不懂监控，何谈运维！万字Zabbix企业级实战手册（上）！

　　监控是不懂监控指对行为、活动或其他变动中信息的何谈一种持续性关注，通常是企业为了对人达成影响、管理、战手指导或保护的册上目的。

　　独孤九剑级别的不懂监控命令

#进程 pgrep 过滤出指定服务的进程pid # ps -ef |grep ##pidstat #CPU ##vmstat [root@aliyun-ansible ~]# vmstat procs -----------memory---------- ---swap-- -----io---- -system-- ------cpu----- r b swpd free buff cache si so bi bo in cs us sy id wa st 0 0 0 6298256 2104 1254900 0 0 3 8 64 208 0 0 100 0 0 Procs r: The number of runnable processes (running or waiting for run time). #cpu 正在运行或等待运行的进程数 b: The number of processes blocked waiting for I/O to complete. #处于io状态进程数量 #自行回顾: ps,top 详细信息 进程状态 ##mpstat #内存 https://github.com/silenceshell/hcache #网络 nstat/ifstat/mtr/sar ##ifstat [root@aliyun-ansible ~]# ifstat #kernel Interface RX Pkts/Rate TX Pkts/Rate RX Data/Rate TX Data/Rate RX Errs/Drop TX Errs/Drop RX Over/Rate TX Coll/Rate lo 22 0 22 0 1264 0 1264 0 0 0 0 0 0 0 0 0 eth0 1583 0 2365 0 118089 0 315050 0 0 0 0 0 0 0 0 0 [root@aliyun-ansible ~]# ##mtr [root@aliyun-ansible ~]# #动态 tracert 或traceroute 路由追踪 [root@aliyun-ansible ~]# mtr www.baidu.com

　　当被面试官问到“你们公司监控是如何做的?”时，免费源码下载我们可以从cpu、何谈内存、企业磁盘、战手网卡、册上进程、不懂监控服务等方面展开。何谈

　　回答运维面试相关问题时，企业尽量避免y1s1，战手要达到分层次、册上框架，避免问什么答什么。

　　角度01：单台机器

　　硬件信息: 磁盘,raid状态,温度,风扇转速, 机房温度,湿度

　　系统信息: cpu,内存(内存,swap) ,磁盘(io,使用率,inode),负载,网络(in/out)...

　　服务信息:各种服务状态, 进程,端口,状态,特定的信息(不同服务)

　　业务(应用/api)信息: 应用,程序代码是否有问题(需要我们与开发沟通,书写一个页面)

　　角度02：网站集群监控(用户访问流程)

　　DNS解析: ping/dig/nslookup/host

　　DNS解析域CDN是否ok，服务器托管本质是通过全局访问测试工具(模仿用户在全国(全球)各地访问我们的网站)

　　TCP三次握手-网站负载均衡监控ss -ant

　　HTTP请求报文-监控web日志查看(状态码)HTTP响应报文-监控web日志查看(状态码)

　　TCP四次挥手-网站负载均衡监控ss -ant

　　断开连接

　　角度03：其他

　　错误日志监控,error.log,catalina.out

　　网站性能监控: apm监控:skywalking...

　　舆情监控

　　监控宝-监控图形

　　监控体系说明图

　　监控的脚本时代-过去时

#脚本取出内存使用率 cat /server/scripts/check_mem.sh #!/bin/bash # author: lidao996 # desc: check system memory usage MEM=`free -m|awk NR==2{print $NF}` if [ $MEM -le 100 ];then echo "当前的内存还剩余 $MEM"|mail -s 内存不足了！oom youjiu_linux@qq.com fi

