Changes between Version 3 and Version 4 of doc/configuration/0.4.x


Ignore:
Timestamp:
01/13/12 07:11:22 (17 months ago)
Author:
mickem
Comment:

--

Legend:

Unmodified
Added
Removed
Modified
  • doc/configuration/0.4.x

    v3 v4  
    1111 
    1212The various sections are described in short below. The default configuration file has a lot of examples and comments so make sure you change this before you use NSClient++ as some of the examples might be potential security issues. 
    13  
    14 == /modules == 
    15 This is a list of modules to load at startup. All the modules included in this list has to be NSClient++ modules and located in the modules subdirectory. This is in effect the list of plug-ins that will be available as the service is running. 
    16 For information on the various plug-ins check the Modules section in the navigation box. 
    17 Apart from module each module can be given an alias as well as an optional disabled flag to indicate it should not be loaded. The point of aliases is to allow the same module to be loaded multiple times. For instance perhaps you want to have multiple NRPE server one with SSL enable one without or different payload length or some such. 
    18 The syntax is: 
    19 {{{ 
    20 [/modules] 
    21 <alias>=<module> 
    22 <module>=1 
    23 <module>=disabled 
    24 <module>=enabled 
    25 <module>= 
    26 }}} 
    27 '''Notice''' that = is '''NOT''' optional (which is was in previous versions) 
    28  
    29 A complete list of all available modules: 
    30 [[ListTagged(module)]] 
    3113 
    3214 
     
    3719Discarding: Failed to register plugin: Could not load NSLoadModuleEx in file: LUAScript 
    3820== /modules == 
     21 
    3922'''Normal settings''' 
    4023||CheckDisk||||CheckDisk: CheckDisk can check various file and disk related things. 
    41 The current version has commands to check Size of hard drives and directories. 
     24||||||The current version has commands to check Size of hard drives and directories. 
    4225||CheckEventLog||||Event log Checker.: Check for errors and warnings in the event log. 
    43 This is only supported through NRPE so if you plan to use only NSClient this wont help you at all. 
     26||||||This is only supported through NRPE so if you plan to use only NSClient this wont help you at all. 
    4427||CheckExternalScripts||||Check External Scripts: A simple wrapper to run external scripts and batch files. 
    4528||CheckHelpers||||Helper function: Various helper function to extend other checks. 
    46 This is also only supported through NRPE. 
     29||||||This is also only supported through NRPE. 
    4730||CheckNSCP||||Check NSCP: Checkes the state of the agent 
    4831||CheckSystem||||CheckSystem: Various system related checks, such as CPU load, process state, service state memory usage and PDH counters. 
    4932||CheckTaskSched||||CheckTaskSched: CheckTaskSched can check various file and disk related things. 
    50 The current version has commands to check Size of hard drives and directories. 
     33||||||The current version has commands to check Size of hard drives and directories. 
    5134||CheckTaskSched2||||CheckTaskSched2: CheckTaskSched2 can check various file and disk related things. 
    52 The current version has commands to check Size of hard drives and directories. 
     35||||||The current version has commands to check Size of hard drives and directories. 
    5336||CheckWMI||||CheckWMI: CheckWMI can check various file and disk related things. 
    54 The current version has commands to check Size of hard drives and directories. 
    55 ||DistributedClient||||DistributedClient: A client for connecting to a distributed Server. 
    56  
    57 ||DistributedServer||||Distributed server: A simple server that listens for incoming distributed requests. 
     37||||||The current version has commands to check Size of hard drives and directories. 
    5838||FileLogger||||File logger: Writes errors and (if configured) debug info to a text file. 
    5939||NRPEClient||||NRPE client (w/ SSL): A simple client for checking remote NRPE servers (think proxy). 
    60  
     40|||||| 
    6141||NRPEServer||||NRPE server: A simple server that listens for incoming NRPE connection and handles them. 
    62 NRPE is preferred over NSClient as it is more flexible. You can of cource use both NSClient and NRPE. 
     42||||||NRPE is preferred over NSClient as it is more flexible. You can of cource use both NSClient and NRPE. 
    6343||NSCAClient||||NSCAClient: Passive check support (needs NSCA on nagios server). 
    64 Avalible crypto are: {0=No Encryption (not safe), 1=XOR, 2=DES, 3=DES-EDE3, 4=CAST-128, 6=XTEA, 8=Blowfish, 9=Twofish, 11=RC2, 14=AES, 15=AES, 16=AES, 20=Serpent, 23=GOST} 
     44||||||Avalible crypto are: {0=No Encryption (not safe), 1=XOR, 2=DES, 3=DES-EDE3, 4=CAST-128, 6=XTEA, 8=Blowfish, 9=Twofish, 11=RC2, 14=AES, 15=AES, 16=AES, 20=Serpent, 23=GOST} 
    6545||NSCAServer||||NSCA server (w/ encryption): A simple server that listens for incoming NSCA connection and handles them. 
    66 Avalible crypto are: {0=No Encryption (not safe), 1=XOR, 2=DES, 3=DES-EDE3, 4=CAST-128, 6=XTEA, 8=Blowfish, 9=Twofish, 11=RC2, 14=AES, 15=AES, 16=AES, 20=Serpent, 23=GOST} 
     46||||||Avalible crypto are: {0=No Encryption (not safe), 1=XOR, 2=DES, 3=DES-EDE3, 4=CAST-128, 6=XTEA, 8=Blowfish, 9=Twofish, 11=RC2, 14=AES, 15=AES, 16=AES, 20=Serpent, 23=GOST} 
    6747||NSCPClient||||NSCP client: A simple client for checking remote NSCP servers (think proxy). 
    68 SSL support is missing (so you cant use encryption)! 
     48||||||SSL support is missing (so you cant use encryption)! 
    6949||NSCPServer||||NSCP server (no SSL): A simple server that listens for incoming NSCP connection and handles them. 
    7050||NSClientServer||||NSClient server: A simple server that listens for incoming NSClient (check_nt) connection and handles them. 
    71 Although NRPE is the preferred method NSClient is fully supported and can be used for simplicity or for compatibility. 
     51||||||Although NRPE is the preferred method NSClient is fully supported and can be used for simplicity or for compatibility. 
    7252||PythonScript||||PythonScript: PythonScript... 
    7353||SMTPClient||||SMTPClient: Passive check support via SMTP 
     
