老男孩教育专注IT教育10余年，只培养IT技术精英
全国免费咨询电话（渠道合作）：400-609-2893
不懂监控，何谈运维！万字Zabbix企业级实战手册（上）！
老男孩IT教育
技术博客
2023年7月7日 16:36
监控是指对行为、活动或其他变动中信息的一种持续性关注，通常是为了对人达成影响、管理、指导或保护的目的。
监控是指对行为、活动或其他变动中信息的一种持续性关注，通常是为了对人达成影响、管理、指导或保护的目的。
独孤九剑级别的命令
#进程
pgrep 过滤出指定服务的进程pid # ps -ef |grep
##pidstat
#CPU
##vmstat
[root@aliyun-ansible ~]# vmstat
procs -----------memory---------- ---swap-- -----io---- -system-- ------cpu-----
r b swpd free buff cache si so bi bo in cs us sy id wa st
0 0 0 6298256 2104 1254900 0 0 3 8 64 208 0 0 100 0 0
Procs
r: The number of runnable processes (running or waiting for run time). #cpu 正在运行或等待运行的进程数
b: The number of processes blocked waiting for I/O to complete. #处于io状态进程数量
#自行回顾: ps,top 详细信息 进程状态
##mpstat
#内存
https://github.com/silenceshell/hcache
#网络
nstat/ifstat/mtr/sar
##ifstat
[root@aliyun-ansible ~]# ifstat
#kernel
Interface RX Pkts/Rate TX Pkts/Rate RX Data/Rate TX Data/Rate
RX Errs/Drop TX Errs/Drop RX Over/Rate TX Coll/Rate
lo 22 0 22 0 1264 0 1264 0
0 0 0 0 0 0 0 0
eth0 1583 0 2365 0 118089 0 315050 0
0 0 0 0 0 0 0 0
[root@aliyun-ansible ~]#
##mtr
[root@aliyun-ansible ~]# #动态 tracert 或traceroute 路由追踪
[root@aliyun-ansible ~]# mtr www.baidu.com
当被面试官问到“你们公司监控是如何做的?”时，我们可以从cpu、内存、磁盘、网卡、进程、服务等方面展开。
回答运维面试相关问题时，尽量避免y1s1，要达到分层次、框架，避免问什么答什么。
角度01：单台机器
硬件信息: 磁盘,raid状态,温度,风扇转速, 机房温度,湿度
系统信息: cpu,内存(内存,swap) ,磁盘(io,使用率,inode),负载,网络(in/out)...
服务信息:各种服务状态, 进程,端口,状态,特定的信息(不同服务)
业务(应用/api)信息: 应用,程序代码是否有问题(需要我们与开发沟通,书写一个页面)
角度02：网站集群监控(用户访问流程)
DNS解析: ping/dig/nslookup/host
DNS解析域CDN是否ok，本质是通过全局访问测试工具(模仿用户在全国(全球)各地访问我们的网站)
TCP三次握手-网站负载均衡监控ss -ant
HTTP请求报文-监控web日志查看(状态码)HTTP响应报文-监控web日志查看(状态码)
TCP四次挥手-网站负载均衡监控ss -ant
断开连接
角度03：其他
错误日志监控,error.log,catalina.out
网站性能监控: apm监控:skywalking...
