Dorance Martinez Cortes' presentation on customizing Nagios. The presentation was given during the Nagios World Conference North America held Oct 13th - Oct 16th, 2014 in Saint Paul, MN. For more information on the conference (including photos and videos), visit: http://go.nagios.com/conference.

1. “If you think technology can solve your security problems, then you don't
understand the problems and you don't understand the technology”
Bruce Schneier

2. Customizing Nagios
Dorancé Martínez Cortés
dorancemc@gmail.com
@dorancemc

3. Agenda
• About me
• Good practices
• Monitoring tools
• Why nagios?
• Work with IT
• Nagios for >300 host >2500 services
• Strategy
• Capacity planning
• Conclusion
• Questions

4. About me
>10 Years: Linux, Windows, HPUX,
AIX, Mac.
Tecnoquímicas
Alert Logic
In free time: camping
And full-time: husband and father

5. Tecnoquímicas
Tecnoquímicas
• Health
• Personal care and household
cleaning
• Processed foods
• Agricultural and veterinary
products

6. Best practices
• If you can't be measured,
you can't control it
• If you can't control,
you can't manage
• If you can't manage,
you can't improve it

7. Lowest incident

8. More information

9. bigger incident?

10. users

11. Feeling the incident

12. Best practices
• If you can't be measured,
you can't control it
• If you can't control,
you can't manage
• If you can't manage,
you can't improve it

13. Monitoring Tool

14. Monitoring Tool
• Views
• Alerts
• Prevention
• Compatibility
• Visibility network and infrastructure not
controlled.
• Flexibility
• Reports
• ROI

15. Decision
CPU
MEM
DISK SPACE
DISK I/O
TCP/UDP
NIC

16. Decision

17. Decision

18. Decision

19. Decision

20. IT
Infrastructure and development
Infrastructure,
network and
communications
Development
Financials Sales Manufacturing Services
Help Desk
IT

21. Responsabilities
• Application Administration
• Database Administration
• Script development
• User support (level2)
• Training
• New projects
• Contact with suppliers
• Internet Support
• Software updates
• AntiVirus updates
• Network speed
• Backups
• SLA compliance
• Best practices
• Infrastructure improvement

22. Incidents
• Slowness problems
• Failures in the database
• Users with little training
• Urgent projects
• Failures in Internet
• Virus in the system
• Recovery of Backups
• Incidents
• Breach of SLA

23. Hardware
HP IBM DELL

24. HPUX
HP
Operative System
GNU/Linux
XEN
IBM
Microsoft
MS HyperV
GNU/Linux
ORACLEVM
DELL

25. Oracle
HPUX
HP
Oracle Apache MySQL +
GNU/Linux
XEN
IBM
DELL
Oracle Apache MySQL +
GNU/Linux
Oracle VM
Microsoft
MS HyperV
MSExchange MSSQL
Active
Directory
+ +
Software

26. Oracle Apache MySQL +
GNU/Linux
Storage
Network
Oracle
HPUX
HP
Oracle Apache MySQL +
GNU/Linux
XEN
IBM
DELL
Oracle VM
Microsoft
MS HyperV
MSExchange MSSQL
Active
Directory
+ +
Network & Storage

27. Hardware

28. Hardware

29. Software

31. Network & Storage
Oracle Apache MySQL +
Oracle Apache MySQL +
GNU/Linux
Storage
Network
Oracle
HPUX
HP
GNU/Linux
XEN
IBM
DELL
Oracle VM
Microsoft
MS HyperV
MSExch
ange
MSSQL
Active
Directo
ry
+ +

32. Strategy
Minimum Requirements
• Software
• Hardware
Make connections
• Physical
• Virtual
• Storage
• Network
Solutions
• Critical
•Warning
• Normal -> Statistics

33. Software

34. Strategy
Minimum Requirements
• Software
• Hardware
Make connections
• Physical
• Virtual
• Storage
• Network
Solutions
• Critical
•Warning
• Normal -> Statistics

35. Software

36. Software

37. Software

38. Strategy
Minimum Requirements
• Software
• Hardware
Make connections
• Physical
• Virtual
• Storage
• Network
Solutions
• Critical
•Warning
• Normal -> Statistics

39. Software

40. Software

41. Running…

42. Software

43. Services groups

44. Services groups

45. Host groups

46. infrastructure

47. performance

48. Statistics
2013 2014

49. Statistics
1.005
1
0.995
0.99
0.985
0.98
0.975
0.97
0.965
1 2 3 4 5 6 7 8 9
ok status 2013
ok status 2014

50. Capacity planning

51. Capacity planning

52. Capacity planning

53. Software
0.01
Hosts
0.99
Done
Pending
0.89
0.11
Services
Done
Pending

54. Monitoring Tool
• Views
• Alerts
• Prevention
• Compatibility
• Visibility network and infrastructure not
controlled.
• Flexibility
• Reports
• ROI

55. Conclusion
• There is no tool or universal solution
• Monitoring tools should point to the
prediction and prevention
• Monitoring tools are not used at 100%:
unknowledge of the tool and methods of
analysis
• The company should have a monitoring
strategy

56. Conclusion

57. Conclusion
• Monitoring strategy
• Good teamwork
• Great tools
If you think technology can solve your
security problems, then you don't
understand the problems and you don't
understand the technology. “Bruce
Schneier”

58. Questions?

59. THANKS!
Dorancé Martínez Cortés
dorancemc@gmail.com
@dorancemc