# Non comment lines are YAML # # Strings ought to be in double quotes, but it works in most cases if they aren't :) # # vim:set syntax=yaml: # TODO # - spohr: hpasmd # - *: mailq # - *: check munin stats collection works # - *: check backups are successful # - *: unwanted: network: auth, discard, daytime, time (on some), cvs-pserver, rsync (on some), ftp (on some), http (on some) # - mundy: salinfo_decode # down: # - sarti # - leisner --- ############################# # hosts ############################# servers: gw-man-da: address: 82.195.75.126 parents: gw-ubcece hostgroups: layer3-infrastructure contacts: joerg, bzed gw-man-da2: address: 82.195.75.46 parents: gw-ubcece hostgroups: layer3-infrastructure contacts: joerg, bzed gw-HP-ftc: address: 192.25.206.1 parents: gw-ubcece hostgroups: layer3-infrastructure gw-brainfood: address: 70.103.162.1 parents: gw-ubcece hostgroups: layer3-infrastructure gw-brown.edu: address: 128.148.34.1 parents: gw-ubcece hostgroups: layer3-infrastructure gw-osuosl: address: 140.211.166.1 parents: gw-ubcece hostgroups: layer3-infrastructure gw-scanplus-villa: address: 212.211.132.1 parents: gw-ubcece hostgroups: layer3-infrastructure gw-scanplus-lobos: address: 212.211.132.249 parents: gw-ubcece hostgroups: layer3-infrastructure gw-mit-csail: address: 128.31.0.1 parents: gw-ubcece hostgroups: layer3-infrastructure gw-umn.edu: address: 128.101.240.222 parents: gw-ubcece hostgroups: layer3-infrastructure gw-dg-i.net: address: 93.94.132.102 parents: gw-ubcece hostgroups: layer3-infrastructure contacts: bzed gw-freenet: address: 62.104.23.249 parents: gw-ubcece hostgroups: layer3-infrastructure gw-sanger: address: 193.62.202.20 parents: gw-ubcece hostgroups: layer3-infrastructure contacts: tjrc1, dave gw-1und1: address: 195.20.247.54 parents: gw-ubcece hostgroups: layer3-infrastructure contacts: joerg gw-1und1-karlsruhe: address: 212.227.120.29 parents: gw-ubcece hostgroups: layer3-infrastructure gw-blackcat: address: 193.201.200.129 parents: gw-ubcece hostgroups: layer3-infrastructure gw-grnet: address: 194.177.211.193 parents: gw-ubcece hostgroups: layer3-infrastructure gw-utwente: address: 130.89.149.1 parents: gw-ubcece hostgroups: layer3-infrastructure #gw-ughent: # address: 157.193.39.254 # parents: gw-ubcece # hostgroups: layer3-infrastructure sw-ubcece: parents: tchaikovsky hostgroups: layer2-infrastructure contacts: lfilipoz pingable: false check_command: dsa_check_always_ok gw-ubcece: address: 206.12.19.254 parents: tchaikovsky hostgroups: layer3-infrastructure contacts: lfilipoz gw-carnet: address: 161.53.160.1 parents: gw-ubcece hostgroups: layer3-infrastructure gw-telegraaf2: address: 217.196.40.15 parents: gw-ubcece hostgroups: layer3-infrastructure contact_groups: +alioth-admins gw-helsinki: address: 128.214.173.25 parents: gw-ubcece hostgroups: layer3-infrastructure contacts: holger gw-isc: address: 149.20.20.1 parents: gw-ubcece hostgroups: layer3-infrastructure gw-aca: address: 130.239.18.97 parents: gw-ubcece hostgroups: layer3-infrastructure # gw-esiee: # address: 195.220.83.13 # parents: gw-ubcece # hostgroups: layer3-infrastructure gw-ghent: address: 193.191.17.50 parents: gw-ubcece hostgroups: layer3-infrastructure gw-anu: address: 150.203.164.38 parents: gw-ubcece hostgroups: layer3-infrastructure gw-sil: address: 86.59.118.145 parents: gw-ubcece hostgroups: layer3-infrastructure gw-arm: address: 82.44.141.46 parents: gw-ubcece hostgroups: layer3-infrastructure gw-ynic: # really janet, because ynic is stupid about firewalling address: 146.97.42.26 parents: gw-ubcece hostgroups: layer3-infrastructure gw-c3sl: address: 200.17.202.254 parents: gw-ubcece hostgroups: layer3-infrastructure gw-zivit: address: 80.245.144.3 parents: gw-ubcece hostgroups: layer3-infrastructure gw-karlsruhe: address: 129.143.166.229 parents: gw-ubcece hostgroups: layer3-infrastructure gw-marist: address: 148.100.96.1 parents: gw-ubcece hostgroups: layer3-infrastructure gw-conova: address: 217.196.149.238 parents: gw-ubcece hostgroups: layer3-infrastructure global: hostgroups: notacomputer pingable: false check_command: dsa_check_always_ok vasks: address: 217.196.43.140 parents: gw-telegraaf2 hostgroups: computers, nfs-server, postgres84-hosts, apache2-hosts, acpid-hosts, apache-https, brokensamhain contact_groups: alioth-admins wagner: address: 217.196.43.132 parents: gw-telegraaf2 hostgroups: computers, bind9-hosts, apache2-hosts, nfs-client, xinetd-hosts, postgres90-hosts, apache-https, dl385, brokensamhain contact_groups: alioth-admins samosa: address: 192.25.206.57 parents: gw-HP-ftc hostgroups: computers, service, dl380, hassrvfs, hasbootfs, acpid-hosts, nfs-client, postgres90-hosts, xinetd-hosts, apache2-hosts, squeeze spohr: address: 192.25.206.33 parents: gw-HP-ftc hostgroups: computers, service, dl380, apache2-hosts, nfs-server, spamd, heavy-exim, squeeze, apache-https peri: address: 192.25.206.15 parents: gw-HP-ftc hostgroups: computers, buildd, sw-raid, hasbootfs, lenny contacts: dannf penalosa: address: 192.25.206.68 parents: gw-HP-ftc hostgroups: computers, buildd, hasbootfs, lenny contacts: dannf mundy: address: 192.25.206.62 parents: gw-HP-ftc hostgroups: computers, buildd, hassrvfs, sw-raid, acpid-hosts, squeeze paer: address: 192.25.206.11 parents: gw-HP-ftc hostgroups: computers, porterbox, hasbootfs, hashomefs, lenny merulo: address: 192.25.206.58 parents: gw-HP-ftc hostgroups: computers, porterbox, hasusrfs, squeeze alkman: address: 192.25.206.63 parents: gw-HP-ftc hostgroups: computers, buildd, acpid-hosts, squeeze sperger: address: 82.195.75.34 parents: gw-man-da2 hostgroups: computers, porterbox, sw-raid, hasbootfs, hasorgfs, sparc, squeeze contacts: bzed agricola: address: 82.195.75.86 parents: gw-man-da hostgroups: computers, porterbox, sw-raid, hassrvfs, squeeze contacts: bzed arcadelt: address: 82.195.75.87 parents: gw-man-da hostgroups: computers, buildd, sw-raid, hassrvfs, squeeze contacts: bzed liszt: address: 82.195.75.100 parents: gw-man-da hostgroups: computers, service, apache2-hosts, bind9-hosts, postfix-hosts, heavy-postfix, amavis-hosts, dl385, acpid-hosts, apache-https, lenny contacts: bzed bendel: address: 82.195.75.101 parents: gw-man-da hostgroups: computers, service, hasbootfs, kvmdomains, hassrvfs, apache2-hosts, squeeze, postfix-hosts, heavy-postfix, acpid-hosts, apache-https heininen: address: 82.195.75.98 parents: gw-man-da hostgroups: computers, acpid-hosts, service, squeeze, megactl unger: address: 82.195.75.102 parents: gw-man-da hostgroups: computers, service, dl360, acpid-hosts, squeeze handel: address: 82.195.75.104 parents: unger hostgroups: computers, service, hasbootfs, kvmdomains, apache2-hosts, squeeze geo1: address: 82.195.75.105 parents: unger hostgroups: computers, service, hasbootfs, bind9-hosts, kvmdomains, squeeze draghi: address: 82.195.75.106 parents: unger hostgroups: computers, service, hasbootfs, hassrvfs, apache2-hosts, bind9-hosts, spamd, heavy-exim, kvmdomains, xinetd-hosts, apache-https, squeeze kaufmann: address: 82.195.75.107 parents: unger hostgroups: computers, service, hasbootfs, apache2-hosts, rsyncd-hosts, kvmdomains, xinetd-hosts, squeeze diamond: address: 82.195.75.108 parents: unger hostgroups: computers, service, hasbootfs, kvmdomains, squeeze, bind9-hosts ball: address: 82.195.75.70 parents: gw-man-da hostgroups: computers, buildd, hasbootfs, squeeze kokkonen: address: 82.195.75.97 parents: gw-man-da hostgroups: computers, service, acpid-hosts, heavy-exim, mail-relay, apache2-hosts, squeeze # lamb: # address: 82.195.75.101 # parents: unger # hostgroups: computers, service, hasbootfs, kvmdomains, squeeze, hasvicepa, bosserver czerny: address: 82.195.75.109 parents: gw-man-da hostgroups: computers, service, dl380, acpid-hosts, squeeze new-master: address: 82.195.75.110 parents: czerny hostgroups: computers, service, hasbootfs, kvmdomains, squeeze, hassrvfs master: address: 70.103.162.29 parents: gw-brainfood hostgroups: computers, general, apache2-hosts, spamd, heavy-exim, highload, xinetd-hosts, mptraid, squeeze murphy: address: 70.103.162.31 parents: gw-brainfood hostgroups: computers, general, dl380, acpid-hosts, buildd, hasbootfs, hassrvfs, squeeze ries: address: 128.148.34.103 parents: gw-brown.edu hostgroups: computers, service, dl385, acpid-hosts, xinetd-hosts, hassrvfs, squeeze, postgres90-hosts franck: address: 128.148.34.3 parents: gw-brown.edu hostgroups: computers, service, apache2-hosts, dl380, rsyncd-hosts, postgres90-hosts, spamd, heavy-exim, acpid-hosts, uploadqueue, xinetd-hosts, apache-https, hassrvfs, squeeze mayer: address: 140.211.166.78 parents: gw-osuosl hostgroups: computers, buildd, hasbootfs, squeeze # mayr: # address: 140.211.166.58 # parents: gw-osuosl # hostgroups: computers, buildd, hasbootfs rietz: address: 140.211.166.43 parents: gw-osuosl hostgroups: computers, service, rsyncd-hosts, dl385, hassrvfs, acpid-hosts, xinetd-hosts, squeeze, apache2-hosts #, bosserver rietz2: address: 140.211.166.44 parents: rietz hostgroups: secondary-IPs busoni: address: 140.211.15.34 parents: gw-osuosl hostgroups: computers, service, dl360, hassrvfs, acpid-hosts, apache2-hosts, heavy-exim, postgres84-hosts, squeeze