CentOS 7でのMuninとMonitによるサーバー監視 - ページ2

yum install monit

systemctl enable monit  
systemctl start monit

nano /etc/monit.d/monitrc

set httpd port 2812 and  
   use address localhost # localhostからの接続のみを受け入れる  
   allow localhost # localhostがサーバーに接続することを許可し  
   allow admin:monit # ユーザー'admin'とパスワード'monit'を要求  
   allow @monit # 'monit'グループのユーザーが接続することを許可（rw）  
   allow @users readonly # 'users'グループのユーザーが読み取り専用で接続することを許可

set httpd port 2812 and  
   use address 0.0.0.0  
   SSL ENABLE  
   PEMFILE /var/certs/monit.pem  
   allow admin:test

nano /etc/monit.d/monitrc

set logfile syslog facility log_daemon
  
# このメールサーバーを通じてメールを送信  
set mailserver localhost  
  
# アラートメールのFromアドレスを設定  
set mail-format { from: [email protected] }
  
# このアドレスにアラートを送信  
set alert root@localhost  
  
# Proftpdサービスを監視
check process proftpd with pidfile /var/run/proftpd/proftpd.pid
   start program = "/usr/bin/systemctl start proftpd"
   stop program  = "/usr/bin/systemctl stop proftpd"
   if failed port 21 protocol ftp then restart
   if 5 restarts within 5 cycles then timeout
  
# SSHサービスを監視
check process sshd with pidfile /var/run/sshd.pid
   start program  "/usr/bin/systemctl start sshd"
   stop program  "/usr/bin/systemctl stop sshd"
   if failed port 22 protocol ssh then restart
   if 5 restarts within 5 cycles then timeout
  
# MySQLを監視
check process mysql with pidfile /var/run/mysqld/mysqld.pid
   group database
   start program = "/usr/bin/systemctl start mysqld"
   stop program = "/usr/bin/systemctl stop mysqld"
   if failed host 127.0.0.1 port 3306 then restart
   if 5 restarts within 5 cycles then timeout
  
# apacheウェブサーバーを監視
check process apache with pidfile /var/run/httpd/httpd.pid
   group www
   start program = "/usr/bin/systemctl start httpd"
   stop program  = "/usr/bin/systemctl stop httpd"
   if failed host localhost port 80 protocol http
      and request "/monit_token" then restart
   if cpu is greater than 60% for 2 cycles then alert
   if cpu > 80% for 5 cycles then restart
   if totalmem > 500 MB for 5 cycles then restart
   if children > 250 then restart
   if loadavg(5min) greater than 10 for 8 cycles then stop
   if 3 restarts within 5 cycles then timeout
  
# postfixメールサーバーを監視
check process postfix with pidfile /var/spool/postfix/pid/master.pid
   group mail
   start program = "/usr/bin/systemctl start postfix"
   stop  program = "/usr/bin/systemctl stop postfix"
   if failed port 25 protocol smtp then restart
   if 5 restarts within 5 cycles then timeout

   if failed host localhost port 80 protocol http
      and request "/monit_token" then restart

touch /var/www/html/monit_token

mkdir /var/certs  
cd /var/certs

nano /var/certs/monit.cnf

# RSA証明書を作成 - サーバー

RANDFILE = ./openssl.rnd

[ req ]
default_bits = 1024
encrypt_key = yes
distinguished_name = req_dn
x509_extensions = cert_type

[ req_dn ]
countryName = 国名（2文字コード）
countryName_default = MO

stateOrProvinceName             = 州または省の名前（フルネーム）
stateOrProvinceName_default     = Monitoria

localityName                    = 地域名（例：市）
localityName_default            = Monittown

organizationName                = 組織名（例：会社）
organizationName_default        = Monit Inc.

organizationalUnitName          = 組織単位名（例：セクション）
organizationalUnitName_default  = 監視技術部

commonName                      = コモンネーム（サーバーのFQDN）
commonName_default              = server.monit.mo

emailAddress                    = メールアドレス
emailAddress_default            = [email protected]

[ cert_type ]
nsCertType = server

openssl req -new -x509 -days 365 -nodes -config ./monit.cnf -out /var/certs/monit.pem -keyout /var/certs/monit.pem

openssl gendh 512 >> /var/certs/monit.pem

openssl x509 -subject -dates -fingerprint -noout -in /var/certs/monit.pem

chmod 700 /var/certs/monit.pem

systemctl restart monit