################################################################################################################
# #
# !!!!!!!!!!! This file is managed by Puppet. Do not edit directly. Changes will be overwritten. !!!!!!!!!!! #
# #
# Author: William O. #
# Revision: 20210201.2327 #
################################################################################################################
# OS
UserParameter=os.load,/opt/zabbix_scripts/check_load -w 5,5,5 -c 7,7,7
UserParameter=os.zombie_procs,/opt/zabbix_scripts/check_procs -w 50 -c 100 -s Z | awk '{print $3}'
UserParameter=os.total_procs,/opt/zabbix_scripts/check_procs -w 16000 -c 18000
UserParameter=os.wbs_backup_status,/opt/zabbix_scripts/os.wbs_backup_status.sh
UserParameter=os.all_procs,/opt/zabbix_scripts/check_all_procs.sh -C sshd:1:10 -C crond:1:0 -C rsyslogd:1:0 -C ossec-execd:1:0 -C ossec-agentd:1:0 -C ossec-logcollector:1:0 -C ossec-syscheckd:1:0 -C ntpd:1:0
UserParameter=os.crond,/opt/zabbix_scripts/check_procs -w 1:1 -c 1:15 -C crond | awk '{print $3}'
UserParameter=os.kernelCarePatch,sudo /opt/zabbix_scripts/os.kernelCarePatch.sh
UserParameter=os.logfiles,sudo /opt/zabbix_scripts/check_logfiles --config /opt/zabbix_scripts/check_logfiles.cfg | awk '{print $1}'
# Disk
UserParameter=disk.root,/opt/zabbix_scripts/check_disk -w 20% -c 10% -W 20% -K 10% -p /
UserParameter=disk.temp,/opt/zabbix_scripts/check_disk -w 20% -c 10% -W 20% -K 10% -p /dev/shm
UserParameter=disk.boot,/opt/zabbix_scripts/check_disk -w 20% -c 10% -W 20% -K 10% -p /boot
UserParameter=disk.vz,/opt/zabbix_scripts/check_disk -w 102400 -c 51200 -W 20% -K 10% -p /vz
UserParameter=disk.ro_mounts,sudo /opt/zabbix_scripts/check_ro_mounts
# WBS Disk
UserParameter=wbs.status,/opt/zabbix_scripts/wbs.status.sh
UserParameter=wbs.disk_usage_boot,/opt/zabbix_scripts/disk.usage.sh -p /dev/sdb1 -w 90 -c 95 | cut -d\( -f2 | cut -d\) -f1 | sed -e 's/%//'
UserParameter=wbs.disk_usage_root,/opt/zabbix_scripts/disk.usage.sh -p /dev/sdb2 -w 90 -c 95 | cut -d\( -f2 | cut -d\) -f1 | sed -e 's/%//'
UserParameter=wbs.disk_usage_vz,/opt/zabbix_scripts/disk.usage.sh -p /dev/sdb4 -w 90 -c 95 | cut -d\( -f2 | cut -d\) -f1 | sed -e 's/%//'
# Memory
UserParameter=memory.swap,/opt/zabbix_scripts/check_swap_memory -w 20000 -c 25000
UserParameter=memory.status,/opt/zabbix_scripts/check_memory -f -w 10 -c 5 -C | awk '{print $3}' | cut -d. -f1
# Network
UserParameter=network.traffic,/opt/zabbix_scripts/check_tcptraffic -w 104857600 -c 209715200 -i em1 -s 100
# IPMI / Hardware
UserParameter=ipmi.warning,/opt/zabbix_scripts/check_ipmi_sensor.pl -H localhost -x 73 -x 75 | grep WARNING
UserParameter=ipmi.critical,/opt/zabbix_scripts/check_ipmi_sensor.pl -H localhost -x 73 -x 75 | grep CRITICAL
UserParameter=megaraidi.warning,/opt/zabbix_scripts/check_megaraid_sas.pl -o 25 -m 20 | grep WARNING
UserParameter=megaraidi.critical,/opt/zabbix_scripts/check_megaraid_sas.pl -o 45 -m 40 | grep CRITICAL
# SSH
UserParameter=ssh.users,/opt/zabbix_scripts/check_users -w 10 -c 15 | awk {'print $4'}
UserParameter=ssh.rpm,sudo /opt/zabbix_scripts/check_ssh_rpm -t 30 | grep --color=never -oE 'OK|CRITICAL'
# Apache
UserParameter=apache.status,/opt/zabbix_scripts/check_apache -H localhost
UserParameter=apache.connections,sudo /opt/zabbix_scripts/apache.connections.pl -w 100 -c 200 -C httpd | awk '{print $5}'
UserParameter=apache.connect_time,/opt/zabbix_scripts/check_http -H localhost -w 5 -c 15
# MySQL
UserParameter=mysql.commands,/opt/zabbix_scripts/check_mysql_commands -H localhost -u testuser -p ''
UserParameter=mysql.connections,/opt/zabbix_scripts/check_mysql_connections -H localhost -u testuser -p '' -w 75 -c 90
UserParameter=mysql.selects,/opt/zabbix_scripts/check_mysql_selects -H localhost -u testuser -p ''
# Mail
UserParameter=mail.mailchannels_configured,/opt/zabbix_scripts/cpanel.MailChannels_Configured.sh
