Icinga安装配置手册.docx

1、Icinga安装配置手册Icinga安装配置手册giser0622014-11-061 Icinga说明1.1 中文版地址中文版项目地址http:/icinga-下载地址1.2 官方安装指南Icinga with IDOUtils Quickstarthttp:/docs.icinga.org/1.4/en/quickstart-idoutils.htmlNRPEhttp:/docs.icinga.org/1.4/en/nrpe.html1.3 插件下载地址http:/exchange.nagios.org/directory/Plugins/System-Metrics1.4 实验环境操作系

2、统CentOS 6.5数据库MySQL2 监控主机服务器安装配置2.1 上传安装包和依赖包上传路径：/usr/local/softwares2.2 安装依赖包分为在线安装方式及离线安装2.2.1 在线安装执行命令，安装依赖：yum install httpd gcc glibc glibc-common gd gd-developenssl openssl-devellibjpeg libjpeg-devel libpng libpng-devel安装MySql：yum install mysql mysql-server libdbi libdbi-devel libdbi-drivers

3、libdbi-dbd-mysql2.2.2 离线安装进入到依赖包路径，执行命令：安装依赖：rpm -ivh apr-1.3.9-5.el6_2.x86_64.rpm apr-util-1.3.9-3.el6_0.1.x86_64.rpm apr-util-ldap-1.3.9-3.el6_0.1.x86_64.rpm cloog-ppl-0.15.7-1.2.el6.x86_64.rpm cpp-4.4.7-4.el6.x86_64.rpm e2fsprogs-1.41.12-18.el6_5.1.x86_64.rpm e2fsprogs-libs-1.41.12-18.el6_5.1.x86

4、_64.rpm fontconfig-devel-2.8.0-3.el6.x86_64.rpm freetype-devel-2.3.11-14.el6_3.1.x86_64.rpm gcc-4.4.7-4.el6.x86_64.rpm gd-devel-2.0.35-11.el6.x86_64.rpm glibc-2.12-1.132.el6_5.4.x86_64.rpm glibc-common-2.12-1.132.el6_5.4.x86_64.rpm glibc-devel-2.12-1.132.el6_5.4.x86_64.rpm glibc-headers-2.12-1.132.e

5、l6_5.4.x86_64.rpm httpd-2.2.15-31.el6.centos.x86_64.rpm httpd-tools-2.2.15-31.el6.centos.x86_64.rpm keyutils-libs-devel-1.4-4.el6.x86_64.rpm krb5-devel-1.10.3-15.el6_5.1.x86_64.rpm krb5-libs-1.10.3-15.el6_5.1.x86_64.rpm krb5-workstation-1.10.3-15.el6_5.1.x86_64.rpm libX11-devel-1.5.0-4.el6.x86_64.rp

6、m libXau-devel-1.0.6-4.el6.x86_64.rpm libXpm-devel-3.5.10-2.el6.x86_64.rpm libcom_err-1.41.12-18.el6_5.1.x86_64.rpm libcom_err-devel-1.41.12-18.el6_5.1.x86_64.rpm libjpeg-turbo-1.2.1-3.el6_5.x86_64.rpm libjpeg-turbo-devel-1.2.1-3.el6_5.x86_64.rpm libpng-devel-1.2.49-1.el6_2.x86_64.rpm libselinux-dev

7、el-2.0.94-5.3.el6_4.1.x86_64.rpm libsepol-devel-2.0.41-4.el6.x86_64.rpm libss-1.41.12-18.el6_5.1.x86_64.rpm libxcb-devel-1.8.1-1.el6.x86_64.rpm mailcap-2.1.31-2.el6.noarch.rpm mpfr-2.4.1-6.el6.x86_64.rpm openssl-1.0.1e-16.el6_5.15.x86_64.rpm openssl-devel-1.0.1e-16.el6_5.15.x86_64.rpm ppl-0.10.2-11.

8、el6.x86_64.rpm xorg-x11-proto-devel-7.6-25.el6.noarch.rpm zlib-devel-1.2.3-29.el6.x86_64.rpm force安装MySQL：rpm -ivh libdbi-0.8.3-4.el6.x86_64.rpm libdbi-dbd-mysql-0.8.3-5.1.el6.x86_64.rpm libdbi-devel-0.8.3-4.el6.x86_64.rpm libdbi-drivers-0.8.3-5.1.el6.x86_64.rpm mysql-5.1.73-3.el6_5.x86_64.rpm mysql

