icinga简明教程1—服务端安装配置

简介

icinga是nagios的二次开发包，说是原来的团队觉得nagios进展太慢了，然后跳出来开展了这个项目。

ICINGA-CN说明如下：

ICINGA项目是由Michael Luebben、HendrikB?cker和JoergLinge等人发起的，他们都是现有的Nagios项目社区委员会的成员，他们承诺，新的开源项 目将完全兼容以前的Nagios应用程序及扩展功能。在新项目的网站上，他们是如此定义ICINGA的，这将是一个介于Nagios社区版和企业版间的产
品。特别将致力于解决Nagios项目现在的问题，比如不能及时处理Nagios项目的bug、新功能不能及时添加等。还有在新的ICINGA项目中，将 更好的实现数据库集成方面的功能，标准化第三发应用程序的接口等。中文化项目是由Icinga中文化项目组，基于icinga(http://www.icinga.com)基础上，并在此基础上针对中文需求进行优化及修改，同时集成nagiosgraph或pnp4nagios绘图，包括简体中文、繁体中文（计划）,界面以及生成的图像都已中文化。

安装准备

安装以centos6.4为例，

#> yum install httpd gcc glibc glibc-common gd gd-devel
#> yum install libjpeg libjpeg-devel libpng libpng-devel

yum install mysql mysql-server \
libdbi libdbi-devel libdbi-drivers libdbi-dbd-mysql

下载最新版的icinga

http://sourceforge.net/projects/icinga-cn/files/icinga-cn/

备用：http://dl.vmall.com/c09kipj6x2

最新版是1.9，得到 icinga-cn-1.9.3.tar.bz2

添加用户,

useradd -m icinga

修改密码

#> passwd icinga

编译和安装Icinga(包括IDOUtils)

tar xvf icinga-cn-1.9.3.tar.bz2
cd icinga-cn-1.9.3
./configure

输出如下，

Creating sample config files in sample-config/ ...

Creating sample config files in module/idoutils/config/ ...
readline() on closed filehandle IN at subst line 22.

*** Configuration summary for icinga-core 1.9.3 07-07-2013 ***:

General Options:
-------------------------
Icinga executable:  icinga
Icinga user/group:  icinga,icinga
Command user/group:  icinga,icinga
Apache user/group:  apache,apache
Embedded Perl:  no
Event Broker:  yes
ido2db lockfile:  ${prefix}/var/ido2db.lock
ido sockfile:  ${prefix}/var/ido.sock
idomod tempfile:  ${prefix}/var/idomod.tmp
Build IDOUtils:  libdbi, instance_name=default
libdbi driver dir:  /usr/local/lib/dbd
Install ${prefix}:  /usr/local/icinga
Lock file:  ${prefix}/var/icinga.lock
Temp file:  /tmp/icinga.tmp
Chk file:  ${prefix}/var/icinga.chk
HTTP auth file:  ${prefix}/etc/htpasswd.users
Lib directory:  ${exec_prefix}/lib
Bin directory:  ${exec_prefix}/bin
Plugin directory:  ${exec_prefix}/libexec
Eventhandler directory:  ${exec_prefix}/libexec/eventhandlers
Log directory:  ${prefix}/var
Check result directory:  ${prefix}/var/spool/checkresults
Temp directory:  /tmp
State directory:  ${prefix}/var
Ext Cmd file directory:  ${prefix}/var/rw
Init directory:  /etc/rc.d/init.d
Apache conf.d directory:  /etc/httpd/conf.d
Apache config file:  /etc/httpd/conf.d/icinga.conf
Mail program:  /bin/mail
Host OS:  linux-gnu
Environment Prefix:  ICINGA_

Web Interface Options:
------------------------
HTML URL:  http://localhost/icinga/ CGI URL:  http://localhost/icinga/cgi-bin/ Main URL:  http://localhost/icinga/cgi-bin/tac.cgi 
Review the options above for accuracy.  If they look okay,
type 'make all' to compile the main program and CGIs.

