ncc.zabbix_templates

Yohn Y. 2023-12-09 Parent:a2498305a865 Child:0caa9b17e6f5

15:d9c6b29affc6 Go to Latest

ncc.zabbix_templates/Linux.common/zbx_export_templates.yaml

. Переименование параметра пользовательского окружения в более подходящее системное

History
awgur@0 1 zabbix_export:
awgur@0 2 version: '6.0'
awgur@12 3 date: '2023-12-02T09:43:45Z'
awgur@0 4 groups:
awgur@0 5 - uuid: 22941f4e01294888a9bed3aae15f6ef9
awgur@0 6 name: Templates/AWNET
awgur@0 7 templates:
awgur@0 8 - uuid: d9ed1ecc0bc14cafb7fcbd309ad9a944
awgur@0 9 template: 'AWNET Linux Template'
awgur@0 10 name: 'AWNET Linux Template'
awgur@0 11 groups:
awgur@0 12 - name: Templates/AWNET
awgur@0 13 items:
awgur@0 14 - uuid: 85da57ac953f48c5a1e08f74fb2b65d5
awgur@0 15 name: 'Пакеты к обновлению'
awgur@0 16 key: aw.linux.apt.updatable
awgur@13 17 delay: 5m
awgur@0 18 trends: '0'
awgur@0 19 value_type: TEXT
awgur@0 20 preprocessing:
awgur@0 21 - type: JAVASCRIPT
awgur@0 22 parameters:
awgur@0 23 - |
awgur@0 24 var buf = value.split('\n');
awgur@0 25 var res = "";
awgur@0 26
awgur@0 27 var re_test = [
awgur@0 28 /^WARNING:/,
awgur@0 29 /^Вывод списка/,
awgur@4 30 /^Listing\.\.\./,
awgur@0 31 ];
awgur@0 32
awgur@0 33 var flag;
awgur@0 34 for (var i in buf) {
awgur@0 35 flag = true;
awgur@0 36 for (var j in re_test) {
awgur@0 37 if (re_test[j].test(buf[i])) {
awgur@0 38 flag = false
awgur@0 39 break;
awgur@0 40 }
awgur@0 41 }
awgur@0 42
awgur@0 43 if (flag && buf[i].length > 0) {
awgur@0 44 res += buf[i] + "\n";
awgur@0 45 }
awgur@0 46 }
awgur@0 47
awgur@0 48 return res
awgur@12 49 - type: DISCARD_UNCHANGED
awgur@0 50 parameters:
awgur@12 51 - ''
awgur@0 52 tags:
awgur@0 53 - tag: Module
awgur@0 54 value: 'Система пакетов'
awgur@0 55 triggers:
awgur@0 56 - uuid: 9a2fbf76b8f44d45b8a987c1997de212
awgur@12 57 expression: 'length(last(/AWNET Linux Template/aw.linux.apt.updatable))>2'
awgur@0 58 name: 'Появились обновления системы'
awgur@0 59 opdata: '{ITEM.VALUE}'
awgur@0 60 priority: WARNING
awgur@12 61 type: MULTIPLE
awgur@0 62 - uuid: 33c23ce59f3c49068057013b35ffb849
awgur@0 63 name: 'Ошибка в системном журнале'
awgur@0 64 key: 'aw.linux.journalctl[2]'
awgur@0 65 delay: 2m
awgur@0 66 trends: '0'
awgur@0 67 value_type: TEXT
awgur@0 68 preprocessing:
awgur@0 69 - type: JAVASCRIPT
awgur@0 70 parameters:
awgur@0 71 - |
awgur@0 72 var buf = value.split('\n');
awgur@0 73 var res = "";
awgur@0 74
awgur@0 75 var re_test = [
awgur@0 76 new RegExp('^-- Journal begins'),
awgur@0 77 new RegExp('^-- No entries --'),
awgur@0 78 new RegExp('[0-9]{2} [0-9:]{8} [a-zA-Z0-9._-]* sudo\[[0-9]*\]: '),
awgur@0 79 new RegExp('CONFIG: restrict nopeer ignored'),
awgur@0 80 new RegExp('statistics directory /var/log/ntpsec/ does not exist or is unwriteable, error No such file or directory'),
awgur@0 81 new RegExp('error\: kex_exchange_identification\: Connection closed by remote host'),
awgur@0 82 new RegExp('error\: maximum authentication attempts exceeded for [^ ]* from [a-f0-9.:-]* port [0-9]+ ssh[0-9]*'),
awgur@0 83 new RegExp('error\: kex_exchange_identification\: client sent invalid protocol identifier "[^"]*"'),
awgur@0 84 new RegExp('error\: beginning MaxStartups throttling'),
awgur@0 85 new RegExp('error\: kex_exchange_identification\: read\: Connection reset by peer'),
awgur@6 86 new RegExp('fatal\: Timeout before authentication for [a-zA-Z.:0-9-]+ port [0-9]+'),
awgur@0 87 new RegExp('error\: kex_exchange_identification\: banner line contains invalid characters'),
awgur@0 88 new RegExp('error\: maximum authentication attempts exceeded for invalid user [a-zA-Z0-9_.-]+ from [0-9a-f:.]+ port [0-9]+ ssh[0-9]*'),
awgur@0 89 new RegExp('fatal\: userauth_pubkey\: parse request failed: incomplete message'),
awgur@0 90 new RegExp('sshd\[[0-9]*\]\: error\: Protocol major versions differ\: [0-9]+ vs\. [0-9]+'),
awgur@0 91 new RegExp('sshd\[[0-9]*\]\: fatal\: userauth_finish\: Broken pipe \\[preauth\\]'),
awgur@0 92 new RegExp('openvpn\[[0-9]*\]\: [0-9.:a-fA-F]* Connection reset, restarting \\[[0-9]\\]'),
awgur@0 93 new RegExp('/system\.journal\: Journal header limits reached or header out-of-date, rotating\.'),
awgur@9 94 new RegExp('sshd\[[0-9]+\]\: error\: kex protocol error\:'),
awgur@0 95 ];
awgur@0 96
awgur@0 97 var flag;
awgur@0 98 for (var i in buf) {
awgur@0 99 flag = true;
awgur@0 100 for (var j in re_test) {
awgur@0 101 if (re_test[j].test(buf[i])) {
awgur@0 102 flag = false
awgur@0 103 break;
awgur@0 104 }
awgur@0 105 }
awgur@0 106
awgur@0 107 if (flag) {
awgur@0 108 res += buf[i] + "\n";
awgur@0 109 }
awgur@0 110 }
awgur@0 111
awgur@0 112 return res
awgur@0 113 - type: NOT_MATCHES_REGEX
awgur@0 114 parameters:
awgur@0 115 - '^ *$'
awgur@0 116 error_handler: DISCARD_VALUE
awgur@0 117 tags:
awgur@0 118 - tag: Module
awgur@0 119 value: 'Системный журнал'
awgur@0 120 triggers:
awgur@0 121 - uuid: e8001f72a356424ea8e83abfd2a83c63
awgur@0 122 expression: 'nodata(/AWNET Linux Template/aw.linux.journalctl[2],5m)=0'
awgur@0 123 name: 'Ошибки в системном журнале'
awgur@0 124 opdata: '{ITEM.VALUE}'
awgur@0 125 priority: WARNING