　　监控的现代时

　　Zabbix监控架构

　　生命周期

　　Zabbix监控架构

　　Zabbix是一个CS(服务端/客户端)架构的服务。

　　Zabbix-Agent获取数据 -发送给->Zabbix-Server服务端-数据会被存放-数据库<-Zabbix Web页面展示数据。

　　Zabbix生产快速实践指南

　　主机规划

　　企业Zabbix安装最佳实践-CentOS7

　　nginx环境

#m03 zabbix-server 10.0.0.72/172.16.1.72 ###配置nginx源 [root@m03 ~]# cat /etc/yum.repos.d/nginx.repo [nginx-stable] name=nginx stable repo baseurl=http://nginx.org/packages/centos/$releasever/$basearch/ gpgcheck=1 enabled=0 gpgkey=https://nginx.org/keys/nginx_signing.key module_hotfixes=true [root@m03 ~]# yum install nginx --enablerepo=nginx-stable

　　php

#nginx 1.20.1 php7.2 curl -o /etc/yum.repos.d/CentOS-Base.repo http://mirrors.aliyun.com/repo/Centos-7.repo yum install epel-release.noarch -y #webtatic 要求 curl -o /etc/yum.repos.d/epel.repo http://mirrors.aliyun.com/repo/epel-7.repo rpm -Uvh https://mirror.webtatic.com/yum/el7/webtatic-release.rpm #webtatic源 yum install php72w-cli php72w-fpm php72w-gd php72w-mbstring php72w-bcmath php72w-xml php72w-ldap php72w-mysqlnd -y [root@m03 ~]# rpm -qa |egrep nginx|php72w php72w-fpm-7.2.34-1.w7.x86_64 php72w-mbstring-7.2.34-1.w7.x86_64 nginx-1.20.1-2.el7.x86_64 php72w-common-7.2.34-1.w7.x86_64 php72w-pdo-7.2.34-1.w7.x86_64 php72w-mysqlnd-7.2.34-1.w7.x86_64 php72w-cli-7.2.34-1.w7.x86_64 php72w-ldap-7.2.34-1.w7.x86_64 php72w-xml-7.2.34-1.w7.x86_64 nginx-filesystem-1.20.1-2.el7.noarch php72w-gd-7.2.34-1.w7.x86_64 php72w-bcmath-7.2.34-1.w7.x86_64

　　nginx+php

#01 [root@m03 ~]# systemctl enable nginx php-fpm.service Created symlink from /etc/systemd/system/multi-user.target.wants/nginx.service to /usr/lib/systemd/system/nginx.service. Created symlink from /etc/systemd/system/multi-user.target.wants/php-fpm.service to /usr/lib/systemd/system/php-fpm.service. [root@m03 ~]# systemctl start nginx php-fpm.service [root@m03 ~]# #02 nginx配置 [root@m03-zabbix-server ~]# cat /etc/nginx/conf.d/zbx.oldboylinux.cn.conf server { listen 80; server_name zbx.oldboylinux.cn; root /app/code/zbx; location / { index index.php; } location ~ \.php$ { fastcgi_pass 127.0.0.1:9000; fastcgi_index index.php; fastcgi_param SCRIPT_FILENAME /app/code/zbx$fastcgi_script_name; include fastcgi_params; } } [root@m03 ~]# nginx -t nginx: the configuration file /etc/nginx/nginx.conf syntax is ok nginx: configuration file /etc/nginx/nginx.conf test is successful [root@m03 ~]# systemctl reload nginx #03 php 配置 #修改php用户 #准备 php会话保持目录 [root@m03 ~]# sed -ri /^(user|group)/s#apache#nginx#g /etc/php-fpm.d/www.conf [root@m03 ~]# egrep ^(user|group) /etc/php-fpm.d/www.conf user = nginx group = nginx [root@m03 ~]# grep var/lib/php/session /etc/php-fpm.d/www.conf php_value[session.save_path] = /var/lib/php/session [root@m03 ~]# mkdir -p /var/lib/php/session [root@m03 ~]# chown nginx.nginx /var/lib/php/session [root@m03 ~]# php-fpm -t [15-Jul-2021 15:33:44] NOTICE: configuration file /etc/php-fpm.conf test is successful [root@m03 ~]# systemctl reload php-fpm.service #04 php+nginx测试 [root@m03 ~]# mkdir -p /code/zabbix [root@m03 ~]# chown nginx.nginx /code/zabbix [root@m03 ~]# vim /code/zabbix/info.php [root@m03 ~]# cat /code/zabbix/info.php <?php phpinfo(); ?> [root@m03 ~]#