舆情监控
监控宝-监控图形
监控体系说明图
监控的脚本时代-过去时
#脚本取出内存使用率
cat /server/scripts/check_mem.sh
#!/bin/bash
# author: lidao996
# desc: check system memory usage
MEM=`free -m|awk 'NR==2{print $NF}'`
if [ $MEM -le 100 ];then
echo "当前的内存还剩余 $MEM"|mail -s '内存不足了！oom' youjiu_linux@qq.com
fi
监控的现代时
Zabbix监控架构
生命周期
Zabbix监控架构
Zabbix是一个CS(服务端/客户端)架构的服务。
Zabbix-Agent获取数据 -发送给->Zabbix-Server服务端-数据会被存放-数据库<-Zabbix Web页面展示数据。
Zabbix生产快速实践指南
主机规划
企业Zabbix安装最佳实践-CentOS7
nginx环境
#m03 zabbix-server 10.0.0.72/172.16.1.72
###配置nginx源
[root@m03 ~]# cat /etc/yum.repos.d/nginx.repo
[nginx-stable]
name=nginx stable repo
baseurl=http://nginx.org/packages/centos/$releasever/$basearch/
gpgcheck=1
enabled=0
gpgkey=https://nginx.org/keys/nginx_signing.key
module_hotfixes=true
[root@m03 ~]# yum install nginx --enablerepo=nginx-stable
php
#nginx 1.20.1 php7.2
curl -o /etc/yum.repos.d/CentOS-Base.repo http://mirrors.aliyun.com/repo/Centos-7.repo
yum install epel-release.noarch -y #webtatic 要求
curl -o /etc/yum.repos.d/epel.repo http://mirrors.aliyun.com/repo/epel-7.repo
rpm -Uvh https://mirror.webtatic.com/yum/el7/webtatic-release.rpm #webtatic源
yum install php72w-cli php72w-fpm php72w-gd php72w-mbstring php72w-bcmath php72w-xml php72w-ldap php72w-mysqlnd -y
[root@m03 ~]# rpm -qa |egrep 'nginx|php72w'
php72w-fpm-7.2.34-1.w7.x86_64
php72w-mbstring-7.2.34-1.w7.x86_64
nginx-1.20.1-2.el7.x86_64
php72w-common-7.2.34-1.w7.x86_64
php72w-pdo-7.2.34-1.w7.x86_64
php72w-mysqlnd-7.2.34-1.w7.x86_64
php72w-cli-7.2.34-1.w7.x86_64
php72w-ldap-7.2.34-1.w7.x86_64
php72w-xml-7.2.34-1.w7.x86_64
nginx-filesystem-1.20.1-2.el7.noarch
php72w-gd-7.2.34-1.w7.x86_64
php72w-bcmath-7.2.34-1.w7.x86_64
nginx+php
#01
[root@m03 ~]# systemctl enable nginx php-fpm.service
Created symlink from /etc/systemd/system/multi-user.target.wants/nginx.service to /usr/lib/systemd/system/nginx.service.
Created symlink from /etc/systemd/system/multi-user.target.wants/php-fpm.service to /usr/lib/systemd/system/php-fpm.service.
[root@m03 ~]# systemctl start nginx php-fpm.service
[root@m03 ~]#
#02 nginx配置
[root@m03-zabbix-server ~]# cat /etc/nginx/conf.d/zbx.oldboylinux.cn.conf
server {
listen 80;
server_name zbx.oldboylinux.cn;
root /app/code/zbx;
location / {
index index.php;
}
location ~ \.php$ {
fastcgi_pass 127.0.0.1:9000;
fastcgi_index index.php;
fastcgi_param SCRIPT_FILENAME /app/code/zbx$fastcgi_script_name;
include fastcgi_params;
}
}
[root@m03 ~]# nginx -t
nginx: the configuration file /etc/nginx/nginx.conf syntax is ok
nginx: configuration file /etc/nginx/nginx.conf test is successful
[root@m03 ~]# systemctl reload nginx
#03 php 配置
#修改php用户
#准备 php会话保持目录
[root@m03 ~]# sed -ri '/^(user|group)/s#apache#nginx#g' /etc/php-fpm.d/www.conf
[root@m03 ~]# egrep '^(user|group)' /etc/php-fpm.d/www.conf
user = nginx
group = nginx
[root@m03 ~]# grep 'var/lib/php/session' /etc/php-fpm.d/www.conf
php_value[session.save_path] = /var/lib/php/session
[root@m03 ~]# mkdir -p /var/lib/php/session
[root@m03 ~]# chown nginx.nginx /var/lib/php/session
[root@m03 ~]# php-fpm -t
[15-Jul-2021 15:33:44] NOTICE: configuration file /etc/php-fpm.conf test is successful
[root@m03 ~]# systemctl reload php-fpm.service
#04 php+nginx测试
[root@m03 ~]# mkdir -p /code/zabbix
[root@m03 ~]# chown nginx.nginx /code/zabbix
[root@m03 ~]# vim /code/zabbix/info.php
[root@m03 ~]# cat /code/zabbix/info.php
<?php
phpinfo();
?>
[root@m03 ~]#
php-nginx测试完成
数据库
[root@m03 ~]# yum install -y mariadb-server
[root@m03 ~]# mysql_secure_installation
NOTE: RUNNING ALL PARTS OF THIS SCRIPT IS RECOMMENDED FOR ALL MariaDB
SERVERS IN PRODUCTION USE! PLEASE READ EACH STEP CAREFULLY!
