- Timestamp:
-
01/13/12 07:11:22 (17 months ago)
- Author:
-
mickem
- Comment:
-
--
Legend:
- Unmodified
- Added
- Removed
- Modified
-
|
v3
|
v4
|
|
| 11 | 11 | |
| 12 | 12 | The various sections are described in short below. The default configuration file has a lot of examples and comments so make sure you change this before you use NSClient++ as some of the examples might be potential security issues. |
| 13 | | |
| 14 | | == /modules == |
| 15 | | This is a list of modules to load at startup. All the modules included in this list has to be NSClient++ modules and located in the modules subdirectory. This is in effect the list of plug-ins that will be available as the service is running. |
| 16 | | For information on the various plug-ins check the Modules section in the navigation box. |
| 17 | | Apart from module each module can be given an alias as well as an optional disabled flag to indicate it should not be loaded. The point of aliases is to allow the same module to be loaded multiple times. For instance perhaps you want to have multiple NRPE server one with SSL enable one without or different payload length or some such. |
| 18 | | The syntax is: |
| 19 | | {{{ |
| 20 | | [/modules] |
| 21 | | <alias>=<module> |
| 22 | | <module>=1 |
| 23 | | <module>=disabled |
| 24 | | <module>=enabled |
| 25 | | <module>= |
| 26 | | }}} |
| 27 | | '''Notice''' that = is '''NOT''' optional (which is was in previous versions) |
| 28 | | |
| 29 | | A complete list of all available modules: |
| 30 | | [[ListTagged(module)]] |
| 31 | 13 | |
| 32 | 14 | |
| … |
… |
|
| 37 | 19 | Discarding: Failed to register plugin: Could not load NSLoadModuleEx in file: LUAScript |
| 38 | 20 | == /modules == |
| | 21 | |
| 39 | 22 | '''Normal settings''' |
| 40 | 23 | ||CheckDisk||||CheckDisk: CheckDisk can check various file and disk related things. |
| 41 | | The current version has commands to check Size of hard drives and directories. |
| | 24 | ||||||The current version has commands to check Size of hard drives and directories. |
| 42 | 25 | ||CheckEventLog||||Event log Checker.: Check for errors and warnings in the event log. |
| 43 | | This is only supported through NRPE so if you plan to use only NSClient this wont help you at all. |
| | 26 | ||||||This is only supported through NRPE so if you plan to use only NSClient this wont help you at all. |
| 44 | 27 | ||CheckExternalScripts||||Check External Scripts: A simple wrapper to run external scripts and batch files. |
| 45 | 28 | ||CheckHelpers||||Helper function: Various helper function to extend other checks. |
| 46 | | This is also only supported through NRPE. |
| | 29 | ||||||This is also only supported through NRPE. |
| 47 | 30 | ||CheckNSCP||||Check NSCP: Checkes the state of the agent |
| 48 | 31 | ||CheckSystem||||CheckSystem: Various system related checks, such as CPU load, process state, service state memory usage and PDH counters. |
| 49 | 32 | ||CheckTaskSched||||CheckTaskSched: CheckTaskSched can check various file and disk related things. |
| 50 | | The current version has commands to check Size of hard drives and directories. |
| | 33 | ||||||The current version has commands to check Size of hard drives and directories. |
| 51 | 34 | ||CheckTaskSched2||||CheckTaskSched2: CheckTaskSched2 can check various file and disk related things. |
| 52 | | The current version has commands to check Size of hard drives and directories. |
| | 35 | ||||||The current version has commands to check Size of hard drives and directories. |
| 53 | 36 | ||CheckWMI||||CheckWMI: CheckWMI can check various file and disk related things. |
| 54 | | The current version has commands to check Size of hard drives and directories. |