    7555||SyslogClient||||SyslogClient: Passive check support via Syslog 
    7656== /settings/NRPE/client == 
     57Section for NRPE active/passive check module. 
    7758'''Normal settings''' 
    7859||channel||NRPE||CHANNEL: The channel to listen to. 
    7960== /settings/NRPE/client/handlers == 
     61 
    8062== /settings/NRPE/client/targets == 
     63 
    8164== /settings/NRPE/client/targets/default == 
     65Target defnition for: default 
    8266'''Normal settings''' 
    8367||address||||TARGET ADDRESS: Target host address 
     
    9074||use ssl||1||ENABLE SSL ENCRYPTION: This option controls if SSL should be enabled. 
    9175== /settings/NRPE/server == 
     76Section for NRPE (NRPEListener.dll) (check_nrpe) protocol options. 
    9277'''Normal settings''' 
    9378||allow arguments||0||COMMAND ARGUMENT PROCESSING: This option determines whether or not the we will allow clients to specify arguments to commands that are executed. 
     
    10590||use ssl||1||ENABLE SSL ENCRYPTION: This option controls if SSL should be enabled. Parent element can be found under: /settings/default 
    10691== /settings/NSCA/client == 
     92Section for NSCA passive check module. 
    10793'''Normal settings''' 
    10894||channel||NSCA||CHANNEL: The channel to listen to. 
     
    11096||hostname||auto||HOSTNAME: The host name of this host if set to blank (default) the windows name of the computer will be used. 
    11197== /settings/NSCA/client/handlers == 
     98 
    11299== /settings/NSCA/client/server == 
     100Configure the NSCA server to report to. 
    113101== /settings/NSCA/client/targets == 
     102 
    114103== /settings/NSCA/client/targets/default == 
     104Target defnition for: default 
    115105'''Normal settings''' 
    116106||address||||TARGET ADDRESS: Target host address 
     
