CheckMK rack1 Mark III User manual

Check_MK rack1 Mark III - Manual
Valid since version 1.4.0

Contents
1 Quick start guide 1
2 Shipment 2
3 Basic configuration 3
3.1 Network and access configuration via console ............................ 5
3.1.1 Network configuration ....................................... 5
3.1.2 Access to the web interface .................................... 5
3.1.3 Protecting access to the console ................................. 6
3.2 Basic settings on the web interface ................................... 7
4 Administrating monitoring instances 10
4.1 Migrating existing sites .......................................... 12
5 Administrating Check_MK versions 14
6 Firmware installation 15
7 Device settings 16
7.1 Changing the language .......................................... 16
7.2 Changing the network configuration .................................. 16
7.3 Configuring host and domain names .................................. 16
7.4 Configuring name resolution ....................................... 16
7.5 Configuring time synchronisation .................................... 17
7.6 Forwarding syslog entries ......................................... 17
7.7 Changing the default web page ..................................... 17
7.8 Configuring outgoing emails ....................................... 17
7.9 Changing access to Check_MK agents ................................. 18
8 Remote access via SSH 19
8.1 Activating instance login via SSH .................................... 19
8.2 Activating console via SSH ........................................ 19
8.3 Activating root access via SSH ...................................... 20
©Copyright Mathias Kettner GmbH 2018 mathias-kettner.de

CONTENTS CONTENTS
9 Protecting web access via SSL 23
9.1 Installing a certificate ........................................... 23
9.1.1 Creating a new certificate and having it signed ........................ 23
9.1.2 Creating a new certificate and signing it yourself ...................... 24
9.1.3 Uploading existing certificate ................................... 25
9.2 Configuring access types ......................................... 25
9.3 Displaying current configuration/certificates ............................. 26
10Device control 27
10.1Restarting / Shutting down ........................................ 27
10.2Switching on device via Wake-on-LAN ................................. 28
10.3Restoring factory configuration ..................................... 28
11Backup 30
11.1Automatic backup .............................................. 30
11.2Configuring the backup .......................................... 30
11.3Backup format ................................................ 32
11.4Encryption .................................................. 32
11.5Compression ................................................. 33
11.6Recovery ................................................... 34
11.6.1Disaster recovery .......................................... 35
11.7Monitoring .................................................. 35
11.8Special features with clusters ...................................... 35
12Mounting network file systems 36
12.1Mounting a network file system ..................................... 36
13Failover cluster 38
13.1Prerequisites ................................................. 38
13.2Migration of existing installations .................................... 39
13.3Configuration of the cluster ........................................ 39
13.3.1Network configuration ....................................... 39
13.3.2Host names .............................................. 43
13.3.3Connecting the cluster ....................................... 43
13.4The state of the cluster .......................................... 45
13.5Special cases in the cluster ........................................ 46
13.5.1Access to resources ......................................... 46
13.5.2Device settings ........................................... 47
13.5.3IP addresses or host names of the nodes ............................ 47
13.5.4Administrating Check_MK versions and monitoring instances ............... 47
©Copyright Mathias Kettner GmbH 2018 mathias-kettner.de

CONTENTS CONTENTS
13.6Administrative tasks ............................................ 47
13.6.1Firmware updates in the cluster ................................. 47
13.6.2Disbanding clusters ......................................... 49
13.6.3Exchanging a device ........................................ 49
13.7Diagnostics and troubleshooting ..................................... 49
13.7.1Logging ................................................ 49
14SMS notifications 51
14.1Starting up the modem .......................................... 51
14.2Diagnostics .................................................. 52
15RAID administration 53
15.1Administration in web interface ..................................... 53
15.2Exchanging a defective hard drive .................................... 53
15.3Both hard drives defective ........................................ 54
16Management interface 55
17Diagnostics 56
17.1Logs ...................................................... 56
17.2Available Memory .............................................. 57
18Service & support 58
18.1Manual .................................................... 58
18.2Internet .................................................... 58
18.3Firmware ................................................... 58
18.4Hardware support ............................................. 58
18.5Software support .............................................. 58
19Appendices 59
.1 CE declaration of conformity ....................................... 59
.2 Licences ................................................... 59
.3 VMware Tools ................................................ 60
.4 VirtualBox Guest Additions ........................................ 60
.5 Legal notice ................................................. 60
Index 61
©Copyright Mathias Kettner GmbH 2018 mathias-kettner.de

