icinga2-2.13.2/doc/06-distributed-monitoring.md

98 object Endpoint "icinga2-master1.localdomain" {
102 object Endpoint "icinga2-satellite1.localdomain" {
107   endpoints = [ "icinga2-master1.localdomain" ]
111   endpoints = [ "icinga2-satellite1.localdomain" ]
268 Here is an example of a master setup for the `icinga2-master1.localdomain` node on CentOS 7:
271 [root@icinga2-master1.localdomain /]# icinga2 node wizard
281 Please specify the common name (CN) [icinga2-master1.localdomain]: icinga2-master1.localdomain
283 Checking for existing certificates for common name 'icinga2-master1.localdomain'...
389 …ate a ticket on the master node `icinga2-master1.localdomain` for the agent `icinga2-agent1.locald…
392 [root@icinga2-master1.localdomain /]# icinga2 pki ticket --cn icinga2-agent1.localdomain
399 [root@icinga2-master1.localdomain /]# vim /etc/icinga2/conf.d/api-users.conf
406 [root@icinga2-master1.localdomain /]# systemctl restart icinga2
408 Retrieve the ticket on the master node `icinga2-master1.localdomain` with `curl`, for example:
410 …[root@icinga2-master1.localdomain /]# curl -k -s -u client-pki-ticket:bea11beb7b810ea9ce6ea -H 'Ac…
411 …OST 'https://localhost:5665/v1/actions/generate-ticket' -d '{ "cn": "icinga2-agent1.localdomain" }'
458 [root@icinga2-master1.localdomain /]# icinga2 ca list
461 …c3fd421fbb349a6e7303b6033ec1772850 | 2017/09/06 17:20:02 |        | CN = icinga2-agent2.localdomain
467 [root@icinga2-master1.localdomain /]# icinga2 ca list --all
470 …02529cded7c8182abf96740660caa09727 | 2017/09/06 17:02:40 | *      | CN = icinga2-agent1.localdomain
471 …c3fd421fbb349a6e7303b6033ec1772850 | 2017/09/06 17:20:02 |        | CN = icinga2-agent2.localdomain
480 [root@icinga2-master1.localdomain /]# icinga2 ca sign 71700c28445109416dd7102038962ac3fd421fbb349a6…
481 information/cli: Signed certificate for 'CN = icinga2-agent2.localdomain'.
521 …ing a ticket on the master node `icinga2-master1.localdomain` for the agent `icinga2-agent1.locald…
524 [root@icinga2-master1.localdomain /]# icinga2 pki ticket --cn icinga2-agent1.localdomain
530 Start the wizard on the agent `icinga2-agent1.localdomain`:
533 [root@icinga2-agent1.localdomain /]# icinga2 node wizard
552 Please specify the common name (CN) [icinga2-agent1.localdomain]: icinga2-agent1.localdomain
555 …fy the direct parent for this node. This could be your primary master `icinga2-master1.localdomain`
560 Master/Satellite Common Name (CN from your master/satellite node): icinga2-master1.localdomain
574 Add the connection details for `icinga2-master1.localdomain`.
595  Subject:     CN = icinga2-master1.localdomain
622  (Hint: # icinga2 pki ticket --cn 'icinga2-agent1.localdomain'):
658 Local zone name [icinga2-agent1.localdomain]:
706 [root@icinga2-agent1.localdomain /]# systemctl restart icinga2
1014 * `icinga2-master1.localdomain` is the configuration master in this scenario.
