ubuntu 18版本以上挪到下边用heirloom-mailx来发邮件。

apt-get update
apt-get install mailx
apt-get install mail

sudo apt-get install heirloom-mailx

此时还不能发送外部服务器邮件，需要完成以下配置，修改/etc/nail.rc或者/etc/s-nail.rc(Ubuntu)、/etc/mail.rc(centOS)、vi /etc/nail.rc或者/etc/s-nail.rc

在nail.rc文件末尾添加一下两行代码：

set from=zhangqing@***.com
set smtp=smtp.exmail.qq.com
set smtp-auth-user=zhangqing@***.com
set smtp-auth-password="******"
set smtp-auth=login

按照以上步骤设置完毕之后即可使用mail命令发送邮件，发送邮件有以下三种方式：

• 方法一：交互形式发送邮件
  • mail + 邮箱地址
  • 填写主题
  • 填写内容
  • ctrl + d 结束输入
  • cc代表抄送，回车完成发送
• 方法二：通道形式发送
  • echo “邮件内容” | mail -s “主题” 邮箱地址
• 方法三：读取文件内容发送
  • mail -s “主题” “邮箱地址” < “path/filename”

Test：ping某个ip不通时发送邮件

#!/bin/bash 
yourip=210.*.*.*

pingsh(){
nowdate=`date +%Y%m%d-%H:%M:%S`
if  ping -c 1 $yourip  >/dev/null 2>&1 ; then
        echo " ping $yourip from 192.168.3.87 at $nowdate is good" >> /var/log/pinglog.log
else
echo "ping $yourip from 192.168.3.87 at $nowdate is down!" >> /var/log/pinglog.log
echo "ping $yourip from 192.168.3.87 at $nowdate is down! AND Go to 3.87 start [bash /var/cro.sh]" | mail -s "Bole internet waring!!!" zhangqing@***.com
fi
}

step=2 #间隔的秒数，不能大于60 
for (( i = 0; i < 10; i=(i+step) )); do
  	pingsh 
  	echo $i
	sleep $step 
	#判断如果不能ping通则退出循环，停止该脚本的执行。
	if  ping -c 1 $yourip  >/dev/null 2>&1 ; then
		echo " ping $yourip from 192.168.3.87 at $nowdate is good"
	else
		exit 0
	fi

done
exit 0

step为间隔ping时间。i<10,为执行的总秒数。

heirloom-mailx配置：

配置软件源

ubuntu18.04上无法直接安装heirloom-mailx，需要添加软件源

sudo vi  /etc/apt/sources.list

写入

deb http://cz.archive.ubuntu.com/ubuntu xenial main universe

安装heirloom-mailx

sudo apt-get update
sudo apt install heirloom-mailx

配置外部SMTP

Ubuntu18.04的配置文件为/etc/s-nail.rc，把下面几行放置在最后

set from="123456789@qq.com" 
set smtp="smtps://smtp.qq.com:465"
set smtp-auth-user="123456789@qq.com"
set smtp-auth-password="ahkphxxabcbshabbga"
set smtp-auth=login

注意：第四行password是指的QQ邮箱授权码，不是密码

测试

echo "邮件内容" | s-nail  -s "邮件主题" xxx456@126.com

或者

s-nail  -s "邮件主题" 123xxx@126.com  < result.txt

测试ping不通时发钉钉，恢复通之后发钉钉：


#!/bin/bash
yourip=172.18.188.1
yourip2=192.168.0.1
yourip3=192.168.177.1
yourip4=$1
serverip=192.168.0.49

pingsh4(){
nowdate=`date +%Y%m%d-%H:%M:%S`
nowdate2=`date +%Y%m%d-%H`
if  ping -c 1 $yourip4  >/dev/null 2>&1 ; then
        echo " ping $yourip4 from $serverip at $nowdate is good" >> /var/www/html/ping/log/pinglog-$nowdate2-$yourip4.log
else

    echo "ping $yourip4 from $serverip at $nowdate is down!" >> /var/www/html/ping/log/pinglog-$nowdate2-$yourip4.log

