biolocal:Bigsis agent install

From Wiki CEINGE

Create a group and a user with gid and id 604 named bigsis:

• groupadd -g 604 bigsis
• useradd -u 604 -g 604 bigsis

Install the agent and the libraries:

• rpm -ivh bigsister-1.02-4.noarch.rpm bigsister-agent-1.02-4.noarch.rpm
• yum install perl-GD

Configure the automatic startup:

• chkconfig --add bigsister

Modify the group and the group permissions, to allow the bigsis user to read the sistem logs:

• chown root.bigsis /var/log/messages*
• chown root.bigsis /var/log/maillog*
• chmod g+r /var/log/messages*
• chmod g+r /var/log/maillog*

Edit the /etc/logrotate.d/syslog file to ensure that the rotate log files will be created with the right permissions.

Modify the default configuration:

/var/log/messages /var/log/secure /var/log/maillog /var/log/spooler /var/log/boot.log /var/log/cron {
    sharedscripts
    postrotate
        /bin/kill -HUP `cat /var/run/syslogd.pid 2> /dev/null` 2> /dev/null || true
    endscript
}

with the following:

/var/log/messages /var/log/maillog {
    sharedscripts
    create 640 root bigsis
    postrotate
        /bin/kill -HUP `cat /var/run/syslogd.pid 2> /dev/null` 2> /dev/null || true
    endscript
}

/var/log/secure /var/log/spooler /var/log/boot.log /var/log/cron {
    sharedscripts
    postrotate
        /bin/kill -HUP `cat /var/run/syslogd.pid 2> /dev/null` 2> /dev/null || true
    endscript
}

Configure the bigsister agent.

• cd /etc/bigsister/
• vi uxmon-net

# KEYWORD       Default settings                        Apply To TEST
#-------------  ---------------------------             -----------------
DEFAULT         community=public frequency=5 perf=5     ALL
DEFAULT         version=1 proto=udp                     rpc
DEFAULT         proto=udp                               ping


# Information about defined systems to monitor using DESCR command.
#
# KEYWORD       SYSTEM FEATURES                         Apply To HOST
#---------      --------------------------              ------------
DESCR           features=unix,linux                     localhost
# DESCR         features=unix,sysv,solaris              someotherhost


# Run the following tests.
# Note: host1(host2) is reported under host2
# Note: host can be an IP address
# Report Host   Health Test List
#------------   -----------------------------------
#localhost      load memory network cpuload
#localhost      disk
#localhost      syslog
#localhost      proc=inetd procs    proc=sshd procs
#localhost      users
localhost(linux1)       load memory cpuload
localhost(linux1)       interface=eth0 speed=1000000000 network
localhost(linux1)       df="df -l" disk
localhost(linux1)       syslog
localhost(linux1)       proc=sshd procs
localhost(linux1)       users


# EDIT THIS, replace localhost by the name or IP address of your Big Sister server
#
# BigSis Server bsdisplay /options
#------------   -----------------------------------
bpb.ceinge.unina.it     bsdisplay

# include file for specific hosts, do not name it uxmon-net.* as a new
# process is started for every file matching that pattern
include include_checks.$HOST

Start the agent.

/etc/init.d/bigsister start