服务器安装monit进程监控服务

2019-02-19 14:31:03   php分享记录

  monit,centos7,进程监控  

monit的安装部署

  1. 下载源码包
    1. cd /usr/local/src/
    2. git clone https://tildeslash@bitbucket.org/tildeslash/monit.git.//下载源码包
    3. cd monit
    4. ./bootstrap
    5. ./configure
    6. make && make install
    7. 安装完成
    8. 新建/etc/monit/目录
    9. 目录结构
    10. monit---conf----------monitrc
    11.                            ---sys
    12.         ---logs(文件)
    13.         ---var

其中monitrc是从源码目录复制过来的(monitrc要求权限不超过0700)
配置修改为以下内容

  1. ###############################################################################
  2. ## Monit control file
  3. ###############################################################################
  4. ##
  5. ## Comments begin with a '#' and extend through the end of the line. Keywords
  6. ## are case insensitive. All path's MUST BE FULLY QUALIFIED, starting with '/'.
  7. ##
  8. ## Below you will find examples of some frequently used statements. For
  9. ## information about the control file and a complete list of statements and
  10. ## options, please have a look in the Monit manual.
  11. ##
  12. ##
  13. ###############################################################################
  14. ## Global section
  15. ###############################################################################
  16. ##
  17. ## Start Monit in the background (run as a daemon):
  18. #
  19. set daemon  10              # check services at 30 seconds intervals
  20. #   with start delay 240    # optional: delay the first check by 4-minutes (by
  21. #                           # default Monit check immediately after Monit start)
  22. #
  23. #
  24. ## Set syslog logging. If you want to log to a standalone log file instead,
  25. ## specify the full path to the log file
  26. #
  27. set log /etc/monit/logs
  29. #
  30. #
  31. ## Set the location of the Monit lock file which stores the process id of the
  32. ## running Monit instance. By default this file is stored in $HOME/.monit.pid
  33. #
  34. set pidfile /etc/monit/var/monit.pid
  35. #
  36. ## Set the location of the Monit id file which stores the unique id for the
  37. ## Monit instance. The id is generated and stored on first Monit start. By
  38. ## default the file is placed in $HOME/.monit.id.
  39. #
  40. # set idfile /var/.monit.id
  41. #
  42. ## Set the location of the Monit state file which saves monitoring states
  43. ## on each cycle. By default the file is placed in $HOME/.monit.state. If
  44. ## the state file is stored on a persistent filesystem, Monit will recover
  45. ## the monitoring state across reboots. If it is on temporary filesystem, the
  46. ## state will be lost on reboot which may be convenient in some situations.
  47. #
  48. set statefile /etc/monit/var/.monit.state
  49. #
  50. #
  52. ## Set limits for various tests. The following example shows the default values:
  53. ##
  54. # set limits {
  55. #     programOutput:     512 B,      # check program's output truncate limit
  56. #     sendExpectBuffer:  256 B,      # limit for send/expect protocol test
  57. #     fileContentBuffer: 512 B,      # limit for file content test
  58. #     httpContentBuffer: 1 MB,       # limit for HTTP content test
  59. #     networkTimeout:    5 seconds   # timeout for network I/O
  60. #     programTimeout:    300 seconds # timeout for check program
  61. #     stopTimeout:       30 seconds  # timeout for service stop
  62. #     startTimeout:      30 seconds  # timeout for service start
  63. #     restartTimeout:    30 seconds  # timeout for service restart
  64. # }
  66. ## Set global SSL options (just most common options showed, see manual for
  67. ## full list).
  68. #
  69. # set ssl {
  70. #     verify     : enable, # verify SSL certificates (disabled by default but STRONGLY RECOMMENDED)
  71. #     selfsigned : allow   # allow self signed SSL certificates (reject by default)
  72. # }
  73. #
  74. #
  75. ## Set the list of mail servers for alert delivery. Multiple servers may be
  76. ## specified using a comma separator. If the first mail server fails, Monit
  77. # will use the second mail server in the list and so on. By default Monit uses
  78. # port 25 - it is possible to override this with the PORT option.
  79. #
  80. set mailserver localhost
  81. #set mailserver mail.bar.baz,               # primary mailserver
  82. #                backup.bar.baz port 10025,  # backup mailserver on port 10025
  83. #                localhost                   # fallback relay
  84. #
  85. #
  86. ## By default Monit will drop alert events if no mail servers are available.
  87. ## If you want to keep the alerts for later delivery retry, you can use the
  88. ## EVENTQUEUE statement. The base directory where undelivered alerts will be
  89. ## stored is specified by the BASEDIR option. You can limit the queue size
  90. ## by using the SLOTS option (if omitted, the queue is limited by space
  91. ## available in the back end filesystem).
  92. #
  93. # set eventqueue
  94. #     basedir /var/monit  # set the base directory where events will be stored
