一、zabbix 5.0的安装过程
1.环境准备 准备两台虚拟机 关闭防火墙、selinux 并修改主机名
systemctl stop firewalld && setenforce 0
192.168.46.132 zabbix-server
192.168.46.140 zabbix-agent
根据官方文档部署:https://www.zabbix.com/cn/download?zabbix=5.0&os_distribution=centos&os_version=7&db=mysql&ws=nginx
2.安装Zabbix存储库
[root@zabbix-server ~]# rpm -Uvh https://repo.zabbix.com/zabbix/5.0/rhel/7/x86_64/zabbix-release-5.0-1.el7.noarch.rpm
[root@zabbix-server ~]# yum clean all
[root@zabbix-server ~]# yum makecache fast
3.安装安装Zabbix server,Web前端,agent 安装 Zabbix 前端
[root@zabbix-server ~]# yum -y install zabbix-server-mysql zabbix-agent
4.数据库安装并且对数据库进行配置 除了mariadb也可以使用mysql,使用mysql记得修改密码。
[root@zabbix-server ~]# yum -y install mysql mysql-server
[root@zabbix-server ~]# systemctl start mysqld
# 修改配置文件
[root@zabbix-server ~]#grep password /var/log/mysqld.log
2023-11-02T05:12:53.491367Z 1 [Note] A temporary password is generated for root@localhost: wp_)Yg>?Q49;
# 启动数据库
[root@zabbix-server ~]# systemctl start mysqld
# 更改数据库密码
[root@zabbix-server ~]# mysqladmin -uroot -p'wp_)Yg>?Q49;' password 'Qianfeng@123'
# 登录数据库
[root@zabbix-server ~]# mysql -uroot -p'Qianfeng@123'
# 进入数据库进行数据初始化
mysql> create database zabbix character set utf8 collate utf8_bin; # 创建zabbix数据库
mysql> grant all on zabbix.* to 'zabbix'@'%' identified by 'Qianfeng@123'; # 注意授权网段
mysql> set global log_bin_trust_function_creators = 1;
mysql> flush privileges; # 刷新授权
5.在Zabbix server主机上,导入初始模式和数据
[root@zabbix-server ~]# rpm -ql zabbix-server-mysql
/etc/logrotate.d/zabbix-server
/etc/zabbix/zabbix_server.conf
/usr/lib/systemd/system/zabbix-server.service
/usr/lib/tmpfiles.d/zabbix-server.conf
/usr/lib/zabbix/alertscripts
/usr/lib/zabbix/externalscripts
/usr/sbin/zabbix_server_mysql
/usr/share/doc/zabbix-server-mysql-5.0.39
/usr/share/doc/zabbix-server-mysql-5.0.39/AUTHORS
/usr/share/doc/zabbix-server-mysql-5.0.39/COPYING
/usr/share/doc/zabbix-server-mysql-5.0.39/ChangeLog
/usr/share/doc/zabbix-server-mysql-5.0.39/NEWS
/usr/share/doc/zabbix-server-mysql-5.0.39/README
/usr/share/doc/zabbix-server-mysql-5.0.39/create.sql.gz
/usr/share/doc/zabbix-server-mysql-5.0.39/double.sql
/usr/share/man/man8/zabbix_server.8.gz
/var/log/zabbix
/var/run/zabbix
[root@zabbix-server ~]# zcat /usr/share/doc/zabbix-server-mysql*/create.sql.gz | mysql -uzabbix -pQianfeng@123 zabbix
导入数据库模式后禁用 log_bin_trust_function_creators 选项。
[root@zabbix-server ~]# mysql -uroot -pQianfeng@123
mysql> set global log_bin_trust_function_creators = 0;
mysql> quit;
6.修改配置,启动服务
[root@zabbix-server ~]# cd /etc/zabbix
[root@zabbix-server zabbix]# ls
zabbix_agentd.conf zabbix_agentd.d zabbix_server.conf
[root@zabbix-server zabbix]# cp zabbix_server.conf{,.bak}
[root@zabbix-server zabbix]# vim zabbix_server.conf
ListenPort=10051 #默认监听端口
SourceIP=192.168.46.132 #发采样数据请求的IP
DBHost=192.168.46.132 #数据库对外的主机
DBName=zabbix #数据库名称
DBUser=zabbix #数据库用户
DBPassword=Qianfeng@123 #数据库密码
DBPort=3306 #数据库启动端口
[root@zabbix-server zabbix]# systemctl start zabbix-server.service
[root@zabbix-server zabbix]# ss -nutl |grep 10051
tcp LISTEN 0 128 *:10051 *:*
tcp LISTEN 0 128 [::]:10051 [::]:*
7.配置web GUI
[root@zabbix-server ~]# vim /etc/yum.repos.d/zabbix.repo
[zabbix-frontend] # 将这个软件源设置为启动 将检测改为0
...
