Icinga

History

2014-Dec-31 I had Icinga2 running from packages for a few months and then a package update broke everything. I removed everything and installed from sources.

Configuration

Built from sources

• icinga2
• icingaweb2
• nagvis

Backend

I tried MySQL, but it gets out of sync with the config files after restarts. I think the state file (/usr/local/var/lib/icinga2/icinga2.state) is the problem. Maybe having livestatus and a database is also the wrong approach.

I tried Livestatus, love the idea, but fails in icingaweb2

Now trying postgres

# Set up the database name, username, password
emacs /usr/local/etc/icinga2/features-enabled/ido-pgsql.conf
# Allow access
emacs /etc/postgresql/9.3/main/pg_hba.conf

su postgres
createdb icinga
psql
CREATE USER bwilson WITH PASSWORD 'linenopise';
GRANT ALL ON DATABASE icinga TO icinga;

psql -U icinga2 < /usr/local/share/icinga2-ido-pgsql/schema/pgsql.sql

Nagios plugins

Currently using the package, not sources.

NB You have to mark check_icmp as setuid; like this: chmod 4755 /usr/lib/nagios/plugins/check_icmp

IcingaWeb2

Configuration

The (undocumented) trick here is to use this URL after it's installed: http://helena.cds1.net/icingaweb2/setup.

The requested token can be created directly from the command line; I could not get the fancy icinga cli command to work. (They give you the alternative commands to run in 'setup'.)

There is a setup module that can be re-enabled from the web gui once you have run setup to do it all over again. It wipes out the previous setup.

You want to use the IDO database backend, not livestatus. Using the database gives you background, livestatus just gives you current conditions.

Authentication

I selected "autologin" which means I use the firewall and the apache auth instead of the builtin auth.

Modules

Looks like the only module of real interest right now ships with icingaweb2 -- monitoring. Beyond that we go over to Nagvis.

Previous attempt, using packages

Just leaving this here for now.

Installed on Helena from Debian packages. Simply selecting the metapackage icinga gave me everything I needed.

I'd like to export the config from one of the existing Nagios servers and import it here. https://bigdog.alembic.net/nagios/ Ron sent me the files yesterday. Lots of conversion to do, I fear.

I decided to go to the Icinga 2.0 stable release instead of starting with the Debian Wheezy default which is at 1.7. Using backports, trying to get a recent icinga-web

Had to change the port that postgresql 9.3 was listening on -- apparently they put it on port 5433 to allow 9.1 and 9.3 to run at the same time.

wget -O - http://debmon.org/debmon/repo.key 2>/dev/null | apt-key add -
echo "deb http://debmon.org/debmon debmon-wheezy main" > /etc/apt/sources.list.d/icinga2.list
apt-get upgrade
apt-get update
apt-get install icinga2 icinga-web

I wonder if I should try the icinga web 2 user interface... last update in Git was 3 minutes ago... methinks not. Learn released version first, update later.

update-rc.d icinga disable