2015-10-27 09:50:24 +01:00
# <a id="icinga2-api"></a> Icinga 2 API
2015-08-28 17:17:07 +02:00
## <a id="icinga2-api-introduction"></a> Introduction
The Icinga 2 API allows you to manage configuration objects
and resources in a simple, programmatic way using HTTP requests.
2015-10-22 12:16:59 +02:00
The URL endpoints are logically separated allowing you to easily
2015-08-28 17:17:07 +02:00
make calls to
2015-09-07 14:04:34 +02:00
* run [actions ](9-icinga2-api.md#icinga2-api-actions ) (reschedule checks, etc.)
2015-09-28 18:02:41 +02:00
* query, create, modify and delete [config objects ](9-icinga2-api.md#icinga2-api-config-objects )
2015-09-07 14:04:34 +02:00
* [manage configuration packages ](9-icinga2-api.md#icinga2-api-config-management )
* subscribe to [event streams ](9-icinga2-api.md#icinga2-api-event-streams )
2015-08-28 17:17:07 +02:00
This chapter will start with a general overview followed by
2015-10-22 12:16:59 +02:00
detailed information about specific URL endpoints.
2015-08-28 17:17:07 +02:00
2015-08-29 10:29:19 +02:00
### <a id="icinga2-api-requests"></a> Requests
2015-08-28 17:17:07 +02:00
Any tool capable of making HTTP requests can communicate with
the API, for example [curl ](http://curl.haxx.se ).
Requests are only allowed to use the HTTPS protocol so that
traffic remains encrypted.
2015-10-22 12:16:59 +02:00
By default the Icinga 2 API listens on port `5665` which is shared with
the cluster stack. The port can be changed by setting the `bind_port` attribute
in the [ApiListener ](6-object-types.md#objecttype-apilistener )
2015-08-28 17:17:07 +02:00
configuration object in the `/etc/icinga2/features-available/api.conf`
file.
Supported request methods:
2015-10-26 15:53:25 +01:00
Method | Usage
-------|--------
GET | Retrieve information about configuration objects. Any request using the GET method is read-only and does not affect any objects.
POST | Update attributes of a specified configuration object.
PUT | Create a new object. The PUT request must include all attributes required to create a new object.
DELETE | Remove an object created by the API. The DELETE method is idempotent and does not require any check if the object actually exists.
2015-10-27 18:42:32 +01:00
2015-11-01 16:34:56 +01:00
Each URL contains the version string as prefix (currently "/v1"). Be prepared to see additional fields being added in future versions. New fields could be added even with minor releases.
2015-10-27 18:42:32 +01:00
Modifications to existing fields are considered backward-compatibility-breaking and will only take place in new API versions.
The request and response bodies contain a JSON-encoded object.
2015-08-28 17:17:07 +02:00
2015-11-01 16:34:56 +01:00
### <a id="icinga2-api-requests-method-override"></a> Request Method Override
`GET` requests do not allow to send a request body. In case you cannot pass everything as URL parameters (e.g. complex filters or JSON-encoded dictionaries) you can use the `X-HTTP-Method-Override` header. This comes in handy when you are using HTTP proxies disallowing `PUT` or `DELETE` requests too.
Query an existing object by sending a `POST` request with `X-HTTP-Method-Override: GET` as request header:
$ curl -k -s -u 'root:icinga' -H 'X-HTTP-Method-Override: GET' -X POST 'https://localhost:5665/v1/objects/hosts'
Delete an existing object by sending a `POST` request with `X-HTTP-Method-Override: GET` as request header:
$ curl -k -s -u 'root:icinga' -H 'X-HTTP-Method-Override: DELETE' -X POST 'https://localhost:5665/v1/objects/hosts/icinga.org'
2015-08-29 10:29:19 +02:00
### <a id="icinga2-api-http-statuses"></a> HTTP Statuses
2015-08-28 17:17:07 +02:00
The API will return standard [HTTP statuses ](https://www.ietf.org/rfc/rfc2616.txt )
including error codes.
When an error occurs, the response body will contain additional information
about the problem and its source.
2015-10-27 14:15:07 +01:00
A status code between 200 and 299 generally means that the request was
2015-11-01 18:30:46 +01:00
successful.
2015-08-28 17:17:07 +02:00
Return codes within the 400 range indicate that there was a problem with the
request. Either you did not authenticate correctly, you are missing the authorization
for your requested action, the requested object does not exist or the request
was malformed.
A status in the range of 500 generally means that there was a server-side problem
and Icinga 2 is unable to process your request currently.
2015-10-26 15:53:25 +01:00
2015-08-29 10:29:19 +02:00
### <a id="icinga2-api-responses"></a> Responses
2015-08-28 17:17:07 +02:00
2015-11-01 18:30:46 +01:00
Successful requests will send back a response body containing a `results`
2015-08-28 17:17:07 +02:00
list. Depending on the number of affected objects in your request, the
results may contain one or more entries.
2015-10-28 21:07:12 +01:00
The output will be sent back as a JSON object:
2015-08-28 17:17:07 +02:00
{
"results": [
{
"code": 200.0,
"status": "Object was created."
}
]
}
2015-08-29 10:29:19 +02:00
### <a id="icinga2-api-authentication"></a> Authentication
2015-08-28 17:17:07 +02:00
There are two different ways for authenticating against the Icinga 2 API:
* username and password using HTTP basic auth
2015-10-22 12:16:59 +02:00
* X.509 certificate
2015-08-28 17:17:07 +02:00
In order to configure a new API user you'll need to add a new [ApiUser ](6-object-types.md#objecttype-apiuser )
configuration object. In this example `root` will be the basic auth username
and the `password` attribute contains the basic auth password.
2015-10-22 12:16:59 +02:00
# vim /etc/icinga2/conf.d/api-users.conf
2015-08-28 17:17:07 +02:00
object ApiUser "root" {
2015-10-22 12:16:59 +02:00
password = "icinga"
2015-08-28 17:17:07 +02:00
}
Alternatively you can use X.509 client certificates by specifying the `client_cn`
2015-10-22 12:16:59 +02:00
the API should trust. The X.509 certificate has to be signed by the CA certificate
that is configured in the [ApiListener ](6-object-types.md#objecttype-apilistener ) object.