9、-libs-5.1.73-3.el6_5.x86_64.rpm mysql-server-5.1.73-3.el6_5.x86_64.rpm perl-DBD-MySQL-4.013-3.el6.x86_64.rpm perl-DBI-1.609-4.el6.x86_64.rpm -force2.3 添加icinga用户及用户组useradd -m icingapasswd icinga添加新用户组icinga-cmd，用于从icinga web界面中给icinga发送命令groupadd icinga-cmdusermod -a -G icinga-cmd icinga2.4 编译安装Ici

10、nga和IDOUtilscd /usr/local/softwarestar -xvf icinga-cn-1.4.0.tar.bz2cd icinga-cn-1.4.02.4.1 运行配置脚本启用idoutils和ssl./configure -with-command-group=icinga-cmd -enable-idoutils -enable-ssl2.4.2 编译make all2.4.3 安装分别执行下面的安装语句：make installmake install-initmake install-configmake install-commandmodemake insta

11、ll-idoutils或者直接全部安装：make fullinstall2.5 自定义配置一些简单的配置文件已经被被“make isntall-config”命令安装到目录“/usr/local/icinga/etc/”中。2.5.1 修改联系邮件地址vim /usr/local/icinga/etc/objects/contacts.cfgdefine contact contact_name icingaadmin ; Short name of user use generic-contact ; Inherit default values from generic-contact t

12、emplate (defined above) alias Icinga Admin ; Full name of user email liujianliang ; mysql -u root -p mysql CREATE DATABASE icinga CHARACTER SET utf8 COLLATE utf8_general_ci; GRANT USAGE ON *.* TO icingalocalhost IDENTIFIED BY icinga WITH MAX_QUERIES_PER_HOUR 0 MAX_CONNECTIONS_PER_HOUR 0 MAX_UPDATES_

13、PER_HOUR 0; GRANT SELECT , INSERT , UPDATE , DELETE ON icinga.* TO icingalocalhost; FLUSH PRIVILEGES ; quit2.6.5 导入表结构进入icinga安装目录下的module/idoutils/db/mysql目录cd /usr/local/softwares/icinga-cn-1.4.0/module/idoutils/db/mysql注意：修改mysql.sql脚本中的字符集为utf8，否则icinga_servicechecks表中的性能数据会乱码打开mysql.sql文件，全部替换l

14、atin1_general_cs为utf8_general_ci，全部替换latin1为utf8然后导入表结构mysql -u root -p icinga make cgis # make install-cgis # make install-html2.7.2 安装配置文件把icinga经典web界面配置文件安装到apache的conf.d目录中 # make install-webconf2.7.3 创建Icinga账号创建icinga经典web界面登录用户帐号：icingaadmin # htpasswd -c /usr/local/icinga/etc/htpasswd.users

15、 icingaadmin2.7.4 修改密码或者添加用户 # htpasswd /usr/local/icinga/etc/htpasswd.users 2.7.5 重启Apache，使生效service httpd restart2.8 编译安装Nagios插件2.8.1 解压cd/usr/local/softwarestar xvf icinga-nagios-cn-plugins-1.4.15.tar.bz2cd icinga-cn-plugins-1.4.15/2.8.2 编译安装 # ./configure -prefix=/usr/local/icinga -with-cgiurl

16、=/icinga/cgi-bin -with-htmurl=/icinga -with-nagios-user=icinga -with-nagios-group=icinga # make # make install 2.9 调整SELinux设置enforcing模式下，icinga运行会有问题，需要修改为permissive模式2.9.1 检查是否运行在enforcing模式# getenforce2.9.2 设置为permissive模式 # setenforce 02.9.3 修改系统默认设置修改/etc/selinux/config，并重启系统，就不用每次设置了vim /etc/

17、selinux/config修改为：SELINUX=permissive2.10 启动IDOUtils和Icinga注意：IDOUtils必须要在Icinga之前启动2.10.1 启动IDOUtils # service ido2db start2.10.2 停止IDOUtils # service ido2db stop2.10.3 验证Icinga配置文件 # /usr/local/icinga/bin/icinga -v /usr/local/icinga/etc/icinga.cfg如果没有错误，则可以启动Icinga2.10.4 启动Icinga # service icinga s

18、tart2.10.5 添加Icinga到系统服务，随系统启动而启动 # chkconfig -add icinga#chkconfig icinga on2.11 登录经典web界面http:/ip/icinga/如果不能访问，请关闭防火墙再试service iptables stop2.12 总结需要启动服务一览：service iptables stopservice httpd startservice mysqld startservice ido2db startservice icinga start2.13 监控主机安装NRPENRPE = Nagios Remote Plugi

19、n Executor，用于在远程服务器上监控并返回数据。2.13.1 安装依赖第22节已经安装过了2.13.2 解压tar zxvf icinga-nrpe-2.14.tar.gzcd icinga-nrpe-2.142.13.3 编译安装./configure -enable-sslmake allmake install-plugin2.13.4 第一次测试验证/usr/local/softwares/icinga-nrpe-2.14/src/nrpe -n-c/usr/local/softwares/icinga-nrpe-2.14/sample-config/nrpe.cfg -d/u

