当前位置 : 主页 > 操作系统 > centos >

实践案例:Zabbix 对 Nginx的监控

来源:互联网 收集:自由互联 发布时间:2022-06-20
在实际生产中经常需要自定义各种软件的Zabbix的监控项,相对繁琐,在Zabbix官网和第三方网站都提供了大量的监控模板,很多写得非常完美,我们可下载并导入这些模板,并进行修改成

在实际生产中经常需要自定义各种软件的Zabbix的监控项,相对繁琐,在Zabbix官网和第三方网站都提供了大量的监控模板,很多写得非常完美,我们可下载并导入这些模板,并进行修改成适合自己生产用的监控模板,非常便利和高效。本文介绍利用现有的模板对nginx的活动连接和当前状态等运行状态等项目进行监控的全过程。

基本步骤: 通过脚本采集Nginx状态页数据 → zabbix agent获取监控项数据 → 导入监控模板 → 检查并修改完善监控项、触发器及图形 → 验证数据


1. 部署Nginx

如果是编译安装需要添加编译参数--with-http_stub_status_module;本次采用yum安装方式。

#### 安装并配置Nginx,前面还需要安装zabbix agent
## 配置zabbix 的yum源并安装zabbix agent
[root@CentOS84-IP88 ]#rpm -Uvh https://repo.zabbix.com/zabbix/6.0/rhel/8/x86_64/zabbix-release-6.0-1.el8.noarch.rpm
[root@CentOS84-IP88 ]#dnf clean all
[root@CentOS84-IP88 ]#dnf -y install zabbix-agent

########################################################################
#### 安装nginx
[root@CentOS84-IP88 ]#yum info nginx
.......................
Name : nginx
Epoch : 1
Version : 1.14.1
.......................


[root@CentOS84-IP88 ]#yum install -y nginx
[root@CentOS84-IP88 ]#find / -name nginx.conf
/etc/nginx/nginx.conf
[root@CentOS84-IP88 ]#vim /etc/nginx/nginx.conf
.........................
server {
listen 80 default_server;
listen [::]:80 default_server;
server_name _;
root /usr/share/nginx/html;

# Load configuration files for the default server block.
include /etc/nginx/default.d/*.conf;
########################加上下面这段启用nginx状态页的配置######################
location /nginx_status {
stub_status;
allow 192.168.0.0/16;
allow 127.0.0.1;
deny all;
}
########################加上上面这段启用nginx状态页的配置######################
location / {
}

error_page 404 /404.html;
location = /40x.html {
}
............................

#### 定位nginx二进制可执行文件位置并验证语法
[root@CentOS84-IP88 ]#find / -name nginx
/etc/logrotate.d/nginx
/etc/nginx
/var/lib/nginx
/var/log/nginx
/usr/sbin/nginx
/usr/lib64/perl5/vendor_perl/auto/nginx
/usr/lib64/nginx
/usr/share/licenses/nginx
/usr/share/doc/nginx
/usr/share/nginx
[root@CentOS84-IP88 ]#/usr/sbin/nginx -t
nginx: the configuration file /etc/nginx/nginx.conf syntax is ok
nginx: configuration file /etc/nginx/nginx.conf test is successful
[root@CentOS84-IP88 ]#

#### 启动Nginx服务
[root@CentOS84-IP88 ]#systemctl enable --now nginx

[root@CentOS84-IP88 ]#ss -tln
State Recv-Q Send-Q Local Address:Port Peer Address:Port Process
LISTEN 0 511 0.0.0.0:80 0.0.0.0:*
LISTEN 0 128 0.0.0.0:10050 0.0.0.0:*
LISTEN 0 511 [::]:80 [::]:*
LISTEN 0 128 [::]:10050 [::]:*#### 在IP88上配置好nginx的状态页后,切换到另外主机测试状态页的访问

[root@CentOS84-IP18 ]#curl http://192.168.250.88/nginx_status
Active connections: 1
server accepts handled requests
3 3 3
Reading: 0 Writing: 1 Waiting: 0
[root@CentOS84-IP18 ]#