Check_MK rack1 Mark III - Manual 1 / 61
1. Quick start guide
• Unpack the device and first of all check that your shipment is complete.
• Plug in the device. When installing for the first time, you should ensure the following connections as
a minimum:
–Monitor-to-VGA connector
–USB-keyboard
–Network connection (connector: LAN1)
–Power supply
• During the launching procedure of the device, a dialogue box asking you to initialise the RAID will
appear on the screen (NOTE: All data on the hard drives will be deleted!). Confirm the box. After
a few minutes the launching procedure will resume.
• On completion of the launching procedure, the console status view will be displayed.
• So that the appliance can be used for monitoring, there are some settings that need to be made. Press
the key <F1> and, using the configuration dialogue box, configure the following settings as a minimum:
–Network configuration
–Access to the web interface
• Once you have configured these settings, you can access the web interface from a computer connected
to the network by entering the URL http://<ipaddress>/ into the web browser. Log into the web
interface using the password you just configured.
• Select the item instance administration on the menu now shown and click on Create new instance on
the following page.
• Now create a new monitoring instance using the current dialogue box. This instance will start auto-
matically.
• You can now call up the URL http://<ipaddress>/<instanz-id>/ in your browser,
where you can set up Check_MK in the usual manner.
• In order to make things such as name resolution and sending emails possible, you must make further
settings in the web interface. You can read more about this in the chapter on basic configuration on
the web interface.
©Copyright Mathias Kettner GmbH 2018 mathias-kettner.de

Check_MK rack1 Mark III - Manual 2 / 61
2. Shipment
The following are included with your Check_MK rack1 Mark III:
• Check_MK rack1 Mark III appliance
–Two internal power supply units
–Two hard drives in a caddy (1 TB)
• Documentation
• Two power cords
• One set of mounting rails
©Copyright Mathias Kettner GmbH 2018 mathias-kettner.de

Check_MK rack1 Mark III - Manual 3 / 61
3. Basic configuration
When starting up for the first time, a message will appear asking you what language to choose. This
language will be saved for the entire device.
You will then be displayed a message asking you to initialise the data medium. Confirm this dialogue
box and wait for device startup to be resumed and for the status screen to then be displayed.
©Copyright Mathias Kettner GmbH 2018 mathias-kettner.de

Check_MK rack1 Mark III - Manual 4 / 61
Once the device has been started up, you will see the status screen on the local console.
This screen will show you general status information and the most important configuration options of
your device.
©Copyright Mathias Kettner GmbH 2018 mathias-kettner.de

Check_MK rack1 Mark III - Manual 5 / 61
3.1 Network and access configuration via console
From the status screen, you can get to the configuration menu by pressing the key <F1>.
For starting up the device, you now need to set the network configuration and specify the device pass-
word.
3.1.1 Network configuration
Use this dialogue box to set up the network configuration of the device. The IP-address, netmask and
the optional default gateway will be queried.
In most cases, the device will need to also access network devices outside of its own network segment.
The default gateway must also be configured for this purpose.
Once these values have been entered, the configuration will be activated, meaning the device will be
immediately reachable via the network and at the entered IP address. One way of testing this is to send
aping from another device in the network.
3.1.2 Access to the web interface
A large part of the device’s configuration is carried out via the web interface. Access to this web interface
is protected by a password, the device password, which you need to specify first.
The factory settings do not include a device password, meaning you cannot yet access the web interface.
Press the key <F1> on the status screen and select device password in order to set the password.
Then select the option web interface from the configuration menu to activate the web interface.
©Copyright Mathias Kettner GmbH 2018 mathias-kettner.de

Check_MK rack1 Mark III - Manual 6 / 61
Once you have completed these steps you will see the configured IP address in the box device information
and web interface: on in the access box on the status screen of the console, as shown in the screenshot
above. If you have already correctly connected the device with your network, you will now see that the
network connection is active (Network: ACTIVE in the Status box).
3.1.3 Protecting access to the console
After the basic configuration, access to the local console is not protected. This means that anyone who
has direct access to the console (e.g. through access to the server room, or in the case of Check_MK
virt1, through access to the management interface of the virtualisation solution), is able to change the
basic configuration of the device.
In order to protect such access, you have the option to activate a login that must be used in conjunction
with the device password before settings can be made or the current status viewed.
If you have already activated the web interface, you will have already set a device password and do
not need to assign a new one. If you have not done so, open the configuration menu on the console by
pressing the key <F1> and select device password to set the password.
Then select console login from the configuration menu in order to activate this option.
©Copyright Mathias Kettner GmbH 2018 mathias-kettner.de