  95. #     slots 100           # optionally limit the queue size
  96. #
  97. #
  98. ## Send status and events to M/Monit (for more informations about M/Monit
  99. ## see https://mmonit.com/). By default Monit registers credentials with
  100. ## M/Monit so M/Monit can smoothly communicate back to Monit and you don't
  101. ## have to register Monit credentials manually in M/Monit. It is possible to
  102. ## disable credential registration using the commented out option below.
  103. ## Though, if safety is a concern we recommend instead using https when
  104. ## communicating with M/Monit and send credentials encrypted. The password
  105. ## should be URL encoded if it contains URL-significant characters like
  106. ## ":", "?", "@". Default timeout is 5 seconds, you can customize it by
  107. ## adding the timeout option.
  108. #
  109. # set mmonit http://monit:monit@192.168.1.10:8080/collector
  110. #     # with timeout 30 seconds              # Default timeout is 5 seconds
  111. #     # and register without credentials     # Don't register credentials
  112. #
  113. #
  114. ## Monit by default uses the following format for alerts if the mail-format
  115. ## statement is missing::
  116. ## --8<--
  117.  set mail-format {
  118.    from:    Monit <monit@$HOST>
  119.    subject: monit alert --  $EVENT $SERVICE
  120.    message: $EVENT Service $SERVICE
  121.                  Date:        $DATE
  122.                  Action:      $ACTION
  123.                  Host:        $HOST
  124.                  Description: $DESCRIPTION
  125.             Your faithful employee,
  126.             Monit
  127.  }
  128. ## --8<--
  129. ##
  130. ## You can override this message format or parts of it, such as subject
  131. ## or sender using the MAIL-FORMAT statement. Macros such as $DATE, etc.
  132. ## are expanded at runtime. For example, to override the sender, use:
  133. #
  134. set mail-format { from: monit@foo.bar }
  135. #
  136. #
  137. ## You can set alert recipients whom will receive alerts if/when a
  138. ## service defined in this file has errors. Alerts may be restricted on
  139. ## events by using a filter as in the second example below.
  140. #
  141.  set alert 1776243356@qq.com                       # receive all alerts
  142. #
  143. ## Do not alert when Monit starts, stops or performs a user initiated action.
  144. ## This filter is recommended to avoid getting alerts for trivial cases.
  145. #
  146. # set alert your-name@your.domain not on { instance, action }
  147. #
  148. #
  149. ## Monit has an embedded HTTP interface which can be used to view status of
  150. ## services monitored and manage services from a web interface. The HTTP
  151. ## interface is also required if you want to issue Monit commands from the
  152. ## command line, such as 'monit status' or 'monit restart service' The reason
  153. ## for this is that the Monit client uses the HTTP interface to send these
  154. ## commands to a running Monit daemon. See the Monit Wiki if you want to
  155. ## enable SSL for the HTTP interface.
  156. #
  157. set httpd port 2812 and
  158.     use address localhost  # only accept connection from localhost (drop if you use M/Monit)
  159.     allow localhost        # allow localhost to connect to the server and
  160.     allow admin:monit      # require user 'admin' with password 'monit'
  161.     #with ssl {            # enable SSL/TLS and set path to server certificate
  162.     #    pemfile: /etc/ssl/certs/monit.pem
  163.     #}
  165. ###############################################################################
  166. ## Services
  167. ###############################################################################
  168. ##
  169. ## Check general system resources such as load average, cpu and memory
  170. ## usage. Each test specifies a resource, conditions and the action to be
  171. ## performed should a test fail.
  172. #
  173. #  check system $HOST
  174. #    if loadavg (1min) > 4 then alert
  175. #    if loadavg (5min) > 2 then alert
  176. #    if cpu usage > 95% for 10 cycles then alert
  177. #    if memory usage > 75% then alert
  178. #    if swap usage > 25% then alert
  179. #
  180. #
  181. ## Check if a file exists, checksum, permissions, uid and gid. In addition
  182. ## to alert recipients in the global section, customized alert can be sent to
  183. ## additional recipients by specifying a local alert handler. The service may
  184. ## be grouped using the GROUP option. More than one group can be specified by
  185. ## repeating the 'group name' statement.
  186. #
  187. #  check file apache_bin with path /usr/local/apache/bin/httpd
  188. #    if failed checksum and
  189. #       expect the sum 8f7f419955cefa0b33a2ba316cba3659 then unmonitor
  190. #    if failed permission 755 then unmonitor
  191. #    if failed uid "root" then unmonitor
  192. #    if failed gid "root" then unmonitor
  193. #    alert security@foo.bar on {
  194. #           checksum, permission, uid, gid, unmonitor
  195. #        } with the mail-format { subject: Alarm! }
  196. #    group server
  197. #
  198. #
