Skip to main content

IT Sanity

Search This Blog

I'm Back

October 09, 2012

Get link
Facebook
Twitter
Pinterest
Email
Other Apps

After much time away, I'm picking up where I left off...which is to say...just starting. More Posts to soon follow.

Get link
Facebook
Twitter
Pinterest
Email
Other Apps

Comments

Post a Comment

Popular Posts

Hyper-V Template for Zabbix

Well after after a few false starts I have my template for Hyper-V working in Zabbix. The template will auto discover virtual machines running on a Hyper-V 3.0 server. Template will monitor status, CPU Usage, Memory usage, and uptime. I have tested with Zabbix 2.0 and Windows 2012 Server and Hyper-V Server 2012. Still working on Windows 2008 R2. Link to zabbix template: Hyper-V Zabix Template Link to powershell script: HyperV_Status.ps1 You will need to install the Power Shell script to the Hyper-V Server and update the Zabbix Agent configuration. Settings for zabbix_agentd.conf: UserParameter=hyperv.discover,powershell.exe -file "C:\Program Files\Zabbix\HyperV_Status.ps1" UserParameter=hyperv.check[*],powershell.exe -file "C:\Program Files\Zabbix\HyperV_Status.ps1" $1 "$2" Example of CPU Usage Graph

Windows Disk Monitor for Zabbix

With a Windows 2012 Cluster Microsoft introduced a new file system - CSVFS. I found that currently the zabbix agent does not return this file system when using the vfs.fs.discovery low level discovery for the file system. Additionally the low level discovery will not work on volumes that have been mapped to a directory instead of a driver letter. So I've written a powershell script that handles finding file system and monitoring for drive capacity and free space: param( [Parameter(Mandatory=$False)] [string]$QueryName, [string]$FSName ) if ($QueryName -eq '') { $colItems = gwmi win32_volume | select Name,FileSystem write-host "{" write-host " `"data`":[" write-host foreach ($objItem in $colItems) { $objItem.Name = $objItem.Name -replace "\\\\\?\\Volume{","Volume-" $objItem.Name = $objItem.Name -replace "}\\","`+" $objItem.Name = $objI

Monitoring VPN Logins for with Logstash

Most of us have heard the story about the programer who outsourced his job to China . He was caught when an internal security review noticed his login account coming from an IP address which originated from China. While this story was making the rounds in our IT dungeon I was asked if there was a way to track our VPN logins to see if we had any unusual login sites. I did a little work and ended up with a pretty descent dashboard to show where our remote users were login in from. Our dashboard shows successful and failed logins over time and the location of the remote user logging in. First things first: Logstash . I love this tool! If aren't using, you need to start. Log monitor and analysis is a tough nut to crack, but logstash is a great tool to make a go off monitoring gigabytes of log data. Logstash does have a pretty step learning curve. I would recommend going through the documentation on Logstash site to familiarize yourself with how it works. I will show how to

Powered by Blogger