diff --git a/README.md b/README.md new file mode 100644 index 0000000..2bfded0 --- /dev/null +++ b/README.md @@ -0,0 +1,23 @@ +# iptables +[![MIT License](http://img.shields.io/badge/license-MIT-blue.svg?style=flat)](https://github.com/bloodia/Zabbix-Template-iptables/blob/master/iptables/LICENSE) +[![Build Status](https://travis-ci.org/bloodia/Zabbix-Template-iptables.svg?branch=master)](https://travis-ci.org/bloodia/Zabbix-Template-iptables) + +## Overview +Monitoring iptables running status and nf_conntrack with Zabbix template. + +## Requires +### OS +- CentOS 5.x - 7.x + +### Zabbix +- 3.4 +- 4.0 + +## Install UserParameter Config +Copy "UserParameter Config" file (conf) to /etc/zabbix/zabbix_agentd.d and restart Zabbix agent. + +## Import Template +Import the template file (xml) and assign it to the host monitored. + +## Author +[@bloodia](https://twitter.com/bloodiadotnet) diff --git a/Template-iptables.xml b/Template-iptables.xml new file mode 100644 index 0000000..1bea3d2 --- /dev/null +++ b/Template-iptables.xml @@ -0,0 +1,412 @@ + + + 3.4 + 2018-04-12T02:53:50Z + + + Templates + + + + + + + + {Template iptables:vfs.file.cksum[/sbin/iptables].diff(0)}>0 + 0 + + /sbin/iptables has been changed on {HOST.NAME} + 0 + + + 0 + 2 + + 0 + 0 + + + + + {Template iptables:vfs.file.exists[/proc/net/ip_tables_names].max(#3)}<>1 + 0 + + iptables is down on {HOST.NAME} + 0 + + + 0 + 4 + + 0 + 0 + + + + + {Template iptables:vfs.file.contents[nf_conntrack].last(0)}>90 + 0 + + nf_conntrack Over_90 on {HOST.NAME} + 0 + + + 0 + 3 + + 0 + 0 + + + + + {Template iptables:vfs.file.contents[nf_conntrack].last(0)}>95 + 0 + + nf_conntrack Over_95 on {HOST.NAME} + 0 + + + 0 + 4 + + 0 + 0 + + + + + + + nf_conntrack, in % + 900 + 200 + 0.0000 + 100.0000 + 1 + 1 + 0 + 1 + 0 + 0.0000 + 0.0000 + 0 + 0 + 0 + 0 + + + 0 + 5 + 1A7C11 + 0 + 7 + 0 + + Template iptables + vfs.file.contents[nf_conntrack] + + + + + + nf_conntrack_count + 900 + 200 + 0.0000 + 100.0000 + 1 + 1 + 0 + 1 + 0 + 0.0000 + 0.0000 + 0 + 0 + 0 + 0 + + + 0 + 5 + 1A7C11 + 0 + 7 + 0 + + Template iptables + vfs.file.contents[/proc/sys/net/netfilter/nf_conntrack_count] + + + + + + diff --git a/userparameter_iptables.conf b/userparameter_iptables.conf new file mode 100644 index 0000000..6da1051 --- /dev/null +++ b/userparameter_iptables.conf @@ -0,0 +1,2 @@ +# Custom Monitoring Items +UserParameter=custom.iptables.version,/sbin/iptables --version | cut -d 'v' -f 2