ncc.zabbix_templates

Yohn Y. 2024-09-09 Parent:5e7a9d9bcd4f Child:984772997051

34:1f1ee604c8b9 Go to Latest

ncc.zabbix_templates/Linux.common/zbx_export_templates.yaml

. Ещё один экземпляр в коллекции ненужных сообщений в логах ошибок

History
awgur@0 1 zabbix_export:
awgur@33 2 version: '7.0'
awgur@33 3 template_groups:
awgur@0 4 - uuid: 22941f4e01294888a9bed3aae15f6ef9
awgur@0 5 name: Templates/AWNET
awgur@0 6 templates:
awgur@0 7 - uuid: d9ed1ecc0bc14cafb7fcbd309ad9a944
awgur@0 8 template: 'AWNET Linux Template'
awgur@0 9 name: 'AWNET Linux Template'
awgur@34 10 description: 'Версия: v0.r202409.1'
awgur@33 11 templates:
awgur@33 12 - name: OSI_v2
awgur@0 13 groups:
awgur@0 14 - name: Templates/AWNET
awgur@0 15 items:
awgur@0 16 - uuid: 85da57ac953f48c5a1e08f74fb2b65d5
awgur@0 17 name: 'Пакеты к обновлению'
awgur@0 18 key: aw.linux.apt.updatable
awgur@13 19 delay: 5m
awgur@33 20 history: 90d
awgur@33 21 value_type: TEXT
awgur@0 22 trends: '0'
awgur@0 23 preprocessing:
awgur@0 24 - type: JAVASCRIPT
awgur@0 25 parameters:
awgur@0 26 - |
awgur@0 27 var buf = value.split('\n');
awgur@0 28 var res = "";
awgur@0 29
awgur@0 30 var re_test = [
awgur@0 31 /^WARNING:/,
awgur@0 32 /^Вывод списка/,
awgur@4 33 /^Listing\.\.\./,
awgur@0 34 ];
awgur@0 35
awgur@0 36 var flag;
awgur@0 37 for (var i in buf) {
awgur@0 38 flag = true;
awgur@0 39 for (var j in re_test) {
awgur@0 40 if (re_test[j].test(buf[i])) {
awgur@0 41 flag = false
awgur@0 42 break;
awgur@0 43 }
awgur@0 44 }
awgur@0 45
awgur@0 46 if (flag && buf[i].length > 0) {
awgur@0 47 res += buf[i] + "\n";
awgur@0 48 }
awgur@0 49 }
awgur@0 50
awgur@0 51 return res
awgur@12 52 - type: DISCARD_UNCHANGED
awgur@0 53 parameters:
awgur@12 54 - ''
awgur@0 55 tags:
awgur@0 56 - tag: Module
awgur@0 57 value: 'Система пакетов'
awgur@0 58 triggers:
awgur@0 59 - uuid: 9a2fbf76b8f44d45b8a987c1997de212
awgur@12 60 expression: 'length(last(/AWNET Linux Template/aw.linux.apt.updatable))>2'
awgur@0 61 name: 'Появились обновления системы'
awgur@0 62 opdata: '{ITEM.VALUE}'
awgur@0 63 priority: WARNING
awgur@12 64 type: MULTIPLE
awgur@0 65 - uuid: 33c23ce59f3c49068057013b35ffb849
awgur@0 66 name: 'Ошибка в системном журнале'
awgur@0 67 key: 'aw.linux.journalctl[2]'
awgur@0 68 delay: 2m
awgur@33 69 history: 90d
awgur@33 70 value_type: TEXT
awgur@0 71 trends: '0'
awgur@0 72 preprocessing:
awgur@0 73 - type: JAVASCRIPT
awgur@0 74 parameters:
awgur@0 75 - |
awgur@0 76 var buf = value.split('\n');
awgur@0 77 var res = "";
awgur@0 78
awgur@0 79 var re_test = [
awgur@0 80 new RegExp('^-- Journal begins'),
awgur@0 81 new RegExp('^-- No entries --'),
awgur@0 82 new RegExp('[0-9]{2} [0-9:]{8} [a-zA-Z0-9._-]* sudo\[[0-9]*\]: '),
awgur@0 83 new RegExp('CONFIG: restrict nopeer ignored'),
awgur@0 84 new RegExp('statistics directory /var/log/ntpsec/ does not exist or is unwriteable, error No such file or directory'),
awgur@0 85 new RegExp('error\: kex_exchange_identification\: Connection closed by remote host'),
