wombat.ch

your Partner for Network Design and CMS

Software Information

Icinga2 | add OpnSense Check (check_opnsense)

| Written by vincent | Print | Email | Hits: 5992

Icinga2 | add OpnSense
for the spez Plugin path --> Icinga2 | (spez)Plugins | define path

# icinga2 daemon -C = (version: r2.9.1-1)

 step Icinga2 Master Action on the OPNSense device
go to [user Manager]
create a user icinga2
1 #   apt install -y python-enum34 python-requests
2 #  cd /usr/lib/nagios/pluginsCustom
#   mkdir opnsense
#   cd opnsense
wget https://raw.githubusercontent.com/nbuchwitz/check_opnsense/master/check_opnsense.py
  chmod +x check_opnsense.py      
  # icinga2 daemon -C      
  mkdir /etc/icinga2/conf.d/opnsense      
   vi /etc/icinga2/conf.d/opnsense/opnsene-update.conf object CheckCommand "check_opnsense-update" {

command = [ PluginCustomDir + "/opnsense/check_opnsense.py" ]

arguments = {
"-H" = "$opnsense_host$"
"--api-key" = "$opnsense_api_key$"
"--api-secret" = "$opnsense_api_secret$"
"-m" = "$opnsense_function$"
"-w" = "$opnsense_TRESHOLD_WARNING$"
"-c" = "$opnsense_TRESHOLD_CRITICAL$"
"-k" = "$opnsense_insecure$"
}

vars.opnsense_host = "10.147.42.7"
vars.opnsense_api_key = "key"
vars.opnsense_api_secret = "key"
vars.opnsense_function = "updates"
vars.opnsense_insecure = "-k"
}		    
         
  #  cd /etc/icinga2/zones.d/master/    open the file your host is defined      
 

vi   xxxxxx.conf

to check for update is Default 5 minutes not necessary
every hour is enough so check_interval to 1h

 9 object Service "check_opnsense" {
10 host_name = "opnsense.domain"
check_interval = 1h
11 check_command = "check_opnsense-update"
12 }		    
  # icinga2 daemon -C      
  #  systemctl restart icinga2      











-
-
-
-
-
uptime  snmpwalk -v2c -c public 10.147.42.7 iso.3.6.1.2.1.25.1.1.0 Timeticks: (63656350) 7 days, 8:49:23.50
   snmpwalk -v2c -c public 10.147.42.7 iso.3.6.1.2.1.1.1.0 STRING: "FreeBSD FW-03.kozo.ch 11.1-RELEASE-p11 FreeBSD 11.1-RELEASE-p11  21b4c8ea1d5(stable/18.7) amd64"
Hostname snmpwalk -v2c -c public 10.147.42.7 iso.3.6.1.2.1.1.5.0 STRING: "FW-03.kozo.ch"
     
     
     
     
     
     
    iso.3.6.1.4.1.2021.10.1.2.1 = STRING: "Load-1"
iso.3.6.1.4.1.2021.10.1.2.2 = STRING: "Load-5"
iso.3.6.1.4.1.2021.10.1.2.3 = STRING: "Load-15"
iso.3.6.1.4.1.2021.10.1.3.1 = STRING: "0.40"
iso.3.6.1.4.1.2021.10.1.3.2 = STRING: "0.52"
iso.3.6.1.4.1.2021.10.1.3.3 = STRING: "0.49"
     
    iso.3.6.1.2.1.31.1.1.1.1.2 = STRING: "igb1"
iso.3.6.1.2.1.31.1.1.1.2.2 = Counter32: 8742
iso.3.6.1.2.1.25.3.2.1.3.262146 = STRING: "network interface igb1"
    iso.3.6.1.2.1.31.1.1.1.1.1 = STRING: "igb0"
iso.3.6.1.2.1.31.1.1.1.2.1 = Counter32: 0
iso.3.6.1.2.1.25.3.2.1.3.262145 = STRING: "network interface igb0"
    iso.3.6.1.2.1.31.1.1.1.1.3 = STRING: "igb2"
iso.3.6.1.2.1.31.1.1.1.2.3 = Counter32: 0
iso.3.6.1.2.1.25.3.2.1.3.262147 = STRING: "network interface igb2"
    iso.3.6.1.2.1.31.1.1.1.1.8 = STRING: "ath0_wlan1"
iso.3.6.1.2.1.31.1.1.1.2.8 = Counter32: 0
iso.3.6.1.2.1.25.3.2.1.3.262152 = STRING: "network interface ath0_wlan1"
-
-
Source/Quellen:
-
- github.com/nbuchwitz/check_opnsense
- Formun Opnsense | API Information request
-
-
-
-
- Add a comment
Category: Icinga