　　php-nginx测试完成

　　数据库

[root@m03 ~]# yum install -y mariadb-server [root@m03 ~]# mysql_secure_installation NOTE: RUNNING ALL PARTS OF THIS SCRIPT IS RECOMMENDED FOR ALL MariaDB SERVERS IN PRODUCTION USE! PLEASE READ EACH STEP CAREFULLY! In order to log into MariaDB to secure it, well need the current password for the root user. If youve just installed MariaDB, and you havent set the root password yet, the password will be blank, so you should just press enter here. Enter current password for root (enter for none): OK, successfully used password, moving on... Setting the root password ensures that nobody can log into the MariaDB root user without the proper authorisation. Set root password? [Y/n] Y New password: Re-enter new password: Password updated successfully! Reloading privilege tables.. ... Success! By default, a MariaDB installation has an anonymous user, allowing anyone to log into MariaDB without having to have a user account created for them. This is intended only for testing, and to make the installation go a bit smoother. You should remove them before moving into a production environment. Remove anonymous users? [Y/n] Y ... Success! Normally, root should only be allowed to connect from localhost. This ensures that someone cannot guess at the root password from the network. Disallow root login remotely? [Y/n] Y ........ By default, MariaDB comes with a database named test that anyone can access. This is also intended only for testing, and should be removed before moving into a production environment. Remove test database and access to it? [Y/n] Y - Dropping test database... ... Success! - Removing privileges on test database... ... Success! Reloading the privilege tables will ensure that all changes made so far will take effect immediately. Reload privilege tables now? [Y/n] Y ... Success! Cleaning up... All done! If youve completed all of the above steps, your MariaDB installation should now be secure. Thanks for using MariaDB! MariaDB [(none)]> select user,host from mysql.user ; +------+-----------+ | user | host | +------+-----------+ | root | 127.0.0.1 | | root | ::1 | | root | localhost | | root | m03 | +------+-----------+ 4 rows in set (0.00 sec) MariaDB [(none)]> show databases; MariaDB [(none)]> show databases; +--------------------+ | Database | +--------------------+ | information_schema | | mysql | | performance_schema | +--------------------+ 3 rows in set (0.00 sec) MariaDB [(none)]> create database zabbix charset utf8 collate utf8_bin; grant all on zabbix.* to zabbix@localhost identified by 1 ; grant all on zabbix.* to zabbix@172.16.1.% identified by 1 ; MariaDB [(none)]> show databases; MariaDB [(none)]> select user,host from mysql.user; +--------+------------+ | user | host | +--------+------------+ | root | 127.0.0.1 | | zabbix | 172.16.1.% | | root | ::1 | | root | localhost | | zabbix | localhost | +--------+------------+ 5 rows in set (0.00 sec) cat mysqli.php <?php //$link_id=mysqli_connect(主机名,用户,密码); $link_id=mysqli_connect(localhost,zabbix,1) or mysqli_error(); if($link_id){ echo "mysql successful by oldboy !"; }else{ echo mysqli_error(); } //这是php单行注释 ?>

