# - *: mailq
# - *: check munin stats collection works
# - *: check backups are successful
+# - *: unwanted: network: auth, discard, daytime, time (on some), cvs-pserver, rsync (on some), ftp (on some), http (on some)
+# - goetz: gmond/gmetad
+# - verdi: pg upgrade, openvpn
+# - mundy: salinfo_decode
+# - puccini: mailgraph
# -
# - agnesi
-# - albeniz
-# - bruckner
-# - caballero
# - casals
# - crest
# - elara
-# - escher
# - europa
-# - goedel
-# - goetz
# - kassia
# - kullervo
# - lebrun
-# - leisner
-# - liszt
-# - malo
-# - mayer
-# - mayr
-# - mundy
# - murphy
-# - paer
-# - pergolesi
# - piatti
-# - puccini
-# - raptopr
+# - tartini
+#sarge:
+# - caballero
+# - spontini
+
+# down:
# - ravel
# - sarti
+# - goedel
+# - leisner
# - schulz
-# - spontini
-# - tartini
-# - verdi
-# - voltaire
---
#############################
# hosts
#############################
servers:
- gw-MAN-DA-debian:
+ gw-man-da:
address: 82.195.75.126
parents: gw-HP-ftc
hostgroups: routing-infrastructure
address: 195.49.152.190
parents: gw-HP-ftc
hostgroups: routing-infrastructure
+ gw-freenet:
+ address: 62.104.23.249
+ parents: gw-HP-ftc
+ hostgroups: routing-infrastructure
+ gw-topalis:
+ address: 195.243.109.254
+ parents: gw-HP-ftc
+ hostgroups: routing-infrastructure
+ gw-sanger:
+ address: 193.62.202.18
+ parents: gw-HP-ftc
+ hostgroups: routing-infrastructure
+ gw-cst:
+ address: 213.188.99.215
+ parents: gw-HP-ftc
+ hostgroups: routing-infrastructure
+ gw-lrz:
+ address: 129.187.0.150
+ parents: gw-HP-ftc
+ hostgroups: routing-infrastructure
+ gw-frost:
+ address: 130.81.242.195
+ parents: gw-HP-ftc
+ hostgroups: routing-infrastructure
+ gw-1und1:
+ address: 195.20.247.53
+ parents: gw-HP-ftc
+ hostgroups: routing-infrastructure
samosa:
address: 192.25.206.57
- hostgroups: computers, service, dl380, apache2-hosts, bind9-hosts, heavy-email
+ hostgroups: computers, service, dl380, apache2-hosts, bind9-hosts, heavy-exim
raff:
address: 192.25.206.59
parents: samosa
- hostgroups: computers, service, dl380, apache1-hosts, bind9-hosts, rsyncd-hosts, heavy-email
+ hostgroups: computers, service, dl380, apache1-hosts, bind9-hosts, rsyncd-hosts, heavy-exim
gluck:
address: 192.25.206.10
parents: samosa
- hostgroups: computers, general, dl380, apache1-hosts, bind9-hosts, rsyncd-hosts, heavy-email
+ hostgroups: computers, general, dl380, apache1-hosts, bind9-hosts, rsyncd-hosts, heavy-exim
merkel:
address: 192.25.206.16
parents: samosa
- hostgroups: computers, general, apache1-hosts, bind9-hosts, rsyncd-hosts, sw-raid, postgres81-hosts, heavy-email
+ hostgroups: computers, general, apache1-hosts, bind9-hosts, rsyncd-hosts, sw-raid, postgres81-hosts, heavy-exim
spohr:
address: 192.25.206.33
parents: samosa
address: 192.25.206.68
parents: samosa
hostgroups: computers, buildd, sw-raid
+ mundy:
+ address: 192.25.206.62
+ parents: samosa
+ hostgroups: computers, buildd
+ paer:
+ address: 192.25.206.11
+ parents: samosa
+ hostgroups: computers, porterbox, bind9-hosts
bartok:
address: 82.195.75.91
- parents: gw-MAN-DA-debian
+ parents: gw-man-da
hostgroups: computers, service, syslog-ng-hosts, postfix-hosts, dl385
sperger:
address: 82.195.75.98
- parents: gw-MAN-DA-debian
+ parents: gw-man-da
hostgroups: computers, porterbox, sw-raid
agricola:
address: 82.195.75.86
- parents: gw-MAN-DA-debian
+ parents: gw-man-da
hostgroups: computers, porterbox, sw-raid
arcadelt:
address: 82.195.75.87
- parents: gw-MAN-DA-debian
+ parents: gw-man-da
hostgroups: computers, buildd, sw-raid
+ liszt:
+ address: 82.195.75.100
+ parents: gw-man-da