| 55 | | ||DistributedClient||||DistributedClient: A client for connecting to a distributed Server. |
| 56 | | |
| 57 | | ||DistributedServer||||Distributed server: A simple server that listens for incoming distributed requests. |
| | 37 | ||||||The current version has commands to check Size of hard drives and directories. |
| 58 | 38 | ||FileLogger||||File logger: Writes errors and (if configured) debug info to a text file. |
| 59 | 39 | ||NRPEClient||||NRPE client (w/ SSL): A simple client for checking remote NRPE servers (think proxy). |
| 60 | | |
| | 40 | |||||| |
| 61 | 41 | ||NRPEServer||||NRPE server: A simple server that listens for incoming NRPE connection and handles them. |
| 62 | | NRPE is preferred over NSClient as it is more flexible. You can of cource use both NSClient and NRPE. |
| | 42 | ||||||NRPE is preferred over NSClient as it is more flexible. You can of cource use both NSClient and NRPE. |
| 63 | 43 | ||NSCAClient||||NSCAClient: Passive check support (needs NSCA on nagios server). |
| 64 | | Avalible crypto are: {0=No Encryption (not safe), 1=XOR, 2=DES, 3=DES-EDE3, 4=CAST-128, 6=XTEA, 8=Blowfish, 9=Twofish, 11=RC2, 14=AES, 15=AES, 16=AES, 20=Serpent, 23=GOST} |
| | 44 | ||||||Avalible crypto are: {0=No Encryption (not safe), 1=XOR, 2=DES, 3=DES-EDE3, 4=CAST-128, 6=XTEA, 8=Blowfish, 9=Twofish, 11=RC2, 14=AES, 15=AES, 16=AES, 20=Serpent, 23=GOST} |
| 65 | 45 | ||NSCAServer||||NSCA server (w/ encryption): A simple server that listens for incoming NSCA connection and handles them. |
| 66 | | Avalible crypto are: {0=No Encryption (not safe), 1=XOR, 2=DES, 3=DES-EDE3, 4=CAST-128, 6=XTEA, 8=Blowfish, 9=Twofish, 11=RC2, 14=AES, 15=AES, 16=AES, 20=Serpent, 23=GOST} |
| | 46 | ||||||Avalible crypto are: {0=No Encryption (not safe), 1=XOR, 2=DES, 3=DES-EDE3, 4=CAST-128, 6=XTEA, 8=Blowfish, 9=Twofish, 11=RC2, 14=AES, 15=AES, 16=AES, 20=Serpent, 23=GOST} |
| 67 | 47 | ||NSCPClient||||NSCP client: A simple client for checking remote NSCP servers (think proxy). |
| 68 | | SSL support is missing (so you cant use encryption)! |
| | 48 | ||||||SSL support is missing (so you cant use encryption)! |
| 69 | 49 | ||NSCPServer||||NSCP server (no SSL): A simple server that listens for incoming NSCP connection and handles them. |
| 70 | 50 | ||NSClientServer||||NSClient server: A simple server that listens for incoming NSClient (check_nt) connection and handles them. |
| 71 | | Although NRPE is the preferred method NSClient is fully supported and can be used for simplicity or for compatibility. |
| | 51 | ||||||Although NRPE is the preferred method NSClient is fully supported and can be used for simplicity or for compatibility. |
| 72 | 52 | ||PythonScript||||PythonScript: PythonScript... |
| 73 | 53 | ||SMTPClient||||SMTPClient: Passive check support via SMTP |
| … |
… |
|
| 75 | 55 | ||SyslogClient||||SyslogClient: Passive check support via Syslog |
| 76 | 56 | == /settings/NRPE/client == |
| | 57 | Section for NRPE active/passive check module. |
| 77 | 58 | '''Normal settings''' |
| 78 | 59 | ||channel||NRPE||CHANNEL: The channel to listen to. |
| 79 | 60 | == /settings/NRPE/client/handlers == |
| | 61 | |
| 80 | 62 | == /settings/NRPE/client/targets == |
| | 63 | |
| 81 | 64 | == /settings/NRPE/client/targets/default == |
| | 65 | Target defnition for: default |
| 82 | 66 | '''Normal settings''' |
| 83 | 67 | ||address||||TARGET ADDRESS: Target host address |
| … |
… |
|
| 90 | 74 | ||use ssl||1||ENABLE SSL ENCRYPTION: This option controls if SSL should be enabled. |
| 91 | 75 | == /settings/NRPE/server == |
| | 76 | Section for NRPE (NRPEListener.dll) (check_nrpe) protocol options. |
| 92 | 77 | '''Normal settings''' |