Icinga2 | add Supermicro IPMI

| Written by vincent | Print | Email | Hits: 6406

Icinga2 | add Supermicro IPMI
for the spez Plugin path --> Icinga2 | (spez)Plugins | define path

working on Icinga2 (version: r2.9.1-1)



  Supermicro backend Add a user with some right 
user icinga2
pwd icinga24		  
       
 steps on Icinga2
       
  #   arp -n | grep 0c:c4:7a:ee:42:1c | awk '{print $1}' this is the IP of the IPMI Port (the Eth.Port has DHCP)  
       
  apt install -y libipc-run-perl    
       
  wget http://ftp.gnu.org/gnu/freeipmi/freeipmi-1.6.2.tar.gz
tar xzvf freeipmi-1.6.2.tar.gz
cd freeipmi-1.6.2
apt install -y build-essential libgcrypt11-dev
./configure
make
make install
ldconfig		    
       
 1 #   cd /usr/lib/nagios/pluginsCustom
#   wget  https://raw.githubusercontent.com/thomas-krenn/check_ipmi_sensor_v3/master/check_ipmi_sensor
#  chmod +x check_ipmi_sensor

 b  ./check_ipmi_sensor Can't locate IPC/Run.pm in @INC (you may need to install the IPC::Run module) (@INC contains: /etc/perl /usr/local/lib/x86_64-linux-gnu/perl/5.24.1 /usr/local/share/perl/5.24.1 /usr/lib/x86_64-linux-gnu/perl5/5.24 /usr/share/perl5 /usr/lib/x86_64-linux-gnu/perl/5.24 /usr/share/perl/5.24 /usr/local/lib/site_perl /usr/lib/x86_64-linux-gnu/perl-base) at ./check_ipmi_sensor line 35.
BEGIN failed--compilation aborted at ./check_ipmi_sensor line 35.
c  curl -L http://cpanmin.us | perl - -- App::cpanminus
cpanm --with-recommends --force IPC::Run		    
   ./check_ipmi_sensor    
       
       
       
  #    icinga2 daemon -C    
  #    systemctl reload icinga2    
  #    systemctl restart icinga2    
  #    multitail /var/log/icinga2/icinga2.log    
-
-
 
Source/Quellen:
-
-  thomas-krenn | IPMI Sensor Monitoring Plugin
- thomas-krenn | FreeIPMI
-  thomas-krenn | IPMI Konfiguration für Supermicro Systeme
-
-
-
-
-
-
-

modul-icinga-articlelist

 Add a comment
Category: Icinga

✔ Icinga2 | add NAS-Qnap (check_qnap3)

| Written by vincent | Print | Email | Hits: 7898
Icinga2 | add NAS-Qnap vor my old QNAP TS-212
for the spez Plugin path --> Icinga2 | (spez)Plugins | define path
working on Icinga2 (version: r2.9.1-1)


 steps on Icinga2    
 1 #   cd /usr/lib/nagios/pluginsCustom    
 2 #  mkdir check_qnap3    
 3 #  cd check_qnap3
#   cd /usr/lib/nagios/pluginsCustom/check_qnap3		    
 4 #  wget https://raw.githubusercontent.com/nikband/check_qnap3.sh/master/check_qnap3.sh    
 5 #  chmod +x  check_qnap3.sh    
 6  #  ./check_qnap3.sh 10.147.42.70 public systemuptime 0 0    
 7 #   cd /etc/icinga2/conf.d/nas-01    
       
