X-Git-Url: https://git.adam-barratt.org.uk/?a=blobdiff_plain;f=config%2Fnagios-master.cfg;h=28063d4463213e9f114a22282d9938d89898643b;hb=38c5daddd9e0b972103bfde86c8f9852e64becd4;hp=2f0412ab0770223ef0231ef9bda6d195bff9c618;hpb=170936445eec899c3586ba103d9d0b667ffeecb7;p=mirror%2Fdsa-nagios.git diff --git a/config/nagios-master.cfg b/config/nagios-master.cfg index 2f0412a..28063d4 100644 --- a/config/nagios-master.cfg +++ b/config/nagios-master.cfg @@ -82,7 +82,7 @@ servers: hostgroups: routing-infrastructure contacts: tjrc1 gw-frost: - address: 130.81.242.195 + address: 130.81.27.83 parents: gw-ubc hostgroups: routing-infrastructure gw-1und1: @@ -186,7 +186,7 @@ servers: samosa: address: 192.25.206.57 parents: gw-HP-ftc - hostgroups: computers, service, dl380, hassrvfs, hasbootfs, acpid-hosts, nfs-client, postgres84-hosts, bind9-hosts, xinetd-hosts + hostgroups: computers, service, dl380, hassrvfs, hasbootfs, acpid-hosts, nfs-client, postgres84-hosts, bind9-hosts, xinetd-hosts, apache2-hosts raff: address: 192.25.206.59 parents: gw-HP-ftc @@ -202,7 +202,7 @@ servers: spohr: address: 192.25.206.33 parents: gw-HP-ftc - hostgroups: computers, service, dl380, apache2-hosts, postgres83-hosts, nfs-server, spamd, heavy-exim, bind9-hosts + hostgroups: computers, service, dl380, apache2-hosts, postgres83-hosts, nfs-server, spamd, heavy-exim, bind9-hosts, apache-https peri: address: 192.25.206.15 parents: gw-HP-ftc @@ -253,7 +253,7 @@ servers: liszt: address: 82.195.75.100 parents: gw-man-da - hostgroups: computers, service, apache2-hosts, bind9-hosts, postfix-hosts, heavy-postfix, amavis-hosts, dl385, acpid-hosts + hostgroups: computers, service, apache2-hosts, bind9-hosts, postfix-hosts, heavy-postfix, amavis-hosts, dl385, acpid-hosts, apache-https contacts: bzed heininen: address: 82.195.75.98 @@ -266,7 +266,7 @@ servers: handel: address: 82.195.75.104 parents: unger - hostgroups: computers, service, hasbootfs, kvmdomains + hostgroups: computers, service, hasbootfs, kvmdomains, apache2-hosts geo1: address: 82.195.75.105 parents: unger @@ -274,7 +274,7 @@ servers: draghi: address: 82.195.75.106 parents: unger - hostgroups: computers, service, hasbootfs, hassrvfs, apache2-hosts, bind9-hosts, spamd, heavy-exim, kvmdomains, xinetd-hosts + hostgroups: computers, service, hasbootfs, hassrvfs, apache2-hosts, bind9-hosts, spamd, heavy-exim, kvmdomains, xinetd-hosts, apache-https kaufmann: address: 82.195.75.107 parents: unger @@ -282,11 +282,11 @@ servers: ball: address: 82.195.75.70 parents: gw-man-da - hostgroups: computers, buildd, no-udev, hasbootfs, ntpsuckers + hostgroups: computers, buildd, hasbootfs kokkonen: address: 82.195.75.97 parents: gw-man-da - hostgroups: computers, service, acpid-hosts, postgres84-hosts + hostgroups: computers, service, acpid-hosts, heavy-exim byrd: address: 82.195.75.92 parents: unger @@ -309,12 +309,12 @@ servers: ries: address: 128.148.34.103 parents: gw-brown.edu - hostgroups: computers, service, dl385, rsyncd-hosts, acpid-hosts, xinetd-hosts, hassrvfs + hostgroups: computers, service, dl385, rsyncd-hosts, acpid-hosts, xinetd-hosts, hassrvfs, postgres84-hosts franck: address: 128.148.34.3 parents: gw-brown.edu - hostgroups: computers, service, apache2-hosts, bind9-hosts, dl380, rsyncd-hosts, postgres84-hosts, spamd, heavy-exim, acpid-hosts, uploadqueue, xinetd-hosts + hostgroups: computers, service, apache2-hosts, bind9-hosts, dl380, rsyncd-hosts, postgres84-hosts, spamd, heavy-exim, acpid-hosts, uploadqueue, xinetd-hosts, apache-https mayer: address: 140.211.166.78 @@ -395,7 +395,7 @@ servers: widor: address: 93.94.130.161 parents: gw-dg-i.net - hostgroups: computers, apache2-hosts, sw-raid, acpid-hosts, hasorgfs, service + hostgroups: