日志监控系统搭建linux,Linux 搭建Zabbix监控

搭建Zabbix监控

一,搭建Zabbix监控 服务器 192.168.4.21

1.1 部署服务运行环境 (LAMP/LNMP)

1.2 安装zabbix 软件(源码)

软件包:

zabbix-3.2.3.tar.gz

php-bcmath-5.4.45-13.el7.remi.x86_64.rpm

php-mbstring-5.4.45-13.el7.remi.x86_64.rpm

1.2.1 安装准备

# yum -y install gcc gcc-c++//安装编译工具

# rpm -q gcc gcc-c++

gcc-4.8.5-4.el7.x86_64

gcc-c++-4.8.5-4.el7.x86_64

# useradd zabbix//创建运行帐号

1.2.2 安装Zabbix

# tar -zxf zabbix-3.2.3.tar.gz

# cd zabbix-3.2.3/

# ./configure --help

--prefix=PREFIX         install architecture-independent files in PREFIX

[/usr/local]

--enable-server         Turn on build of Zabbix server

--enable-agent          Turn on build of Zabbix agent and client utilities

--with-mysql[=ARG]      use MySQL client library [default=no], optionally

specify path to mysql_config

# ./configure --prefix=/usr/local/zabbix --enable-server --enable-agent --with-mysql

...

Now run 'make install'

...

# make install

# ls /usr/local/zabbix/

bin  etc  lib  sbin  share

1.2.3 做初始化配置

# cp -r frontends/php/ /var/www/html/zabbix

# ls /var/www/html/zabbix/

# mysql -uroot -p123456

MariaDB [(none)]> create database zabbixdb;

MariaDB [(none)]> grant all on zabbixdb.* to zabbixuser@'localhost' identified by '123456';

# cd /root/zabbix/zabbix-3.2.3/database/mysql/

# ls

data.sql  images.sql  schema.sql

# mysql -uzabbixuser -p123456 zabbixdb < schema.sql

# mysql -uzabbixuser -p123456 zabbixdb < images.sql

# mysql -uzabbixuser -p123456 zabbixdb < data.sql

# firefox http://192.168.4.21/zabbix

a2b0b57df7c0eb6239d7a13ff4326bf7.png

56677e652484b01bda58211f7aeb2d9c.png

# vim /etc/php.ini

672 post_max_size = 16M

384 max_execution_time = 300

394 max_input_time = 300

87566b0169507f156c2e397f5263a03b.png

e19bfb28f12139158dc4a0a8d41c899d.png

# yum list | grep -i php-gd

php-gd.x86_64                           5.4.16-36.el7_1            dvd

# yum -y install php-gd.x86_64

# yum list | grep -i php-xml

php-xml.x86_64                          5.4.16-36.el7_1            dvd

php-xmlrpc.x86_64                       5.4.16-36.el7_1            dvd

# yum -y install php-xml

# rpm -ivh --nodeps php-mbstring-5.4.45-13.el7.remi.x86_64.rpm

# rpm -ivh --nodeps php-bcmath-5.4.45-13.el7.remi.x86_64.rpm

2139d40c3f1c7ca208c49db1365ab821.png

b7d409d7d3ee0014d1d2ea6a24f11cf8.png

faf59ce1546bb42d289bc09807b8d1f6.png

26beb603c69fa4f9001ee5b128969fe4.png

# chmod o+w /var/www/html/zabbix/conf

# ls /var/www/html/zabbix/conf

maintenance.inc.php  zabbix.conf.php  zabbix.conf.php.example

# cat /var/www/html/zabbix/conf/zabbix.conf.php

// Zabbix GUI configuration file.

global $DB;

$DB['TYPE']     = 'MYSQL';

$DB['SERVER']   = 'localhost';

$DB['PORT']     = '0';

$DB['DATABASE'] = 'zabbixdb';

$DB['USER']     = 'zabbixuser';

$DB['PASSWORD'] = '123456';

// Schema name. Used for IBM DB2 and PostgreSQL.

