第一章 创建钉钉应用(用于发送报警信息给单独某个用户)
打开钉钉管理后台: https://oa.dingtalk.com
创建成功后需要记录三个值"AgentID","AppKey","AppSecret"。
第二章 创建钉钉机器人(用于发送报警信息到监控群)
2.1创建钉钉群
过程略过。
2.2添加群机器人
#此处要记录webhook,脚本中需要调用。
第三章 编写报警脚本(此脚本会在服务器出现异常后调用)
1 此脚本是基于Python3写的,调用此脚本时会传入七个参数,参数是Nagios的变量,参数说明见下文。
2 [zhuyuliang@nagios ~]$ cat /usr/local/nagios/python/dingding.py
3 #coding: utf-8
4 import json
5 import sys
6 import requests
7
8 '''
9 参数含义:
10 警告类型: $NOTIFICATIONTYPE$
11 服务名称: $SERVICEDESC$
12 主机名: $HOSTALIAS$
13 IP地址: $HOSTADDRESS$
14 服务状态: $SERVICESTATE$
15 时间: $LONGDATETIME$
16 日志: $SERVICEOUTPUT$
17 '''
18
19 warning_type=str(sys.argv[1])
20 service_name=str(sys.argv[2])
21 host_name=str(sys.argv[3])
22 host_IP=str(sys.argv[4])
23 service_state=str(sys.argv[5])
24 warning_time=str(sys.argv[6])
25 warning_log=str(sys.argv[7])
26
27 '''
28 用户的userid,因为固定的,所以写死了,获取方法:
29 获取部门ID:
30 curl https://oapi.dingtalk.com/department/list?access_token=xxx|jq '.'
31 通过部门ID获取userid:
32 curl https://oapi.dingtalk.com/user/list?access_token=xx\&department_id=xx|jq '.'
33 '''
34
35 chenning_id='09386937241216057'
36 baihe_id='165726012126376472'
37 tiantaotao_id='215023131029727888'
38 wangfujun_id='014610392229410999'
39 maoweijian_id='014506344727183149'
40 caie_id='01461056511094710'
41 zhaozhibo_id='121027651935582616'
42
43 #项目的IP列表
44 ITFIN=['47.99.98.249','47.110.157.52','47.99.88.4','47.99.203.235','47.99.201.252','47.98.240.44','47.99.201.132','47.96.89.81','47.99.106.12','47.99.204.155','120.55.49.10']
45 cdh=['47.99.122.122','47.99.134.63','47.99.82.201','47.96.22.59','47.99.53.179']
46 chess=['106.14.12.179','47.101.144.209','106.14.169.195','47.101.164.250']
47 sdk=['121.40.109.196','121.40.82.16','120.26.106.206','120.26.223.154','120.26.55.62','47.97.244.135','101.37.89.187','116.62.108.28','116.62.109.7','116.62.102.197']
48
49 #发送的信息主体
50 header = {"Content-Type":"application/json;charset=UTF-8"}
51 content="** Nagios警报 **\n\n警告类型: {}\n服务名称: {}\n主机名: {}\nIP地址: {}\n服务状态: {}\n时间: {}\n日志:\n{}".format(warning_type,service_name,host_name,host_IP,service_state,warning_time,warning_log)"
52
53 def get_accessToken(appkey,appsecret):
54 '''
55 此函数用于获取accessToken
56 '''
57 json_token=requests.get(url='https://oapi.dingtalk.com/gettoken',params={'appkey':appkey,'appsecret':appsecret})
58 return json_token.json()['access_token']
59
60 def send_group():
61 '''
62 此函数用于发送报警至钉钉群
63 '''
64 url='https://oapi.dingtalk.com/robot/send?access_token=7df4cff195905e47527602b7bfab6ecc4fc669392da1e446eebeac05049ddcf7'
65 data = {
66 "msgtype":"text",
67 "text":{
68 "content":content}
69 }
70 sendData=json.dumps(data).encode('utf-8')
71 result=requests.post(url=url,data=sendData,headers=header)
72
73 def send_someone_data(*args):
74 '''
75 不同的业务线有不同的信息,为了节省代码所以定义了一个函数
76 '''
77 data={
78 "touser":'|'.join((args[:])),
79 "agentid":236353484,
80 "msgtype":"text",
81 "text":{
82 "content":content}
83 }
84 return data
85
86 def send_someone():
87 '''
88 此函数用于发送信息给某个业务线的负责人
89 '''