2. 自定义监控项脚本:

#### 脚本的编写思路,是通过访问Nginx的状态页面,并抽取需要监控的数据在Zabbix上去显示、分析并报警
## 本机上通过命令查看到的信息
[root@CentOS84-IP88 ]#curl "http://127.0.0.1:"$NGINX_PORT"/nginx_status/"
Active connections: 1
server accepts handled requests
717 717 717
Reading: 0 Writing: 1 Waiting: 0
[root@CentOS84-IP88 ]#

## 依据上面的现实信息,利用shell命令抽取需要的关键数据
[root@CentOS84-IP88 ]#cd /etc/zabbix/zabbix_agentd.d
[root@CentOS84-IP88 ]#vim nginx_monitor.sh
#!/bin/bash

nginx_status_fun(){
NGINX_PORT=$1
NGINX_COMMAND=$2
nginx_active(){
/usr/bin/curl "http://127.0.0.1:"$NGINX_PORT"/nginx_status/" 2>/dev/null| grep 'Active' | awk '{print $NF}'
}
nginx_reading(){
/usr/bin/curl "http://127.0.0.1:"$NGINX_PORT"/nginx_status/" 2>/dev/null| grep 'Reading' | awk '{print $2}'
}
nginx_writing(){
/usr/bin/curl "http://127.0.0.1:"$NGINX_PORT"/nginx_status/" 2>/dev/null| grep 'Writing' | awk '{print $4}'
}
nginx_waiting(){
/usr/bin/curl "http://127.0.0.1:"$NGINX_PORT"/nginx_status/" 2>/dev/null| grep 'Waiting' | awk '{print $6}'
}
nginx_accepts(){
/usr/bin/curl "http://127.0.0.1:"$NGINX_PORT"/nginx_status/" 2>/dev/null| awk NR==3 | awk '{print $1}'
}
nginx_handled(){
/usr/bin/curl "http://127.0.0.1:"$NGINX_PORT"/nginx_status/" 2>/dev/null| awk NR==3 | awk '{print $2}'
}
nginx_requests(){
/usr/bin/curl "http://127.0.0.1:"$NGINX_PORT"/nginx_status/" 2>/dev/null| awk NR==3 | awk '{print $3}'
}
case $NGINX_COMMAND in
active)
nginx_active;
;;
reading)
nginx_reading;
;;
writing)
nginx_writing;
;;
waiting)
nginx_waiting;
;;
accepts)
nginx_accepts;
;;
handled)
nginx_handled;
;;
requests)
nginx_requests;
esac
}

main(){
case $1 in
nginx_status)
nginx_status_fun $2 $3;
;;
*)
echo $"Usage: $0 {nginx_status key}"
esac
}

main $1 $2 $3
[root@CentOS84-IP88 ]#

## 授权可执行权限
[root@CentOS84-IP88 ]#chmod a+x nginx_monitor.sh
[root@CentOS84-IP88 ]#ll
-rwxr-xr-x 1 root root 1471 May 24 11:48 nginx_monitor.sh

## 测试脚本运行
[root@CentOS84-IP88 ]#bash nginx_monitor.sh nginx_status 80 active
1

3. Zabbix Agent添加自定义监控项

#### 前面已经安装好zabbix_agent,修改并配置好zabbix_agent
[root@CentOS84-IP88 ]#vim /etc/zabbix/zabbix_agentd.conf
..............................
# UserParameter=
UserParameter=nginx_status[*],/etc/zabbix/zabbix_agentd.d/nginx_monitor.sh "$1" "$2" "$3"
..............................