parry: address: 140.211.15.153 parents: gw-osuosl hostgroups: computers, hassrvfs, squeeze, buildd, hassrvfs partch: address: 140.211.15.152 parents: gw-osuosl hostgroups: computers, hassrvfs, squeeze, hassrvfs piston: address: 140.211.15.154 parents: gw-osuosl hostgroups: computers, hassrvfs, squeeze villa: address: 212.211.132.32 parents: gw-scanplus-villa hostgroups: computers, service, apache2-hosts, ftpd-hosts, rsyncd-hosts, dl380, hasvarfs, hasusrfs, hasorgfs, xinetd-hosts, squeeze lobos: address: 212.211.132.250 parents: gw-scanplus-lobos hostgroups: computers, service, apache2-hosts, ftpd-hosts, rsyncd-hosts, dl380, hasvarfs, hasusrfs, hasorgfs, xinetd-hosts, squeeze gluck: address: 150.203.164.38 parents: gw-anu hostgroups: computers, service, apache2-hosts, ftpd-hosts, rsyncd-hosts, dl380, hassrvfs, acpid-hosts, xinetd-hosts, squeeze steffani: address: 128.31.0.36 parents: gw-mit-csail hostgroups: computers, service, apache2-hosts, ftpd-hosts, rsyncd-hosts, sw-raid, acpid-hosts, hasbootfs, hasorgfs, xinetd-hosts, squeeze #mahler: # address: 128.31.0.46 # parents: gw-mit-csail # hostgroups: computers, porterbox, hasorgfs rore: address: 128.31.0.49 parents: gw-mit-csail hostgroups: computers, service, dl360, acpid-hosts, hassrvfs, apache2-hosts, squeeze senfl: address: 128.31.0.51 parents: gw-mit-csail hostgroups: computers, service, dl360, acpid-hosts, hassrvfs, apache2-hosts, rsyncd-hosts, bind9-hosts, xinetd-hosts, squeeze #carver: # address: 128.31.0.50 # parents: gw-mit-csail # hostgroups: computers, service, dl380, acpid-hosts, hassrvfs saens: address: 128.101.240.212 parents: gw-umn.edu hostgroups: computers, service, apache2-hosts, ftpd-hosts, rsyncd-hosts, dl380, hasvarfs, hasusrfs, hasorgfs, xinetd-hosts, squeeze argento: address: 93.94.130.160 parents: gw-dg-i.net hostgroups: computers, buildd, sw-raid, hassrvfs, squeeze contacts: bzed widor: address: 93.94.130.161 parents: gw-dg-i.net hostgroups: computers, apache2-hosts, sw-raid, acpid-hosts, hasorgfs, service, apache-https, squeeze contacts: bzed pergolesi: address: 62.104.23.252 parents: gw-freenet hostgroups: computers, porterbox, sw-raid, hasusrfs, hasorgfs, squeeze sibelius: address: 193.62.202.28 parents: gw-sanger hostgroups: computers, acpid-hosts, postgres90-hosts, service, apache2-hosts, sw-raid, squeeze, rsyncd-hosts, xinetd-hosts contacts: tjrc1, dave smetana: address: 193.62.202.29 parents: gw-sanger hostgroups: computers, porterbox, sw-raid, sparc, squeeze contacts: tjrc1, dave powell: address: 87.106.64.223 parents: gw-1und1 hostgroups: computers, service, spamd, heavy-exim, rsyncd-hosts, acpid-hosts, hassrvfs, hasvarfs, hasusrfs, xinetd-hosts, apache2-hosts, squeeze contacts: joerg schumann: address: 212.227.126.54 parents: gw-1und1-karlsruhe hostgroups: computers, acpid-hosts, service, squeeze wieck: address: 195.20.242.89 parents: gw-1und1-karlsruhe hostgroups: computers, service, apache2-hosts, ftpd-hosts, rsyncd-hosts, acpid-hosts, xinetd-hosts, squeeze chopin: address: 195.20.242.124 parents: schumann hostgroups: computers, service, apache2-hosts, hassrvfs, hasbootfs, rsyncd-hosts, uploadqueue, kvmdomains, heavy-exim, xinetd-hosts, apache-https, postgres90-hosts, squeeze geo3: address: 195.20.242.125 parents: schumann hostgroups: computers, service, hasbootfs, bind9-hosts, kvmdomains, squeeze soler: address: 195.20.242.126 parents: schumann hostgroups: computers, service, hasbootfs, hassrvfs, kvmdomains, apache2-hosts, squeeze caballero: address: 193.201.200.200 parents: gw-blackcat hostgroups: computers, buildd, sw-raid, squeeze kassia: address: 130.89.149.224 parents: gw-utwente hostgroups: computers, service, dl360, acpid-hosts, incomingmailrelayed, xinetd-hosts, squeeze kassia-sec: address: 130.89.149.225 parents: kassia hostgroups: secondary-IPs kassia-ftp: address: 130.89.149.226 parents: kassia hostgroups: secondary-IPs kassia-volatile: address: 130.89.149.227 parents: kassia hostgroups: secondary-IPs klecker: address: 130.89.148.10 parents: gw-utwente hostgroups: computers, service, apache2-hosts, ftpd-hosts, rsyncd-hosts, dl380, acpid-hosts, xinetd-hosts, squeeze, incomingmailrelayed, hassrvfs klecker-ftp: address: 130.89.148.12 parents: klecker hostgroups: secondary-IPs ancina: address: 157.193.39.13 parents: gw-ghent hostgroups: computers, buildd, hassrvfs, hasbootfs, incomingmailrelayed2025, xinetd-hosts, squeeze contacts: luk spontini: address: 206.12.19.14 parents: sw-ubcece hostgroups: computers, buildd, hasbootfs, hassrvfs, sparc, squeeze contacts: lfilipoz ravel: address: 206.12.19.5 parents: sw-ubcece hostgroups: computers, general, dl385, apache2-hosts, acpid-hosts, hasbootfs, nfs-client, rsyncd-hosts, bind9-hosts, uploadqueue, hasorgfs, heavy-exim, xinetd-hosts, squeeze, autofs dijkstra: address: 206.12.19.218 parents: sw-ubcece hostgroups: computers, bl460, acpid-hosts, service, squeeze luchesi: address: 206.12.19.214 parents: sw-ubcece hostgroups: computers, bl460, acpid-hosts, service, squeeze tchaikovsky: address: 206.12.19.118 hostgroups: computers, general, apache2-hosts, hasbootfs, kvmdomains, apache-https, squeeze wolkenstein: address: 206.12.19.116 parents: dijkstra hostgroups: computers, hasbootfs, hassrvfs, kvmdomains, service, xinetd-hosts, rsyncd-hosts, apache2-hosts, squeeze brahms: address: 206.12.19.115 parents: dijkstra hostgroups: computers, buildd, hasbootfs, hassrvfs, kvmdomains, squeeze geo2: address: 206.12.19.113 parents: dijkstra hostgroups: computers, service, hasbootfs, bind9-hosts, kvmdomains, squeeze duarte: address: 206.12.19.114 parents: dijkstra hostgroups: computers, hasbootfs, hassrvfs, apache2-hosts, kvmdomains, service, squeeze, nfs-server valente: address: 206.12.19.112 parents: dijkstra hostgroups: computers, hasbootfs, hassrvfs, postgres83-hosts, ftpd-hosts, rsyncd-hosts, kvmdomains, heavy-exim, xinetd-hosts, service, lenny bellini: address: 206.12.19.7 parents: sw-ubcece hostgroups: computers, hasbootfs, nfs-client, hassrvfs, aacraid, heavy-exim, service, apache2-hosts, squeeze, autofs morricone: address: 206.12.19.9 parents: sw-ubcece hostgroups: computers, hasbootfs, hasvarfs, hassrvfs, aacraid, postgres90-hosts, ftpd-hosts, rsyncd-hosts, heavy-exim, xinetd-hosts, apache2-hosts, service, squeeze stabile: address: 206.12.19.13 parents: sw-ubcece hostgroups: computers, hashomefs, sw-raid, rsyncd-hosts, postgres84-hosts, apache2-hosts, xinetd-hosts, service, nfs-server, squeeze, hassrvfs paganini: address: 206.12.19.10 parents: sw-ubcece hostgroups: computers, hasbootfs, aacraid, hassrvfs, xinetd-hosts, nfs-client, service, apache2-hosts, squeeze, autofs respighi: address: 206.12.19.11 parents: sw-ubcece hostgroups: computers, hasbootfs, aacraid, hassrvfs, service, apache2-hosts, squeeze vivaldi: address: 206.12.19.12 parents: sw-ubcece hostgroups: computers, hasbootfs, aacraid, hassrvfs, apache2-hosts, postgres84-hosts, service, apache-https, squeeze, autofs # MSA 2000 (2012i) giustini: address: 192.168.2.6 parents: dijkstra hostgroups: notacomputer # unless we implement runfrom for host alive checks pingable: false check_command: dsa_check_always_ok fano: address: 206.12.19.110 parents: luchesi hostgroups: computers, freebsd, squeeze, buildd, hassrvfs finzi: address: 206.12.19.111 parents: luchesi hostgroups: computers, freebsd, squeeze, buildd, hassrvfs gabrielli: address: 206.12.19.17 parents: sw-ubcece hostgroups: computers, porterbox, squeeze corelli: address: 206.12.19.16 parents: sw-ubcece hostgroups: computers, buildd, squeeze lucatelli: address: 206.12.19.15 parents: sw-ubcece hostgroups: computers, buildd, squeeze rossini: address: 206.12.19.19 parents: sw-ubcece hostgroups: computers, dl585, acpid-hosts, service, squeeze salieri: address: 206.12.19.20 parents: sw-ubcece hostgroups: computers, dl585, acpid-hosts, service, squeeze traetta: address: 206.12.19.21 parents: sw-ubcece hostgroups: computers, dl585, acpid-hosts, service, squeeze # locke: # address: 206.12.19.120 # parents: sw-ubcece # hostgroups: computers, service, hasbootfs, kvmdomains, squeeze, hasvicepa lotti: address: 206.12.19.121 parents: sw-ubcece hostgroups: computers, service, hasbootfs, kvmdomains, squeeze, hassrvfs quantz: address: 206.12.19.122 parents: salieri hostgroups: computers, service, hasbootfs, kvmdomains, squeeze, hassrvfs, nfs-client, xinetd-hosts, heavy-exim, postgres84-hosts, apache2-hosts, autofs nono: address: 206.12.19.123 parents: salieri hostgroups: computers, service, hasbootfs, kvmdomains, squeeze, heavy-exim, postgres84-hosts, xinetd-hosts, apache2-hosts, apache-https reger: address: 206.12.19.124 parents: salieri hostgroups: computers, service, hasbootfs, kvmdomains, squeeze, apache2-hosts, apache-https, heavy-exim danzi: address: 206.12.19.125 parents: luchesi hostgroups: computers, service, hasbootfs, kvmdomains, squeeze, postgres84-hosts, xinetd-hosts glinka: address: 206.12.19.126 parents: traetta hostgroups: computers, service, hasbootfs, kvmdomains, squeeze, apache2-hosts, nfs-client, xinetd-hosts, autofs dukas: address: 206.12.19.128 parents: traetta hostgroups: computers, service, hasbootfs, kvmdomains, squeeze, apache2-hosts, hassrvfs tye: address: 