2015-08-28 17:17:07 +02:00
2015-10-22 12:16:59 +02:00
# vim /etc/icinga2/conf.d/api-users.conf
2015-08-28 17:17:07 +02:00
object ApiUser "api-clientcn" {
2015-11-01 18:30:46 +01:00
client_cn = "CertificateCommonName"
2015-08-28 17:17:07 +02:00
}
An `ApiUser` object can have both methods configured. Sensitive information
such as the password will not be exposed through the API itself.
2015-10-22 12:16:59 +02:00
New installations of Icinga 2 will automatically set up a new `ApiUser`
named `root` with an auto-generated password in the `/etc/icinga2/conf.d/api-users.conf`
2015-08-28 17:17:07 +02:00
file.
2015-10-22 12:16:59 +02:00
2015-11-05 15:37:58 +01:00
Run the CLI command `icinga2 api setup` to generate certificates
and a new API user `root` with an auto-generated password in the
`/etc/icinga2/conf.d/api-users.conf` configuration file.
# icinga2 api setup
2015-08-28 17:17:07 +02:00
Once the API user is configured make sure to restart Icinga 2:
# service icinga2 restart
2015-10-22 12:16:59 +02:00
You can test authentication by sending a GET request to the API:
2015-08-28 17:17:07 +02:00
2015-11-04 10:39:32 +01:00
$ curl -k -s -u root:icinga 'https://localhost:5665/v1'
2015-08-28 17:17:07 +02:00
2015-10-22 12:16:59 +02:00
In case you get an error message make sure to check the API user credentials.
2015-08-28 17:17:07 +02:00
2015-11-05 15:37:58 +01:00
The curl parameter `-k` disables certificate verification. In order
2015-11-04 10:39:32 +01:00
to securely check each connection you'll need to pass the trusted CA certificate
using the curl parameter`--cacert`:
$ curl -u root:icinga --cacert ca.crt 'icinga2.node1.localdomain:5665/v1'
Using client certificates you'll need to pass your client certificate
and the trusted CA certificate from your Icinga 2 instance to the curl call:
$ curl --cert icinga2-node1.localdomain.crt --key icinga2-node1.localdomain.key --cacert ca.crt 'https://icinga2-node1.localdomain:5665/v1/status'
In case of an error make sure to verify the client certificate and CA.
2015-11-01 16:34:56 +01:00
Read the next chapter on [API permissions ](9-icinga2-api.md#icinga2-api-permissions )
in order to authorize the newly created API user.
2015-10-26 15:53:25 +01:00
2015-08-29 10:29:19 +02:00
### <a id="icinga2-api-permissions"></a> Permissions
2015-08-28 17:17:07 +02:00
2015-10-22 12:16:59 +02:00
By default an API user does not have any permissions to perform
actions on the [URL endpoints ](9-icinga2-api.md#icinga2-api-url-endpoints ).
2015-09-28 18:02:41 +02:00
2015-10-22 12:16:59 +02:00
Permissions for API users must be specified in the `permissions` attribute
2015-09-28 18:02:41 +02:00
as array. The array items can be a list of permission strings with wildcard
matches.
2015-10-22 12:16:59 +02:00
Example for an API user with all permissions:
2015-09-28 18:02:41 +02:00
permissions = [ "*" ]
A yet more sophisticated approach is to specify additional permissions
2015-11-01 18:30:46 +01:00
and their filters. The latter must be defined as [lambda function ](18-language-reference.md#nullary-lambdas )
2015-09-28 18:02:41 +02:00
returning a boolean expression.
The `permission` attribute contains the action and the specific capitalized
object type name. Instead of the type name it is also possible to use a wildcard
match.
2015-10-22 12:16:59 +02:00
The following example allows the API user to query all hosts and services with
2015-09-28 18:02:41 +02:00
the custom host attribute `os` matching the regular expression `^Linux` .
permissions = [
{
permission = "objects/query/Host"
filter = {{ regex("^Linux", host.vars.os) }}
},
{
permission = "objects/query/Service"
filter = {{ regex("^Linux", host.vars.os) }}
},
]
2015-10-22 12:16:59 +02:00
Available permissions for specific URL endpoints:
2015-09-28 18:02:41 +02:00
2015-10-27 14:15:07 +01:00
Permissions | URL Endpoint
2015-10-26 15:53:25 +01:00
------------------------------|---------------
2015-10-27 18:42:32 +01:00
actions/< action> | /v1/actions
2015-10-26 15:53:25 +01:00
config/query | /v1/config
config/modify | /v1/config
2015-10-27 18:42:32 +01:00
objects/query/< type> | /v1/objects
objects/create/< type> | /v1/objects
objects/modify/< type> | /v1/objects
objects/delete/< type> | /v1/objects
2015-10-26 15:53:25 +01:00
status/query | /v1/status
2015-10-27 18:42:32 +01:00
events/< type> | /v1/events
2015-11-04 10:39:32 +01:00
console/* | /v1/console
2015-09-28 18:02:41 +02:00
The required actions or types can be replaced by using a wildcard match ("*").
2015-08-28 17:17:07 +02:00
2015-10-26 15:53:25 +01:00
2015-08-29 10:29:19 +02:00
### <a id="icinga2-api-parameters"></a> Parameters
2015-08-28 17:17:07 +02:00
Depending on the request method there are two ways of
passing parameters to the request:
2015-11-01 16:34:56 +01:00
* JSON object as request body (`POST`, `PUT` )
* Query string as URL parameter (`GET`, `DELETE` )
2015-08-28 17:17:07 +02:00
2015-11-01 16:34:56 +01:00
Reserved characters by the HTTP protocol must be [URL-encoded ](https://en.wikipedia.org/wiki/Percent-encoding )
as query string, e.g. a space becomes `%20` .
2015-08-28 17:17:07 +02:00
2015-11-01 16:34:56 +01:00
Example for an URL-encoded query string:
2015-08-28 17:17:07 +02:00
2015-11-04 10:39:32 +01:00
/v1/objects/hosts?filter=match(%22icinga2-node1.localdomain*%22,host.name)& attrs=host.name& attrs=host.state
2015-08-28 17:17:07 +02:00
2015-10-27 18:42:32 +01:00
Example for a JSON body:
2015-08-28 17:17:07 +02:00
2015-11-04 10:39:32 +01:00
{ "templates": [ "generic-host" ], "attrs": { "address": "8.8.8.8", "check_command": "hostalive", "vars.os" : "Linux" } }
2015-08-28 17:17:07 +02:00
2015-11-01 16:34:56 +01:00
Selecting a single object as URL parameter:
?host=icinga.org
Selecting multiple objects as URL parameter:
?hosts=host1& hosts=host2& hosts=host3
The array-append-notation is also supported:
?hosts[]=host1& hosts[]=host2& hosts[]=host3
2015-08-29 10:29:19 +02:00
#### <a id="icinga2-api-filters"></a> Filters
2015-08-28 17:17:07 +02:00
2015-11-01 16:34:56 +01:00
Uses the same syntax as [apply rule expressions ](3-monitoring-basics.md#using-apply-expressions )
for filtering specific objects.