确认无误后，输入

make all

输出如下：

*** Compile finished ***

If the main program and CGIs compiled without any errors, you
can continue with installing Icinga as follows (type 'make'
without any arguments for a list of all possible options):

make install
- This installs the main program (Icinga Core), CGIs
(Classical Web), and HTML files

make install-init
- This installs the init script in /etc/rc.d/init.d

make install-commandmode
- This installs and configures permissions on the
directory for holding the external command file

make install-idoutils
- This installs the database addon IDOUtils into the
destination directory

make install-config
- This installs *SAMPLE* config files in /usr/local/icinga/etc
You'll have to modify these sample files before you can
use Icinga.  Read the HTML documentation for more info
on doing this.  Pay particular attention to the docs on
object configuration files, as they determine what/how
things get monitored!

make install-webconf
- This installs the Apache config file and http auth file for
the Icinga Classic UI

*** Support Notes *******************************************

If you have questions about configuring or running Icinga,
please make sure that you:

- Look at the sample config files
- Read the HTML documentation in html/docs/

before you post a question to one of the mailing lists at http://www.icinga.org/support/ or at Icinga Portal: http://www.icinga-portal.org

执行：

#> make install
#> make install-init
#> make install-config
#> make install-eventhandlers
#> make install-commandmode
#> make install-idoutils

配置

如果您的数据库没有位于本机,您需要更改ido2db.cfg:

socket_type=tcp

启用idomod event broker 模块

cd /usr/local/icinga/etc/
mv modules/idoutils.cfg-sample modules/idoutils.cfg

数据库创建和IDOUtils

#> mysql -u root -p
mysql> CREATE DATABASE icinga;

GRANT USAGE ON icinga.* TO 'icinga'@'localhost'
IDENTIFIED BY 'icinga'
WITH MAX_QUERIES_PER_HOUR 0
MAX_CONNECTIONS_PER_HOUR 0
MAX_UPDATES_PER_HOUR 0;

GRANT SELECT, INSERT, UPDATE, DELETE, DROP, CREATE VIEW, INDEX, EXECUTE
ON icinga.* TO 'icinga'@'localhost';

FLUSH PRIVILEGES;

quit

导入数据库结构：
回到解压好的安装包目录

mysql -u root -p icinga < ./module/idoutils/db/mysql/mysql.sql

登录mysql看一下dbversion

mysql> select * from icinga_dbversion;
+--------------+----------+---------+---------------------+---------------------+
| dbversion_id | name     | version | create_time         | modify_time         |
+--------------+----------+---------+---------------------+---------------------+
|            1 | idoutils | 1.9.0   | 2013-11-07 13:52:33 | 2013-11-07 13:52:33 |
+--------------+----------+---------+---------------------+---------------------+

1.9.0,不用更新，如果需要更新

mysql -u root -p icinga < ./module/idoutils/db/mysql/upgrade/mysql-upgrade-1.9.0.sql

编辑DB配置文件自定义IDOUtils

vim /usr/local/icinga/etc/ido2db.cfg

db_servertype=mysql
db_port=3306
db_user=icinga
db_pass=icinga

默认就是这个用户名和密码

配置经典的Web界面，安装Icinga附带的经典web界面("CGIs")

#> make cgis
#> make install-cgis
#> make install-html

安装经典web配置文件到Apache的conf.d目录下.

#> make install-webconf

创建 icingaadmin 账户,登录到Icinga经典web界面.
记住您分配给这个帐户的密码 -稍后你会需要它.

#> htpasswd -c /usr/local/icinga/etc/htpasswd.users icingaadmin

如果你想改变用户密码，或添加另一个用户，请使用以下命令:

#> htpasswd /usr/local/icinga/etc/htpasswd.users <USERNAME>

启动icinga和ido2db

service ido2db start
service icinga start

配置开机启动

chkconfig ido2db on

chkconfig icinga on

登录：
http://yourdomain.com/icinga/
发现错误：

Internal Server Error

The server encountered an internal error or misconfiguration and was unable to complete your request.

