NRPE

It is possible to monitor Baruwa Enterprise Edition systems using the NRPE protocol from Nagios. To enable monitoring check the Enable Monitoring checkbox on the System Settings screen of the baruwa-setup utility.

Monitoring points

Depending on the system profile, the following points are available via NRPE.

  • Disk space
  • Uwsgi process
  • Database process
  • Database proxy process
  • Indexer process
  • Cache process
  • Message Queue process
  • Baruwa celery process
  • Baruwa Logging process
  • Mail Scanning process
  • Anti Virus Engine process
  • Mail queue status
  • System Load
  • Security Updates
  • Database cluster status
  • Message queue cluster status
  • TLS/SSL certificate expiry
Name Description Profiles Cluster only
yumupdates Security updates all No
check_diskn Disk partition space check all No
uwsgi Uwsgi service status standalone, web, web and mail No
pgsql Postgresql service status standalone, backend, database No
fabio Fabio service status database, backend, mail, web, web and mail No
patroni Patroni service status database, backend Yes
patroni_lag Patroni member lag database, backend Yes
pgbouncer Pgbouncer service status standalone, database, backend No
sphinx Searchd service status standalone, search index, backend No
memcached Memcached service status standalone, cache, backend No
rabbitmq Rabbitmq service status standalone, message queue, backend No
check_rabbitmq_cluster Rabbitmq cluster status message queue, backend Yes
baruwa Baruwa service status standalone, mail, web and mail No
bsql Baruwa logger process status standalone, mail, web and mail No
baruwascanner BaruwaScanner service status standalone, mail, web and mail No
clamd ClamAV service status standalone, mail, web and mail No
exim_queue MTA inbound queue status standalone, mail, web and mail No
exim_scan_queue MTA inbound queue status standalone, mail, web and mail No
exim_outbound_queue MTA outbound queue status standalone, mail, web and mail No
stunnel Stunnel service status backend, cache, search index, mail, web, web and mail No
consul Consul service status backend, database, mail, web, web and mail No
cacert CA certificate expiry all No
databasecacert Database CA cert expiry check configuration [1] No
stunnelcacert Stunnel CA cert expiry check configuration [1] No
frontendcacert Frontend CA cert expiry check configuration [1] No
certbotcacert Certbot CA cert expiry all No
mailcert Mail TLS cert expiry check configuration [1] No
webcert Web TLS cert expiry check configuration [1] No
databasecert Database TLS cert expiry check configuration [1] No
databaseclientcert Database client cert expiry check configuration [1] No

Adding your own monitoring points

You can add your own NRPE monitoring points by placing a .cfg file in /etc/nrpe.d then reload the nrpe service to activate the monitoring points.

Monitoring services

You can monitor the services by connecting to the actual port, most monitoring systems are able to do this.

Firewall

The firewall port 5666 inbound is open to all, you need to restrict this by allowing access only from your monitoring IP addresses.

Footnotes

[1](1, 2, 3, 4, 5, 6, 7) The NRPE configuration file is /etc/nrpe.d/baruwa.cfg