Orabbix:"Another way to monitor Oracle reloaded"

[jehster]

I'm sorry I didn't undestood I never tried to send Orabbix's data to a proxy.
You can install Orabbix where you want on linux, unix(aix/hp-ux) or windows I have an Orabbix installed on a Linux server and another one on windows (neither of them has a Zabbix installed)
Let me know

Sorry not to answer before, but I have quite lot of work these last weeks and didn't work on my Orabbix install. I hope I can work on it next week, and give you some returns on how I install it and maybe make it work

Just one question : when you say Orabbix is install on servers that don't have Zabbix installed, do they have Oracle installed ?

Regards
Jerome

[dalle]

Sorry not to answer before, but I have quite lot of work these last weeks and didn't work on my Orabbix install. I hope I can work on it next week, and give you some returns on how I install it and maybe make it work

Just one question : when you say Orabbix is install on servers that don't have Zabbix installed, do they have Oracle installed ?

Regards
Jerome

nope you can put orabbix where you want.
The software don't need Oracle or Zabbix installed
(only ojdbc14.jar are required)

[jehster]

nope you can put orabbix where you want.
The software don't need Oracle or Zabbix installed
(only ojdbc14.jar are required)

Great, so I should be able to use my actual zabbix proxy as orabbix server

Thanks
Jérôme

[thiagomz]

Dalle,

In Windows... how I tell to orabbix where it look for java ...

I am getting this error on startup service...

[2012-01-10 17:47:03] [info] Commons Daemon procrun (1.0.5.0 32-bit) started
[2012-01-10 17:47:03] [info] Running 'Orabbix' Service...
[2012-01-10 17:47:03] [info] Starting service...
[2012-01-10 17:47:03] [error] Failed creating java
[2012-01-10 17:47:03] [error] ServiceStart returned 1
[2012-01-10 17:47:03] [info] Run service finished.
[2012-01-10 17:47:03] [info] Commons Daemon procrun finished

[dalle]

You should set JAVA_HOME
maybe this one is your problem... I hope

Dalle,

In Windows... how I tell to orabbix where it look for java ...

I am getting this error on startup service...

[2012-01-10 17:47:03] [info] Commons Daemon procrun (1.0.5.0 32-bit) started
[2012-01-10 17:47:03] [info] Running 'Orabbix' Service...
[2012-01-10 17:47:03] [info] Starting service...
[2012-01-10 17:47:03] [error] Failed creating java
[2012-01-10 17:47:03] [error] ServiceStart returned 1
[2012-01-10 17:47:03] [info] Run service finished.
[2012-01-10 17:47:03] [info] Commons Daemon procrun finished

[thiagomz]

You should set JAVA_HOME
maybe this one is your problem... I hope

Where ? In system environment or in a file ?

[jehster]

Great, so I should be able to use my actual zabbix proxy as orabbix server

Thanks
Jérôme

So I amde it work on my Debian Squeeze. It seems to work as I get values like :

 2012-01-13 11:01:22,516 [pool-1-thread-5] DEBUG Orabbix - Starting dbJob on database DB1 QueryList
 2012-01-13 11:01:22,519 [pool-1-thread-5] DEBUG Orabbix - Actual query is archiveNextrun 2012/01/13 11:03:22 on database=DB1 Period=2
 2012-01-13 11:01:22,542 [pool-1-thread-5] DEBUG Orabbix - I'm going to return 0 for query archive on database=DB1
 2012-01-13 11:01:22,542 [pool-1-thread-5] DEBUG Orabbix - Actual query is auditNextrun 2012/01/13 11:03:22 on database=DB1 Period=2
 2012-01-13 11:01:22,542 [pool-1-thread-5] DEBUG Orabbix - I'm going to return none for query audit on database=DB1
 2012-01-13 11:01:22,546 [pool-1-thread-5] DEBUG Orabbix - Actual query is dbblockgetsNextrun 2012/01/13 11:03:22 on database=DB1 Period=2
 2012-01-13 11:01:22,548 [pool-1-thread-5] DEBUG Orabbix - I'm going to return 8742600080 for query dbblockgets on database=DB1
 2012-01-13 11:01:22,549 [pool-1-thread-5] DEBUG Orabbix - Actual query is dbconsistentgetsNextrun 2012/01/13 11:03:22 on database=DB1 Period=2
 2012-01-13 11:01:22,551 [pool-1-thread-5] DEBUG Orabbix - I'm going to return 27096584168 for query dbconsistentgets on database=DB1
 2012-01-13 11:01:22,551 [pool-1-thread-5] DEBUG Orabbix - Actual query is dbhitratioNextrun 2012/01/13 11:03:22 on database=DB1 Period=2
 2012-01-13 11:01:22,554 [pool-1-thread-5] DEBUG Orabbix - I'm going to return 99.49434815327831286524208836395276426326 for query dbhitratio on database=DB1
 2012-01-13 11:01:22,554 [pool-1-thread-5] DEBUG Orabbix - Actual query is dbphysicalreadNextrun 2012/01/13 11:03:22 on database=DB1 Period=2

