ncc.zabbix_templates

Yohn Y. 2023-10-15 Parent:b3200e873064 Child:c32e5a8819d5

3:b732d30fbd2a Go to Latest

ncc.zabbix_templates/Linux.common/zbx_export_templates.yaml

* Исправляем не работающий мониторинг логов ошибок

Download raw file
View source Diff to previous Annotate
History
1 zabbix_export:
2 version: '6.0'
3 date: '2023-09-30T06:54:07Z'
4 groups:
5 - uuid: 22941f4e01294888a9bed3aae15f6ef9
6 name: Templates/AWNET
7 templates:
8 - uuid: d9ed1ecc0bc14cafb7fcbd309ad9a944
9 template: 'AWNET Linux Template'
10 name: 'AWNET Linux Template'
11 groups:
12 - name: Templates/AWNET
13 items:
14 - uuid: 85da57ac953f48c5a1e08f74fb2b65d5
15 name: 'Пакеты к обновлению'
16 key: aw.linux.apt.updatable
17 delay: 15m
18 trends: '0'
19 value_type: TEXT
20 preprocessing:
21 - type: JAVASCRIPT
22 parameters:
23 - |
24 var buf = value.split('\n');
25 var res = "";
26
27 var re_test = [
28 /^WARNING:/,
29 /^Вывод списка/,
30 ];
31
32 var flag;
33 for (var i in buf) {
34 flag = true;
35 for (var j in re_test) {
36 if (re_test[j].test(buf[i])) {
37 flag = false
38 break;
39 }
40 }
41
42 if (flag && buf[i].length > 0) {
43 res += buf[i] + "\n";
44 }
45 }
46
47 return res
48 - type: NOT_MATCHES_REGEX
49 parameters:
50 - '^ *$'
51 error_handler: DISCARD_VALUE
52 tags:
53 - tag: Module
54 value: 'Система пакетов'
55 triggers:
56 - uuid: 9a2fbf76b8f44d45b8a987c1997de212
57 expression: 'nodata(/AWNET Linux Template/aw.linux.apt.updatable,2h)=0'
58 name: 'Появились обновления системы'
59 opdata: '{ITEM.VALUE}'
60 priority: WARNING
61 - uuid: 33c23ce59f3c49068057013b35ffb849
62 name: 'Ошибка в системном журнале'
63 key: 'aw.linux.journalctl[2]'
64 delay: 2m
65 trends: '0'
66 value_type: TEXT
67 preprocessing:
68 - type: JAVASCRIPT
69 parameters:
70 - |
71 var buf = value.split('\n');
72 var res = "";
73
74 var re_test = [
75 new RegExp('^-- Journal begins'),
76 new RegExp('^-- No entries --'),
77 new RegExp('[0-9]{2} [0-9:]{8} [a-zA-Z0-9._-]* sudo\[[0-9]*\]: '),
78 new RegExp('CONFIG: restrict nopeer ignored'),
79 new RegExp('statistics directory /var/log/ntpsec/ does not exist or is unwriteable, error No such file or directory'),
80 new RegExp('error\: kex_exchange_identification\: Connection closed by remote host'),
81 new RegExp('error\: maximum authentication attempts exceeded for [^ ]* from [a-f0-9.:-]* port [0-9]+ ssh[0-9]*'),
82 new RegExp('error\: kex_exchange_identification\: client sent invalid protocol identifier "[^"]*"'),
83 new RegExp('error\: beginning MaxStartups throttling'),
84 new RegExp('error\: kex_exchange_identification\: read\: Connection reset by peer'),
85 new RegExp('error\: kex_exchange_identification\: banner line contains invalid characters'),
86 new RegExp('error\: maximum authentication attempts exceeded for invalid user [a-zA-Z0-9_.-]+ from [0-9a-f:.]+ port [0-9]+ ssh[0-9]*'),
87 new RegExp('fatal\: userauth_pubkey\: parse request failed: incomplete message'),
88 new RegExp('sshd\[[0-9]*\]\: error\: Protocol major versions differ\: [0-9]+ vs\. [0-9]+'),
89 new RegExp('sshd\[[0-9]*\]\: fatal\: userauth_finish\: Broken pipe \\[preauth\\]'),
90 new RegExp('openvpn\[[0-9]*\]\: [0-9.:a-fA-F]* Connection reset, restarting \\[[0-9]\\]'),
91 new RegExp('/system\.journal\: Journal header limits reached or header out-of-date, rotating\.'),
92 ];
93
94 var flag;
95 for (var i in buf) {
96 flag = true;
97 for (var j in re_test) {
98 if (re_test[j].test(buf[i])) {
99 flag = false
100 break;
101 }
102 }
103
104 if (flag) {
105 res += buf[i] + "\n";
106 }
107 }
108
109 return res
110 - type: NOT_MATCHES_REGEX
111 parameters:
112 - '^ *$'
113 error_handler: DISCARD_VALUE
114 tags:
115 - tag: Module
116 value: 'Системный журнал'
117 triggers:
118 - uuid: e8001f72a356424ea8e83abfd2a83c63
119 expression: 'nodata(/AWNET Linux Template/aw.linux.journalctl[2],5m)=0'
120 name: 'Ошибки в системном журнале'
121 opdata: '{ITEM.VALUE}'
122 priority: WARNING