nagios conference 2014 - dorance martinez cortes - customizing nagios

“If you think technology can solve your security problems, then you don't understand the problems and you don't understand the technology” Bruce Schneier

Customizing Nagios

Dorancé Martínez Cortés

dorancemc@gmail.com

@dorancemc

Agenda

• About me• Good practices• Monitoring tools• Why nagios?• Work with IT• Nagios for >300 host >2500 services• Strategy• Capacity planning• Conclusion• Questions

About me

>10 Years: Linux, Windows, HPUX, AIX, Mac.

Tecnoquímicas

Alert Logic

In free time: camping

And full-time: husband and father

Tecnoquímicas

Tecnoquímicas • Health• Personal care and household

cleaning• Processed foods• Agricultural and veterinary

products

Best practices

• If you can't be measured, you can't control it

• If you can't control, you can't manage

• If you can't manage, you can't improve it

Lowest incident

More information

bigger incident?

users

Feeling the incident

Best practices

• If you can't be measured, you can't control it

• If you can't control, you can't manage

• If you can't manage, you can't improve it

Monitoring Tool

Monitoring Tool• Views

• Alerts

• Prevention

• Compatibility

• Visibility network and infrastructure not controlled.

• Flexibility

• Reports

• ROI

Decision

CPUMEM

DISK SPACEDISK I/OTCP/UDP

NIC

Decision

Decision

Decision

Decision

IT

Infrastructure and development

Infrastructure, network

and communicati

ons

Development

Financials Sales Manufa

cturing

Services

Help Desk

IT

Responsabilities

• Application Administration• Database Administration • Script development• User support (level2)• Training• New projects• Contact with suppliers• Internet Support • Software updates• AntiVirus updates• Network speed• Backups• SLA compliance • Best practices• Infrastructure improvement

Incidents

• Slowness problems• Failures in the database• Users with little training• Urgent projects• Failures in Internet• Virus in the system• Recovery of Backups• Incidents• Breach of SLA

HP IBM DELL

Hardware

HP

HPUX

IBM

XEN

GNU/Linux

DELL

MS HyperV

Microsoft

ORACLEVM

GNU/Linux

Operative System

HP

HPUX

Oracle

IBM

XENGNU/Linux

Oracle Apache MySQL +

DELL

Oracle VM

GNU/Linux

Oracle

Apach

e

MySQL +

MS HyperV

Microsoft

MSExchange

MSSQL

ActiveDirectory

+ +

Software

Network

StorageHP

HPUX

Oracle

IBM

XEN

GNU/Linux

Oracle Apache MySQL +

DELL

Oracle VM

GNU/Linux

Oracle Apache MySQL +

MS HyperV

Microsoft

MSExchange MSSQL Active

Directory + +

Network & Storage

Hardware

Hardware

Software

Network & Storage

Network

StorageHP

HPUX

Oracle

IBM

XEN

GNU/Linux

Oracle Apache MySQL +

DELL

Oracle VM

GNU/Linux

Oracle Apache MySQL +

MS HyperV

Microsoft

MSExchange MSSQL ActiveDirectory + +

StrategyMinimum Requirements

SoftwareHardware

Make connections• P

hysical• Virtual• Storage• Network

Solutions• C

ritical

• Warning

• Normal -> Statistics

Software

StrategyMinimum Requirements

SoftwareHardware

Make connections• P

hysical• Virtual• Storage• Network

Solutions• C

ritical

• Warning

• Normal -> Statistics

Software

Software

Software

StrategyMinimum Requirements

SoftwareHardware

Make connections• P

hysical• Virtual• Storage• Network

Solutions• C

ritical

• Warning

• Normal -> Statistics

Software

Software

Running…

Software

Services groups

Services groups

Host groups

infrastructure

performance

Statistics

2013 2014

Statistics

1 2 3 4 5 6 7 8 90.965

0.97

0.975

0.98

0.985

0.99

0.995

1

1.005

ok status 2013ok status 2014

Capacity planning

Capacity planning

Capacity planning

Software

0.99

0.01

Hosts

DonePending

0.89

0.11

Services

DonePending

Monitoring Tool• Views

• Alerts

• Prevention

• Compatibility

• Visibility network and infrastructure not controlled.

• Flexibility

• Reports

• ROI

Conclusion

• There is no tool or universal solution

• Monitoring tools should point to the prediction and prevention

• Monitoring tools are not used at 100%: unknowledge of the tool and methods of analysis

• The company should have a monitoring strategy

Conclusion

People

Strategy

Tools

Conclusion

• Monitoring strategy

• Good teamwork

• Great tools

If you think technology can solve your security problems, then you don't understand the problems and you don't understand the technology. “Bruce Schneier”

Questions?

Dorancé Martínez Cortés

dorancemc@gmail.com

THANKS!

@dorancemc