In order to log into MariaDB to secure it, we'll need the current
password for the root user. If you've just installed MariaDB, and
you haven't set the root password yet, the password will be blank,
so you should just press enter here.
Enter current password for root (enter for none):
OK, successfully used password, moving on...
Setting the root password ensures that nobody can log into the MariaDB
root user without the proper authorisation.
Set root password? [Y/n] Y
New password:
Re-enter new password:
Password updated successfully!
Reloading privilege tables..
... Success!
By default, a MariaDB installation has an anonymous user, allowing anyone
to log into MariaDB without having to have a user account created for
them. This is intended only for testing, and to make the installation
go a bit smoother. You should remove them before moving into a
production environment.
Remove anonymous users? [Y/n] Y
... Success!
Normally, root should only be allowed to connect from 'localhost'. This
ensures that someone cannot guess at the root password from the network.
Disallow root login remotely? [Y/n] Y
........
By default, MariaDB comes with a database named 'test' that anyone can
access. This is also intended only for testing, and should be removed
before moving into a production environment.
Remove test database and access to it? [Y/n] Y
- Dropping test database...
... Success!
- Removing privileges on test database...
... Success!
Reloading the privilege tables will ensure that all changes made so far
will take effect immediately.
Reload privilege tables now? [Y/n] Y
... Success!
Cleaning up...
All done! If you've completed all of the above steps, your MariaDB
installation should now be secure.
Thanks for using MariaDB!
MariaDB [(none)]> select user,host from mysql.user ;
+------+-----------+
| user | host |
+------+-----------+
| root | 127.0.0.1 |
| root | ::1 |
| root | localhost |
| root | m03 |
+------+-----------+
4 rows in set (0.00 sec)
MariaDB [(none)]> show databases;
MariaDB [(none)]> show databases;
+--------------------+
| Database |
+--------------------+
| information_schema |
| mysql |
| performance_schema |
+--------------------+
3 rows in set (0.00 sec)
MariaDB [(none)]>
create database zabbix charset utf8 collate utf8_bin;
grant all on zabbix.* to 'zabbix'@'localhost' identified by '1' ;
grant all on zabbix.* to 'zabbix'@'172.16.1.%' identified by '1' ;
MariaDB [(none)]> show databases;
MariaDB [(none)]> select user,host from mysql.user;
+--------+------------+
| user | host |
+--------+------------+
| root | 127.0.0.1 |
| zabbix | 172.16.1.% |
| root | ::1 |
| root | localhost |
| zabbix | localhost |
+--------+------------+
5 rows in set (0.00 sec)
cat mysqli.php
<?php
//$link_id=mysqli_connect('主机名','用户','密码');
$link_id=mysqli_connect('localhost','zabbix','1') or
mysqli_error();
if($link_id){
echo "mysql successful by oldboy !";
}else{
echo mysqli_error();
}
//这是php单行注释
?>
zabbix-服务端
# 安装zabbix yum源
rpm -Uvh https://mirror.tuna.tsinghua.edu.cn/zabbix/zabbix/5.0/rhel/7/x86_64/zabbix-release-5.0-1.el7.noarch.rpm
sed -i 's#http://repo.zabbix.com#https://mirrors.tuna.tsinghua.edu.cn/zabbix#g' /etc/yum.repos.d/zabbix.repo
#zabbix-release.....rpm zabbix yum源的配置文件
[root@m03 ~]# cat /etc/yum.repos.d/zabbix.repo
[zabbix]
name=Zabbix Official Repository - $basearch
baseurl=https://mirror.tuna.tsinghua.edu.cn/zabbix/zabbix/5.0/rhel/7/$basearch/
