ncc.zabbix_templates

Yohn Y. 2023-12-02 Parent:161891f0a04e Child:0caa9b17e6f5

13:a2498305a865 Go to Latest

ncc.zabbix_templates/Linux.common/zbx_export_templates.yaml

. Повышаем количество проверок, для более оперативного реагирования на происходящее с пакетам

Download raw file
View source Diff to previous Annotate
History
1 zabbix_export:
2 version: '6.0'
3 date: '2023-12-02T09:43:45Z'
4 groups:
5 - uuid: 22941f4e01294888a9bed3aae15f6ef9
6 name: Templates/AWNET
7 templates:
8 - uuid: d9ed1ecc0bc14cafb7fcbd309ad9a944
9 template: 'AWNET Linux Template'
10 name: 'AWNET Linux Template'
11 groups:
12 - name: Templates/AWNET
13 items:
14 - uuid: 85da57ac953f48c5a1e08f74fb2b65d5
15 name: 'Пакеты к обновлению'
16 key: aw.linux.apt.updatable
17 delay: 5m
18 trends: '0'
19 value_type: TEXT
20 preprocessing:
21 - type: JAVASCRIPT
22 parameters:
23 - |
24 var buf = value.split('\n');
25 var res = "";
26
27 var re_test = [
28 /^WARNING:/,
29 /^Вывод списка/,
30 /^Listing\.\.\./,
31 ];
32
33 var flag;
34 for (var i in buf) {
35 flag = true;
36 for (var j in re_test) {
37 if (re_test[j].test(buf[i])) {
38 flag = false
39 break;
40 }
41 }
42
43 if (flag && buf[i].length > 0) {
44 res += buf[i] + "\n";
45 }
46 }
47
48 return res
49 - type: DISCARD_UNCHANGED
50 parameters:
51 - ''
52 tags:
53 - tag: Module
54 value: 'Система пакетов'
55 triggers:
56 - uuid: 9a2fbf76b8f44d45b8a987c1997de212
57 expression: 'length(last(/AWNET Linux Template/aw.linux.apt.updatable))>2'
58 name: 'Появились обновления системы'
59 opdata: '{ITEM.VALUE}'
60 priority: WARNING
61 type: MULTIPLE
62 - uuid: 33c23ce59f3c49068057013b35ffb849
63 name: 'Ошибка в системном журнале'
64 key: 'aw.linux.journalctl[2]'
65 delay: 2m
66 trends: '0'
67 value_type: TEXT
68 preprocessing:
69 - type: JAVASCRIPT
70 parameters:
71 - |
72 var buf = value.split('\n');
73 var res = "";
74
75 var re_test = [
76 new RegExp('^-- Journal begins'),
77 new RegExp('^-- No entries --'),
78 new RegExp('[0-9]{2} [0-9:]{8} [a-zA-Z0-9._-]* sudo\[[0-9]*\]: '),
79 new RegExp('CONFIG: restrict nopeer ignored'),
80 new RegExp('statistics directory /var/log/ntpsec/ does not exist or is unwriteable, error No such file or directory'),
81 new RegExp('error\: kex_exchange_identification\: Connection closed by remote host'),
82 new RegExp('error\: maximum authentication attempts exceeded for [^ ]* from [a-f0-9.:-]* port [0-9]+ ssh[0-9]*'),
83 new RegExp('error\: kex_exchange_identification\: client sent invalid protocol identifier "[^"]*"'),
84 new RegExp('error\: beginning MaxStartups throttling'),
85 new RegExp('error\: kex_exchange_identification\: read\: Connection reset by peer'),
86 new RegExp('fatal\: Timeout before authentication for [a-zA-Z.:0-9-]+ port [0-9]+'),
87 new RegExp('error\: kex_exchange_identification\: banner line contains invalid characters'),
88 new RegExp('error\: maximum authentication attempts exceeded for invalid user [a-zA-Z0-9_.-]+ from [0-9a-f:.]+ port [0-9]+ ssh[0-9]*'),
89 new RegExp('fatal\: userauth_pubkey\: parse request failed: incomplete message'),
90 new RegExp('sshd\[[0-9]*\]\: error\: Protocol major versions differ\: [0-9]+ vs\. [0-9]+'),
91 new RegExp('sshd\[[0-9]*\]\: fatal\: userauth_finish\: Broken pipe \\[preauth\\]'),
92 new RegExp('openvpn\[[0-9]*\]\: [0-9.:a-fA-F]* Connection reset, restarting \\[[0-9]\\]'),
93 new RegExp('/system\.journal\: Journal header limits reached or header out-of-date, rotating\.'),
94 new RegExp('sshd\[[0-9]+\]\: error\: kex protocol error\:'),
95 ];
96
97 var flag;
98 for (var i in buf) {
99 flag = true;
100 for (var j in re_test) {
101 if (re_test[j].test(buf[i])) {
102 flag = false
103 break;
104 }
105 }
106
107 if (flag) {
108 res += buf[i] + "\n";
109 }
110 }
111
112 return res
113 - type: NOT_MATCHES_REGEX
114 parameters:
115 - '^ *$'
116 error_handler: DISCARD_VALUE
117 tags:
118 - tag: Module
119 value: 'Системный журнал'
120 triggers:
121 - uuid: e8001f72a356424ea8e83abfd2a83c63
122 expression: 'nodata(/AWNET Linux Template/aw.linux.journalctl[2],5m)=0'
123 name: 'Ошибки в системном журнале'
124 opdata: '{ITEM.VALUE}'
125 priority: WARNING