1015 * `icinga2-agent1.localdomain` acts as agent which receives command execution messages via command …
1022 [root@icinga2-agent1.localdomain /]# vim /etc/icinga2/zones.conf
1024 object Endpoint "icinga2-master1.localdomain" {
1028 object Endpoint "icinga2-agent1.localdomain" {
1039 The `master` zone is a parent of the `icinga2-agent1.localdomain` zone:
1042 [root@icinga2-agent1.localdomain /]# vim /etc/icinga2/zones.conf
1045   endpoints = [ "icinga2-master1.localdomain" ] //array with endpoint names
1048 object Zone "icinga2-agent1.localdomain" {
1049   endpoints = [ "icinga2-agent1.localdomain" ]
1061 [root@icinga2-agent1.localdomain /]# vim /etc/icinga2/icinga2.conf
1078 [root@icinga2-agent1.localdomain /]# icinga2 daemon -C
1079 [root@icinga2-agent1.localdomain /]# systemctl restart icinga2
1081 [root@icinga2-master1.localdomain /]# icinga2 daemon -C
1082 [root@icinga2-master1.localdomain /]# systemctl restart icinga2
1092 [root@icinga2-master1.localdomain /]# mkdir -p /etc/icinga2/zones.d/master
1110 [root@icinga2-master1.localdomain /]# cd /etc/icinga2/zones.d/master
1111 [root@icinga2-master1.localdomain /etc/icinga2/zones.d/master]# vim hosts.conf
1113 object Host "icinga2-agent1.localdomain" {
1125 [root@icinga2-master1.localdomain /etc/icinga2/zones.d/master]# vim services.conf
1141 [root@icinga2-master1.localdomain /]# mkdir -p /etc/icinga2/zones.d/global-templates
1142 [root@icinga2-master1.localdomain /]# vim /etc/icinga2/zones.d/global-templates/commands.conf
1152 [root@icinga2-master1.localdomain /]# icinga2 daemon -C
1157 [root@icinga2-master1.localdomain /]# systemctl restart icinga2
1162 * Icinga 2 validates the configuration on `icinga2-master1.localdomain` and restarts.
1163 * The `icinga2-master1.localdomain` node schedules and executes the checks.
1164 * The `icinga2-agent1.localdomain` node receives the execute command event with additional command …
1165 * The `icinga2-agent1.localdomain` node maps the command parameters to the local check command, exe…
1212 * `icinga2-master1.localdomain` is the configuration master in this scenario.
1213 * `icinga2-satellite1.localdomain` acts as satellite which receives configuration from the master. …
1220 [root@icinga2-satellite1.localdomain /]# vim /etc/icinga2/zones.conf
1222 object Endpoint "icinga2-master1.localdomain" {
1226 object Endpoint "icinga2-satellite1.localdomain" {
1236 [root@icinga2-agent2.localdomain /]# vim /etc/icinga2/zones.conf
1239   endpoints = [ "icinga2-master1.localdomain" ] //array with endpoint names
1243   endpoints = [ "icinga2-satellite1.localdomain" ]
1249 Edit the `api` feature on the satellite `icinga2-satellite1.localdomain` in
1254 [root@icinga2-satellite1.localdomain /]# vim /etc/icinga2/features-enabled/api.conf
1268 [root@icinga2-satellite1.localdomain /]# icinga2 daemon -C
1269 [root@icinga2-satellite1.localdomain /]# systemctl restart icinga2
1271 [root@icinga2-master1.localdomain /]# icinga2 daemon -C
1272 [root@icinga2-master1.localdomain /]# systemctl restart icinga2
1282 `icinga2-master1.localdomain` and create a new directory with the same
1286 [root@icinga2-master1.localdomain /]# mkdir -p /etc/icinga2/zones.d/satellite
1298 [root@icinga2-master1.localdomain /]# cd /etc/icinga2/zones.d/satellite
1299 [root@icinga2-master1.localdomain /etc/icinga2/zones.d/satellite]# vim hosts.conf
1301 object Host "icinga2-satellite1.localdomain" {
1312 [root@icinga2-master1.localdomain /etc/icinga2/zones.d/satellite]# vim services.conf
1315   host_name = "icinga2-satellite1.localdomain"
1324 [root@icinga2-master1.localdomain /]# icinga2 daemon -C
1330 [root@icinga2-master1.localdomain /]# systemctl restart icinga2
1335 * Icinga 2 validates the configuration on `icinga2-master1.localdomain`.
1337 * The `icinga2-master1.localdomain` node sends a config update event to all endpoints in the same o…
1338 * The `icinga2-satellite1.localdomain` node accepts config and populates the local zone config stor…
1339 * The `icinga2-satellite1.localdomain` node validates the configuration and automatically restarts.