| 93 | 78 | ||allow arguments||0||COMMAND ARGUMENT PROCESSING: This option determines whether or not the we will allow clients to specify arguments to commands that are executed. |
| … |
… |
|
| 105 | 90 | ||use ssl||1||ENABLE SSL ENCRYPTION: This option controls if SSL should be enabled. Parent element can be found under: /settings/default |
| 106 | 91 | == /settings/NSCA/client == |
| | 92 | Section for NSCA passive check module. |
| 107 | 93 | '''Normal settings''' |
| 108 | 94 | ||channel||NSCA||CHANNEL: The channel to listen to. |
| … |
… |
|
| 110 | 96 | ||hostname||auto||HOSTNAME: The host name of this host if set to blank (default) the windows name of the computer will be used. |
| 111 | 97 | == /settings/NSCA/client/handlers == |
| | 98 | |
| 112 | 99 | == /settings/NSCA/client/server == |
| | 100 | Configure the NSCA server to report to. |
| 113 | 101 | == /settings/NSCA/client/targets == |
| | 102 | |
| 114 | 103 | == /settings/NSCA/client/targets/default == |
| | 104 | Target defnition for: default |
| 115 | 105 | '''Normal settings''' |
| 116 | 106 | ||address||||TARGET ADDRESS: Target host address |
| … |
… |
|
| 125 | 115 | ||timeout||30||TIMEOUT: Timeout when reading packets on incoming sockets. If the data has not arrived withint this time we will bail out. |
| 126 | 116 | == /settings/NSCA/server == |
| | 117 | Section for NSCA (NSCAServer) (check_nsca) protocol options. |
| 127 | 118 | '''Normal settings''' |
| 128 | 119 | ||allowed hosts||127.0.0.1||ALLOWED HOSTS: A comaseparated list of allowed hosts. You can use netmasks (/ syntax) or * to create ranges. Parent element can be found under: /settings/default |
| … |
… |
|
| 139 | 130 | ||timeout||30||TIMEOUT: Timeout when reading packets on incoming sockets. If the data has not arrived within this time we will bail out. Parent element can be found under: /settings/default |
| 140 | 131 | == /settings/NSCA/test_nsca_client == |
| | 132 | Section for NSCA passive check module. |
| 141 | 133 | '''Normal settings''' |
| 142 | 134 | ||channel||NSCA||CHANNEL: The channel to listen to. |
| … |
… |
|
| 144 | 136 | ||hostname||auto||HOSTNAME: The host name of this host if set to blank (default) the windows name of the computer will be used. |
| 145 | 137 | == /settings/NSCA/test_nsca_client/handlers == |
| | 138 | |
| 146 | 139 | == /settings/NSCA/test_nsca_client/server == |
| | 140 | Configure the NSCA server to report to. |
| 147 | 141 | == /settings/NSCA/test_nsca_client/targets == |
| | 142 | |
| 148 | 143 | == /settings/NSCA/test_nsca_client/targets/default == |
| | 144 | Target defnition for: default |
| 149 | 145 | '''Normal settings''' |
| 150 | 146 | ||address||||TARGET ADDRESS: Target host address |
| … |
… |
|
| 159 | 155 | ||timeout||30||TIMEOUT: Timeout when reading packets on incoming sockets. If the data has not arrived withint this time we will bail out. |
| 160 | 156 | == /settings/NSCA/test_nsca_client/targets/nsca_test_local == |
| | 157 | Target defnition for: nsca_test_local |
| 161 | 158 | '''Normal settings''' |
| 162 | 159 | ||address||||TARGET ADDRESS: Target host address |
| … |
… |
|
| 165 | 162 | ||parent||default||TARGET PARENT: The parent the target inherits from |
| 166 | 163 | == /settings/NSCA/test_nsca_server == |
| | 164 | Section for NSCA (NSCAServer) (check_nsca) protocol options. |
| 167 | 165 | '''Normal settings''' |
| 168 | 166 | ||allowed hosts||127.0.0.1||ALLOWED HOSTS: A comaseparated list of allowed hosts. You can use netmasks (/ syntax) or * to create ranges. Parent element can be found under: /settings/default |
| … |
… |
|
| 179 | 177 | ||timeout||30||TIMEOUT: Timeout when reading packets on incoming sockets. If the data has not arrived within this time we will bail out. Parent element can be found under: /settings/default |
