Book Image

Zenoss Core 3.x Network and System Monitoring

By : Michael Badger
Book Image

Zenoss Core 3.x Network and System Monitoring

By: Michael Badger

Overview of this book

For system administrators, network engineers, and security analysts, it is essential to keep a track of network traffic. Zenoss Core is an enterprise-level systems and network monitoring solution that can be as complex as you need it to be. And while just about anyone can install it, turn it on, and monitor "something", Zenoss Core has a complicated interface packed with features. The interface has been drastically improved over version 2, but it's still not the type of software you can use intuitively – in other words, a bit of guidance is in order. The role of this book is to serve as your Zenoss Core tour guide and save you hours, days, maybe weeks of time. This book will show you how to work with Zenoss and effectively adapt Zenoss for System and Network monitoring. Starting with the Zenoss basics, it requires no existing knowledge of systems management, and whether or not you can recite MIB trees and OIDs from memory is irrelevant. Advanced users will be able to identify ways in which they can customize the system to do more, while less advanced users will appreciate the ease of use Zenoss provides. The book contains step-by-step examples to demonstrate Zenoss Core's capabilities. The best approach to using this book is to sit down with Zenoss and apply the examples found in these pages to your system. The book covers the monitoring basics: adding devices, monitoring for availability and performance, processing events, and reviewing reports. It also dives into more advanced customizations, such as custom device reports, external event handling (for example, syslog server, zensendevent, and Windows Event Logs), custom monitoring templates using SNMP data sources, along with Nagios, and Cacti plugins. An example of a Nagios-style plugin is included and the book shows you where to get an example of a Cacti-compatible plugin for use as a command data source in monitoring templates. In Zenoss Core, ZenPacks are modules that add monitoring functionality. Using the Nagios plugin example, you will learn how to create, package, and distribute a ZenPack. You also learn how to explore Zenoss Core's data model using zendmd so that you can more effectively write event transformations and custom device reports.
Table of Contents (21 chapters)
Zenoss Core 3.x Network and System Monitoring
About the Author
About the Reviewers
Event Attributes
Device Attributes
Example snmpd.conf

Creating events by e-mail

Zenoss Core provides two not often talked about daemons to generate events from e-mails. The zenmail daemon allows us to start a Zenoss Core SMTP server that other programs can use as a mail server to send e-mail messages directly to Zenoss Core. Zenoss Core automatically turns the message into an event. The zenpop3 daemon retrieves e-mails from a specified account and generates events based on the incoming e-mails.

To use either program in daemon mode, we need to edit the $ZENHOME/bin/zenoss configuration file, so that the daemons start when Zenoss Core starts.

As the zenoss user:

  1. Open $ZENHOME/bin/zenoss in a text editor.

  2. Find the line in the script that begins with $ZENHOME/bin/zenfunctions and uncomment or add the following lines (refer to the next screenshot):

    C="$C zenmail"
    C="$C zenpop3"
  3. Restart the Zenoss daemons with the command zenoss restart:

When we restart the Zenoss daemons, zenmail and zenpop3 print warning messages that tell us that they were unable to...