1389 * `icinga2-master1.localdomain` is the primary master node.
1390 * `icinga2-agent1.localdomain` and `icinga2-agent2.localdomain` are two child nodes as agents.
1394 * Set up `icinga2-master1.localdomain` as [master](06-distributed-monitoring.md#distributed-monitor…
1395 * Set up `icinga2-agent1.localdomain` and `icinga2-agent2.localdomain` as [agent](06-distributed-mo…
1400 [root@icinga2-master1.localdomain /]# vim /etc/icinga2/zones.conf
1402 object Endpoint "icinga2-master1.localdomain" {
1406 object Endpoint "icinga2-agent1.localdomain" {
1411 object Endpoint "icinga2-agent2.localdomain" {
1417   endpoints = [ "icinga2-master1.localdomain" ]
1420 object Zone "icinga2-agent1.localdomain" {
1421   endpoints = [ "icinga2-agent1.localdomain" ]
1426 object Zone "icinga2-agent2.localdomain" {
1427   endpoints = [ "icinga2-agent2.localdomain" ]
1444 If you specify the `host` attribute in the `icinga2-master1.localdomain` endpoint object,
1450 [root@icinga2-agent1.localdomain /]# vim /etc/icinga2/zones.conf
1452 object Endpoint "icinga2-master1.localdomain" {
1456 object Endpoint "icinga2-agent1.localdomain" {
1461   endpoints = [ "icinga2-master1.localdomain" ]
1464 object Zone "icinga2-agent1.localdomain" {
1465   endpoints = [ "icinga2-agent1.localdomain" ]
1479 [root@icinga2-agent2.localdomain /]# vim /etc/icinga2/zones.conf
1481 object Endpoint "icinga2-master1.localdomain" {
1485 object Endpoint "icinga2-agent2.localdomain" {
1490   endpoints = [ "icinga2-master1.localdomain" ]
1493 object Zone "icinga2-agent2.localdomain" {
1494   endpoints = [ "icinga2-agent2.localdomain" ]
1515 [root@icinga2-master1.localdomain /]# mkdir -p /etc/icinga2/zones.d/master
1521 [root@icinga2-master1.localdomain /]# cd /etc/icinga2/zones.d/master
1522 [root@icinga2-master1.localdomain /etc/icinga2/zones.d/master]# vim hosts.conf
1524 object Host "icinga2-agent1.localdomain" {
1531 object Host "icinga2-agent2.localdomain" {
1542 [root@icinga2-master1.localdomain /etc/icinga2/zones.d/master]# vim services.conf
1562 Validate the configuration and restart Icinga 2 on the master node `icinga2-master1.localdomain`.
1565 [root@icinga2-master1.localdomain /]# icinga2 daemon -C
1566 [root@icinga2-master1.localdomain /]# systemctl restart icinga2
1615 * `icinga2-master1.localdomain` is the config master master node.
1616 * `icinga2-master2.localdomain` is the secondary master master node without config in `zones.d`.
1617 * `icinga2-agent1.localdomain` and `icinga2-agent2.localdomain` are two child nodes as agents.
