一、故障现象
这个星期出现了两块磁盘不能读写，后面通过系统日志查看，关键字“EXT4-fs error对应某个磁盘”，因此利用zabbix，把系统日志抓取出来，作告警！
二、步聚
1.机器太多，用到ansible的playbook，进行一次性推送
2.定义key值,在/etc/zabbix/zabbix_agentd.conf.d/agentd.conf
|
1
2
|
###kernel_error of disk from /
var
/log/messsage
UserParameter=disk_health,awk -v kernel_error=`sudo tail /
var
/log/messages | grep
"EXT4-fs error"
| wc -l`
'BEGIN{if(kernel_erro > 0){print 1} else {print 0}}'
|
3.zabbix用户的sudo权限
|
1
2
3
|
vim /etc/sudoers.d/zabbix
zabbix ALL=(root) NOPASSWD:/bin/bash,/bin/netstat,/usr/bin/nmap,/bin/grep,/bin/awk,/usr/local/mysql/bin/mysql,/usr/bin/tail,/bin/cat
|
playbook
|
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
|
---
- hosts:
"`hosts`"
gather_facts:
false
tasks:
- name: Add
include
path
lineinfile:
dest:
"{{ item.dest }}"
regexp:
"{{ item.regexp }}"
line:
"{{ item.line }}"
with_items:
- {
dest:
"/etc/zabbix/zabbix_agentd.conf"
,
regexp:
"^Include"
,
line:
"\n\n###Add include\nInclude=/etc/zabbix/zabbix_agentd.conf.d/*.conf"
}
- {
dest:
"/etc/sudoers"
,
regexp:
"^Defaults requiretty"
,
line:
" #Defaults requiretty"
}
- name: Copy configuration file
copy:
src:
"{{ item.src }}"
dest:
"{{ item.dest }}"
with_items:
- {
src:
"/etc/sudoers.d/zabbix"
,
dest:
"/etc/sudoers.d/"
}
- {
src:
"/etc/zabbix/zabbix_agentd.conf.d/agentd.conf"
,
dest:
"/etc/zabbix/zabbix_agentd.conf.d/"
}
- name: Rresart zabbix service
service: name=zabbix_agentd state=restarted
|
4、执行
|
1
|
ansible-playbook copyfile.yml -e
"hosts=all"
|
本文转自 zouqingyun 51CTO博客，原文链接：http://blog.51cto.com/zouqingyun/1740998，如需转载请自行联系原作者