> **Note**
>
> Filters used as URL parameter must be URL-encoded. The following examples
> are **not URL-encoded** for better readability.
2015-08-28 17:17:07 +02:00
2015-11-01 16:34:56 +01:00
Example matching all services in NOT-OK state:
2015-08-28 17:17:07 +02:00
2015-10-27 14:15:07 +01:00
https://localhost:5665/v1/objects/services?filter=service.state!=ServiceOK
2015-08-28 17:17:07 +02:00
2015-11-01 16:34:56 +01:00
Example matching all hosts by name:
2015-08-28 17:17:07 +02:00
2015-11-04 10:39:32 +01:00
https://localhost:5665/v1/objects/hosts?filter=match("icinga2-node1.localdomain*",host.name)
2015-11-01 16:34:56 +01:00
Example for all hosts being a member of the host group `linux-servers` :
https://localhost:5665/v1/objects/hosts?filter="linux-servers" in host.groups
In order to add complex filters with specific filter variables it is possible
to send a `POST` request using `X-HTTP-Method-Override: GET` . Add the `filter`
and `filter_vars` attributes to the request body and receive all host objects
matching the filter:
$ curl -k -s -u 'root:icinga' -H 'X-HTTP-Method-Override: GET' -X POST 'https://localhost:5665/v1/objects/hosts' \
-d '{ "filter": "host.vars.os == os", "filter_vars": { "os": "Linux" } }'
The `filters_vars` attribute can only be used inside the request body, but not as URL parameter.
2015-08-28 17:17:07 +02:00
2015-10-26 15:53:25 +01:00
### <a id="icinga2-api-url-endpoints"></a> URL Endpoints
2015-08-28 17:17:07 +02:00
2015-10-22 12:16:59 +02:00
The Icinga 2 API provides multiple URL endpoints:
2015-08-28 17:17:07 +02:00
2015-10-27 14:15:07 +01:00
URL Endpoints | Description
2015-10-26 15:53:25 +01:00
--------------|--------------
/v1/actions | Endpoint for running specific [API actions ](9-icinga2-api.md#icinga2-api-actions ).
/v1/events | Endpoint for subscribing to [API events ](9-icinga2-api.md#icinga2-api-actions ).
2015-10-27 18:42:32 +01:00
/v1/status | Endpoint for receiving the global Icinga 2 [status and statistics ](9-icinga2-api.md#icinga2-api-status ).
2015-10-26 15:53:25 +01:00
/v1/objects | Endpoint for querying, creating, modifying and deleting [config objects ](9-icinga2-api.md#icinga2-api-config-objects ).
2015-10-27 18:42:32 +01:00
/v1/config | Endpoint for [managing configuration modules ](9-icinga2-api.md#icinga2-api-config-management ).
2015-11-04 10:39:32 +01:00
/v1/types | Endpoint for listing Icinga 2 configuration object types and their attributes.
/v1/console | Endpoint for connecting the [Icinga 2 console ](9-icinga2-api.md#icinga2-api-clients-cli-console )
2015-08-28 17:17:07 +02:00
2015-10-27 18:42:32 +01:00
Please check the respective sections for detailed URL information and parameters.
2015-08-28 17:17:07 +02:00
2015-11-01 16:34:56 +01:00
2015-08-29 10:29:19 +02:00
## <a id="icinga2-api-actions"></a> Actions
2015-08-28 17:17:07 +02:00
2015-10-16 11:44:18 +02:00
There are several actions available for Icinga 2 provided by the `actions`
2015-10-27 18:42:32 +01:00
URL endpoint `/v1/actions` . You can run actions by sending a `POST` request.
2015-10-22 12:16:59 +02:00
2015-10-28 21:07:12 +01:00
In case you have been using the [external commands ](15-features.md#external-commands )
2015-10-16 11:44:18 +02:00
in the past, the API actions provide a similar interface with filter
capabilities for some of the more common targets which do not directly change
the configuration.
2015-10-22 12:16:59 +02:00
2015-10-16 11:44:18 +02:00
Some actions require specific target types (e.g. `type=Host` ) and a
[filter expression ](9-icinga2-api.md#icinga2-api-filters ).
For each object matching the filter the action in question is performed once.
2015-10-27 18:42:32 +01:00
These parameters may either be passed as an URL query string (e.g. url/actions/action-name?list=of& parameters)
or as key-value pairs in a JSON-formatted payload or a mix of both.
2015-10-26 15:53:25 +01:00
2015-10-27 18:42:32 +01:00
All actions return a 200 `OK` or an appropriate error code for each
action performed on each object matching the supplied filter.
2015-10-16 11:44:18 +02:00
2015-10-29 17:31:15 +01:00
Actions which affect the Icinga Application itself such as disabling
notification on a program-wide basis must be applied by updating the
[IcingaApplication object ](9-icinga2-api.md#icinga2-api-config-objects )
called `app` .
$ curl -k -s -u root:icinga -X POST 'https://localhost:5665/v1/objects/icingaapplications/app' -d '{ "attrs": { "enable_notifications": false } }'
2015-10-26 15:53:25 +01:00
### <a id="icinga2-api-actions-process-check-result"></a> process-check-result
2015-11-01 16:34:56 +01:00
Process a check result for a host or a service.
2015-10-27 18:42:32 +01:00
Send a `POST` request to the URL endpoint `/v1/actions/process-check-result` .
2015-10-16 11:44:18 +02:00
2015-10-26 15:53:25 +01:00
Parameter | Type | Description
------------------|--------------|--------------
2015-10-27 18:42:32 +01:00
type | string | **Required.** `Host` or `Service` .
2015-10-28 21:07:12 +01:00
filter | string | **Optional.** Apply the action only to objects matching the [filter ](9-icinga2-api.md#icinga2-api-filters ).