UserParameter=exim.version, exim -bV | head -1 | cut -d " " -f 3
UserParameter=mailqueue.exim,/opt/zabbix_scripts/check_mailq_exim.sh
UserParameter=qmail.mailq,sudo /opt/zabbix_scripts/check_mailq -M qmail -w 1000 -c 1200 | awk {'print $4'} | cut -d '(' -f2|cut -d ')' -f1
# Plesk
UserParameter=plesk.compromised_mail, sudo /opt/zabbix_scripts/plesk_compromised_mail.sh | grep -E '(WARNING|CRITICAL)'
# cPanel
UserParameter=cpanel.whmcpanel_version,/opt/zabbix_scripts/cpanel.whmcpanel_version.sh
UserParameter=cpanel.compromised_account,sudo /opt/zabbix_scripts/cpanel_compromised_account.sh | grep -E '(WARNING|CRITICAL)'
UserParameter=cpanel_compromised_mail, sudo /opt/zabbix_scripts/cpanel_compromised_mail.sh | grep -E '(WARNING|CRITICAL)'
# OpenVZ
UserParameter=check.nodewatch,sudo /opt/zabbix_scripts/check_nodewatch.sh | grep '(WARNING|CRITICAL)'
# Miscellaneous
UserParameter=security.patchman,/opt/zabbix_scripts/check_patchman_status
UserParameter=check_rbl[*],/opt/zabbix_scripts/check_rbl -H $1 -t 60 -c 1 -w 1 -s cbl.abuseat.org -s spamtrap.drbl.drand.net -s spamsources.fabel.dk -s 0spam.fusionzero.com -s mail-abuse.blacklist.jippg.org -s korea.services.net -s spamguard.leadmon.net -s ix.dnsbl.manitu.net -s relays.nether.net -s psbl.surriel.com -s dyna.spamrats.com -s noptr.spamrats.com -s spam.spamrats.com -s dnsbl.sorbs.net -s spam.dnsbl.sorbs.net -s bl.spamcop.net -s pbl.spamhaus.org -s sbl.spamhaus.org -s xbl.spamhaus.org -s ubl.unsubscore.com -s dnsbl-1.uceprotect.net -s dnsbl-2.uceprotect.net -s dnsbl-3.uceprotect.net -s db.wpbl.info -s access.redhawk.org -s blacklist.sci.kun.nl -s dnsbl.kempt.net -s forbidden.icm.edu.pl -s hil.habeas.com -s rbl.schulte.org -s sbl-xbl.spamhaus.org -s b.barracudacentral.org -s dnsbl.antispam.or.id -s dsn.rfc-ignorant.org -s dul.dnsbl.sorbs.net -s http.dnsbl.sorbs.net -s l1.spews.dnsbl.sorbs.net -s l2.spews.dnsbl.sorbs.net -s misc.dnsbl.sorbs.net -s postmaster.rfc-ignorant.org -s rbl.spamlab.com -s relays.bl.kunden.de -s smtp.dnsbl.sorbs.net -s socks.dnsbl.sorbs.net -s spam.abuse.ch -s spamrbl.imp.ch -s tr.countries.nerd.dk -s unsure.nether.net -s virbl.bit.nl -s web.dnsbl.sorbs.net -s whois.rfc-ignorant.org -s zen.spamhaus.org -s zombie.dnsbl.sorbs.net -s blackholes.five-ten-sg.com -s blacklist.woody.ch -s bogons.cymru.com -s combined.abuse.ch -s duinv.aupads.org -s ohps.dnsbl.net.au -s omrs.dnsbl.net.au -s orvedb.aupads.org -s osps.dnsbl.net.au -s osrs.dnsbl.net.au -s owfs.dnsbl.net.au -s owps.dnsbl.net.au -s probes.dnsbl.net.au -s proxy.bl.gweep.ca -s proxy.block.transip.nl -s rbl.inter.net -s rdts.dnsbl.net.au -s relays.bl.gweep.ca -s residential.block.transip.nl -s ricn.dnsbl.net.au -s rmst.dnsbl.net.au -s spamlist.or.kr -s t3direct.dnsbl.net.au -s ubl.lashback.com -s all.s5h.net -s dnsbl.anticaptcha.net -s dnsbl.spfbl.net -s ips.backscatterer.org -s singular.ttk.pte.hu -s spam.dnsbl.anonmails.de -s spambot.bls.digibase.ca
UserParameter=malicious.pastebinCronJobUsers,sudo /opt/zabbix_scripts/malicious.pastebinCronJobUsers.sh zabbix
UserParameter=malicious.userProcs,/opt/zabbix_scripts/malicious.userProcs.sh
UserParameter=malicious.userSymlinkCounts,/opt/zabbix_scripts/malicious.userSymlinkCounts.sh zabbix
UserParameter=automation.puppet,/opt/zabbix_scripts/check_PuppetServiceStatus.sh
UserParameter=rpmver.sudo,/opt/zabbix_scripts/rpmver.sudo.sh
UserParameter=stats.cvepatch[*],/opt/zabbix_scripts/stats_cvepatch.sh $1 $2
# Statistical Info
UserParameter=whmapi1.phpVersionCount[*],sudo /opt/zabbix_scripts/stats_phpVersionCount.sh $1
# IPtables IP Check
UserParameter=chkips[*],sudo /opt/zabbix_scripts/check_ips.sh
# Name Servers
UserParameter=pdns.status,/opt/zabbix_scripts/pdns.status.sh
UserParameter=pdns.version,/opt/zabbix_scripts/pdns.version.sh
UserParameter=pdns.backend,/opt/zabbix_scripts/pdns.backend.sh
Copyright 2K16 - 2K18 Indonesian Hacker Rulez