1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
|
#
# Example "mon.cf" configuration for "mon".
#
# $Id: example.cf 1.1 Sat, 26 Aug 2000 15:22:34 -0400 trockij $
#
#
# This works with 0.38pre8
#
#
# global options
#
cfbasedir = /usr/lib/mon/etc
alertdir = /usr/lib/mon/alert.d
mondir = /usr/lib/mon/mon.d
maxprocs = 20
histlength = 100
randstart = 60s
#
# authentication types:
# getpwnam standard Unix passwd, NOT for shadow passwords
# shadow Unix shadow passwords (not implemented)
# userfile "mon" user file
#
authtype = getpwnam
#
# NB: hostgroup and watch entries are terminated with a blank line (or
# end of file). Don't forget the blank lines between them or you lose.
#
#
# group definitions (hostnames or IP addresses)
#
hostgroup serversbd1 dns-yp1 foo1 bar1
hostgroup serversbd2 dns-yp2 foo2 bar2 ola3
hostgroup routers cisco7000 linuxrouter agsplus
hostgroup hubs cisco316t hp800t ssii10
hostgroup workstations blue yellow red green cornflower violet
hostgroup netapps f330 f540
hostgroup wwwservers www
hostgroup printers hp5si hp5c hp750c
hostgroup new nntp
hostgroup ftp ftp
#
# For the servers in building 1, monitor ping and telnet
# BOFH is on weekend call :)
#
watch serversbd1
service ping
description ping servers in bd1
interval 5m
monitor fping.monitor
period wd {Mon-Fri} hr {7am-10pm}
alert mail.alert mis@domain.com
alert page.alert mis-pagers@domain.com
alertevery 1h
period NOALERTEVERY: wd {Mon-Fri} hr {7am-10pm}
alert mail.alert mis@domain.com
alert page.alert mis-pagers@domain.com
period wd {Sat-Sun}
alert mail.alert bofh@domain.com
alert page.alert bofh@domain.com
service telnet
description telnet to servers in bd1
interval 10m
monitor telnet.monitor
depend serversbd1:ping
period wd {Mon-Fri} hr {7am-10pm}
alertevery 1h
alertafter 2 30m
alert mail.alert mis@domain.com
alert page.alert mis-pagers@domain.com
watch serversbd2
service ping
description ping servers in bd2
interval 5m
monitor fping.monitor
depend routers:ping
period wd {Mon-Fri} hr {7am-10pm}
alert mail.alert mis@domain.com
alert page.alert mis-pagers@domain.com
alertevery 1h
period wd {Sat-Sun}
alert mail.alert bofh@domain.com
alert page.alert bofh@domain.com
service telnet
description telnet to servers in bd2
interval 10m
monitor telnet.monitor
depend routers:ping serversbd2:ping
period wd {Mon-Fri} hr {7am-10pm}
alertevery 1h
alertafter 2 30m
alert mail.alert mis@domain.com
alert page.alert mis-pagers@domain.com
watch mailhost
service fping
period wd {Mon-Fri} hr {7am-10pm}
alert mail.alert mis@domain.com
alert page.alert mis-pagers@domain.com
alertevery 1h
service telnet
interval 10m
monitor telnet.monitor
period wd {Mon-Fri} hr {7am-10pm}
alertevery 1h
alertafter 2 30m
alert mail.alert mis@domain.com
alert page.alert mis-pagers@domain.com
service smtp
interval 10m
monitor smtp.monitor
period wd {Mon-Fri} hr {7am-10pm}
alertevery 1h
alertafter 2 30m
alert page.alert mis-pagers@domain.com
service imap
interval 10m
monitor imap.monitor
period wd {Mon-Fri} hr {7am-10pm}
alertevery 1h
alertafter 2 30m
alert page.alert mis-pagers@domain.com
service pop
interval 10m
monitor pop3.monitor
period wd {Mon-Fri} hr {7am-10pm}
alertevery 1h
alertafter 2 30m
alert page.alert mis-pagers@domain.com
watch wwwservers
service ping
interval 2m
monitor fping.monitor
allow_empty_group
period wd {Sun-Sat}
alert qpage.alert mis-pagers
alertevery 45m
service http
interval 4m
monitor http.monitor
allow_empty_group
period wd {Sun-Sat}
alert qpage.alert mis-pagers
upalert mail.alert -S "web server is back up" mis
alertevery 45m
service telnet
monitor telnet.monitor
allow_empty_group
period wd {Mon-Fri} hr {7am-10pm}
alertevery 1h
alertafter 2 30m
alert mail.alert mis@domain.com
alert page.alert mis-pagers@domain.com
#
# If the routers aren't pingable, send a page using
# a phone line and the IXO protocol, which doesn't
# rely on the network. Failure of a router is pretty serious,
# so check every two minutes.
#
# Send out one page every 45 minutes, but log the failure
# to a file every time.
#
watch routers
service ping
description routers which connect bd1 and bd2
interval 1m
monitor fping.monitor
period wd {Sun-Sat}
alert qpage.alert mis-pagers
alertevery 45m
period LOGFILE: wd {Sun-Sat}
alert file.alert -d /usr/lib/mon/log.d routers.log
#
# If mon cannot ping one of the hubs, users will be calling soon
#
watch hubs
service ping
interval 1m
monitor fping.monitor
period wd {Sun-Sat}
alert qpage.alert mis-pagers
alertevery 45m
#
# Monitor free disk space on the NFS servers
#
# When space gets below 5 megs, send mail, and delete
# the oldest nightly snapshots.
#
# monitors that terminate with ";;" are not executed with the
# host group appended to the command line
#
watch netapps
service freespace
interval 15m
monitor freespace.monitor /f330:5000 /f540:5000 ;;
period wd {Sun-Sat}
alert mail.alert mis@domain.com
# alert delete.snapshot
alertevery 1h
#
# workstations
#
watch workstations
service ping
interval 5m
monitor fping.monitor
period wd {Sun-Sat}
alert mail.alert mis@domain.com
alertevery 1h
#
# news server
#
watch news
service ping
interval 5m
monitor fping.monitor
period wd {Sun-Sat}
alert mail.alert mis@domain.com
alertevery 1h
service nntp
interval 5m
monitor nntp.monitor
period wd {Sun-Sat}
alert mail.alert mis@domain.com
alertevery 1h
#
# HP printers
#
watch printers
service ping
interval 5m
monitor fping.monitor
period wd {Sun-Sat}
alert mail.alert mis@domain.com
alertevery 1h
service hpnp
interval 5m
monitor hpnp.monitor
period wd {Sun-Sat}
alert mail.alert mis@domain.com
alertevery 1h
#
# FTP server
#
watch ftp
service ftp
interval 5m
monitor ftp.monitor
period wd {Sun-Sat}
alert mail.alert mis@domain.com
alertevery 1h
#
# dial-in terminal server
#
watch dialin
service 555-1212
interval 60m
monitor dialin.monitor.wrap -n 555-1212 -t 80 ;;
period wd {Sun-Sat}
alert mail.alert mis@domain.com
upalert mail.alert mis@domain.com
alertevery 8h
service 555-1213
interval 33m
monitor dialin.monitor.wrap -n 555-1213 -t 80 ;;
period wd {Sun-Sat}
alert mail.alert mis@domain.com
upalert mail.alert mis@domain.com
alertevery 8h
|