2015-10-26 15:53:25 +01:00
exit\_status | integer | **Required.** For services: 0=OK, 1=WARNING, 2=CRITICAL, 3=UNKNOWN, for hosts: 0=OK, 1=CRITICAL.
2015-11-01 18:30:46 +01:00
plugin\_output | string | **Required.** The plugins main output, i.e. the text before the `|` . Does **not** contain the performance data.
2015-10-26 15:53:25 +01:00
performance\_data | string array | **Optional.** One array entry per `;` separated block.
check\_command | string array | **Optional.** The first entry should be the check commands path, then one entry for each command line option followed by an entry for each of its argument.
2015-10-27 14:15:07 +01:00
check\_source | string | **Optional.** Usually the name of the `command_endpoint`
2015-10-26 15:53:25 +01:00
2015-10-27 18:42:32 +01:00
This is used to submit a passive check result for a service or host. Passive
checks need to be enabled for the check result to be processed.
2015-10-16 11:44:18 +02:00
Example:
2015-11-01 16:34:56 +01:00
$ curl -k -s -u root:icinga -X POST 'https://localhost:5665/v1/actions/process-check-result?type=Service& filter=service.name==%22ping6%22' \
-d '{ "exit_status": 2, "plugin_output": "PING CRITICAL - Packet loss = 100%", "performance_data": [ "rta=5000.000000ms;3000.000000;5000.000000;0.000000", "pl=100%;80;100;0" ], "check_source": "icinga2-node1.localdomain" }' | python -m json.tool
{
"results": [
{
"code": 200.0,
"status": "Successfully processed check result for object 'localhost!ping6'."
}
]
2015-10-26 15:53:25 +01:00
}
### <a id="icinga2-api-actions-reschedule-check"></a> reschedule-check
2015-10-16 11:44:18 +02:00
2015-11-01 16:34:56 +01:00
Reschedule a check for hosts and services. The check can be forced if required.
2015-10-27 18:42:32 +01:00
Send a `POST` request to the URL endpoint `/v1/actions/reschedule-check` .
2015-10-16 11:44:18 +02:00
2015-10-27 14:15:07 +01:00
Parameter | Type | Description
-------------|-----------|--------------
2015-10-27 18:42:32 +01:00
type | string | **Required.** `Host` or `Service` .
2015-10-28 21:07:12 +01:00
filter | string | **Optional.** Apply the action only to objects matching the [filter ](9-icinga2-api.md#icinga2-api-filters ).
2015-11-01 16:34:56 +01:00
next\_check | timestamp | **Optional.** The next check will be run at this time. If omitted the current time is used.
force\_check | boolean | **Optional.** Defaults to `false` . If enabled the checks are executed regardless of time period restrictions and checks being disabled per object or on a global basis.
2015-10-26 15:53:25 +01:00
2015-11-01 16:34:56 +01:00
The example reschedules all services with the name "ping6" to immediately perform a check
(`next_check` default), ignoring any time periods or whether active checks are
allowed for the service (`force_check=true`).
2015-10-26 15:53:25 +01:00
2015-11-01 16:34:56 +01:00
$ curl -k -s -u root:icinga -X POST "https://localhost:5665/v1/actions/reschedule-check?type=Service& filter=service.name==%22ping6%22" \
-d '{ "force_check": true }' | python -m json.tool
2015-10-27 18:42:32 +01:00
2015-11-01 16:34:56 +01:00
{
"results": [
{
"code": 200.0,
"status": "Successfully rescheduled check for object 'localhost!ping6'."
}
]
2015-10-26 15:53:25 +01:00
}
2015-10-16 11:44:18 +02:00
2015-10-26 15:53:25 +01:00
### <a id="icinga2-api-actions-send-custom-notification"></a> send-custom-notification
2015-11-01 16:34:56 +01:00
Send a custom notification for hosts and services. This notification
type can be forced being sent to all users.
2015-10-27 18:42:32 +01:00
Send a `POST` request to the URL endpoint `/v1/actions/send-custom-notification` .
2015-10-16 11:44:18 +02:00
2015-10-26 15:53:25 +01:00
Parameter | Type | Description
----------|---------|--------------
2015-10-27 18:42:32 +01:00
type | string | **Required.** `Host` or `Service` .
2015-10-28 21:07:12 +01:00
filter | string | **Optional.** Apply the action only to objects matching the [filter ](9-icinga2-api.md#icinga2-api-filters ).
2015-10-26 15:53:25 +01:00
author | string | **Required.** Name of the author, may be empty.
comment | string | **Required.** Comment text, may be empty.
force | boolean | **Optional.** Default: false. If true, the notification is sent regardless of downtimes or whether notifications are enabled or not.
2015-11-01 18:30:46 +01:00
Example for a custom host notification announcing a global maintenance to
2015-11-01 16:34:56 +01:00
host owners:
$ curl -k -s -u root:icinga -X POST 'https://localhost:5665/v1/actions/send-custom-notification' \
-d '{ "type": "Host", "author": "icingaadmin", "comment": "System is going down for maintenance", "force": true }' | python -m json.tool
{
"results": [
{
"code": 200.0,
"status": "Successfully sent custom notification for object 'host0'."
},
{
"code": 200.0,
"status": "Successfully sent custom notification for object 'host1'."
}
}
2015-10-26 15:53:25 +01:00
### <a id="icinga2-api-actions-delay-notification"></a> delay-notification
2015-10-16 11:44:18 +02:00
2015-11-01 16:34:56 +01:00
Delay notifications for a host or a service.
Note that this will only have an effect if the service stays in the same problem
state that it is currently in. If the service changes to another state, a new
notification may go out before the time you specify in the `timestamp` argument.
2015-10-27 18:42:32 +01:00
Send a `POST` request to the URL endpoint `/v1/actions/delay-notification` .
2015-10-16 11:44:18 +02:00
2015-10-27 14:15:07 +01:00
Parameter | Type | Description
----------|-----------|--------------
2015-10-27 18:42:32 +01:00
type | string | **Required.** `Host` or `Service` .
2015-10-28 21:07:12 +01:00
filter | string | **Optional.** Apply the action only to objects matching the [filter ](9-icinga2-api.md#icinga2-api-filters ).
2015-10-27 14:15:07 +01:00
timestamp | timestamp | **Required.** Delay notifications until this timestamp.