       
 8 #  vi check_qnap3-sysinfo.conf
    
  object CheckCommand "check_qnap3-sysinfo" {

command = [ PluginCustomDir + "/check_qnap3/check_qnap3.sh" ]

arguments = {
"$ARG1$" = {
value = "$qnap_host$"
skip_key = true
}

"$ARG2$" = {
value = "$qnap_community$"
skip_key = true
}

"$ARG3$" = {
value = "$qnap_check$"
skip_key = true
}
"$ARG4$" = {
value = "$qnap_warning$"
skip_key = true
}
"$ARG5$" = {
value = "$qnap_critical$"
skip_key = true
}
}

vars.qnap_host = "$host.address$"
vars.qnap_community = "public"
vars.qnap_check = "sysinfo"
vars.qnap_warning = "0"
vars.qnap_critical = "0"
}		    
 9 #  cd /etc/icinga2/zones.d/    
 10 #  mkdir nas-01    
 11 #  cd nas
#  cd  /etc/icinga2/zones.d/nas-01		    
 12 # vi check_qnap3-sysinfo.conf    
  apply Service "check_qnap3-sysinfo" {
  import "generic-service"
  display_name = "QNAP - Sysinfo"
  check_command = "check_qnap3-sysinfo"
  assign where host.address && host.vars.os == "QNAP"
}		    
       
       
13 #   icinga2 daemon -C    
14 #   systemctl reload icinga2    
15 #   systemctl status icinga2    
16 #   multitail /var/log/icinga2/icinga2.log    
       
if it works      
  #   cd /etc/icinga2/conf.d/nas-01    
  #    cp workingfile.conf   newfile.conf      "and edit the new file"    
  #    cd  /etc/icinga2/zones.d/nas-01    
  #    cp workingfile.conf newfile.conf        "and edit the new file"    

 

 Error

   

 

 
./check_qnap3.sh 10.147.42.70 public sysinfo 0 0
./check_qnap3.sh 10.147.42.70 public systemuptime 0 0
./check_qnap3.sh 10.147.42.70 public volstatus 0 0
./check_qnap3.sh 10.147.42.70 public temp 0 0
./check_qnap3.sh 10.147.42.70 public cpu 0 0
./check_qnap3.sh 10.147.42.70 public freeram 0 0
./check_qnap3.sh 10.147.42.70 public diskused 0 0
./check_qnap3.sh 10.147.42.70 public hdstatus 0 0
./check_qnap3.sh 10.147.42.70 public fans 0 0



Source/Quellen:
- Githup check_qnap3
-
-
-
-
-
-
-
-
-
-

modul-icinga-articlelist

 Add a comment
Category: Icinga

Icinga2 | add FreeNAS

| Written by vincent | Print | Email | Hits: 5054
Icinga2 | add FreeNAS






Quelle/Source:
-
- exchange.icinga.com/6uellerBpanda/check_freenas
-
-
-
-
-

modul-icinga-articlelist

 Add a comment
Category: Icinga

Icinga2 | add Fritzbox 7490

| Written by vincent | Print | Email | Hits: 7873

Icinga2 | add Fritzbox 7490 (FRITZ!OS: 06.84)

the Steps i went...

0 on the Fritzbox Heimnetz -> Netzwerk, switch to the tab Netzwerkeinstellungen. Zugriff für Anwendungen zulassen and reboot the Fritbox
0 on the Fritzbox add a new Fritzbox user   System -> Fritz!Box-Benutzer  Name
Password
No email needed

FRITZ!Box Einstellungen_
Sprachnachrichten
Smart Home
0 Icinga  path of the plugins Icinga2 | Plugins | define path  -
2  Need curl and bc #  apt install -y curl
#  apt install -y bc
go to the path where 3part Plugins are #  cd /usr/lib/nagios/pluginsCustom
download the Plugin #  git clone https://github.com/mcktr/check_tr64_fritz  check_tr64_fritz
    chmod -R +x  check_tr64_fritz  
    #  cd check_tr64_fritz  
  check the open port #  ./getSecurityPort 10.147.42.1

Your Fritz!Box Security Port (for TR-064 over SSL) is: 49443
  
       
    # icinga2 daemon -C  
       
 