1621 * Set up `icinga2-master1.localdomain` as [master](06-distributed-monitoring.md#distributed-monitor…
1622 * Set up `icinga2-master2.localdomain` as [satellite](06-distributed-monitoring.md#distributed-moni…
1623 …localdomain` and `icinga2-agent2.localdomain` as [agents](06-distributed-monitoring.md#distributed…
1652 [root@icinga2-master1.localdomain /]# vim /etc/icinga2/zones.conf
1654 object Endpoint "icinga2-master1.localdomain" {
1658 object Endpoint "icinga2-master2.localdomain" {
1663   endpoints = [ "icinga2-master1.localdomain", "icinga2-master2.localdomain" ]
1679 [root@icinga2-master2.localdomain /]# vim /etc/icinga2/zones.conf
1681 object Endpoint "icinga2-master1.localdomain" {
1685 object Endpoint "icinga2-master2.localdomain" {
1690   endpoints = [ "icinga2-master1.localdomain", "icinga2-master2.localdomain" ]
1707 … specify the `host` attribute in the `icinga2-master1.localdomain` and `icinga2-master2.localdomai…
1713 [root@icinga2-agent1.localdomain /]# vim /etc/icinga2/zones.conf
1715 object Endpoint "icinga2-master1.localdomain" {
1719 object Endpoint "icinga2-master2.localdomain" {
1723 object Endpoint "icinga2-agent1.localdomain" {
1728   endpoints = [ "icinga2-master1.localdomain", "icinga2-master2.localdomain" ]
1731 object Zone "icinga2-agent1.localdomain" {
1732   endpoints = [ "icinga2-agent1.localdomain" ]
1748 [root@icinga2-agent2.localdomain /]# vim /etc/icinga2/zones.conf
1750 object Endpoint "icinga2-master1.localdomain" {
1754 object Endpoint "icinga2-master2.localdomain" {
1758 object Endpoint "icinga2-agent2.localdomain" {
1763   endpoints = [ "icinga2-master1.localdomain", "icinga2-master2.localdomain" ]
1766 object Zone "icinga2-agent2.localdomain" {
1767   endpoints = [ "icinga2-agent2.localdomain" ]
1784 Create a new configuration directory on the master node `icinga2-master1.localdomain`.
1785 **Note**: The secondary master node `icinga2-master2.localdomain` receives the
1789 [root@icinga2-master1.localdomain /]# mkdir -p /etc/icinga2/zones.d/master
1810 [root@icinga2-master1.localdomain /]# cd /etc/icinga2/zones.d/master
1811 [root@icinga2-master1.localdomain /etc/icinga2/zones.d/master]# vim agents.conf
1816 object Endpoint "icinga2-agent1.localdomain" {
1821 object Endpoint "icinga2-agent2.localdomain" {
1829 object Zone "icinga2-agent1.localdomain" {
1830   endpoints = [ "icinga2-agent1.localdomain" ]
1835 object Zone "icinga2-agent2.localdomain" {
1836   endpoints = [ "icinga2-agent2.localdomain" ]
1848 [root@icinga2-master1.localdomain /etc/icinga2/zones.d/master]# vim hosts.conf
1850 object Host "icinga2-agent1.localdomain" {
1856 object Host "icinga2-agent2.localdomain" {
1866 [root@icinga2-master1.localdomain /etc/icinga2/zones.d/master]# vim services.conf
1885 Validate the configuration and restart Icinga 2 on the master node `icinga2-master1.localdomain`.
1888 [root@icinga2-master1.localdomain /]# icinga2 daemon -C
1889 [root@icinga2-master1.localdomain /]# systemctl restart icinga2
1937 * `icinga2-master1.localdomain` is the configuration master master node.
1938 * `icinga2-master2.localdomain` is the secondary master master node without configuration in `zones…
1939 * `icinga2-satellite1.localdomain` and `icinga2-satellite2.localdomain` are satellite nodes in a `m…
1940 * `icinga2-agent1.localdomain` and `icinga2-agent2.localdomain` are two child nodes as agents.