    sleep 1
    if  ping -c 1 $yourip4  >/dev/null 2>&1 ; then
        nowdatedown=`date +%Y%m%d-%H:%M:%S`
        echo " ping $yourip4 from $serverip at $nowdatedown is good" >> /var/www/html/ping/log/pinglog-$nowdate2-$yourip4.log
    return
    else
        echo "ping $yourip4 from $serverip at $nowdatedown is down!" >> /var/www/html/ping/log/pinglog-$nowdate2-$yourip4.log
        python3.6 robot.py "ping $yourip4 from $serverip at $nowdatedown is down!(2th in 3s)"
    return
    fi

fi
}


ping_count=3
pingok=y

pingsh5() {
#ping_result0=`ping  $yourip4 -w 3 -c $ping_count -i 1`  
ping_result=`ping  $yourip4 -w 3 -c $ping_count -i 1   |tail -2 |head -1`
 
   #取成功条数
   succ_ping=`echo $ping_result | gawk '{print $4}'`
   #取失败百分比
   loss_ping=`echo $ping_result | gawk '{print $6}'`
    if [ $succ_ping -eq $ping_count ];then
        echo "本次检测结果---->$yourip4服务器ping检测正常"
        #echo "`date "+%Y%m%d %H:%M:%S"`--->$ping_result0" >>/var/www/html/ping/log/pinglog-$nowdate2-$yourip4.log
        echo "`date "+%Y%m%d %H:%M:%S"`--->$yourip4 server ping is ok,$loss_ping packet loss." >>/var/www/html/ping/log/pinglog-$nowdate2-$yourip4.log

        if [[ $pingok = 'n' ]];then
            python3.6 robot.py "V~Server ($yourip4) ping is ok from $serverip~~~$loss_ping packet loss.`date "+%Y%m%d-%H:%M:%S"`"
            pingok=y
        fi
    else
        echo "本次检测结果---->$yourip4服务器有丢包现象,丢包率为:$loss_ping"
        #echo "`date "+%Y%m%d %H:%M:%S"`--->$ping_result0" >>/var/www/html/ping/log/pinglog-$nowdate2-$yourip4.log
        echo "`date "+%Y%m%d %H:%M:%S"`--->$yourip4 server ping is down,$loss_ping packet loss." >>/var/www/html/ping/log/pinglog-$nowdate2-$yourip4.log
        if [[ $pingok = 'y' ]] && [[$loss_ping = '100%']];then 
            python3.6 robot.py "X~Server ($yourip4) ping is bad from $serverip!!!$loss_ping packet loss.`date "+%Y%m%d-%H:%M:%S"`"
            pingok=n
        fi
        
    fi

}


step=2 #间隔的秒数，不能大于60
for (( i = 0; i < 1000000000; i=(i+1) ))
do
    pingsh5	
    echo $i
    sleep 3
    datetimerm=59
    datetimes=50

        #判断如果不能ping通则sleep100s。
    
    if [ $(date +%M) -eq "$datetimerm" ]
    then
    	echo $(date +%M:%S)
        mv ./log/pinglog-* ./log/oldlog/
    	#rm ./log/pinglog-*.log
        sleep 65
    fi

done
exit 0

解析域名写入到log，分析域名解析到的ip地址。

#!/bin/bash
#yourip=39.102.117.166


step=2 #间隔的秒数，不能大于60
for (( i = 0; i < 100000000; i=(i+1) ))
do

        str001=$(nslookup d105xpbtjj9cjp.cloudfront.net 172.18.188.3)
    echo "$str001"  >> ./log/nslookuplog172181883.log
                    
    str003=$(nslookup d105xpbtjj9cjp.cloudfront.net 10.161.0.3)
    echo "$str003"  >> ./log/nslookuplog1016103.log

        str005=$(nslookup d5kwyqpbdauu5.cloudfront.net 172.18.188.3)
    echo "$str005"  >> ./log/nslookuplog172181883-d5k.log
                    
    str007=$(nslookup d5kwyqpbdauu5.cloudfront.net 10.161.0.3)
    echo "$str007"  >> ./log/nslookuplog1016103-d5k.log


