X-Git-Url: https://git.adam-barratt.org.uk/?a=blobdiff_plain;f=nagios-master.cfg;fp=nagios-master.cfg;h=0000000000000000000000000000000000000000;hb=c52cf8d1190f744101fe52aa0e66c299b6bc0014;hp=630760446358d3c01c27685194d9705b52b4c69b;hpb=ab3943a83ec7f8db03d20b56dd919cab1ee0e468;p=mirror%2Fdsa-nagios.git diff --git a/nagios-master.cfg b/nagios-master.cfg deleted file mode 100644 index 6307604..0000000 --- a/nagios-master.cfg +++ /dev/null @@ -1,1804 +0,0 @@ -# Non comment lines are YAML -# -# Strings ought to be in double quotes, but it works in most cases if they aren't :) -# -# vim:set syntax=yaml: - -# TODO -# - spohr: hpasmd -# - *: mailq -# - *: check munin stats collection works -# - *: check backups are successful -# - *: unwanted: network: auth, discard, daytime, time (on some), cvs-pserver, rsync (on some), ftp (on some), http (on some) -# - verdi: pg upgrade, openvpn -# - mundy: salinfo_decode - -# down: -# - sarti -# - leisner - ---- -############################# -# hosts -############################# -servers: - gw-man-da: - address: 82.195.75.126 - parents: gw-HP-ftc - hostgroups: routing-infrastructure - contacts: joerg, bzed - gw-HP-ftc: - address: 192.25.206.1 - parents: samosa - hostgroups: routing-infrastructure - gw-brainfood: - address: 70.103.162.1 - parents: gw-HP-ftc - hostgroups: routing-infrastructure - gw-brown.edu: - address: 128.148.34.1 - parents: gw-HP-ftc - hostgroups: routing-infrastructure - gw-osuosl: - address: 140.211.166.1 - parents: gw-HP-ftc - hostgroups: routing-infrastructure - gw-scanplus-villa: - address: 212.211.132.1 - parents: gw-HP-ftc - hostgroups: routing-infrastructure - gw-scanplus-lobos: - address: 212.211.132.249 - parents: gw-HP-ftc - hostgroups: routing-infrastructure - gw-mit-csail: - address: 128.30.0.254 - parents: gw-HP-ftc - hostgroups: routing-infrastructure - gw-xs4all: - address: 194.109.137.217 - parents: gw-HP-ftc - hostgroups: routing-infrastructure - gw-umn.edu: - address: 128.101.240.222 - parents: gw-HP-ftc - hostgroups: routing-infrastructure - gw-dg-i.net: - address: 93.94.130.190 - parents: gw-HP-ftc - hostgroups: routing-infrastructure - contacts: bzed - gw-freenet: - address: 62.104.23.249 - parents: gw-HP-ftc - hostgroups: routing-infrastructure - gw-topalis: - address: 195.243.109.254 - parents: gw-HP-ftc - hostgroups: routing-infrastructure - gw-sanger: - address: 193.62.202.18 - parents: gw-HP-ftc - hostgroups: routing-infrastructure - contacts: tjrc1 - gw-lrz: - address: 129.187.0.150 - parents: gw-HP-ftc - hostgroups: routing-infrastructure - gw-frost: - address: 130.81.242.195 - parents: gw-HP-ftc - hostgroups: routing-infrastructure - gw-1und1: - address: 195.20.247.54 - parents: gw-HP-ftc - hostgroups: routing-infrastructure - contacts: joerg - gw-1und1-karlsruhe: - address: 212.227.120.29 - parents: gw-HP-ftc - hostgroups: routing-infrastructure - gw-blackcat: - address: 193.201.200.129 - parents: gw-HP-ftc - hostgroups: routing-infrastructure - gw-xandros: - address: 67.210.160.81 - parents: gw-HP-ftc - hostgroups: routing-infrastructure - gw-nmmn: - address: 217.114.76.81 - parents: gw-HP-ftc - hostgroups: routing-infrastructure - gw-utwente: - address: 130.89.149.1 - parents: gw-HP-ftc - hostgroups: routing-infrastructure - #gw-ughent: - # address: 157.193.39.254 - # parents: gw-HP-ftc - # hostgroups: routing-infrastructure - gw-agnesi: - address: 65.173.90.18 - parents: gw-HP-ftc - hostgroups: routing-infrastructure - gw-ubc: - address: 137.82.84.94 - parents: gw-HP-ftc - hostgroups: routing-infrastructure - contacts: lfilipoz - gw-carnet: - address: 161.53.160.1 - parents: gw-HP-ftc - hostgroups: routing-infrastructure - gw-telegraaf: - address: 82.94.249.153 - parents: gw-HP-ftc - hostgroups: routing-infrastructure - gw-helsinki: - address: 128.214.173.25 - parents: gw-HP-ftc - hostgroups: routing-infrastructure - contacts: holger - gw-telefonica: - address: 195.71.99.193 - parents: gw-HP-ftc - hostgroups: routing-infrastructure - gw-ball: - address: 78.32.9.209 - parents: gw-HP-ftc - hostgroups: routing-infrastructure - gw-cst: - address: 213.188.99.215 - parents: gw-HP-ftc - hostgroups: routing-infrastructure - gw-isc: - address: 149.20.20.1 - parents: gw-HP-ftc - hostgroups: routing-infrastructure - gw-aca: - address: 130.239.18.97 - parents: gw-HP-ftc - hostgroups: routing-infrastructure - - global: - hostgroups: notacomputer - pingable: false - check_command: dsa_check_always_ok - - samosa: - address: 192.25.206.57 - hostgroups: computers, no-udev, service, dl380, apache2-hosts, bind9-hosts, heavy-exim, lenny, puppet - raff: - address: 192.25.206.59 - parents: samosa - hostgroups: computers, no-udev, service, dl380, apache2-hosts, bind9-hosts, rsyncd-hosts, heavy-exim, ulogd-hosts, nfs-client, lenny, puppet - gluck: - address: 192.25.206.10 - parents: samosa - hostgroups: computers, no-udev, general, dl380, apache2-hosts, bind9-hosts, heavy-exim, highload, nfs-client, ulogd-hosts, lenny, puppet - merkel: - address: 192.25.206.16 - parents: samosa - hostgroups: computers, general, apache1-hosts, apache2-hosts, rsyncd-hosts, sw-raid, postgres81-hosts, heavy-exim, nfs-client, ulogd-hosts, lenny, puppet - spohr: - address: 192.25.206.33 - parents: samosa - hostgroups: computers, service, dl380, apache2-hosts, postgres83-hosts, ulogd-hosts, nfs-server, lenny, puppet - peri: - address: 192.25.206.15 - parents: samosa - hostgroups: computers, buildd, sw-raid, hasbootfs, lenny, puppet - contacts: dannf - penalosa: - address: 192.25.206.68 - parents: samosa - hostgroups: computers, buildd, sw-raid, single-cpu, hasbootfs, lenny, puppet - contacts: dannf - mundy: - address: 192.25.206.62 - parents: samosa - hostgroups: computers, buildd, lenny, puppet - paer: - address: 192.25.206.11 - parents: samosa - hostgroups: computers, porterbox, lenny, hasbootfs, puppet - merulo: - address: 192.25.206.58 - parents: samosa - hostgroups: computers, porterbox, lenny, puppet - - bartok: - address: 82.195.75.91 - parents: gw-man-da - hostgroups: computers, service, dl385, bind9-hosts, lenny, puppet - contacts: joerg, bzed - morales: - address: 82.195.75.97 - parents: gw-man-da - hostgroups: computers, porterbox, single-cpu, no-samhain, hasbootfs - contacts: bzed - sperger: - address: 82.195.75.98 - parents: gw-man-da - hostgroups: computers, porterbox, sw-raid, hasbootfs, lenny, puppet - contacts: bzed - agricola: - address: 82.195.75.86 - parents: gw-man-da - hostgroups: computers, porterbox, sw-raid, single-cpu, lenny, puppet - contacts: bzed - arcadelt: - address: 82.195.75.87 - parents: gw-man-da - hostgroups: computers, buildd, sw-raid, single-cpu, lenny, puppet - contacts: bzed - liszt: - address: 82.195.75.100 - parents: gw-man-da - hostgroups: computers, service, apache2-hosts, bind9-hosts, postfix-hosts, heavy-postfix, amavis-hosts, dl385, acpid-hosts - contacts: bzed -# auber: -# address: 82.195.75.101 -# parents: gw-man-da -# hostgroups: computers, no-udev, buildd, sw-raid -# contacts: bzed - unger: - address: 82.195.75.102 - parents: gw-man-da - hostgroups: computers, service, dl360, rsyslog-hosts, acpid-hosts, lenny, puppet - handel: - address: 82.195.75.104 - parents: unger - hostgroups: computers, service, rsyslog-hosts, acpid-hosts, lenny, hasbootfs, puppet - - geo1: - address: 82.195.75.105 - parents: unger - hostgroups: computers, service, acpid-hosts, lenny, hasbootfs, puppet - - master: - address: 70.103.162.29 - parents: gw-brainfood - hostgroups: computers, general, apache2-hosts, bind9-hosts, heavy-exim, highload, lenny, puppet - murphy: - address: 70.103.162.31 - parents: gw-brainfood - hostgroups: computers, general, postfix-hosts, dl380, acpid-hosts, lenny, puppet - - ries: - address: 128.148.34.103 - parents: gw-brown.edu - hostgroups: computers, service, apache2-hosts, bind9-hosts, ftpd-hosts, dl385, rsyncd-hosts, postgres83-hosts, heavy-exim, acpid-hosts, lenny, puppet - - mayer: - address: 140.211.166.78 - parents: gw-osuosl - hostgroups: computers, buildd, hasbootfs, lenny, puppet - mayr: - address: 140.211.166.58 - parents: gw-osuosl - hostgroups: computers, buildd, hasbootfs, lenny, puppet - malo: - address: 140.211.166.27 - parents: gw-osuosl - hostgroups: computers, buildd, lenny, puppet, smart - rietz: - address: 140.211.166.43 - parents: gw-osuosl - hostgroups: computers, no-udev, service, apache2-hosts, bind9-hosts, rsyncd-hosts, dl385, heavy-exim, highload, hasbootfs - rietz2: - address: 140.211.166.44 - parents: rietz - hostgroups: secondary-IPs - - villa: - address: 212.211.132.32 - parents: gw-scanplus-villa - hostgroups: computers, service, apache2-hosts, ftpd-hosts, rsyncd-hosts, dl380, lenny, puppet - lobos: - address: 212.211.132.250 - parents: gw-scanplus-lobos - hostgroups: computers, service, apache2-hosts, ftpd-hosts, rsyncd-hosts, dl380, lenny, puppet - - steffani: - address: 128.31.0.36 - parents: gw-mit-csail - hostgroups: computers, service, apache2-hosts, ftpd-hosts, rsyncd-hosts, sw-raid, bind9-hosts, acpid-hosts, hasbootfs, lenny, puppet - mahler: - address: 128.31.0.46 - parents: gw-mit-csail - hostgroups: computers, single-cpu, lenny, porterbox, rsyslog-hosts, puppet - - klecker: - address: 194.109.137.218 - parents: gw-xs4all - hostgroups: computers, service, apache2-hosts, ftpd-hosts, rsyncd-hosts, bind9-hosts, dl385, postgres83-hosts, heavy-exim, lenny, puppet - - saens: - address: 128.101.240.212 - parents: gw-umn.edu - hostgroups: computers, service, apache2-hosts, ftpd-hosts, rsyncd-hosts, dl380, lenny, puppet - - argento: - address: 93.94.130.160 - parents: gw-dg-i.net - hostgroups: computers, buildd, sw-raid, single-cpu, lenny, puppet - contacts: bzed - - widor: - address: 93.94.130.161 - parents: gw-dg-i.net - hostgroups: computers, apache2-hosts, sw-raid, single-cpu, lenny, puppet, rsyslog-hosts, acpid-hosts - contacts: bzed - - pergolesi: - address: 62.104.23.252 - parents: gw-freenet - hostgroups: computers, porterbox, sw-raid, lenny, puppet - - raptor: - address: 195.243.109.162 - parents: gw-topalis - hostgroups: computers, porterbox, postfix-hosts, lenny - - albeniz: - address: 193.62.202.27 - parents: gw-sanger - # SMP kernel doesn't run stable - hostgroups: computers, porterbox, sw-raid, single-cpu, hasbootfs, lenny, puppet - contacts: tjrc1 - goetz: - address: 193.62.202.26 - parents: gw-sanger - # SMP kernel doesn't run stable - hostgroups: computers, buildd, sw-raid, single-cpu, hasbootfs, lenny, puppet - contacts: tjrc1 - smetana: - address: 193.62.202.29 - parents: gw-sanger - hostgroups: computers, porterbox, sw-raid, lenny, puppet - contacts: tjrc1 - - verdi: - address: 192.54.42.193 - parents: gw-lrz - hostgroups: computers, service, apache2-hosts, ftpd-hosts, rsyncd-hosts, postgres81-hosts, postfix-hosts - - voltaire: - address: 72.66.115.54 - parents: gw-frost - hostgroups: computers, buildd, puppet, lenny - contacts: sfrost - - puccini: - address: 87.106.4.56 - parents: gw-1und1 - hostgroups: computers, buildd, lenny, rsyslog-hosts, ulogd-hosts, puppet - contacts: joerg - powell: - address: 87.106.64.223 - parents: gw-1und1 - hostgroups: computers, service, heavy-exim, rsyncd-hosts, ulogd-hosts, acpid-hosts, lenny, puppet - contacts: joerg - - schumann: - address: 212.227.126.54 - parents: gw-1und1-karlsruhe - hostgroups: computers, acpid-hosts, ulogd-hosts, lenny, puppet - wieck: - address: 195.20.242.89 - parents: gw-1und1-karlsruhe - hostgroups: computers, service, apache2-hosts, ftpd-hosts, rsyncd-hosts, acpid-hosts, ulogd-hosts, lenny, puppet - chopin: - address: 195.20.242.124 - parents: schumann - hostgroups: computers, ulogd-hosts, lenny, puppet, rsyslog-hosts - - caballero: - address: 193.201.200.200 - parents: gw-blackcat - hostgroups: computers, no-udev, buildd, sw-raid, lenny, puppet - - elara: - address: 67.210.160.90 - parents: gw-xandros - hostgroups: deadslow - europa: - address: 67.210.160.89 - parents: gw-xandros - hostgroups: deadslow - - kullervo: - address: 217.114.76.82 - parents: gw-nmmn - hostgroups: deadslow - contacts: luk - crest: - address: 217.114.76.83 - parents: gw-nmmn - hostgroups: deadslow - contacts: luk - pescetti: - address: 217.114.76.85 - parents: gw-nmmn - hostgroups: computers, porterbox, single-cpu, smart, lenny, puppet - - kassia: - address: 130.89.149.224 - parents: gw-utwente - hostgroups: computers, service, postfix-hosts, apache2-hosts, ftpd-hosts, rsyncd-hosts, dl360, acpid-hosts, ulogd-hosts, lenny, puppet - kassia-sec: - address: 130.89.149.225 - parents: kassia - hostgroups: secondary-IPs - kassia-ftp: - address: 130.89.149.226 - parents: kassia - hostgroups: secondary-IPs - kassia4: - address: 130.89.149.227 - parents: kassia - hostgroups: secondary-IPs - - allegri: - address: 157.193.39.233 - parents: gw-HP-ftc - hostgroups: computers, buildd, postfix-hosts, sw-raid, single-cpu, lenny, puppet - contacts: luk - - agnesi: - address: 65.173.90.83 - parents: gw-agnesi - hostgroups: deadslow, lenny - - spontini: - address: 137.82.84.65 - parents: gw-ubc - hostgroups: computers, buildd, hasbootfs, lenny, puppet - contacts: lfilipoz - ravel: - address: 137.82.84.66 - parents: gw-ubc - hostgroups: computers, general, dl385, apache2-hosts, acpid-hosts, ftpd-hosts, hasbootfs, lenny, puppet - dijkstra: - address: 137.82.84.70 - parents: gw-ubc - hostgroups: computers, bl460, rsyslog-hosts, acpid-hosts, lenny, puppet - - lebrun: - address: 193.198.184.10 - parents: gw-carnet - hostgroups: computers, buildd, sw-raid, lenny, rsyslog-hosts, puppet - schroeder: - address: 193.198.184.11 - parents: gw-carnet - hostgroups: computers, buildd, sw-raid, hasbootfs, lenny, puppet - - tartini: - address: 82.94.249.158 - parents: gw-telegraaf - hostgroups: computers, sw-raid, apache2-hosts, mysql-hosts, hasbootfs - - piatti: - address: 193.167.161.225 - parents: gw-helsinki - hostgroups: computers, postfix-hosts, dl385, ulogd-hosts, acpid-hosts, apache2-hosts, postgres83-hosts, lenny, hasbootfs, puppet - contacts: holger - - rem: - address: 195.71.99.217 - parents: gw-telefonica - hostgroups: computers, buildd, hasbootfs, lenny, puppet - - ball: - address: 78.32.9.213 - parents: gw-ball - hostgroups: computers, buildd, no-udev, dialup, hasbootfs, lenny, puppet - - zelenka: - address: 80.245.147.40 - parents: gw-HP-ftc - hostgroups: computers, porterbox, lenny, puppet - - escher: - address: 213.188.99.215 - parents: gw-cst - hostgroups: computers, single-cpu, hasbootfs - goedel: - address: 213.188.99.214 - parents: gw-cst - hostgroups: computers, single-cpu, hasbootfs, lenny, puppet - - schein: - address: 149.20.20.6 - parents: gw-isc - hostgroups: computers, service, apache2-hosts, ftpd-hosts, rsyncd-hosts, acpid-hosts, lenny, rsyslog-hosts, puppet, dl360 - - praetorius: - address: 130.239.18.121 - parents: gw-aca - hostgroups: computers, buildd, rsyslog-hosts, lenny, puppet - -############################# -# host groups -# -# hostgroups ircd and all are automatically defined -# -############################# -hostgroups: - computers: - alias: computers - private: 1 - routing-infrastructure: - alias: Internet routers and friends - extinfo-icon_image: base/switch40.png - extinfo-icon_image_alt: router - notacomputer: - alias: Systems that are not really systems. Yeah :) - private: 1 - deadslow: - alias: Systems too slow to run any real checks - dialup: - alias: Systems with slow network - - porterbox: - alias: developer accessible porter machines - extinfo-icon_image: base/debian.png - extinfo-icon_image_alt: Debian GNU/Linux - extinfo-notes_url: http://db.debian.org/machines.cgi?host=%s - service: - alias: machines running services - extinfo-icon_image: base/debian.png - extinfo-icon_image_alt: Debian GNU/Linux - extinfo-notes_url: http://db.debian.org/machines.cgi?host=%s - buildd: - alias: buildd systems - extinfo-icon_image: base/debian.png - extinfo-icon_image_alt: Debian GNU/Linux - extinfo-notes_url: http://db.debian.org/machines.cgi?host=%s - general: - alias: general purpose developer accessible machines - extinfo-icon_image: base/debian.png - extinfo-icon_image_alt: Debian GNU/Linux - extinfo-notes_url: http://db.debian.org/machines.cgi?host=%s - puppet: - alias: Hosts running puppet - extinfo-icon_image: base/debian.png - extinfo-icon_image_alt: Debian GNU/Linux - extinfo-notes_url: http://db.debian.org/machines.cgi?host=%s - - dl380: - alias: HP DL380 hosts - private: 1 - dl385: - alias: HP DL385 hosts - private: 1 - dl360: - alias: HP DL360 hosts - private: 1 - bl460: - alias: HP BL460 blades - private: 1 - sw-raid: - alias: Hosts with Linux software raid - private: 1 - single-cpu: - alias: Hosts with only one CPU - private: 1 - - lenny: - alias: Hosts running lenny, not etch - private: 1 - - no-samhain: - alias: hosts not running samhain properly - private: 1 - - #syslog-ng-hosts: - # alias: hosts running syslog-ng instead of sysklogd - # private: 1 - rsyslog-hosts: - alias: hosts running rsyslogd instead of sysklogd - private: 1 - postfix-hosts: - alias: hosts running postfix instead of exim - private: 1 - heavy-exim: - alias: "hosts running the full mail stuff, including clamav, SA, and postgrey" - private: 1 - heavy-postfix: - alias: "postfix hosts running the full mail stuff, including clamav, SA, postgrey, policyd-weight" - private: 1 - apache2-hosts: - alias: hosts running apache2 - private: 1 - apache1-hosts: - alias: hosts running apache1 - private: 1 - bind9-hosts: - alias: hosts running bind9 - private: 1 - amavis-hosts: - alias: hosts running amavis - private: 1 - ftpd-hosts: - alias: hosts running vsftpd - private: 1 - #tftpd-hosts: - # alias: hosts running a tftpd (tftpd-hpa as a daemon) - # private: 1 - rsyncd-hosts: - alias: hosts providing rsync services via xinetd - private: 1 - postgres81-hosts: - alias: hosts running postgres81 - private: 1 - postgres83-hosts: - alias: hosts running postgres83 - private: 1 - mysql-hosts: - alias: hosts running mysql - private: 1 - no-udev: - alias: hosts not using udev - private: 1 - ulogd-hosts: - alias: hosts running ulogd - private: 1 - acpid-hosts: - alias: hosts running acpid - private: 1 - - nfs-client: - alias: hosts mounting filesystems using NFS - private: 1 - nfs-server: - alias: hosts serving filesystems using NFS - private: 1 - - highload: - alias: "hosts on which high load is normal" - private: 1 - - secondary-IPs: - alias: secondary IP addresses - private: 1 - - smart: - alias: hosts with smartd - private: 1 - hasbootfs: - alias: hosts with a /boot - private: 1 - - -############################# -# servicegroups -############################# -servicegroups: - diskspace: - alias: diskusage checks - buildd: - alias: buildd checks - raid: - alias: raid checks - kernel: - alias: kernel checks - weaksshkeys: - alias: weak ssh keys - apt: - alias: apt upgrade status - samhain: - alias: samhain integrity status - security: - alias: security - servicegroup_members: apt, weaksshkeys, kernel, samhain - -############################# -# services -############################# -services: - - - name: PING - check: "check_ping!300.0,20%!600.0,40%" - hostgroups: pingable - excludehostgroups: routing-infrastructure, dialup - normal_check_interval: 5 - max_check_attempts: 4 - retry_check_interval: 1 - - - name: PING - check: "check_ping!2000.0,60%!3000.0,80%" - hostgroups: routing-infrastructure, dialup - normal_check_interval: 5 - max_check_attempts: 4 - retry_check_interval: 1 - - ############ Services ############ - ### - - ############ Disk Usage ############ - #### - - - name: disk usage - all - servicegroups: diskspace - nrpe: "/usr/lib/nagios/plugins/check_disk -X devpts -X proc 90 95" - hostgroups: computers - - - name: disk usage on / - servicegroups: diskspace - nrpe: "/usr/lib/nagios/plugins/check_disk 80 90 /" - hostgroups: computers - excludehosts: ries, klecker - - - name: disk usage on / - servicegroups: diskspace - nrpe: "/usr/lib/nagios/plugins/check_disk 90 95 /" - hosts: ries, klecker - - - name: disk usage on /boot - servicegroups: diskspace - nrpe: "/usr/lib/nagios/plugins/check_disk 75 85 /boot" - hostgroups: hasbootfs - - - name: disk usage on /var - servicegroups: diskspace - nrpe: "/usr/lib/nagios/plugins/check_disk 75 90 /var" - hosts: bartok, samosa, raff, lobos, villa, gluck, saens, voltaire, tartini, morales, powell, escher - - - name: disk usage on /org - servicegroups: diskspace - nrpe: "/usr/lib/nagios/plugins/check_disk 80 90 /org" - hosts: sperger, samosa, raff, lobos, villa, steffani, saens, pergolesi, verdi, spontini, ravel, mahler, schroeder, piatti, pescetti, widor, schein, lebrun - - - name: disk usage on /org - servicegroups: diskspace - nrpe: "/usr/lib/nagios/plugins/check_disk 90 95 /org" - hosts: merkel, bartok - - - name: disk usage on /srv - servicegroups: diskspace - nrpe: "/usr/lib/nagios/plugins/check_disk 80 90 /srv" - hosts: agricola, arcadelt, argento, allegri, tartini, morales, powell, puccini, zelenka, chopin - - - name: disk usage on /org/scratch - servicegroups: diskspace - nrpe: "/usr/lib/nagios/plugins/check_disk 80 90 /org/scratch" - hosts: merkel - - - name: disk usage on /tmp - servicegroups: diskspace - nrpe: "/usr/lib/nagios/plugins/check_disk 60 80 /tmp" - hosts: samosa, raff, gluck, saens, puccini, merkel, tartini, powell, piatti, escher - - - name: disk usage on /usr - servicegroups: diskspace - nrpe: "/usr/lib/nagios/plugins/check_disk 75 90 /usr" - hosts: samosa, raff, lobos, villa, gluck, saens, pergolesi, merulo, tartini, morales, powell - - - name: disk usage on /home - servicegroups: diskspace - nrpe: "/usr/lib/nagios/plugins/check_disk 75 90 /home" - hosts: raptor, voltaire, rem, ball, paer, escher - - - name: disk usage on /home - servicegroups: diskspace - nrpe: "/usr/lib/nagios/plugins/check_disk 90 95 /home" - hosts: gluck - - - name: disk usage on /chroot - servicegroups: diskspace - nrpe: "/usr/lib/nagios/plugins/check_disk 75 90 /chroot" - hosts: raptor - - - name: disk usage on /mnt/hdc - servicegroups: diskspace - nrpe: "/usr/lib/nagios/plugins/check_disk 75 90 /mnt/hdc" - hosts: voltaire - - - name: disk usage on /mnt/sdb1 - servicegroups: diskspace - nrpe: "/usr/lib/nagios/plugins/check_disk 75 90 /mnt/sdb1" - hosts: spontini - - - name: disk usage on /x - servicegroups: diskspace - nrpe: "/usr/lib/nagios/plugins/check_disk 75 90 /x" - hosts: caballero - - ############ All Computers ############ - #### - - - name: apt - security updates - servicegroups: apt - nrpe: "/usr/lib/nagios/plugins/dsa-check-statusfile /var/cache/dsa/nagios/apt" - hostgroups: computers - normal_check_interval: 60 - retry_check_interval: 15 - #### - - - name: backup - nrpe: "sudo /usr/lib/nagios/plugins/dsa-check-dabackup" - hostgroups: computers - normal_check_interval: 180 - max_check_attempts: 2 - retry_check_interval: 5 - - - name: backup server config - nrpe: "/usr/lib/nagios/plugins/dsa-check-dabackup-server" - hosts: bartok - normal_check_interval: 180 - max_check_attempts: 2 - retry_check_interval: 5 - - #### - - - name: running kernel - servicegroups: kernel - nrpe: "/usr/lib/nagios/plugins/dsa-check-running-kernel" - hostgroups: computers - normal_check_interval: 180 - retry_check_interval: 5 - - #### - - - name: process - puppet - nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:8 -c 1: -u root -C ruby -a 'ruby /usr/sbin/puppetd -w 5 --factsync'" - hostgroups: puppet - - - - name: puppet - nrpe: "/usr/lib/nagios/plugins/dsa-check-puppet" - hostgroups: puppet - - #### - - - name: process - samhain - nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:8 -c 1: -u root -C samhain -a '/usr/sbin/samhain'" - hostgroups: computers - excludehostgroups: no-samhain - - - name: samhain - servicegroups: samhain - nrpe: "/usr/lib/nagios/plugins/dsa-check-statusfile /var/cache/dsa/nagios/samhain" - hostgroups: computers - excludehostgroups: no-samhain - depends: process - samhain - normal_check_interval: 60 - retry_check_interval: 5 - - #### - - - name: users - nrpe: "/usr/lib/nagios/plugins/check_users 30 35" - hostgroups: computers - #### - - - name: load - nrpe: "/usr/lib/nagios/plugins/check_load -w 30,28,26 -c 50,45,50" - hostgroups: computers - excludehostgroups: highload - - - name: load - nrpe: "/usr/lib/nagios/plugins/check_load -w 140,120,100 -c 240,220,200" - hostgroups: highload - excludehosts: rietz - - - name: load - nrpe: "/usr/lib/nagios/plugins/check_load -w 200,200,200 -c 350,350,350" - hosts: rietz - #### - - - name: processes - zombies - nrpe: "/usr/lib/nagios/plugins/check_procs 5 10 -s Z" - hostgroups: computers - #### - - - name: processes - total - nrpe: "/usr/lib/nagios/plugins/check_procs 620 700" - hostgroups: computers - #### - - - name: swap usage - percent - nrpe: "/usr/lib/nagios/plugins/check_swap -w 20% -c 10%" - hostgroups: computers - #### - - - name: swap usage - mb - nrpe: "/usr/lib/nagios/plugins/check_swap -w 20000 -c 5000" - hostgroups: computers - #### - - - name: process - getty - nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:8 -c 1: -u root -C getty -a /sbin/getty" - hostgroups: computers - excludehosts: zelenka - #### - - - name: process - sshd - nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:20 -c 1: -u root -C sshd -a '/usr/sbin/sshd'" - hostgroups: computers - - - name: "network service - sshd" - check: dsa_check_ssh - hostgroups: computers - depends: process - sshd - normal_check_interval: 60 - notification_interval: 1440 - - - - name: "network service - sshd" - check: dsa_check_ssh - hostgroups: deadslow - excludehosts: agnesi - normal_check_interval: 180 - - - name: "network service - sshd - 2260" - check: dsa_check_ssh_port!2260 - hosts: agnesi - normal_check_interval: 180 - - - name: "network service - sshd - 443" - check: dsa_check_ssh_port!443 - hosts: gluck - normal_check_interval: 180 - - - - name: "network service - sshd - version" - check: "dsa_check_ssh_port_version!22!OpenSSH_4.3p2 Debian-9etch3" - depends: network service - sshd - hostgroups: computers, deadslow - excludehosts: crest, kullervo - excludehostgroups: lenny - normal_check_interval: 60 - - - name: "network service - sshd - version" - check: "dsa_check_ssh_port_version!22!OpenSSH_4.3p2 Debian-9etch2+m68k1" - depends: network service - sshd - hosts: crest, kullervo - normal_check_interval: 60 - - - name: "network service - sshd - version" - check: "dsa_check_ssh_port_version!22!OpenSSH_5.1p1 Debian-5" - depends: network service - sshd - hostgroups: lenny - excludehosts: agnesi - normal_check_interval: 60 - - - name: "network service - sshd - version - 2260" - check: "dsa_check_ssh_port_version!2260!OpenSSH_5.1p1 Debian-5" - depends: network service - sshd - 2260 - hosts: agnesi - normal_check_interval: 60 - # - - - name: ssh - weak keys - servicegroups: weaksshkeys - nrpe: "/usr/lib/nagios/plugins/dsa-check-statusfile /var/cache/dsa/nagios/weak-ssh-keys" - hostgroups: computers - normal_check_interval: 60 - #### - - - name: network service - nrpe - check: check_tcp!5666 - hostgroups: computers - max_check_attempts: -2 - notification_interval: 1440 - - - name: process - nrpe - nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:25 -c 1: -u nagios -C nrpe -a '/usr/sbin/nrpe -c /etc/nagios/nrpe.cfg -d'" - hostgroups: computers - max_check_attempts: -1 - depends: network service - nrpe - ### - - - name: process - munin-node - nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:2 -c 1: -u root -C munin-node -a '/usr/sbin/munin-node'" - hostgroups: computers - - - name: network service - munin-node - check: check_tcp!4949 - hostgroups: computers - depends: process - munin-node - ### - - - name: process - ntpd - # sarge: nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C ntpd -a '/usr/sbin/ntpd -p /var/run/ntpd.pid'" - # etch: nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u ntp -C ntpd -a '/usr/sbin/ntpd -p /var/run/ntpd.pid'" - nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -C ntpd -a '/usr/sbin/ntpd -p /var/run/ntpd.pid'" - hostgroups: computers - excludehosts: raptor, zelenka - - - name: network service - ntp - check: check_ntp - hostgroups: computers - depends: process - ntpd - excludehosts: raptor, allegri, zelenka - # - - - name: network service - time - check: dsa_check_time - hosts: raptor, allegri, zelenka - depends: process - xinetd - - ### - - - name: process - atd - nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u daemon -C atd -a /usr/sbin/atd" - hostgroups: computers - ### - - - name: process - cron - nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:2 -c 1: -u root -C cron -a /usr/sbin/cron" - hostgroups: computers - - ### - # - - # name: process - syslog-ng - # nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C syslog-ng -a '/sbin/syslog-ng -p /var/run/syslog-ng.pid'" - # hostgroups: syslog-ng-hosts - ### - - - name: process - rsyslogd - nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C rsyslogd -a '/usr/sbin/rsyslogd -c3'" - hostgroups: rsyslog-hosts - ### - - - name: process - syslogd - nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C syslogd -a '/sbin/syslogd'" - hostgroups: computers - excludehostgroups: rsyslog-hosts - - - name: process - klogd - nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C klogd -a '/sbin/klogd -x'" - hostgroups: computers - excludehostgroups: rsyslog-hosts - - ### MAIL STUFF - ### - - - name: process - exim - nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u Debian-exim -C exim4 -a '/usr/sbin/exim4 -bd -q'" - hostgroups: computers - excludehostgroups: postfix-hosts - excludehosts: master, rietz, merkel, gluck - - - name: process - exim - total - nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:50 -c 1: -C exim4" - hostgroups: computers - excludehostgroups: postfix-hosts - excludehosts: master, rietz, merkel, gluck - - - name: process - exim - nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:300 -c 1:500 -C exim4 -a '/usr/sbin/exim4'" - hosts: master, rietz, merkel, gluck - ### - - - name: process - clamav - clamd - nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:2 -c 1: -u clamav -C clamd -a '/usr/sbin/clamd'" - hostgroups: heavy-exim, heavy-postfix - - - name: service - clamav - nrpe: "/usr/lib/nagios/plugins/check_clamd -H /var/run/clamav/clamd.ctl" - hostgroups: heavy-exim, heavy-postfix - depends: process - clamav - clamd - - - name: process - clamav - freshclam - nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u clamav -C freshclam -a '/usr/bin/freshclam -d --quiet'" - hostgroups: heavy-exim, heavy-postfix - - - name: process - clamav - getsigs - nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u clamav -C getclamsigs -a 'getclamsigs'" - hostgroups: heavy-exim, heavy-postfix - # - - - name: unwanted process - clamav - nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C clamd" - hostgroups: computers - excludehostgroups: heavy-exim, heavy-postfix - - - name: unwanted process - freshclam - nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C freshclam" - hostgroups: computers - excludehostgroups: heavy-exim, heavy-postfix - - - name: unwanted process - clamav - getsigs - nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C getclamsigs" - hostgroups: computers - excludehostgroups: heavy-exim, heavy-postfix - ### - - - name: process - spamd - master - nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C spamd -a '/usr/sbin/spamd --create-prefs --max-children 5 --helper-home-dir -d --pidfile=/var/run/spamd.pid'" - hostgroups: heavy-exim - excludehosts: rietz, merkel, raff - - - name: process - spamd - master - nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C spamd -a '/usr/sbin/spamd --create-prefs --max-children 10 --helper-home-dir -d --pidfile=/var/run/spamd.pid'" - hosts: liszt - - - name: process - spamd - child - nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:11 -c 1: -C spamd -a 'spamd child'" - hosts: liszt - hostgroups: heavy-exim - depends: process - spamd - master - excludehosts: rietz, merkel, raff - # - - - name: process - spamd - master - nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u debbugs -C spamd -a '/usr/sbin/spamd -d '" - hosts: rietz - - - name: process - spamd - child - nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:6 -c 1: -u debbugs -C spamd -a 'spamd child'" - hosts: rietz - # - - - name: unwanted process - spamd - nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C spamd" - hostgroups: computers - excludehostgroups: heavy-exim - excludehosts: liszt - - - name: unwanted process - spamd - nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C spamd" - hosts: merkel, raff - - ### - #- - # name: process - greylistd - # nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u greylist -C greylistd -a '/usr/bin/python /usr/sbin/greylistd'" - # hostgroups: heavy-exim - # - - - name: unwanted process - greylistd - nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C greylistd" - hostgroups: computers - - ### - - - name: process - postgrey - nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postgrey -C postgrey -a '/usr/sbin/postgrey --pidfile=/var/run/postgrey.pid --daemonize --unix=/var/run/postgrey/socket --retry-window=4 --auto-whitelist-clients=10 --exim'" - hostgroups: heavy-exim - - - name: process - postgrey - nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postgrey -C postgrey -a '/usr/sbin/postgrey --pidfile=/var/run/postgrey.pid --daemonize --inet=127.0.0.1:60000'" - hostgroups: heavy-postfix - # - - - name: unwanted process - postgrey - nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C postgrey" - hostgroups: computers - excludehostgroups: heavy-postfix, heavy-exim - ### - - - name: process - amavis - master - nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u amavis -C amavisd-new -a 'amavisd (master)'" - hostgroups: amavis-hosts - - - name: process - amavis - all - nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1:10 -u amavis -C amavisd-new -a 'amavisd '" - hostgroups: amavis-hosts - depends: process - amavis - master - # - - - name: unwanted process - amavis - nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C amavisd-new" - hostgroups: computers - excludehostgroups: amavis-hosts - ### - - - name: process - weightd - master - nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u polw -C policyd-weight -a 'policyd-weight (master)'" - hostgroups: heavy-postfix - - - name: process - weightd - cache - nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u polw -C policyd-weight -a 'policyd-weight (cache)'" - hostgroups: heavy-postfix - depends: process - weightd - master - - - name: process - weightd - child - nrpe: "/usr/lib/nagios/plugins/check_procs -w 2:50 -c 1: -u polw -C policyd-weight -a 'policyd-weight (child)'" - hostgroups: heavy-postfix - depends: process - weightd - master - # - - - name: unwanted process - policyd-weight - nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C policyd-weight" - hostgroups: computers - excludehostgroups: heavy-postfix - - - - ### - - - name: process - postfix - master - nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C master -a '/usr/lib/postfix/master'" - hostgroups: postfix-hosts - - - name: process - postfix - qmgr - nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postfix -C qmgr -a 'qmgr -l -t fifo -u'" - hostgroups: postfix-hosts - depends: process - postfix - master - #- - # name: process - postfix - tlsmgr - # nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postfix -C tlsmgr -a 'tlsmgr -l -t fifo -u'" - # hostgroups: postfix-hosts - # depends: process - postfix - master - - - name: process - postfix - pickup - nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postfix -C pickup -a 'pickup -l -t fifo -u -c'" - hostgroups: postfix-hosts - depends: process - postfix - master - - - name: process - postfix - anvil - nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:1 -c 0: -u postfix -C anvil -a 'anvil -l -t unix -u'" - hostgroups: postfix-hosts - depends: process - postfix - master - - - - name: process - postfix - trivial-rewrite - nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:10 -c 0:15 -u postfix -C trivial-rewrite -a 'trivial-rewrite -n rewrite -t unix -u -c'" - hostgroups: postfix-hosts - depends: process - postfix - master - - - name: process - postfix - proxymap - nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:10 -c 0:15 -u postfix -C proxymap -a 'proxymap -t unix -u'" - hostgroups: postfix-hosts - depends: process - postfix - master - - - name: process - postfix - cleanup - nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:30 -c 0:50 -u postfix -C cleanup -a 'cleanup -z -t unix -u -c'" - hostgroups: postfix-hosts - depends: process - postfix - master - - - name: process - postfix - local - nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:30 -c 0:50 -u postfix -C local -a 'local -t unix'" - hostgroups: postfix-hosts - depends: process - postfix - master - - - - name: process - postfix - smtpd - nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:40 -c 0:90 -u postfix -C smtpd -a 'smtpd -n smtp -t inet -u -c'" - hostgroups: postfix-hosts - excludehosts: liszt - depends: process - postfix - master - - - name: process - postfix - smtp - nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:10 -c 0:15 -u postfix -C smtp -a 'smtp -t unix -u -c'" - hostgroups: postfix-hosts - excludehosts: liszt - depends: process - postfix - master - - - - name: process - postfix - smtpd - nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:150 -c 0:200 -u postfix -C smtpd -a 'smtpd -n smtp -t inet -u -c'" - hosts: liszt - depends: process - postfix - master - - - name: process - postfix - smtp - nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:350 -c 0:500 -u postfix -C smtp -a 'smtp -t unix -u -c'" - hosts: liszt - depends: process - postfix - master - - ### - - - name: network service - smtp - check: dsa_check_smtp - hostgroups: computers - excludehostgroups: postfix-hosts - depends: process - exim - - - - name: network service - smtp - check: dsa_check_smtp - hostgroups: postfix-hosts - excludehosts: verdi, kassia, allegri, raptor, piatti - depends: process - postfix - master - - - name: network service - smtp - port 2025 - check: dsa_check_smtp_port!2025 - hosts: verdi, kassia, murphy, allegri, piatti - depends: process - postfix - master - - - name: network service - smtp - port 8080 - check: dsa_check_smtp_port!8080 - hosts: murphy - depends: process - postfix - master - - - name: network service - smtp - port 2025 - remotecheck: /usr/lib/nagios/plugins/check_smtp -t 40 -H $HOSTADDRESS$ -p 2025 - runfrom: murphy - hosts: raptor - depends: process - postfix - master - - - - name: network service local - smtps cert - nrpe: "/usr/lib/nagios/plugins/check_http -H localhost -p 465 -S -C 14 -t 45" - hostgroups: postfix-hosts - depends: process - postfix - master - normal_check_interval: 120 - - - - - name: setup - dsa config - nrpe: "/usr/lib/nagios/plugins/dsa-check-config" - hostgroups: computers - normal_check_interval: 120 - - - name: setup - ud-ldap freshness - nrpe: "/usr/lib/nagios/plugins/dsa-check-udldap-freshness" - hostgroups: computers - ### - - - name: process - uptimed - nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u daemon -C uptimed -a '/usr/sbin/uptimed'" - hostgroups: computers - ### - - - name: process - irqbalance - nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C irqbalance -a '/usr/sbin/irqbalance'" - hostgroups: computers - excludehostgroups: single-cpu - - - name: unwanted process - irqbalance - nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C irqbalance" - hostgroups: single-cpu - - #### - ### - #- - # name: unwanted process - system-tools-backends - # nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C system-tools-ba" - # hostgroups: computers - #- - # name: unwanted process - dbus-daemon - # nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C dbus-daemon" - # hostgroups: computers - - - name: unwanted process - gkrellmd - nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C gkrellmd" - hostgroups: computers - - - name: unwanted process - portmap - nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C portmap" - hostgroups: computers - excludehostgroups: nfs-client, nfs-server - - - name: unwanted process - rpc.statd - nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C rpc.statd" - hostgroups: computers - excludehostgroups: nfs-client, nfs-server - - - name: unwanted process - inetd - nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C inetd" - hostgroups: computers - - - name: unwanted process - snmpd - nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C snmpd" - hostgroups: computers - - - ############ Processes/Services that only run on some computers ############ - #### - ### - - - name: process - rngd - nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C rngd -a '/usr/sbin/rngd -r /dev/hwrng'" - hostgroups: dl385 - ### - - - name: process - mdadm monitor - servicegroups: raid - nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -C mdadm -a '/sbin/mdadm --monitor --pid-file /var/run/mdadm/monitor.pid --daemonise --scan'" - hostgroups: sw-raid - - - name: RAID - sw raid - servicegroups: raid - nrpe: "/usr/lib/nagios/plugins/dsa-check-raid-sw" - hostgroups: sw-raid - - ### - - - name: process - cpqarrayd - servicegroups: raid - nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -C cpqarrayd -a '/usr/sbin/cpqarrayd'" - hostgroups: dl385, dl380, dl360, bl460 - - - name: RAID - arrayprobe - servicegroups: raid - nrpe: "sudo /usr/bin/arrayprobe" - hostgroups: dl385, dl380, dl360, bl460 - - - name: HW - hpacucli status - servicegroups: raid - nrpe: "/usr/lib/nagios/plugins/dsa-check-hpacucli" - normal_check_interval: 120 - hostgroups: dl385, dl380, dl360, bl460 - ### - - - name: RAID - areca - servicegroups: raid - nrpe: "/usr/lib/nagios/plugins/dsa-check-raid-areca" - hosts: powell - ### - - - name: RAID - DAC960 - servicegroups: raid - nrpe: "/usr/lib/nagios/plugins/dsa-check-raid-dac960" - hosts: verdi - ### - - - name: RAID - 3ware - servicegroups: raid - nrpe: "/usr/lib/nagios/plugins/dsa-check-raid-3ware" - hosts: puccini - ### - - - name: RAID - MPT - servicegroups: raid - nrpe: "/usr/lib/nagios/plugins/dsa-check-raid-mpt" - hosts: master - - ### - - - name: process - slapd - nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:20 -c 1:50 -u openldap -C slapd -a '/usr/sbin/slapd -h ldap:/// ldaps:/// -g openldap -u openldap'" - hosts: samosa - ### - - - name: process - ulogd - nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C ulogd -a '/usr/sbin/ulogd -d'" - hostgroups: ulogd-hosts - - - name: unexpected process - ulogd - nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C ulogd" - hostgroups: computers - excludehostgroups: ulogd-hosts - ### - - - name: process - udevd - nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C udevd -a 'udevd'" - hostgroups: computers - excludehostgroups: no-udev - - - name: unexpected process - udev - nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C udevd" - hostgroups: no-udev - ### - - - name: process - acpid - nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C acpid -a '/usr/sbin/acpid'" - hostgroups: acpid-hosts - - - name: unexpected process - acpid - nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C acpid" - hostgroups: computers - excludehostgroups: acpid-hosts - - ### - - - name: process - xinetd - nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C xinetd -a '/usr/sbin/xinetd -pidfile /var/run/xinetd.pid -stayalive'" - hosts: samosa, raptor, allegri, gluck, zelenka - hostgroups: rsyncd-hosts - - - name: unwanted process - xinetd - nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C xinetd" - hostgroups: computers - excludehosts: samosa, raptor, allegri, gluck, zelenka - excludehostgroups: rsyncd-hosts - ### - - - name: network service - finger - check: check_tcp!79 - hosts: samosa - depends: process - xinetd - ### - - - name: network service - rsync - check: check_tcp!873 - hostgroups: rsyncd-hosts - depends: process - xinetd - - - - name: network service - rsync - check: check_tcp!873 - hosts: rietz2 - depends: rietz:process - xinetd - - - - name: network service - rsync - check: check_tcp!873 - hosts: kassia-sec - depends: kassia:process - xinetd - - ### - - - name: process - nagios3 - # there is always one extra process per check currently running.. - nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:30 -c 1: -u nagios -C nagios3 -a '/usr/sbin/nagios3 -d /etc/nagios3/nagios.cfg'" - hosts: samosa - - ### - - - name: process - apache2 - master - nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -C apache2 -a /usr/sbin/apache2" - hostgroups: apache2-hosts - - - name: process - apache2 - worker - nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:50 -c 1:100 -u www-data -C apache2 -a /usr/sbin/apache2" - hostgroups: apache2-hosts - depends: process - apache2 - master - - - name: network service - http - check: check_http - hostgroups: apache2-hosts - excludehosts: kassia - depends: process - apache2 - master - - - name: network service - http - check: check_http - depends: kassia:process - apache2 - master - hosts: kassia-sec, kassia-ftp - - - - - name: process - apache - master - nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -C apache -a /usr/sbin/apache" - hostgroups: apache1-hosts - - - name: process - apache - worker - nrpe: "/usr/lib/nagios/plugins/check_procs -w 2:75 -c 1:150 -u www-data -C apache -a /usr/sbin/apache" - hostgroups: apache1-hosts - depends: process - apache - master - - - name: network service - http - check: check_http - hostgroups: apache1-hosts - depends: process - apache - master - - - - name: network service - http keyserver - check: dsa_check_http_port!11371 - hosts: raff - depends: process - apache2 - master - - - - name: network service - https - check: check_https - hosts: samosa, ries, klecker - depends: "process - apache2 - master" - normal_check_interval: 120 - - - name: network service - https cert - check: dsa_check_cert!443 - hosts: samosa, ries, klecker - depends: network service - https - normal_check_interval: 60 - #### - - - name: process - named - nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:15 -c 1: -u bind -C named -a '/usr/sbin/named -u bind'" - hostgroups: bind9-hosts - - - name: network service - dns - check: check_dns - hostgroups: bind9-hosts - depends: process - named - - - name: unwanted process - named - nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C named" - hostgroups: computers - excludehostgroups: bind9-hosts - - #### - - - name: process - vsftp - listener - nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -C vsftpd -a 'vsftpd: LISTENER'" - hostgroups: ftpd-hosts - excludehosts: kassia - - - name: process - vsftp - instance - nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:80 -c 0:100 -u ftp -C vsftpd -a 'vsftpd: '" - hostgroups: ftpd-hosts - excludehosts: kassia - - - name: network service - ftp - check: check_ftp - hostgroups: ftpd-hosts - excludehosts: kassia - depends: process - vsftp - listener - - - name: network service - ftp - check: check_ftp - hosts: kassia-sec, kassia-ftp - depends: kassia:process - xinetd - - #### - - - name: process - debianqueued - nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u dak -C debianqueued" - hosts: ries, ravel, klecker - - ### - - - name: process - postresql81 - master - nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postgres -C postmaster -a '/usr/lib/postgresql/8.1/bin/postmaster -D /var/lib/postgresql/8.1/main -c config_file=/etc/postgresql/8.1/main/postgresql.conf'" - hostgroups: postgres81-hosts - - - name: process - postresql81 - writer - nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postgres -C postmaster -a 'postgres: writer process'" - hostgroups: postgres81-hosts - depends: process - postresql81 - master - - - name: process - postresql81 - buffer - nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postgres -C postmaster -a 'postgres: stats buffer process'" - hostgroups: postgres81-hosts - depends: process - postresql81 - master - - - name: process - postresql81 - collector - nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postgres -C postmaster -a 'postgres: stats collector process'" - hostgroups: postgres81-hosts - depends: process - postresql81 - master - #### - - - name: process - postresql83 - master - nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postgres -C postgres -a '/usr/lib/postgresql/8.3/bin/postgres -D /var/lib/postgresql/8.3/main -c config_file=/etc/postgresql/8.3/main/postgresql.conf'" - hostgroups: postgres83-hosts - excludehosts: piatti, klecker - - - name: process - postresql83 - master udd - nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postgres -C postgres -a '/usr/lib/postgresql/8.3/bin/postgres -D /var/lib/postgresql/8.3/udd -c config_file=/etc/postgresql/8.3/udd/postgresql.conf'" - hosts: piatti - - - name: process - postresql83 - dak master - nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postgres -C postgres -a '/usr/lib/postgresql/8.3/bin/postgres -D /var/lib/postgresql/8.3/dak -c config_file=/etc/postgresql/8.3/dak/postgresql.conf'" - hosts: ries, klecker - - - name: process - postresql83 - dak-dev master - nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postgres -C postgres -a '/usr/lib/postgresql/8.3/bin/postgres -D /var/lib/postgresql/8.3/dak-dev -c config_file=/etc/postgresql/8.3/dak-dev/postgresql.conf'" - hosts: ries - #### - - - name: process - mysql - master - nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:2 -c 1: -u root -C mysqld_safe -a '/bin/sh /usr/bin/mysqld_safe'" - hostgroups: mysql-hosts - - - name: process - mysql - workers - nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:25 -c 1: -u mysql -C mysqld -a /usr/sbin/mysqld" - hostgroups: mysql-hosts - depends: process - mysql - master - - #### - - - name: process - stunnel4 - postgres-udd - nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u stunnel4 -C stunnel4 -a '/usr/bin/stunnel4 /etc/stunnel/postgres-udd-server.conf'" - hosts: piatti - - - name: process - stunnel4 - postgres-udd - nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u stunnel4 -C stunnel4 -a '/usr/bin/stunnel4 /etc/stunnel/postgres-udd.conf'" - hosts: merkel, master - - #### - #- - # name: process - xenconsoled - # nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C xenconsoled -a 'xenconsoled'" - # hosts: piatti - #- - # name: process - xenstored - # nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C xenstored -a '/usr/lib/xen-3.0.3-1/bin/xenstored --pid-file /var/run/xenstore.pid'" - # hosts: piatti - #- - # name: process - xend - # nrpe: "/usr/lib/nagios/plugins/check_procs -w 2:2 -c 2: -u root -C python -a 'python /usr/lib/xen-3.0.3-1/bin/xend start'" - # hosts: piatti -# - #### - - - name: process - libvirtd - nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -C libvirtd -a '/usr/sbin/libvirtd -d'" - hosts: unger - - ### - - - name: process - buildd - servicegroups: buildd - nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u buildd -C buildd '/usr/bin/perl /usr/bin/buildd'" - hostgroups: buildd - contacts: luk - - ### - - - name: process - iscsid - nrpe: "/usr/lib/nagios/plugins/check_procs -w 2:2 -c 1: -u root -C iscsid '/usr/sbin/iscsid'" - hosts: raptor - - ### - #- - # name: process - tftpd - # nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C in.tftpd -a '/usr/sbin/in.tftpd -l -B 1450 -s /var/lib/tftpboot'" - # hostgroups: tftpd-hosts - ### -# - -# name: process - dhcpd -# nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C dhcpd3 -a '/usr/sbin/dhcpd3 -q eth0'" -# hosts: paer - ### - - - name: process - smartd - nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C smartd -a '/usr/sbin/smartd --pidfile /var/run/smartd.pid --interval=1800'" - hostgroups: smart - - ############ NFS Stuff ############ - #### - - - name: process - portmap - nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u daemon -C portmap -a '/sbin/portmap'" - hostgroups: nfs-client, nfs-server - - - name: process - statd - nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u statd -C rpc.statd -a '/sbin/rpc.statd'" - hostgroups: nfs-client, nfs-server - - - name: process - nfsd - nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u root -C nfsd -a '[nfsd]'" - hostgroups: nfs-server - - - name: process - lockd - nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C lockd -a '[lockd]'" - hostgroups: nfs-server - - - name: process - mountd - nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C rpc.mountd -a '/sbin/rpc.mountd'" - hostgroups: nfs-server - # see if the nfs stuff works and doesn't hang. - # the df check all script will also hang, but we don't appear to pay attention to that - - - name: nfs mount ftp archive - nrpe: "/usr/lib/nagios/plugins/check_disk 100 100 /home/org/ftp.root/debian" - hosts: gluck - - - name: nfs mount ftp archive - nrpe: "/usr/lib/nagios/plugins/check_disk 100 100 /org/mirrors/ftp.debian.org/ftp" - hosts: merkel, raff - - ############ MISC OTHER Stuff ############ - ##### - - - name: mirror sync - security - check: "dsa_check_mirrorsync!security.debian.org!project/trace/security-master.debian.org" - hosts: global - - - name: mirror sync - security.eu - check: "dsa_check_mirrorsync!security.eu.debian.org!project/trace/security-master.debian.org" - hosts: global - - - name: mirror sync - security.us - check: "dsa_check_mirrorsync!security.us.debian.org!project/trace/security-master.debian.org" - hosts: global - - - name: DNS SOA sync - debian.org - check: "dsa_check_soas_add!samosa.debian.org!debian.org" - hosts: global - - - name: DNS SOA sync - debian.net - check: "dsa_check_soas_add!samosa.debian.org!debian.net" - hosts: global - - - name: DNS SOA sync - debian.com - check: "dsa_check_soas_add!samosa.debian.org!debian.com" - hosts: global - - - name: DNS SOA sync - mirror.debian.net - check: "dsa_check_soas_add!samosa.debian.org!mirror.debian.net" - hosts: global - - - name: DNS SOA sync - 144-28.118.59.86.in-addr.arpa - check: "dsa_check_soas_add!samosa.debian.org!144-28.118.59.86.in-addr.arpa" - hosts: global - - - name: DNS SOA sync - alioth.debian.org - check: "dsa_check_soas_add!alioth.debian.org!alioth.debian.org" - hosts: global