2015-10-16 11:44:18 +02:00
2015-11-01 16:34:56 +01:00
Example:
$ curl -k -s -u root:icinga -X POST 'https://localhost:5665/v1/actions/delay-notification' \
-d '{ "type": "Service", "timestamp": 1446389894 }' | python -m json.tool
{
"results": [
{
"code": 200.0,
"status": "Successfully delayed notifications for object 'host0!service0'."
},
{
"code": 200.0,
"status": "Successfully delayed notifications for object 'host1!service1'."
}
}
2015-10-16 11:44:18 +02:00
2015-10-26 15:53:25 +01:00
### <a id="icinga2-api-actions-acknowledge-problem"></a> acknowledge-problem
2015-11-01 16:34:56 +01:00
Allows you to acknowledge the current problem for hosts or services. By
acknowledging the current problem, future notifications (for the same state if `sticky` is set to `false` )
are disabled.
2015-10-27 18:42:32 +01:00
Send a `POST` request to the URL endpoint `/v1/actions/acknowledge-problem` .
2015-10-16 11:44:18 +02:00
2015-10-27 14:15:07 +01:00
Parameter | Type | Description
----------|-----------|--------------
2015-11-01 18:30:46 +01:00
type | string | **Required.** `Host` or `Service` .
2015-10-28 21:07:12 +01:00
filter | string | **Optional.** Apply the action only to objects matching the [filter ](9-icinga2-api.md#icinga2-api-filters ).
2015-10-27 14:15:07 +01:00
author | string | **Required.** Name of the author, may be empty.
comment | string | **Required.** Comment text, may be empty.
expiry | timestamp | **Optional.** If set the acknowledgement will vanish after this timestamp.
sticky | boolean | **Optional.** If `true` , the default, the acknowledgement will remain until the service or host fully recovers.
notify | boolean | **Optional.** If `true` a notification will be sent out to contacts to indicate this problem has been acknowledged. The default is false.
2015-10-16 11:44:18 +02:00
2015-10-27 18:42:32 +01:00
The following example acknowledges all services which are in a hard critical state and sends out
a notification for them:
2015-11-01 16:34:56 +01:00
$ curl -k -s -u root:icinga -X POST 'https://localhost:566tions/acknowledge-problem?type=Service& filter=service.state==2& service.state_type=1' \
-d '{ "author": "icingaadmin", "comment": "Global outage. Working on it.", "notify": true }' | python -m json.tool
2015-10-26 15:53:25 +01:00
2015-11-01 16:34:56 +01:00
{
"results": [
{
"code": 200.0,
"status": "Successfully acknowledged problem for object 'i-42866686!ping4'."
},
{
"code": 200.0,
"status": "Successfully acknowledged problem for object 'i-43866687!ping4'."
}
2015-10-26 15:53:25 +01:00
}
2015-11-01 16:34:56 +01:00
2015-10-26 15:53:25 +01:00
### <a id="icinga2-api-actions-remove-acknowledgement"></a> remove-acknowledgement
2015-10-16 11:44:18 +02:00
2015-11-01 16:34:56 +01:00
Removes the acknowledgements for services or hosts. Once the acknowledgement has
been removed notifications will be sent out again.
2015-10-27 18:42:32 +01:00
Send a `POST` request to the URL endpoint `/v1/actions/remove-acknowledgement` .
2015-10-16 11:44:18 +02:00
2015-10-27 14:15:07 +01:00
parameter | type | description
----------|--------|--------------
2015-10-27 18:42:32 +01:00
type | string | **Required.** `Host` or `Service` .
2015-10-28 21:07:12 +01:00
filter | string | **Optional.** Apply the action only to objects matching the [filter ](9-icinga2-api.md#icinga2-api-filters ).
2015-10-16 11:44:18 +02:00
2015-11-01 16:34:56 +01:00
The example removes all service acknowledgements:
$ curl -k -s -u root:icinga -X POST 'https://localhost:5665/v1/actions/remove-acknowledgement?type=Service' | python -m json.tool
{
"results": [
{
"code": 200.0,
"status": "Successfully removed acknowledgement for object 'host0!service0'."
},
{
"code": 200.0,
"status": "Successfully removed acknowledgement for object 'i-42866686!aws-health'."
}
}
2015-10-26 15:53:25 +01:00
### <a id="icinga2-api-actions-add-comment"></a> add-comment
2015-10-16 11:44:18 +02:00
2015-11-01 16:34:56 +01:00
Adds a `comment` from an `author` to services or hosts.
2015-10-27 18:42:32 +01:00
Send a `POST` request to the URL endpoint `/v1/actions/add-comment` .
2015-10-16 11:44:18 +02:00
2015-10-27 14:15:07 +01:00
parameter | type | description
----------|--------|--------------
2015-10-27 18:42:32 +01:00
type | string | **Required.** `Host` or `Service` .
2015-10-28 21:07:12 +01:00
filter | string | **Optional.** Apply the action only to objects matching the [filter ](9-icinga2-api.md#icinga2-api-filters ).
2015-10-27 14:15:07 +01:00
author | string | **Required.** name of the author, may be empty.
comment | string | **Required.** Comment text, may be empty.
2015-10-26 15:53:25 +01:00
2015-11-01 16:34:56 +01:00
Example:
$ curl -k -s -u root:icinga -X POST 'https://localhost:5665/v1/actions/add-comment?type=Service& filter=service.name==%22ping4%22' -d '{ "author": "icingaadmin", "comment": "Troubleticket #123456789 opened." }' | python -m json.tool
{
"results": [
{
"code": 200.0,
"comment_id": "i-42866686!ping4!mbmif.local-1446390475-55",
"legacy_id": 2.0,
"status": "Successfully added comment with id 'i-42866686!ping4!mbmif.local-1446390475-55' for object 'i-42866686!ping4'."
}
}
2015-10-16 11:44:18 +02:00
2015-10-27 14:15:07 +01:00
### <a id="icinga2-api-actions-remove-all-comments"></a> remove-all-comments
2015-10-16 11:44:18 +02:00
2015-11-01 16:34:56 +01:00
Removes all comments for services or hosts.
2015-10-27 18:42:32 +01:00
Send a `POST` request to the URL endpoint `/v1/actions/remove-all-comments` .