    125115||timeout||30||TIMEOUT: Timeout when reading packets on incoming sockets. If the data has not arrived withint this time we will bail out. 
    126116== /settings/NSCA/server == 
     117Section for NSCA (NSCAServer) (check_nsca) protocol options. 
    127118'''Normal settings''' 
    128119||allowed hosts||127.0.0.1||ALLOWED HOSTS: A comaseparated list of allowed hosts. You can use netmasks (/ syntax) or * to create ranges. Parent element can be found under: /settings/default 
     
    139130||timeout||30||TIMEOUT: Timeout when reading packets on incoming sockets. If the data has not arrived within this time we will bail out. Parent element can be found under: /settings/default 
    140131== /settings/NSCA/test_nsca_client == 
     132Section for NSCA passive check module. 
    141133'''Normal settings''' 
    142134||channel||NSCA||CHANNEL: The channel to listen to. 
     
    144136||hostname||auto||HOSTNAME: The host name of this host if set to blank (default) the windows name of the computer will be used. 
    145137== /settings/NSCA/test_nsca_client/handlers == 
     138 
    146139== /settings/NSCA/test_nsca_client/server == 
     140Configure the NSCA server to report to. 
    147141== /settings/NSCA/test_nsca_client/targets == 
     142 
    148143== /settings/NSCA/test_nsca_client/targets/default == 
     144Target defnition for: default 
    149145'''Normal settings''' 
    150146||address||||TARGET ADDRESS: Target host address 
     
    159155||timeout||30||TIMEOUT: Timeout when reading packets on incoming sockets. If the data has not arrived withint this time we will bail out. 
    160156== /settings/NSCA/test_nsca_client/targets/nsca_test_local == 
     157Target defnition for: nsca_test_local 
    161158'''Normal settings''' 
    162159||address||||TARGET ADDRESS: Target host address 
     
    165162||parent||default||TARGET PARENT: The parent the target inherits from 
    166163== /settings/NSCA/test_nsca_server == 
     164Section for NSCA (NSCAServer) (check_nsca) protocol options. 
    167165'''Normal settings''' 
    168166||allowed hosts||127.0.0.1||ALLOWED HOSTS: A comaseparated list of allowed hosts. You can use netmasks (/ syntax) or * to create ranges. Parent element can be found under: /settings/default 
     
    179177||timeout||30||TIMEOUT: Timeout when reading packets on incoming sockets. If the data has not arrived within this time we will bail out. Parent element can be found under: /settings/default 
    180178== /settings/NSCP/client == 
     179Section for NSCP active/passive check module. 
    181180'''Normal settings''' 
    182181||channel||NSCP||CHANNEL: The channel to listen to. 
    183182== /settings/NSCP/client/handlers == 
     183 
    184184== /settings/NSCP/client/targets == 
     185 
    185186== /settings/NSCP/client/targets/default == 
     187Target defnition for: default 
    186188'''Normal settings''' 
    187189||address||||TARGET ADDRESS: Target host address 
     
    194196||use ssl||1||ENABLE SSL ENCRYPTION: This option controls if SSL should be enabled. 
    195197== /settings/NSClient/server == 
     198Section for NSClient (NSClientServer.dll) (check_nt) protocol options. 
    196199'''Normal settings''' 
    197200||allowed hosts||127.0.0.1||ALLOWED HOSTS: A comaseparated list of allowed hosts. You can use netmasks (/ syntax) or * to create ranges. Parent element can be found under: /settings/default/socket 
     
    207210||use ssl||1||ENABLE SSL ENCRYPTION: This option controls if SSL should be enabled. Parent element can be found under: /settings/default/socket 
    208211== /settings/SMTP/client == 
     212Section for SMTP passive check module. 
    209213'''Normal settings''' 
    210214||channel||SMTP||CHANNEL: The channel to listen to. 
    211215== /settings/SMTP/client/handlers == 
     216 
    212217== /settings/SMTP/client/targets == 
     218 
    213219== /settings/SMTP/client/targets/default == 
     220Target defnition for: default 
    214221'''Normal settings''' 
    215222||address||||TARGET ADDRESS: Target host address 
     
