Auto restart Linux service using zabbix

Configuration

Those remote commands that are executed on Zabbix agent (custom scripts) must be first enabled in the respective zabbix_agentd.conf.
Make sure that the EnableRemoteCommands parameter is set to 1 and uncommented. Restart agent daemon if changing this parameter.

Remote commands do not work with active Zabbix agents.

Then, when configuring a new action in Configuration→Actions:
  • In the Operations tab, select the Remote command operation type
  • Select the remote command type (IPMI, Custom script, SSH, Telnet, Global script)
  • Enter the remote command
For example: 
sudo /etc/init.d/apache restart

In this case, Zabbix will try to restart an Apache process. With this 
command, make sure that the command is executed on Zabbix agent (mark 
the respective radio button against Execute on).






Note the use of sudo - Zabbix user does not have permissions to restart system services by default. See below for hints on how to configure sudo.





Zabbix agent should run on the remote host and accept incoming connections. Zabbix agent executes commands in background.




Zabbix does not check if a command has been executed successfully.



Remote commands on Zabbix agent are executed without timeout by the 
system.run[,nowait] key. On Zabbix server remote commands are executed 
with timeout as set in the TrapperTimeout parameter of 
zabbix_server.conf file.




    

  • 
In the Conditions tab, 
define the appropriate conditions. In this example, set that the action 
is activated upon any disaster problems with one of Apache applications.
    

    • 








Access permissions



Make sure that the 'zabbix' user has execute permissions for configured commands. One may be interested in using sudo to give access to privileged commands. To configure access, execute as root:



# visudo

Example lines that could be used in sudoers file:



# allows 'zabbix' user to run all commands without password.
zabbix ALL=NOPASSWD: ALL


# allows 'zabbix' user to restart apache without password.
zabbix ALL=NOPASSWD: /etc/init.d/apache restart





On some systems sudoers file will prevent non-local users from executing commands. To change this, comment out requiretty option in /etc/sudoers.





Remote commands with multiple interfaces



If the target system has multiple interfaces of the selected type (Zabbix agent or IPMI), remote commands will be executed on the default interface.



Examples







Example 1



Restart of Windows on certain condition.


In order to automatically restart Windows upon a problem detected by Zabbix, define the following actions:







 


  PARAMETER     Description
 



  Operation type'Remote command'
 



  Type          'Custom script'
 



  Command       c:\windows\system32\shutdown.exe -r -f
 









Example 2



Restart the host by using IPMI control.







 


  PARAMETER     Description
 



  Operation type'Remote command'
 



  Type          'IPMI'
 



  Command       reset on
 









Example 3

Power off the host by using IPMI control.







 


  PARAMETER     Description
 



  Operation type'Remote command'
 



  Type          'IPMI'
 



  Command       power off











































Nhận xét











Đăng nhận xét



















Bài đăng phổ biến từ blog này









CLEANING UP THE ZABBIX DATABASE





















 My Zabbix database size increased a lot in the last few months and since my disk was running out space, I decided to clean up the old events from the database.   Looking at the database tables, the biggest one was  history_uint , which holds the items history data – over 400 millions of records and over 30 Gb of disk space before the clean up.   Since deleting the old records from this table directly would be a very slow process, I decided to create a new table and insert the latest records from the  history_uint  table and then just replace the old table with a new one.   Since this is not an offical procedure, use it at your own risk.   Environment:  Zabbix v2.2  MySql 5.1 – InnoDB with  innodb_file_per_table=ON   Step 1 – Stop the Zabbix server   Step 2 – Open your favourite MySQL client and create a new table   CREATE TABLE  history_uint_new  LIKE  history_uint;   Step 3 – Insert the latest records from the  history_uint  table to the  history_uint_new table   First you need to de








Đọc thêm










Configuring DHCP Relay service on the FortiGate unit





















 Configuring DHCP Relay service on the FortiGate unit  If the clients are configured to obtain a IP address using DHCP relay, configure the FortiGate server as below:   To configure DHCP relay on the FortiGate unit    1. Go to System > Network > Interfaces and select Interface want to configure DHCP relay.    2. Enable DHCP Server in the interface and choose Advanced    3. For Mode, select Relay.    4. In Type select Regular.    5. Select OK.    6. If a router is installed between the FortiGate unit and the DHCP server, define a static route to the DHCP server.   Note : Sometimes it is required to specify more than one DHCP relay IP, to allow for the coverage of additional LAN subnets. Although the Web Based Manager (GUI) does not provide an option to configure this, it is possible to set up to 8 IPs from the CLI.         config system interface              edit <REQUIRED_INTERFACE_HERE>                set dhcp-relay-ip <FIRST_IP> <SECOND_IP> ....<EIGHTH_IP&








Đọc thêm










Stuxnet Trojan - Memory Forensics with Volatility | Part I




















Hình ảnh







 Stuxnet could be the first advanced malware. It is thought that it was developed by the United States and Israel to attack Iran's nuclear facilities. It attacked Windows systems using a zero-day exploit and It was focused on SCADA systems in order to  affect critical infrastructures... Also, it may be spread from USB drivers. It is necessary a squad of highly capable programmers with depth of knowledge of industrial processes and an interest in attacking industrial infrastructure to develop this malware. Kaspersky Lab concluded that the sophisticated attack could only have been conducted "with nation-state support" and a study of the spread of Stuxnet by Symantec says that it was spread to Iran (58.85%), Indonesia (18.22%), India (8.31%), Azerbaijan (2.57%).... Thanks to Malware Cookbook we can download a memory dump from an infected host with this malware in the URL below:   http://www.jonrajewski.com/data/Malware/stuxnet.vmem.zip Ok, let’s go. We are going to analyze i








Đọc thêm