[root@CentOS84-IP88 ]#systemctl restart zabbix-agent
[root@CentOS84-IP88 ]#

[root@CentOS84-IP88 ]#grep "^[a-Z]" /etc/zabbix/zabbix_agentd.conf
PidFile=/run/zabbix/zabbix_agentd.pid
LogFile=/var/log/zabbix/zabbix_agentd.log
LogFileSize=0
Server=192.168.250.18
ListenPort=10050
ServerActive=127.0.0.1
Hostname=192.168.250.88
Include=/etc/zabbix/zabbix_agentd.d/*.conf
UserParameter=nginx_status[*],/etc/zabbix/zabbix_agentd.d/nginx_monitor.sh "$1" "$2" "$3"
[root@CentOS84-IP88 ]#

4. Zabbix Server命令行测试监控项数据

[root@CentOS84-IP18 ]#yum install zabbix-get.x86_64
[root@CentOS84-IP18 ]#find / -name zabbix_get
/usr/bin/zabbix_get
[root@CentOS84-IP18 ]#/usr/bin/zabbix_get -s 192.168.250.88 -p 10050 -k "nginx_status["nginx_status",80,"active"]"
1
[root@CentOS84-IP18 ]#

5. 导入Nginx监控模板

Zabbix 官网及第三方网站有比较多的模板可以下载,本次导入已经准备并修改好的Nginx监控模板,来建立对nginx的监控。
实践案例:Zabbix 对 Nginx的监控_Zabbix

实践案例:Zabbix 对 Nginx的监控_模板_02

实践案例:Zabbix 对 Nginx的监控_Nginx_03

实践案例:Zabbix 对 Nginx的监控_Zabbix_04

实践案例:Zabbix 对 Nginx的监控_Zabbix 对 Nginx的监控_05


6. 添加主机并关联模板

配置 --- 主机 --- 创建主机
实践案例:Zabbix 对 Nginx的监控_Zabbix_06


7. 验证监控数据

实践案例:Zabbix 对 Nginx的监控_模板_07

实践案例:Zabbix 对 Nginx的监控_Zabbix 对 Nginx的监控_08


8. https(SSL443) 报错处置

实际生产中使用http越来越少,考虑安全都用https来构建网站的访问,在监控模板内有对Nginx的HTTPS端口的监控,如果不可用就会报警,我们前面做nginx的配置时候特意没开启这个端口,埋下这个坑目的就是演示Zabbix报告问题后演示处置Zabbix在问题修复后的监控显示变化过程。

实践案例:Zabbix 对 Nginx的监控_Zabbix 对 Nginx的监控_09


####在nginx的conf中开启了https,命令格式:listen 443 ssl; 再重新启动nginx后在Zabbix的监控端就不再有ssl端口不可用的问题报告了。实际上在配置网站https需要制作申请证书等,仅仅演示SSL端口存活监控就不再做相应的证书申请等配置了。

[root@CentOS84-IP88 ]#vim /etc/nginx/nginx.conf
.......................
server {
listen 80 default_server;
listen 443 ssl;
listen [::]:80 default_server;
server_name _;
root /usr/share/nginx/html;

# Load configuration files for the default server block.
include /etc/nginx/default.d/*.conf;


location /nginx_status {
stub_status;
allow 192.168.0.0/16;
allow 127.0.0.1;
deny all;
}
location / {
}

error_page 404 /404.html;
location = /40x.html {
}

error_page 500 502 503 504 /50x.html;
.......................


[root@CentOS84-IP88 ]#find / -name nginx
/etc/logrotate.d/nginx
/etc/nginx
/var/lib/nginx
/var/log/nginx
/usr/sbin/nginx
/usr/lib64/perl5/vendor_perl/auto/nginx
/usr/lib64/nginx
/usr/share/licenses/nginx
/usr/share/doc/nginx
/usr/share/nginx
[root@CentOS84-IP88 ]#/usr/sbin/nginx -t
nginx: the configuration file /etc/nginx/nginx.conf syntax is ok
nginx: configuration file /etc/nginx/nginx.conf test is successful
[root@CentOS84-IP88 ]#systemctl restart nginx

