# Icinga2

**this is very much work in progress**

The overview of your nodes in Icinga2 you get at [monitoring.psi.ch](https://monitoring.psi.ch) and there you can handle the alerts and create service windows, etc.

But the configuration as such is not done therein, but in Hiera and automatically propagated.


## Basic Configuration
Enable monitoring with Icinga2 by
```
icinga2::enable: true
```
(which will be default at some point, e.g. for RHEL9).

Users and groups in `aaa::admins` and `icinga2::web::users` will have access to these nodes on [monitoring.psi.ch](https://monitoring.psi.ch).
Prefix the group name with a `%` to distinguish them from users.

By default no alerts are generated. If you wish different, set
```
icinga2::alerting::enable: true
```

## Icinga2 Agent

The Icinga2 Agent can be enabled with
```
icinga2::agent::enable: true
```

## Default Checks

By default we already run a comprehensive set of checks. Some of them can be fine-tuned in Hiera.
Whenever you have a use case which is not covered yet, please talk to us.

### Kernel Ring Buffer (dmesg)

This check alerts on critical kernel messages.
But if the message as such is OK, it can be ignored by adding a substring of it to the array `icinga2::agent::check::dmesg::ignore_list` in Hiera:

```
icinga2::agent::check::dmesg::ignore_list:
  - 'SMBus base address uninitialized - upgrade BIOS or use'
```