参考链接
阿里巴巴开源镜像站-OPSX镜像站-阿里云开发者社区 (aliyun.com)
zabbix镜像-zabbix下载地址-zabbix安装教程-阿里巴巴开源镜像站 (aliyun.com)
Zabbix三种架构
Server-Agent
Server-Node-Agent
Server-Proxy-Agent
配置介绍
Zabbix Proxy的配置
- Server-Node-Agent
- Server-Proxy-Agent
1、配置proxy主机
① 安装相应的zabbix包
zabbix-proxy-mysql zabbix-get zabbix-agent zabbix-sender
② 准备数据库
创建、授权用户、导入schema.sql
③ 修改配置文件
④ 在server端添加此Proxy
Administration ——> Proxies
⑤ 在Server端配置通过此Proxy监控的主机
注意：zabbix agent端要允许zabbix proxy主机执行数据采集操作
实战演练—分布式监控
实验部署架构
| 主机名称 | IP地址 | 服务角色 | 架构类型 |
|---|---|---|---|
| zabbix-server | 192.168.200.60 | Zabbix 监控端 | / |
| zabbix-agent-centos | 192.168.200.70 | Zabbix 客户端 | Server-Agent |
| zbxproxy | 192.168.200.90 | Zabbix Proxy | / |
| zabbix-agent-02 | 192.168.200.100 | Zabbix 客户端 | Server-Proxy-Agent |
1、实验前期准备(Server端、Proxy端)
-
配置服务端和代理端时间同步
# 服务端和代理端安装ntpdate服务包 yum install -y ntpdate # 服务端和代理端同步阿里云时间服务器 ntpdate ntp1.aliyun.com- 关闭防火墙、SELinux安全模式
systemctl stop firewalld systemctl disable firewalld setenforce 0 getenforce iptables -nL -
设置主机名
[root@zabbix-server ~]# hostnamectl set-hostname zabbix-server [root@zabbix-proxy ~]# hostnamectl set-hostname zbxproxy.xybdiy.com [root@zabbix-agent-02 ~]# hostnamectl set-hostname zabbix-agent-02 -
配置域名解析
[root@zabbix-agent-02 ~]# cat /etc/hosts 127.0.0.1 localhost localhost.localdomain localhost4 localhost4.localdomain4 ::1 localhost localhost.localdomain localhost6 localhost6.localdomain6 192.168.200.60 zabbix-server 192.168.200.90 zbxproxy.xybdiy.com zbxproxy 192.168.200.100 zabbix-agent-02zabbix-server 直接监控一台主机zabbix-agent-centos
zabbix-server 通过代理zbproxy 监控zabbix-agent-02
2、在代理服务器上配置MySQL
- 创建MariaDB.repo
[root@zbproxy yum.repos.d]# vim mariadb.repo
[root@zbproxy yum.repos.d]# cat mariadb.repo
[mariadb]
name = MariaDB
baseurl = http://mirrors.ustc.edu.cn/mariadb/yum/10.2/centos7-amd64/
gpgkey=http://mirrors.ustc.edu.cn/mariadb/yum/RPM-GPG-KEY-MariaDB
gpgcheck=1
- 安装mariadb
[root@zbproxy ~]# yum install -y MariaDB-server MariaDB-client
- 修改数据库配置文件
[root@zbproxy ~]# vim /etc/my.cnf.d/server.cnf
[mysqld]
skip_name_resolve = ON # 跳过主机名解析
innodb_file_per_table = ON # 开启独立表空间
innodb_buffer_pool_size = 256M # 缓存池大小
max_connections = 2000 # 最大连接数
log-bin = master-log # 开启二进制日志
- 启动数据库服务
[root@zbproxy ~]# systemctl start mariadb
[root@zbproxy ~]# systemctl enable mariadb
- 初始化数据库
[root@zbproxy ~]# mysql_secure_installation
NOTE: RUNNING ALL PARTS OF THIS SCRIPT IS RECOMMENDED FOR ALL MariaDB
SERVERS IN PRODUCTION USE! PLEASE READ EACH STEP CAREFULLY!
In order to log into MariaDB to secure it, we'll need the current
password for the root user. If you've just installed MariaDB, and
you haven't set the root password yet, the password will be blank,
so you should just press enter here.
Enter current password for root (enter for none):
OK, successfully used password, moving on...
Setting the root password ensures that nobody can log into the MariaDB
root user without the proper authorisation.
Set root password? [Y/n] y
New password:
Re-enter new password:
Password updated successfully!
Reloading privilege tables..
... Success!
By default, a MariaDB installation has an anonymous user, allowing anyone
to log into MariaDB without having to have a user account created for
them. This is intended only for testing, and to make the installation
go a bit smoother. You should remove them before moving into a
production environment.