        str008=$(nslookup d2rargdj3vlbg6.cloudfront.net 172.18.188.3)
    echo "$str008"  >> ./log/nslookuplog172181883-d2r.log
                    
    str009=$(nslookup d2rargdj3vlbg6.cloudfront.net 10.161.0.3)
    echo "$str009"  >> ./log/nslookuplog1016103-d2r.log

    echo $i
        sleep 10 
    
    #tiqu-ip
    cat ./log/nslookuplog172181883.log |grep -E 'Add|Name' > ./log/nslookuplog172181883ip.log
    cat ./log/nslookuplog1016103.log |grep -E 'Add|Name' > ./log/nslookuplog1016103ip.log
    cat ./log/nslookuplog172181883-d5k.log |grep -E 'Add|Name' > ./log/nslookuplog172181883-d5k-ip.log
    cat ./log/nslookuplog1016103-d5k.log |grep -E 'Add|Name' > ./log/nslookuplog1016103-d5k-ip.log
    cat ./log/nslookuplog172181883-d2r.log |grep -E 'Add|Name' > ./log/nslookuplog172181883-d2r-ip.log
    cat ./log/nslookuplog1016103-d2r.log |grep -E 'Add|Name' > ./log/nslookuplog1016103-d2r-ip.log

    #quchong-ip
    cat ./log/nslookuplog172181883ip.log |sort |uniq > ./log/nslookuplog172181883ip-uniq.log
    cat ./log/nslookuplog1016103ip.log |sort |uniq > ./log/nslookuplog1016103ip-uniq.log
    cat ./log/nslookuplog172181883-d5k-ip.log |sort |uniq > ./log/nslookuplog172181883-d5k-ip-uniq.log
    cat ./log/nslookuplog1016103-d5k-ip.log |sort |uniq > ./log/nslookuplog1016103-d5k-ip-uniq.log
    cat ./log/nslookuplog172181883-d2r-ip.log |sort |uniq > ./log/nslookuplog172181883-d2r-ip-uniq.log
    cat ./log/nslookuplog1016103-d2r-ip.log |sort |uniq > ./log/nslookuplog1016103-d2r-ip-uniq.log

    #end
    cat ./log/*-uniq.log |sort |uniq > ./log/end.log

done
exit 0

获取到Add行的内容并写到log文件。

cat nslookuplog1.log|grep -E 'Add' > nslookuplog1-ip.log

安装比较简单，官网安装即可：

https://www.zabbix.com/documentation/4.0/zh/manual/installation/install_from_packages/debian_ubuntu

钉钉报警：

cd /usr/lib/zabbix/alertscripts

创建robot.py文件

#!/usr/bin/python3.6
# -*- coding: utf-8 -*-

import requests
import json
import sys
import os

headers = {'Content-Type': 'application/json;charset=utf-8'}
api_url = "https://oapi.dingtalk.com/robot/send?access_token=******" 
#上面机器人里面复制内容


def msg(text):
    json_text= {
        "msgtype": "text",
        "at": {
            "atMobiles": [
                    "1821011****"
            ],
            "isAtAll": False
        },
        "text": {
            "content": text
        }
    }
    r=requests.post(api_url,json.dumps(json_text),headers=headers).content
    print(r)

#msg(12345)


if __name__ == '__main__':
    #text = sys.argv[1]+sys.argv[2]+sys.argv[3]+sys.argv[4]
    text0=sys.argv[1:]  #sys.argv[]获取外部参数，返回为一个列表list组。0为目录
    text=' '.join(text0)
    msg(text)

再在本目录下创建一个robot.sh文件，返回格式修改后的报警信息，zabbix调用此文件

#!/bin/bash
  
stri=$1$2$3$4$5$6$7
stri1=${stri} | sed 's/ //g'
stri2=${stri1} | sed 's/(//g'
stri3=${stri2} | sed 's/>//g'
python3.6 /usr/lib/zabbix/alertscripts/robot.py $stri

