https://www.cnblogs.com/fsckzy/p/12614176.html
黑盒探测,---类似于银针试毒,这个插件是装在服务器本身
1、启动插件
2、prometheus增加targets
提前创建相应的目录,文件提前创建/data/prometheus/blackbox_exporter/blackbox.yml
# 官方默认的配置文件
modules:
http_2xx:
prober: http
http_post_2xx:
prober: http
http:
method: POST
tcp_connect:
prober: tcp
pop3s_banner:
prober: tcp
tcp:
query_response:
- expect: "^+OK"
tls: true
tls_config:
insecure_skip_verify: false
ssh_banner:
prober: tcp
tcp:
query_response:
- expect: "^SSH-2.0-"
irc_banner:
prober: tcp
tcp:
query_response:
- send: "NICK prober"
- send: "USER prober prober prober :prober"
- expect: "PING :([^ ]+)"
send: "PONG ${1}"
- expect: "^:[^ ]+ 001"
icmp:
prober: icmp
2、docker启动,端口9115
docker run --rm -d -p 9115:9115 --name blackbox_exporter -v /usr/share/zoneinfo/Asia/Shanghai:/etc/localtime:ro -v /data/prometheus/blackbox_exporter/blackbox.yml:/config/blackbox.yml prom/blackbox-exporter:master --config.file=/config/blackbox.yml
3、prometheus增加target,编辑配置文件
#http检测配置
- job_name: 'blackbox'
scrape_interval: 10s
metrics_path: /probe
params:
module: [http_2xx]
static_configs:
- targets:
- http://baidu.com
- https://www.baidu.com/
- http://www.ddriven-tech.com
- https://misi.gooagoo.com
- https://passport.gooagoo.com/
- files.gooagoo.com
- mis.gooagoo.com
#- http://abcdef.test.goago.cn
relabel_configs:
- source_labels: [__address__]
target_label: __param_target
- source_labels: [__param_target]
target_label: instance
- target_label: __address__
replacement: 192.168.2.241:9115 # blackbox安装在哪台机器
#tcp检测配置
- job_name: blackbox_tcp
metrics_path: /probe
params:
module: [tcp_connect]
static_configs:
- targets:
- 192.168.1.2:280
- 192.168.1.2:7013
relabel_configs:
- source_labels: [__address__]
target_label: __param_target
- source_labels: [__param_target]
target_label: instance
- target_label: __address__
replacement: 192.168.1.99:9115 # Blackbox exporter.
4、添加报警规则
###########状态码监控##############
- alert: 状态码检测
expr: probe_http_status_code{job="blackbox"} != 200
for: 5m
labels:
severity: "毁灭级"
annotations:
summary: "请求URL状态码非200"
description: "请求{{$.Labels.instance}}状态码非200-可能挂了,请麻溜瞅瞅"
- alert: 证书过期时间检测
expr: probe_ssl_earliest_cert_expiry {job="blackbox"} -time() < 86400 * 30
for: 5m
labels:
severity: "毁灭级"
annotations:
summary: "证书过期时间不足30天"
description: "{{$.Labels.instance}}证书还有30天到期,请及时更换"
![](https://img.haomeiwen.com/i23590632/1434a97fd58b639d.png)
参考文档
https://blog.csdn.net/qq_25934401/article/details/84325356
网友评论