| 180 | 178 | == /settings/NSCP/client == |
| | 179 | Section for NSCP active/passive check module. |
| 181 | 180 | '''Normal settings''' |
| 182 | 181 | ||channel||NSCP||CHANNEL: The channel to listen to. |
| 183 | 182 | == /settings/NSCP/client/handlers == |
| | 183 | |
| 184 | 184 | == /settings/NSCP/client/targets == |
| | 185 | |
| 185 | 186 | == /settings/NSCP/client/targets/default == |
| | 187 | Target defnition for: default |
| 186 | 188 | '''Normal settings''' |
| 187 | 189 | ||address||||TARGET ADDRESS: Target host address |
| … |
… |
|
| 194 | 196 | ||use ssl||1||ENABLE SSL ENCRYPTION: This option controls if SSL should be enabled. |
| 195 | 197 | == /settings/NSClient/server == |
| | 198 | Section for NSClient (NSClientServer.dll) (check_nt) protocol options. |
| 196 | 199 | '''Normal settings''' |
| 197 | 200 | ||allowed hosts||127.0.0.1||ALLOWED HOSTS: A comaseparated list of allowed hosts. You can use netmasks (/ syntax) or * to create ranges. Parent element can be found under: /settings/default/socket |
| … |
… |
|
| 207 | 210 | ||use ssl||1||ENABLE SSL ENCRYPTION: This option controls if SSL should be enabled. Parent element can be found under: /settings/default/socket |
| 208 | 211 | == /settings/SMTP/client == |
| | 212 | Section for SMTP passive check module. |
| 209 | 213 | '''Normal settings''' |
| 210 | 214 | ||channel||SMTP||CHANNEL: The channel to listen to. |
| 211 | 215 | == /settings/SMTP/client/handlers == |
| | 216 | |
| 212 | 217 | == /settings/SMTP/client/targets == |
| | 218 | |
| 213 | 219 | == /settings/SMTP/client/targets/default == |
| | 220 | Target defnition for: default |
| 214 | 221 | '''Normal settings''' |
| 215 | 222 | ||address||||TARGET ADDRESS: Target host address |
| … |
… |
|
| 222 | 229 | ||timeout||30||TIMEOUT: Timeout when reading/writing packets to/from sockets. |
| 223 | 230 | == /settings/Task Scheduler == |
| | 231 | ??? |
| 224 | 232 | '''Advanced settings''' |
| 225 | 233 | ||syntax||%title% last run: %most-recent-run-time% (%exit-code%)||SYNTAX: Set this to use a specific syntax string for all commands (that don't specify one) |
| 226 | 234 | == /settings/check/system/windows == |
| | 235 | Section for system checks and system settings |
| 227 | 236 | '''Normal settings''' |
| 228 | 237 | ||AUTO_START||started||SERVICE_AUTO_START: TODO |
| … |
… |
|
| 235 | 244 | ||default buffer length||1h||DEFAULT INTERVALL: Used to define the default intervall for range buffer checks (ie. CPU). |
| 236 | 245 | == /settings/check/system/windows/pdh == |
| | 246 | |
| 237 | 247 | == /settings/check/system/windows/pdh/counters == |
| | 248 | |
| 238 | 249 | == /settings/check/system/windows/service mapping == |
| | 250 | Confiure which services has to be in which state |
| 239 | 251 | == /settings/crash == |
| | 252 | Configure crash handling properties. |
| 240 | 253 | '''Normal settings''' |
| 241 | 254 | ||archive||1||ARCHIVE CRASHREPORTS: Archive crash reports in the archive folder |
| … |
… |
|
| 246 | 259 | ||submit url||http://crash.nsclient.org/submit||SUBMISSION URL: The url to submit crash reports to |
| 247 | 260 | == /settings/default == |
| | 261 | |
| 248 | 262 | '''Normal settings''' |
| 249 | 263 | ||allowed hosts||127.0.0.1||ALLOWED HOSTS: A comaseparated list of allowed hosts. You can use netmasks (/ syntax) or * to create ranges. Parent element can be found under: /settings/default |
| … |
… |
|
| 258 | 272 | ||use ssl||1||ENABLE SSL ENCRYPTION: This option controls if SSL should be enabled. Parent element can be found under: /settings/default |
| 259 | 273 | == /settings/default/socket == |
| | 274 | |
| 260 | 275 | '''Normal settings''' |