enabled=1
gpgcheck=0
[root@zabbix-server ~]# yum install -y centos-release-scl
[root@zabbix-server ~]# yum install -y zabbix-web-mysql-scl zabbix-nginx-conf-scl
# php 位置: /etc/opt/rh/rh-php72
# nginx位置:/etc/opt/rh/rh-nginx116
# 修改php-fpm服务启动用户和时区
[root@zabbix-server ~]# vim /etc/opt/rh/rh-php72/php-fpm.d/zabbix.conf
[zabbix]
user = nginx
group = nginx
listen = /var/opt/rh/rh-php72/run/php-fpm/zabbix.sock
listen.acl_users = nginx
listen.allowed_clients = 127.0.0.1
php_value[date.timezone] = Asia/Shanghai
[root@zabbix-server ~]# chown .nginx /var/opt/rh/rh-php72/lib/php/session/
[root@zabbix-server ~]# chown nginx.nginx -R /etc/zabbix/web/
[root@zabbix-server ~]# vim /etc/opt/rh/rh-nginx116/nginx/nginx.conf
#将配置文件中的server模块删除掉
server {
...
} # 删除
# 启动服务
[root@zabbix-server ~]# systemctl restart zabbix-server zabbix-agent rh-nginx116-nginx rh-php72-php-fpm
[root@zabbix-server ~]# systemctl enable zabbix-server zabbix-agent rh-nginx116-nginx rh-php72-php-fpm
浏览器访问192.168.46.132
密码是Qianfeng@123
初始密码用户为:Admin zabbix
8.配置agent端
a. 安装 Zabbix yum源
[root@zabbix-agent ~]# rpm -Uvh https://repo.zabbix.com/zabbix/5.0/rhel/7/x86_64/zabbix-release-5.0-1.el7.noarch.rpm
[root@zabbix-agent ~]# yum clean all
b.安装 Zabbix agent
[root@zabbix-agent ~]# yum install -y zabbix-agent zabbix-sender
c.修改配置文件
[root@zabbix-agent ~]# cd /etc/zabbix/
[root@zabbix-agent zabbix]# ls
zabbix_agentd.conf zabbix_agentd.d
[root@zabbix-agent zabbix]# cp zabbix_agentd.conf{,.bak}
[root@zabbix-agent zabbix]# vim zabbix_agentd.conf
Server=192.168.46.132 #指明服务器是谁
ListenPort=10050 #自己监听的端口
ListenIP=0.0.0.0 #自己监听的地址,0.0.0.0表示本机所有地址
StartAgents=3 #优化时使用的
ServerActive=192.168.46.132 #主动监控时的服务器
Hostname=zabbix-agent #自己能被server端识别的名称
d.启动Zabbix agent 服务
[root@zabbix-agent ~]# systemctl restart zabbix-agent
[root@zabbix-agent ~]# systemctl enable zabbix-agent
二、邮箱告警流程
添加主机
添加监控项
添加触发器
添加报警媒介类型
添加动作
给用户添加报警媒介
测试
三、钉钉告警
在钉钉群内添加自定义机器人获取webhook和加签码
配置钉钉告警脚本
安装python依赖模块python-requests
[root@zabbix-server ~]# yum -y install install python3 python3-requests
配置钉钉告警配置脚本zabbix_ding.conf
首先在创建目录/etc/zabbix/创建zabbix_ding.conf 文件
[root@zabbix-server ~]# vim /etc/zabbix/zabbix_ding.conf
[config]
log_path=/var/log/zabbix/zabbix_ding.log
webhook=https://oapi.dingtalk.com/robot/send?access_token=c1d11ecf6704f008eb25de644ed5cead752c065c0d11f9f89b58273cf0c78a96
secret=SECc26e5bc55c64d454f15a8bdcce6825b7e5bb4f6fecc38025d2845837415192d7
在目录/var/log/zabbix中创建钉钉告警日志文件zabbix_ding.log
[root@zabbix-server ~]# touch /var/log/zabbix/zabbix_ding.log
设置钉钉告警日志文件zabbix_ding.log的所有权
[root@zabbix-server ~]# chown zabbix.zabbix /var/log/zabbix/zabbix_ding.log
配置钉钉告警执行脚本dingding.py
在zabbix_server.conf中配置告警脚本的路径
[root@zabbix-server ~]# vim /etc/zabbix/zabbix_server.conf
在zabbix_server.conf中配置告警脚本的路径
# AlertScriptsPath=/usr/lib/zabbix/alertscripts
我这里修改为
AlertScriptsPath=/usr/lib/zabbix/alertscripts
在/usr/lib/zabbix/alertscripts目录中执行的脚本dingding.py的内容