It also seems that Orabbix send successfully values to Zabbix server :

 2012-01-13 11:01:24,029 [pool-1-thread-5] DEBUG Orabbix - dbname DB1 sending item  archive value 0
 2012-01-13 11:01:24,029 [pool-1-thread-5] DEBUG Orabbix - dbname DB1 sending item  audit value none
 2012-01-13 11:01:24,029 [pool-1-thread-5] DEBUG Orabbix - dbname DB1 sending item  dbblockgets value 8742600080
 2012-01-13 11:01:24,029 [pool-1-thread-5] DEBUG Orabbix - dbname DB1 sending item  dbconsistentgets value 27096584168
 2012-01-13 11:01:24,029 [pool-1-thread-5] DEBUG Orabbix - dbname DB1 sending item  dbhitratio value 99.49434815327831286524208836395276426326
 2012-01-13 11:01:24,029 [pool-1-thread-5] DEBUG Orabbix - dbname DB1 sending item  dbphysicalread value 181221497

and

 2012-01-13 11:01:24,031 [pool-1-thread-5] DEBUG Orabbix - sending <req><host>REIx</host><key>YWxpdmU=</key><data>MQ==</data></req>
 2012-01-13 11:01:24,034 [pool-1-thread-5] DEBUG Orabbix - received OK
 2012-01-13 11:01:24,034 [pool-1-thread-5] DEBUG Orabbix - sending <req><host>REIx</host><key>T3JhYmJpeC5WZXJzaW9u</key><data>T3JhYmJpeCBWZXJzaW9uIDEuMi4zIA==</data></req>
 2012-01-13 11:01:24,036 [pool-1-thread-5] DEBUG Orabbix - received OK
 2012-01-13 11:01:24,037 [pool-1-thread-5] DEBUG Orabbix - sending <req><host>REIx</host><key>YXJjaGl2ZQ==</key><data>MA==</data></req>
 2012-01-13 11:01:24,038 [pool-1-thread-5] DEBUG Orabbix - received OK
 2012-01-13 11:01:24,038 [pool-1-thread-5] DEBUG Orabbix - sending <req><host>REIx</host><key>YXVkaXQ=</key><data>bm9uZQ==</data></req>
 2012-01-13 11:01:24,040 [pool-1-thread-5] DEBUG Orabbix - received OK
 2012-01-13 11:01:24,040 [pool-1-thread-5] DEBUG Orabbix - sending <req><host>REIx</host><key>ZGJibG9ja2dldHM=</key><data>ODc0MjYwMDA4MA==</data></req>
 2012-01-13 11:01:24,042 [pool-1-thread-5] DEBUG Orabbix - received OK
 2012-01-13 11:01:24,042 [pool-1-thread-5] DEBUG Orabbix - sending <req><host>REIx</host><key>ZGJjb25zaXN0ZW50Z2V0cw==</key><data>MjcwOTY1ODQxNjg=</data></req>
 2012-01-13 11:01:24,044 [pool-1-thread-5] DEBUG Orabbix - received OK

I've imported templates in my Zabbix server. I've created my host and select the Orabbix template.

