After you have setup a clean minimal Centos 7.3 server (x64), we begin install nano, wget, ntp time, net-tools: (some scripts use ruby and/or ruby snmp, therefore i’ll install these as a ‘prerequisite’ , also gem install snmp should be installed from the user you will launching your script, so sudo gem install snmp it, if you use root to launch scripts from your zabbix server)
|
1 |
sudo yum -y install nano wget ntp net-tools policycoreutil ruby |
|
1 2 |
gem install snmp sudo gem install snmp |
and updating centos:
|
1 |
sudo yum -y update && reboot |
Next we add the zabbix repository to yum.
|
1 |
sudo rpm -ivh http://repo.zabbix.com/zabbix/3.0/rhel/7/x86_64/zabbix-release-3.0-1.el7.noarch.rpm |
Next we can begin adding prerequisites of zabbix:
|
1 |
sudo yum -y install epel-release |
Then we can continue install zabbix:
|
1 |
sudo yum -y install zabbix-server-mysql zabbix-agent zabbix-web-mysql mysql mariadb-server httpd php |
start the database mariadb/mysql server and enable the mariadb service to start at system startup:
|
1 2 |
sudo systemctl start mariadb sudo systemctl enable mariadb |
And we configure mysql/mariadb
|
1 |
mysql_secure_installation |
You will get the following questions (set a root password for mysql/mariadb, you can use a different password other then user root):
Set root password? [Y/n] y
(Choose the root password when you want to make/edit databases, etc)
Remove anonymous users? [Y/n] y
Disallow root login remotely? [Y/n] y
Remove test database and access to it? [Y/n] y
Reload privilege tables now? [Y/n] y
Next, we create our Zabbix Server database! Enter the mysql/mariadb shell:
|
1 |
mysql -u root -p |
(enter the database root password)
|
1 2 3 4 |
create database zabbix; grant all privileges on zabbix.* to zabbix@localhost identified by 'secretpassword'; flush privileges; exit |
Now we have an empty mysql/mariadb database without any tables/schema/data in it.
To install the tables we can make use of zabbix mysql scripts. After each command you will have to fill in your root sql password.
|
1 2 3 |
cd /usr/share/doc/zabbix-server-mysql-3.0.9/ gunzip create.sql.gz mysql -u root -p zabbix < create.sql |
Next we have to edit the zabbix configuration file, with the details you entered above.
|
1 |
sudo nano /etc/zabbix/zabbix_server.conf |
Find the following Parameters in the file (you can use CTRL+W to find something in nano editor) and set the mysql root password.
The cachesize and startpingers is to avoid warnings from the zabbix server itself.
DBPassword=YourDBPassword
CacheSize=32M
StartPingers=5
Now you can configure the web page: (these prerequisites can be found on the zabbix website)
(Don’t forget to change the time zone of your country)
|
1 2 3 4 5 6 |
sudo sed -i 's/^max_execution_time.*/max_execution_time=600/' /etc/php.ini sudo sed -i 's/^max_input_time.*/max_input_time=600/' /etc/php.ini sudo sed -i 's/^memory_limit.*/memory_limit=256M/' /etc/php.ini sudo sed -i 's/^post_max_size.*/post_max_size=32M/' /etc/php.ini sudo sed -i 's/^upload_max_filesize.*/upload_max_filesize=16M/' /etc/php.ini sudo sed -i "s/^\;date.timezone.*/date.timezone=\'Europe\/Brussels\'/" /etc/php.ini |
Next we edit the default Apache Config (/etc/httpd/conf.d/zabbix.conf)
|
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 |
# # Zabbix monitoring system php web frontend # Alias /zabbix /usr/share/zabbix <Directory "/usr/share/zabbix"> Options FollowSymLinks AllowOverride None Require all granted </Directory> <Directory "/usr/share/zabbix/conf"> Require all denied </Directory> <Directory "/usr/share/zabbix/include"> Require all denied </Directory> |
We make sure all services are started en running when we next reboot the system: (some services can fail cause of selinux, view bottem of the pages)
|
1 2 3 4 5 6 7 8 9 10 11 |
sudo systemctl start mariadb.service sudo systemctl enable mariadb.service sudo systemctl start zabbix-server.service sudo systemctl enable zabbix-server.service sudo systemctl start zabbix-agent.service sudo systemctl enable zabbix-agent.service sudo systemctl start httpd sudo systemctl enable httpd |
And Last, if you are beginning to learn linux, i can imagine you have had various troubles learning things like config files, nano or vi, etc. Therefore, if you want something that works quick, fast and dirty:
disable = turn it off at next reboot.
stop = turn it off now.
|
1 2 3 |
sudo systemctl disable firewalld sudo systemctl stop firewalld sudo setenforce 0 |
Edit the following file and set the enforcement to disable so it won’t come backup the next time we reboot.
|
1 |
sudo nano /etc/selinux/config |
if you are concerned with selinux and firewalls (port 10050/10051 is for zabbix, port 80 for the web interface and port 162 is for snmp traps):
WARNING: There is some discussion concering selinux and zabbix in centos 7.3 (google and learn)
|
1 2 3 4 5 6 7 |
sudo setsebool -P httpd_can_connect_zabbix=1 sudo setsebool -P zabbix_can_network on sudo firewall-cmd --permanent --add-port=10050/tcp sudo firewall-cmd --permanent --add-port=10051/tcp sudo firewall-cmd --permanent --add-port=80/tcp sudo firewall-cmd --permanent --add-port=162/udp |
|
1 |
sudo firewall-cmd --reload |
And as last, you can login in the web interface with:
Admin
zabbix
For people who want https:
… to be continued