206.12.19.129 parents: traetta hostgroups: computers, service, hasbootfs, kvmdomains, squeeze, apache2-hosts, nfs-client, autofs, hassrvfs elgar: address: 206.12.19.130 parents: salieri hostgroups: computers, service, hasbootfs, kvmdomains, squeeze, hassrvfs berlioz: address: 206.12.19.131 parents: traetta hostgroups: computers, service, hasbootfs, kvmdomains, squeeze, apache2-hosts, hassrvfs, apache-https gombert: address: 206.12.19.132 parents: traetta hostgroups: computers, service, hasbootfs, kvmdomains, squeeze, hassrvfs, heavy-exim jenkins: address: 206.12.19.133 parents: salieri hostgroups: computers, service, hasbootfs, kvmdomains, squeeze blavet: address: 206.12.19.134 parents: traetta hostgroups: computers, service, hasbootfs, kvmdomains, squeeze, xinetd-hosts, nfs-client, autofs barriere: address: 206.12.19.135 parents: traetta hostgroups: computers, service, hasbootfs, kvmdomains, squeeze, hassrvfs diabelli: address: 206.12.19.136 parents: traetta hostgroups: computers, service, hasbootfs, kvmdomains, squeeze, apache2-hosts, apache-https bizet: address: 206.12.19.137 parents: traetta hostgroups: computers, service, hasbootfs, kvmdomains, squeeze, hassrvfs, ftpd-hosts, rsyncd-hosts, heavy-exim, xinetd-hosts, apache2-hosts lebrun: address: 193.198.184.10 parents: gw-carnet hostgroups: computers, buildd, sw-raid, hasorgfs, sparc, squeeze schroeder: address: 193.198.184.11 parents: gw-carnet hostgroups: computers, buildd, sw-raid, hassrvfs, sparc, squeeze piatti: address: 193.167.161.225 parents: gw-helsinki hostgroups: computers, dl385, acpid-hosts, apache2-hosts, hasbootfs, incomingmailrelayed2025, hasorgfs, service, squeeze contacts: holger rem: address: 82.195.75.68 parents: gw-man-da hostgroups: computers, buildd, hasbootfs, hashomefs, squeeze zelenka: address: 80.245.147.40 parents: gw-zivit hostgroups: computers, porterbox, hassrvfs, squeeze zandonai: address: 80.245.147.46 parents: gw-zivit hostgroups: computers, buildd, hassrvfs, squeeze schein: address: 149.20.20.6 parents: gw-isc hostgroups: computers, service, apache2-hosts, ftpd-hosts, rsyncd-hosts, acpid-hosts, dl360, hasorgfs, xinetd-hosts, squeeze praetorius: address: 130.239.18.121 parents: gw-aca hostgroups: computers, buildd, hassrvfs, squeeze pettersson: address: 130.239.18.123 parents: gw-aca hostgroups: computers, hasbootfs, aacraid, nfs-client, acpid-hosts, service, apache2-hosts, squeeze, autofs # lafayette: # address: 147.215.7.160 # parents: gw-esiee # hostgroups: computers, buildd, sw-raid, hassrvfs, hasbootfs grieg: address: 194.177.211.200 parents: gw-grnet hostgroups: computers, apache2-hosts, acpid-hosts, megaraid, heavy-exim, postgres84-hosts, service, apache-https, squeeze rautavaara: address: 194.177.211.199 parents: gw-grnet hostgroups: computers, acpid-hosts, megaraid, service, squeeze fasch: address: 194.177.211.201 parents: rautavaara hostgroups: computers, freebsd, squeeze, buildd, hassrvfs #, mptraid holter: address: 194.177.211.202 parents: gw-grnet hostgroups: computers, acpid-hosts, hassrvfs, apache2-hosts, mptraid, service, squeeze barber: address: 194.177.211.203 parents: gw-grnet hostgroups: computers, acpid-hosts, buildd, hassrvfs, mptraid, squeeze biber: address: 194.177.211.204 parents: gw-grnet hostgroups: computers, acpid-hosts, buildd, hassrvfs, mptraid, squeeze cilea: address: 194.177.211.205 parents: gw-grnet hostgroups: computers, acpid-hosts, mptraid, hassrvfs, service, squeeze vitry: address: 194.177.211.206 parents: gw-grnet hostgroups: computers, acpid-hosts, mptraid, buildd, squeeze krenek: address: 194.177.211.207 parents: gw-grnet hostgroups: computers, acpid-hosts, mptraid, buildd, squeeze scelsi: address: 194.177.211.208 parents: gw-grnet hostgroups: computers, acpid-hosts, mptraid, service, squeeze orff: address: 194.177.211.209 parents: gw-grnet hostgroups: computers, acpid-hosts, bind9-hosts, mptraid, service, hassrvfs, apache2-hosts, squeeze field: address: 194.177.211.210 parents: rautavaara hostgroups: computers, freebsd, squeeze, buildd, hassrvfs #, mptraid beethoven: address: 86.59.118.146 parents: gw-sil hostgroups: computers, hasbootfs, aacraid, nfs-server, service, acpid-hosts, squeeze merikanto: address: 86.59.118.147 parents: gw-sil hostgroups: computers, dl360, acpid-hosts, spamd, heavy-exim, nfs-client, rsyncd-hosts, xinetd-hosts, service, mail-relay, squeeze, autofs, apache2-hosts merikanto2: address: 86.59.118.150 parents: merikanto hostgroups: secondary-IPs englund: address: 86.59.118.148 parents: gw-sil hostgroups: computers, acpid-hosts, service, apache2-hosts, squeeze, hassrvfs, megactl # which raid? lindberg: address: 86.59.118.149 parents: gw-sil hostgroups: computers, acpid-hosts, service, apache2-hosts, squeeze, megactl # which raid? eder: address: 86.59.118.151 parents: gw-sil hostgroups: computers, porterbox, squeeze, hassrvfs eysler: address: 86.59.118.152 parents: gw-sil hostgroups: computers, buildd, squeeze abel: address: 217.140.96.56 parents: gw-arm hostgroups: computers, hasbootfs, hassrvfs, porterbox, squeeze arnold: address: 217.140.96.57 parents: gw-arm hostgroups: computers, hasbootfs, hassrvfs, buildd, squeeze alain: address: 217.140.96.58 parents: gw-arm hostgroups: computers, hasbootfs, hassrvfs, buildd, squeeze alwyn: address: 217.140.96.59 parents: gw-arm hostgroups: computers, hasbootfs, hassrvfs, buildd, squeeze antheil: address: 217.140.96.60 parents: gw-arm hostgroups: computers, hasbootfs, hassrvfs, buildd, squeeze arne: address: 217.140.96.61 parents: gw-arm hostgroups: computers, hasbootfs, hassrvfs, squeeze harris: address: 217.140.96.66 parents: gw-arm hostgroups: computers, hasbootfs, hassrvfs, wheezy, armhf, porterbox hartmann: address: 217.140.96.67 parents: gw-arm hostgroups: computers, hasbootfs, hassrvfs, wheezy, armhf, buildd hasse: address: 217.140.96.68 parents: gw-arm hostgroups: computers, hasbootfs, hassrvfs, wheezy, armhf, buildd hebden: address: 217.140.96.69 parents: gw-arm hostgroups: computers, hasbootfs, hassrvfs, wheezy, armhf, buildd henze: address: 217.140.96.70 parents: gw-arm hostgroups: computers, hasbootfs, hassrvfs, wheezy, armhf, buildd hoiby: address: 217.140.96.71 parents: gw-arm hostgroups: computers, hasbootfs, hassrvfs, armhf, wheezy poulenc: address: 144.32.168.77 parents: gw-ynic hostgroups: computers, buildd, sw-raid, hassrvfs, squeeze porpora: address: 144.32.168.78 parents: gw-ynic hostgroups: computers, buildd, sw-raid, hassrvfs, squeeze hildegard: address: 144.32.168.74 parents: gw-ynic hostgroups: computers, hasbootfs, hassrvfs, armhf, wheezy howells: address: 144.32.168.75 parents: gw-ynic hostgroups: computers, hasbootfs, hassrvfs, armhf, wheezy hummel: address: 144.32.168.76 parents: gw-ynic hostgroups: computers, hasbootfs, hassrvfs, armhf, wheezy santoro: address: 200.17.202.197 parents: gw-c3sl hostgroups: computers, service, apache2-hosts, ftpd-hosts, rsyncd-hosts, xinetd-hosts, hassrvfs, squeeze, high-RTT contacts: faw zemlinsky: address: 129.143.160.6 parents: gw-karlsruhe hostgroups: computers, buildd, hassrvfs, squeeze zappa: address: 148.100.96.103 parents: gw-marist hostgroups: computers, buildd, hassrvfs, squeeze, incomingmailrelayed sompek: address: 217.196.149.225 parents: gw-conova hostgroups: computers, buildd, hassrvfs, sw-raid, squeeze, sparc stadler: address: 217.196.149.226 parents: gw-conova hostgroups: computers, buildd, hassrvfs, sw-raid, squeeze, sparc ############################# # host groups # # hostgroups ircd and all are automatically defined # ############################# hostgroups: computers: alias: computers private: 1 layer2-infrastructure: alias: layer 2 devices like switches extinfo-icon_image: symbols/switch.png extinfo-icon_image_alt: switch layer3-infrastructure: alias: layer 3 devices like routers extinfo-icon_image: symbols/router.png extinfo-icon_image_alt: router notacomputer: alias: Systems that are not really systems. Yeah :) private: 1 freebsd: alias: freebsd private: 1 armhf: alias: armhf private: 1 sparc: alias: sparc private: 1 porterbox: alias: developer accessible porter machines extinfo-icon_image: base/debian.png extinfo-icon_image_alt: Debian GNU/Linux extinfo-notes_url: http://db.debian.org/machines.cgi?host=%s service: alias: machines running services extinfo-icon_image: base/debian.png extinfo-icon_image_alt: Debian GNU/Linux extinfo-notes_url: http://db.debian.org/machines.cgi?host=%s buildd: alias: buildd systems extinfo-icon_image: base/debian.png extinfo-icon_image_alt: Debian GNU/Linux extinfo-notes_url: http://db.debian.org/machines.cgi?host=%s general: alias: general purpose developer accessible machines extinfo-icon_image: base/debian.png extinfo-icon_image_alt: Debian GNU/Linux extinfo-notes_url: http://db.debian.org/machines.cgi?host=%s dl380: alias: HP DL380 hosts private: 1 dl385: alias: HP DL385 hosts private: 1 dl360: alias: HP DL360 hosts private: 1 bl460: alias: HP BL460 blades private: 1 dl585: alias: HP DL385 hosts private: 1 sw-raid: alias: Hosts with Linux software raid private: 1 aacraid: alias: Hosts with Adaptec AACraid private: 1 megactl: alias: Hosts with LSI Logic MegaRAID, but not usable with megaraid check private: 1 megaraid: alias: Hosts with LSI Logic MegaRAID private: 1 mptraid: alias: Hosts with LSI Logic Fusion-MPT private: 1 squeeze: alias: Hosts running squeeze wheezy: alias: Hosts running wheezy lenny: alias: Hosts running lenny kvmdomains: alias: Hosts that are KVM domains private: 1 postfix-hosts: alias: hosts running postfix instead of exim private: 1 heavy-exim: alias: "hosts running the full mail stuff, including clamav and postgrey" private: 1 mail-relay: alias: "relays usually are hosts with more exim processes" private: 1 spamd: alias: "hosts running spamassassin as daemon" private: 1 heavy-postfix: alias: "postfix hosts running the full mail stuff, including clamav, SA, postgrey, policyd-weight" private: 1 apache2-hosts: alias: hosts running apache2 private: 1 bind9-hosts: alias: hosts running bind9 private: 1 # once every host runs unbound, do away with this group and check "computers" instead unbound-hosts: alias: hosts running unbound private: 1 amavis-hosts: alias: hosts running amavis private: 1 ftpd-hosts: alias: hosts running vsftpd private: 1 #tftpd-hosts: # alias: hosts running a tftpd (tftpd-hpa as a daemon) # private: 1 rsyncd-hosts: alias: hosts providing rsync services via xinetd private: 1 xinetd-hosts: alias: hosts providing services via xinetd private: 1 #postgres81-hosts: # alias: hosts running postgres81 # private: 1 postgres83-hosts: alias: hosts running postgres83 private: 1 postgres84-hosts: alias: hosts running postgres84 private: 1 postgres90-hosts: alias: hosts running postgres90 private: 1 no-ulogd: alias: hosts not running ulogd private: 1 acpid-hosts: alias: hosts running acpid private: 1 uploadqueue: alias: hosts that are an anonymous ftp uploadqueue private: 1 bosserver: alias: hosts running bosserver private: 1 apache-https: alias: hosts with https services private: 1 nfs-client: alias: hosts mounting filesystems using NFS private: 1 nfs-server: alias: hosts serving filesystems using NFS private: 1 autofs: alias: hosts running the automounter private: 1 highload: alias: "hosts on which high load is normal" private: 1 secondary-IPs: alias: secondary IP addresses private: 1 hasbootfs: alias: hosts with a /boot filesystem private: 1 hassrvfs: alias: hosts with a /srv filesystem private: 1 hasorgfs: alias: hosts with a /org filesystem private: 1 hashomefs: alias: hosts with a /home filesystem private: 1 hasvarfs: alias: hosts with a /var filesystem private: 1 hasusrfs: alias: hosts with a /usr filesystem private: 1 # hasvicepa: # alias: hosts with a /vicepa # private: 1 incomingmailrelayed: alias: incoming mail needs to go through a mail relay # i.e. no port 25 private: 1 incomingmailrelayed2025: alias: incoming mail needs to go through a mail relay # i.e. no port 25 private: 1 ntpsuckers: alias: "hosts who's ntp offset is often unknown" private: 1 brokensamhain: alias: machines that can not run samhain private: 1 high-RTT: alias: machines with hight round trip times private: 1 ############################# # servicegroups ############################# servicegroups: diskspace: alias: diskusage checks buildd: alias: buildd checks raid: alias: raid checks kernel: alias: kernel checks weaksshkeys: alias: weak ssh keys apt: alias: apt upgrade status samhain: alias: samhain integrity status time: alias: time stuff security: alias: security servicegroup_members: apt, weaksshkeys, kernel, samhain ############################# # services ############################# services: - name: PING check: "check_ping!300.0,20%!600.0,40%" hostgroups: pingable excludehostgroups: layer3-infrastructure, high-RTT normal_check_interval: 5 max_check_attempts: 4 retry_check_interval: 1 - name: PING check: "check_ping!600.0,20%!900.0,40%" hostgroups: high-RTT normal_check_interval: 5 max_check_attempts: 4 retry_check_interval: 1 - name: PING check: "check_ping!2000.0,60%!3000.0,80%" hostgroups: layer3-infrastructure normal_check_interval: 5 max_check_attempts: 4 retry_check_interval: 1 ############ Services ############ ### ############ Disk Usage ############ #### - name: disk usage - all servicegroups: diskspace nrpe: "/usr/lib/nagios/plugins/check_disk -X devpts -X proc -X linprocfs -X devfs -X fdescfs -X sysfs -X nfs 90 95" hostgroups: computers excludehosts: sibelius - name: disk usage - all servicegroups: diskspace nrpe: "/usr/lib/nagios/plugins/check_disk -X devpts -X proc -X linprocfs -X devfs -X fdescfs -X sysfs -X nfs 95 98" hosts: sibelius - name: disk usage on / servicegroups: diskspace nrpe: "/usr/lib/nagios/plugins/check_disk 80 90 /" hostgroups: computers excludehosts: kassia, spohr, liszt - name: disk usage on / servicegroups: diskspace nrpe: "/usr/lib/nagios/plugins/check_disk 90 93 /" hosts: kassia, spohr, liszt - name: disk usage on /boot servicegroups: diskspace nrpe: "/usr/lib/nagios/plugins/check_disk 75 85 /boot" hostgroups: hasbootfs - name: disk usage on /var servicegroups: diskspace nrpe: "/usr/lib/nagios/plugins/check_disk 75 90 /var" hostgroups: hasvarfs - name: disk usage on /org servicegroups: diskspace nrpe: "/usr/lib/nagios/plugins/check_disk 80 90 /org" hostgroups: hasorgfs - name: disk usage on /srv servicegroups: diskspace nrpe: "/usr/lib/nagios/plugins/check_disk 80 90 /srv" hostgroups: hassrvfs excludehosts: ries - name: disk usage on /srv servicegroups: diskspace nrpe: "/usr/lib/nagios/plugins/check_disk 90 95 /srv" hosts: ries - name: disk usage on /tmp servicegroups: diskspace nrpe: "/usr/lib/nagios/plugins/check_disk 60 80 /tmp" hosts: saens, powell, piatti - name: disk usage on /usr servicegroups: diskspace nrpe: "/usr/lib/nagios/plugins/check_disk 75 90 /usr" hostgroups: hasusrfs - name: disk usage on /home servicegroups: diskspace nrpe: "/usr/lib/nagios/plugins/check_disk 75 90 /home" hostgroups: hashomefs - name: disk usage on /x servicegroups: diskspace nrpe: "/usr/lib/nagios/plugins/check_disk 75 90 /x" hosts: caballero - name: disk usage on /var/lib/postgresql servicegroups: diskspace nrpe: "/usr/lib/nagios/plugins/check_disk 75 90 /var/lib/postgresql" hosts: samosa, stabile, sibelius, busoni - name: disk usage on /var/log servicegroups: diskspace nrpe: "/usr/lib/nagios/plugins/check_disk 75 90 /var/log" hosts: busoni, wieck, heininen #- # name: disk usage on /srv/morgue.debian.org # servicegroups: diskspace # nrpe: "/usr/lib/nagios/plugins/check_disk 90 95 /srv/morgue.debian.org" # hosts: stabile - name: disk usage on /srv/mirrors servicegroups: diskspace nrpe: "/usr/lib/nagios/plugins/check_disk 80 90 /srv/mirrors" hosts: beethoven, sibelius - name: disk usage on /srv/snapshot.debian.org servicegroups: diskspace nrpe: "/usr/lib/nagios/plugins/check_disk 90 94 /srv/snapshot.debian.org" hosts: stabile,sibelius - name: disk usage on /srv/farm-snapshot/farm-01 servicegroups: diskspace nrpe: "/usr/lib/nagios/plugins/check_disk 95 98 /srv/farm-snapshot/farm-01" hosts: sibelius - name: disk usage on /srv/farm-snapshot/farm-23 servicegroups: diskspace nrpe: "/usr/lib/nagios/plugins/check_disk 95 98 /srv/farm-snapshot/farm-23" hosts: sibelius - name: disk usage on /srv/farm-snapshot/farm-45 servicegroups: diskspace nrpe: "/usr/lib/nagios/plugins/check_disk 95 98 /srv/farm-snapshot/farm-45" hosts: sibelius - name: disk usage on /srv/farm-snapshot/farm-67 servicegroups: diskspace nrpe: "/usr/lib/nagios/plugins/check_disk 95 98 /srv/farm-snapshot/farm-67" hosts: sibelius - name: disk usage on /srv/farm-snapshot/farm-89 servicegroups: diskspace nrpe: "/usr/lib/nagios/plugins/check_disk 95 98 /srv/farm-snapshot/farm-89" hosts: sibelius - name: disk usage on /srv/farm-snapshot/farm-ab servicegroups: diskspace nrpe: "/usr/lib/nagios/plugins/check_disk 95 98 /srv/farm-snapshot/farm-ab" hosts: sibelius - name: disk usage on /srv/farm-snapshot/farm-cd servicegroups: diskspace nrpe: "/usr/lib/nagios/plugins/check_disk 95 98 /srv/farm-snapshot/farm-cd" hosts: sibelius - name: disk usage on /srv/farm-snapshot/farm-f servicegroups: diskspace nrpe: "/usr/lib/nagios/plugins/check_disk 95 85 /srv/farm-snapshot/farm-f" hosts: sibelius - name: disk usage on /srv/farm-snapshot/farm-e servicegroups: diskspace nrpe: "/usr/lib/nagios/plugins/check_disk 95 85 /srv/farm-snapshot/farm-e" hosts: sibelius - name: disk usage on /srv/fossology.debian.net servicegroups: diskspace nrpe: "/usr/lib/nagios/plugins/check_disk 80 90 /srv/fossology.debian.net" hosts: vivaldi # - # name: disk usage on /vicepa # servicegroups: diskspace # nrpe: "/usr/lib/nagios/plugins/check_disk 90 95 /vicepa" # hostgroups: hasvicepa - name: disk usage on /var/lib/postgresql/9.0/dak servicegroups: diskspace nrpe: "/usr/lib/nagios/plugins/check_disk 75 85 /var/lib/postgresql/9.0/dak" hosts: franck - name: disk usage on /srv/ftp-master.debian.org servicegroups: diskspace nrpe: "/usr/lib/nagios/plugins/check_disk 85 95 /srv/ftp-master.debian.org" hosts: franck - name: disk usage on /srv/pgbackup servicegroups: diskspace nrpe: "/usr/lib/nagios/plugins/check_disk 75 85 /srv/pgbackup" hosts: franck ############ All Computers ############ #### - name: apt - security updates servicegroups: apt nrpe: "/usr/lib/nagios/plugins/dsa-check-statusfile /var/cache/dsa/nagios/apt" hostgroups: computers excludehostgroups: wheezy normal_check_interval: 60 retry_check_interval: 