any server exclude from scan

vulnersCom / zabbix-threat-control

Zabbix vulnerability assessment plugin

GNU General Public License v3.0

208 stars 56 forks source link

any server exclude from scan #14

Closed adziubin closed 6 years ago

adziubin commented 6 years ago

on every server when I run ztc.py script can't find any software on any server

INFO Excluded Atlassian. ~^S: 0, Version: 0, Packages: 1 [ztc.py:83] │ INFO Excluded Zabbix Server. ~^S: 0, Version: 0, Packages: 1 [ztc.py:83]

samosvat commented 6 years ago

Hi!

Check permissions on /opt/monitoring/os-report/report.py Zabbix user must be able to run it on every server.
```
# ls -la /opt/monitoring/os-report/report.py
```

Try running the script as zabbix user (if you have the zabbix-agent run as user zabbix)

root@host# su - zabbix
zabbix@host$ /opt/monitoring/os-report/report.py os
zabbix@host$ /opt/monitoring/os-report/report.py package

Try to get data via zabbix-get

root@server# zabbix_get -s HOSTIP -k "system.run[/opt/monitoring/os-report/report.py package]"

Eliminate the influence of SELinux
```
# setenforce 0
```

adziubin commented 6 years ago

Permissions set correctly ,

report script returns correct data

SElinux not instaled (Ubuntu 16.04)

samosvat commented 6 years ago

If the command zabbix_get -s HOSTIP -k "system.run[/opt/monitoring/os-report/report.py package]" returns a list of packages to the console, check the host in Zabbix: do you have this data in host latest data?

Probably Zabbix hasn't collected the metrics yet. Оn my screenshot you can see that the metric is collected 1 time per day at 13: 24 (you will have a different time):

adziubin commented 6 years ago

all data comes normally. I'll try to wait until tomorrow and check if zabbix can collect data. Thanks for your work and amazing plugin

adziubin commented 6 years ago

All works fine! thanks ! There are several errors with non ASCII encoding, but this is not critical!