Nagios 钉钉报警

第一章 创建钉钉应用(用于发送报警信息给单独某个用户)

打开钉钉管理后台: https://oa.dingtalk.com

创建成功后需要记录三个值"AgentID"，"AppKey"，"AppSecret"。

第二章 创建钉钉机器人(用于发送报警信息到监控群)

2.1创建钉钉群

过程略过。

2.2添加群机器人

#此处要记录webhook，脚本中需要调用。

第三章 编写报警脚本(此脚本会在服务器出现异常后调用)

此脚本是基于Python3写的，调用此脚本时会传入七个参数，参数是Nagios的变量，参数说明见下文。
[zhuyuliang@nagios ~]$ cat /usr/local/nagios/python/dingding.py
#coding: utf-8
import json
import sys
import requests

'''
参数含义:
警告类型: $NOTIFICATIONTYPE$
服务名称: $SERVICEDESC$
主机名: $HOSTALIAS$
IP地址: $HOSTADDRESS$
服务状态: $SERVICESTATE$
时间: $LONGDATETIME$
日志: $SERVICEOUTPUT$
'''

warning_type=str(sys.argv[1])
service_name=str(sys.argv[2])
host_name=str(sys.argv[3])
host_IP=str(sys.argv[4])
service_state=str(sys.argv[5])
warning_time=str(sys.argv[6])
warning_log=str(sys.argv[7])

'''
用户的userid,因为固定的，所以写死了,获取方法:
获取部门ID:
curl https://oapi.dingtalk.com/department/list?access_token=xxx|jq '.'
通过部门ID获取userid:
curl https://oapi.dingtalk.com/user/list?access_token=xx&department_id=xx|jq '.'
'''

chenning_id='09386937241216057'
baihe_id='165726012126376472'
tiantaotao_id='215023131029727888'
wangfujun_id='014610392229410999'
maoweijian_id='014506344727183149'
caie_id='01461056511094710'
zhaozhibo_id='121027651935582616'

#项目的IP列表
ITFIN=['47.99.98.249','47.110.157.52','47.99.88.4','47.99.203.235','47.99.201.252','47.98.240.44','47.99.201.132','47.96.89.81','47.99.106.12','47.99.204.155','120.55.49.10']
cdh=['47.99.122.122','47.99.134.63','47.99.82.201','47.96.22.59','47.99.53.179']
chess=['106.14.12.179','47.101.144.209','106.14.169.195','47.101.164.250']
sdk=['121.40.109.196','121.40.82.16','120.26.106.206','120.26.223.154','120.26.55.62','47.97.244.135','101.37.89.187','116.62.108.28','116.62.109.7','116.62.102.197']

#发送的信息主体
header = {"Content-Type":"application/json;charset=UTF-8"}
content="** Nagios警报 **

警告类型: {}
服务名称: {}
主机名: {}
IP地址: {}
服务状态: {}
时间: {}
日志:
{}".format(warning_type,service_name,host_name,host_IP,service_state,warning_time,warning_log)"

def get_accessToken(appkey,appsecret):
    '''
    此函数用于获取accessToken
    '''
    json_token=requests.get(url='https://oapi.dingtalk.com/gettoken',params={'appkey':appkey,'appsecret':appsecret})
    return json_token.json()['access_token']

def send_group():
    '''
    此函数用于发送报警至钉钉群
    '''
    url='https://oapi.dingtalk.com/robot/send?access_token=7df4cff195905e47527602b7bfab6ecc4fc669392da1e446eebeac05049ddcf7'
    data = {
    "msgtype":"text",
    "text":{
    "content":content}
    }
    sendData=json.dumps(data).encode('utf-8')
    result=requests.post(url=url,data=sendData,headers=header)
    
def send_someone_data(*args):
    '''
    不同的业务线有不同的信息，为了节省代码所以定义了一个函数
    '''
    data={
    "touser":'|'.join((args[:])),
    "agentid":236353484,
    "msgtype":"text",
    "text":{
    "content":content}
    }
    return data
    