$DB['SCHEMA'] = '';

$ZBX_SERVER      = '192.168.4.21';

$ZBX_SERVER_PORT = '10051';

$ZBX_SERVER_NAME = 'monitor_server';

$IMAGE_FORMAT_DEFAULT = IMAGE_FORMAT_PNG;

5a7660b284a59c075270d63c85ce2c38.png

登录管理页面

初始用户名 admin  初始密码 zabbix

03e57ad11bc21c445c0ed9fb490e2705.png

软件使用 :修改语言 修改管理员登录密码 监控模版 监控主机

cc602fb88bd85f20df6642dcc1e378ca.png

27f77f96afe4b71ec49c676c46d64325.png

4687ae65b3c89aadb6e3aed71abc9171.png

5439c5062ba612c79384646d82b4aece.png

7a6c97d1c83ebc639c062a0f73eeb6b2.png

1.2.4 修改配置文件

# vim /usr/local/zabbix/etc/zabbix_server.conf

38 LogFile=/tmp/zabbix_server.log//日志 记录启动信息

87 DBName=zabbixdb

103 DBUser=zabbixuser

111 DBPassword=123456

# cp /root/zabbix/zabbix-3.2.3/misc/init.d/fedora/core/zabbix_server /etc/init.d/

# chmod +x /etc/init.d/zabbix_server

# sed -i '22s;/usr/local;/usr/local/zabbix;' /etc/init.d/zabbix_server

# sed -n '22p' /etc/init.d/zabbix_server

BASEDIR=/usr/local/zabbix/

1.2.5 启动服务

# chkconfig --add zabbix_server

# chkconfig --list zabbix_server

# systemctl start zabbix_server

# systemctl status zabbix_server

# systemctl enable zabbix_server

# netstat -pantu | grep :10051

tcp        0      0 0.0.0.0:10051           0.0.0.0:*               LISTEN      29635/zabbix_server

tcp        0      0 192.168.4.21:40338      192.168.4.21:10051      TIME_WAIT   -

tcp        0      0 192.168.4.21:40337      192.168.4.21:10051      TIME_WAIT   -

tcp        0      0 192.168.4.21:40336      192.168.4.21:10051      TIME_WAIT   -

tcp        0      0 192.168.4.21:40335      192.168.4.21:10051      TIME_WAIT   -

tcp        0      0 192.168.4.21:40334      192.168.4.21:10051      TIME_WAIT   -

tcp        0      0 192.168.4.21:40339      192.168.4.21:10051      TIME_WAIT   -

二,监控远端主机192.168.4.12

2.1.1 配置被监控端 12

a 运行 zabbix_agentd 服务 : 装包 修改配置文件 启动服务

# rpm -q gcc gcc-c++

gcc-4.8.5-4.el7.x86_64

gcc-c++-4.8.5-4.el7.x86_64

# useradd zabbix

# tar -zxf zabbix-3.2.3.tar.gz

# cd zabbix-3.2.3/

# ./configure --prefix=/usr/local/zabbix --enable-agent

# make install

# ls /usr/local/zabbix/

bin  etc  lib  sbin  share

# vim /usr/local/zabbix/etc/zabbix_agentd.conf

30 LogFile=/tmp/zabbix_agentd.log//服务日志文件 目录

91 Server=127.0.0.1,192.168.4.21//允许连接服务地址

132 ServerActive=192.168.4.21:10051//监控服务器的IP 和端口

# cp misc/init.d/fedora/core/zabbix_agentd /etc/init.d/

# chmod +x /etc/init.d/zabbix_agentd

# chkconfig --add zabbix_agentd

# sed -i '22s;/usr/local;/usr/local/zabbix;' /etc/init.d/zabbix_agentd

# sed -n '22p' /etc/init.d/zabbix_agentd

# systemctl daemon-reload

# systemctl start zabbix_agentd

# systemctl enable zabbix_agentd

# netstat -pantu | grep :10050

tcp        0      0 0.0.0.0:10050           0.0.0.0:*               LISTEN      17579/zabbix_agentd

