使用Python脚本对Zabbix关键模版进行审计

151次阅读

共计 5909 个字符，预计需要花费 15 分钟才能阅读完成。

前言

当一个企业的 zabbix 监控系统运行了很久之后，必然会产生某些机器的某几个模版很重要的情况，另外由于经常维护这些模版需要频繁的重新绑定，要是解绑和再次绑定之间有一定时间差的话那就很容易造成漏绑定，一旦发生漏绑定且此时业务系统刚好出现了问题没有监控到那么后果就很严重了，本篇博客提供的脚本就是为了解决这个问题而存在的。

本次用到的脚本如下所示：

 ~/Downloads/tmp  tree                 
.
├── zabbix_template_audit_every_hour.py
├── zbx_prod.conf
└── zhtmplfinder.py

代码分两块，一个是 zabbix_template_audit_every_hour.py，一个是 github 上的开源脚本 zhtmplfinder.py，仓库名叫 q1x/zabbix-gnomes，感谢，该仓库年久失修，为了防止失联本人 fork 了一下，也在下面把源码直接贴了出来，请把两块代码放到同一级目录。

整个项目依赖 python2，主要是这个七八年前的上古开源脚本 zhtmplfinder.py 也依赖 python2。

依赖安装

python2 -m pip install pyzabbix==1.0.0 requests==2.26.0

使用

上述脚本的最后一个叫 zhtmplfinder.py 依赖一个下面格式叫 zbx_prod.conf 的配置文件：

[Zabbix API]
     username=johndoe
     password=verysecretpassword
     api=https://zabbix.mycompany.com/path/to/zabbix/frontend/
     no_verify=true

主代码 zabbix_template_audit_every_hour.py 的运行方式如下，建议自行配置定时任务，每个小时进行一次审计:

python2 zabbix_template_audit_every_hour.py

代码

主程序 zabbix_template_audit_every_hour.py

#!/usr/bin/env python
# encoding=utf-8

import json
import subprocess
import requests


host_with_templates_list = {'192.168.0.1': ['customize-discover-xxx-check1', 'customize-discover-xxx-check2'],
    '192.168.0.2': ['customize-discover-xxx-check1', 'customize-discover-xxx-check2'],
}


def send_msg_to_wework(chat_id, content):
    diag = {"chatid": chat_id,
            "msgtype": "markdown",
            "markdown": {"content": content}}

    headers = {"Content-Type": "application/json"}

    diag = json.dumps(diag)
    requests.post('http://xxxx.weixin.qq.com/cgi-bin/webhook/send?key=xxxxxx',
                  data=diag, headers=headers)


def main():
    template_not_in_result_list = []
    try:
        for host in host_with_templates_list:
            templates_list= host_with_templates_list[host]
            cmd = "python zhtmplfinder.py -c zbx_prod.conf {0}".format(host)
            result = subprocess.check_output(cmd, shell=True).strip().split('\n')
            for template in templates_list:
                if template not in result:
                    template_not_in_result_list.append(host + ':' + template)
        if template_not_in_result_list:
            send_msg_to_wework('xxxxx',
            "# <font color='warning'>** 以下 Zabbix 模板审计异常, 请及时进行绑定! <@xxxx> <@xxxx>**</font>\n{0}".format('\n'.join(template_not_in_result_list)))
    except subprocess.CalledProcessError:
        send_msg_to_wework('xxxxx', 
        "# <font color='warning'>**Zabbix 模板审计脚本 192.168.0.1:/usr/local/zabbix/scripts/zabbix_template_audit/zabbix_template_audit_every_hour.py 发生错误, 请检查! <@xxx> <@xxx>**</font>")


if __name__ == '__main__':
    main()

依赖脚本 zhtmplfinder.py：

#!/usr/bin/env python
#
# import needed modules.
# pyzabbix is needed, see https://github.com/lukecyca/pyzabbix
#
import argparse
import ConfigParser
import os
import os.path
import sys
import distutils.util
from pyzabbix import ZabbixAPI