1944 * Set up `icinga2-master1.localdomain` as [master](06-distributed-monitoring.md#distributed-monitor…
1945 * Set up `icinga2-master2.localdomain`, `icinga2-satellite1.localdomain` and `icinga2-satellite2.lo…
1946 * Set up `icinga2-agent1.localdomain` and `icinga2-agent2.localdomain` as [agents](06-distributed-m…
1952 Example for `icinga2-agent1.localdomain`:
1958 Parent endpoint is the first satellite `icinga2-satellite1.localdomain`:
1961 Master/Satellite Common Name (CN from your master/satellite node): icinga2-satellite1.localdomain
1969 Add the second satellite `icinga2-satellite2.localdomain` as parent:
1974 Master/Satellite Common Name (CN from your master/satellite node): icinga2-satellite2.localdomain
1990  (Hint: # icinga2 pki ticket --cn 'icinga2-agent1.localdomain'):
2024 Local zone name [icinga2-agent1.localdomain]: icinga2-agent1.localdomain
2059 the configuration on `icinga2-master1.localdomain` and `icinga2-master2.localdomain`
2063 [root@icinga2-master1.localdomain /]# vim /etc/icinga2/zones.conf
2065 object Endpoint "icinga2-master1.localdomain" {
2069 object Endpoint "icinga2-master2.localdomain" {
2073 object Endpoint "icinga2-satellite1.localdomain" {
2077 object Endpoint "icinga2-satellite2.localdomain" {
2082   endpoints = [ "icinga2-master1.localdomain", "icinga2-master2.localdomain" ]
2091 [root@icinga2-master2.localdomain /]# vim /etc/icinga2/zones.conf
2093 object Endpoint "icinga2-master1.localdomain" {
2097 object Endpoint "icinga2-master2.localdomain" {
2101 object Endpoint "icinga2-satellite1.localdomain" {
2105 object Endpoint "icinga2-satellite2.localdomain" {
2115   endpoints = [ "icinga2-satellite1.localdomain", "icinga2-satellite2.localdomain" ]
2131 In contrast to that, the satellite instances `icinga2-satellite1.localdomain`
2132 and `icinga2-satellite2.localdomain` should not actively connect to the master
2136 [root@icinga2-satellite1.localdomain /]# vim /etc/icinga2/zones.conf
2138 object Endpoint "icinga2-master1.localdomain" {
2142 object Endpoint "icinga2-master2.localdomain" {
2146 object Endpoint "icinga2-satellite1.localdomain" {
2150 object Endpoint "icinga2-satellite2.localdomain" {
2157 for `icinga2-satellite1.localdomain` on satellite2.
2160 [root@icinga2-satellite2.localdomain /]# vim /etc/icinga2/zones.conf
2162 object Endpoint "icinga2-master1.localdomain" {
2166 object Endpoint "icinga2-master2.localdomain" {
2170 object Endpoint "icinga2-satellite1.localdomain" {
2174 object Endpoint "icinga2-satellite2.localdomain" {
2184   endpoints = [ "icinga2-master1.localdomain", "icinga2-master2.localdomain" ]
2188   endpoints = [ "icinga2-satellite1.localdomain", "icinga2-satellite2.localdomain" ]
2214 `icinga2-master1.localdomain` is the configuration master where everything is stored:
2217 [root@icinga2-master1.localdomain /]# mkdir -p /etc/icinga2/zones.d/{master,satellite,global-templa…
2218 [root@icinga2-master1.localdomain /]# cd /etc/icinga2/zones.d/satellite
2220 [root@icinga2-master1.localdomain /etc/icinga2/zones.d/satellite]# vim icinga2-agent1.localdomain.c…
2222 object Endpoint "icinga2-agent1.localdomain" {
2227 object Zone "icinga2-agent1.localdomain" {
2228   endpoints = [ "icinga2-agent1.localdomain" ]
2233 [root@icinga2-master1.localdomain /etc/icinga2/zones.d/satellite]# vim icinga2-agent2.localdomain.c…
2235 object Endpoint "icinga2-agent2.localdomain" {
2240 object Zone "icinga2-agent2.localdomain" {
2241   endpoints = [ "icinga2-agent2.localdomain" ]
2262 Example for `icinga2-agent1.localdomain`:
2265 [root@icinga2-agent1.localdomain /]# vim /etc/icinga2/zones.conf
2267 object Endpoint "icinga2-satellite1.localdomain" {
2271 object Endpoint "icinga2-satellite2.localdomain" {
2275 object Endpoint "icinga2-agent1.localdomain" {