查日志发现：

(13)Permission denied: exec of '/usr/local/icinga/sbin/tac.cgi' failed

关闭selinux

setenforce 0

重启httpd



上次监控是红色的，联不通，因为还没有安装用于监控的插件

安装插件：

http://sourceforge.net/projects/icinga-cn/files/icinga%20plugins/下载

nagios-cn-plugins-1.5.tar.bz2

tar xvf nagios-cn-plugins-1.5.tar.bz2
cd nagios-cn-plugins-1.5
./configure --prefix=/usr/local/icinga --with-package-name=icinga-plugins --with-cgiurl=/icinga/cgi-bin
#> make
#> make install

此步骤有时候会报错，建议下载icinga-cn-plugins-1.4.16.tar.bz2
如果下载的是icinga-cn-plugins-1.4.16.tar.bz2可直接不加参数

./configure
#> make
#> make install

安装check_nrpe 插件

下载icinga-nrpe-2.14.tar.gz

tar xvf icinga-nrpe-2.14.tar.gz
cd icinga-nrpe-2.14
./configure

报错：

configure: error: Cannot find ssl headers

安装ssl

yum install openssl openssl-devel.x86_64

重新configure,结果如下

*** Configuration summary for nrpe 2.14 12-21-2012 ***:
General Options:
-------------------------
NRPE port: 5666
NRPE user: icinga
NRPE group: icinga
Icinga user: icinga
Icinga group: icinga
Review the options above for accuracy. If they look okay,
type 'make all' to compile the NRPE daemon and client.

make安装即可,make all后结果

*** Compile finished ***

make install
- This installs files in /usr/local/icinga

make install-plugin
- This installs init-script files in /usr/local/icinga/libexec

make install-init
- This installs init-script files in /etc/init.d

make install-xinetd
- This installs sample-config/nrpe.xinetd in /etc/xinit.d

make install-init-freebsd
- This installs init-script.freebsd files in /etc/init.d

make install-init-debian
- This installs init-script.debian files in /etc/init.d

make install-init-suse
- This installs init-script.suse files in /etc/init.d

make install-daemon-config
- This installs the Nrpe config file in /usr/local/icinga/etc

安装即可

#> make all

#> make install-plugin

重新启动icinga ido2db服务，再次登录查看即可。

如果希望能够通过nrpe来监控服务端本机，可以安装nrpe的daemon

#> make install
#> make install-plugin
#> make install-daemon
#> make install-daemon-config
#> make install-init

配置文件地址：/usr/local/icinga/etc/nrpe.cfg

注意：allowed_hosts=127.0.0.1 可以多加一些，用逗号分割

按照实际环境 取消下面

command[check_users]= 等列，配置好参数，

command[check_users]=/usr/local/icinga/libexec/check_users -w 5 -c 10
command[check_load]=/usr/local/icinga/libexec/check_load -w 15,10,5 -c 30,25,20
command[check_hda1]=/usr/local/icinga/libexec/check_disk -w 20% -c 10% -p /dev/hda1
command[check_zombie_procs]=/usr/local/icinga/libexec/check_procs -w 5 -c 10 -s Z
command[check_total_procs]=/usr/local/icinga/libexec/check_procs -w 150 -c 200
command[check_ssh]=/usr/local/icinga/libexec/check_ssh -H localhost
command[check_swap]=/usr/local/icinga/libexec/check_swap -w 20% -c 10%
command[check_mysql]=/usr/local/icinga/libexec/check_mysql -H localhost -uroot -ptomcat2008
command[check_apache]=/usr/local/icinga/libexec/check_apachestatus -H localhost -p 80
command[check_ntp]=/usr/local/icinga/libexec/check_ntp -H localhost -w 0.5 -c 1
command[check_snmp]=/usr/local/icinga/libexec/check_snmp_service -H localhost -C monitor_energysh

启动服务

service icinga-nrpe start

测试nrpe是否安装成功

/usr/local/icinga/libexec/check_nrpe -H 127.0.0.1

参考：

icinga-cn安装配置手册：http://icinga-cn.sourceforge.net/quickstart-icinga-cn.html

官网地址：http://docs.icinga.org/