  199. ## Check that a process is running, in this case Apache, and that it respond
  200. ## to HTTP and HTTPS requests. Check its resource usage such as cpu and memory,
  201. ## and number of children. If the process is not running, Monit will restart
  202. ## it by default. In case the service is restarted very often and the
  203. ## problem remains, it is possible to disable monitoring using the TIMEOUT
  204. ## statement. This service depends on another service (apache_bin) which
  205. ## is defined above.
  206. #
  207. #  check process apache with pidfile /usr/local/apache/logs/httpd.pid
  208. #    start program = "/etc/init.d/httpd start" with timeout 60 seconds
  209. #    stop program  = "/etc/init.d/httpd stop"
  210. #    if cpu > 60% for 2 cycles then alert
  211. #    if cpu > 80% for 5 cycles then restart
  212. #    if totalmem > 200.0 MB for 5 cycles then restart
  213. #    if children > 250 then restart
  214. #    if disk read > 500 kb/s for 10 cycles then alert
  215. #    if disk write > 500 kb/s for 10 cycles then alert
  216. #    if failed host www.tildeslash.com port 80 protocol http and request "/somefile.html" then restart
  217. #    if failed port 443 protocol https with timeout 15 seconds then restart
  218. #    if 3 restarts within 5 cycles then unmonitor
  219. #    depends on apache_bin
  220. #    group server
  221. #
  222. #
  223. ## Check filesystem permissions, uid, gid, space usage, inode usage and disk I/O.
  224. ## Other services, such as databases, may depend on this resource and an automatically
  225. ## graceful stop may be cascaded to them before the filesystem will become full and data
  226. ## lost.
  227. #
  228. #  check filesystem datafs with path /dev/sdb1
  229. #    start program  = "/bin/mount /data"
  230. #    stop program  = "/bin/umount /data"
  231. #    if failed permission 660 then unmonitor
  232. #    if failed uid "root" then unmonitor
  233. #    if failed gid "disk" then unmonitor
  234. #    if space usage > 80% for 5 times within 15 cycles then alert
  235. #    if space usage > 99% then stop
  236. #    if inode usage > 30000 then alert
  237. #    if inode usage > 99% then stop
  238. #    if read rate > 1 MB/s for 5 cycles then alert
  239. #    if read rate > 500 operations/s for 5 cycles then alert
  240. #    if write rate > 1 MB/s for 5 cycles then alert
  241. #    if write rate > 500 operations/s for 5 cycles then alert
  242. #    if service time > 10 milliseconds for 3 times within 5 cycles then alert
  243. #    group server
  244. #
  245. #
  246. ## Check a file's timestamp. In this example, we test if a file is older
  247. ## than 15 minutes and assume something is wrong if its not updated. Also,
  248. ## if the file size exceed a given limit, execute a script
  249. #
  250. #  check file database with path /data/mydatabase.db
  251. #    if failed permission 700 then alert
  252. #    if failed uid "data" then alert
  253. #    if failed gid "data" then alert
  254. #    if timestamp > 15 minutes then alert
  255. #    if size > 100 MB then exec "/my/cleanup/script" as uid dba and gid dba
  256. #
  257. #
  258. ## Check directory permission, uid and gid.  An event is triggered if the
  259. ## directory does not belong to the user with uid 0 and gid 0.  In addition,
  260. ## the permissions have to match the octal description of 755 (see chmod(1)).
  261. #
  262. #  check directory bin with path /bin
  263. #    if failed permission 755 then unmonitor
  264. #    if failed uid 0 then unmonitor
  265. #    if failed gid 0 then unmonitor
  266. #
  267. #
  268. ## Check a remote host availability by issuing a ping test and check the
  269. ## content of a response from a web server. Up to three pings are sent and
  270. ## connection to a port and an application level network check is performed.
  271. #
  272. #  check host myserver with address 192.168.1.1
  273. #    if failed ping then alert
  274. #    if failed port 3306 protocol mysql with timeout 15 seconds then alert
  275. #    if failed port 80 protocol http
  276. #       and request /some/path with content = "a string"
  277. #    then alert
  278. #
  279. #
  280. ## Check a network link status (up/down), link capacity changes, saturation
  281. ## and bandwidth usage.
  282. #
  283. #  check network public with interface eth0
  284. #    if failed link then alert
  285. #    if changed link then alert
  286. #    if saturation > 90% then alert
  287. #    if download > 10 MB/s then alert
  288. #    if total uploaded > 1 GB in last hour then alert
  289. #
  290. #
  291. ## Check custom program status output.
  292. #
  293. #  check program myscript with path /usr/local/bin/myscript.sh
  294. #    if status != 0 then alert
  295. #
  296. #
  297. ###############################################################################
  298. ## Includes
  299. ###############################################################################
  300. ##
  301. ## It is possible to include additional configuration parts from other files or
  302. ## directories.
  303. #
  304.   include /etc/monit/conf/sys/*
  305. #

