.. init

Yohn Y.
     1.1 --- /dev/null	Thu Jan 01 00:00:00 1970 +0000
     1.2 +++ b/Linux.common/zbx_export_templates.yaml	Sat Sep 30 22:30:25 2023 +0300
     1.3 @@ -0,0 +1,122 @@
     1.4 +zabbix_export:
     1.5 +  version: '6.0'
     1.6 +  date: '2023-09-30T06:54:07Z'
     1.7 +  groups:
     1.8 +    - uuid: 22941f4e01294888a9bed3aae15f6ef9
     1.9 +      name: Templates/AWNET
    1.10 +  templates:
    1.11 +    - uuid: d9ed1ecc0bc14cafb7fcbd309ad9a944
    1.12 +      template: 'AWNET Linux Template'
    1.13 +      name: 'AWNET Linux Template'
    1.14 +      groups:
    1.15 +        - name: Templates/AWNET
    1.16 +      items:
    1.17 +        - uuid: 85da57ac953f48c5a1e08f74fb2b65d5
    1.18 +          name: 'Пакеты к обновлению'
    1.19 +          key: aw.linux.apt.updatable
    1.20 +          delay: 1h
    1.21 +          trends: '0'
    1.22 +          value_type: TEXT
    1.23 +          preprocessing:
    1.24 +            - type: JAVASCRIPT
    1.25 +              parameters:
    1.26 +                - |
    1.27 +                  var buf = value.split('\n');
    1.28 +                  var res = "";
    1.29 +                     
    1.30 +                  var re_test = [
    1.31 +                    /^WARNING:/,
    1.32 +                    /^Вывод списка/,
    1.33 +                  ];
    1.34 +                  
    1.35 +                  var flag;
    1.36 +                  for (var i in buf) {
    1.37 +                    flag = true;
    1.38 +                    for (var j in re_test) {
    1.39 +                      if (re_test[j].test(buf[i])) {
    1.40 +                        flag = false
    1.41 +                        break;
    1.42 +                      }
    1.43 +                    }
    1.44 +                    
    1.45 +                    if (flag && buf[i].length > 0) {
    1.46 +                      res += buf[i] + "\n";
    1.47 +                    }
    1.48 +                  }
    1.49 +                  
    1.50 +                  return res
    1.51 +            - type: NOT_MATCHES_REGEX
    1.52 +              parameters:
    1.53 +                - '^ *$'
    1.54 +              error_handler: DISCARD_VALUE
    1.55 +          tags:
    1.56 +            - tag: Module
    1.57 +              value: 'Система пакетов'
    1.58 +          triggers:
    1.59 +            - uuid: 9a2fbf76b8f44d45b8a987c1997de212
    1.60 +              expression: 'nodata(/AWNET Linux Template/aw.linux.apt.updatable,2h)=0'
    1.61 +              name: 'Появились обновления системы'
    1.62 +              opdata: '{ITEM.VALUE}'
    1.63 +              priority: WARNING
    1.64 +        - uuid: 33c23ce59f3c49068057013b35ffb849
    1.65 +          name: 'Ошибка в системном журнале'
    1.66 +          key: 'aw.linux.journalctl[2]'
    1.67 +          delay: 2m
    1.68 +          trends: '0'
    1.69 +          value_type: TEXT
    1.70 +          preprocessing:
    1.71 +            - type: JAVASCRIPT
    1.72 +              parameters:
    1.73 +                - |
    1.74 +                  var buf = value.split('\n');
    1.75 +                  var res = "";
    1.76 +                     
    1.77 +                  var re_test = [
    1.78 +                    new RegExp('^-- Journal begins'),
    1.79 +                    new RegExp('^-- No entries --'),
    1.80 +                    new RegExp('[0-9]{2} [0-9:]{8} [a-zA-Z0-9._-]* sudo\[[0-9]*\]: '),
    1.81 +                    new RegExp('CONFIG: restrict nopeer ignored'),
    1.82 +                    new RegExp('statistics directory /var/log/ntpsec/ does not exist or is unwriteable, error No such file or directory'),
    1.83 +                    new RegExp('error\: kex_exchange_identification\: Connection closed by remote host'),
    1.84 +                    new RegExp('error\: maximum authentication attempts exceeded for [^ ]* from [a-f0-9.:-]* port [0-9]+ ssh[0-9]*'),
    1.85 +                    new RegExp('error\: kex_exchange_identification\: client sent invalid protocol identifier "[^"]*"'),
    1.86 +                    new RegExp('error\: beginning MaxStartups throttling'),
    1.87 +                    new RegExp('error\: kex_exchange_identification\: read\: Connection reset by peer'),
    1.88 +                    new RegExp('error\: kex_exchange_identification\: banner line contains invalid characters'),
    1.89 +                    new RegExp('error\: maximum authentication attempts exceeded for invalid user [a-zA-Z0-9_.-]+ from [0-9a-f:.]+ port [0-9]+ ssh[0-9]*'),
    1.90 +                    new RegExp('fatal\: userauth_pubkey\: parse request failed: incomplete message'),
    1.91 +                    new RegExp('sshd\[[0-9]*\]\: error\: Protocol major versions differ\: [0-9]+ vs\. [0-9]+'),
    1.92 +                    new RegExp('sshd\[[0-9]*\]\: fatal\: userauth_finish\: Broken pipe \\[preauth\\]'),
    1.93 +                    new RegExp('openvpn\[[0-9]*\]\: [0-9.:a-fA-F]* Connection reset, restarting \\[[0-9]\\]'),
    1.94 +                    new RegExp('/system\.journal\: Journal header limits reached or header out-of-date, rotating\.'),
    1.95 +                  ];
    1.96 +                  
    1.97 +                  var flag;
    1.98 +                  for (var i in buf) {
    1.99 +                    flag = true;
   1.100 +                    for (var j in re_test) {
   1.101 +                      if (re_test[j].test(buf[i])) {
   1.102 +                        flag = false
   1.103 +                        break;
   1.104 +                      }
   1.105 +                    }
   1.106 +                    
   1.107 +                    if (flag) {
   1.108 +                      res += buf[i] + "\n";
   1.109 +                    }
   1.110 +                  }
   1.111 +                  
   1.112 +                  return res
   1.113 +            - type: NOT_MATCHES_REGEX
   1.114 +              parameters:
   1.115 +                - '^ *$'
   1.116 +              error_handler: DISCARD_VALUE
   1.117 +          tags:
   1.118 +            - tag: Module
   1.119 +              value: 'Системный журнал'
   1.120 +          triggers:
   1.121 +            - uuid: e8001f72a356424ea8e83abfd2a83c63
   1.122 +              expression: 'nodata(/AWNET Linux Template/aw.linux.journalctl[2],5m)=0'
   1.123 +              name: 'Ошибки в системном журнале'
   1.124 +              opdata: '{ITEM.VALUE}'
   1.125 +              priority: WARNING