前段時間接到公司IT同事需求，幫助其配置smokeping的告警功能，之前配置的姿勢有些問題，告警有些問題，現(xiàn)在調(diào)試OK，在此將關(guān)鍵配置點簡單記錄下。

關(guān)鍵的配置項主要有：

定義告警規(guī)則并配置將告警信息通過管道交給自定義的alert腳本?

在主機定義里調(diào)用定義的告警規(guī)則

自定義的alert腳本對告警內(nèi)容進(jìn)行解析和處理

定義告警規(guī)則并配置將告警信息通過管道交給自定義的alert腳本

需要在config文件的Alert配置section中進(jìn)行配置

#?/usr/local/smokeping/etc/config

*** Alerts *** # 將告警信息交給自己定的alert腳本進(jìn)行處理 to = |/usr/local/smokeping/bin/send_alert.sh from = a@b.com# 定義各種告警規(guī)則 +hostdown type = loss # in percent pattern = ==0%,==0%,==0%, ==U comment = 對端無響應(yīng)+bigloss type = loss # in percent pattern = ==0%,==0%,==0%,==0%,>20%,>20%,>20% comment = 連續(xù)3次采樣-丟包率超過20%+lossdetect type = loss # in percent pattern = ==0%,==0%,==0%,==0%,>0%,>0%,>0% comment = 連續(xù)3次采樣-存在丟包+someloss type = loss # in percent pattern = >0%,*12*,>0%,*12*,>0% comment = 間斷性丟包+rttdetect type = rtt # in milli seconds pattern = <100,<100,<100,<100,<100,<150,>150,>150,>150 comment = 連續(xù)3次采樣延遲增大-超過150ms

The Alert section lets you setup loss and RTT pattern detectors. After each round of polling, SmokePing will examine its data and determine which detectors match. Detectors are enabled per target and get inherited by the targets children.

Detectors are not just simple thresholds which go off at first sight of a problem. They are configurable to detect special loss or RTT patterns. They let you look at a number of past readings to make a more educated decision on what kind of alert should be sent, or if an alert should be sent at all.

The patterns are numbers prefixed with an operator indicating the type of comparison required for a match.

告警規(guī)則參考：官方文檔配置詳解的Alert段

http://oss.oetiker.ch/smokeping/doc/smokeping_config.en.html

在主機定義里調(diào)用告警規(guī)則

配置語法

alerts = 告警規(guī)則1,告警規(guī)則2,告警規(guī)則3

如你所了解的，smokeping的配置文件里面通過"+"號的個數(shù)來定義層級關(guān)系，因此你可以在不同的層級里面調(diào)用告警規(guī)則，上級的定義可以被下級繼承和覆蓋(內(nèi)層的優(yōu)先級更高)

+ xxoo menu = xxoo-top title = xxoo-所有網(wǎng)絡(luò)監(jiān)控列表 host = /xxoo/net-A /xxoo/net-B /xxoo/net-C alerts = hostdown,bigloss,lossdetect,someloss,rttdetect # 這里的作用范圍就是/xxoo++net-A menu = Menu-Name-A title = Titile-Name-A host = 10.10.10.101 alerts = hostdown,bigloss,lossdetect # 這里的規(guī)則作用范圍就是/xxoo/net-A++net-B menu = Google-DNS title = To-Google-DNS host = 8.8.8.8

　　

自定義的alert腳本對告警內(nèi)容進(jìn)行解析和處理

smokeping在告警的時候會發(fā)送5~6個參數(shù)到告警接收媒介(這里也就是我們自定義的alert腳本)，參數(shù)按照順序分別為：name-of-alert, target, loss-pattern, rtt-pattern, hostname,[raise]。

因此我們的alert腳本需要做的就是對上述參數(shù)進(jìn)行解析和處理。

告警腳本樣例：

[root@smokeping ~]# cat /usr/local/smokeping/bin/send_alert.sh #!/bin/bash ######################################################### # Script to email a ping report on alert from Smokeping # ######################################################### # 解析變量 alertname=$1 target=$2 losspattern=$3 rtt=$4 hostname=$5 # 自定義變量 email="xxx@yyy.com" phone="12345678901" smokename="AlertName" smokeping_mail_content=/tmp/smokeping_mail_content #smokeping_sms_content=/tmp/smokeping_sms_content# 把所有傳過來的變量輸出到腳本調(diào)用日志里，方便統(tǒng)計和問題排查 echo "$(date +%F-%T)" >> invoke.log echo $@ >> invoke.log# 網(wǎng)絡(luò)恢復(fù)邏輯判斷 if [ "$losspattern" = "loss: 0%" ]; thensubject="Clear-${smokename}-Alert: $target host: ${hostname}" elsesubject="${smokename}Alert: ${target} – ${hostname}" fi# generate mail content # 清空并重新生成郵件內(nèi)容 >${smokeping_mail_content} echo "Name of Alert: " $alertname | tee -a ${smokeping_mail_content} echo "Target: " $target | tee -a ${smokeping_mail_content} echo "Loss Pattern: " $losspattern | tee -a ${smokeping_mail_content} echo "RTT Pattern: " $rtt | tee -a ${smokeping_mail_content} echo "Hostname: " $hostname | tee -a ${smokeping_mail_content} echo "" | tee -a ${smokeping_mail_content} echo "Ping Report:" | tee -a ${smokeping_mail_content} ping ${hostname} -c 4 -i 0.5 | tee -a ${smokeping_mail_content}# send mail # 發(fā)送email，下面的if邏輯其實沒有什么卵用，因為腳本只要被調(diào)用了，這個${smokeping_mail_content}就一定是有內(nèi)容的 if [ -s ${smokeping_mail_content} ];thencontent=`cat ${smokeping_mail_content}`curl http://notice.api.ourcompany.com/send_mail -d "receiver=${email}&subject=${subject}&content=${content}" fi# send sms # 判斷alertname是否是hostdown，bigloss，rttdetect這幾種比較嚴(yán)重的級別，如果是的話就調(diào)用短信接口進(jìn)行短信發(fā)送。 # 注意，這里需要控制下短信發(fā)送內(nèi)容的字?jǐn)?shù)，要花錢的~哈哈 judge_alert_type=`echo ${alertname} | egrep "hostdown|bigloss|rttdetect"|wc -l`if [ "${judge_alert_type}" -eq 1 ];thencurl http://notice.api.ourcompany.com/send_sms -d "receiver=${phone}&subject=${subject}&content=${alertname} on ${hostname}" fi [root@smokeping ~]#

上述腳本中調(diào)用了公司的通知接口進(jìn)行告警的發(fā)送，此配置結(jié)合自己的需求進(jìn)行調(diào)整即可

http://notice.api.ourcompany.com/send_mail http://notice.api.ourcompany.com/send_sms　　

告警效果

郵件

?

短信

?

轉(zhuǎn)載于:https://www.cnblogs.com/thatsit/p/6395506.html

總結(jié)

以上是生活随笔為你收集整理的自定义smokeping告警(邮件+短信)的全部內(nèi)容，希望文章能夠幫你解決所遇到的問題。

如果覺得生活随笔網(wǎng)站內(nèi)容還不錯，歡迎將生活随笔推薦給好友。