Problem is that I do not get any values. I do not see anything coming from my orabbix in zabbix server log. What could I have done wrong ?

Regards
Jérôme

[edit] while re-reading Orabbix installation guide, I've notice that my problem could come from step 8, importing template.
What I did is :
1) import template in zabbix
2) create an host pointing toward my orabbix server
3) affect orabbix template to this new host

You say that the host should have Oracle SID name as name. Actually my oracle SID is BDDDEV, but in Orabbix logfile I can see that Orabbix send values with a variable host different :

2012-01-13 11:01:24,042 [pool-1-thread-5] DEBUG Orabbix - sending <req>[B][U]<host>REIx</host>[/U][/B]<key>ZGJjb25zaXN0ZW50Z2V0cw==</key><data>MjcwOTY1ODQxNjg=</data></req>

Where does it come from ?

[edit2]
Ok, don't search anymore Finally I make it work using my SID as name (and not dns name ).
Now, I only have 2 items for which I don't get values "Memory utilisation" and "DB size/filesize). It might come from the permissions given to the oracle's user (the dba didn't give exactly same rights as you ask for in the documentation)

[Yello]

Hi,
Does orabbix support specifying multiple querylist files per host? I'm creating querylists by service domain and want to keep them separate. However, I have some hosts which would need to use two or three querylist files.

If this isn't supported, can it be implemented please?


Regards,
Dave

[dalle]

It's already implemented and it's working

[Yello]

Ok, thanks for confirming that. Can I also ask, how do I vary the polling interval for indivudal queries? I have some queries that need to run regularly while I have others, for the same db, which need to run daily.


Regards,
David

[hege]

Hello there.. Orabbix looks pretty interesting framework and I'm going to try it.

But it's pretty sad that the "install guide" tells to create account with all sorts of privileges. Why on earth does it need permissions to WRITE and read ALL TABLES? I would be fired for doing that. All the newbies take that guide for granted and learn nothing about security. It's not like it would have been a hard job to simply make a list of needed tables and grant select to them.

[dalle]

Hello there.. Orabbix looks pretty interesting framework and I'm going to try it.

But it's pretty sad that the "install guide" tells to create account with all sorts of privileges. Why on earth does it need permissions to WRITE and read ALL TABLES? I would be fired for doing that. All the newbies take that guide for granted and learn nothing about security. It's not like it would have been a hard job to simply make a list of needed tables and grant select to them.

I'm sorry but what you mean with all sorts of privileges?
may be you mean with resource on oracle 11 the account can write?
let me know which one is your dubt, inside the documentation http://www.smartmarmot.com/wiki/index.php/Orabbix
I wrote a sample script for a zabbix user:

CREATE USER ZABBIX
IDENTIFIED BY <REPLACE WITH PASSWORD>
DEFAULT TABLESPACE SYSTEM
TEMPORARY TABLESPACE TEMP
PROFILE DEFAULT
ACCOUNT UNLOCK;
– 2 Roles for ZABBIX
GRANT CONNECT TO ZABBIX;
GRANT RESOURCE TO ZABBIX;
ALTER USER ZABBIX DEFAULT ROLE ALL;
– 5 System Privileges for ZABBIX
GRANT SELECT ANY TABLE TO ZABBIX;
GRANT CREATE SESSION TO ZABBIX;
GRANT SELECT ANY DICTIONARY TO ZABBIX;
GRANT UNLIMITED TABLESPACE TO ZABBIX;
GRANT SELECT ANY DICTIONARY TO ZABBIX;


Remeber that Orabbix is completely opensource, you can download the sources and read my code so you are going to see what Orabbix do on db.

Please let me know your thought

[hege]

GRANT RESOURCE TO ZABBIX;
GRANT UNLIMITED TABLESPACE TO ZABBIX;

Unlimited access to create tables, triggers etc..