#  vi /etc/icinga2/conf.d/check_tlsr64_fritz/check_tlsr64_fritz-status.conf



#  cd /etc/icinga2/conf.d/check_tlsr64_fritz/

ls -alth                     to show all file

cp       to copy

 object CheckCommand "check_tr64_fritz-status" {

  command = [ PluginCustomDir + "/check_tr64_fritz/check_tr64_fritz" ]

  arguments = {
    "-h" = "$fritz_host$"
    "-p" = "$fritz_port$"
    "-u" = "$fritz_username$"
    "-P" = "$fritz_password$"
    "-f" = "$fritz_function$"
    "-w" = "$fritz_warning$"
    "-c" = "$fritz_critical$"
  }

  vars.fritz_host = "$address$"
  vars.fritz_port = "49443"
  vars.fritz_username = "dslf-config"
   vars.fritz_password ="password"
  vars.fritz_function = "status"
}		  
  #  vi /etc/icinga2/zones.d/master/router.conf
 1 object Host "router.domain" {
2 check_command = "hostalive" //check is executed on the master
3 display_name = "Fritzbox 7490"
4 address = "10.147.42.1"
5
6 vars.client_endpoint = name //follows the convention that host name == endpoint name
7 }
8
9 object Service "check_tr64_fritz" {
10 host_name = "router.domain"
//   check_interval = 15
11 check_command = "check_tr64_fritz-status"
12 }
13		  
       
       
       
  #   icinga2 daemon -C    
  #  systemctl restart icinga2    
       
 Information: //   check_interval = 15
if you remove // then the check will be all 15 seconds, think about if it makes sense (default is 5 Minutes) 

in my case for the 
downstreamrate
upstreamrate
it did make sense		    
ERROR on GUI

Plugin Output

execvpe(/usr/lib/nagios/pluginsCustom/check_tr64_fritz) failed: Permission denied		    
----
Quellen/Source:
- (2016) Fritz!Box 7490 check | nagios
- (2018) mcktr - Github | check_tr64_fritz
-
-
-
-
-
-
-
- Add a comment
Category: Icinga

Icinga2 | add Cisco Switch 3560 Familie

| Written by vincent | Print | Email | Hits: 5024

Icinga2 | add Cisco Switch 3560 Familie

 Switch Configuration Cisco SNMPv3 Setup
1. conf t
2. snmp-server group Snmpv3groupname v3 auth
3. snmp-server user Snmpv3user Snmpv3groupname v3 auth sha Snmpv3passwort
       
needed Software apt install -y libnet-snmp-perl libcrypt-hcesha-perl libcrypt-des-perl libdigest-hmac-perl libcrypt-rijndael-perl    
       
  70 object HostGroup "3560cg8p" {
71 display_name = "Cisco 3560CG 8 Port"
72
73 assign where host.vars.HW.cisco == "3560cg8p"
74 }
75
76 object HostGroup "3560-8p" {
77 display_name = "Cisco 3560 8 Port"
78 assign where host.vars.HW.cisco == "3560-8p"
79 }		    
       
       
Icinga Plugin      
   cd  /etc/icinga2/zones.d/master/03_SWT/    
  vi  check_cisco-c.conf
vi check_cisco-s_alg.conf
vi check_cisco-t.conf		    
       
       
       
       
       
       
       
  #   time icinga2 daemon -C    
  #   time systemctl reload icinga2    
  #   time systemctl restart icinga2    
       
       
-- - - -

 

 

Quellen(Source:
- consol labs | check_nwc_health
- Cisco Switch mit Icinga 2 und check_nwc_health mittels SNMPv3 abfragen
-
-
-
-
-
-
-
- Add a comment
Category: Icinga

show Version & Check's & nice icinga2 commands

| Written by vincent | Print | Email | Hits: 4643

Show Version of tools

Icinga2 Version #  icinga2 --version # icinga2 --version
icinga2 - The Icinga 2 network monitoring daemon (version: r2.6.0-1)

Copyright (c) 2012-2016 Icinga Development Team (https://www.icinga.org/)
License GPLv2+: GNU GPL version 2 or later <http://gnu.org/licenses/gpl2.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.