2280   endpoints = [ "icinga2-satellite1.localdomain", "icinga2-satellite2.localdomain" ]
2283 object Zone "icinga2-agent1.localdomain" {
2284   endpoints = [ "icinga2-agent1.localdomain" ]
2299 Example for `icinga2-agent2.localdomain`:
2302 [root@icinga2-agent2.localdomain /]# vim /etc/icinga2/zones.conf
2304 object Endpoint "icinga2-satellite1.localdomain" {
2308 object Endpoint "icinga2-satellite2.localdomain" {
2312 object Endpoint "icinga2-agent2.localdomain" {
2317   endpoints = [ "icinga2-satellite1.localdomain", "icinga2-satellite2.localdomain" ]
2320 object Zone "icinga2-agent2.localdomain" {
2321   endpoints = [ "icinga2-agent2.localdomain" ]
2344 [root@icinga2-master1.localdomain /]# cd /etc/icinga2/zones.d/satellite
2347 Add the host object configuration for the `icinga2-agent1.localdomain` agent. You should
2352 [root@icinga2-master1.localdomain /etc/icinga2/zones.d/satellite]# vim icinga2-agent1.localdomain.c…
2354 object Host "icinga2-agent1.localdomain" {
2362 Add the host object configuration for the `icinga2-agent2.localdomain` agent configuration file:
2365 [root@icinga2-master1.localdomain /etc/icinga2/zones.d/satellite]# vim icinga2-agent2.localdomain.c…
2367 object Host "icinga2-agent2.localdomain" {
2378 [root@icinga2-master1.localdomain /etc/icinga2/zones.d/satellite]# vim services.conf
2391 [root@icinga2-master1.localdomain /etc/icinga2/zones.d/satellite]# vim services.conf
2403 Validate the configuration and restart Icinga 2 on the master node `icinga2-master1.localdomain`.
2406 [root@icinga2-master1.localdomain /]# icinga2 daemon -C
2407 [root@icinga2-master1.localdomain /]# systemctl restart icinga2
2457 [root@icinga2-master1.localdomain /]# vim /etc/icinga2/zones.conf
2474 [root@icinga2-master1.localdomain /]# mkdir -p /etc/icinga2/zones.d/global-commands
2480 [root@icinga2-master1.localdomain /]# vim /etc/icinga2/zones.d/global-commands/web.conf
2498 [root@icinga2-master1.localdomain /]# cd /etc/icinga2/conf.d
2499 [root@icinga2-master1.localdomain /etc/icinga2/conf.d]# cp {commands,groups,notifications,services,…
2517 [root@icinga2-master1.localdomain /]# vim /etc/icinga2/zones.d/master/services.conf
2535 [root@icinga2-master1.localdomain /]# vim /etc/icinga2/zones.d/master/dependencies.conf
2560 [root@icinga2-master1.localdomain /]# vim /etc/icinga2/zones.d/master/hosts.conf
2562 object Host "icinga2-master1.localdomain" {
2568 object Host "icinga2-master2.localdomain" {
2578 [root@icinga2-master1.localdomain /]# vim /etc/icinga2/zones.d/master/health.conf
2587   assign where match("icinga2-master*.localdomain", host.name)
2597 [root@icinga2-master1.localdomain /]# cd /etc/icinga2/zones.d/satellite
2604 [root@icinga2-master1.localdomain /etc/icinga2/zones.d/satellite]# vim health.conf
2623 [root@icinga2-master1.localdomain /etc/icinga2/zones.d/satellite]# vim health.conf
2645 [root@icinga2-master1.localdomain /]# mkdir -p /etc/icinga2/zones.d/master
2646 [root@icinga2-master1.localdomain /]# vim /etc/icinga2/zones.d/master/icinga2-master1.localdomain.c…
2648 object Host "icinga2-master1.localdomain" {
2653 [root@icinga2-master1.localdomain /]# vim /etc/icinga2/zones.d/master/cluster.conf
2660   host_name = "icinga2-master1.localdomain"
2671 [root@icinga2-master1.localdomain /]# mkdir -p /etc/icinga2/zones.d/master
2672 [root@icinga2-master1.localdomain /]# vim /etc/icinga2/zones.d/master/icinga2-master1.localdomain.c…
2674 object Host "icinga2-master1.localdomain" {
2679 [root@icinga2-master1.localdomain /]# vim /etc/icinga2/zones.d/master/services.conf
2684 …st.name //requires a host object matching the endpoint object name e.g. icinga2-master1.localdomain
2739 [root@icinga2-master1.localdomain /]# cd /etc/icinga2/zones.d/master
