X-Git-Url: https://git.adam-barratt.org.uk/?a=blobdiff_plain;f=config%2Fnagios-master.cfg;h=a4c557b52d941be4238c5e1a2c397e7ca059583f;hb=7924159a5804a4a54bd697c2abe0ffddee8b984c;hp=18359b800607aa5e64b899ba8dcad6ab36e2a79a;hpb=0a116b4ebc7c0306acde9ba0b514aae9db7009cd;p=mirror%2Fdsa-nagios.git diff --git a/config/nagios-master.cfg b/config/nagios-master.cfg index 18359b8..a4c557b 100644 --- a/config/nagios-master.cfg +++ b/config/nagios-master.cfg @@ -113,12 +113,6 @@ servers: address: 86.59.118.145 parents: gw-ubcece hostgroups: layer3-infrastructure - gw-telegraaf2: - address: 217.196.40.15 - parents: gw-ubcece - hostgroups: layer3-infrastructure - contact_groups: +alioth-admins - no-servicegroups: true gw-ubcece: address: 206.12.19.254 hostgroups: layer3-infrastructure @@ -137,7 +131,8 @@ servers: hostgroups: layer3-infrastructure gw-ynic: # really janet, because ynic is stupid about firewalling - address: 146.97.42.26 + #address: 146.97.42.26 + address: 146.97.41.66 parents: gw-ubcece hostgroups: layer3-infrastructure gw-zivit: @@ -241,10 +236,6 @@ servers: address: 138.16.160.12 parents: gw-brown hostgroups: computers, service, apache2-hosts, dl380, rsyncd-hosts, postgres91-hosts, spamd, heavy-exim, acpid-hosts, uploadqueue, xinetd-hosts, apache-https, hassrvfs, wheezy - ries: - address: 138.16.160.9 - parents: gw-brown - hostgroups: computers, service, dl385, acpid-hosts, xinetd-hosts, hassrvfs, wheezy, postgres91-hosts # }}} # {{{ gw-bytemark bm-bl1: @@ -334,12 +325,38 @@ servers: address: 5.153.231.14 parents: gw-bytemark hostgroups: computers, hassrvfs, kvmdomains, wheezy, apache2-hosts, nfs-client, autofs - #r*: - #r*: + rainier: + address: 5.153.231.15 + parents: gw-bytemark + hostgroups: computers, kvmdomains, wheezy, no-bacula + rapoport: + address: 5.153.231.16 + parents: gw-bytemark + hostgroups: computers, kvmdomains, wheezy, no-bacula delfin: address: 5.153.231.17 parents: gw-bytemark - hostgroups: computers, hassrvfs, kvmdomains, wheezy, apache2-hosts, nfs-client, autofs + hostgroups: computers, hassrvfs, kvmdomains, wheezy, apache2-hosts + wuiet: + address: 5.153.231.18 + parents: gw-bytemark + hostgroups: computers, general, kvmdomains, wheezy, service, apache-https, apache2-hosts, heavy-exim, xinetd-hosts + dinis: + address: 5.153.231.19 + parents: gw-bytemark + hostgroups: computers, general, kvmdomains, wheezy + donizetti: + address: 5.153.231.20 + parents: gw-bytemark + hostgroups: computers, general, kvmdomains, wheezy, nfs-client, autofs + dillon: + address: 5.153.231.22 + parents: gw-bytemark + hostgroups: computers, general, kvmdomains, wheezy + ticharich: + address: 5.153.231.23 + parents: gw-bytemark + hostgroups: computers, general, kvmdomains, wheezy, nfs-client, autofs, apache2-hosts, apache-https, service # }}} # {{{ gw-c3sl santoro: @@ -421,10 +438,6 @@ servers: address: 194.177.211.205 parents: gw-grnet hostgroups: computers, acpid-hosts, mptraid, hassrvfs, service, squeeze - grieg: - address: 194.177.211.200 - parents: gw-grnet - hostgroups: computers, apache2-hosts, acpid-hosts, megaraid, heavy-exim, postgres84-hosts, service, apache-https, squeeze orff: address: 194.177.211.209 parents: gw-grnet @@ -452,16 +465,6 @@ servers: contacts: pkern # }}} # {{{ gw-man-da - agricola: - address: 82.195.75.86 - parents: gw-man-da - hostgroups: computers, porterbox, sw-raid, hassrvfs, wheezy - contacts: bzed - arcadelt: - address: 82.195.75.87 - parents: gw-man-da - hostgroups: computers, buildd, sw-raid, hassrvfs, wheezy - contacts: bzed ball: address: 82.195.75.70 parents: gw-man-da @@ -478,7 +481,7 @@ servers: bendel: address: 82.195.75.100 parents: ganeti3 - hostgroups: computers, service, hasbootfs, kvmdomains, hassrvfs, apache2-hosts, squeeze, postfix-hosts, heavy-postfix, acpid-hosts, apache-https, amavis-hosts, hasvarlogfs + hostgroups: computers, service, hasbootfs, kvmdomains, hassrvfs, apache2-hosts, wheezy, postfix-hosts, heavy-postfix, acpid-hosts, apache-https, amavis-hosts, hasvarlogfs master: address: 82.195.75.110 parents: ganeti3 @@ -635,26 +638,6 @@ servers: parents: gw-sil hostgroups: computers, buildd, wheezy # }}} - # {{{ gw-telegraaf2 - vasks: - address: 217.196.43.140 - parents: gw-telegraaf2 - hostgroups: computers, nfs-server, postgres91-hosts, apache2-hosts, acpid-hosts, apache-https, brokensamhain - contact_groups: alioth-admins - no-servicegroups: true - wagner: - address: 217.196.43.132 - parents: gw-telegraaf2 - hostgroups: computers, bind9-hosts, apache2-hosts, nfs-client, xinetd-hosts, postgres91-hosts, apache-https, dl385, brokensamhain - contact_groups: alioth-admins - no-servicegroups: true - anonscm: - address: 217.196.43.132 - parents: wagner - contact_groups: alioth-admins - hostgroups: secondary-IPs - no-servicegroups: true - # }}} # {{{ gw-ubcece sw-ubcece: hostgroups: layer2-infrastructure @@ -714,10 +697,6 @@ servers: address: 206.12.19.118 parents: ganeti2 hostgroups: computers, general, apache2-hosts, hasbootfs, kvmdomains, apache-https, wheezy - dinis: - address: 206.12.19.139 - parents: ganeti2 - hostgroups: computers, general, kvmdomains, wheezy wolkenstein: address: 206.12.19.116 parents: ganeti2 @@ -803,7 +782,7 @@ servers: quantz: address: 206.12.19.122 parents: traetta - hostgroups: computers, service, hasbootfs, kvmdomains, squeeze, hassrvfs, nfs-client, xinetd-hosts, heavy-exim, apache2-hosts, autofs + hostgroups: computers, service, hasbootfs, kvmdomains, wheezy, hassrvfs, nfs-client, xinetd-hosts, heavy-exim, apache2-hosts, autofs nono: address: 206.12.19.123 parents: traetta @@ -820,10 +799,6 @@ servers: address: 206.12.19.126 parents: traetta hostgroups: computers, service, kvmdomains, wheezy, apache2-hosts, nfs-client, autofs, xinetd-hosts - dukas: - address: 206.12.19.128 - parents: traetta - hostgroups: computers, service, hasbootfs, kvmdomains, wheezy, heavy-exim, apache2-hosts, nfs-client, autofs, hassrvfs, apache-https tye: address: 206.12.19.129 parents: ganeti2 @@ -832,10 +807,6 @@ servers: address: 206.12.19.130 parents: salieri hostgroups: computers, service, kvmdomains, wheezy - berlioz: - address: 206.12.19.131 - parents: traetta - hostgroups: computers, service, hasbootfs, kvmdomains, squeeze, apache2-hosts, hassrvfs, apache-https gombert: address: 206.12.19.132 parents: ganeti2 @@ -942,11 +913,11 @@ servers: zandonai: address: 80.245.147.46 parents: gw-zivit - hostgroups: computers, buildd, hassrvfs, squeeze + hostgroups: computers, buildd, hassrvfs, wheezy zelenka: address: 80.245.147.40 parents: gw-zivit - hostgroups: computers, porterbox, hassrvfs, squeeze + hostgroups: computers, porterbox, hassrvfs, wheezy # }}} # }}} @@ -1093,9 +1064,6 @@ hostgroups: #postgres81-hosts: # alias: hosts running postgres81 # private: 1 - postgres84-hosts: - alias: hosts running postgres84 - private: 1 postgres91-hosts: alias: hosts running postgres91 private: 1 @@ -1246,7 +1214,7 @@ services: - name: disk usage - all servicegroups: diskspace - nrpe: "/usr/lib/nagios/plugins/check_disk -w 5% -c 2% -A -X devpts -X proc -X linprocfs -X devfs -X fdescfs -X sysfs -X nfs --ignore-eregi-path=/home/buildd/build-trees" + nrpe: "/usr/lib/nagios/plugins/check_disk -w 5% -c 2% -A -X devpts -X proc -X linprocfs -X devfs -X fdescfs -X sysfs -X nfs --ignore-eregi-path='/home/buildd/build-tr|/var/lib/schroot/mount'" hostgroups: computers excludehosts: sibelius,stabile - @@ -1421,7 +1389,7 @@ services: - name: backup - bacula - last full backup servicegroups: backup - remotecheck: "/usr/lib/nagios/plugins/dsa-check-bacula -w 840 -c 1560 $HOSTNAME$.debian.org F" + remotecheck: "/usr/lib/nagios/plugins/dsa-check-bacula -w 1080 -c 1560 $HOSTNAME$.debian.org F" runfrom: dinis hostgroups: computers excludehostgroups: buildd, porterbox, no-bacula @@ -1433,7 +1401,6 @@ services: nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u bacula -C bacula-fd -a '/usr/sbin/bacula-fd -c /etc/bacula/bacula-fd.conf'" hostgroups: computers excludehostgroups: freebsd - excludehosts: wagner, vasks - name: process - bacula-fd servicegroups: backup @@ -1483,7 +1450,6 @@ services: # name: puppet # nrpe: "/usr/lib/nagios/plugins/dsa-check-file_age -i 540 -f /var/lib/puppet/state/state.yaml" # hostgroups: computers - # excludehosts: wagner, vasks #### - @@ -1491,14 +1457,15 @@ services: nrpe: "/usr/lib/nagios/plugins/dsa-check-file -w -f /etc/ferm/ferm.conf" hostgroups: computers excludehostgroups: freebsd - excludehosts: vasks, wagner - name: puppetized firewall nrpe: "/usr/lib/nagios/plugins/dsa-check-file -w -f /etc/ferm/conf.d/defs.conf" hostgroups: computers excludehostgroups: freebsd - excludehosts: vasks, wagner - + #### + - name: ganeti - job watcher paused + nrpe: "/usr/lib/nagios/plugins/negate /usr/lib/nagios/plugins/dsa-check-file -f /var/lib/ganeti/watcher.pause" + hostgroups: computers #### - name: process - samhain @@ -1579,7 +1546,6 @@ services: servicegroups: weaksshkeys nrpe: "/usr/lib/nagios/plugins/dsa-check-statusfile /var/cache/dsa/nagios/weak-ssh-keys" hostgroups: computers - excludehosts: wagner, vasks normal_check_interval: 60 #### - @@ -1600,7 +1566,6 @@ services: nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:3 -c 1: -u root -C munin-node -a '/usr/sbin/munin-node'" hostgroups: computers excludehostgroups: freebsd, armhf - excludehosts: vasks, wagner - name: process - munin-node nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:3 -c 1: -u root -C perl -a '/usr/bin/perl -wT /usr/sbin/munin-node'" @@ -1615,7 +1580,6 @@ services: check: check_tcp!4949 hostgroups: computers depends: process - munin-node - excludehosts: vasks, wagner ### - name: process - ntpd @@ -1655,7 +1619,6 @@ services: nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C syslog-ng -a '/sbin/syslog-ng -p /var/run/syslog-ng.pid'" hostgroups: computers excludehostgroups: freebsd - excludehosts: vasks, wagner - name: process - syslog-ng @@ -1667,13 +1630,11 @@ services: remotecheck: "/usr/lib/nagios/plugins/dsa-check-log-age-loghost $HOSTNAME$" runfrom: lotti hostgroups: computers - excludehosts: vasks, wagner - name: remote logging on lully remotecheck: "/usr/lib/nagios/plugins/dsa-check-log-age-loghost $HOSTNAME$" runfrom: lully hostgroups: computers - excludehosts: vasks, wagner ### MAIL STUFF ### - @@ -1705,40 +1666,36 @@ services: name: process - clamav - clamd nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:2 -c 1: -u clamav -C clamd -a '/usr/sbin/clamd'" hostgroups: heavy-exim, heavy-postfix - hosts: wagner - name: service - clamav nrpe: "/usr/lib/nagios/plugins/check_clamd -H /var/run/clamav/clamd.ctl" hostgroups: heavy-exim, heavy-postfix - hosts: wagner depends: process - clamav - clamd - name: process - clamav - freshclam nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u clamav -C freshclam -a '/usr/bin/freshclam -d --quiet'" - hosts: wagner hostgroups: heavy-exim, heavy-postfix - name: unwanted process - clamav nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C clamd" hostgroups: computers excludehostgroups: heavy-exim, heavy-postfix, deadslow - excludehosts: wagner - name: unwanted process - freshclam nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C freshclam" hostgroups: computers excludehostgroups: heavy-exim, heavy-postfix, deadslow - excludehosts: wagner + ### - name: process - spamd - master nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C spamd -a '/usr/sbin/spamd --create-prefs --max-children 5 --helper-home-dir -d --pidfile=/var/run/spamd.pid'" hostgroups: spamd - excludehosts: wagner, picconi + excludehosts: picconi excludehostgroups: deadslow - name: process - spamd - master nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C spamd -a '/usr/sbin/spamd --create-prefs --max-children 20 --min-spare=5 --helper-home-dir -d --pidfile=/var/run/spamd.pid'" - hosts: wagner, picconi + hosts: picconi - name: process - spamd - master nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C spamd -a '/usr/sbin/spamd --create-prefs --max-children 10 --helper-home-dir -d --pidfile=/var/run/spamd.pid'" @@ -1746,7 +1703,7 @@ services: - name: process - spamd - child nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:11 -c 1: -C spamd -a 'spamd child'" - hosts: wagner, bendel + hosts: bendel hostgroups: spamd depends: process - spamd - master # @@ -1764,7 +1721,7 @@ services: nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C spamd" hostgroups: computers excludehostgroups: spamd, deadslow - excludehosts: bendel, busoni, wagner, buxtehude + excludehosts: bendel, busoni, buxtehude ### #- @@ -1779,16 +1736,10 @@ services: excludehostgroups: deadslow ### - - - name: process - postgrey - nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postgrey -C postgrey -a '/usr/sbin/postgrey --pidfile=/var/run/postgrey.pid --daemonize --unix=/var/run/postgrey/socket --retry-window=4 --auto-whitelist-clients=10 --exim'" - hostgroups: heavy-exim - excludehostgroups: wheezy - name: process - postgrey nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postgrey -a '/usr/sbin/postgrey --pidfile=/var/run/postgrey.pid --daemonize --unix=/var/run/postgrey/socket --retry-window=4 --auto-whitelist-clients=10 --exim'" hostgroups: heavy-exim - excludehostgroups: squeeze - name: process - postgrey nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postgrey -C postgrey -a '/usr/sbin/postgrey --pidfile=/var/run/postgrey.pid --daemonize --inet=127.0.0.1:60000'" @@ -1830,7 +1781,7 @@ services: nrpe: "/usr/lib/nagios/plugins/check_procs -w 2:50 -c 1: -u polw -a 'policyd-weight (child)'" hostgroups: heavy-postfix depends: process - weightd - master - # + ### - name: unwanted process - policyd-weight nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C policyd-weight" @@ -1838,7 +1789,6 @@ services: excludehostgroups: heavy-postfix, deadslow - ### - name: process - postfix - master @@ -1926,51 +1876,43 @@ services: name: setup - dsa config nrpe: "/usr/lib/nagios/plugins/dsa-check-config" hostgroups: computers - excludehosts: wagner, vasks normal_check_interval: 60 - name: setup - local hostname etc-hosts nrpe: 'if getent ahosts `hostname` | grep -q 127.0; then echo "Warning: local hostname resolves to 127/8 address"; exit 1; else echo "OK: Hostname resolves to non-127/8 address."; exit 0; fi' hostgroups: computers - excludehosts: wagner, vasks normal_check_interval: 60 - name: setup - ud-ldap freshness nrpe: "/usr/lib/nagios/plugins/dsa-check-udldap-freshness" - excludehosts: wagner, vasks hostgroups: computers - name: system - available entropy nrpe: "/usr/lib/nagios/plugins/dsa-check-entropy" event_handler: dsa_event_handler_restart_ekey hostgroups: computers - excludehosts: vasks, wagner excludehostgroups: freebsd - name: system - filesystem check nrpe: "/usr/bin/sudo /usr/lib/nagios/plugins/dsa-check-filesystems" normal_check_interval: 60 retry_check_interval: 15 - excludehosts: wagner, vasks hostgroups: computers ### - name: local resolver nrpe: "/usr/lib/nagios/plugins/dsa-check-resolver www.debian.org www.google.com" hostgroups: computers - excludehosts: vasks, wagner normal_check_interval: 60 - name: process - unbound nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u unbound -C unbound -a '/usr/sbin/unbound'" - excludehosts: vasks, wagner hostgroups: unbound-hosts, squeeze, wheezy ### - name: process - uptimed nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u daemon -C uptimed -a '/usr/sbin/uptimed'" hostgroups: computers - excludehosts: vasks, wagner ### - name: unwanted process - irqbalance @@ -2002,7 +1944,7 @@ services: name: unwanted process - inetd nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C inetd" hostgroups: computers - excludehosts: grieg, abel, alwyn, vasks + excludehosts: abel, alwyn excludehostgroups: deadslow - name: unwanted process - snmpd @@ -2052,7 +1994,7 @@ services: name: process - monit nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -C monit -a '/usr/sbin/monit -d 300 -I -c /etc/monit/monitrc -s /var/lib/monit/monit.state'" hostgroups: computers - excludehosts: vasks, wagner + excludehosts: quantz excludehostgroups: armhf - name: process - monit @@ -2166,7 +2108,6 @@ services: nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C ulogd -a '/usr/sbin/ulogd -d'" hostgroups: computers excludehostgroups: freebsd, sparc - excludehosts: vasks, wagner - name: unexpected process - ulogd nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C ulogd" @@ -2198,11 +2139,6 @@ services: # nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C bosserver -a '/usr/sbin/bosserver'" # hostgroups: bosserver # - ### - - - name: process - inetd - nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C inetd -a '/usr/sbin/inetd'" - hosts: grieg, vasks ### - name: process - xinetd @@ -2326,15 +2262,6 @@ services: ### -# Alioth web URLs - - - - name: network service - loggerhead - remotecheck: "/usr/lib/nagios/plugins/check_http -H anonscm.debian.org -u /loggerhead/" - hosts: anonscm - runfrom: tchaikovsky - depends: wagner:process - apache2 - master - #### - name: process - named @@ -2398,7 +2325,7 @@ services: name: unwanted process - postgresql nrpe: "/usr/lib/nagios/plugins/check_procs -w 0 -C postgres" hostgroups: computers - excludehostgroups: postgres84-hosts, postgres91-hosts, deadslow + excludehostgroups: postgres91-hosts, deadslow - name: unwanted process - postgresql 9.0 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0 -C postgres -a '9.0/bin/postgres'" @@ -2407,10 +2334,6 @@ services: name: process - postgresql91 - master nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:4 -c 1: -u postgres -C postgres -a '/usr/lib/postgresql/9.1/bin/postgres'" hostgroups: postgres91-hosts - - - name: process - postgresql84 - master - nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:4 -c 1: -u postgres -C postgres -a '/usr/lib/postgresql/8.4/bin/postgres'" - hostgroups: postgres84-hosts - name: postgresql backups nrpe: "/usr/bin/sudo -u debbackup /usr/lib/nagios/plugins/dsa-check-backuppg" @@ -2446,10 +2369,6 @@ services: nrpe: "/usr/lib/nagios/plugins/dsa-check-ups" hosts: franck depends: process - UPS - nut upsd - - - name: process - pglistener - nrpe: "/usr/lib/nagios/plugins/check_procs -u pglisten -C python -a '/usr/bin/python /usr/share/pglistener/starter.py /etc/pglistener/pglistener.cfg /etc/pglistener/conf.d' -w 1: -c 1:" - hosts: wagner, vasks ### - name: process - buildd @@ -2484,8 +2403,7 @@ services: check: check_tcp!6523 hosts: gombert contact_groups: gobby - - ### + #### #- # name: process - tftpd # nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C in.tftpd -a '/usr/sbin/in.tftpd -l -B 1450 -s /var/lib/tftpboot'" @@ -2573,10 +2491,6 @@ services: name: DNS SOA sync - alioth.debian.org check: "dsa_check_soas_add!alioth.debian.org!alioth.debian.org" hosts: global - - - name: DNS SOA sync - 2.6.a.0.4.6.5.6.1.0.0.0.2.0.0.0.8.d.8.0.1.0.0.2.ip6.arpa - check: "dsa_check_soas!2.6.a.0.4.6.5.6.1.0.0.0.2.0.0.0.8.d.8.0.1.0.0.2.ip6.arpa" - hosts: global - name: DNS SEC - signature expiry hosts: global