[root@zabbix-server ~]# cd /usr/lib/zabbix/alertscripts
[root@zabbix-server ~]# vim dingding.py
以下内容添加至dingding.py内
#!/usr/bin/env python3
# coding:utf8
#
import configparser
import os
import time
import hmac
import hashlib
import base64
import urllib.parse
import requests
import json
import sys
config = configparser.ConfigParser()
config.read('/etc/zabbix/zabbix_ding.conf', encoding='utf-8')
log_path = config.get('config', 'log_path')
api_url = config.get('config', 'webhook')
api_secret = config.get('config', 'secret')
log_time = time.strftime("%Y-%m-%d %H:%M:%S", time.localtime())
# 钉钉机器人文档说明
# https://ding-doc.dingtalk.com/doc#/serverapi2/qf2nxq
def get_timestamp_sign():
timestamp = str(round(time.time() * 1000))
secret = api_secret
secret_enc = secret.encode('utf-8')
string_to_sign = '{}\n{}'.format(timestamp, secret)
string_to_sign_enc = string_to_sign.encode('utf-8')
hmac_code = hmac.new(secret_enc, string_to_sign_enc, digestmod=hashlib.sha256).digest()
sign = urllib.parse.quote_plus(base64.b64encode(hmac_code))
return timestamp, sign
# 获取加签后的链接
def get_signed_url():
timestamp, sign = get_timestamp_sign()
webhook = api_url + "×tamp=" + timestamp + "&sign=" + sign
return webhook
# 定义消息模式
def get_webhook(mode):
if mode == 0: # only 关键字
webhook = api_url
elif mode == 1 or mode == 2: # 关键字和加签 或 # 关键字+加签+ip
webhook = get_signed_url()
else:
webhook = ""
print("error! mode: ", mode, " webhook : ", webhook)
return webhook
def get_message(text, user_info):
# 和类型相对应,具体可以看文档 :https://ding-doc.dingtalk.com/doc#/serverapi2/qf2nxq
# 可以设置某个人的手机号,指定对象发送
message = {
"msgtype": "text", # 有text, "markdown"、link、整体跳转ActionCard 、独立跳转ActionCard、FeedCard类型等
"text": {
"content": text # 消息内容
},
"at": {
"atMobiles": [
user_info,
],
"isAtAll": False # 是否是发送群中全体成员
}
}
return message
# 消息发送日志
def log(info):
if os.path.exists(log_path):
log_file = open(log_path, "a+")
else:
log_file = open(log_path, "w+")
log_file.write(info)
def send_ding_message(text, user_info):
# 请求的URL,WebHook地址
# 主要模式有 0 : 关键字 1:# 关键字 +加签 3:关键字+加签+IP
webhook = get_webhook(1)
# 构建请求头部
header = {
"Content-Type": "application/json",
"Charset": "UTF-8"
}
# 构建请求数据
message = get_message(text, user_info)
# 对请求的数据进行json封装
message_json = json.dumps(message)
# 发送请求
info = requests.post(url=webhook, data=message_json, headers=header).json()
code = info["errcode"]
errmsg = info["errmsg"]
if code == 0:
log(log_time + ":消息已发送成功 返回信息:%s %s\n" % (code, errmsg))
else:
log(log_time + ":消息发送失败 返回信息:%s %s\n" % (code, errmsg))
print(log_time + ":消息发送失败 返回信息:%s %s\n" % (code, errmsg))
exit(3)
if __name__ == "__main__":
text = sys.argv[3]
user_info = sys.argv[1]
send_ding_message(text, user_info)
设置脚本目录的所有权
[root@zabbix-server ~]# chown -R zabbix.zabbix /usr/lib/zabbix/alertscripts/
给脚本x权限后测试
[root@zabbix-server ~]# chmod +x dingding.py
[root@zabbix-server ~]# ./dingding.py user subject mesages
配置脚本告警
创建媒介
告警-->媒介-->创建媒介类型
报警媒介类型
为用户添加报警媒介
创建动作
测试