Configuring monitoring

Linux systems

The following document will guide you through the steps needed to correctly setup the monitoring client for Securemin.com.

  1. Download the monitoring conf file from your dashboard:

    and place it in the following directory:

    /
  2. Download and update package lists from the repositories:

    • Ubuntu/Debian sudo apt-get update
    • FreeBSD 10/9/8 portsnap fetch && portsnap extract && portsnap fetch update
    • CentOS/RHEL 7: rpm -Uvh http://repo.zabbix.com/zabbix/3.0/rhel/7/x86_64/zabbix-agent-3.0.4-1.el7.x86_64.rpm
    • CentOS/RHEL 6: rpm -Uvh http://repo.zabbix.com/zabbix/3.0/rhel/6/x86_64/zabbix-agent-3.0.4-1.el6.x86_64.rpm
    • CentOS/RHEL 5: rpm -Uvh http://repo.zabbix.com/zabbix/3.0/rhel/5/x86_64/zabbix-agent-3.0.4-1.el5.x86_64.rpm
  3. Install the Zabbix agent:

    • Ubuntu/Debian sudo apt-get install zabbix-agent
    • FreeBSD 10/9/8 cd /usr/ports/net-mgmt/zabbix3-agent/
      make install clean; rehash
      echo "zabbix_agentd_enable=\"YES\"" >> /etc/rc.conf
    • CentOS/RHEL 7/6/5 yum install zabbix zabbix-agent
  4. Rename the original conf file:

    • Ubuntu/Debian mv /etc/zabbix/zabbix_agentd.conf zabbix_agentd.conf_orig
    • FreeBSD 10/9/8 mv /usr/local/etc/zabbix3/zabbix-agent.conf /usr/local/etc/zabbix3/zabbix-agent/zabbix-agent.conf_orig
    • CentOS/RHEL 7/6/5 mv /etc/zabbix/zabbix_agentd.conf /etc/zabbix/zabbix_agentd.conf_orig
  5. Copy the downloaded conf file from Securemin.com into the Zabbix's directory:

    • Ubuntu/Debian cp /zabbix_agentd.conf /etc/zabbix/zabbix_agentd.conf
    • FreeBSD 10/9/8 cp /zabbix_agentd.conf /usr/local/zabbix3/zabbix_agentd.conf
    • CentOS/RHEL 7/6/5 cp /zabbix_agentd.conf /etc/zabbix/zabbix_agentd.conf
  6. Restart the agent:

    • Ubuntu/Debian Service zabbix-agent restart
    • FreeBSD 10/9/8 /usr/local/etc/rc.d/zabbix_agentd restart
    • CentOS/RHEL 7/6/5 /etc/init.d/zabbix-agent restart
  7. Enjoy!

If you use a Public IP without NAT, please only allow the following ports on your firewall:
9201 for backup.securemin.com
10051 for mon.securemin.com
10050 for mon.securemin.com

Please keep in mind that if your server is behind a NAT or there is a firewall behind it, you will have to enable port forwarding for 10050 and 10051. Such port forwarding is a common requirement for service providers such as: Amazon S3, Microsoft Azure and Google cloud platform.