def send_someone():
    '''
    此函数用于发送信息给某个业务线的负责人
    '''
    access_token=get_accessToken('dingg3bmym6arxwokwee','xxx')
    url="https://oapi.dingtalk.com/message/send?access_token={}".format(access_token)
    if host_IP in ITFIN:
        data=send_someone_data(chenning_id,baihe_id)
    elif host_IP in cdh:
        data=send_someone_data(tiantaotao_id,zhaozhibo_id)
    elif host_IP in chess:
        data=send_someone_data(wangfujun_id)
    elif host_IP in sdk or host_IP.startswith('103.56.139'):
        data=send_someone_data(maoweijian_id,caie_id)
    sendData=json.dumps(data).encode('utf-8')
    result=requests.post(url=url,data=sendData,headers=header)
    
if __name__ == '__main__':
    send_group() #只要服务器发生异常都发送报警到你创建的群中
    send_someone() #根据发生异常的服务器IP来决定发送给哪个用户

第四章 配置钉钉报警

4.1添加报警，commands.cfg里编写。

[zhuyuliang@nagios ~]$ tail -6 /usr/local/nagios/etc/objects/commands.cfg
###钉钉报警###
define command{
command_name dindin-bj
command_line /usr/local/python-3.4/bin/python3.4 /usr/local/nagios/python/dingding.py "$NOTIFICATIONTYPE$""$SERVICEDESC$""$HOSTALIAS$""$HOSTADDRESS$""$SERVICESTATE$""$LONGDATETIME$""$SERVICEOUTPUT$" register 1
}

4.2 联系人调用报警

[zhuyuliang@nagios ~]$ tail -20 /usr/local/nagios/etc/objects/contacts.cfg
define contact{
contact_name dingding
service_notification_period 24x7
host_notification_period 24x7
service_notification_options w,u,c,r,f,s
host_notification_options d,u,r,f,s
service_notification_commands dindin-bj #调用commands.cfg文件中定义的命令
host_notification_commands dindin-bj
register 1
}
define contactgroup{ #将钉钉联系人添加到组
contactgroup_name admins
alias Nagios Administrators
members 139mail,dingding,zq-weixin,mao-weixin,baihe-weixin,huazhen-weixin,zhuyuliang-weixin,tiantaotao-weixin
}
define contactgroup{
contactgroup_name paiyou
alias paiyou
members nagiosadmin,dingding,zhanghu-weixin,yujie-weixin,bietao-weixin,louchao-weixin,maxiang-weixin,liujieqing-weixin
}

 

4.3 查看主机,服务调用那些模板

[zhuyuliang@nagios ~]$ grep -vE "^$|^#" /usr/local/nagios/etc/aliyun/host.cfg
define host{
use generic_linux_aliyun #应用的模板名称
host_name ad-server01
alias AD SERVER01
address 120.26.121.119
hostgroups aliyun_linux_ad_group
}
[zhuyuliang@nagios ~]$ grep -vE "^$|^#" /usr/local/nagios/etc/services/check_ad.cfg
define service{
host_name         ad-server01
use generic_service    #引用的模板名称
name check_ad
service_description Check ad
check_command check_nrpe!check_ad
}

4.4 修改模板(调用此联系人)

[zhuyuliang@nagios ~]$ grep -vE "^$|^#" /usr/local/nagios/etc/templates/host_templates.cfg
define host{
    name        generic_linux_aliyun
    use        linux_server
}           #找到了主机引用的模板，但是此模板还有父级模板，所以要继续找到父级模板添加联系人

define host{
name linux_server
use generic_host
… 省略
contact_groups admins    #修改联系人组，为我们定义的组
register 0
}

[zhuyuliang@nagios ~]$ grep -vE "^$|^#" /usr/local/nagios/etc/templates/service_templates.cfg
define service{
name generic_service
     use                 services-pnp
… 省略
contact_groups admins    #修改联系人组，为我们定义的组
}

4.5  配置报警的整体逻辑。

主机引用模板 -> 模板引用联系人组 -> 联系人组包含联系人 -> 联系人中调用报警命令 -> 报警命令引用脚本

 

4.6  检测配置文件，重启

#/usr/local/nagios/bin/nagios -v /usr/local/nagios/etc/nagios.cfg
#/etc/init.d/nagios restart