# define config helper function
def ConfigSectionMap(section):
    dict1 = {}
    options = Config.options(section)
    for option in options:
 	try:
		dict1[option] = Config.get(section, option)
		if dict1[option] == -1:
			DebugPrint("skip: %s" % option)
	except:
		print("exception on %s!" % option)
		dict1[option] = None
    return dict1


# set default vars
defconf = os.getenv("HOME") + "/.zbx.conf"
username = ""password =""
api = ""noverify =""

# Define commandline arguments
parser = argparse.ArgumentParser(formatter_class=argparse.RawDescriptionHelpFormatter,description='Tries to get the linked templates for the specified Zabbix host.', epilog="""
This program can use .ini style configuration files to retrieve the needed API connection information.
To use this type of storage, create a conf file (the default is $HOME/.zbx.conf) that contains at least the [Zabbix API] section and any of the other parameters:
       
 [Zabbix API]
 username=johndoe
 password=verysecretpassword
 api=https://zabbix.mycompany.com/path/to/zabbix/frontend/
 no_verify=true

""")
parser.add_argument('hostname', help='Hostname to find the linked templates for')
parser.add_argument('-u', '--username', help='User for the Zabbix api')
parser.add_argument('-p', '--password', help='Password for the Zabbix api user')
parser.add_argument('-a', '--api', help='Zabbix API URL')
parser.add_argument('--no-verify', help='Disables certificate validation when using a secure connection',action='store_true') 
parser.add_argument('-c','--config', help='Config file location (defaults to $HOME/.zbx.conf)')
parser.add_argument('-n', '--numeric', help='Return numeric templateids instead of template names',action='store_true')
parser.add_argument('-e', '--extended', help='Return both templateid and template name separated with a":"',action='store_true')
args = parser.parse_args()

# load config module
Config = ConfigParser.ConfigParser()
Config

# if configuration argument is set, test the config file
if args.config:
 if os.path.isfile(args.config) and os.access(args.config, os.R_OK):
  Config.read(args.config)

# if not set, try default config file
else:
 if os.path.isfile(defconf) and os.access(defconf, os.R_OK):
  Config.read(defconf)

# try to load available settings from config file
try:
 username=ConfigSectionMap("Zabbix API")['username']
 password=ConfigSectionMap("Zabbix API")['password']
 api=ConfigSectionMap("Zabbix API")['api']
 noverify=bool(distutils.util.strtobool(ConfigSectionMap("Zabbix API")["no_verify"]))
except:
 pass

# override settings if they are provided as arguments
if args.username:
 username = args.username

if args.password:
 password = args.password

if args.api:
 api = args.api

if args.no_verify:
 noverify = args.no_verify

# test for needed params
if not username:
 sys.exit("Error: API User not set")

if not password:
 sys.exit("Error: API Password not set")
 
if not api:
 sys.exit("Error: API URL is not set")

# Setup Zabbix API connection
zapi = ZabbixAPI(api)

if noverify is True:
 zapi.session.verify = False

# Login to the Zabbix API
zapi.login(username, password)

##################################
# Start actual API logic
##################################

# set the hostname we are looking for
host_name = args.hostname

# Find specified host from API
hosts = zapi.host.get(output="extend", filter={"host": host_name})

if hosts:
    # Find linked templates
    templates = zapi.template.get(output="extend", hostids=hosts[0]["hostid"])
    if templates:
      if args.extended:
         # print ids and names
	 for template in templates:
	   print(format(template["templateid"])+":"+format(template["host"]))
      else:
        if args.numeric:
           # print template ids
	   for template in templates:
	     print(format(template["templateid"]))
        else:
           # print template names
	   for template in templates:
	     print(format(template["host"]))
    else:
       sys.exit("Error: No templates linked to"+ host_name)
else:
    sys.exit("Error: Could not find host"+ host_name)

# And we're done...

请自行替换主程序中的机器 ip 和 zabbix 模版名，以及企业微信 api 地址和 chat id。

正文完