Application information:
Installation root: /usr
Sysconf directory: /etc
Run directory: /run
Local state directory: /var
Package data directory: /usr/share/icinga2
State path: /var/lib/icinga2/icinga2.state
Modified attributes path: /var/lib/icinga2/modified-attributes.conf
Objects path: /var/cache/icinga2/icinga2.debug
Vars path: /var/cache/icinga2/icinga2.vars
PID path: /run/icinga2/icinga2.pid

System information:
Platform: Debian GNU/Linux
Platform version: 9 (stretch)
Kernel: Linux
Kernel version: 4.9.0-6-amd64
Architecture: x86_64

Build information:
Compiler: GNU 6.2.1
Build host: amalia
  #  dpkg -l icinga*|grep ii  
  #  dpkg -l | grep icinga  
  #   icinga2 feature disable debuglog to be sure to have switched off debuglog
     
  #  apt-cache policy icinga2  
php #  php -v PHP 7.0.30-0+deb9u1 (cli) (built: Jun 14 2018 13:50:25) ( NTS )
Copyright (c) 1997-2017 The PHP Group
Zend Engine v3.0.0, Copyright (c) 1998-2017 Zend Technologies
with Zend OPcache v7.0.30-0+deb9u1, Copyright (c) 1999-2017, by Zend Technologies
MariaDB #  mariadb --version mariadb  Ver 15.1 Distrib 10.1.26-MariaDB, for debian-linux-gnu (x86_64) using readline 5.2
Apache2 #  apache2 -v Server version: Apache/2.4.25 (Debian)
Server built: 2018-03-31T08:47:16
carbon
Whisper
graphite-web		 #  pip list  
show Java Zulu #   dpkg --list | grep zulu  
show java Version #    java --version  
Add a comment
Category: Icinga

icinga2 Problems

| Written by vincent | Print | Email | Hits: 4338

icinga2 Problems

 Modul Graphite #174 (SOLVED) Composite Tooling Corporation 404 error
 Modul Graphite #175 difference Documentation and my system
Modul Graphite #176 on the View not allways the same time and no change on week, month, year    
     
     
     
     

 ---

 icinga2 feature enable debuglog icinga2 feature disable debuglog  
 multitail  /var/log/icinga2/debug.log    
 service icinga2 restart    
     
https://10.147.42.36:5665/v1/objects/services?service=NAS-01.kozo.ch!check_qnap3-sysinfo    
     
to makr it more readable jsonformatter.curiousconcept.com  
use ``` at the start and end to show it on the forum    
     
Quelle/Source:
-
-
-
-
- Add a comment
Category: Icinga

99_(solved) error after enter token

| Written by vincent | Print | Email | Hits: 4369

http://10.147.42.36/icingaweb2/setup 

#0 /usr/share/icingaweb2/library/vendor/Zend/Form.php(2280): Icinga\Web\Form\Element\CsrfCounterMeasure->isValid('341152815|56d5c...', Array)
#1 /usr/share/php/Icinga/Web/Form.php(1276): Zend_Form->isValid(Array)
#2 /usr/share/php/Icinga/Web/Wizard.php(279): Icinga\Web\Form->isValid(Array)
#3 /usr/share/icingaweb2/modules/setup/application/controllers/IndexController.php(44): Icinga\Web\Wizard->handleRequest()
#4 /usr/share/icingaweb2/library/vendor/Zend/Controller/Action.php(507): Icinga\Module\Setup\Controllers\IndexController->indexAction()
#5 /usr/share/php/Icinga/Web/Controller/Dispatcher.php(76): Zend_Controller_Action->dispatch('indexAction')
#6 /usr/share/icingaweb2/library/vendor/Zend/Controller/Front.php(937): Icinga\Web\Controller\Dispatcher->dispatch(Object(Icinga\Web\Request), Object(Icinga\Web\Response))
#7 /usr/share/php/Icinga/Application/Web.php(389): Zend_Controller_Front->dispatch(Object(Icinga\Web\Request), Object(Icinga\Web\Response))
#8 /usr/share/php/Icinga/Application/webrouter.php(109): Icinga\Application\Web->dispatch()
#9 /usr/share/icingaweb2/public/index.php(4): require_once('/usr/share/php/...')
#10 {main}