| 261 | 276 | ||allowed hosts||127.0.0.1||ALLOWED HOSTS: A comaseparated list of allowed hosts. You can use netmasks (/ syntax) or * to create ranges. Parent element can be found under: /settings/default/socket |
| … |
… |
|
| 267 | 282 | ||timeout||30||TIMEOUT: Timeout when reading packets on incoming sockets. If the data has not arrived within this time we will bail out. Parent element can be found under: /settings/default/socket |
| 268 | 283 | ||use ssl||1||ENABLE SSL ENCRYPTION: This option controls if SSL should be enabled. Parent element can be found under: /settings/default/socket |
| 269 | | == /settings/distributed/client == |
| 270 | | '''Normal settings''' |
| 271 | | ||channel||DNSCP||CHANNEL: The channel to listen to. |
| 272 | | == /settings/distributed/client/handlers == |
| 273 | | == /settings/distributed/client/targets == |
| 274 | | == /settings/distributed/client/targets/default == |
| 275 | | '''Normal settings''' |
| 276 | | ||address||||TARGET ADDRESS: Target host address |
| 277 | | ||alias||default||TARGET ALIAS: The alias for the target |
| 278 | | ||certificate||${certificate-path}/nrpe_dh_512.pem||SSL CERTIFICATE: |
| 279 | | ||host||default||TARGET HOST: Target host name |
| 280 | | ||parent||default||TARGET PARENT: The parent the target inherits from |
| 281 | | ||payload length||1024||PAYLOAD LENGTH: Length of payload to/from the NRPE agent. This is a hard specific value so you have to "configure" (read recompile) your NRPE agent to use the same value for it to work. |
| 282 | | ||timeout||30||TIMEOUT: Timeout when reading/writing packets to/from sockets. |
| 283 | | ||use ssl||1||ENABLE SSL ENCRYPTION: This option controls if SSL should be enabled. |
| 284 | | == /settings/distributed/server == |
| 285 | | '''Normal settings''' |
| 286 | | ||host||tcp://*:5555||HOST TO BIND/CONNECT TO: The host to bind/connect to |
| 287 | | ||mode||master||OPERATION MODE: Mode of operation can only be master now but will add more later on (such as slave) |
| 288 | | ||suffix||ncsp.dist||SUFFIX FOR INTERNAL CHANNELS: Has to be uniq on each server |
| 289 | | ||worker pool size||10||WORKER POOL SIZE: Number of threads to spawn for the worker pool |
| 290 | 284 | == /settings/eventlog == |
| | 285 | Section for the EventLog Checker (CheckEventLog.dll). |
| 291 | 286 | '''Normal settings''' |
| 292 | 287 | ||buffer size||131072||BUFFER_SIZE: The size of the buffer to use when getting messages this affects the speed and maximum size of messages you can recieve. |
| … |
… |
|
| 295 | 290 | ||syntax||||SYNTAX: Set this to use a specific syntax string for all commands (that don't specify one). |
| 296 | 291 | == /settings/eventlog/real-time == |
| | 292 | A set of options to configure the real time checks |
| 297 | 293 | '''Normal settings''' |
| 298 | 294 | ||destination||NSCA||DESTINATION: The destination for intercepted messages |
| … |
… |
|
| 305 | 301 | ||syntax||%type% %source%: %message%||STARTUP AGE: The initial age to scan when starting NSClient++ |
| 306 | 302 | == /settings/eventlog/real-time/filters == |
| | 303 | A set of filters to use in real-time mode |
| 307 | 304 | == /settings/external scripts == |
| | 305 | Section for external scripts configuration options (CheckExternalScripts). |
| 308 | 306 | '''Normal settings''' |
| 309 | 307 | ||allow arguments||0||COMMAND ARGUMENT PROCESSING: This option determines whether or not the we will allow clients to specify arguments to commands that are executed. |
| … |
… |
|
| 312 | 310 | ||timeout||60||COMMAND TIMEOUT: The maximum time in seconds that a command can execute. (if more then this execution will be aborted). NOTICE this only affects external commands not internal ones. |
| 313 | 311 | == /settings/external scripts/alias == |