Remove anonymous users? [Y/n] y
... Success!
Normally, root should only be allowed to connect from 'localhost'. This
ensures that someone cannot guess at the root password from the network.
Disallow root login remotely? [Y/n] n
... skipping.
By default, MariaDB comes with a database named 'test' that anyone can
access. This is also intended only for testing, and should be removed
before moving into a production environment.
Remove test database and access to it? [Y/n] y
- Dropping test database...
... Success!
- Removing privileges on test database...
... Success!
Reloading the privilege tables will ensure that all changes made so far
will take effect immediately.
Reload privilege tables now? [Y/n] y
... Success!
Cleaning up...
All done! If you've completed all of the above steps, your MariaDB
installation should now be secure.
Thanks for using MariaDB!
[root@zbproxy ~]# mysql -uroot -p000
- 创建数据库 和 授权用户
# 创建数据库zbxproxydb
MariaDB [(none)]> create database zbxproxydb character set 'utf8';
Query OK, 1 row affected (0.00 sec)
# 授权用户zbxproxydb
MariaDB [(none)]> grant all on zbxproxydb.* to 'zbxproxyuser'@'192.168.200.%' identified by 'zbxproxypass';
Query OK, 0 rows affected (0.00 sec)
# 刷新，重新加载
MariaDB [(none)]> flush privileges;
Query OK, 0 rows affected (0.00 sec)
# 退出
MariaDB [(none)]> exit
Bye
[root@zbproxy ~]#
3、在代理服务器上下载zabbix相应的包。
主要是代理proxy的包
[root@zbproxy src]# yum localinstall zabbix-agent-5.0.20-1.el7.x86_64.rpm zabbix-proxy-mysql-5.0.20-1.el7.x86_64.rpm zabbix-get-5.0.20-1.el7.x86_64.rpm zabbix-sender-5.0.20-1.el7.x86_64.rpm
- 初始化数据库
#查询数据库包
[root@zbproxy src]# rpm -ql zabbix-proxy-mysql
/etc/logrotate.d/zabbix-proxy
/etc/zabbix/zabbix_proxy.conf
/usr/lib/systemd/system/zabbix-proxy.service
/usr/lib/tmpfiles.d/zabbix-proxy.conf
/usr/lib/zabbix/externalscripts
/usr/sbin/zabbix_proxy_mysql
/usr/share/doc/zabbix-proxy-mysql-5.0.20
/usr/share/doc/zabbix-proxy-mysql-5.0.20/AUTHORS
/usr/share/doc/zabbix-proxy-mysql-5.0.20/COPYING
/usr/share/doc/zabbix-proxy-mysql-5.0.20/ChangeLog
/usr/share/doc/zabbix-proxy-mysql-5.0.20/NEWS
/usr/share/doc/zabbix-proxy-mysql-5.0.20/README
/usr/share/doc/zabbix-proxy-mysql-5.0.20/schema.sql.gz
/usr/share/man/man8/zabbix_proxy.8.gz
/var/log/zabbix
/var/run/zabbix
zabbix-proxymysql 包里带有导入数据的文件schema.sql.gz
# 复制schema.sql.gz
[root@zbproxy ~]# cp /usr/share/doc/zabbix-proxy-mysql-5.0.20/schema.sql.gz .