2740 [root@icinga2-master1.localdomain /etc/icinga2/zones.d/master]# vim hosts.conf
2742 object Host "icinga2-agent2.localdomain" {
2754 [root@icinga2-master1.localdomain /etc/icinga2/zones.d/master]# vim services.conf
2771 [root@icinga2-master1.localdomain /]# icinga2 daemon -C
2772 [root@icinga2-master1.localdomain /]# systemctl restart icinga2
2805 Define a host object called `icinga2-agent2.localdomain` on the master. Add the `nscp_api_password`
2809 [root@icinga2-master1.localdomain /]# cd /etc/icinga2/zones.d/master
2810 [root@icinga2-master1.localdomain /etc/icinga2/zones.d/master]# vim hosts.conf
2812 object Host "icinga2-agent1.localdomain" {
2827 [root@icinga2-master1.localdomain /etc/icinga2/zones.d/master]# vim services.conf
2849 [root@icinga2-master1.localdomain /]# icinga2 daemon -C
2850 [root@icinga2-master1.localdomain /]# systemctl restart icinga2
2873 [root@icinga2-master1.localdomain /]# cd /etc/icinga2/zones.d/master
2874 [root@icinga2-master1.localdomain /etc/icinga2/zones.d/master]# vim hosts.conf
2876 object Host "icinga2-agent1.localdomain" {
2886 [root@icinga2-master1.localdomain /etc/icinga2/zones.d/master]# vim services.conf
2929 [root@icinga2-master1.localdomain /]# cd /etc/icinga2/zones.d/master
2930 [root@icinga2-master1.localdomain /etc/icinga2/zones.d/master]# vim hosts.conf
2932 object Host "icinga2-agent1.localdomain" {
2945 [root@icinga2-master1.localdomain /etc/icinga2/zones.d/master]# vim services.conf
2965 [root@icinga2-master1.localdomain /]# icinga2 daemon -C
2966 [root@icinga2-master1.localdomain /]# systemctl restart icinga2
3073  2016-08-15 15:52:26+02 | icinga2-master1.localdomain
3086 Example for the master node `icinga2-master1.localdomain` actively connecting
3087 to the agent node `icinga2-agent1.localdomain`:
3090 [root@icinga2-master1.localdomain /]# vim /etc/icinga2/zones.conf
3094 object Endpoint "icinga2-agent1.localdomain" {
3100 Example for the agent node `icinga2-agent1.localdomain` not actively
3101 connecting to the master node `icinga2-master1.localdomain`:
3104 [root@icinga2-agent1.localdomain /]# vim /etc/icinga2/zones.conf
3108 object Endpoint "icinga2-master1.localdomain" {
3137 Configuration on the master node `icinga2-master1.localdomain`:
3140 [root@icinga2-master1.localdomain /]# vim /etc/icinga2/zones.conf
3144 object Endpoint "icinga2-agent1.localdomain" {
3149 object Endpoint "icinga2-agent2.localdomain" {
3155 Configuration on the agent `icinga2-agent1.localdomain`:
3158 [root@icinga2-agent1.localdomain /]# vim /etc/icinga2/zones.conf
3162 object Endpoint "icinga2-master1.localdomain" {
3167 object Endpoint "icinga2-master2.localdomain" {
3211 [root@icinga2-master1.localdomain /root]# icinga2 pki new-ca
3219 [root@icinga2-master1.localdomain /root]# icinga2 pki new-cert --cn icinga2-master1.localdomain \
3220   --key icinga2-master1.localdomain.key \
3221   --csr icinga2-master1.localdomain.csr
3227 …oot@icinga2-master1.localdomain /root]# icinga2 pki sign-csr --csr icinga2-master1.localdomain.csr…
3237 [root@icinga2-master1.localdomain /root]# mkdir -p /var/lib/icinga2/certs
3238 [root@icinga2-master1.localdomain /root]# cp icinga2-master1.localdomain.{crt,key} /var/lib/icinga2…
3239 [root@icinga2-master1.localdomain /root]# cp /var/lib/icinga2/ca/ca.crt /var/lib/icinga2/certs
3245 [root@icinga2-master1.localdomain /root]# chown -R icinga:icinga /var/lib/icinga2/certs
3246 [root@icinga2-master1.localdomain /root]# chmod 600 /var/lib/icinga2/certs/*.key
3247 [root@icinga2-master1.localdomain /root]# chmod 644 /var/lib/icinga2/certs/*.crt
3258 …-master1.localdomain /var/lib/icinga2/certs]# for node in icinga2-master1.localdomain icinga2-mast…
3259 information/base: Writing private key to 'icinga2-master1.localdomain.key'.