　　zabbix-服务端

# 安装zabbix yum源 rpm -Uvh https://mirror.tuna.tsinghua.edu.cn/zabbix/zabbix/5.0/rhel/7/x86_64/zabbix-release-5.0-1.el7.noarch.rpm sed -i s#http://repo.zabbix.com#https://mirrors.tuna.tsinghua.edu.cn/zabbix#g /etc/yum.repos.d/zabbix.repo #zabbix-release.....rpm zabbix yum源的配置文件 [root@m03 ~]# cat /etc/yum.repos.d/zabbix.repo [zabbix] name=Zabbix Official Repository - $basearch baseurl=https://mirror.tuna.tsinghua.edu.cn/zabbix/zabbix/5.0/rhel/7/$basearch/ enabled=1 gpgcheck=1 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-ZABBIX-A14FE591 [zabbix-frontend] name=Zabbix Official Repository frontend - $basearch baseurl=https://mirror.tuna.tsinghua.edu.cn/zabbix/zabbix/5.0/rhel/7/$basearch/frontend enabled=0 gpgcheck=1 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-ZABBIX-A14FE591 [zabbix-debuginfo] name=Zabbix Official Repository debuginfo - $basearch baseurl=https://mirror.tuna.tsinghua.edu.cn/zabbix/zabbix/5.0/rhel/7/$basearch/debuginfo/ enabled=0 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-ZABBIX-A14FE591 gpgcheck=1 [zabbix-non-supported] name=Zabbix Official Repository non-supported - $basearch baseurl=http://repo.zabbix.com/non-supported/rhel/7/$basearch/ enabled=1 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-ZABBIX gpgcheck=1 # 安装 zabbix-server [root@m03 ~]# yum install -y zabbix-server-mysql zabbix-agent2 # zabbix 数据库导入数据 [root@m03 ~]# zcat /usr/share/doc/zabbix-server-mysql-5.0.18/create.sql.gz |mysql -uzabbix -p123456 zabbix # zabbix 服务端 配置连接数据库 [root@m03 ~]# vim /etc/zabbix/zabbix_server.conf [root@m03 ~]# grep ^DB /etc/zabbix/zabbix_server.conf DBHost=localhost DBName=zabbix DBUser=zabbix DBPassword=123456 [root@m03-zabbix-server ~]# grep -n ^DB /etc/zabbix/zabbix_server.conf 91:DBHost=localhost 100:DBName=zabbix 116:DBUser=zabbix 124:DBPassword=1 #修改后 zabbix 服务端开启的功能 (不用修改) [root@m03 ~]# grep ^[a-Z] /etc/zabbix/zabbix_server.conf LogFile=/var/log/zabbix/zabbix_server.log LogFileSize=0 PidFile=/var/run/zabbix/zabbix_server.pid SocketDir=/var/run/zabbix DBHost=localhost DBName=zabbix DBUser=zabbix DBPassword=123456 SNMPTrapperFile=/var/log/snmptrap/snmptrap.log Timeout=4 AlertScriptsPath=/usr/lib/zabbix/alertscripts ExternalScripts=/usr/lib/zabbix/externalscripts LogSlowQueries=3000 StatsAllowedIP=127.0.0.1 #启动 zabbix-server root@m03 ~]# systemctl enable zabbix-server.service Created symlink from /etc/systemd/system/multi-user.target.wants/zabbix-server.service to /usr/lib/systemd/system/zabbix-server.service. [root@m03 ~]# systemctl start zabbix-server.service [root@m03 ~]# [root@m03 ~]# ss -lntup |grep zabbix tcp LISTEN 0 128 *:10051 *:* users:(("zabbix_server",pid=4907,fd=4),("zabbix_server",pid=4906,fd=4),("zabbix_server",pid=4905,fd=4),("zabbix_server",pid=4904,fd=4),("zabbix_server",pid=4903,fd=4),("zabbix_server",pid=4902,fd=4),("zabbix_server",pid=4901,fd=4),("zabbix_server",pid=4900,fd=4),("zabbix_server",pid=4899,fd=4),("zabbix_server",pid=4898,fd=4),("zabbix_server",pid=4897,fd=4),("zabbix_server",pid=4896,fd=4),("zabbix_server",pid=4895,fd=4),("zabbix_server",pid=4894,fd=4),("zabbix_server",pid=4893,fd=4),("zabbix_server",pid=4892,fd=4),("zabbix_server",pid=4891,fd=4),("zabbix_server",pid=4890,fd=4),("zabbix_server",pid=4889,fd=4),("zabbix_server",pid=4888,fd=4),("zabbix_server",pid=4887,fd=4),("zabbix_server",pid=4886,fd=4),("zabbix_server",pid=4885,fd=4),("zabbix_server",pid=4884,fd=4),("zabbix_server",pid=4883,fd=4),("zabbix_server",pid=4882,fd=4),("zabbi_server",pid=4881,fd=4),("zabbix_server",pid=4880,fd=4),("zabbix_server",pid=4879,fd=4),("zabbix_server",pid=4878,fd=4),("zabbix_server",pid=4877,fd=4),("zabbix_server",pid=4876,fd=4),("zabbix_server",pid=4875,fd=4),("zabbix_server",pid=4874,fd=4),("zabbix_server",pid=4873,fd=4),("zabbix_server",pid=4872,fd=4),("zabbix_server",pid=4869,fd=4),("zabbix_server",pid=4862,fd=4))

本文地址：http://www.bzve.cn/html/18b3599946.html