[root@zbproxy ~]# ls
anaconda-ks.cfg schema.sql.gz
# 解压
[root@zbproxy ~]# gzip -d schema.sql.gz
[root@zbproxy ~]# ls
anaconda-ks.cfg schema.sql
# 导入数据，出现以下问题
[root@zbproxy ~]# mysql -uroot -p000 < schema.sql
ERROR 1046 (3D000) at line 1: No database selected
解决办法：
[root@zbproxy ~]# vim schema.sql
在首部添加如下内容：
USE zbxproxydb;
按:wq保存退出
[root@zbproxy ~]# mysql -uroot -p000 < schema.sql
- 查看数据已经生成
MariaDB [(none)]> show databases;
+--------------------+
| Database |
+--------------------+
| information_schema |
| mysql |
| performance_schema |
| zbxproxydb |
+--------------------+
4 rows in set (0.00 sec)
MariaDB [(none)]> use zbxproxydb;
Reading table information for completion of table and column names
You can turn off this feature to get a quicker startup with -A
Database changed
MariaDB [zbxproxydb]> show tables;
+----------------------------+
| Tables_in_zbxproxydb |
+----------------------------+
| acknowledges |
| actions |
| alerts |
| application_discovery |
| application_prototype |
| application_template |
| applications |
| auditlog |
| auditlog_details |
| autoreg_host |
| conditions |
| config |
| config_autoreg_tls |
| corr_condition |
| corr_condition_group |
| corr_condition_tag |
| corr_condition_tagpair |
| corr_condition_tagvalue |
| corr_operation |
| correlation |
| dashboard |
| dashboard_user |
| dashboard_usrgrp |
| dbversion |
| dchecks |
| dhosts |
| drules |
| dservices |
| escalations |
| event_recovery |
| event_suppress |
| event_tag |
| events |
| expressions |
| functions |
| globalmacro |
| globalvars |
| graph_discovery |
| graph_theme |
| graphs |
| graphs_items |
| group_discovery |
| group_prototype |
| history |
| history_log |
| history_str |
| history_text |
| history_uint |
| host_discovery |
| host_inventory |
| host_tag |
| hostmacro |
| hosts |
| hosts_groups |
| hosts_templates |
| housekeeper |
| hstgrp |
| httpstep |
| httpstep_field |
| httpstepitem |
| httptest |
| httptest_field |
| httptestitem |
| icon_map |
| icon_mapping |
| ids |
| images |
| interface |
| interface_discovery |
| interface_snmp |
| item_application_prototype |
| item_condition |
| item_discovery |
| item_preproc |
| item_rtdata |
| items |
| items_applications |
| lld_macro_path |
| lld_override |
| lld_override_condition |
| lld_override_opdiscover |
| lld_override_operation |
| lld_override_ophistory |
| lld_override_opinventory |
| lld_override_opperiod |
| lld_override_opseverity |
| lld_override_opstatus |
| lld_override_optag |
| lld_override_optemplate |
| lld_override_optrends |
| maintenance_tag |
| maintenances |
| maintenances_groups |
| maintenances_hosts |
| maintenances_windows |
| mappings |
| media |
| media_type |
| media_type_message |
| media_type_param |
| module |
| opcommand |
| opcommand_grp |
| opcommand_hst |
| opconditions |
| operations |
| opgroup |
| opinventory |
| opmessage |
| opmessage_grp |
| opmessage_usr |
| optemplate |
| problem |
| problem_tag |
| profiles |
| proxy_autoreg_host |
| proxy_dhistory |
| proxy_history |
| regexps |
| rights |
| screen_user |
| screen_usrgrp |
| screens |
| screens_items |
| scripts |
| service_alarms |
| services |
| services_links |
| services_times |
| sessions |
| slides |
| slideshow_user |
| slideshow_usrgrp |
| slideshows |
| sysmap_element_trigger |
| sysmap_element_url |
| sysmap_shape |
| sysmap_url |
| sysmap_user |
| sysmap_usrgrp |
| sysmaps |
| sysmaps_elements |
| sysmaps_link_triggers |
| sysmaps_links |
| tag_filter |
| task |
| task_acknowledge |
| task_check_now |
| task_close_problem |
| task_data |
| task_remote_command |
| task_remote_command_result |
| task_result |
| timeperiods |
| trends |
| trends_uint |
| trigger_depends |
| trigger_discovery |
| trigger_tag |
| triggers |
| users |
| users_groups |
| usrgrp |
| valuemaps |
| widget |
| widget_field |
+----------------------------+
166 rows in set (0.00 sec)
MariaDB [zbxproxydb]>
4、配置proxy端
[root@zbproxy ~]# vim /etc/zabbix/zabbix_proxy.conf
Server=192.168.200.60 # server 的IP
ServerPort=10051 # server 的端口
Hostname=zbxproxy.xybdiy.com # 主机名
ListenPort=10051 # proxy自己的监听端口
EnableRemoteCommands=1 # 允许远程命令
LogRemoteCommands=1 # 记录远程命令的日志
DBHost=192.168.200.90
DBName=zbxproxydb
DBUser=zbxproxyuser
DBPassword=zbxproxypass
ConfigFrequency=30 # 意思是多长时间去服务端拖一次有自己监控的操作配置，为了实验更快的生效。这里设置30秒，默认3600s
DataSenderFrequency=1 # 每一秒向server 端发一次数据，发送频度
开启proxy服务
[root@zbxproxy zabbix]# systemctl start zabbix-proxy
[root@zbxproxy zabbix]# systemctl enable zabbix-proxy
5、配置Agent端允许proxy代理监控
[root@zabbix-agent-02 ~]# vim /etc/zabbix/zabbix_agentd.conf
Server=192.168.200.60,192.168.200.90
ServerActive=192.168.200.60,192.168.200.90
[root@zabbix-agent-02 ~]# systemctl restart zabbix-agent
6、把代理加入监控server 创建配置agent代理
- 创建agent代理
- 配置
- 创建agent端主机并采用代理监控
