Python library for Web-Based Enterprise Management (WBEM). WMI Queries and Remote Shell scripts can be sent securely to windows hosts via encrypted communication. Based on this, nagios plugins can gather arbitrary information about the remote system for monitoring purposes without having to contact an agent.
If you want to use Kerberos, be aware only MIT Kerberos is supported
On your Windows host:
Add a user to your hosts Administrator Group
Basic Auth will not work without some additional settings before.
https://github.com/diyan/pywinrm#enabling-winrm-on-remote-host
But be careful, this is quite insecure for http only
On the icinga server:
Set the python path:
cd pywmi_wbem/src/ && export PYTHONPATH=$(pwd)Try to run a check againt your windows host:
../nagios_checks/check_disk_wbem -H 'host_fqdn' -a 'user:pw' --sslOne can also authenticate via Kerberos:
After adding a domain_user to the Administrator Group on the remote host, Kerberos client needs to be set up on the icinga server (for rhel systems: https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/system-level_authentication_guide/configuring_a_kerberos_5_client).
Then a kerberos ticket can be created via kinit domain_user_account.
Now you can try to run the check without basic auth.
Execute this in the Powershell ISE to test WMI Queries without the WBEM Wrapper provided from this library:
$Credential = Get-Credential domain\account -Message "Admin account"
$remote = "fqdn"
Get-WSManInstance -Enumerate wmicimv2/* -Filter "SELECT * FROM Win32_PageFileUsage" -computername $remote -Credential $Credential
Disk
File
Load
Memory
Process
Remote Ping
Smart
Swap
Windows Task (via Remote Shell)
Windows Updates (via Remote Shell)
Logged in user (via Remote Shell)
object CheckCommand "load-wbem" {
import "plugin-check-command"
command = [ PluginDir + "/check_load_wbem" ]
arguments = {
"-H" = "$wmi_host$"
"-S" = {
set_if = "$wmi_ssl$"
}
"-a" = {
value = "$wmi_auth_pair$"
description = "Username:password on sites with basic authentication"
}
}
timeout = 120
vars.wmi_host = "$address$"
}
object CheckCommand "win-task-wbem" {
import "plugin-check-command"
command = [ PluginDir + "/check_win_task_wbem" ]
arguments = {
"-H" = "$wmi_host$"
"-S" = {
set_if = "$wmi_ssl$"
}
"-a" = {
value = "$wmi_auth_pair$"
description = "Username:password on sites with basic authentication"
}
"-P" = {
value = "$task_path_regex$"
}
}
timeout = 120
vars.wmi_host = "$address$"
}
object CheckCommand "memory-wbem" {
import "plugin-check-command"
command = [ PluginDir + "/check_memory_wbem"]
arguments = {
"-H" = "$wmi_host$"
"-W" = "$memory_warn_used$"
"-C" = "$memory_crit_used$"
"-S" = {
set_if = "$wmi_ssl$"
}
"-a" = {
value = "$wmi_auth_pair$"
description = "Username:password on sites with basic authentication"
}
}
timeout = 120
vars.wmi_host = "$address$"
vars.memory_warn_used = "90"
vars.memory_crit_used = "95"
}
object CheckCommand "disk-wmi" {
import "plugin-check-command"
command = [ PluginDir + "/check_disk_wbem"]
arguments = {
"-H" = "$wmi_host$"
"-S" = {
set_if = "$wmi_ssl$"
}
"-a" = {
value = "$wmi_auth_pair$"
description = "Username:password on sites with basic authentication"
}
"-W" = {
value = "$warning_disk_free$"
description = "Warning Threshold"
}
"-C" = {
value = "$critical_disk_free$"
description = "Critical Threshold"
}
"-d" = {
value = "$drives$"
description = "Drives to show"
}
"-i" = {
value = "$ignore_drives$"
description = "Drives to ignore"
}
}
timeout = 120
vars.warning_disk_free = "2GB"
vars.critical_disk_free = "1GB"
vars.wmi_host = "$address$"
}
object CheckCommand "swap-wmi" {
import "plugin-check-command"
command = [ PluginDir + "/check_swap_wbem"]
arguments = {
"-H" = "$wmi_host$"
"-W" = "$swap_warn_used$"
"-C" = "$swap_crit_used$"
"-S" = {
set_if = "$wmi_ssl$"
}
"-a" = {
value = "$wmi_auth_pair$"
description = "Username:password on sites with basic authentication"
}
}
timeout = 240
vars.wmi_host = "$address$"
vars.swap_warn_used = 90
vars.swap_crit_used = 95
}
object CheckCommand "smart-wmi" {
import "plugin-check-command"
command = [ PluginDir + "/check_smart_wbem" ]
arguments = {
"-H" = "$wmi_host$"
"-S" = {
set_if = "$wmi_ssl$"
}
"-a" = {
value = "$wmi_auth_pair$"
description = "Username:password on sites with basic authentication"
}
}
timeout = 120
vars.wmi_host = "$address$"
}
object CheckCommand "process-wmi" {
import "plugin-check-command"
command = [ PluginDir + "/check_process_wbem" ]
arguments = {
"-H" = "$wmi_host$"
"-p" = "$process_name$"
"-r" = "$regex$"
"-S" = {
set_if = "$wmi_ssl$"
}
"-C" = "$process_count$"
"-a" = {
value = "$wmi_auth_pair$"
description = "Username:password on sites with basic authentication"
}
"-m" = "$mode$"
}
vars.wmi_host = "$address$"
}
object CheckCommand "remote-ping-wmi" {
import "plugin-check-command"
command = [ PluginDir + "/check_remote_ping_wbem" ]
arguments = {
"-H" = "$wmi_host$"
"-r" = "$remote_ip$"
}
vars.wmi_host = "$address$"
}
object CheckCommand "file-wmi" {
import "plugin-check-command"
command = [ PluginDir + "/check_file_wbem" ]
arguments = {
"-H" = "$wmi_host$"
"-f" = "$filename$"
"-m" = "$minutes$"
"-w" = {
set_if = "$file_error_is_warning$"
}
}
vars.wmi_host = "$address$"
}
object CheckCommand "user-wbem" {
import "plugin-check-command"
command = [ PluginDir + "/check_user_login_wbem" ]
arguments = {
"-H" = "$wmi_host$"
"-S" = {
set_if = "$wmi_ssl$"
}
"-a" = {
value = "$wmi_auth_pair$"
description = "Username:password on sites with basic authentication"
}
"-u" = "$win_user$"
}
timeout = 120
vars.wmi_host = "$address$"
}