X-Git-Url: https://git.adam-barratt.org.uk/?a=blobdiff_plain;f=config%2Fnagios-master.cfg;h=1adfa9797ee2624a811f2fb97f68791f2f1a5963;hb=f9d8c7159f59ec2edd9b6f26a4c966816847ad3c;hp=fb90dda4ee55844f171d048cc52ae5b13b37eabd;hpb=2ec59adeebc233f943ab6f5e621b4c129883c2b2;p=mirror%2Fdsa-nagios.git diff --git a/config/nagios-master.cfg b/config/nagios-master.cfg index fb90dda..1adfa97 100644 --- a/config/nagios-master.cfg +++ b/config/nagios-master.cfg @@ -199,7 +199,7 @@ servers: wieck: address: 195.20.242.89 parents: gw-1und1-sec - hostgroups: computers, service, apache2-hosts, ftpd-hosts, rsyncd-hosts, acpid-hosts, xinetd-hosts, squeeze + hostgroups: computers, service, apache2-hosts, rsyncd-hosts, acpid-hosts, xinetd-hosts, squeeze, security_mirror # }}} # {{{ gw-accumu pettersson: @@ -248,10 +248,6 @@ servers: address: 217.140.96.68 parents: gw-arm hostgroups: computers, hasbootfs, hassrvfs, wheezy, armhf, buildd - hebden: - address: 217.140.96.69 - parents: gw-arm - hostgroups: computers, hasbootfs, hassrvfs, wheezy, armhf, buildd henze: address: 217.140.96.70 parents: gw-arm @@ -285,7 +281,7 @@ servers: santoro: address: 200.17.202.197 parents: gw-c3sl - hostgroups: computers, service, apache2-hosts, ftpd-hosts, rsyncd-hosts, xinetd-hosts, hassrvfs, squeeze, high-RTT + hostgroups: computers, service, apache2-hosts, rsyncd-hosts, xinetd-hosts, hassrvfs, squeeze, high-RTT, security_mirror contacts: faw # }}} # {{{ gw-carnet @@ -302,7 +298,7 @@ servers: gluck: address: 150.203.164.38 parents: gw-cecsit - hostgroups: computers, service, apache2-hosts, ftpd-hosts, rsyncd-hosts, dl380, hassrvfs, acpid-hosts, xinetd-hosts, squeeze + hostgroups: computers, service, apache2-hosts, rsyncd-hosts, dl380, hassrvfs, acpid-hosts, xinetd-hosts, squeeze, security_mirror # }}} # {{{ gw-conova sompek: @@ -315,10 +311,6 @@ servers: hostgroups: computers, buildd, hassrvfs, sw-raid, squeeze, sparc # }}} # {{{ gw-csail - rore: - address: 128.31.0.49 - parents: gw-csail - hostgroups: computers, service, dl360, acpid-hosts, hassrvfs, apache2-hosts, squeeze senfl: address: 128.31.0.51 parents: gw-csail @@ -326,7 +318,7 @@ servers: steffani: address: 128.31.0.36 parents: gw-csail - hostgroups: computers, service, apache2-hosts, ftpd-hosts, rsyncd-hosts, sw-raid, acpid-hosts, hasbootfs, hasorgfs, xinetd-hosts, squeeze + hostgroups: computers, service, apache2-hosts, rsyncd-hosts, sw-raid, acpid-hosts, hasbootfs, hasorgfs, xinetd-hosts, squeeze, security_mirror # }}} # {{{ gw-dgi argento: @@ -445,7 +437,7 @@ servers: schein: address: 149.20.20.6 parents: gw-isc - hostgroups: computers, service, apache2-hosts, ftpd-hosts, rsyncd-hosts, acpid-hosts, dl360, hasorgfs, xinetd-hosts, squeeze + hostgroups: computers, service, apache2-hosts, rsyncd-hosts, acpid-hosts, dl360, hasorgfs, xinetd-hosts, squeeze, security_mirror # }}} # {{{ gw-karlsruhe zemlinsky: @@ -474,9 +466,9 @@ servers: parents: gw-man-da hostgroups: computers, service, dl380, acpid-hosts, squeeze bendel: - address: 82.195.75.101 + address: 82.195.75.100 parents: czerny - hostgroups: computers, service, hasbootfs, kvmdomains, hassrvfs, apache2-hosts, squeeze, postfix-hosts, heavy-postfix, acpid-hosts, apache-https + hostgroups: computers, service, hasbootfs, kvmdomains, hassrvfs, apache2-hosts, squeeze, postfix-hosts, heavy-postfix, acpid-hosts, apache-https, amavis-hosts new-master: address: 82.195.75.110 parents: czerny @@ -486,10 +478,14 @@ servers: parents: gw-man-da hostgroups: computers, service, acpid-hosts, heavy-exim, mail-relay, apache2-hosts, squeeze liszt: - address: 82.195.75.100 + address: 82.195.75.101 parents: gw-man-da - hostgroups: computers, service, apache2-hosts, bind9-hosts, postfix-hosts, heavy-postfix, amavis-hosts, dl385, acpid-hosts, apache-https, lenny + hostgroups: computers, service, apache2-hosts, bind9-hosts, postfix-hosts, heavy-postfix, dl385, acpid-hosts, apache-https, lenny contacts: bzed + lully: + address: 82.195.75.99 + parents: czerny + hostgroups: computers, service, hasbootfs, kvmdomains, squeeze heininen: address: 82.195.75.98 parents: gw-man-da @@ -497,7 +493,7 @@ servers: rem: address: 82.195.75.68 parents: gw-man-da - hostgroups: computers, buildd, hasbootfs, hashomefs, squeeze + hostgroups: computers, buildd, hasbootfs, hassrvfs, squeeze sperger: address: 82.195.75.34 parents: gw-man-da2 @@ -523,7 +519,7 @@ servers: handel: address: 82.195.75.104 parents: unger - hostgroups: computers, service, hasbootfs, kvmdomains, apache2-hosts, squeeze, apache-https + hostgroups: computers, service, hasbootfs, kvmdomains, apache2-hosts, squeeze, apache-https, hasvarfs kaufmann: address: 82.195.75.107 parents: unger @@ -598,11 +594,11 @@ servers: lobos: address: 212.211.132.250 parents: gw-scanplus-lobos - hostgroups: computers, service, apache2-hosts, ftpd-hosts, rsyncd-hosts, dl380, hasvarfs, hasusrfs, hasorgfs, xinetd-hosts, squeeze + hostgroups: computers, service, apache2-hosts, rsyncd-hosts, dl380, hasvarfs, hasusrfs, hasorgfs, xinetd-hosts, squeeze, security_mirror villa: address: 212.211.132.32 parents: gw-scanplus-villa - hostgroups: computers, service, apache2-hosts, ftpd-hosts, rsyncd-hosts, dl380, hasvarfs, hasusrfs, hasorgfs, xinetd-hosts, squeeze + hostgroups: computers, service, apache2-hosts, rsyncd-hosts, dl380, hasvarfs, hasusrfs, hasorgfs, xinetd-hosts, squeeze, security_mirror # }}} # {{{ gw-sil beethoven: @@ -674,7 +670,7 @@ servers: ravel: address: 206.12.19.5 parents: sw-ubcece-kais - hostgroups: computers, general, dl385, apache2-hosts, acpid-hosts, hasbootfs, nfs-client, rsyncd-hosts, bind9-hosts, uploadqueue, hasorgfs, heavy-exim, xinetd-hosts, squeeze, autofs + hostgroups: computers, general, dl385, apache2-hosts, acpid-hosts, hasbootfs, nfs-client, rsyncd-hosts, bind9-hosts, uploadqueue, hasorgfs, heavy-exim, xinetd-hosts, squeeze, autofs, uploadqueue dijkstra: address: 206.12.19.218 parents: sw-ubcece-kais @@ -711,10 +707,6 @@ servers: address: 206.12.19.114 parents: dijkstra hostgroups: computers, hasbootfs, hassrvfs, apache2-hosts, kvmdomains, service, squeeze, nfs-server - valente: - address: 206.12.19.112 - parents: dijkstra - hostgroups: computers, hasbootfs, hassrvfs, postgres83-hosts, ftpd-hosts, rsyncd-hosts, kvmdomains, heavy-exim, xinetd-hosts, service, lenny