2.1.2 配置监控服务器 21

登录管理界面 添加监控新主机 查看监控信息

c30f18cf61b1bff46757d2c1486e304d.png

e14f602a59ceefd7ec40a48cd452627e.png

20408f6c67f34e1d4150a724eba1a93f.png

df9d1613b6c0737438398970f92ed5d6.png

8be13402c8ebb4b3797d944f3f030078.png

fa40fbdb48938bdd297adbc55c3ad748.png

b981df18c45061ed7ba0758405faf5c2.png

0b01c78da56945c3650ef3cb7e79175e.png

4afa3de6a41afd2e9479af186c4e1bf7.png

三.监控本机

a 运行 zabbix_agentd 服务 : 修改配置文件 启动服务

# vim /usr/local/zabbix/etc/zabbix_agentd.conf

# sed -n '132p' /usr/local/zabbix/etc/zabbix_agentd.conf

ServerActive=127.0.0.1:10051

# cp /root/zabbix/zabbix-3.2.3/misc/init.d/fedora/core/zabbix_agentd /etc/init.d/

# chmod +x /etc/init.d/zabbix_agentd

# chkconfig --add zabbix_agentd

# sed -i '22s;/usr/local;/usr/local/zabbix;' /etc/init.d/zabbix_agentd

# sed -n '22p' /etc/init.d/zabbix_agentd

# systemctl daemon-reload

# systemctl start zabbix_agentd

# systemctl enable zabbix_agentd

# netstat -pantu | grep :10050

tcp        0      0 0.0.0.0:10050           0.0.0.0:*               LISTEN      4970/zabbix_agentd

b 登录管理界面 添加监控新主机 查看监控信息

系统自动生成监控主机 主机名为Zabbix server

四. 自定义监控

环境准备 监控主机192.168.4.3上 sshd httpd

# systemctl stop firewalld

# setenforce 0

# sed -n '42p' /etc/httpd/conf/httpd.conf

Listen 8090

# systemctl restart httpd

# netstat -pantu | grep httpd

tcp6       0      0 :::8090                 :::*                    LISTEN      2994/httpd

# sed -n '17p' /etc/ssh/sshd_config

Port 2222

# systemctl restart sshd

# netstat -pantu | grep sshd

tcp        0      0 0.0.0.0:2222            0.0.0.0:*               LISTEN      3085/sshd

# yum -y install gcc gcc-c++

# useradd zabbix

# scp 192.168.4.21:/root/zabbix/zabbix-3.2.3.tar.gz  /root/

# tar -zxf zabbix-3.2.3.tar.gz

# cd zabbix-3.2.3/

# ./configure --prefix=/usr/local/zabbix --enable-agent

# make install

# ls /usr/local/zabbix/

bin  etc  lib  sbin  share

# sed -ri  '91s/(.*)/\1,192.168.4.21/' /usr/local/zabbix/etc/zabbix_agentd.conf

# sed  -n '91p;' /usr/local/zabbix/etc/zabbix_agentd.conf

Server=127.0.0.1,192.168.4.21

# sed -i '132s/172.0.0.1/192.168.4.21:10051/' /usr/local/zabbix/etc/zabbix_agentd.conf

# sed -n '132p' /usr/local/zabbix/etc/zabbix_agentd.conf

ServerActive=192.168.4.21:10051

# cp /root/zabbix-3.2.3/misc/init.d/fedora/core/zabbix_agentd /etc/init.d/

# chmod +x /etc/init.d/zabbix_agentd

# sed -i '22s;/usr/local;/usr/local/zabbix;' /etc/init.d/zabbix_agentd

# sed -n '22p' /etc/init.d/zabbix_agentd

BASEDIR=/usr/local/zabbix

# chkconfig --add zabbix_agentd

# systemctl enable zabbix_agentd

# systemctl start zabbix_agentd

# netstat -pantu | grep :10050

tcp        0      0 0.0.0.0:10050           0.0.0.0:*               LISTEN      10480/zabbix_agentd