15 #### - name: backup nrpe: "sudo /usr/lib/nagios/plugins/dsa-check-dabackup" hostgroups: computers normal_check_interval: 60 max_check_attempts: 2 retry_check_interval: 5 - name: backup server config nrpe: "/usr/lib/nagios/plugins/dsa-check-dabackup-server" hosts: beethoven normal_check_interval: 60 max_check_attempts: 2 retry_check_interval: 5 #### - name: running kernel servicegroups: kernel nrpe: "/usr/lib/nagios/plugins/dsa-check-running-kernel" hostgroups: computers normal_check_interval: 60 retry_check_interval: 5 #### # - name: afs - space # hostgroups: bosserver # nrpe: "/usr/lib/nagios/plugins/dsa-check-afs-space -H localhost" # normal_check_interval: 60 # max_check_attempts: 2 # retry_check_interval: 5 # # - name: afs - bos # hostgroups: bosserver # nrpe: "/usr/lib/nagios/plugins/dsa-check-afs-bos -H localhost" # normal_check_interval: 60 # max_check_attempts: 2 # retry_check_interval: 5 # # - name: afs - waiting connections # hostgroups: bosserver # nrpe: "/usr/lib/nagios/plugins/dsa-check-afs-rxdebug -H localhost" # normal_check_interval: 60 # max_check_attempts: 2 # retry_check_interval: 5 # #- name: afs - udebug # hostgroups: bosserver # nrpe: "/usr/lib/nagios/plugins/dsa-check-afs-udebug -H localhost" # normal_check_interval: 60 # max_check_attempts: 2 # retry_check_interval: 5 #### - name: puppet nrpe: "/usr/lib/nagios/plugins/dsa-check-file_age -i 540 -f /var/lib/puppet/state/state.yaml" hostgroups: computers excludehosts: wagner, vasks #### - name: installed firewall nrpe: "/usr/lib/nagios/plugins/dsa-check-file -w -f /etc/ferm/ferm.conf" hostgroups: computers excludehostgroups: freebsd excludehosts: vasks, wagner - name: puppetized firewall nrpe: "/usr/lib/nagios/plugins/dsa-check-file -w -f /etc/ferm/conf.d/defs.conf" hostgroups: computers excludehostgroups: freebsd excludehosts: vasks, wagner #### - name: process - samhain nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:8 -c 1: -u root -C samhain -a '/usr/sbin/samhain'" hostgroups: computers excludehostgroups: brokensamhain - name: samhain servicegroups: samhain nrpe: "/usr/lib/nagios/plugins/dsa-check-statusfile /var/cache/dsa/nagios/samhain" hostgroups: computers depends: process - samhain normal_check_interval: 60 retry_check_interval: 5 excludehostgroups: brokensamhain #### - name: users nrpe: "/usr/lib/nagios/plugins/check_users 30 35" hostgroups: computers #### - name: load nrpe: "/usr/lib/nagios/plugins/check_load -w 30,28,26 -c 50,45,50" hostgroups: computers excludehostgroups: highload - name: load nrpe: "/usr/lib/nagios/plugins/check_load -w 140,120,100 -c 240,220,200" hostgroups: highload #### - name: uptime check nrpe: "/usr/lib/nagios/plugins/dsa-check-uptime" hostgroups: computers #### - name: processes - zombies nrpe: "/usr/lib/nagios/plugins/check_procs 5 10 -s Z" hostgroups: computers #### - name: processes - total nrpe: "/usr/lib/nagios/plugins/check_procs 620 700" hostgroups: computers excludehosts: liszt - name: processes - total nrpe: "/usr/lib/nagios/plugins/check_procs 800 1000" hosts: liszt #### - name: swap usage - percent nrpe: "/usr/lib/nagios/plugins/check_swap -w 20% -c 10%" hostgroups: computers #### - name: swap usage - mb nrpe: "/usr/lib/nagios/plugins/check_swap -w 20000 -c 5000" hostgroups: computers #### - name: process - getty nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:8 -c 1: -u root -C getty -a /sbin/getty" hostgroups: computers excludehosts: zelenka, zandonai #### - name: process - sshd nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:20 -c 1: -u root -C sshd -a '/usr/sbin/sshd'" hostgroups: computers - name: "network service - sshd" check: dsa_check_ssh hostgroups: computers depends: process - sshd normal_check_interval: 60 notification_interval: 1440 - name: ssh - weak keys servicegroups: weaksshkeys nrpe: "/usr/lib/nagios/plugins/dsa-check-statusfile /var/cache/dsa/nagios/weak-ssh-keys" hostgroups: computers excludehosts: wagner, vasks normal_check_interval: 60 #### - name: network service - nrpe check: check_tcp!5666 hostgroups: computers max_check_attempts: -2 notification_interval: 1440 - name: process - nrpe nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:25 -c 1: -u nagios -C nrpe -a '/usr/sbin/nrpe -c /etc/nagios/nrpe.cfg -d'" hostgroups: computers max_check_attempts: -1 depends: network service - nrpe ### - name: process - munin-node nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:3 -c 1: -u root -C munin-node -a '/usr/sbin/munin-node'" hostgroups: computers excludehostgroups: freebsd, armhf excludehosts: vasks, wagner - name: process - munin-node nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:3 -c 1: -u root -C perl -a '/usr/bin/perl -wT /usr/sbin/munin-node'" hostgroups: freebsd - name: process - munin-node nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:3 -c 1: -u root -C munin -a '/usr/sbin/munin-node'" hostgroups: armhf - name: network service - munin-node check: check_tcp!4949 hostgroups: computers depends: process - munin-node excludehosts: vasks, wagner ### - name: process - ntpd nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -p 1 -C ntpd -a '/usr/sbin/ntpd -p /var/run/ntpd.pid'" hostgroups: computers servicegroups: time - name: network service - ntp check: dsa_check_ntp hostgroups: computers depends: process - ntpd excludehosts: ancina excludehostgroups: ntpsuckers servicegroups: time # - name: network service - time check: dsa_check_time hosts: ancina depends: process - xinetd servicegroups: time ### - name: process - atd nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u daemon -C atd -a /usr/sbin/atd" hostgroups: computers ### - name: process - cron nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:2 -c 1: -u root -C cron -a /usr/sbin/cron" hostgroups: computers ### - name: process - syslog-ng nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C syslog-ng -a '/sbin/syslog-ng -p /var/run/syslog-ng.pid'" hostgroups: computers excludehostgroups: freebsd excludehosts: vasks, wagner - name: process - syslog-ng nrpe: "/usr/lib/nagios/plugins/check_procs -w 2:2 -c 2: -u root -C syslog-ng -a '/sbin/syslog-ng -p /var/run/syslog-ng.pid'" hostgroups: freebsd - name: remote logging remotecheck: "/usr/lib/nagios/plugins/dsa-check-log-age-loghost $HOSTNAME$" runfrom: heininen hostgroups: computers excludehosts: vasks, wagner ### MAIL STUFF ### - name: process - exim nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u Debian-exim -C exim4 -a '/usr/sbin/exim4 -bd -q'" hostgroups: computers excludehostgroups: postfix-hosts, mail-relay excludehosts: master, busoni, quantz - name: process - exim nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:25 -c 1: -u Debian-exim -C exim4 -a '/usr/sbin/exim4 -bd -q'" hostgroups: mail-relay - name: process - exim - total nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:50 -c 1: -C exim4" hostgroups: computers excludehostgroups: postfix-hosts excludehosts: master, busoni, quantz - name: process - exim nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:300 -c 1:500 -C exim4 -a '/usr/sbin/exim4'" hosts: master, busoni, quantz - name: mail queue nrpe: "/usr/lib/nagios/plugins/check_mailq -M exim -w 1000 -c 2000" hostgroups: heavy-exim ### - name: process - clamav - clamd nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:2 -c 1: -u clamav -C clamd -a '/usr/sbin/clamd'" hostgroups: heavy-exim, heavy-postfix hosts: wagner - name: service - clamav nrpe: "/usr/lib/nagios/plugins/check_clamd -H /var/run/clamav/clamd.ctl" hostgroups: heavy-exim, heavy-postfix hosts: wagner depends: process - clamav - clamd - name: process - clamav - freshclam nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u clamav -C freshclam -a '/usr/bin/freshclam -d --quiet'" hosts: wagner hostgroups: heavy-exim, heavy-postfix - name: unwanted process - clamav nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C clamd" hostgroups: computers excludehostgroups: heavy-exim, heavy-postfix excludehosts: wagner - name: unwanted process - freshclam nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C freshclam" hostgroups: computers excludehostgroups: heavy-exim, heavy-postfix excludehosts: wagner - name: process - spamd - master nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C spamd -a '/usr/sbin/spamd --create-prefs --max-children 5 --helper-home-dir -d --pidfile=/var/run/spamd.pid'" hostgroups: spamd excludehosts: powell, wagner - name: process - spamd - master nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C spamd -a '/usr/sbin/spamd --create-prefs --max-children 20 --min-spare=5 --helper-home-dir -d --pidfile=/var/run/spamd.pid'" hosts: powell, wagner - name: process - spamd - master nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C spamd -a '/usr/sbin/spamd --create-prefs --max-children 10 --helper-home-dir -d --pidfile=/var/run/spamd.pid'" hosts: liszt - name: process - spamd - child nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:11 -c 1: -C spamd -a 'spamd child'" hosts: liszt, wagner hostgroups: spamd depends: process - spamd - master # - name: process - spamd - master nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u debbugs -C spamd -a '/usr/sbin/spamd -d '" hosts: busoni - name: process - spamd - child nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:6 -c 1: -u debbugs -C spamd -a 'spamd child'" hosts: busoni # - name: unwanted process - spamd nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C spamd" hostgroups: computers excludehostgroups: spamd excludehosts: liszt, busoni, wagner ### #- # name: process - greylistd # nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u greylist -C greylistd -a '/usr/bin/python /usr/sbin/greylistd'" # hostgroups: heavy-exim # - name: unwanted process - greylistd nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C greylistd" hostgroups: computers ### - name: process - postgrey nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postgrey -C postgrey -a '/usr/sbin/postgrey --pidfile=/var/run/postgrey.pid --daemonize --unix=/var/run/postgrey/socket --retry-window=4 --auto-whitelist-clients=10 --exim'" hostgroups: heavy-exim - name: process - postgrey nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postgrey -C postgrey -a '/usr/sbin/postgrey --pidfile=/var/run/postgrey.pid --daemonize --inet=127.0.0.1:60000'" hostgroups: heavy-postfix # - name: unwanted process - postgrey nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C postgrey" hostgroups: computers excludehostgroups: heavy-postfix, heavy-exim ### - name: process - amavis - master nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u amavis -C amavisd-new -a 'amavisd (master)'" hostgroups: amavis-hosts - name: process - amavis - all nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1:10 -u amavis -C amavisd-new -a 'amavisd '" hostgroups: amavis-hosts depends: process - amavis - master # - name: unwanted process - amavis nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C amavisd-new" hostgroups: computers excludehostgroups: amavis-hosts ### - name: process - weightd - master nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u polw -C policyd-weight -a 'policyd-weight (master)'" hostgroups: heavy-postfix - name: process - weightd - cache nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u polw -C policyd-weight -a 'policyd-weight (cache)'" hostgroups: heavy-postfix depends: process - weightd - master - name: process - weightd - child nrpe: "/usr/lib/nagios/plugins/check_procs -w 2:50 -c 1: -u polw -C policyd-weight -a 'policyd-weight (child)'" hostgroups: heavy-postfix depends: process - weightd - master # - name: unwanted process - policyd-weight nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C policyd-weight" hostgroups: computers excludehostgroups: heavy-postfix ### - name: process - postfix - master nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C master -a '/usr/lib/postfix/master'" hostgroups: postfix-hosts - name: process - postfix - qmgr nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postfix -C qmgr -a 'qmgr -l -t fifo -u'" hostgroups: postfix-hosts depends: process - postfix - master #- # name: process - postfix - tlsmgr # nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postfix -C tlsmgr -a 'tlsmgr -l -t fifo -u'" # hostgroups: postfix-hosts # depends: process - postfix - master - name: process - postfix - pickup nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postfix -C pickup -a 'pickup -l -t fifo -u -c'" hostgroups: postfix-hosts depends: process - postfix - master - name: process - postfix - anvil nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:1 -c 0: -u postfix -C anvil -a 'anvil -l -t unix -u'" hostgroups: postfix-hosts depends: process - postfix - master - name: process - postfix - trivial-rewrite nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:10 -c 0:15 -u postfix -C trivial-rewrite -a 'trivial-rewrite -n rewrite -t unix -u -c'" hostgroups: postfix-hosts depends: process - postfix - master - name: process - postfix - proxymap nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:10 -c 0:15 -u postfix -C proxymap -a 'proxymap -t unix -u'" hostgroups: postfix-hosts depends: process - postfix - master - name: process - postfix - cleanup nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:30 -c 0:50 -u postfix -C cleanup -a 'cleanup -z -t unix -u -c'" hostgroups: postfix-hosts depends: process - postfix - master - name: process - postfix - local nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:30 -c 0:50 -u postfix -C local -a 'local -t unix'" hostgroups: postfix-hosts depends: process - postfix - master - name: process - postfix - smtpd nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:150 -c 0:200 -u postfix -C smtpd -a 'smtpd -n smtp -t inet -u -c'" hosts: liszt depends: process - postfix - master - name: process - postfix - smtp nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:350 -c 0:500 -u postfix -C smtp -a 'smtp -t unix -u -c'" hosts: liszt depends: process - postfix - master ### - name: network service - smtp check: dsa_check_smtp hostgroups: computers excludehostgroups: postfix-hosts, incomingmailrelayed, incomingmailrelayed2025 depends: process - exim - name: network service - smtp check: dsa_check_smtp hostgroups: postfix-hosts depends: process - postfix - master - name: network service - submission check: dsa_check_smtp_port!587 hostgroups: incomingmailrelayed depends: process - exim - name: network service - smtp 2025 check: dsa_check_smtp_port!2025 hostgroups: incomingmailrelayed2025 depends: process - exim - name: network service local - smtps cert nrpe: "/usr/lib/nagios/plugins/check_http -H localhost -p 465 -S -C 14 -t 45" hostgroups: postfix-hosts depends: process - postfix - master normal_check_interval: 120 - name: setup - dsa config nrpe: "/usr/lib/nagios/plugins/dsa-check-config" hostgroups: computers excludehosts: wagner, vasks normal_check_interval: 60 - name: setup - ud-ldap freshness nrpe: "/usr/lib/nagios/plugins/dsa-check-udldap-freshness" excludehosts: wagner, vasks hostgroups: computers - name: system - available entropy nrpe: "/usr/lib/nagios/plugins/dsa-check-entropy" event_handler: dsa_event_handler_restart_ekey hostgroups: computers excludehosts: vasks, wagner excludehostgroups: freebsd ### - name: local resolver nrpe: "/usr/lib/nagios/plugins/dsa-check-resolver www.debian.org www.google.com" hostgroups: computers excludehosts: vasks, wagner normal_check_interval: 60 - name: process - unbound nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u unbound -C unbound -a '/usr/sbin/unbound'" excludehosts: vasks, wagner hostgroups: unbound-hosts, squeeze, wheezy ### - name: process - uptimed nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u daemon -C uptimed -a '/usr/sbin/uptimed'" hostgroups: computers excludehosts: vasks, wagner ### - name: unwanted process - irqbalance nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C irqbalance" hostgroups: computers #### ### #- # name: unwanted process - system-tools-backends # nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C system-tools-ba" # hostgroups: computers #- # name: unwanted process - dbus-daemon # nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C dbus-daemon" # hostgroups: computers - name: unwanted process - gkrellmd nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C gkrellmd" hostgroups: computers - name: unwanted process - portmap nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C portmap" hostgroups: computers excludehostgroups: nfs-client, nfs-server - name: unwanted process - rpc.statd nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C rpc.statd" hostgroups: computers excludehostgroups: nfs-client, nfs-server - name: unwanted process - inetd nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C inetd" hostgroups: computers excludehosts: grieg, abel, alwyn, vasks - name: unwanted process - snmpd nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C snmpd" hostgroups: computers #### - name: "host SSL cert" nrpe: "if [ -e /etc/ssl/certs/thishost.pem ]; then /usr/lib/nagios/plugins/dsa-check-cert-expire /etc/ssl/certs/thishost.pem; else echo 'No thishost.pem on this host.'; fi" hostgroups: computers - name: "pg SSL cert" nrpe: "/usr/lib/nagios/plugins/dsa-check-cert-expire /etc/ssl/certs/pg-ubcece.debian.org-chained.pem" hosts: danzi ############ Processes/Services that only run on some computers ############ #### ### - name: process - rngd nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C rngd -a '/usr/sbin/rngd -r /dev/hwrng'" hostgroups: dl385 ### - name: process - mdadm monitor servicegroups: raid nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -C mdadm -a '/sbin/mdadm --monitor --pid-file /var/run/mdadm/monitor.pid --daemonise --scan'" hostgroups: sw-raid - name: RAID - sw raid servicegroups: raid nrpe: "/usr/lib/nagios/plugins/dsa-check-raid-sw" hostgroups: sw-raid ### - name: process - monit nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -C monit -a '/usr/sbin/monit -d 300 -I -c /etc/monit/monitrc -s /var/lib/monit/monit.state'" hostgroups: computers excludehosts: vasks, wagner excludehostgroups: armhf - name: process - monit nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -C monit -a '/usr/bin/monit -d 300 -I -c /etc/monit/monitrc -s /var/lib/monit/monit.state'" hostgroups: armhf - name: RAID - arrayprobe