2015-10-16 11:44:18 +02:00
2015-10-27 14:15:07 +01:00
parameter | type | description
------------|---------|--------------
2015-10-27 18:42:32 +01:00
type | string | **Required.** `Host` or `Service` .
2015-10-28 21:07:12 +01:00
filter | string | **Optional.** Apply the action only to objects matching the [filter ](9-icinga2-api.md#icinga2-api-filters ).
2015-10-16 11:44:18 +02:00
2015-11-01 16:34:56 +01:00
Example:
$ curl -k -s -u root:icinga -X POST 'https://localhost:5665/v1/actions/remove-all-comments?type=Service' | python -m json.tool
{
"results": [
{
"code": 200.0,
"status": "Successfully removed comments for object 'i-42866686!aws-health'."
},
{
"code": 200.0,
"status": "Successfully removed comments for object 'i-43866687!aws-health'."
}
}
2015-10-16 11:44:18 +02:00
2015-10-26 15:53:25 +01:00
### <a id="icinga2-api-actions-remove-comment-by-id"></a> remove-comment-by-id
2015-11-01 16:34:56 +01:00
Tries to remove the comment with the ID `comment_id` , returns `OK` if the
comment did not exist.
**Note**: This is **not** the legacy ID but the comment ID returned by Icinga 2 itself.
2015-10-27 18:42:32 +01:00
Send a `POST` request to the URL endpoint `/v1/actions/remove-comment-by-id` .
2015-10-16 11:44:18 +02:00
2015-10-26 15:53:25 +01:00
parameter | type | description
------------|---------|--------------
comment\_id | integer | **Required.** ID of the comment to remove.
2015-10-27 18:42:32 +01:00
Does not support a target type or filters.
2015-10-27 14:15:07 +01:00
2015-11-01 16:34:56 +01:00
Example:
$ curl -k -s -u root:icinga -X POST 'https://localhost:5665/v1/actions/remove-comment-by-id?comment_id=i-43866687!ping4!mbmif.local-1446390475-56' | python -m json.tool
{
"results": [
{
"code": 200.0,
"status": "Successfully removed comment 'i-43866687!ping4!mbmif.local-1446390475-56'."
}
]
}
2015-10-16 11:44:18 +02:00
2015-10-26 15:53:25 +01:00
### <a id="icinga2-api-actions-schedule-downtime"></a> schedule-downtime
2015-11-01 16:34:56 +01:00
Schedule a downtime for hosts and services.
2015-10-27 18:42:32 +01:00
Send a `POST` request to the URL endpoint `/v1/actions/schedule-downtime` .
2015-10-16 11:44:18 +02:00
2015-10-27 14:15:07 +01:00
parameter | type | description
------------|-----------|--------------
2015-10-27 18:42:32 +01:00
type | string | **Required.** `Host` or `Service` .
2015-10-28 21:07:12 +01:00
filter | string | **Optional.** Apply the action only to objects matching the [filter ](9-icinga2-api.md#icinga2-api-filters ).
2015-11-01 18:30:46 +01:00
start\_time | timestamp | **Required.** Timestamp marking the beginning of the downtime.
2015-10-27 14:15:07 +01:00
end\_time | timestamp | **Required.** Timestamp marking the end of the downtime.
2015-10-27 18:42:32 +01:00
duration | integer | **Required.** Duration of the downtime in seconds if `fixed` is set to false.
2015-10-28 21:07:12 +01:00
fixed | boolean | **Optional.** Defaults to `false` . If true the downtime is `fixed` otherwise `flexible` . See [downtimes ](#Downtimes ) for more information.
trigger\_id | integer | **Optional.** Sets the trigger for a triggered downtime. See [downtimes ](#Downtimes ) for more information on triggered downtimes.
2015-10-26 15:53:25 +01:00
Example:
2015-10-16 11:44:18 +02:00
2015-11-01 16:34:56 +01:00
$ curl -k -s -u root:icinga -X POST 'https://localhost:5665/v1/actions/schedule-downtime?type=Service& filter=service.name==%22ping4%22' \
-d '{ "start_time": 1446388806, "end_time": 1446389806, "duration": 1000, "author": "icingaadmin", "comment": "IPv4 network maintenance" }' | python -m json.tool
{
"results": [
{
"code": 200.0,
"downtime_id": "i-42866686!ping4!mbmif.local-1446388986-545",
"legacy_id": 8.0,
"status": "Successfully scheduled downtime with id 'i-42866686!ping4!mbmif.local-1446388986-545' for object 'i-42866686!ping4'."
},
{
"code": 200.0,
"downtime_id": "i-43866687!ping4!mbmif.local-1446388986-546",
"legacy_id": 9.0,
"status": "Successfully scheduled downtime with id 'i-43866687!ping4!mbmif.local-1446388986-546' for object 'i-43866687!ping4'."
}
]
2015-10-26 15:53:25 +01:00
}
2015-11-01 16:34:56 +01:00
### <a id="icinga2-api-actions-remove-all-downtimes"></a> remove-all-downtimes
Removes all downtimes for services or hosts.
2015-10-16 11:44:18 +02:00
2015-10-27 18:42:32 +01:00
Send a `POST` request to the URL endpoint `/v1/actions/remove-all-downtimes` .
2015-10-16 11:44:18 +02:00
2015-10-27 14:15:07 +01:00
parameter | type | description
----------|--------|--------------
2015-10-27 18:42:32 +01:00
type | string | **Required.** `Host` or `Service` .
2015-10-28 21:07:12 +01:00
filter | string | **Optional.** Apply the action only to objects matching the [filter ](9-icinga2-api.md#icinga2-api-filters ).
2015-10-16 11:44:18 +02:00
2015-11-01 16:34:56 +01:00
Example:
$ curl -k -s -u root:icinga -X POST 'https://localhost:5665/v1/actions/remove-all-downtimes?type=Service& filter=service.name==%22ping4%22' | python -m json.tool
{
"results": [
{
"code": 200.0,
"status": "Successfully removed downtimes for object 'i-42866686!ping4'."
},
{
"code": 200.0,
"status": "Successfully removed downtimes for object 'i-43866687!ping4'."
}
]
}
2015-10-16 11:44:18 +02:00
2015-10-26 15:53:25 +01:00
### <a id="icinga2-api-actions-remove-downtime-by-id"></a> remove-downtime-by-id
2015-11-01 16:34:56 +01:00
Tries to remove the downtime with the ID `downtime_id` , returns `OK` if the
downtime did not exist.