awgur@0 86 new RegExp('error\: maximum authentication attempts exceeded for [^ ]* from [a-f0-9.:-]* port [0-9]+ ssh[0-9]*'),
awgur@0 87 new RegExp('error\: kex_exchange_identification\: client sent invalid protocol identifier "[^"]*"'),
awgur@0 88 new RegExp('error\: beginning MaxStartups throttling'),
awgur@0 89 new RegExp('error\: kex_exchange_identification\: read\: Connection reset by peer'),
awgur@6 90 new RegExp('fatal\: Timeout before authentication for [a-zA-Z.:0-9-]+ port [0-9]+'),
awgur@0 91 new RegExp('error\: kex_exchange_identification\: banner line contains invalid characters'),
awgur@0 92 new RegExp('error\: maximum authentication attempts exceeded for invalid user [a-zA-Z0-9_.-]+ from [0-9a-f:.]+ port [0-9]+ ssh[0-9]*'),
awgur@0 93 new RegExp('fatal\: userauth_pubkey\: parse request failed: incomplete message'),
awgur@0 94 new RegExp('sshd\[[0-9]*\]\: error\: Protocol major versions differ\: [0-9]+ vs\. [0-9]+'),
awgur@0 95 new RegExp('sshd\[[0-9]*\]\: fatal\: userauth_finish\: Broken pipe \\[preauth\\]'),
awgur@0 96 new RegExp('openvpn\[[0-9]*\]\: [0-9.:a-fA-F]* Connection reset, restarting \\[[0-9]\\]'),
awgur@0 97 new RegExp('/system\.journal\: Journal header limits reached or header out-of-date, rotating\.'),
awgur@9 98 new RegExp('sshd\[[0-9]+\]\: error\: kex protocol error\:'),
awgur@18 99 new RegExp('sshd\[[0-9]+\]\: error\: kex_protocol_error\:'),
awgur@33 100 new RegExp('sshd\[[0-9]+\]\: error\: kex_exchange_identification\: read: Connection timed out'),
awgur@33 101 new RegExp('sshd\[[0-9]+\]\: fatal\: userauth_pubkey\: parse publickey packet\: incomplete message'),
awgur@34 102 new RegExp('sshd\[[0-9]+\]\: fatal\: userauth_finish\: send failure packet\: Connection reset by peer'),
awgur@0 103 ];
awgur@0 104
awgur@0 105 var flag;
awgur@0 106 for (var i in buf) {
awgur@0 107 flag = true;
awgur@0 108 for (var j in re_test) {
awgur@0 109 if (re_test[j].test(buf[i])) {
awgur@0 110 flag = false
awgur@0 111 break;
awgur@0 112 }
awgur@0 113 }
awgur@0 114
awgur@0 115 if (flag) {
awgur@0 116 res += buf[i] + "\n";
awgur@0 117 }
awgur@0 118 }
awgur@0 119
awgur@0 120 return res
awgur@0 121 - type: NOT_MATCHES_REGEX
awgur@0 122 parameters:
awgur@0 123 - '^ *$'
awgur@0 124 error_handler: DISCARD_VALUE
awgur@0 125 tags:
awgur@0 126 - tag: Module
awgur@0 127 value: 'Системный журнал'
awgur@0 128 triggers:
awgur@0 129 - uuid: e8001f72a356424ea8e83abfd2a83c63
awgur@0 130 expression: 'nodata(/AWNET Linux Template/aw.linux.journalctl[2],5m)=0'
awgur@0 131 name: 'Ошибки в системном журнале'
awgur@0 132 opdata: '{ITEM.VALUE}'
awgur@0 133 priority: WARNING
awgur@16 134 - uuid: a7879de7638a4333993b90f0db757619
awgur@16 135 name: 'Версия ОС'
awgur@16 136 key: aw.linux.version
awgur@33 137 history: 90d
awgur@33 138 value_type: TEXT
awgur@16 139 trends: '0'
awgur@16 140 preprocessing:
awgur@17 141 - type: DISCARD_UNCHANGED_HEARTBEAT
awgur@16 142 parameters:
awgur@17 143 - 1d