enabled=1
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-ZABBIX-A14FE591
[zabbix-frontend]
name=Zabbix Official Repository frontend - $basearch
baseurl=https://mirror.tuna.tsinghua.edu.cn/zabbix/zabbix/5.0/rhel/7/$basearch/frontend
enabled=0
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-ZABBIX-A14FE591
[zabbix-debuginfo]
name=Zabbix Official Repository debuginfo - $basearch
baseurl=https://mirror.tuna.tsinghua.edu.cn/zabbix/zabbix/5.0/rhel/7/$basearch/debuginfo/
enabled=0
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-ZABBIX-A14FE591
gpgcheck=1
[zabbix-non-supported]
name=Zabbix Official Repository non-supported - $basearch
baseurl=http://repo.zabbix.com/non-supported/rhel/7/$basearch/
enabled=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-ZABBIX
gpgcheck=1
# 安装 zabbix-server
[root@m03 ~]# yum install -y zabbix-server-mysql zabbix-agent2
# zabbix 数据库导入数据
[root@m03 ~]# zcat /usr/share/doc/zabbix-server-mysql-5.0.18/create.sql.gz |mysql -uzabbix -p123456 zabbix
# zabbix 服务端 配置连接数据库
[root@m03 ~]# vim /etc/zabbix/zabbix_server.conf
[root@m03 ~]# grep ^DB /etc/zabbix/zabbix_server.conf
DBHost=localhost
DBName=zabbix
DBUser=zabbix
DBPassword=123456
[root@m03-zabbix-server ~]# grep -n '^DB' /etc/zabbix/zabbix_server.conf
91:DBHost=localhost
100:DBName=zabbix
116:DBUser=zabbix
124:DBPassword=1
#修改后 zabbix 服务端开启的功能 (不用修改)
[root@m03 ~]# grep '^[a-Z]' /etc/zabbix/zabbix_server.conf
LogFile=/var/log/zabbix/zabbix_server.log
LogFileSize=0
PidFile=/var/run/zabbix/zabbix_server.pid
SocketDir=/var/run/zabbix
DBHost=localhost
DBName=zabbix
DBUser=zabbix
DBPassword=123456
SNMPTrapperFile=/var/log/snmptrap/snmptrap.log
Timeout=4
AlertScriptsPath=/usr/lib/zabbix/alertscripts
ExternalScripts=/usr/lib/zabbix/externalscripts
LogSlowQueries=3000
StatsAllowedIP=127.0.0.1
#启动 zabbix-server
root@m03 ~]# systemctl enable zabbix-server.service
Created symlink from /etc/systemd/system/multi-user.target.wants/zabbix-server.service to /usr/lib/systemd/system/zabbix-server.service.
[root@m03 ~]# systemctl start zabbix-server.service
[root@m03 ~]#
[root@m03 ~]# ss -lntup |grep zabbix
tcp LISTEN 0 128 *:10051 *:* users:(("zabbix_server",pid=4907,fd=4),("zabbix_server",pid=4906,fd=4),("zabbix_server",pid=4905,fd=4),("zabbix_server",pid=4904,fd=4),("zabbix_server",pid=4903,fd=4),("zabbix_server",pid=4902,fd=4),("zabbix_server",pid=4901,fd=4),("zabbix_server",pid=4900,fd=4),("zabbix_server",pid=4899,fd=4),("zabbix_server",pid=4898,fd=4),("zabbix_server",pid=4897,fd=4),("zabbix_server",pid=4896,fd=4),("zabbix_server",pid=4895,fd=4),("zabbix_server",pid=4894,fd=4),("zabbix_server",pid=4893,fd=4),("zabbix_server",pid=4892,fd=4),("zabbix_server",pid=4891,fd=4),("zabbix_server",pid=4890,fd=4),("zabbix_server",pid=4889,fd=4),("zabbix_server",pid=4888,fd=4),("zabbix_server",pid=4887,fd=4),("zabbix_server",pid=4886,fd=4),("zabbix_server",pid=4885,fd=4),("zabbix_server",pid=4884,fd=4),("zabbix_server",pid=4883,fd=4),("zabbix_server",pid=4882,fd=4),("zabbi_server",pid=4881,fd=4),("zabbix_server",pid=4880,fd=4),("zabbix_server",pid=4879,fd=4),("zabbix_server",pid=4878,fd=4),("zabbix_server",pid=4877,fd=4),("zabbix_server",pid=4876,fd=4),("zabbix_server",pid=4875,fd=4),("zabbix_server",pid=4874,fd=4),("zabbix_server",pid=4873,fd=4),("zabbix_server",pid=4872,fd=4),("zabbix_server",pid=4869,fd=4),("zabbix_server",pid=4862,fd=4))
本文经授权发布，不代表老男孩教育立场。如若转载请联系原作者。
扫码加入网络安全学院讨论学习群
最新文章