使用软件自带的命令定义监控项

1)创建监控模版  amytmp

配置 ---> 模版 ---> 创建模版

c30f18cf61b1bff46757d2c1486e304d.png

1543e457242f208aa33ca06d65b55118.png

4f83a7a0e85c2678cd0a465e36e338c3.png

f22d219a1cb2ec17de5b307b0812843b.png

b8282f732e5289d7a7f57764052a89c0.png

2)创建应用集someser

530615531cfbb698c02a1ea2b1465237.png

b8291b86e9af664732ded21ed1bb832f.png

d08ab6ed42ec8b578c34ac2c7f6387e8.png

3)创建监控项(名称 命令)

fb04a7003cb03f5c12dc68e985480c11.png

2eb9f271fd4927c4cf67f63eaeeef467.png

5dbaa5b4a1ce16261aead694e0c0f2b4.png

045b1a3dd3853f63438399dee61c9c8f.png

188850067c9850818a3e02bacae8ced5.png

9560c2dc5d070f42ecb9c98d1200ff5d.png

4543ef4181259198a5f4228112dc00e9.png

eeb2ed1aa055b609fad4fdfc4ae0bba2.png

4)监控主机时 调用自定义模版

fc13407ebc0bdad4cc1e643ad2831639.png

aeb86d5e7e011d920052e053d77622ec.png

179fbaa528b023d95f3002d5aab86c8d.png

5054d1d00357ffb35391aaae9a80fda1.png

5)查看监控信息

16cb76227b5bc335a478bc30042db364.png

测试 监控信息

# systemctl stop httpd

26450ae7981c2a5149088ea7fad09e6d.png

五.自定义命令 定义监控项

1)配置被监控端 主机3

a 启用自定义监控项功能

# vim /usr/local/zabbix/etc/zabbix_agentd.conf

263 Include=/usr/local/zabbix/etc/zabbix_agentd.conf.d/*.conf//声明自定义监控命令文件目录

278 UnsafeUserParameters=1//允许自定义

282 #       Format: UserParameter=,//定义命名规范

b 定义监控命令

# vim /usr/local/zabbix/etc/zabbix_agentd.conf.d/getuser.conf

UserParameter=get_sum_users,cat /etc/passwd | wc -l

UserParameter=get_login_users,grep -c "/bin/bash" /etc/passwd

UserParameter=get_nologin_users,grep -v -c "/bin/bash" /etc/passwd

c 重启服务 zabbix_agentd

# systemctl restart zabbix_agentd.service

# netstat -pantu | grep zabbix_agentd

tcp        0      0 0.0.0.0:10050           0.0.0.0:*               LISTEN      6399/zabbix_agentd

d 测试配置

# cd /usr/local/zabbix/bin/

# ls

zabbix_get  zabbix_sender

# ./zabbix_get -h//查看命令帮助

# ./zabbix_get -s 127.0.0.1 -p 10050 -k get_sum_users

45

# ./zabbix_get -s 127.0.0.1 -p 10050 -k get_login_users

3

# ./zabbix_get -s 127.0.0.1 -p 10050 -k get_nologin_users

42

2)配置监控服务器

a 测试能否时用监控端定义的命令

# cd /usr/local/zabbix/bin/

# ls

zabbix_get  zabbix_sender

# ./zabbix_get -s 192.168.4.3 -p 10050 -k get_sum_users

45

# ./zabbix_get -s 192.168.4.3 -p 10050 -k get_login_users

3

# ./zabbix_get -s 192.168.4.3 -p 10050 -k get_nologin_users

42

b 在自定义应用集添加 新的监控项(名字命令)

b95368025fd8675f631d558e2b15544d.png

f5a88321438ff5baec4cb44f462a074a.png

feb3e12308ebd8d09dfcc062c6b5f914.png

ff54c9bd1534d90b8a602ac274382276.png

f2015fb38da176e3a3b506dacbe47374.png

ff73ae98ca73993201d308fa304fc02c.png

9cb952da8032d7024ed0a1454ebeb0f1.png

cd75411083ae526da3385ac11f7e2ecd.png

c 监控主机时 调用自定义模版

3352b112b92809f169c6ee272a998f84.png

b1b69cf855fd961919076365bf56783a.png

cca9e7001f832ec666c9a438218176fe.png

39dec6c824ad85bf5c769cafd2217aa6.png

d 查看监控信息

2ab130fabc464e6a7be13e1805378637.png

测试 监控信息

# useradd test

4a3c3a79a847cc19e81de2d9dce6c96c.png

六. 监控报警

监控 主机3 当系统的总用户数大于50时 发报警邮件

给 zabbix@localhost 邮箱帐号

1)准备邮件服务器

# systemctl restart postfix.service

//收件人  zabbix@localhost

//发件人  root@localhost

测试邮件服务器

# echo 'test' | mail -s 'test'  zabbix

# mail -u zabbix

Heirloom Mail version 12.5 7/5/10.  Type ? for help.