[root@CentOS84-IP88 ]#ss -tln
State Recv-Q Send-Q Local Address:Port Peer Address:Port Process
LISTEN 0 511 0.0.0.0:80 0.0.0.0:*
LISTEN 0 511 0.0.0.0:443 0.0.0.0:*

[root@CentOS84-IP88 ]#

经过上面对nginx的配置修改,添加了ssl443端口的监听后,在Zabbix上观测到故障提示已经消除了。
实践案例:Zabbix 对 Nginx的监控_模板_10


9. 监控模板源代码

监控模板文件:Nginx_Monitor.xml 是yaml格式的文件,内容如下:

version="1.0" encoding="UTF-8"?>

6.0
2022-05-24T07:57:21Z


7df96b18c230490a9a0a9e2307226338
Templates




3d289c02810f4f46a9a843c51bbcb3eb
Nginx_Monitor.xml
Nginx_Monitor


Templates




1a3bf4030ee9479d8ba67345d22cb0f9
nginx_listen_80
net.tcp.listen[80]
5s
30d


Application
nginx




74f8ef360a904708940e562ec05d276a
last(/Nginx_Monitor.xml/net.tcp.listen[80])<>1
{HOST.NAME} listen_80
HIGH




1ea87c8ed484470197109eec5d5081b3
nginx_listen_443
net.tcp.listen[443]
5s


Application
nginx




0683b27cb6184b86a17ba48c0af2728c
last(/Nginx_Monitor.xml/net.tcp.listen[443])<>1
{HOST.NAME} listen_443
HIGH




1e305b2c147046409098a10fe127f9ca
Nginx 对后端发起的活动连接数
nginx_status["nginx_status",80,"active"]
5s
365d


Application
nginx




ed23692b494d45348665efef0039ffd7
Nginx 总共处理的连接数
nginx_status[nginx_status,80,accepts]
5s
365d


Application
nginx




a803578dcb324681b51ae5b9732608c0
Nginx 成功创建的握手数
nginx_status[nginx_status,80,handled]
5s
365d


Application
nginx




312f645d33f04d21bc352c82f1464d10
Nginx 读取到客户端的Header信息数
nginx_status[nginx_status,80,reading]
5s
365d


Application
nginx




3dd483cc59334083a27a9856822fa9e4
Nginx 总共处理的请求数
nginx_status[nginx_status,80,requests]
5s
365d


Application
nginx




d17021ad3dd14026802671a3b4c50ecf
Nginx 等待下一次请求指令的驻留连接数
nginx_status[nginx_status,80,waiting]
5s
365d


Application
nginx




584af0be2fc9416f9d9c6d7f672ac812
Nginx 返回给客户端的Header信息数
nginx_status[nginx_status,80,writing]
5s
365d


Application
nginx




f1bbdc1575084411b7428469c2f7aa28
Nginx 状态码
nginx_status[status]
5s
365d


Application
nginx




a49e0fd42194420cae32e42500b01d4f
last(/Nginx_Monitor.xml/nginx_status[status])<>1
Nginx_status
HIGH








eca8fa7bb7f24791b353d0542c5115d2
Nginx_client_status


003300

Nginx_Monitor.xml
nginx_status["nginx_status",80,"active"]



1
2774A4

Nginx_Monitor.xml
nginx_status[nginx_status,80,reading]



2
EE0000

Nginx_Monitor.xml
nginx_status[nginx_status,80,waiting]



3
AA00AA

Nginx_Monitor.xml
nginx_status[nginx_status,80,writing]





64d9a31301d5404bb9bac82b63fa8047
Nginx_socket_status


1A7C11

Nginx_Monitor.xml
nginx_status[nginx_status,80,accepts]



1
F63100

Nginx_Monitor.xml
nginx_status[nginx_status,80,handled]



2
2774A4

Nginx_Monitor.xml
nginx_status[nginx_status,80,requests]








【文章原创作者:高防cdn http://www.juniucdn.com欢迎留下您的宝贵建议】
上一篇:实践案例:Zabbix利用SNMP协议监控IT设备
下一篇:没有了
网友评论