Check_MK rack1 Mark III - Manual 7 / 61
Once you have completed these steps, you will see console login: on in the access box on the status
screen of the console, as shown in the screenshot above.
3.2 Basic settings on the web interface
Having enabled access to the web interface through the configuration you performed previously, you
can now open the web interface over a web browser on a computer that is connected with the device
via the network. For this purpose, enter the URL http://<ipaddress>/ for the device (in this case
http://10.1.2.9/) into the address bar of the browser. You will now see the login screen of the web
interface.
©Copyright Mathias Kettner GmbH 2018 mathias-kettner.de

Check_MK rack1 Mark III - Manual 8 / 61
After you have logged in with the password previously specified for the web interface, the main menu
will open. From here, you can get to all features of the web interface.
On this menu, select the item device settings. In this dialogue box you can see and change the most
important device settings.
©Copyright Mathias Kettner GmbH 2018 mathias-kettner.de

Check_MK rack1 Mark III - Manual 9 / 61
By clicking on the titles of the settings, you will be taken to the dialogue box for adjusting the respective
setting.
If you have DNS servers available in your environment, you should now configure one or more of these
first so that the resolution of host names can be used. If you have one or more NTP servers for time
synchronisation available in your environment, enter these as IP addresses or hostnames under the item
NTP server.
If emails are to be sent from your device, such as notifications in the event of problems being detected,
you must configure the option Outgoing emails. To do this, enter the SMTP relay server responsible for
this device and any access data required. All emails generated on the device will be sent to this server.
Under this setting, you can also configure all emails generated by the operating system of the device
(e.g. in the case of critical errors) to be sent to a particular email address.
The basic configuration of the device is now complete and you can continue setting up the first monitor-
ing instance.
©Copyright Mathias Kettner GmbH 2018 mathias-kettner.de

Check_MK rack1 Mark III - Manual 10 / 61
4. Administrating monitoring instances
Open the main menu of the web interface and click on the menu item instance administration. In this
dialogue box, you have access to all monitoring instances of this device. You can configure, update and
delete monitoring instances as well as create new ones.
The first time you open the dialogue box it will be empty. To create your first monitoring instance,
click on the button Create instance. In the dialogue box that then appears, you can specify the initial
configuration of the monitoring instance.
Start by entering an instance ID, which serves to identify the monitoring instance. The instance ID
may only contain letters, numbers, - and _, must start with a letter or _ and may be a maximum of 16
characters in length.
Now select the Check_MK version with which to create the monitoring instance.
You can leave all other settings as they are for the time being. You can change these settings later on
using the instance editing dialogue.
As soon as you confirm the dialogue box with Create instance, the new monitoring instance will be
created. This may take a few seconds. Once the instance has been created or started, you will be taken
to the list of all monitoring instances.
©Copyright Mathias Kettner GmbH 2018 mathias-kettner.de

Check_MK rack1 Mark III - Manual 11 / 61
In this list, you will see the instance just created with the ID sysmon. You can also see the status of the
instance, where ”active” means the instance has been fully started. You can start or stop the instance
with the button to the right of the status. On the left you will see different icons, with which you can a)
edit the settings of the instance, b) update the instance and c) delete the instance.
After the instance has been created and started, you can either click on the instance ID or enter the URL
for the monitoring instance http://<ipaddress>/<instanz-id>/ (in this case http://10.1.2.9/sysmon/)
into the address bar of your browser.
You will now see the login screen of the monitoring instance, where you can log in using the access
data you entered when creating the instance. Once you have logged in you can set up Check_MK in
the usual manner. The snap-in Check_MK Appliance is available in all monitoring instances and for all
administrators. You will find it in the sidebar. This snap-in will take you from your monitoring instances
directly to the web interface of the device.
©Copyright Mathias Kettner GmbH 2018 mathias-kettner.de

