How to monitor MySQL socket using icinga2

I would like to monitor my MySQL server using icinga2 as the title shows above. My MySQL server uses a unix socket. I tried the following: object Service “MYSQL” { import “generic-service” check_command = “mysql” vars.mysql_query_hostname = “/var/run/mysqld/mysqld.sock” vars.mysql_ignore_auth = true vars.mysql_port = 6800 host_name = “mysql.server” } and I restart the icinga2 service. When … Read more

Icinga2: How to control if master or satellite notifies?

I created an apply rule for notifications within an Icinga2 global zone: apply Notification “mail-icingaadmin” to Service { import “mail-service-notification” user_groups = [“icingaadmins”] assign where host.vars.notification_type == “mail” } This works. In my setup, there is a master and a satellite node, both with the notification feature enabled. I now want to control which node … Read more

how to keep track of linux package updates across multiple servers / containers (replacing apticron)

I run multiple servers and in each a dozen containers (lxc). I’m still using apticron to get informations about new package updates but I start to drown in emails from each and every container and usually they report the same update since they’re all similar. What I really need to know is: what package updates … Read more

Icinga2 rejects new pki certs

I have one Icinga2 master (mon-master) and one Icinga2 client (cl0). Both are Icinga2 v2.6.3. Today I successfully ran ‘icinga2 node wizard’ on cl0 but there seems to be something wrong with the certs. When I attempt to start Icinga2 on cl0 I see: critical/SSL: Error on bio X509 AUX reading pem file ‘/etc/icinga2/pki/cl1-snmp.polyp.net.crt’: 0, … Read more

icingaweb2 authentication php error

Yesterday I added the below mpm config to httpd.conf and restarted Apache. I logged in and everything was fine. This morning Icingaweb2 auth is broken. I doubt the mpm module has anything to do with the php error but that’s all I changed. <IfModule mpm_prefork_module> StartServers 20 MinSpareServers 30 MaxSpareServers 60 ServerLimit 400 MaxRequestWorkers 400 … Read more

Icinga2 conditional logic

I have four device types: apache11, apache12, apache22 and apache24. The first two use password “4597” and the second two use password “9634.” All of these webservers have the same admin user, “kingfish.” Here’s the logic I thought should work. apply Service “HTTP/80: Apache Status” { import “generic-service” check_interval = 10m retry_interval = 3m check_command … Read more

Can I send check scripts from master to clients and maintain the execute bit with Icinga2?

I believe that I have succesfully configured Icinga 2 on Debian 9 (Stretch) using the stock Debian packages with the “Top Down Config Sync” mode as described in the Icinga documentation. I have installed icinga2 and monitoring-plugins-basic on the clients and I am able to add remote checks using check_apt etc. I’ve even managed to … Read more

If my master zone is not named “master” should my client zones.conf contain the zone “master”?

My Icinga2 master zone (parent zone of all my other zones) is named “core” so I’m wondering whether the zones.conf files on my Icinga2 client machines should ever contain references to “master.” Here’s an example of a client zone.conf file. object Endpoint “mon-prod.polywog.net” { host = “191.120.289.30” port = “5665” } object Zone “master” { … Read more

Turn off a check on one host in icinga2

I’m trying to turn off the http check for one host in my icinga2 setup. I’m new to this and am just going around in circles. I’m using the standard install and have it successfully running against a number of linux sattelite machienes happily, but a few don’t have web servers running on them so … Read more