zabbix自定义监控进程与日志

zabbix自定义监控进程与日志

1:zabbix自定义监控进程

安装httpd服务

[root@agent ~]# yum -y install httpd
Last metadata expiration check: 23:26:55 ago on Mon 05 Sep 2022 06:44:28 PM CST.
Package httpd-2.4.37-43.module_el8.5.0+1022+b541f3b1.x86_64 is already installed.
Dependencies resolved.
Nothing to do.
Complete!
[root@agent ~]#  systemctl restart httpd
[root@agent ~]# systemctl enable --now httpd

创建一个检测服务是否启动的脚本

[root@agent ~]# mkdir /etc/zabbix/script
[root@agent ~]# cd /etc/zabbix/script
[root@agent script]#  vim check_httpd.sh
[root@agent script]# cat check_httpd.sh
#!/bin/bash
count=$(ps -ef | grep -Ev "grep|$0" | grep -c httpd)
if [ $count -eq 0 ];then
echo '1'
else
echo '0'
fi

[root@agent script]# chown zabbix.zabbix /etc/zabbix/script/ -R
[root@agent script]#  chmod +x check_httpd.sh

测试

[root@agent script]# ./check_httpd.sh
0
[root@agent script]# systemctl stop httpd.service
[root@agent script]# ./check_httpd.sh
1
[root@agent script]#

创建自定义键值

[root@agent ~]# vim /etc/zabbix/zabbix_agentd.conf
UserParameter=check_httpd,/bin/bash /etc/zabbix/script/check_httpd.sh
[root@agent ~]# systemctl restart zabbix-agent.service

进入zabbix平台创建监控项

配置触发器

将httpd服务停止查看是否告警

[root@agent ~]# systemctl stop httpd.service
[root@agent ~]#

将httpd服务恢复查看

[root@agent ~]# systemctl restart httpd.service
[root@agent ~]#

2:自定义监控日志

在做这个之前我们需要log.py来协助我们进行测试
将log.py上传到/etc/zabbix/script/目录下，然后给执行权限，修改所有者和所属组为zabbix

[root@agent script]# ls
check_httpd.sh  log.py
[root@agent script]# chown zabbix.zabbix log.py
[root@agent script]# chmod +x log.py
[root@agent script]#

httpd的日志文件在/var/log/httpd/下面，我们需要给zabbix权限

[root@agent script]# setfacl -m u:zabbix:r-x  /var/log/httpd/
[root@agent script]# setfacl -m u:zabbix:rwx /tmp/logseek
[root@agent script]#  getfacl /var/log/httpd/
getfacl: Removing leading '/' from absolute path names
# file: var/log/httpd/
# owner: root
# group: root
user::rwx
user:zabbix:r-x
group::---
mask::r-x
other::---

[root@agent script]#

[root@agent ~]# cd /var/log/httpd/
[root@agent httpd]# ls
access_log  error_log

下载python3来执行log.py脚本

[root@agent ~]# dnf -y install python3
Last metadata expiration check: 1 day, 0:03:21 ago on Mon 05 Sep 2022 06:44:28 PM CST.
Package python36-3.6.8-38.module_el8.5.0+895+a459eca8.x86_64 is already installed.
Dependencies resolved.
Nothing to do.
Complete!

修改zabbix_agentd.conf文件，并重启服务

[root@agent ~]# vim /etc/zabbix/zabbix_agentd.conf
UserParameter=check_log[*],/usr/bin/python3 /etc/zabbix/script/log.py $1 $2 $3
[root@agent ~]# systemctl restart zabbix-server.service

测试脚本是否能应用

[root@agent script]# python3 log.py  /var/log/httpd/error_log  /tmp/logseek Error
0
[root@agent script]# echo 'Error' >> /var/log/httpd/error_log
[root@agent script]# python3 log.py  /var/log/httpd/error_log  /tmp/logseek Error
1
[root@agent script]#

回到zabbix平台配置监控项

创建触发器

向/var/log/httpd/error_log日志文件里追加error进行测试

[root@agent script]# cd
[root@agent ~]# cd /var/tmp/
[root@agent tmp]# echo 'error' >> /var/log/httpd/error_log

删除error

[root@agent tmp]# vim /var/log/httpd/error_log
[root@agent tmp]#