20、sr/local/icinga/libexec/check_nrpe -H 127.0.0.1 -n会输出NRPE的版本号，如：NRPE v2.14停止这个进程：kill ps -ef | grep sample-config/nrpe.cfg | grep -v grep | awk print $23 远程受控服务器安装配置3.1 安装依赖两种方式：在线安装、本地安装3.1.1 在线安装yum install httpd gcc glibc glibc-common gd gd-devel libjpeg libjpeg-devel libpng libpng-devel openssl

21、openssl-devel3.1.2 本地安装rpm -ivh apr-1.3.9-5.el6_2.x86_64.rpm apr-util-1.3.9-3.el6_0.1.x86_64.rpm apr-util-ldap-1.3.9-3.el6_0.1.x86_64.rpm cloog-ppl-0.15.7-1.2.el6.x86_64.rpm cpp-4.4.7-4.el6.x86_64.rpm e2fsprogs-1.41.12-18.el6_5.1.x86_64.rpm e2fsprogs-libs-1.41.12-18.el6_5.1.x86_64.rpm fontconfig-dev

22、el-2.8.0-3.el6.x86_64.rpm freetype-devel-2.3.11-14.el6_3.1.x86_64.rpm gcc-4.4.7-4.el6.x86_64.rpm gd-devel-2.0.35-11.el6.x86_64.rpm glibc-2.12-1.132.el6_5.4.x86_64.rpm glibc-common-2.12-1.132.el6_5.4.x86_64.rpm glibc-devel-2.12-1.132.el6_5.4.x86_64.rpm glibc-headers-2.12-1.132.el6_5.4.x86_64.rpm http

23、d-2.2.15-31.el6.centos.x86_64.rpm httpd-tools-2.2.15-31.el6.centos.x86_64.rpm keyutils-libs-devel-1.4-4.el6.x86_64.rpm krb5-devel-1.10.3-15.el6_5.1.x86_64.rpm krb5-libs-1.10.3-15.el6_5.1.x86_64.rpm krb5-workstation-1.10.3-15.el6_5.1.x86_64.rpm libX11-devel-1.5.0-4.el6.x86_64.rpm libXau-devel-1.0.6-4

24、.el6.x86_64.rpm libXpm-devel-3.5.10-2.el6.x86_64.rpm libcom_err-1.41.12-18.el6_5.1.x86_64.rpm libcom_err-devel-1.41.12-18.el6_5.1.x86_64.rpm libjpeg-turbo-1.2.1-3.el6_5.x86_64.rpm libjpeg-turbo-devel-1.2.1-3.el6_5.x86_64.rpm libpng-devel-1.2.49-1.el6_2.x86_64.rpm libselinux-devel-2.0.94-5.3.el6_4.1.

25、x86_64.rpm libsepol-devel-2.0.41-4.el6.x86_64.rpm libss-1.41.12-18.el6_5.1.x86_64.rpm libxcb-devel-1.8.1-1.el6.x86_64.rpm mailcap-2.1.31-2.el6.noarch.rpm mpfr-2.4.1-6.el6.x86_64.rpm openssl-1.0.1e-16.el6_5.15.x86_64.rpm openssl-devel-1.0.1e-16.el6_5.15.x86_64.rpm ppl-0.10.2-11.el6.x86_64.rpm xorg-x1

26、1-proto-devel-7.6-25.el6.noarch.rpm zlib-devel-1.2.3-29.el6.x86_64.rpm ksh-20120801-21.el6.1.x86_64.rpm -force3.2 添加icinga用户及用户组useradd -m icingapasswd icinga3.3 编译安装Nagios插件3.3.1 解压cd /usr/local/softwarestar xvf icinga-nagios-cn-plugins-1.4.15.tar.bz2cd icinga-cn-plugins-1.4.15/3.3.2 编译安装 # ./confi

27、gure -prefix=/usr/local/icinga -with-cgiurl=/icinga/cgi-bin -with-htmurl=/icinga -with-nagios-user=icinga -with-nagios-group=icinga # make # make install 3.4 编译安装NRPE3.4.1 解压tar zxvf icinga-nrpe-2.14.tar.gzcd icinga-nrpe-2.143.4.2 配置./configure -enable-sslmake all修改sample-config/nrpe.cfg，修改设置allowed_hosts=172.19.17.142，ip为Icinga服务器地址，多个地址用逗号隔开3.4.3 第二次测试在受控服务器上启动：/usr/loc