2.修改完毕后，新增服务配置
在sys目录下，新增一个conf文件，文件内容如下

  1. check process freeswitch
  2.     with pidfile /usr/local/freeswitch/run/freeswitch.pid
  3.   start program = "/usr/local/freeswitch/bin/freeswitch -nc -nonat"
  4.   stop program = "/usr/local/freeswitch/bin/freeswitch -stop"
  5.   if memory > 1500.0 MB for 5 cycles then alert
  6.   if memory > 1700.0 MB for 5 cycles then alert
  7.   if memory > 2000.0 MB for 5 cycles then restart
  8.   if cpu > 60% for 5 cycles then alert

3.开启服务
/etc/monit/conf/monit -c /etc/monit/conf/monitrc
4.常用命令

  1. monit -t # 配置文件检测
  2. monit # 启动monit daemon
  3. monit -c /var/monit/monitrc # 启动monit daemon时指定配置文件
  4. monit reload # 当更新了配置文件需要重载
  5. monit status # 查看所有服务状态
  6. monit status nginx # 查看nginx服务状态
  7. monit stop all # 停止所有服务
  8. monit stop nginx # 停止nginx服务
  9. monit start all # 启动所有服务
  10. monit start nginx # 启动nginx服务
  11. monit -V # 查看版本

1.monit.service配置

  1. vim /usr/lib/systemd/system/monit.service
  3. [Unit]
  4. Description=monit deamon
  5. After=network.target
  7. [Service]
  8. Type=simple
  9. KillMode=process
  10. ExecStart=/usr/local/bin/monit -I -c /etc/monit/conf/monitrc
  11. ExecStop=/usr/local/bin/monit -c /etc/monit/conf/monitrc quit
  12. ExecReload=/usr/local/bin/monit -c /etc/monit/conf/monitrc reload
  13. Restart=on-abnormal
  14. StandardOutput=null
  16. [Install]
  17. WantedBy=multi-user.target

张书贤

User Image

标签

ajax跨域 API设计 coding exception freeswitch freeswitch，多网卡 frp，局域网穿透，端口转发 Git自动部署 go,浏览器调用，模拟按键操作 jwt jwt方法 laravel monit,centos7,进程监控 mysql时间函数 nginx,小程序 nginx，跨域 python小计 RESTful 设计规范 tar恢复备份，新硬盘 个人常用函数 主从同步 二步验证 伪SQL,binlog,row 元组 内存优化 列表 多网卡 字符串 正则 笛卡尔积 订阅，发布 队列任务，laravel
热门文章
友情链接