bellini: address: 206.12.19.7 parents: sw-ubcece-kais @@ -722,7 +714,7 @@ servers: morricone: address: 206.12.19.9 parents: sw-ubcece-kais - hostgroups: computers, hasbootfs, hasvarfs, hassrvfs, aacraid, postgres90-hosts, ftpd-hosts, rsyncd-hosts, heavy-exim, xinetd-hosts, apache2-hosts, service, squeeze + hostgroups: computers, hasbootfs, hasvarfs, hassrvfs, aacraid, postgres90-hosts, rsyncd-hosts, heavy-exim, xinetd-hosts, apache2-hosts, service, squeeze, uploadqueue stabile: address: 206.12.19.13 parents: sw-ubcece-kais @@ -807,14 +799,14 @@ servers: address: 206.12.19.126 parents: traetta hostgroups: computers, service, hasbootfs, kvmdomains, squeeze, apache2-hosts, nfs-client, xinetd-hosts, autofs - dukas: - address: 206.12.19.128 - parents: traetta - hostgroups: computers, service, hasbootfs, kvmdomains, squeeze, apache2-hosts, hassrvfs - tye: - address: 206.12.19.129 - parents: traetta - hostgroups: computers, service, hasbootfs, kvmdomains, squeeze, apache2-hosts, nfs-client, autofs, hassrvfs +# dukas: +# address: 206.12.19.128 +# parents: traetta +# hostgroups: computers, service, hasbootfs, kvmdomains, squeeze, apache2-hosts, hassrvfs +# tye: +# address: 206.12.19.129 +# parents: traetta +# hostgroups: computers, service, hasbootfs, kvmdomains, squeeze, apache2-hosts, nfs-client, autofs, hassrvfs elgar: address: 206.12.19.130 parents: salieri @@ -846,7 +838,15 @@ servers: bizet: address: 206.12.19.137 parents: traetta - hostgroups: computers, service, hasbootfs, kvmdomains, squeeze, hassrvfs, ftpd-hosts, rsyncd-hosts, heavy-exim, xinetd-hosts, apache2-hosts + hostgroups: computers, service, hasbootfs, kvmdomains, squeeze, hassrvfs, rsyncd-hosts, heavy-exim, xinetd-hosts, apache2-hosts, uploadqueue + lilburn: + address: 206.12.19.138 + parents: dijkstra + hostgroups: computers, service, hasbootfs, kvmdomains, squeeze, hassrvfs, apache2-hosts, nfs-client, autofs + popov: + address: 206.12.19.119 + parents: luchesi + hostgroups: computers, service, hasbootfs, kvmdomains, squeeze, hassrvfs, apache2-hosts, nfs-client, autofs, heavy-exim # }}} # {{{ gw-ugent ancina: @@ -859,7 +859,7 @@ servers: saens: address: 128.101.240.212 parents: gw-umn - hostgroups: computers, service, apache2-hosts, ftpd-hosts, rsyncd-hosts, dl380, hasvarfs, hasusrfs, hasorgfs, xinetd-hosts, squeeze + hostgroups: computers, service, apache2-hosts, rsyncd-hosts, dl380, hasvarfs, hasusrfs, hasorgfs, xinetd-hosts, squeeze, security_mirror # }}} # {{{ gw-utwente kassia: @@ -881,7 +881,7 @@ servers: klecker: address: 130.89.148.10 parents: gw-utwente - hostgroups: computers, service, apache2-hosts, ftpd-hosts, rsyncd-hosts, dl380, acpid-hosts, xinetd-hosts, squeeze, incomingmailrelayed, hassrvfs + hostgroups: computers, service, apache2-hosts, rsyncd-hosts, dl380, acpid-hosts, xinetd-hosts, squeeze, incomingmailrelayed, hassrvfs klecker-ftp: address: 130.89.148.12 parents: klecker @@ -1045,9 +1045,6 @@ hostgroups: amavis-hosts: alias: hosts running amavis private: 1 - ftpd-hosts: - alias: hosts running vsftpd - private: 1 #tftpd-hosts: # alias: hosts running a tftpd (tftpd-hpa as a daemon) # private: 1 @@ -1060,9 +1057,6 @@ hostgroups: #postgres81-hosts: # alias: hosts running postgres81 # private: 1 - postgres83-hosts: - alias: hosts running postgres83 - private: 1 postgres84-hosts: alias: hosts running postgres84 private: 1 @@ -1145,6 +1139,9 @@ hostgroups: alias: machines with hight round trip times private: 1 + security_mirror: + alias: hosts that are security mirrors + private: 1 ############################# # servicegroups ############################# @@ -1204,7 +1201,7 @@ services: - name: disk usage - all servicegroups: diskspace - nrpe: "/usr/lib/nagios/plugins/check_disk -X devpts -X proc -X linprocfs -X devfs -X fdescfs -X sysfs -X nfs 90 95" + nrpe: "/usr/lib/nagios/plugins/check_disk -w 10% -c 5% -A -X devpts -X proc -X linprocfs -X devfs -X fdescfs -X sysfs -X nfs --ignore-eregi-path=/home/buildd/build-trees" hostgroups: computers excludehosts: sibelius - @@ -1276,11 +1273,21 @@ services: nrpe: "/usr/lib/nagios/plugins/check_disk 75 90 /var/lib/postgresql" hosts: samosa, stabile, sibelius, busoni + - + name: disk usage on /var/log + servicegroups: diskspace + nrpe: "/usr/lib/nagios/plugins/check_disk 50 80 /var/log" + hosts: bendel - name: disk usage on /var/log servicegroups: diskspace nrpe: "/usr/lib/nagios/plugins/check_disk 75 90 /var/log" - hosts: busoni, wieck, heininen + hosts: busoni, wieck, heininen, lully + - + name: disk usage on /var/spool/postfix + servicegroups: diskspace + nrpe: "/usr/lib/nagios/plugins/check_disk 75 90 /var/spool/postfix" + hosts: bendel #- # name: disk usage on /srv/morgue.debian.org @@ -1297,36 +1304,6 @@ services: servicegroups: diskspace nrpe: "/usr/lib/nagios/plugins/check_disk 90 94 /srv/snapshot.debian.org" hosts: stabile,sibelius - - - name: disk usage on /srv/farm-snapshot/farm-01 - servicegroups: diskspace - nrpe: "/usr/lib/nagios/plugins/check_disk 95 98 /srv/farm-snapshot/farm-01" - hosts: sibelius - - - name: disk usage on /srv/farm-snapshot/farm-23 - servicegroups: diskspace - nrpe: "/usr/lib/nagios/plugins/check_disk 95 98 /srv/farm-snapshot/farm-23" - hosts: sibelius - - - name: disk usage on /srv/farm-snapshot/farm-45 - servicegroups: diskspace - nrpe: "/usr/lib/nagios/plugins/check_disk 95 98 /srv/farm-snapshot/farm-45" - hosts: sibelius - - - name: disk usage on /srv/farm-snapshot/farm-67 - servicegroups: diskspace - nrpe: "/usr/lib/nagios/plugins/check_disk 95 98 /srv/farm-snapshot/farm-67" - hosts: sibelius - - - name: disk usage on /srv/farm-snapshot/farm-89 - servicegroups: diskspace - nrpe: "/usr/lib/nagios/plugins/check_disk 95 98 /srv/farm-snapshot/farm-89" - hosts: sibelius - - - name: disk usage on /srv/farm-snapshot/farm-ab - servicegroups: diskspace - nrpe: "/usr/lib/nagios/plugins/check_disk 95 98 /srv/farm-snapshot/farm-ab" - hosts: sibelius - name: disk usage on /srv/farm-snapshot/farm-misc servicegroups: diskspace @@ -1611,9 +1588,15 @@ services: hostgroups: freebsd - - name: remote logging + name: remote logging on lotti remotecheck: "/usr/lib/nagios/plugins/dsa-check-log-age-loghost $HOSTNAME$" - runfrom: heininen + runfrom: lotti + hostgroups: computers + excludehosts: vasks, wagner + - + name: remote logging on lully + remotecheck: "/usr/lib/nagios/plugins/dsa-check-log-age-loghost $HOSTNAME$" + runfrom: lully hostgroups: computers excludehosts: vasks, wagner ### MAIL STUFF @@ -1683,11 +1666,11 @@ services: - name: process - spamd - master nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C spamd -a '/usr/sbin/spamd --create-prefs --max-children 10 --helper-home-dir -d --pidfile=/var/run/spamd.pid'" - hosts: liszt + hosts: liszt, bendel - name: process - spamd - child nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:11 -c 1: -C spamd -a 'spamd child'" - hosts: liszt, wagner + hosts: liszt, wagner, bendel hostgroups: spamd depends: process - spamd - master # @@ -1705,7 +1688,7 @@ services: nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C spamd" hostgroups: computers excludehostgroups: spamd - excludehosts: liszt, busoni, wagner + excludehosts: liszt, bendel, busoni, wagner ### #- @@ -1737,10 +1720,19 @@ services: - name: process - amavis - master nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u amavis -C amavisd-new -a 'amavisd (master)'" - hostgroups: amavis-hosts + hosts: liszt - name: process - amavis - all nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1:10 -u amavis -C amavisd-new -a 'amavisd '" + hosts: liszt + depends: process - amavis - master + - + name: process - amavis - master + nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u amavis -C amavisd-new -a 'amavisd-new (master)'" + hostgroups: amavis-hosts + - + name: process - amavis - all + nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1:10 -u amavis -C amavisd-new -a 'amavisd-new '" hostgroups: amavis-hosts depends: process - amavis - master # @@ -1749,19 +1741,20 @@ services: nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C amavisd-new" hostgroups: computers excludehostgroups: amavis-hosts + excludehosts: liszt ### - name: process - weightd - master - nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u polw -C policyd-weight -a 'policyd-weight (master)'" + nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u polw -a 'policyd-weight (master)'" hostgroups: heavy-postfix - name: process - weightd - cache - nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u polw -C policyd-weight -a 'policyd-weight (cache)'" + nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u polw -a 'policyd-weight (cache)'" hostgroups: heavy-postfix depends: process - weightd - master - name: process - weightd - child - nrpe: "/usr/lib/nagios/plugins/check_procs -w 2:50 -c 1: -u polw -C policyd-weight -a 'policyd-weight (child)'" + nrpe: "/usr/lib/nagios/plugins/check_procs -w 2:50 -c 1: -u polw -a 'policyd-weight (child)'" hostgroups: heavy-postfix depends: process - weightd - master # @@ -2019,7 +2012,7 @@ services: nrpe: "/usr/lib/nagios/plugins/dsa-check-hpasm" normal_check_interval: 120 hostgroups: dl385, dl380, dl360, bl460, dl585 - excludehosts: villa, lobos, liszt, senfl, schein, rore + excludehosts: villa, lobos, liszt, senfl, schein - name: HW - hpasmcli status nrpe: "/usr/lib/nagios/plugins/dsa-check-hpasm --ps-no-redundant" @@ -2030,11 +2023,6 @@ services: nrpe: "/usr/lib/nagios/plugins/dsa-check-hpasm --fan-no-redundant" normal_check_interval: 120 hosts: senfl, schein - - - name: HW - hpasmcli status - nrpe: "/usr/lib/nagios/plugins/dsa-check-hpasm --fan-no-redundant --fan-high" - normal_check_interval: 120 - hosts: rore ### - name: RAID - areca @@ -2258,22 +2246,11 @@ services: excludehostgroups: bind9-hosts #### - - - name: process - vsftp - listener - nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -C vsftpd -a 'vsftpd: LISTENER'" - hostgroups: ftpd-hosts, uploadqueue - excludehosts: klecker - - - name: process - vsftp - instance - nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:80 -c 0:100 -u ftp -C vsftpd -a 'vsftpd: '" - hostgroups: ftpd-hosts, uploadqueue - excludehosts: klecker - name: network service - ftp check: check_ftp - hostgroups: ftpd-hosts, uploadqueue + hostgroups: uploadqueue, security_mirror excludehosts: klecker - depends: process - vsftp - listener - name: network service - ftp check: check_ftp @@ -2311,7 +2288,7 @@ services: name: unwanted process - postresql nrpe: "/usr/lib/nagios/plugins/check_procs -w 0 -C postgres" hostgroups: computers - excludehostgroups: postgres90-hosts, postgres84-hosts, postgres83-hosts + excludehostgroups: postgres90-hosts, postgres84-hosts - name: process - postresql90 - master nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:4 -c 1: -u postgres -C postgres -a '/usr/lib/postgresql/9.0/bin/postgres'" @@ -2320,10 +2297,6 @@ services: name: process - postresql84 - master nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:4 -c 1: -u postgres -C postgres -a '/usr/lib/postgresql/8.4/bin/postgres'" hostgroups: postgres84-hosts - - - name: process - postresql83 - master - nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:4 -c 1: -u postgres -C postgres -a '/usr/lib/postgresql/8.3/bin/postgres'" - hostgroups: postgres83-hosts #- # name: process - postresql83 - master udd # nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postgres -C postgres -a '/usr/lib/postgresql/8.3/bin/postgres -D /var/lib/postgresql/8.3/udd -c config_file=/etc/postgresql/8.3/udd/postgresql.conf'" @@ -2496,10 +2469,6 @@ services: name: mirror sync - security check: "dsa_check_mirrorsync_skew!security-nagios.debian.org!project/trace/security-master.debian.org!150:3600" hosts: global - - - name: mirror sync - volatile - check: "dsa_check_mirrorsync_skew!volatile.debian.org!debian-volatile/project/trace/volatile-master.debian.org!150:3600" - hosts: global - name: mirror sync - packages check: "dsa_check_mirrorsync_skew!packages.debian.org!Pics/.trace!3600:57600" @@ -2542,10 +2511,6 @@ services: name: DNS SOA sync - 2.5.1.1.8.0.0.8.d.8.0.1.0.0.2.ip6.arpa check: "dsa_check_soas!2.5.1.1.8.0.0.8.d.8.0.1.0.0.2.ip6.arpa" hosts: global - - - name: DNS SOA sync - a.5.1.1.8.0.0.8.d.8.0.1.0.0.2.ip6.arpa - check: "dsa_check_soas!a.5.1.1.8.0.0.8.d.8.0.1.0.0.2.ip6.arpa" - hosts: global - name: DNS SOA sync - 2.6.a.0.4.6.5.6.1.0.0.0.2.0.0.0.8.d.8.0.1.0.0.2.ip6.arpa check: "dsa_check_soas!2.6.a.0.4.6.5.6.1.0.0.0.2.0.0.0.8.d.8.0.1.0.0.2.ip6.arpa"