    222229||timeout||30||TIMEOUT: Timeout when reading/writing packets to/from sockets. 
    223230== /settings/Task Scheduler == 
     231??? 
    224232'''Advanced settings''' 
    225233||syntax||%title% last run: %most-recent-run-time% (%exit-code%)||SYNTAX: Set this to use a specific syntax string for all commands (that don't specify one) 
    226234== /settings/check/system/windows == 
     235Section for system checks and system settings 
    227236'''Normal settings''' 
    228237||AUTO_START||started||SERVICE_AUTO_START: TODO 
     
    235244||default buffer length||1h||DEFAULT INTERVALL: Used to define the default intervall for range buffer checks (ie. CPU). 
    236245== /settings/check/system/windows/pdh == 
     246 
    237247== /settings/check/system/windows/pdh/counters == 
     248 
    238249== /settings/check/system/windows/service mapping == 
     250Confiure which services has to be in which state 
    239251== /settings/crash == 
     252Configure crash handling properties. 
    240253'''Normal settings''' 
    241254||archive||1||ARCHIVE CRASHREPORTS: Archive crash reports in the archive folder 
     
    246259||submit url||http://crash.nsclient.org/submit||SUBMISSION URL: The url to submit crash reports to 
    247260== /settings/default == 
     261 
    248262'''Normal settings''' 
    249263||allowed hosts||127.0.0.1||ALLOWED HOSTS: A comaseparated list of allowed hosts. You can use netmasks (/ syntax) or * to create ranges. Parent element can be found under: /settings/default 
     
    258272||use ssl||1||ENABLE SSL ENCRYPTION: This option controls if SSL should be enabled. Parent element can be found under: /settings/default 
    259273== /settings/default/socket == 
     274 
    260275'''Normal settings''' 
    261276||allowed hosts||127.0.0.1||ALLOWED HOSTS: A comaseparated list of allowed hosts. You can use netmasks (/ syntax) or * to create ranges. Parent element can be found under: /settings/default/socket 
     
    267282||timeout||30||TIMEOUT: Timeout when reading packets on incoming sockets. If the data has not arrived within this time we will bail out. Parent element can be found under: /settings/default/socket 
    268283||use ssl||1||ENABLE SSL ENCRYPTION: This option controls if SSL should be enabled. Parent element can be found under: /settings/default/socket 
    269 == /settings/distributed/client == 
    270 '''Normal settings''' 
    271 ||channel||DNSCP||CHANNEL: The channel to listen to. 
    272 == /settings/distributed/client/handlers == 
    273 == /settings/distributed/client/targets == 
    274 == /settings/distributed/client/targets/default == 
    275 '''Normal settings''' 
    276 ||address||||TARGET ADDRESS: Target host address 
    277 ||alias||default||TARGET ALIAS: The alias for the target 
    278 ||certificate||${certificate-path}/nrpe_dh_512.pem||SSL CERTIFICATE:  
    279 ||host||default||TARGET HOST: Target host name 
    280 ||parent||default||TARGET PARENT: The parent the target inherits from 
    281 ||payload length||1024||PAYLOAD LENGTH: Length of payload to/from the NRPE agent. This is a hard specific value so you have to "configure" (read recompile) your NRPE agent to use the same value for it to work. 
    282 ||timeout||30||TIMEOUT: Timeout when reading/writing packets to/from sockets. 
    283 ||use ssl||1||ENABLE SSL ENCRYPTION: This option controls if SSL should be enabled. 
    284 == /settings/distributed/server == 
    285 '''Normal settings''' 
    286 ||host||tcp://*:5555||HOST TO BIND/CONNECT TO: The host to bind/connect to 
    287 ||mode||master||OPERATION MODE: Mode of operation can only be master now but will add more later on (such as slave) 
    288 ||suffix||ncsp.dist||SUFFIX FOR INTERNAL CHANNELS: Has to be uniq on each server 
    289 ||worker pool size||10||WORKER POOL SIZE: Number of threads to spawn for the worker pool 
    290284== /settings/eventlog == 
     285Section for the EventLog Checker (CheckEventLog.dll). 
    291286'''Normal settings''' 
    292287||buffer size||131072||BUFFER_SIZE: The size of the buffer to use when getting messages this affects the speed and maximum size of messages you can recieve. 
     
