Yes, we've had a few threads about monitoring. I was hopeful about ipactl, but I already have a monitor for failed systemd units in all my systems (which is nice). I would add port/URL checks easily, but I'm not sure they will add a lot of value.
On Mon, May 27, 2019 at 10:30 AM John Keates <j...@keates.nl> wrote: > It’s not really doing anything more, except doing the status on all of the > units with one command. If units were to be added/removed, the command > would stay the same. > But I wouldn’t call this monitoring, it’s more like a health check, you > get a binary (good/bad). Monitoring would expect metrics IMO, and even > health checks you’d want to do on the WebUI, REST server, LDAP, KDC to see > if they are responding in an expected way. > > The service can be up (according to systems or ipactl) but still produce > garbage. > > John > > On 27 May 2019, at 10:25, Alex Corcoles via FreeIPA-users < > freeipa-users@lists.fedorahosted.org> wrote: > > The output of ipactl looks very similar to systemctl status. Is it doing > much more than that? I'm already monitoring systemd failed units so I > wonder if it's running checking ipactl. > > On Wed, Sep 19, 2018 at 1:33 PM Neal Harrington via FreeIPA-users < > freeipa-users@lists.fedorahosted.org> wrote: > >> Hi Tony, >> >> I'm monitoring using the following userparameter (basically run "ipactl >> status" and grep out lines which are known good so only errors are >> returned): >> >> UserParameter=ipa.status,sudo /usr/sbin/ipactl status 2>&1 | egrep -v >> "(INFO\: The ipactl command was successful$|: RUNNING$)" >> >> ipactl needs root access so I have a file in /etc/sudoers.d/zabbix with >> these lines to allow the zabbix user to sudo the ipactl status command only >> without a password: >> >> ## Allow zabix to query ipa status >> Defaults:zabbix !requiretty >> zabbix ALL = (root) NOPASSWD: /usr/sbin/ipactl status >> >> The final challenge I had was selinux which I had to create a custom rule >> for (but most people seem to just disable selinux). >> >> >> Then just create a trigger to alert if the returned value contains any >> characters. eg this matches on any char apart from whitespace: >> {Custom Template IPA Server:ipa.status.regexp([^\s],1200)}=1 >> >> If anyone else has a better way to do this I'd be interested to hear it. >> >> Regards, >> Neal. >> >> >> >> >> ------------------------------ >> *From:* Tony Brian Albers via FreeIPA-users < >> freeipa-users@lists.fedorahosted.org> >> *Sent:* 24 August 2018 10:50 >> *To:* freeipa-users@lists.fedorahosted.org >> *Cc:* Tony Brian Albers >> *Subject:* [Freeipa-users] zabbix for monitoring FreeIPA server? >> >> Hi guys, >> >> Anyone got this working? >> >> And if so, how did you do it? >> >> I know I can monitor the components separately, but if you know of >> anything that can do it easier I'd be happy to know about it. >> >> /tony >> -- >> -- >> Tony Albers >> Systems administrator, IT-development >> Royal Danish Library, Victor Albecks Vej 1, 8000 Aarhus C, Denmark. >> Tel: +45 2566 2383 / +45 8946 2316 >> _______________________________________________ >> FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org >> To unsubscribe send an email to >> freeipa-users-le...@lists.fedorahosted.org >> Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html >> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines >> List Archives: >> https://lists.fedoraproject.org/archives/list/freeipa-users@lists.fedorahosted.org/message/WGYZNKOBXBHHVCGA66GTFVDOG3WJOG5T/ >> _______________________________________________ >> FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org >> To unsubscribe send an email to >> freeipa-users-le...@lists.fedorahosted.org >> Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html >> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines >> List Archives: >> https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org >> > > > -- > ___ > {~._.~} > ( Y ) > ()~*~() mail: alex at corcoles dot net > (_)-(_) http://alex.corcoles.net/ > > _______________________________________________ > FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org > To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org > Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html > List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines > List Archives: > https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org > > > -- ___ {~._.~} ( Y ) ()~*~() mail: alex at corcoles dot net (_)-(_) http://alex.corcoles.net/
_______________________________________________ FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org