 

SOLVED: i just had to restart the Browser ;-) 

 

Quellen/Source
-  Icingaweb2 Fatal Error directly after installation on Ubuntu 18.04 #3459
-
-
-
- Add a comment
Category: Icinga
  1. Icinga config
  2. 90_(Solved) Icinga error: icinga2: Can't send external Icinga command to the local command file "/var/run/icinga2/cmd/icinga2.cmd": Permission denied.
  3. 01 ✔ Install graphite for incibaweb2 on Debian 9
  4. 02 Icinga2 Modul Director on Debian9
  5. Icinga2 | add Icinga2 Client to a Master (r2.9.0-1)
  6. Roundcube: Nachricht als Spam markieren
  7. Kolab and Debian Packaging Pitfalls
  8. Groklaw shutting down.
  9. Do cloud right: Four critical steps to selecting the provider for you
  10. MyKolab.com: Building the Open Source Cloud service that was missing
  11. Life post-PRISM: Politics and Power Struggles
  12. Kolab 3.1 alpha released with iRony
  13. Life post-PRISM: No More Business Secrets
  14. Kolab 3.0 – Kapitel2: erweiterte Konfiguration
  15. Kolab 3.0 – Kapitel1: Installation und Basiskonfig
  16. Using Kolab 3 with nginx
  17. The Post-PRISM Society: Totalitarian Clouds
  18. Status of Kolab 3 on openSUSE (2013, week 27)
  19. Welcome to the Post-PRISM Society: A primer.
  20. Kolab - How to integrate Dokuwiki
  21. Kolab - How to integrate Tiny Tiny RSS
  22. Kolab - How to integrate Piwik Web Analytics
  23. Resource Autocompletion in Roundcube
  24. Evaluating Free Software Groupware: Kolab
  25. Install nightly build from git.kolab.org master
  26. Planet - 6fd93dac710149b24df4f9fa201f9e31 - 2013-09-24-12-58-36
  27. Kolab - High CPU usage after adding a few aliases
  28. Kolab and national characters in the mail subject
  29. Kolab - Move personal data to the private server
  30. kolab 3.0 install on Centos 6.4
  31. Kolab 3 and Debian Wheezy - Small LDAP issue and quick fix
  32. Kolab 3 collaboration server on ubuntu
  33. Experimental Ubuntu Packages Ready for Testing
  34. SoHo Net
  35. Proxmox Basic SoHo Situation

last modified

Perfect Server

neusten Nachrichten

Hardware

lamp

RSS Feed


Warning: file_get_contents(): SSL operation failed with code 1. OpenSSL Error messages: error:0A000152:SSL routines::unsafe legacy renegotiation disabled in /var/www/clients/client2/web2/web/j/modules/mod_jw_srfr/helper.php on line 273

Warning: file_get_contents(): Failed to enable crypto in /var/www/clients/client2/web2/web/j/modules/mod_jw_srfr/helper.php on line 273

Warning: file_get_contents(https://tools.cisco.com/security/center/psirtrss20/CiscoSecurityAdvisory.xml): failed to open stream: operation failed in /var/www/clients/client2/web2/web/j/modules/mod_jw_srfr/helper.php on line 273

Warning: Invalid argument supplied for foreach() in /var/www/clients/client2/web2/web/j/modules/mod_jw_srfr/helper.php on line 39

neusten Links


Warning: count(): Parameter must be an array or an object that implements Countable in /var/www/clients/client2/web2/web/j/modules/mod_quicklistweblinks/helper.php on line 78
many More Links »

part of ...

Schweizer Informatik Gesellschaft SI
Linux Counter
Internet Society
swissIPv6Concil
Open Stand
Linux Counter

Disqus

 

Learning Network

Cisco Learning Network
Linux Professional Institute (LPI)

Seti@home & Boinc

myBonic

statistik

 

Who is Online

We have 501 guests and no members online

We have 503 guests, one bot and no members online

one bot:
1 x BOT for JCE

Designed by Vincent Kocher.