**Note**: This is **not** the legacy ID but the downtime ID returned by Icinga 2 itself.
2015-10-27 18:42:32 +01:00
Send a `POST` request to the URL endpoint `/v1/actions/remove-downtime-by-id` .
2015-10-16 11:44:18 +02:00
2015-10-26 15:53:25 +01:00
parameter | type | description
-------------|---------|--------------
downtime\_id | integer | **Required.** ID of the downtime to remove.
2015-10-27 18:42:32 +01:00
Does not support a target type or filter.
2015-10-27 14:15:07 +01:00
2015-11-01 16:34:56 +01:00
Example:
$ curl -k -s -u root:icinga -X POST 'https://localhost:5665/v1/actions/remove-downtime-by-id?downtime_id=mbmif.local-1446339731-582' | python -m json.tool
{
"results": [
{
"code": 200.0,
"status": "Successfully removed downtime 'mbmif.local-1446339731-582'."
}
]
}
2015-10-26 15:53:25 +01:00
### <a id="icinga2-api-actions-shutdown-process"></a> shutdown-process
2015-10-16 11:44:18 +02:00
2015-11-01 16:34:56 +01:00
Shuts down Icinga2. May or may not return.
2015-10-27 18:42:32 +01:00
Send a `POST` request to the URL endpoint `/v1/actions/shutdown-process` .
2015-10-16 11:44:18 +02:00
2015-10-27 18:42:32 +01:00
This action does not support a target type or filter.
2015-10-26 15:53:25 +01:00
2015-11-01 16:34:56 +01:00
Example:
$ curl -k -s -u root:icinga -X POST 'https://localhost:5665/v1/actions/shutdown-process' | python -m json.tool
{
"results": [
{
"code": 200.0,
"status": "Shutting down Icinga 2."
}
]
}
2015-10-16 11:44:18 +02:00
2015-10-26 15:53:25 +01:00
### <a id="icinga2-api-actions-restart-process"></a> restart-process
2015-08-28 17:17:07 +02:00
2015-11-01 16:34:56 +01:00
Restarts Icinga2. May or may not return.
2015-10-27 18:42:32 +01:00
Send a `POST` request to the URL endpoint `/v1/actions/restart-process` .
2015-08-28 17:17:07 +02:00
2015-10-27 18:42:32 +01:00
This action does not support a target type or filter.
2015-10-26 15:53:25 +01:00
2015-11-01 16:34:56 +01:00
Example:
$ curl -k -s -u root:icinga -X POST 'https://localhost:5665/v1/actions/restart-process' | python -m json.tool
{
"results": [
{
"code": 200.0,
"status": "Restarting Icinga 2."
}
]
}
2015-08-28 17:17:07 +02:00
2015-10-27 14:15:07 +01:00
2015-09-07 14:04:34 +02:00
## <a id="icinga2-api-event-streams"></a> Event Streams
2015-08-28 17:17:07 +02:00
2015-10-27 18:42:32 +01:00
You can subscribe to event streams by sending a `POST` request to the URL endpoint `/v1/events` .
The following parameters need to be passed as URL parameters:
2015-10-21 16:05:05 +02:00
2015-10-26 15:53:25 +01:00
Parameters | Description
-----------|--------------
2015-10-27 18:42:32 +01:00
types | **Required.** Event type(s). Multiple types as URL parameters are supported.
2015-10-26 15:53:25 +01:00
queue | **Required.** Unique queue name. Multiple HTTP clients can use the same queue with existing filters.
filter | **Optional.** Filter for specific event attributes using [filter expressions ](9-icinga2-api.md#icinga2-api-filters ).
2015-10-21 16:05:05 +02:00
### <a id="icinga2-api-event-streams-types"></a> Event Stream Types
2015-10-19 17:31:18 +02:00
The following event stream types are available:
2015-10-26 15:53:25 +01:00
Type | Description
-----------------------|--------------
CheckResult | Check results for hosts and services.
StateChange | Host/service state changes.
Notification | Notification events including notified users for hosts and services.
AcknowledgementSet | Acknowledgement set on hosts and services.
AcknowledgementCleared | Acknowledgement cleared on hosts and services.
CommentAdded | Comment added for hosts and services.
CommentRemoved | Comment removed for hosts and services.
DowntimeAdded | Downtime added for hosts and services.
DowntimeRemoved | Downtime removed for hosts and services.
DowntimeTriggered | Downtime triggered for hosts and services.
2015-10-19 17:31:18 +02:00
2015-10-21 16:05:05 +02:00
Note: Each type requires [api permissions ](9-icinga2-api.md#icinga2-api-permissions )
2015-10-19 17:31:18 +02:00
being set.
2015-10-21 16:05:05 +02:00
Example for all downtime events:
2015-10-19 17:31:18 +02:00
2015-10-21 16:05:05 +02:00
& types=DowntimeAdded& types=DowntimeRemoved& types=DowntimeTriggered
2015-10-19 17:31:18 +02:00
2015-10-26 15:53:25 +01:00
2015-10-21 16:05:05 +02:00
### <a id="icinga2-api-event-streams-filter"></a> Event Stream Filter
2015-10-19 17:31:18 +02:00
Event streams can be filtered by attributes using the prefix `event.` .
2015-10-21 16:05:05 +02:00
Example for the `CheckResult` type with the `exit_code` set to `2` :
& types=CheckResult& filter=event.check_result.exit_status==2
Example for the `CheckResult` type with the service matching the string "random":
& types=CheckResult& filter=match%28%22random*%22,event.service%29
2015-10-26 15:53:25 +01:00
2015-10-21 16:05:05 +02:00
### <a id="icinga2-api-event-streams-response"></a> Event Stream Response
The event stream response is separated with new lines. The HTTP client
must support long-polling and HTTP/1.1. HTTP/1.0 is not supported.
Example:
$ curl -k -s -u root:icinga -X POST 'https://localhost:5665/v1/events?queue=michi& types=CheckResult& filter=event.check_result.exit_status==2'
{"check_result":{ ... },"host":"www.icinga.org","service":"ping4","timestamp":1445421319.7226390839,"type":"CheckResult"}
{"check_result":{ ... },"host":"www.icinga.org","service":"ping4","timestamp":1445421324.7226390839,"type":"CheckResult"}
{"check_result":{ ... },"host":"www.icinga.org","service":"ping4","timestamp":1445421329.7226390839,"type":"CheckResult"}
2015-10-19 17:31:18 +02:00
2015-10-27 18:42:32 +01:00
2015-09-21 11:44:58 +02:00
## <a id="icinga2-api-status"></a> Status and Statistics
2015-10-27 18:42:32 +01:00
Send a `POST` request to the URL endpoint `/v1/status` for retrieving the
global status and statistics.