servicegroups: raid nrpe: "sudo /usr/bin/arrayprobe" hostgroups: dl385, dl380, dl360, bl460, dl585 excludehosts: franck - name: RAID - arrayprobe servicegroups: raid nrpe: "sudo /usr/bin/arrayprobe -f /dev/cciss/c1d0" hosts: franck - name: HW - hpacucli status servicegroups: raid nrpe: "/usr/lib/nagios/plugins/dsa-check-hpacucli" normal_check_interval: 120 hostgroups: dl385, dl380, dl360, bl460 excludehosts: kassia - name: HW - hpacucli enclosure status servicegroups: raid nrpe: "/usr/lib/nagios/plugins/dsa-check-hpacucli-enclosure 1 1E:1" normal_check_interval: 120 hosts: franck - name: HW - hpacucli status servicegroups: raid nrpe: "/usr/lib/nagios/plugins/dsa-check-hpacucli --ignore-transfer-speed=1I:1:1 --ignore-transfer-speed=1I:1:2" normal_check_interval: 120 hostgroups: dl585 - name: HW - hpacucli status servicegroups: raid nrpe: "/usr/lib/nagios/plugins/dsa-check-hpacucli --ignore-transfer-speed=1I:1:2 --ignore-transfer-speed=1I:1:3 --ignore-transfer-speed=1I:1:4 --ignore-transfer-speed=2I:1:5 --ignore-transfer-speed=2I:1:6" normal_check_interval: 120 hosts: kassia ### - name: HW - hpasmcli status nrpe: "/usr/lib/nagios/plugins/dsa-check-hpasm" normal_check_interval: 120 hostgroups: dl385, dl380, dl360, bl460, dl585 excludehosts: villa, lobos, liszt, senfl, schein, rore - name: HW - hpasmcli status nrpe: "/usr/lib/nagios/plugins/dsa-check-hpasm --ps-no-redundant" normal_check_interval: 120 hosts: villa, lobos, liszt - name: HW - hpasmcli status nrpe: "/usr/lib/nagios/plugins/dsa-check-hpasm --fan-no-redundant" normal_check_interval: 120 hosts: senfl, schein - name: HW - hpasmcli status nrpe: "/usr/lib/nagios/plugins/dsa-check-hpasm --fan-no-redundant --fan-high" normal_check_interval: 120 hosts: rore ### - name: RAID - areca servicegroups: raid nrpe: "/usr/lib/nagios/plugins/dsa-check-raid-areca" hosts: powell ### - name: RAID - aacraid servicegroups: raid nrpe: "/usr/lib/nagios/plugins/dsa-check-raid-aacraid" hostgroups: aacraid ### - name: RAID - megaraid servicegroups: raid nrpe: "/usr/lib/nagios/plugins/dsa-check-raid-megaraid" hostgroups: megaraid ### #- # name: RAID - 3ware # servicegroups: raid # nrpe: "/usr/lib/nagios/plugins/dsa-check-raid-3ware" # hosts: puccini ### - name: RAID - MPT servicegroups: raid nrpe: "/usr/lib/nagios/plugins/dsa-check-raid-mpt" hostgroups: mptraid ### - name: RAID - megactl servicegroups: raid nrpe: "/usr/lib/nagios/plugins/dsa-check-raid-megactl" hostgroups: megactl ### - name: process - slapd nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:20 -c 1:50 -u openldap -C slapd -a '/usr/sbin/slapd -h ldap:/// ldaps:/// -g openldap -u openldap'" hosts: draghi - name: network service - ldaps cert check: dsa_check_cert!636 depends: process - slapd normal_check_interval: 60 hosts: draghi ### - name: process - ulogd nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C ulogd -a '/usr/sbin/ulogd -d'" hostgroups: computers excludehostgroups: freebsd, sparc excludehosts: vasks, wagner - name: unexpected process - ulogd nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C ulogd" hostgroups: freebsd, sparc ### - name: process - udevd nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -p 1 -C udevd -a 'udevd'" hostgroups: computers excludehostgroups: freebsd - name: unexpected process - udev nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C udevd" hostgroups: freebsd ### - name: process - acpid nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C acpid -a '/usr/sbin/acpid'" hostgroups: acpid-hosts - name: unexpected process - acpid nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C acpid" hostgroups: computers excludehostgroups: acpid-hosts, kvmdomains ### # - # name: process - bosserver # nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C bosserver -a '/usr/sbin/bosserver'" # hostgroups: bosserver # ### - name: process - inetd nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C inetd -a '/usr/sbin/inetd'" hosts: grieg, vasks ### - name: process - xinetd nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C xinetd -a '/usr/sbin/xinetd -pidfile /var/run/xinetd.pid -stayalive'" hostgroups: xinetd-hosts - name: unwanted process - xinetd nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C xinetd" hostgroups: computers excludehostgroups: xinetd-hosts ### - name: network service - finger check: check_tcp!79 hosts: draghi depends: process - xinetd ### - name: network service - rsync check: check_tcp!873 hostgroups: rsyncd-hosts depends: process - xinetd excludehosts: merikanto, rietz - name: network service - rsync check: check_tcp!873 hosts: rietz2 depends: rietz:process - xinetd - name: network service - rsync check: check_tcp!873 hosts: merikanto2 depends: merikanto:process - xinetd #- # name: network service - rsync # check: check_tcp!873 # hosts: kassia-sec # depends: kassia:process - xinetd - name: network service - rsync check: check_tcp!873 hosts: merikanto2 depends: merikanto:process - xinetd ### - name: process - nagios3 # there is always one extra process per check currently running.. nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:30 -c 1: -u nagios -C nagios3 -a '/usr/sbin/nagios3 -d /etc/nagios3/nagios.cfg'" hosts: tchaikovsky ### - name: process - apache2 - master nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -C apache2 -a /usr/sbin/apache2" hostgroups: apache2-hosts - name: process - apache2 - worker nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:50 -c 1:100 -u www-data -C apache2 -a /usr/sbin/apache2" hostgroups: apache2-hosts depends: process - apache2 - master - name: unwanted process - apache2 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C apache2" hostgroups: computers excludehostgroups: apache2-hosts - name: network service - http check: check_http hostgroups: apache2-hosts excludehosts: klecker depends: process - apache2 - master - name: network service - http check: check_http depends: klecker:process - apache2 - master hosts: klecker-ftp # keyserver on kaufmann - name: network service - http keyserver check: dsa_check_http_port!11371 hosts: kaufmann depends: process - apache2 - master # https on various hosts - name: network service - https check: check_https hostgroups: apache-https depends: "process - apache2 - master" normal_check_interval: 120 - name: network service - https cert check: dsa_check_cert!443 hostgroups: apache-https depends: network service - https normal_check_interval: 60 - name: unwanted network service - https check: dsa_check_port_closed!443 hostgroups: apache2-hosts excludehostgroups: apache-https # ravel does ssh on port 443 excludehosts: ravel normal_check_interval: 60 #### - name: process - named nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:15 -c 1: -u bind -C named -a '/usr/sbin/named -u bind'" hostgroups: bind9-hosts - name: network service - dns check: check_dns hostgroups: bind9-hosts depends: process - named - name: unwanted process - named nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C named" hostgroups: computers excludehostgroups: bind9-hosts #### - name: process - vsftp - listener nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -C vsftpd -a 'vsftpd: LISTENER'" hostgroups: ftpd-hosts, uploadqueue excludehosts: klecker - name: process - vsftp - instance nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:80 -c 0:100 -u ftp -C vsftpd -a 'vsftpd: '" hostgroups: ftpd-hosts, uploadqueue excludehosts: klecker - name: network service - ftp check: check_ftp hostgroups: ftpd-hosts, uploadqueue excludehosts: klecker depends: process - vsftp - listener - name: network service - ftp check: check_ftp hosts: klecker-ftp depends: klecker:process - xinetd #### - name: process - debianqueued nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:3 -c 1: -u dak -C debianqueued" hostgroups: uploadqueue ### #- # name: process - postresql81 - master # nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postgres -C postmaster -a '/usr/lib/postgresql/8.1/bin/postmaster -D /var/lib/postgresql/8.1/main -c config_file=/etc/postgresql/8.1/main/postgresql.conf'" # hostgroups: postgres81-hosts #- # name: process - postresql81 - writer # nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postgres -C postmaster -a 'postgres: writer process'" # hostgroups: postgres81-hosts # depends: process - postresql81 - master #- # name: process - postresql81 - buffer # nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postgres -C postmaster -a 'postgres: stats buffer process'" # hostgroups: postgres81-hosts # depends: process - postresql81 - master #- # name: process - postresql81 - collector # nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postgres -C postmaster -a 'postgres: stats collector process'" # hostgroups: postgres81-hosts # depends: process - postresql81 - master #### - name: unwanted process - postresql nrpe: "/usr/lib/nagios/plugins/check_procs -w 0 -C postgres" hostgroups: computers excludehostgroups: postgres90-hosts, postgres84-hosts, postgres83-hosts - name: process - postresql90 - master nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:4 -c 1: -u postgres -C postgres -a '/usr/lib/postgresql/9.0/bin/postgres'" hostgroups: postgres90-hosts - name: process - postresql84 - master nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:4 -c 1: -u postgres -C postgres -a '/usr/lib/postgresql/8.4/bin/postgres'" hostgroups: postgres84-hosts - name: process - postresql83 - master nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:4 -c 1: -u postgres -C postgres -a '/usr/lib/postgresql/8.3/bin/postgres'" hostgroups: postgres83-hosts #- # name: process - postresql83 - master udd # nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postgres -C postgres -a '/usr/lib/postgresql/8.3/bin/postgres -D /var/lib/postgresql/8.3/udd -c config_file=/etc/postgresql/8.3/udd/postgresql.conf'" # hosts: piatti #- # name: process - postresql83 - dak master # nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postgres -C postgres -a '/usr/lib/postgresql/8.3/bin/postgres -D /var/lib/postgresql/8.3/dak -c config_file=/etc/postgresql/8.3/dak/postgresql.conf'" # hosts: chopin #- # name: process - postresql84 - dak master # nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postgres -C postgres -a '/usr/lib/postgresql/8.4/bin/postgres -D /var/lib/postgresql/8.4/dak -c config_file=/etc/postgresql/8.4/dak/postgresql.conf'" # hosts: franck, chopin #- # name: process - postresql84 - dak-dev master # nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postgres -C postgres -a '/usr/lib/postgresql/8.4/bin/postgres -D /var/lib/postgresql/8.4/dak-dev -c config_file=/etc/postgresql/8.4/dak-dev/postgresql.conf'" # hosts: franck # backups - name: postgresql backups nrpe: "/usr/bin/sudo -u debbackup /usr/lib/nagios/plugins/dsa-check-backuppg" hosts: beethoven #### - name: process - stunnel4 - postgres-udd nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:6 -c 1: -u stunnel4 -C stunnel4 -a '/usr/bin/stunnel4 /etc/stunnel/postgres-udd-server.conf'" hosts: samosa - name: udd stunnel - master cert nrpe: "/usr/lib/nagios/plugins/check_http -H localhost -p 8080 -S -C 14 -t 45" hosts: samosa #### #### - name: process - stunnel4 - puppet-ekeyd nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:6 -c 1: -u stunnel4 -C stunnel4 -a '/usr/bin/stunnel4 /etc/stunnel/puppet-ekeyd.conf'" hostgroups: squeeze, wheezy excludehosts: fano, fasch, field, finzi #### - name: process - UPS - nut usbhid-ups - ups1 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u nut -C usbhid-ups -a '/lib/nut/usbhid-ups -a ups1'" hosts: franck - name: process - UPS - nut upsd nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u nut -C upsd -a '/sbin/upsd'" hosts: franck - name: process - UPS - nut upsmon master nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C upsmon -a '/sbin/upsmon'" hosts: franck - name: process - UPS - nut upsmon worker nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u nut -C upsmon -a '/sbin/upsmon'" hosts: franck depends: process - UPS - nut upsmon master - name: UPS - on line power nrpe: "/usr/lib/nagios/plugins/dsa-check-ups" hosts: franck depends: process - UPS - nut upsd - name: process - pglistener nrpe: "/usr/lib/nagios/plugins/check_procs -u pglisten -C python -a '/usr/bin/python /usr/share/pglistener/starter.py /etc/pglistener/pglistener.cfg /etc/pglistener/conf.d' -w 1: -c 1:" hosts: wagner, vasks #### #- # name: process - xenconsoled # nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C xenconsoled -a 'xenconsoled'" # hosts: piatti #- # name: process - xenstored # nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C xenstored -a '/usr/lib/xen-3.0.3-1/bin/xenstored --pid-file /var/run/xenstore.pid'" # hosts: piatti #- # name: process - xend # nrpe: "/usr/lib/nagios/plugins/check_procs -w 2:2 -c 2: -u root -C python -a 'python /usr/lib/xen-3.0.3-1/bin/xend start'" # hosts: piatti # #### - name: process - libvirtd nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -C libvirtd -a '/usr/sbin/libvirtd -d'" hosts: unger ### - name: process - buildd servicegroups: buildd nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:5 -u buildd -C perl -a '/usr/bin/buildd'" hosts: fano, fasch, field, finzi contact_groups: buildd - name: process - buildd servicegroups: buildd nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:5 -u buildd -C buildd -a '/usr/bin/buildd'" hostgroups: buildd excludehosts: fano, fasch, field, finzi contact_groups: buildd #### - name: network service - gobby check: check_tcp!6523 hosts: gombert contact_groups: gobby ### #- # name: process - tftpd # nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C in.tftpd -a '/usr/sbin/in.tftpd -l -B 1450 -s /var/lib/tftpboot'" # hostgroups: tftpd-hosts ### # - # name: process - dhcpd # nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C dhcpd3 -a '/usr/sbin/dhcpd3 -q eth0'" # hosts: paer ### ############ NFS Stuff ############ #### - name: process - portmap nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u daemon -C portmap -a '/sbin/portmap'" hostgroups: nfs-client, nfs-server - name: process - statd nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u statd -C rpc.statd -a '/sbin/rpc.statd'" hostgroups: nfs-client, nfs-server - name: process - nfsd nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u root -C nfsd -a '[nfsd]'" hostgroups: nfs-server - name: process - lockd nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C lockd -a '[lockd]'" hostgroups: nfs-server - name: process - mountd nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C rpc.mountd -a '/sbin/rpc.mountd'" hostgroups: nfs-server # see if the nfs stuff works and doesn't hang. # the df check all script will also hang, but we don't appear to pay attention to that - name: nfs mount ftp archive nrpe: "/usr/lib/nagios/plugins/check_disk 100 100 /srv/ftp.debian.org/ftp" hosts: bellini - name: nfs server stabile reachable nrpe: "/usr/lib/nagios/plugins/check_ping -H 192.168.2.13 -w 50,10% -c 200,30%" hosts: quantz # - name: process - automount nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C automount -a '/usr/sbin/automount'" hostgroups: autofs - name: unwanted process - automount nrpe: "/usr/lib/nagios/plugins/check_procs -w 0 -C automount" hostgroups: computers excludehostgroups: autofs ############ MISC OTHER Stuff ############ ##### - name: mirror sync - bugs check: "dsa_check_mirrorsync_skew!bugs.debian.org!project/trace/bugs-master.debian.org!120:600" hosts: global - name: mirror sync - security check: "dsa_check_mirrorsync_skew!security-nagios.debian.org!project/trace/security-master.debian.org!150:3600" hosts: global - name: mirror sync - volatile check: "dsa_check_mirrorsync_skew!volatile.debian.org!debian-volatile/project/trace/volatile-master.debian.org!150:3600" hosts: global - name: mirror sync - packages check: "dsa_check_mirrorsync_skew!packages.debian.org!Pics/.trace!3600:57600" hosts: global normal_check_interval: 15 max_check_attempts: 5 retry_check_interval: 5 - name: mirror sync - snapshot check: "dsa_check_mirrorsync_skew!snapshot.debian.org!project/trace/snapshot-master.debian.org!3600:28800" hosts: global normal_check_interval: 15 max_check_attempts: 5 retry_check_interval: 5 - name: DNS SOA sync - debian.org check: "dsa_check_soas_add!draghi.debian.org!debian.org" hosts: global - name: DNS SOA sync - debian.net check: "dsa_check_soas_add!draghi.debian.org!debian.net" hosts: global - name: DNS SOA sync - debian.com check: "dsa_check_soas_add!draghi.debian.org!debian.com" hosts: global - name: DNS SOA sync - mirror.debian.net check: "dsa_check_soas_add!draghi.debian.org!mirror.debian.net" hosts: global - name: DNS SOA sync - 144-28.118.59.86.in-addr.arpa check: "dsa_check_soas_add!draghi.debian.org!144-28.118.59.86.in-addr.arpa" hosts: global - name: DNS SOA sync - alioth.debian.org check: "dsa_check_soas_add!alioth.debian.org!alioth.debian.org" hosts: global - name: DNS SOA sync - 2.5.1.1.8.0.0.8.d.8.0.1.0.0.2.ip6.arpa check: "dsa_check_soas!2.5.1.1.8.0.0.8.d.8.0.1.0.0.2.ip6.arpa" hosts: global - name: DNS SOA sync - a.5.1.1.8.0.0.8.d.8.0.1.0.0.2.ip6.arpa check: "dsa_check_soas!a.5.1.1.8.0.0.8.d.8.0.1.0.0.2.ip6.arpa" hosts: global - name: DNS SOA sync - 2.6.a.0.4.6.5.6.1.0.0.0.2.0.0.0.8.d.8.0.1.0.0.2.ip6.arpa check: "dsa_check_soas!2.6.a.0.4.6.5.6.1.0.0.0.2.0.0.0.8.d.8.0.1.0.0.2.ip6.arpa" hosts: global - name: DNS SEC - signature expiry hosts: global remotecheck: "/usr/lib/nagios/plugins/dsa-check-zone-rrsig-expiration-many --warn 20d --critical 7d --geozonedir /srv/dns.debian.org/geo/zones /srv/dns.debian.org/var/gitdns/domains" runfrom: orff - name: DNS SEC - delegations hosts: global remotecheck: "/usr/lib/nagios/plugins/dsa-check-dnssec-delegation --dir /srv/dns.debian.org/var/gitdns/domains --dir /srv/dns.debian.org/geo/zones check-header" runfrom: orff ############ - name: ping alive check remotecheck: "/usr/lib/nagios/plugins/check_ping -H $HOSTADDRESS$ -w 50,10% -c 200,30%" runfrom: dijkstra hosts: giustini normal_check_interval: 5 max_check_attempts: 4 retry_check_interval: 1 - name: Overall Unit Status remotecheck: "/usr/lib/nagios/plugins/check_snmp -H $HOSTADDRESS$ -C public -P 2c -o connUnitStatus -n -c 3 -w 3" runfrom: dijkstra hosts: giustini - name: event log remotecheck: "/usr/lib/nagios/plugins/dsa-check-msa-eventlog --start=2041 $HOSTADDRESS$ public" runfrom: dijkstra hosts: giustini