+ hostgroups: computers, service, apache2-hosts, bind9-hosts, postfix-hosts, heavy-postfix, dl385
master:
address: 70.103.162.29
parents: gw-brainfood
- hostgroups: computers, general, apache2-hosts, bind9-hosts, heavy-email
+ hostgroups: computers, general, apache2-hosts, bind9-hosts, heavy-exim
ries:
address: 128.148.34.103
- parents: gw-osuosl
- hostgroups: computers, service, apache2-hosts, bind9-hosts, ftpd-hosts, dl385, rsyncd-hosts, postgres81-hosts, heavy-email
+ parents: gw-brown.edu
+ hostgroups: computers, service, apache2-hosts, bind9-hosts, ftpd-hosts, dl385, rsyncd-hosts, postgres81-hosts, heavy-exim
+ mayer:
+ address: 140.211.166.78
+ parents: gw-osuosl
+ hostgroups: computers, buildd
+ mayr:
+ address: 140.211.166.58
+ parents: gw-osuosl
+ hostgroups: computers, buildd
+ malo:
+ address: 140.211.166.27
+ parents: gw-osuosl
+ hostgroups: computers, buildd, tftpd-hosts
rietz:
address: 140.211.166.43
- parents: gw-brown.edu
- hostgroups: computers, service, apache2-hosts, bind9-hosts, rsyncd-hosts, dl385, heavy-email
+ parents: gw-osuosl
+ hostgroups: computers, service, apache2-hosts, bind9-hosts, rsyncd-hosts, dl385, heavy-exim
rietz2:
address: 140.211.166.44
parents: rietz
klecker:
address: 194.109.137.218
parents: gw-xs4all
- hostgroups: computers, service, apache2-hosts, ftpd-hosts, rsyncd-hosts, bind9-hosts, dl385, postgres81-hosts, heavy-email
+ hostgroups: computers, service, apache2-hosts, ftpd-hosts, rsyncd-hosts, bind9-hosts, dl385, postgres81-hosts, heavy-exim
saens:
address: 128.101.240.212
parents: gw-umn.edu
- hostgroups: computers, service, apache2-hosts, ftpd-hosts, rsyncd-hosts, dl380, heavy-email
+ hostgroups: computers, service, apache2-hosts, ftpd-hosts, rsyncd-hosts, dl380, heavy-exim
argento:
address: 195.49.152.174
parents: gw-dg-i.net
hostgroups: computers, buildd, sw-raid
+ pergolesi:
+ address: 62.104.23.252
+ parents: gw-freenet
+ hostgroups: computers, porterbox, sw-raid
+ bruckner:
+ address: 62.104.23.253
+ parents: gw-freenet
+ hostgroups: computers, porterbox
+
+ raptor:
+ address: 195.243.109.162
+ parents: gw-topalis
+ hostgroups: computers, porterbox
+
+ albeniz:
+ address: 193.62.202.27
+ parents: gw-sanger
+ hostgroups: computers, porterbox, sw-raid
+ goetz:
+ address: 193.62.202.26
+ parents: gw-sanger
+ hostgroups: computers, buildd, sw-raid
+
+ escher:
+ address: 213.188.99.215
+ parents: gw-cst
+ hostgroups: computers, porterbox
+
+ verdi:
+ address: 192.54.42.193
+ parents: gw-lrz
+ hostgroups: computers, service, apache2-hosts, ftpd-hosts, rsyncd-hosts, postgres81-hosts, postfix-hosts
+
+ voltaire:
+ address: 72.66.115.54
+ parents: gw-frost
+ hostgroups: computers, buildd
+
+ puccini:
+ address: 87.106.4.56
+ parents: gw-frost
+ hostgroups: computers, service, apache2-hosts, bind9-hosts, postfix-hosts, heavy-postfix
+
#############################
# host groups
#
postfix-hosts:
alias: hosts running postfix instead of exim
private: 1
- heavy-email:
+ heavy-exim:
alias: "hosts running the full mail stuff, including clamav, SA, and greylistd"
private: 1
+ heavy-postfix:
+ alias: "postfix hosts running the full mail stuff, including clamav, SA, postgrey, amavis, policyd-weight"
+ private: 1
apache2-hosts:
alias: hosts running apache2
private: 1
ftpd-hosts:
alias: hosts running vsftpd
private: 1
+ tftpd-hosts:
+ alias: hosts running a tftpd (tftpd-hpa as a daemon)
+ private: 1
rsyncd-hosts:
alias: hosts providing rsync services via xinetd
private: 1
-
name: disk usage on /boot
nrpe: "/usr/lib/nagios/plugins/check_disk 60 80 /boot"