"/var/mail/zabbix": 1 message 1 new

>N  1 root                  Wed Jan 10 22:23  18/595   "test"

&

2) 创建触发器 名称 ---> 监控项名称

f89a2a6c00869ac4cb451c620196545d.png

7951ec16280d98e3f2a464c0cfc6a32e.png

2c54efca6a721af618a327f6c6725ffd.png

bb94547957ef917498313e4558e9d604.png

d087da725b0dc2d11364dfa617cfb660.png

3)创建动作   名称 ---> 动作:发邮件

673a28926ba3f126729b372cbd1777c9.png

e071632405a3bda88935f000f7dc6f72.png

95d0f9f2074ac7faab5525ee2e7776aa.png

3) 指定收件人

fd706a0d11368de699a18a4ac6cf06b7.png

142063e0edb702766e4f4f1ce49adb6a.png

ffa9e9eb2514e86a6086ac234fc9cdaa.png

2ef08822cafa5286dcc389d25780dbc6.png

56aa77923f9c00a6d52b5b00d3386ad1.png

f2c270a4516f1dad26099879d07eebb3.png

fe2549525432c9d27b2010287b6ea83e.png

20506a90bcd6cc3314edfe059e14b80c.png

f789a51c30e918f2e3b0f6afd7b3a640.png

4) 指定邮件服务器

5984d05ebe00e3a91fc80620e1f6502d.png

7204b0446f63eca020616b74b66ccdb6.png

b1333e67232f46b575494eb3a9f58ecd.png

5)测试:触发器被触发后 收件人是否收到邮件

1dfdf6056aa0e3c666dc0d2ff73f0dfb.png

# useradd test1

# useradd test2

# useradd test3

# useradd test4

# useradd test5

# cat /etc/passwd | wc -l

51

9336519bfea7a0c2e16ef7b53412caff.png

99e5d0a4926b9a8570b76944b2d7d7e7.png

//查看本机 邮箱

# mail -u zabbix

Heirloom Mail version 12.5 7/5/10.  Type ? for help.

"/var/mail/zabbix": 2 messages 1 new 2 unread

U  1 root                  Wed Jan 10 22:23  19/605   "test"

>N  2 zabbix@localhost.loc  Wed Jan 10 22:50  22/996   "taruserbig50"

& 2

Message  2:

From zabbix@localhost.localdomain  Wed Jan 10 22:50:03 2018

Return-Path:

X-Original-To: zabbix@localhost

Delivered-To: zabbix@localhost.localdomain

From:

To:

Date: Wed, 10 Jan 2018 22:50:03 -0500

Subject: taruserbig50

Content-Type: text/plain; charset="UTF-8"

Status: R

Trigger: taruserbig50

Trigger status: PROBLEM

Trigger severity: Warning

Trigger URL:

Item values:

1. sumusers (host3:get_sum_users): 51

2. *UNKNOWN* (*UNKNOWN*:*UNKNOWN*): *UNKNOWN*

3. *UNKNOWN* (*UNKNOWN*:*UNKNOWN*): *UNKNOWN*

Original event ID: 26&

# userdel -r test5

# userdel -r test4

# userdel -r test3

# userdel -r test2

# cat /etc/passwd | wc -l

47

评论
添加红包

请填写红包祝福语或标题

红包个数最小为10个

红包金额最低5元

当前余额3.43前往充值 >
需支付:10.00
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明:

1.余额是钱包充值的虚拟货币,按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载,可以购买VIP、付费专栏及课程。

余额充值