GRANT SELECT ANY TABLE TO ZABBIX;
GRANT SELECT ANY DICTIONARY TO ZABBIX;

Unlimited access to read tables and other possible sensitive data..

And what's with the resolve requirement for 11g? Didn't look deeply yet to see what needs it..

Remeber that Orabbix is completely opensource, you can download the sources and read my code so you are going to see what Orabbix do on db.

Please let me know your thought

That's right and I'm surprised no one has mentioned of this (that I could find). Perhaps many people dismissed Orabbix because it didn't seem trustworthy. Well considering Zabbix doesn't even have simple encryption, they might simply have dismissed it also..

In the spirit of Open Source, I'll certainly post better sql if I make it, and I'll try it with 9, 10, 11g..

[dalle]

Unlimited access to create tables, triggers etc..



Unlimited access to read tables and other possible sensitive data..

And what's with the resolve requirement for 11g? Didn't look deeply yet to see what needs it..



That's right and I'm surprised no one has mentioned of this (that I could find). Perhaps many people dismissed Orabbix because it didn't seem trustworthy. Well considering Zabbix doesn't even have simple encryption, they might simply have dismissed it also..

In the spirit of Open Source, I'll certainly post better sql if I make it, and I'll try it with 9, 10, 11g..

In some way you are right. The funny thing is that no one take care of this if spend a lot of money to buy a closed source code like grid control ( e.g. we have bought-it). Grid Control is really expensive and connect to your database as sysdba can query everything, is CONNECTED with oracle's server, with your metalink account etc... and can send everything (also your sensible data) but no one care about, maybe because it cost a LOOT and has a "Oracle" brand.

Anyway this is just a note, all the query that are made from orabbix are on query.props you can gran access to this tables if you want you are free to contribute every effort is really welcome.

There are some query that are "inside" the code:

1. SELECT SYS_CONTEXT ('USERENV', 'SESSION_USER') FROM DUAL
2. SELECT SYS_CONTEXT ('USERENV', 'DB_NAME') FROM DUAL
3. SELECT SYSDATE FROM DUAL

If you need I can modify the creation script let me know.

[dalle]

please try with this script and let me know

CREATE USER ZABBIX
IDENTIFIED BY <REPLACE WITH PASSWORD>
DEFAULT TABLESPACE USERS
TEMPORARY TABLESPACE TEMP
PROFILE DEFAULT
ACCOUNT UNLOCK;
GRANT ALTER SESSION TO ZABBIX;
GRANT CREATE SESSION TO ZABBIX;
GRANT CONNECT TO ZABBIX;
ALTER USER ZABBIX DEFAULT ROLE ALL;
GRANT SELECT ON V_$INSTANCE TO ZABBIX;
GRANT SELECT ON DBA_USERS TO ZABBIX;
GRANT SELECT ON V_$LOG_HISTORY TO ZABBIX;
GRANT SELECT ON V_$PARAMETER TO ZABBIX;
GRANT SELECT ON SYS.DBA_AUDIT_SESSION TO ZABBIX;
GRANT SELECT ON V_$LOCK TO ZABBIX;
GRANT SELECT ON DBA_REGISTRY TO ZABBIX;
GRANT SELECT ON V_$LIBRARYCACHE TO ZABBIX;
GRANT SELECT ON V_$SYSSTAT TO ZABBIX;
GRANT SELECT ON V_$PARAMETER TO ZABBIX;
GRANT SELECT ON V_$LATCH TO ZABBIX;
GRANT SELECT ON V_$PGASTAT TO ZABBIX;
GRANT SELECT ON V_$SGASTAT TO ZABBIX;
GRANT SELECT ON V_$LIBRARYCACHE TO ZABBIX;
GRANT SELECT ON V_$PROCESS TO ZABBIX;
GRANT SELECT ON DBA_DATA_FILES TO ZABBIX;
GRANT SELECT ON DBA_TEMP_FILES TO ZABBIX;
GRANT SELECT ON DBA_FREE_SPACE TO ZABBIX;
GRANT SELECT ON V_$SYSTEM_EVENT TO ZABBIX;