nagios conference 2014 - dorance martinez cortes - customizing nagios
DESCRIPTION
Dorance Martinez Cortes' presentation on customizing Nagios. The presentation was given during the Nagios World Conference North America held Oct 13th - Oct 16th, 2014 in Saint Paul, MN. For more information on the conference (including photos and videos), visit: http://go.nagios.com/conference.TRANSCRIPT
“If you think technology can solve your security problems, then you don't understand the problems and you don't understand the technology” Bruce Schneier
Agenda
• About me• Good practices• Monitoring tools• Why nagios?• Work with IT• Nagios for >300 host >2500 services• Strategy• Capacity planning• Conclusion• Questions
About me
>10 Years: Linux, Windows, HPUX, AIX, Mac.
Tecnoquímicas
Alert Logic
In free time: camping
And full-time: husband and father
Tecnoquímicas
Tecnoquímicas • Health• Personal care and household
cleaning• Processed foods• Agricultural and veterinary
products
Best practices
• If you can't be measured, you can't control it
• If you can't control, you can't manage
• If you can't manage, you can't improve it
Lowest incident
More information
bigger incident?
users
Feeling the incident
Best practices
• If you can't be measured, you can't control it
• If you can't control, you can't manage
• If you can't manage, you can't improve it
Monitoring Tool
Monitoring Tool• Views
• Alerts
• Prevention
• Compatibility
• Visibility network and infrastructure not controlled.
• Flexibility
• Reports
• ROI
Decision
CPUMEM
DISK SPACEDISK I/OTCP/UDP
NIC
Decision
Decision
Decision
Decision
IT
Infrastructure and development
Infrastructure, network
and communicati
ons
Development
Financials Sales Manufa
cturing
Services
Help Desk
IT
Responsabilities
• Application Administration• Database Administration • Script development• User support (level2)• Training• New projects• Contact with suppliers• Internet Support • Software updates• AntiVirus updates• Network speed• Backups• SLA compliance • Best practices• Infrastructure improvement
Incidents
• Slowness problems• Failures in the database• Users with little training• Urgent projects• Failures in Internet• Virus in the system• Recovery of Backups• Incidents• Breach of SLA
HP IBM DELL
Hardware
HP
HPUX
IBM
XEN
GNU/Linux
DELL
MS HyperV
Microsoft
ORACLEVM
GNU/Linux
Operative System
HP
HPUX
Oracle
IBM
XENGNU/Linux
Oracle Apache MySQL +
DELL
Oracle VM
GNU/Linux
Oracle
Apach
e
MySQL +
MS HyperV
Microsoft
MSExchange
MSSQL
ActiveDirectory
+ +
Software
Network
StorageHP
HPUX
Oracle
IBM
XEN
GNU/Linux
Oracle Apache MySQL +
DELL
Oracle VM
GNU/Linux
Oracle Apache MySQL +
MS HyperV
Microsoft
MSExchange MSSQL Active
Directory + +
Network & Storage
Hardware
Hardware
Software
Network & Storage
Network
StorageHP
HPUX
Oracle
IBM
XEN
GNU/Linux
Oracle Apache MySQL +
DELL
Oracle VM
GNU/Linux
Oracle Apache MySQL +
MS HyperV
Microsoft
MSExchange MSSQL ActiveDirectory + +
StrategyMinimum Requirements
SoftwareHardware
Make connections• P
hysical• Virtual• Storage• Network
Solutions• C
ritical
• Warning
• Normal -> Statistics
Software
StrategyMinimum Requirements
SoftwareHardware
Make connections• P
hysical• Virtual• Storage• Network
Solutions• C
ritical
• Warning
• Normal -> Statistics
Software
Software
Software
StrategyMinimum Requirements
SoftwareHardware
Make connections• P
hysical• Virtual• Storage• Network
Solutions• C
ritical
• Warning
• Normal -> Statistics
Software
Software
Running…
Software
Services groups
Services groups
Host groups
infrastructure
performance
Statistics
2013 2014
Statistics
1 2 3 4 5 6 7 8 90.965
0.97
0.975
0.98
0.985
0.99
0.995
1
1.005
ok status 2013ok status 2014
Capacity planning
Capacity planning
Capacity planning
Software
0.99
0.01
Hosts
DonePending
0.89
0.11
Services
DonePending
Monitoring Tool• Views
• Alerts
• Prevention
• Compatibility
• Visibility network and infrastructure not controlled.
• Flexibility
• Reports
• ROI
Conclusion
• There is no tool or universal solution
• Monitoring tools should point to the prediction and prevention
• Monitoring tools are not used at 100%: unknowledge of the tool and methods of analysis
• The company should have a monitoring strategy
Conclusion
People
Strategy
Tools
Conclusion
• Monitoring strategy
• Good teamwork
• Great tools
If you think technology can solve your security problems, then you don't understand the problems and you don't understand the technology. “Bruce Schneier”
Questions?