- hosts: sperger, rietz, steffani, penalosa, peri
+ hosts: sperger, rietz, steffani, penalosa, peri, albeniz, escher, goetz, mayer, mayr, paer
-
name: disk usage on /var
nrpe: "/usr/lib/nagios/plugins/check_disk 50 75 /var"
- hosts: bartok, samosa, raff, lobos, villa, gluck, saens
+ hosts: bartok, samosa, raff, lobos, villa, gluck, saens, escher, voltaire, puccini
-
name: disk usage on /org
nrpe: "/usr/lib/nagios/plugins/check_disk 80 90 /org"
- hosts: bartok, sperger, samosa, raff, lobos, villa, steffani, merkel, saens
+ hosts: bartok, sperger, samosa, raff, lobos, villa, steffani, merkel, saens, pergolesi, verdi, puccini
-
name: disk usage on /srv
nrpe: "/usr/lib/nagios/plugins/check_disk 80 90 /srv"
-
name: disk usage on /tmp
nrpe: "/usr/lib/nagios/plugins/check_disk 60 80 /tmp"
- hosts: samosa, raff, gluck, saens
+ hosts: samosa, raff, gluck, saens, escher, puccini
-
name: disk usage on /usr
nrpe: "/usr/lib/nagios/plugins/check_disk 75 90 /usr"
- hosts: samosa, raff, lobos, villa, gluck, saens
+ hosts: samosa, raff, lobos, villa, gluck, saens, pergolesi, puccini
-
name: disk usage on /home
nrpe: "/usr/lib/nagios/plugins/check_disk 75 90 /home"
- hosts: gluck
+ hosts: gluck, raptor, escher, voltaire
+ -
+ name: disk usage on /chroot
+ nrpe: "/usr/lib/nagios/plugins/check_disk 75 90 /chroot"
+ hosts: raptor
+ -
+ name: disk usage on /mnt/hdc
+ nrpe: "/usr/lib/nagios/plugins/check_disk 75 90 /mnt/hdc"
+ hosts: voltaire
############ All Computers ############
####
# etch: nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u ntp -C ntpd -a '/usr/sbin/ntpd -p /var/run/ntpd.pid'"
nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -C ntpd -a '/usr/sbin/ntpd -p /var/run/ntpd.pid'"
hostgroups: computers
+ excludehosts: raptor
-
name: network service - ntp
check: check_ntp
hostgroups: computers
depends: process - ntpd
+ excludehosts: raptor
+ #
+ -
+ name: network service - time
+ check: check_time
+ hosts: raptor
+ depends: process - xinetd
+
###
-
name: process - atd
-
name: process - clamav - clamd
nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:2 -c 1: -u clamav -C clamd -a '/usr/sbin/clamd'"
- hostgroups: heavy-email
+ hostgroups: heavy-exim, heavy-postfix
-
name: service - clamav
nrpe: "/usr/lib/nagios/plugins/check_clamd -H /var/run/clamav/clamd.ctl"
- hostgroups: heavy-email
+ hostgroups: heavy-exim, heavy-postfix
depends: process - clamav - clamd
-
name: process - clamav - freshclam
nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u clamav -C freshclam -a '/usr/bin/freshclam -d --quiet'"
- hostgroups: heavy-email
+ hostgroups: heavy-exim, heavy-postfix
#
-
name: unwanted process - clamav
nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C clamd"
hostgroups: computers
- excludehostgroups: heavy-email
+ excludehostgroups: heavy-exim, heavy-postfix
-
name: unwanted process - freshclam
nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C freshclam"
hostgroups: computers
- excludehostgroups: heavy-email
+ excludehostgroups: heavy-exim, heavy-postfix
###
-
name: process - spamd - master
nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C spamd -a '/usr/sbin/spamd --create-prefs --max-children 5 --helper-home-dir -d --pidfile=/var/run/spamd.pid'"
#hosts: samosa
- hostgroups: heavy-email
+ hostgroups: heavy-exim
excludehosts: rietz
-
name: process - spamd - child
nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:6 -c 1: -C spamd -a 'spamd child'"
- hostgroups: heavy-email
+ hostgroups: heavy-exim
depends: process - spamd - master
excludehosts: rietz
#
name: unwanted process - spamd
nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C spamd"
hostgroups: computers
- excludehostgroups: heavy-email
+ excludehostgroups: heavy-exim
###
-
name: process - greylistd
nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u greylist -C greylistd -a '/usr/bin/python /usr/sbin/greylistd'"
- hostgroups: heavy-email
+ hostgroups: heavy-exim
#
-
name: unwanted process - greylistd
nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C greylistd"
hostgroups: computers
- excludehostgroups: heavy-email
+ excludehostgroups: heavy-exim
+
+ ###
+ -
+ name: process - postgrey
+ nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postgrey -C postgrey -a '/usr/sbin/postgrey --pidfile=/var/run/postgrey.pid --daemonize --inet=127.0.0.1:60000'"
+ hostgroups: heavy-postfix
+ #
+ -
+ name: unwanted process - postgrey
+ nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C postgrey"
+ hostgroups: computers
+ excludehostgroups: heavy-postfix
+ ###
+ -
+ name: process - amavis - master
+ nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u amavis -C amavisd-new -a 'amavisd (master)'"
+ hostgroups: heavy-postfix
+ -
+ name: process - amavis - all
+ nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1:10 -u amavis -C amavisd-new -a 'amavisd '"
+ hostgroups: heavy-postfix
+ depends: process - amavis - master
+ #
+ -
+ name: unwanted process - amavis
+ nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C amavisd-new"
+ hostgroups: computers
+ excludehostgroups: heavy-postfix
+ ###
+ -
+ name: process - weightd - master
+ nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u polw -C policyd-weight -a 'policyd-weight (master)'"
+ hostgroups: heavy-postfix
+ -
+ name: process - weightd - cache
+ nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u polw -C policyd-weight -a 'policyd-weight (cache)'"
+ hostgroups: heavy-postfix
+ depends: process - weightd - master
+ -
+ name: process - weightd - child
+ nrpe: "/usr/lib/nagios/plugins/check_procs -w 2:30 -c 1: -u polw -C policyd-weight -a 'policyd-weight (child)'"
+ hostgroups: heavy-postfix
+ depends: process - weightd - master
+ #
+ -
+ name: unwanted process - amavis
+ nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C policyd-weight"
+ hostgroups: computers
+ excludehostgroups: heavy-postfix
+
###
nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:10 -c 0:15 -u postfix -C proxymap -a 'proxymap -t unix -u'"
hostgroups: postfix-hosts
depends: process - postfix - master
- -
- name: process - postfix - smtpd
- nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:10 -c 0:15 -u postfix -C smtpd -a 'smtpd -n smtp -t inet -u -c'"
- hostgroups: postfix-hosts
- depends: process - postfix - master
-
name: process - postfix - cleanup
nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:30 -c 0:50 -u postfix -C cleanup -a 'cleanup -z -t unix -u -c'"
hostgroups: postfix-hosts
depends: process - postfix - master
+ -
+ name: process - postfix - smtpd
+ nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:10 -c 0:15 -u postfix -C smtpd -a 'smtpd -n smtp -t inet -u -c'"
+ hostgroups: postfix-hosts
+ excludehosts: liszt
+ depends: process - postfix - master
+ -
+ name: process - postfix - smtp
+ nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:10 -c 0:15 -u postfix -C smtp -a 'smtp -t unix -u -c'"
+ hostgroups: postfix-hosts
+ excludehosts: liszt
+ depends: process - postfix - master
+
+ -
+ name: process - postfix - smtpd
+ nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:100 -c 0:150 -u postfix -C smtpd -a 'smtpd -n smtp -t inet -u -c'"