90 access_token=get_accessToken('dingg3bmym6arxwokwee','xxx')
91 url="https://oapi.dingtalk.com/message/send?access_token={}".format(access_token)
92 if host_IP in ITFIN:
93 data=send_someone_data(chenning_id,baihe_id)
94 elif host_IP in cdh:
95 data=send_someone_data(tiantaotao_id,zhaozhibo_id)
96 elif host_IP in chess:
97 data=send_someone_data(wangfujun_id)
98 elif host_IP in sdk or host_IP.startswith('103.56.139'):
99 data=send_someone_data(maoweijian_id,caie_id)
100 sendData=json.dumps(data).encode('utf-8')
101 result=requests.post(url=url,data=sendData,headers=header)
102
103 if __name__ == '__main__':
104 send_group() #只要服务器发生异常都发送报警到你创建的群中
105 send_someone() #根据发生异常的服务器IP来决定发送给哪个用户
View Code
第四章 配置钉钉报警
4.1添加报警,commands.cfg里编写。
[zhuyuliang@nagios ~]$ tail -6 /usr/local/nagios/etc/objects/commands.cfg
###钉钉报警###
define command{
command_name dindin-bj
command_line /usr/local/python-3.4/bin/python3.4 /usr/local/nagios/python/dingding.py "$NOTIFICATIONTYPE$""$SERVICEDESC$""$HOSTALIAS$""$HOSTADDRESS$""$SERVICESTATE$""$LONGDATETIME$""$SERVICEOUTPUT$" register 1
}
4.2 联系人调用报警
[zhuyuliang@nagios ~]$ tail -20 /usr/local/nagios/etc/objects/contacts.cfg
define contact{
contact_name dingding
service_notification_period 24x7
host_notification_period 24x7
service_notification_options w,u,c,r,f,s
host_notification_options d,u,r,f,s
service_notification_commands dindin-bj #调用commands.cfg文件中定义的命令
host_notification_commands dindin-bj
register 1
}
define contactgroup{ #将钉钉联系人添加到组
contactgroup_name admins
alias Nagios Administrators
members 139mail,dingding,zq-weixin,mao-weixin,baihe-weixin,huazhen-weixin,zhuyuliang-weixin,tiantaotao-weixin
}
define contactgroup{
contactgroup_name paiyou
alias paiyou
members nagiosadmin,dingding,zhanghu-weixin,yujie-weixin,bietao-weixin,louchao-weixin,maxiang-weixin,liujieqing-weixin
}
4.3 查看主机,服务调用那些模板
[zhuyuliang@nagios ~]$ grep -vE "^$|^#" /usr/local/nagios/etc/aliyun/host.cfg
define host{
use generic_linux_aliyun #应用的模板名称
host_name ad-server01
alias AD SERVER01
address 120.26.121.119
hostgroups aliyun_linux_ad_group
}
[zhuyuliang@nagios ~]$ grep -vE "^$|^#" /usr/local/nagios/etc/services/check_ad.cfg
define service{
host_name ad-server01
use generic_service #引用的模板名称
name check_ad
service_description Check ad
check_command check_nrpe!check_ad
}
4.4 修改模板(调用此联系人)
[zhuyuliang@nagios ~]$ grep -vE "^$|^#" /usr/local/nagios/etc/templates/host_templates.cfg
define host{
name generic_linux_aliyun
use linux_server
} #找到了主机引用的模板,但是此模板还有父级模板,所以要继续找到父级模板添加联系人
define host{
name linux_server
use generic_host
… 省略
contact_groups admins #修改联系人组,为我们定义的组
register 0
}
[zhuyuliang@nagios ~]$ grep -vE "^$|^#" /usr/local/nagios/etc/templates/service_templates.cfg
define service{
name generic_service
use services-pnp
… 省略
contact_groups admins #修改联系人组,为我们定义的组
}
4.5 配置报警的整体逻辑。
主机引用模板 -> 模板引用联系人组 -> 联系人组包含联系人 -> 联系人中调用报警命令 -> 报警命令引用脚本
4.6 检测配置文件,重启
#/usr/local/nagios/bin/nagios -v /usr/local/nagios/etc/nagios.cfg
#/etc/init.d/nagios restart