5.0版本后的zabbix，直接调用py脚本。

[root@mzl ~]# cat /usr/lib/zabbix/alertscripts/zq1.py 
#!/usr/bin/python
# -*- coding: utf-8 -*-

import requests
import json
import sys

url = 'https://oapi.dingtalk.com/robot/send?access_token=************'

text0=sys.argv[1:]  #sys.argv[]获取外部参数，返回为一个列表list组。0为目录
text1=' '.join(text0)
text2=sys.argv[1]


headers = {

    "Content-Type": "application/json",
    "Chartset": "utf-8"
}

# 要发送的文本是json格式
request_data = {
    "msgtype": "markdown",
    "markdown": {"title": "{}".format(text2),
                 "text": "{}".format(text1) 
                 },
    "at": {
        "atMobiles": [],
        "isAtAll": True
    }

}

# 把json转变为字符串格式数据
send_data = json.dumps(request_data)
# 这个是发送post请求，请求钉钉接口
response = requests.post(url=url, headers=headers, data=send_data)
# 讲求成功后返回的数据
content = response.content.decode()
# 打印
print(content)

最后在zabbix页面来调用此sh文件即可。如下图：填上需要传入的报警信息{ALERT.MESSAGE}

写入log日志web展示

1、首先Apache创建一个目录list的web展示。http://www.laihp.top/zqb/?p=317

2、robot.sh用于处理报警信息给robot.py钉钉及把大于1M的log文件放到另外一个目录下。

root@zqubuntu:/usr/lib/zabbix/alertscripts# ll
total 20
drwxr-xr-x 2 root root 4096 Dec  3 16:19 ./
drwxr-xr-x 4 root root 4096 Nov 16  2018 ../
-rwxr-xr-x 1 root root  904 Dec  6  2018 robot.py*
-rwxr-xr-x 1 root root  238 Dec  2 18:35 robot.sh*

代码如下：

[scfc id=”scfctxt” title=”+++robot.sh—“]

#!/bin/bash


#####
start1=$(date +%y-%m-%d-%H%M%S)

filename=/var/www/html/zabbixalert.log

filesize=`ls -l $filename | awk '{ print $5 }'`

#delname=`ls -R /data/share/.recycle/ |awk '{print $0}'`

maxsize=$((1024*10))

if [ $filesize -gt $maxsize ]

then
                echo "mvthisfile---------------------" >> /var/www/html/zabbixalert.log
                cp /var/www/html/zabbixalert.log /var/www/html/zabbixhistory/zabbixalert.log$start1.log
                echo "newfile---------------------" > /var/www/html/zabbixalert.log
                chmod 777 /var/www/html/zabbixalert.log
else
                echo "thislogfilesize----[$filesize B]" >> /var/www/html/zabbixalert.log
fi

#####


stri=$1$2$3$4$5$6$7
stri1=${stri} | sed 's/ //g'
stri2=${stri1} | sed 's/(//g'
stri3=${stri2} | sed 's/>//g'
python3.6 /usr/lib/zabbix/alertscripts/robot.py $stri
echo $stri >> /var/www/html/zabbixalert.log

[/scfc]

运行效果：

zabbix-agent 安装

首先在客户端安装agent：

#如果主机联网的话，可以选择直接yum安装
root@ubuntu:~# apt install zabbix-agent
root@ubuntu:~# vim  /etc/zabbix/zabbix_agentd.conf 

LogFileSize=0
EnableRemoteCommands=1 #允许远程执行命令
LogRemoteCommands=1    #开启远程操作日志
Server=zabbix-server-ip    #被动模式，ZABBIX服务器IP地址
ServerActive=zabbix-server-ip     #主动模式，ZABBIX服务器IP地址
Hostname=localhost-ip     #主机名或IP地址

root@ubuntu:~# systemctl restart zabbix-agent
root@ubuntu:~# systemctl enable zabbix-agent

然后再zabbix添加该客户端即可

概述

在使用Zabbix监控ICMP多个主机时，会出现Zabbix icmp pinger processes more than 75% busy的报错。主要原因为ICMP的线程太少导致，可以通过更改配置文件进行调优。

解决方式

编辑/etc/zabbix/zabbix_server.conf文件，将StartPingers更改为合适的大小值。

重启Zabbix服务

附一个群晖NAS的模板：zbx_export_SynoDiskStation_1