    295290||syntax||||SYNTAX: Set this to use a specific syntax string for all commands (that don't specify one). 
    296291== /settings/eventlog/real-time == 
     292A set of options to configure the real time checks 
    297293'''Normal settings''' 
    298294||destination||NSCA||DESTINATION: The destination for intercepted messages 
     
    305301||syntax||%type% %source%: %message%||STARTUP AGE: The initial age to scan when starting NSClient++ 
    306302== /settings/eventlog/real-time/filters == 
     303A set of filters to use in real-time mode 
    307304== /settings/external scripts == 
     305Section for external scripts configuration options (CheckExternalScripts). 
    308306'''Normal settings''' 
    309307||allow arguments||0||COMMAND ARGUMENT PROCESSING: This option determines whether or not the we will allow clients to specify arguments to commands that are executed. 
     
    312310||timeout||60||COMMAND TIMEOUT: The maximum time in seconds that a command can execute. (if more then this execution will be aborted). NOTICE this only affects external commands not internal ones. 
    313311== /settings/external scripts/alias == 
     312A list of aliases available. An alias is an internal command that has been "wrapped" (to add arguments). Be careful so you don't create loops (ie check_loop=check_a, check_a=check_loop) 
    314313== /settings/external scripts/scripts == 
     314A list of scripts available to run from the CheckExternalScripts module. Syntax is: <command>=<script> <arguments> 
    315315== /settings/external scripts/wrapped scripts == 
     316A list of wrappped scripts (ie. using the template mechanism) 
    316317== /settings/external scripts/wrappings == 
     318A list of templates for wrapped scripts 
    317319== /settings/log == 
     320Configure loggning properties. 
    318321'''Normal settings''' 
    319322||date format||%Y-%m-%d %H:%M:%S||DATEMASK: The size of the buffer to use when getting messages this affects the speed and maximum size of messages you can recieve. 
     
    323326||root||auto||ROOT: Set this to use a specific syntax string for all commands (that don't specify one). 
    324327== /settings/nscp/server == 
     328Section for NSCP (NSCPListener.dll) (check_nscp) protocol options. 
    325329'''Normal settings''' 
    326330||allowed hosts||127.0.0.1||ALLOWED HOSTS: A comaseparated list of allowed hosts. You can use netmasks (/ syntax) or * to create ranges. Parent element can be found under: /settings/default 
     
    334338||use ssl||1||ENABLE SSL ENCRYPTION: This option controls if SSL should be enabled. Parent element can be found under: /settings/default 
    335339== /settings/pytest == 
     340Section for the PythonScripts module. 
    336341== /settings/pytest/scripts == 
     342A list of scripts available to run from the PythonScript module. 
    337343== /settings/python == 
     344Section for the PythonScripts module. 
    338345== /settings/python/scripts == 
     346A list of scripts available to run from the PythonScript module. 
    339347== /settings/scheduler == 
     348Section for the Scheduler module. 
    340349'''Normal settings''' 
    341350||threads||5||THREAD COUNT: Number of threads to use. 
    342351== /settings/scheduler/default == 
     352Schedule defenition for: Default schedule 
    343353'''Normal settings''' 
    344354||alias||||SCHEDULE ALIAS: The alias (service name) to report to server 
     
    348358||report||all||REPORT MODE: What to report to the server (any of the following: all, critical, warning, unknown, ok) 
    349359== /settings/scheduler/schedules == 
     360Section for the Scheduler module. 
    350361== /settings/shared session == 
     362Section for configuring the shared session. 
    351363'''Normal settings''' 
    352364||enabled||0||LOG LEVEL: Log level to use 
    353365== /settings/syslog/client == 
     366Section for SYSLOG passive check module. 
    354367'''Normal settings''' 
    355368||channel||syslog||CHANNEL: The channel to listen to. 
    356369||hostname||||HOSTNAME: The host name of this host if set to blank (default) the windows name of the computer will be used. 
    357370== /settings/syslog/client/handlers == 
     371 
    358372== /settings/syslog/client/targets == 
     373 
    359374== /settings/syslog/client/targets/default == 
     375Target defnition for: default 
    360376'''Normal settings''' 
    361377||address||||TARGET ADDRESS: Target host address 
     
    372388||warning severity||warning||SSL CERTIFICATE:  
    373389== /settings/targets == 
     390A list of avalible remote target systems