Nagios: Monitoring Additional Services

Monitoring Additional Services: Client specific services

Below are additional service definitions that can be added to server definitions to monitor more aspects of the machine.

Web Services:

check_http vs https

define service{
        use                             generic-service      
        host_name                       HOSTNAME
        service_description             HTTP
        check_command                   check_http
        }

define service {
        use                             generic-service
        host_name                       HOSTNAME
        service_description             HTTPS
        check_command                   check_https_url
        }

Package Update Services:

These services are focused on monitoring packages that need updating, critical or otherwise. Many of these modules can be found here

apt-get

apt is a built-in plugin that comes preinstalled as part of the nagios_plugins package.

Define the service on the Nagios server

define service{
        use                             generic-service
        host_name                       HOSTNAME
        service_description             Updates Required - apt
        check_command                   check_by_ssh!/usr/lib/nagios/plugins/check_apt
        notifications_enabled   0
        }

YUM

Edit the sudoers file and allow Nagios to use yum while restricting it to check-update only.

nagios ALL = NOPASSWD: /usr/bin/yum --security check-update

Download the check_yum plugin and make it executable

cd /usr/local/nagios/libexec && wget https://raw.githubusercontent.com/AdoptOpenJDK/openjdk-infrastructure/master/ansible/playbooks/AdoptOpenJDK_Unix_Playbook/roles/Nagios_Plugins/tasks/additional_plugins/check_yum && chmod +x check_yum

Define the service on the Nagios server

define service{
        use                             generic-service
        host_name                       HOSTNAME
        check_period                    once-a-day-at-8
        service_description             Updates Required - YUM
        check_command                   check_by_ssh!/usr/local/nagios/libexec/check_yum
        notifications_enabled   0
        }

DNF

Note: Requires that ruby is installed on the machine. Download the check_dnf.rb module and make it executable

cd /usr/local/nagios/libexec && wget https://raw.githubusercontent.com/nikkolasg/check_dnf/master/check_dnf.rb -O check_dnf && chmod +x check_dnf

Define the service on the Nagios Server

define service{
        use                             generic-service
        host_name                       HOSTNAME
        check_period			once-a-day-at-8
        service_description             Updates Required - DNF
        check_command                   check_by_ssh!/usr/local/nagios/libexec/check_dnf
        notifications_enabled   0
        }

Zypper

Edit the sudoers file and allow nagios to use zypper while restricting it to list-patches only.

nagios ALL = NOPASSWD: /usr/bin/zypper list-patches

Download the check_yum plugin and make it executable

cd /usr/local/nagios/libexec &&https://raw.githubusercontent.com/AdoptOpenJDK/openjdk-infrastructure/master/ansible/playbooks/AdoptOpenJDK_Unix_Playbook/roles/Nagios_Plugins/tasks/additional_plugins/check_zypper && chmod +x check_zypper

Define the service on the Nagios server

define service{
        use                             generic-service
        host_name                       HOSTNAME
        check_period                    once-a-day-at-8
        service_description             Updates Required - Zypper
        check_command                   check_by_ssh!/usr/local/nagios/libexec/check_zypper
        notifications_enabled   0
        }

PKG (FreeBSD)

Download the check_pkg plugin and make it executable

cd /usr/local/nagios/libexec && wget https://raw.githubusercontent.com/AdoptOpenJDK/openjdk-infrastructure/master/ansible/playbooks/AdoptOpenJDK_Unix_Playbook/roles/Nagios_Plugins/tasks/additional_plugins/check_pkg && chmod +x check_pkg

Define the service on the Nagios server

define service{
        use                             generic-service
        host_name                       HOSTNAME
        check_period                    once-a-day-at-8
        service_description             Updates Required - Zypper
        check_command                   check_by_ssh!/usr/local/nagios/libexec/check_pkg 2>1 /dev/null
        notifications_enabled   0
        }

softwareupdate (macOS) Download the check_sw_up plugin and make it executable

cd /usr/local/nagios/libexec && wget https://raw.githubusercontent.com/AdoptOpenJDK/openjdk-infrastructure/master/ansible/playbooks/AdoptOpenJDK_Unix_Playbook/roles/Nagios_Plugins/tasks/additional_plugins/check_sw_up && chmod +x check_sw_up

Define the service on the Nagios server

define service{
        use                             local-service
        host_name                       build-macstadium-macos1010-2
	check_period			once-a-day-at-8
        service_description             Updates Required - softwareupdate
        check_command                   remote_check_sw_up_mac
        notifications_enabled   0
        }

Account Passwd Expiry

Edit the sudoers file using 'visudo' and allow nagios to execute the chage command

nagios ALL = NOPASSWD: /usr/bin/chage -l * 

Download and configure plugin

# Ubuntu: 
apt-get install libmonitoring-plugin-perl libnagios-object-perl libnagios-plugin-perl

# CentOS/OpenSuse:
yum -y install perl-Nagios-Plugin
zypper install perl-Nagios-Plugin
dnf -y install perl-Nagios-Plugin
# Edit the sudoers file and comment out "Defaults    requiretty"

Download the plugin and make executable.

cd /usr/local/nagios/libexec && wget https://raw.githubusercontent.com/elio78/nagios/master/check_passwd_expiration.pl -O check_passwd && chmod +x check_passwd
vi /usr/local/nagios/libexec/check_passwd
# replace line 1 with 
#!/usr/bin/perl -w
no warnings;
no warnings 'all';

# Test
su - nagios
/usr/local/nagios/libexec/check_passwd

Define the service on the Nagios server

define service{
        use                             generic-service
        host_name                       HOSTNAME
        check_period			once-a-day-at-8
        service_description             Passwd Expiry
        check_command                   check_by_ssh!/usr/local/nagios/libexec/check_passwd -w 14 -c 3
        }