如何在CentOS 7上使用TICK监视系统指标

介绍

• T elegraf从各种来源收集时间序列数据。
• nfluxDB存储时间序列数据。
• C hronograf可视化和图形化时间序列数据。
• K apacitor提供警报并检测时间序列数据中的异常。

先决条件

• 一个CentOS 7服务器按照CentOS 7初始服务器设置指南设置 ，包括sudo非root用户和防火墙。
• 如果您希望按照第7步中所述保护Chronograf用户界面，您需要一个GitHub组织的GitHub帐户。 按照本教程创建一个GitHub组织。

第1步 - 添加TICK存储库

sudo vi /etc/yum.repos.d/influxdata.repo

[influxdb]
name = InfluxData Repository - RHEL $releasever
baseurl = https://repos.influxdata.com/rhel/$releasever/$basearch/stable
enabled = 1
gpgcheck = 1
gpgkey = https://repos.influxdata.com/influxdb.key

第2步 - 安装InfluxDB并配置身份验证

sudo yum install influxdb

sudo systemctl start influxdb

systemctl status influxdb

[secondary_label Output
    ● influxdb.service - InfluxDB is an open-source, distributed, time series database
       Loaded: loaded (/usr/lib/systemd/system/influxdb.service; enabled; vendor preset: disabled)
       Active: active (running) since Tue 2017-02-07 13:19:31 EET; 2min 46s ago
         Docs: https://docs.influxdata.com/influxdb/
     Main PID: 14290 (influxd)

influx

CREATE USER "sammy" WITH PASSWORD 'sammy_admin' WITH ALL PRIVILEGES

show users

Output    user  admin
    ----  -----
    sammy true

exit

sudo vi /etc/influxdb/influxdb.conf

...
    [http]
      # Determines whether HTTP endpoint is enabled.
      # enabled = true

      # The bind address used by the HTTP service.
      # bind-address = ":8086"

      # Determines whether HTTP authentication is enabled.
      auth-enabled = true
...

sudo systemctl restart influxdb

第3步 - 安装和配置Telegraf

sudo yum install telegraf

sudo vi /etc/telegraf/telegraf.conf

    [[outputs.influxdb]]
      ## The full HTTP or UDP endpoint URL for your InfluxDB instance.
      ## Multiple urls can be specified as part of the same cluster,
      ## this means that only ONE of the urls will be written to each interval.
      # urls = ["udp://localhost:8089"] # UDP endpoint example
      urls = ["http://localhost:8086"] # required
      ## The target database for metrics (telegraf will create it if not exists).
      database = "telegraf" # required

      ...

      ## Write timeout (for the InfluxDB client), formatted as a string.
      ## If not provided, will default to 5s. 0s means no timeout (not recommended).
      timeout = "5s"
      username = "sammy"
      password = "sammy_admin"
      ## Set the user agent for HTTP POSTs (can be useful for log differentiation)
      # user_agent = "telegraf"
      ## Set UDP payload size, defaults to InfluxDB UDP Client default (512 bytes)
      # udp_payload = 512

sudo systemctl start telegraf

systemctl status telegraf

Output    ● telegraf.service - The plugin-driven server agent for reporting metrics into InfluxDB
       Loaded: loaded (/usr/lib/systemd/system/telegraf.service; enabled; vendor preset: disabled)
       Active: active (running) since Tue 2017-02-07 13:32:36 EET; 3min 27s ago
         Docs: https://github.com/influxdata/telegraf
     Main PID: 14412 (telegraf)

influx -username 'sammy' -password 'sammy_admin'

show databases

Output    name: databases
    name
    ----
    _internal
    telegraf

use telegraf

show measurements

Output    name: measurements
    name
    ----
    cpu
    disk
    diskio
    kernel
    mem
    processes
    swap
    system

• Apache
• Cassandra
• Docker
• Elasticsearch
• Graylog
• IPtables
• MySQL
• PostgreSQL
• Redis
• SNMP
• 和许多其他

exit

第4步 - 安装Kapacitor

sudo yum install kapacitor

sudo vi /etc/kapacitor/kapacitor.conf

# Multiple InfluxDB configurations can be defined.
# Exactly one must be marked as the default.
# Each one will be given a name and can be referenced in batch queries and InfluxDBOut nodes.
[[influxdb]]
  # Connect to an InfluxDB cluster
  # Kapacitor can subscribe, query and write to this cluster.
  # Using InfluxDB is not required and can be disabled.
  enabled = true
  default = true
  name = "localhost"
  urls = ["http://localhost:8086"]
  username = "sammy"
  password = "sammy_admin"
...

sudo systemctl daemon-reload
sudo systemctl start kapacitor

kapacitor list tasks

Output    ID                            Type      Status    Executing Databases and Retention Policies

第5步 - 安装和配置Chronograf

wget https://dl.influxdata.com/chronograf/releases/chronograf-1.2.0~beta3.x86_64.rpm
sudo yum localinstall chronograf-1.2.0~beta3.x86_64.rpm

sudo systemctl start chronograf

sudo firewall-cmd --zone=public --permanent --add-port=8888/tcp
sudo firewall-cmd --reload

• HipChat
• OpsGenie
• PagerDuty
• Sensu
• 松弛
• SMTP
• 谈论
• 电报
• 维多利亚

第6步 - 配置警报

{{ .ID }} is {{ .Level }} value: {{ index .Fields "value" }}

{
    "Name":"system",
    "TaskName":"chronograf-v1-50c67090-d74d-42ba-a47e-45ba7268619f",
    "Group":"nil",
    "Tags":{
        "host":"centos-tick"
    },
    "ID":"TEST:nil",
    "Fields":{
        "value":1.25
    },
    "Level":"CRITICAL",
    "Time":"2017-03-08T12:09:30Z",
    "Message":"TEST:nil is CRITICAL value: 1.25"
}

dd if=/dev/zero of=/dev/null

第7步 - 使用OAuth保护Chronograf

1. 使用Chronograf填充应用程序名称或合适的描述性名称。
2. 对于首页网址 ，请使用http:// your_server_ip :8888 。
3. 使用http:// your_server_ip :8888/oauth/github/callback填写授权回调网址 。
4. 单击注册应用程序以保存设置。
5. 复制下一个屏幕上提供的客户端ID和客户端密钥值。

sudo vi /usr/lib/systemd/system/chronograf.service

[Service]
User=chronograf
Group=chronograf
ExecStart=/usr/bin/chronograf --host 0.0.0.0 --port 8888 -b /var/lib/chronograf/chronograf-v1.db -c /usr/share/chronograf/canned -t 'secret_token' -i 'your_github_client_id' -s 'your_github_client_secret' -o 'your_github_organization'
KillMode=control-group
Restart=on-failure

sudo systemctl daemon-reload
sudo systemctl restart chronograf

结论