Introduction
This blog provide a configuration overview of how to integrate Nagios with SAP IT Operations Analytics (SAP ITOA). Nagios comes with syslog integration by default. The target is to configure Nagios to forward notifications, alerts and performance information to SAP ITOA using syslog-ng technology.
In SAP ITOA the attribute editor can be used to define attributes out of the streamed content which can then be used to do analytics in stories and charts. Some configuration examples based on streamed content are also provided below. The described solution was tested with the following components and versions:
Component |
Version |
SAP ITOA |
2.2.0 (running on SAP HANA 1.0 SPS12) |
Nagios |
4.1.1 (running on SLES 11.3 and using syslog-ng 2.0.9) |
Configuration Steps
Preconditions
- SAP IT Operations Analytics is installed and configured (For more details check the Administration Guide)
- Plugin ITOA Syslog Socket Input and ITOA Attribute Editor are activated
Action |
Create Bucket
Login with an user (Admin or Expert role assigned) to SAP ITOA application (http://<Hostname SAP ITOA>:<Port>/sap/dci/core) and create a new bucket:
Bucket Name |
NAGIOS |
Plugin Activated |
ITOA Syslog Socket Input
ITOA Attribute Editor |
Syslog Server Port |
1520 |
Communication Protocol |
TCP |
Note: For more details check the Administration Guide |
Forward Nagios Messages
Login to the operating system, Nagios instance is running (e.g. using PuTTY) and add the following syslog-ng configuration:
/etc/syslog-ng/syslog-ng.conf |
source s_nagios_perf {
file("/usr/local/nagios/var/host-perfdata" follow_freq(1) flags() log_prefix("nagios: "));
file("/usr/local/nagios/var/service-perfdata" follow_freq(1) flags() log_prefix("nagios: "));
};
filter f_nagios { program("nagios"); };
destination d_itoa_nagios { tcp("<SAP ITOA Adapter Instance>" port(1520) ); };
log { source(src); filter(f_nagios); destination(d_itoa_nagios); };
log { source(s_nagios_perf); destination(d_itoa_nagios); }; |
Configuration Description
Attribute |
Description |
s_nagios_perf |
Identifier name for Nagios performance data source |
/usr/local/nagios |
Nagios Installation Path |
f_nagios |
Identifier name for filter configuration |
d_itoa_nagios |
Identifier name for SAP ITOA destination |
tcp |
Network protocol of the desired bucket (Communication Protocol) |
<SAP ITOA Adapter Instance> |
SAP ITOA Adapter Hostname / IP Address |
1520 |
Network port of the desired bucket (Syslog Server Port) |
src |
Standard syslog-ng source |
Save the configuration and restart Syslog service using the following command:
service syslog restart
|
Verify Data Streaming
Login with an user (Admin or Expert role assigned) to SAP ITOA application (http://<Hostname SAP ITOA>:<Port>/sap/dci/core) and verify if the bucket (NAGIOS) receives Nagios messages (Streaming Content). |
Attribute Parsing
In the bucket (Table View) choose (mark) a desired messages and press the button Edit Attributes (former: GET MORE INSIGHTS) and configure the desired attributes.
In the following section some configuration examples are described.
Example Event 1
<13>Apr 21 10:03:36 nagios_server.abc.corp nagios: [SERVICEPERFDATA] 1492769016 nagios_client.abc.corp OS Ping 4.237 0.000 PING OK - Packet loss = 0%, RTA = 228.42 ms rta=228.423996ms;3000.000000;5000.000000;0.000000 pl=0%;80;100;0
|
Regular Expression 1
: \[{nagios_msg_type}\]\t{unix_time}\t{hostname}\t
|
Attribute Definition 1
Attribute Name |
SQL DATA Type |
Dimension |
Attribute RegExp |
nagios_msg_type |
NVARCHAR |
50 |
[A-Z ]* |
unix_time |
INTEGER |
n/a |
\d{1,13} |
|
Example Event 2
<14>Apr 21 10:08:37 nagios_server.abc.corp nagios: SERVICE ALERT: nagios_client.abc.corp;CPU Usage;OK;SOFT;3;CPU OK : user=3% system=0% iowait=2% idle=95%
|
Regular Expression 2
: {nagios_msg_type}: {hostname};
|
Attribute Definition 2
Attribute Name |
SQL DATA Type |
Dimension |
Attribute RegExp |
nagios_msg_type |
NVARCHAR |
50 |
[A-Z ]* |
|
|
Note:
- The attribute hostname is a predefined attribute regular expression, which is not required to be defined.
- The way how Nagios meassages (streaming content) are created depends to the Nagios plugins. In addition it is possible to change the format of the streaming content (e.g. tab separation, semicolon separation, etc...). For further information, please check the Nagios documentation.
|
Further Information