Check_MK rack1 Mark III - Manual 12 / 61
4.1 Migrating existing sites
It is a common case to migrate existing sites from other Linux systems to a Check_MK appliance. The
Check_MK appliance offers a migration dialog which is performing the migration for you.
The following requirements need to be met:
• You need to have a network connection between the source system and your device.
• The Check_MK version of the source site needs to be installed on your device (Architecture changes
from 32-bit to 64-bit are possible).
• The source site needs to be stopped during migration.
Open the main menu of the web interface and click on the menu item Instance Administration. Then
click on the button Migrate Site.
In this dialogue, you first need to configure the host address (host name, DNS name, IP address) the
source system, which you want to migrate the site from. Now you need to enter the site ID of the site
you want to be migrated.
The migration of the site is done via SSH. To get access to the source site, you need to provide the
credentials of a user which is able to connect to the source system and access all files of the source site.
You can use the root user of the source system or, if you have configured a password for the site user,
you can use the site user credentials.
Optionally you can choose to let the migration create the site with a new site ID on your device.
Additionally you have the option to skip the performance data (measurements, graphs) and historic
monitoring data during migration. This can be useful if you don’t need an exact copy of the source site
and only want to copy it e.g. for testing purposes.
After filling the dialogue and confirming it by clicking the start button. The following dialogue will show
you the progress of the migration.
©Copyright Mathias Kettner GmbH 2018 mathias-kettner.de

Check_MK rack1 Mark III - Manual 13 / 61
After completion of the migration you can finish the migration by clicking on Complete. Now you can
configure and control the new site in the instance administration dialogue.
©Copyright Mathias Kettner GmbH 2018 mathias-kettner.de

Check_MK rack1 Mark III - Manual 14 / 61
5. Administrating Check_MK versions
It is possible to install several Check_MK versions on the device at the same time. This allows several
instances to be run in different versions and individual instances to be changed to newer or older versions
independently of one another. Meaning you can install a new version for example, and try it out in a test
instance initially in order to then update your productive instance if testing is successful.
To administrate the Check_MK versions, select the item Check_MK versions in the main menu of the
web interface.
The dialogue box that then appears will list all Check_MK versions installed. If a version is not being
used by any instance and is not the last installed version, you have the option to delete it from the
appliance.
Using this dialogue box, you can also upload new Check_MK versions onto the device in order to use
them in new instances or to update existing instances.
To do this, download the desired Check_MK version from our website1onto your computer (search for
Check_MK appliance in the Distribution column). Then select the file from your hard drive using the file
selection dialogue and confirm your selection by clicking on Upload & install.
The Check_MK version will now be uploaded onto the device. Depending on the network connection
between your computer and the ESX server, this may take a few minutes. Once uploading is complete,
you will see the new version in the table of installed versions.
1http://mathias-kettner.de/nagios_support_download.php?HTML=yes
©Copyright Mathias Kettner GmbH 2018 mathias-kettner.de

Check_MK rack1 Mark III - Manual 15 / 61
6. Firmware installation
You can update the software of your device to a newer version or downgrade to an earlier version. Both
are carried out via the so-called firmware update in the web interface.
First, download the desired firmware package from our website1onto your computer. Then open the
web interface of the device and select the item Firmware update in the main menu.
In the box that appears, select the firmware package you downloaded before from the hard drive. Con-
firm the dialogue box by clicking on Upload & install. The package will now be loaded onto your device.
Depending on the network connection, this may take a few minutes.
Once the package has been recognised as valid firmware, you will be shown a dialogue box asking you
to confirm the firmware update. Depending on the version differences between the current version and
the one to be installed, various messages will appear telling you what to do with your data during the
update.
• Change in the first digit: You must back up the data of your device manually and restore it after the
update. An update cannot be performed without data migration.
• Update to higher number for the second digit: The update can be carried out without data migration.
You are advised to back up your data beforehand anyway.
• Downgrade to lower number for the second digit: You must back up the data of your device manually
and restore it after the update. An update cannot be performed without data migration.
• Change in the third digit: The update can be carried out without data migration. You are advised to
back up your data beforehand anyway.
When you confirm this dialogue box, the device will be restarted immediately. When the device is restart-
ing, the firmware last uploaded will be installed. This will cause restarting to take much longer than
usual. It will normally take less than 10 minutes however. A further restart will be carried out after the
installation has taken place. This will complete the firmware update.
1http://mathias-kettner.de/check_mk_appliance_download.php?HTML=yes
©Copyright Mathias Kettner GmbH 2018 mathias-kettner.de