| | 312 | A list of aliases available. An alias is an internal command that has been "wrapped" (to add arguments). Be careful so you don't create loops (ie check_loop=check_a, check_a=check_loop) |
| 314 | 313 | == /settings/external scripts/scripts == |
| | 314 | A list of scripts available to run from the CheckExternalScripts module. Syntax is: <command>=<script> <arguments> |
| 315 | 315 | == /settings/external scripts/wrapped scripts == |
| | 316 | A list of wrappped scripts (ie. using the template mechanism) |
| 316 | 317 | == /settings/external scripts/wrappings == |
| | 318 | A list of templates for wrapped scripts |
| 317 | 319 | == /settings/log == |
| | 320 | Configure loggning properties. |
| 318 | 321 | '''Normal settings''' |
| 319 | 322 | ||date format||%Y-%m-%d %H:%M:%S||DATEMASK: The size of the buffer to use when getting messages this affects the speed and maximum size of messages you can recieve. |
| … |
… |
|
| 323 | 326 | ||root||auto||ROOT: Set this to use a specific syntax string for all commands (that don't specify one). |
| 324 | 327 | == /settings/nscp/server == |
| | 328 | Section for NSCP (NSCPListener.dll) (check_nscp) protocol options. |
| 325 | 329 | '''Normal settings''' |
| 326 | 330 | ||allowed hosts||127.0.0.1||ALLOWED HOSTS: A comaseparated list of allowed hosts. You can use netmasks (/ syntax) or * to create ranges. Parent element can be found under: /settings/default |
| … |
… |
|
| 334 | 338 | ||use ssl||1||ENABLE SSL ENCRYPTION: This option controls if SSL should be enabled. Parent element can be found under: /settings/default |
| 335 | 339 | == /settings/pytest == |
| | 340 | Section for the PythonScripts module. |
| 336 | 341 | == /settings/pytest/scripts == |
| | 342 | A list of scripts available to run from the PythonScript module. |
| 337 | 343 | == /settings/python == |
| | 344 | Section for the PythonScripts module. |
| 338 | 345 | == /settings/python/scripts == |
| | 346 | A list of scripts available to run from the PythonScript module. |
| 339 | 347 | == /settings/scheduler == |
| | 348 | Section for the Scheduler module. |
| 340 | 349 | '''Normal settings''' |
| 341 | 350 | ||threads||5||THREAD COUNT: Number of threads to use. |
| 342 | 351 | == /settings/scheduler/default == |
| | 352 | Schedule defenition for: Default schedule |
| 343 | 353 | '''Normal settings''' |
| 344 | 354 | ||alias||||SCHEDULE ALIAS: The alias (service name) to report to server |
| … |
… |
|
| 348 | 358 | ||report||all||REPORT MODE: What to report to the server (any of the following: all, critical, warning, unknown, ok) |
| 349 | 359 | == /settings/scheduler/schedules == |
| | 360 | Section for the Scheduler module. |
| 350 | 361 | == /settings/shared session == |
| | 362 | Section for configuring the shared session. |
| 351 | 363 | '''Normal settings''' |
| 352 | 364 | ||enabled||0||LOG LEVEL: Log level to use |
| 353 | 365 | == /settings/syslog/client == |
| | 366 | Section for SYSLOG passive check module. |
| 354 | 367 | '''Normal settings''' |
| 355 | 368 | ||channel||syslog||CHANNEL: The channel to listen to. |
| 356 | 369 | ||hostname||||HOSTNAME: The host name of this host if set to blank (default) the windows name of the computer will be used. |
| 357 | 370 | == /settings/syslog/client/handlers == |
| | 371 | |
| 358 | 372 | == /settings/syslog/client/targets == |
| | 373 | |
| 359 | 374 | == /settings/syslog/client/targets/default == |
| | 375 | Target defnition for: default |
| 360 | 376 | '''Normal settings''' |
| 361 | 377 | ||address||||TARGET ADDRESS: Target host address |
| … |
… |
|
| 372 | 388 | ||warning severity||warning||SSL CERTIFICATE: |
| 373 | 389 | == /settings/targets == |
| | 390 | A list of avalible remote target systems |
|
|