Icinga2 | add OpnSense
for the spez Plugin path --> Icinga2 | (spez)Plugins | define path
# icinga2 daemon -C = (version: r2.9.1-1)
| step | Icinga2 Master | Action on the OPNSense device | ||
| go to [user Manager] | ||||
| create a user icinga2 | ||||
| 1 | # apt install -y python-enum34 python-requests | |||
| 2 | # cd /usr/lib/nagios/pluginsCustom | |||
| # mkdir opnsense | ||||
| # cd opnsense | ||||
| wget https://raw.githubusercontent.com/nbuchwitz/check_opnsense/master/check_opnsense.py | ||||
| chmod +x check_opnsense.py | ||||
| # icinga2 daemon -C | ||||
| mkdir /etc/icinga2/conf.d/opnsense | ||||
| vi /etc/icinga2/conf.d/opnsense/opnsene-update.conf | object CheckCommand "check_opnsense-update" { command = [ PluginCustomDir + "/opnsense/check_opnsense.py" ] arguments = { "-H" = "$opnsense_host$" "--api-key" = "$opnsense_api_key$" "--api-secret" = "$opnsense_api_secret$" "-m" = "$opnsense_function$" "-w" = "$opnsense_TRESHOLD_WARNING$" "-c" = "$opnsense_TRESHOLD_CRITICAL$" "-k" = "$opnsense_insecure$" } vars.opnsense_host = "10.147.42.7" vars.opnsense_api_key = "key" vars.opnsense_api_secret = "key" vars.opnsense_function = "updates" vars.opnsense_insecure = "-k" } |
|||
| # cd /etc/icinga2/zones.d/master/ open the file your host is defined | ||||
|
vi xxxxxx.conf to check for update is Default 5 minutes not necessary |
9 object Service "check_opnsense" { 10 host_name = "opnsense.domain" check_interval = 1h 11 check_command = "check_opnsense-update" 12 } |
|||
| # icinga2 daemon -C | ||||
| # systemctl restart icinga2 |
-
-
-
-
-
| uptime | snmpwalk -v2c -c public 10.147.42.7 iso.3.6.1.2.1.25.1.1.0 | Timeticks: (63656350) 7 days, 8:49:23.50 |
| snmpwalk -v2c -c public 10.147.42.7 iso.3.6.1.2.1.1.1.0 | STRING: "FreeBSD FW-03.kozo.ch 11.1-RELEASE-p11 FreeBSD 11.1-RELEASE-p11 21b4c8ea1d5(stable/18.7) amd64" | |
| Hostname | snmpwalk -v2c -c public 10.147.42.7 iso.3.6.1.2.1.1.5.0 | STRING: "FW-03.kozo.ch" |
| iso.3.6.1.4.1.2021.10.1.2.1 = STRING: "Load-1" iso.3.6.1.4.1.2021.10.1.2.2 = STRING: "Load-5" iso.3.6.1.4.1.2021.10.1.2.3 = STRING: "Load-15" iso.3.6.1.4.1.2021.10.1.3.1 = STRING: "0.40" iso.3.6.1.4.1.2021.10.1.3.2 = STRING: "0.52" iso.3.6.1.4.1.2021.10.1.3.3 = STRING: "0.49" |
||
| iso.3.6.1.2.1.31.1.1.1.1.2 = STRING: "igb1" iso.3.6.1.2.1.31.1.1.1.2.2 = Counter32: 8742 iso.3.6.1.2.1.25.3.2.1.3.262146 = STRING: "network interface igb1" |
||
| iso.3.6.1.2.1.31.1.1.1.1.1 = STRING: "igb0" iso.3.6.1.2.1.31.1.1.1.2.1 = Counter32: 0 iso.3.6.1.2.1.25.3.2.1.3.262145 = STRING: "network interface igb0" |
||
| iso.3.6.1.2.1.31.1.1.1.1.3 = STRING: "igb2" iso.3.6.1.2.1.31.1.1.1.2.3 = Counter32: 0 iso.3.6.1.2.1.25.3.2.1.3.262147 = STRING: "network interface igb2" |
||
| iso.3.6.1.2.1.31.1.1.1.1.8 = STRING: "ath0_wlan1" iso.3.6.1.2.1.31.1.1.1.2.8 = Counter32: 0 iso.3.6.1.2.1.25.3.2.1.3.262152 = STRING: "network interface ath0_wlan1" |
-
Source/Quellen:
-
- github.com/nbuchwitz/check_opnsense
- Formun Opnsense | API Information request
-
-
-
-
-