computers, apache2-hosts, sw-raid, acpid-hosts, hasorgfs, service, apache-https contacts: bzed pergolesi: @@ -418,7 +418,7 @@ servers: sibelius: address: 193.62.202.28 parents: gw-sanger - hostgroups: computers, acpid-hosts, megaraid, postgres84-hosts, service + hostgroups: computers, acpid-hosts, megaraid, postgres84-hosts, service, apache2-hosts contacts: tjrc1 smetana: address: 193.62.202.29 @@ -435,7 +435,7 @@ servers: powell: address: 87.106.64.223 parents: gw-1und1 - hostgroups: computers, service, spamd, heavy-exim, rsyncd-hosts, acpid-hosts, hassrvfs, hasvarfs, hasusrfs, xinetd-hosts + hostgroups: computers, service, spamd, heavy-exim, rsyncd-hosts, acpid-hosts, hassrvfs, hasvarfs, hasusrfs, xinetd-hosts, apache2-hosts contacts: joerg schumann: @@ -449,7 +449,7 @@ servers: chopin: address: 195.20.242.124 parents: schumann - hostgroups: computers, service, apache2-hosts, hassrvfs, hasbootfs, rsyncd-hosts, uploadqueue, kvmdomains, heavy-exim, xinetd-hosts + hostgroups: computers, service, apache2-hosts, hassrvfs, hasbootfs, rsyncd-hosts, uploadqueue, kvmdomains, heavy-exim, xinetd-hosts, postgres83-hosts, apache-https geo3: address: 195.20.242.125 parents: schumann @@ -457,7 +457,7 @@ servers: soler: address: 195.20.242.126 parents: schumann - hostgroups: computers, service, hasbootfs, hassrvfs, kvmdomains + hostgroups: computers, service, hasbootfs, hassrvfs, kvmdomains, apache2-hosts caballero: address: 193.201.200.200 @@ -516,11 +516,11 @@ servers: hostgroups: computers, bl460, acpid-hosts, service tchaikovsky: address: 206.12.19.118 - hostgroups: computers, general, apache2-hosts, hasbootfs, kvmdomains + hostgroups: computers, general, apache2-hosts, hasbootfs, kvmdomains, apache-https wolkenstein: address: 206.12.19.116 parents: dijkstra - hostgroups: computers, hasbootfs, hassrvfs, kvmdomains, service + hostgroups: computers, hasbootfs, hassrvfs, kvmdomains, service, xinetd-hosts, rsyncd-hosts, apache2-hosts brahms: address: 206.12.19.115 parents: dijkstra @@ -540,7 +540,7 @@ servers: bellini: address: 206.12.19.7 parents: gw-ubc - hostgroups: computers, hasbootfs, nfs-client, hassrvfs, aacraid, heavy-exim, service + hostgroups: computers, hasbootfs, nfs-client, hassrvfs, aacraid, heavy-exim, service, apache2-hosts morricone: address: 206.12.19.9 parents: tchaikovsky @@ -548,23 +548,23 @@ servers: stabile: address: 206.12.19.13 parents: gw-ubc - hostgroups: computers, hashomefs, sw-raid, rsyncd-hosts, postgres84-hosts, apache2-hosts, xinetd-hosts, service + hostgroups: computers, hashomefs, sw-raid, rsyncd-hosts, postgres84-hosts, apache2-hosts, xinetd-hosts, service, nfs-server cimarosa: address: 206.12.19.8 parents: gw-ubc - hostgroups: computers, hasbootfs, aacraid, hassrvfs, nfs-client, apache2-hosts, service + hostgroups: computers, hasbootfs, aacraid, hassrvfs, nfs-client, service paganini: address: 206.12.19.10 parents: tchaikovsky - hostgroups: computers, hasbootfs, aacraid, hassrvfs, xinetd-hosts, nfs-client, service + hostgroups: computers, hasbootfs, aacraid, hassrvfs, xinetd-hosts, nfs-client, service, apache2-hosts respighi: address: 206.12.19.11 parents: gw-ubc - hostgroups: computers, hasbootfs, aacraid, hassrvfs, service + hostgroups: computers, hasbootfs, aacraid, hassrvfs, service, apache2-hosts vivaldi: address: 206.12.19.12 parents: tchaikovsky - hostgroups: computers, hasbootfs, aacraid, hassrvfs, apache2-hosts, postgres84-hosts, service + hostgroups: computers, hasbootfs, aacraid, hassrvfs, apache2-hosts, postgres84-hosts, service, apache-https # MSA 2000 (2012i) giustini: address: 192.168.2.6 @@ -617,6 +617,14 @@ servers: address: 206.12.19.121 parents: tchaikovsky hostgroups: computers, service, hasbootfs, kvmdomains, squeeze + quantz: + address: 206.12.19.122 + parents: salieri + hostgroups: computers, service, hasbootfs, kvmdomains, squeeze, hassrvfs, nfs-client, xinetd-hosts, heavy-exim, postgres84-hosts, apache2-hosts + nono: + address: 206.12.19.123 + parents: salieri + hostgroups: computers, service, hasbootfs, kvmdomains, squeeze, heavy-exim, postgres84-hosts, xinetd-hosts, apache2-hosts, apache-https lebrun: address: 193.198.184.10 @@ -669,7 +677,7 @@ servers: pettersson: address: 130.239.18.123 parents: gw-aca - hostgroups: computers, hasbootfs, aacraid, nfs-client, acpid-hosts, service + hostgroups: computers, hasbootfs, aacraid, nfs-client, acpid-hosts, service, apache2-hosts # lafayette: # address: 147.215.7.160 @@ -679,7 +687,7 @@ servers: grieg: address: 194.177.211.200 parents: gw-grnet - hostgroups: computers, apache2-hosts, acpid-hosts, megaraid, heavy-exim, postgres84-hosts, service + hostgroups: computers, apache2-hosts, acpid-hosts, megaraid, heavy-exim, postgres84-hosts, service, apache-https rautavaara: address: 194.177.211.199 parents: gw-grnet @@ -720,7 +728,7 @@ servers: orff: address: 194.177.211.209 parents: gw-grnet - hostgroups: computers, acpid-hosts, bind9-hosts, mptraid, service, hassrvfs + hostgroups: computers, acpid-hosts, bind9-hosts, mptraid, service, hassrvfs, apache2-hosts field: address: 194.177.211.210 parents: rautavaara @@ -747,7 +755,7 @@ servers: lindberg: address: 86.59.118.149 parents: gw-sil - hostgroups: computers, acpid-hosts, service + hostgroups: computers, acpid-hosts, service, apache2-hosts # which raid? abel: @@ -927,6 +935,9 @@ hostgroups: bosserver: alias: hosts running bosserver private: 1 + apache-https: + alias: hosts with https services + private: 1 nfs-client: alias: hosts mounting filesystems using NFS @@ -1069,6 +1080,11 @@ services: servicegroups: diskspace nrpe: "/usr/lib/nagios/plugins/check_disk 80 90 /srv" hostgroups: hassrvfs + - + name: disk usage on /srv + servicegroups: diskspace + nrpe: "/usr/lib/nagios/plugins/check_disk 90 95 /srv" + hosts: ries - name: disk usage on /org/scratch servicegroups: diskspace @@ -1109,27 +1125,22 @@ services: name: disk usage on /var/log servicegroups: diskspace nrpe: "/usr/lib/nagios/plugins/check_disk 75 90 /var/log" - hosts: busoni + hosts: busoni, wieck - name: disk usage on /srv/morgue.debian.org servicegroups: diskspace - nrpe: "/usr/lib/nagios/plugins/check_disk 80 90 /srv/morgue.debian.org" + nrpe: "/usr/lib/nagios/plugins/check_disk 90 95 /srv/morgue.debian.org" hosts: stabile - name: disk usage on /srv/mirrors servicegroups: diskspace nrpe: "/usr/lib/nagios/plugins/check_disk 80 90 /srv/mirrors" hosts: stabile, beethoven, sibelius - - - name: disk usage on /srv/ftp-master.debian.org - servicegroups: diskspace - nrpe: "/usr/lib/nagios/plugins/check_disk 80 90 /srv/ftp-master.debian.org" - hosts: stabile - name: disk usage on /srv/snapshot.debian.org servicegroups: diskspace - nrpe: "/usr/lib/nagios/plugins/check_disk 80 90 /srv/snapshot.debian.org" + nrpe: "/usr/lib/nagios/plugins/check_disk 90 94 /srv/snapshot.debian.org" hosts: stabile,sibelius - name: disk usage on /srv/farm-snapshot/farm-01 @@ -1234,12 +1245,12 @@ services: max_check_attempts: 2 retry_check_interval: 5 - - name: afs - udebug - hostgroups: bosserver - nrpe: "/usr/lib/nagios/plugins/dsa-check-afs-udebug -H localhost" - normal_check_interval: 60 - max_check_attempts: 2 - retry_check_interval: 5 + #- name: afs - udebug + # hostgroups: bosserver + # nrpe: "/usr/lib/nagios/plugins/dsa-check-afs-udebug -H localhost" + # normal_check_interval: 60 + # max_check_attempts: 2 + # retry_check_interval: 5 #### - @@ -1432,17 +1443,17 @@ services: nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u Debian-exim -C exim4 -a '/usr/sbin/exim4 -bd -q'" hostgroups: computers excludehostgroups: postfix-hosts - excludehosts: master, busoni, merkel + excludehosts: master, busoni, merkel, quantz - name: process - exim - total nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:50 -c 1: -C exim4" hostgroups: computers excludehostgroups: postfix-hosts - excludehosts: master, busoni, merkel + excludehosts: master, busoni, merkel, quantz - name: process - exim nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:300 -c 1:500 -C exim4 -a '/usr/sbin/exim4'" - hosts: master, busoni, merkel + hosts: master, busoni, merkel, quantz ### - name: process - clamav - clamd @@ -1932,6 +1943,11 @@ services: nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:50 -c 1:100 -u www-data -C apache2 -a /usr/sbin/apache2" hostgroups: apache2-hosts depends: process - apache2 - master + - + name: unwanted process - apache2 + nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C apache2" + hostgroups: computers + excludehostgroups: apache2-hosts - name: network service - http @@ -1957,37 +1973,24 @@ services: - name: network service - https check: check_https - hosts: franck, chopin, draghi, liszt, spohr, widor, tchaikovsky, grieg, vivaldi + hostgroups: apache-https depends: "process - apache2 - master" normal_check_interval: 120 - name: network service - https cert check: dsa_check_cert!443 - # ries ftp-master.debian.org - # chopin security-master.debian.org - # spohr rt.debian.org - # tchaikovsky nagios.debian.org - # draghi db.debian.org - # merkel2 nm.debian.org - # liszt lists.debian.org - # grieg buildd.debian.org - # vivaldi fossology.debian.org - hosts: franck, chopin, spohr, tchaikovsky, draghi, merkel2, liszt, widor, grieg, vivaldi + hostgroups: apache-https depends: network service - https normal_check_interval: 60 - - # merkel - - - name: network service - https - check: check_https - hosts: merkel2 - depends: "merkel:process - apache2 - master" - normal_check_interval: 120 - - name: network service - http - check: check_http - hosts: merkel2 - depends: "merkel:process - apache2 - master" + name: unwanted network service - https + check: dsa_check_port_closed!443 + hostgroups: apache2-hosts + excludehostgroups: apache-https + # ravel does ssh on port 443 + excludehosts: ravel + normal_check_interval: 60 + #### - name: process - named @@ -2055,13 +2058,18 @@ services: # hostgroups: postgres81-hosts # depends: process - postresql81 - master #### + - + name: unwanted process - postresql + nrpe: "/usr/lib/nagios/plugins/check_procs -w 0 -C postgres" + hostgroups: computers + excludehostgroups: postgres84-hosts, postgres83-hosts - name: process - postresql84 - master nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:4 -c 1: -u postgres -C postgres -a '/usr/lib/postgresql/8.4/bin/postgres'" hostgroups: postgres84-hosts - name: process - postresql83 - master - nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postgres -C postgres -a '/usr/lib/postgresql/8.3/bin/postgres -D /var/lib/postgresql/8.3/main -c config_file=/etc/postgresql/8.3/main/postgresql.conf'" + nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:4 -c 1: -u postgres -C postgres -a '/usr/lib/postgresql/8.3/bin/postgres'" hostgroups: postgres83-hosts #- # name: process - postresql83 - master udd @@ -2070,7 +2078,7 @@ services: - name: process - postresql83 - dak master nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postgres -C postgres -a '/usr/lib/postgresql/8.3/bin/postgres -D /var/lib/postgresql/8.3/dak -c config_file=/etc/postgresql/8.3/dak/postgresql.conf'" - hosts: klecker, chopin + hosts: chopin - name: process - postresql84 - dak master nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postgres -C postgres -a '/usr/lib/postgresql/8.4/bin/postgres -D /var/lib/postgresql/8.4/dak -c config_file=/etc/postgresql/8.4/dak/postgresql.conf'"