf.d/servers/windows/win0.domain.local.conf

define service{

        use                             stats-service

        host_name                 win0.domain.local

        service_description   Total Disk Reads:

        check_command       check_win_perf!Counter=\\PhysicalDisk\(_Total\)\\Disk\ Reads\/sec

        contact_groups          net_admins, nw_admins

        icon_image                arkoon/arkoon-service-harddisk.png

        }

линуксовое сообщество всегда на высоте.

Dear Maintainer,

i know, that you compiled without -enable-command-args and you wrote in the NEWS.Debian file, that you disabled it because there are security problems and that this feature is often used wrong.
Some people need this feature to manage monitoring parameters central. Your nrpe.cfg disables this feature by default (don't_blame_nrpe=0) and the features comment shows everyone, that enable it could be a security Problem.

For my opinion, disable this feature by default should be enough. If someone need this feature, he must compile his own nrpe server version. Maybe he need to do it on hundreds of Machines and he has to do it again, if the Debian Packet is updated. I don't think that Compile nrpe without this feature is a real security advantage because if someone need it, he will compile with this support except of only enable this feature.

I Agree with you, that this option could be a security risk, but it is possible to reduce the risk by setting allowed_hosts to restric who is able to communicate with nrpe.

It would be nice if you would compile with -enable-command-args again. It would give more flexibility how to use nrpe and all people who use command args wouldn't need to manage their own version of this packet.



https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=756479

Nagios:: check floating licenses

aka FlexLm

Перловый скрипт: https://exchange.nagios.org/directory/Plugins/License-Management/FlexLM/details

Скрипту нужен установленный lmutil, брать тут https://www.hex-rays.com/products/ida/support/flexlm/

nagios nrpe server

nrpe сервер с uptime-ом больше года штатно не завершается, конфиг не перечитывает.(отсыхает обработка сигналов?)
Сшибает глухого тока kill -9, примерно на 30% хостов.

Nagios 3 (Service check did not exit properly)

Выставить в nagios.cfg use_embedded_perl_implicitly=0

Мониторинг обновлений WSUS по snmp.

Набор из кастомной dll-ки и мелкого патча в реестре: http://thwack.solarwinds.com/docs/DOC-105263



--------------------------------------------------------------------------------
This APM template is a conversion/repack of submariner "WSUS statistics via snmp" Universal Device Poller (UDP). It's still dependent upon Markus Kã¶tter's custom DLL "WSUS_SNMP_Plugin.dll" which you should download and place into a newly created directory located at"C:\Program Files\wsussnmpagent" of your WSUS server.  Then copy/paste the text below into a new text file and save it as "Install.reg". Then double click on the "Install.reg" file and start/restart the Windows SNMP service.
--------------------------------------------------------------------------------

nagios: nrpe & check_mailq

На стороне сервера nagios:

define service{
        use                                generic-service
        host_name                    post1.domain.ru
        notification_interval     30
        service_description      SMTP Mail Queue Post1
        check_command           check_nrpe!check_mailq!200,800
}  

На клиенте, в файле: /etc/nagios/nrpe.cfg

command[check_mailq]=/usr/lib/nagios/plugins/check_mailq -w 200 -c 800 -M exim


По умолчанию в debian работать не будет, т.к. mailq из под учетки nagios не отрабатывает. Инетный разум советует вписать в команду sudo, что имхо есть дрэк и позор.

В /etc/group добавить nagios в почтовую группу, примерно так:
Debian-exim:x:102:clamav,nagios