search

filipnet / checkmk-telegram-notify

Get alerted by Check_MK via Telegram bash script
https://www.filipnet.de/checkmk-telegram-notify
BSD 3-Clause "New" or "Revised" License
58 stars 27 forks source link
alert bash bash-script checkmk checkmk-extension monitoring monitoring-plugins nagios notifications telegram telegram-bot telegram-bot-api

readme

Check_MK Telegram notification

Telegram notification example

Telegram has long been one of my real-time communication media. It is obvious to output monitoring messages for server and network components as alarm messages. There are several scripts for this on the internet, but most of them are written in Python, many of them have problems with Python3 and its libraries. Instead of spending hours and hours with Python, I decided to use a scripting language I know and write a Linux Bash script for it.

COMPATIBILITY

EXAMPLE

Notifications are usually sent via a Telegram group. Here is an example of how a Telegram notification is structured.

Telegram notification example

REQUIREMENTS

In order for Check_MK to send alerts (notifications) to the Telegram Messenger, we need

There are a lot of good instructions for this on the Internet, so this is not part of this documentation.

INSTALLATION

Change to your Check_MK site user

su - mysite

Change to the notification directory

cd ~/local/share/check_mk/notifications/

Download the Telegram notify script from Git repository (new subfolder will be created)

git clone https://github.com/filipnet/checkmk-telegram-notify.git

Give the script execution permissions

chmod +x checkmk-telegram-notify/check_mk_telegram-notify.sh

Create Symlink to enable the Plugin

ln -s checkmk-telegram-notify/check_mk_telegram-notify.sh check_mk_telegram-notify.sh

UPDATE EXISTING INSTALLATION

su - mysite
cd ~/local/share/check_mk/notifications/checkmk-telegram-notify
git pull

CHECK_MK CONFIGURATION

CHECK_MK VERSION 2.0.0 AND ABOVE

Now you can create your own alarm rules in Check_MK.

Setup → Events → Notifications

First create a clone of your existing mail notification rule

Create clone Adjust settings

Referring to #6 and #15 at this point the note that initially only one field is displayed, further fields are only displayed after the first field has been filled.

CHECK_MK VERSION 1.6.0

Now you can create your own alarm rules in Check_MK.

WATO → Notifications → New Rule → Notification Method → Push Notification (using Telegram)

First create a clone of your existing mail notification rule

Create clone Adjust settings

If everything was ok, you will see your new Notification Rule afterwards

Final result

ACTIVATE CHANGES

To activate it you have to press "1 Change" and "Activate affected"

Activate changes and commit

Since Check_MK 2.0.0 it is calles "Active on selected sites"

Active on selected sites

To ensure that the parameters are also transferred in the event of an alert, it is strongly recommended that the Check_MK instance is restarted.

su - mysite
omd stop
omd start

PRIVACY ANONYMIZATION / MASQUERADING

The current version of this script allows you to optionally enable IP anonymization. This gives you the option to comply with your own privacy policy or the recommendations of data protection authorities in certain countries if they prohibit the transmission of the full IP address. This masks IPv4 and IPv6 IP addresses before they are transmitted in a message to the Telegram service.

The activation of the privacy settings is realized directly in the Notification Rules in Check_MK by NOTIFY_PARAMETER_3, here the value "privacy" has to be entered:

Enable privacy settings

There are certainly different requirements for privacy and masquerading of IP addresses. In the script, the IPv4 IP address is split into the 4 octets, the IPv6 address into the 8 columns. This allows to control very individually which parts of the addresses are sent via Telegram and which are not. Both, placeholders and manipulations are basically possible here.

The adjustment is done exclusively in the following two lines of the script.

# Adjust the output to your privacy needs here (Details in the readme.md)
NOTIFY_HOST_ADDRESS_4="${sec1}.${sec2}.2.${sec4}"
NOTIFY_HOST_ADDRESS_6="${sec1}:${sec2}:${sec3}:${sec4}:ffff:ffff:ffff:${sec8}"

Explanation for the example configuration above:

PAGER ADDRESS (CHAT-ID) INSTEAD OF TELEGRAM GROUP-ID

A different approach is to use the 'Pager address' field in Check_MK's user properties. This gets exported as $NOTIFY_CONTACTPAGER variable to the script and as such all that's needed is:

if [ -z ${NOTIFY_CONTACTPAGER} ]; then
        echo "No pager address provided to be used as Chat-ID. Exiting" >&2
        exit 2
else
        CHAT_ID="${NOTIFY_CONTACTPAGER}"
fi

CUSTOM USER ATTRIBUTE

You can add a custom user attribute and use it in your script. Go TO Setup > UsersCustom > user attributes and create a custom attribute named TELEGRAMCHAT, do not change the name, you can change the Title and Help Text.

Custom User attribute creation

CUSTOM MACRO (OPTIONAL)

Go To Setup > Events > Notification configuration> and edit your notifcation. Add a custom macro.

This pattern will accept numbers with or without an optional minus sign and requires a minimum of 5 digits.: Regex : ^-?\d{5,}$

The Macro checks for an at least 5 digit long number, if your Chatid differs, you can adjust that, this also ensures that only those with a chatid set up will get notified. (could work also as a whitelist)

Custom macro for notification

Edit your user and enter your Group/Chat-ID

Custom macro for notification

TROUBLESHOOTING

For more details and troubleshooting with parameters please check:

CONTRIBUTIONS

LICENSE

checkmk-telegram-notify and all individual scripts are under the BSD 3-Clause license unless explicitly noted otherwise. Please refer to the LICENSE