+ hosts: liszt
+ depends: process - postfix - master
+ -
+ name: process - postfix - smtp
+ nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:250 -c 0:500 -u postfix -C smtp -a 'smtp -t unix -u -c'"
+ hosts: liszt
+ depends: process - postfix - master
###
-
name: process - irqbalance
nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C irqbalance -a '/usr/sbin/irqbalance'"
hostgroups: computers
- excludehosts: arcadelt, agricola, argento, penalosa, peri
+ excludehosts: arcadelt, agricola, argento, penalosa, peri, escher, bruckner
+ ####
+ ###
+ -
+ name: unwanted process - system-tools-backends
+ nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C system-tools-ba"
+ hostgroups: computers
+ -
+ name: unwanted process - dbus-daemon
+ nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C dbus-daemon"
+ hostgroups: computers
+ -
+ name: unwanted process - gkrellmd
+ nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C gkrellmd"
+ hostgroups: computers
+ -
+ name: unwanted process - portmap
+ nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C portmap"
+ hostgroups: computers
+ -
+ name: unwanted process - rpc.statd
+ nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C rpc.statd"
+ hostgroups: computers
+ -
+ name: unwanted process - inetd
+ nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C inetd"
+ hostgroups: computers
+
############ Processes/Services that only run on some computers ############
####
-
name: process - udevd
nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C udevd -a 'udevd'"
- hosts: sperger, ries, steffani, merkel, spohr, peri, penalosa
+ hosts: sperger, ries, steffani, merkel, spohr, peri, penalosa, albeniz, escher, verdi, liszt
###
-
name: process - acpid
nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C acpid -a '/usr/sbin/acpid -c /etc/acpi/events -s /var/run/acpid.socket'"
- hosts: ries, steffani
+ hosts: ries, steffani, liszt
###
-
name: process - xinetd
nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C xinetd -a '/usr/sbin/xinetd -pidfile /var/run/xinetd.pid -stayalive'"
- hosts: samosa
+ hosts: samosa, raptor
hostgroups: rsyncd-hosts
+ -
+ name: unwanted process - xinetd
+ nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C xinetd"
+ hostgroups: computers
+ excludehosts: samosa, raptor
+ excludehostgroups: rsyncd-hosts
###
-
name: network service - finger
check: check_dns
hostgroups: bind9-hosts
depends: process - named
+ -
+ name: unwanted process - named
+ nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C named"
+ hostgroups: computers
+ excludehostgroups: bind9-hosts
####
-
hostgroups: ftpd-hosts
-
name: process - vsftp - instance
- nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:10 -c 0:30 -u ftp -C vsftpd -a 'vsftpd: '"
+ nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:30 -c 0:50 -u ftp -C vsftpd -a 'vsftpd: '"
hostgroups: ftpd-hosts
-
name: network service - ftp
name: process - buildd
nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u buildd -C buildd '/usr/bin/perl /usr/bin/buildd'"
hostgroups: buildd
+
+ ###
+ -
+ name: process - iscsid
+ nrpe: "/usr/lib/nagios/plugins/check_procs -w 2:2 -c 1: -u root -C iscsid '/usr/sbin/iscsid'"
+ hosts: raptor
+
+ ###
+ -
+ name: process - tftpd
+ nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C in.tftpd -a '/usr/sbin/in.tftpd -l -B 1450 -s /var/lib/tftpboot'"
+ hostgroups: tftpd-hosts
+ ###
+ -
+ name: process - dhcpd
+ nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C dhcpd3 -a '/usr/sbin/dhcpd3 -q eth0'"
+ hosts: paer