3260 information/base: Writing certificate signing request to 'icinga2-master1.localdomain.csr'.
3261 information/base: Writing private key to 'icinga2-master2.localdomain.key'.
3262 information/base: Writing certificate signing request to 'icinga2-master2.localdomain.csr'.
3263 information/base: Writing private key to 'icinga2-satellite1.localdomain.key'.
3264 information/base: Writing certificate signing request to 'icinga2-satellite1.localdomain.csr'.
3266 …-master1.localdomain /var/lib/icinga2/certs]# for node in icinga2-master1.localdomain icinga2-mast…
3267 information/pki: Writing certificate to file 'icinga2-master1.localdomain.crt'.
3268 information/pki: Writing certificate to file 'icinga2-master2.localdomain.crt'.
3269 information/pki: Writing certificate to file 'icinga2-satellite1.localdomain.crt'.
3324 [root@icinga2-master1.localdomain /]# icinga2 node setup --master
3337 [root@icinga2-master1.localdomain /]# icinga2 node setup --master --disable-confd
3351 [root@icinga2-agent1.localdomain /]# mkdir -p /var/lib/icinga2/certs
3352 [root@icinga2-agent1.localdomain /]# chown -R icinga:icinga /var/lib/icinga2/certs
3366 [root@icinga2-agent1.localdomain /]# icinga2 pki new-cert --cn icinga2-agent1.localdomain \
3367 --key /var/lib/icinga2/certs/icinga2-agent1.localdomain.key \
3368 --cert /var/lib/icinga2/certs/icinga2-agent1.localdomain.crt
3385 Request the master certificate from the master host (`icinga2-master1.localdomain`)
3389 [root@icinga2-agent1.localdomain /]# icinga2 pki save-cert \
3391 --host icinga2-master1.localdomain
3393 information/cli: Retrieving TLS certificate for 'icinga2-master1.localdomain:5665'.
3395  Subject:     CN = icinga2-master1.localdomain
3396  Issuer:      CN = icinga2-master1.localdomain
3411 …additional `node setup` step. Specify a local endpoint and zone name (`icinga2-agent1.localdomain`)
3412 and set the master host (`icinga2-master1.localdomain`) as parent zone configuration. Specify the p…
3438 [root@icinga2-agent1.localdomain /]# icinga2 node setup --ticket ead2d570e18c78abf285d6b85524970a0f…
3439 --cn icinga2-agent1.localdomain \
3440 --endpoint icinga2-master1.localdomain \
3441 --zone icinga2-agent1.localdomain \
3443 --parent_host icinga2-master1.localdomain \
3453 --endpoint icinga2-master1.localdomain,192.168.56.101,5665
3486 [root@icinga2-agent1.localdomain /]# icinga2 feature disable checker
3492 [root@icinga2-agent1.localdomain /]# cat <<EOF >/etc/icinga2/conf.d/api-users.conf
3503 [root@icinga2-agent1.localdomain /]# systemctl restart icinga2
3510 object Endpoint "icinga2-agent1.localdomain" {
3514 object Zone "icinga2-agent1.localdomain" {
3515   endpoints = [ "icinga2-agent1.localdomain" ]
3548 SNI example: `icinga2-agent1.localdomain`
3552 SNI example with environment: `icinga2-agent1.localdomain:production`