2015-10-22 12:16:59 +02:00
Contains a list of sub URL endpoints which provide the status and statistics
2015-09-21 11:44:58 +02:00
of available and enabled features. Any filters are ignored.
2015-10-22 12:16:59 +02:00
Example for the main URL endpoint `/v1/status` :
2015-09-21 11:44:58 +02:00
2015-09-25 11:56:10 +02:00
$ curl -k -s -u root:icinga 'https://localhost:5665/v1/status' | python -m json.tool
2015-09-21 11:44:58 +02:00
{
"results": [
{
2015-09-25 10:11:49 +02:00
"name": "ApiListener",
2015-10-26 15:53:25 +01:00
"perfdata": [ ... ],
"status": [ ... ]
2015-09-21 11:44:58 +02:00
},
...
{
2015-09-25 10:11:49 +02:00
"name": "IcingaAplication",
2015-10-26 15:53:25 +01:00
"perfdata": [ ... ],
"status": [ ... ]
2015-09-21 11:44:58 +02:00
},
...
]
}
2015-10-22 12:16:59 +02:00
`/v1/status` is always available as virtual status URL endpoint.
2015-10-27 18:42:32 +01:00
It provides all feature status information in a collected overview.
2015-09-21 11:44:58 +02:00
2015-11-01 18:30:46 +01:00
Example for the IcingaApplication URL endpoint `/v1/status/IcingaApplication` :
2015-09-21 11:44:58 +02:00
2015-09-25 11:56:10 +02:00
$ curl -k -s -u root:icinga 'https://localhost:5665/v1/status/IcingaApplication' | python -m json.tool
2015-09-21 11:44:58 +02:00
{
"results": [
{
"perfdata": [],
"status": {
"icingaapplication": {
"app": {
"enable_event_handlers": true,
"enable_flapping": true,
"enable_host_checks": true,
"enable_notifications": true,
"enable_perfdata": true,
"enable_service_checks": true,
2015-09-25 10:11:49 +02:00
"node_name": "icinga.org",
2015-09-21 11:44:58 +02:00
"pid": 59819.0,
"program_start": 1443019345.093372,
"version": "v2.3.0-573-g380a131"
}
}
}
}
]
}
2015-08-28 17:17:07 +02:00
2015-09-28 18:02:41 +02:00
## <a id="icinga2-api-config-objects"></a> Config Objects
2015-10-22 12:16:59 +02:00
Provides functionality for all configuration object URL endpoints
2015-09-28 18:02:41 +02:00
provided by [config object types ](6-object-types.md#object-types ):
2015-10-26 15:53:25 +01:00
URL Endpoints | Description
---------------------------------|--------------
/v1/objects/hosts | Endpoint for retrieving and updating [Host ](6-object-types.md#objecttype-host ) objects.
/v1/objects/services | Endpoint for retrieving and updating [Service ](6-object-types.md#objecttype-service ) objects.
/v1/objects/notifications | Endpoint for retrieving and updating [Notification ](6-object-types.md#objecttype-notification ) objects.
/v1/objects/dependencies | Endpoint for retrieving and updating [Dependency ](6-object-types.md#objecttype-dependency ) objects.
/v1/objects/users | Endpoint for retrieving and updating [User ](6-object-types.md#objecttype-user ) objects.
/v1/objects/checkcommands | Endpoint for retrieving and updating [CheckCommand ](6-object-types.md#objecttype-checkcommand ) objects.
/v1/objects/eventcommands | Endpoint for retrieving and updating [EventCommand ](6-object-types.md#objecttype-eventcommand ) objects.
/v1/objects/notificationcommands | Endpoint for retrieving and updating [NotificationCommand ](6-object-types.md#objecttype-notificationcommand ) objects.
/v1/objects/hostgroups | Endpoint for retrieving and updating [HostGroup ](6-object-types.md#objecttype-hostgroup ) objects.
/v1/objects/servicegroups | Endpoint for retrieving and updating [ServiceGroup ](6-object-types.md#objecttype-servicegroup ) objects.
/v1/objects/usergroups | Endpoint for retrieving and updating [UserGroup ](6-object-types.md#objecttype-usergroup ) objects.
/v1/objects/zones | Endpoint for retrieving and updating [Zone ](6-object-types.md#objecttype-zone ) objects.
/v1/objects/endpoints | Endpoint for retrieving and updating [Endpoint ](6-object-types.md#objecttype-endpoint ) objects.
/v1/objects/timeperiods | Endpoint for retrieving and updating [TimePeriod ](6-object-types.md#objecttype-timeperiod ) objects.
2015-10-29 17:31:15 +01:00
/v1/objects/icingaapplications | Endpoint for retrieving and updating [IcingaApplication ](6-object-types.md#objecttype-icingaapplication ) objects.
/v1/objects/comments | Endpoint for retrieving and updating [Comment ](6-object-types.md#objecttype-comment ) objects.
/v1/objects/downtimes | Endpoint for retrieving and updating [Downtime ](6-object-types.md#objecttype-downtime ) objects.
2015-09-28 18:02:41 +02:00
All object attributes are prefixed with their respective object type.
Example:
host.address
Output listing and url parameters use the same syntax.
### <a id="icinga2-api-config-objects-joins"></a> API Objects and Joins
2015-10-26 15:53:25 +01:00
Icinga 2 knows about object relations, i.e. when querying a service object
2015-09-28 18:02:41 +02:00
the query handler will automatically add the referenced host object and its
2015-10-27 18:42:32 +01:00
attributes to the result set. If the object reference is null (e.g. when no
2015-10-26 15:53:25 +01:00
event\_command is defined), the joined results not added to the result set.
2015-09-28 18:02:41 +02:00
**Note**: Select your required attributes beforehand by passing them to your
request. The default result set might get huge.
Each joined object will use its own attribute name as prefix for the attribute.
There is an exception for multiple objects used in dependencies and zones.
2015-10-26 15:53:25 +01:00
Objects with optional relations (e.g. host notifications without a service)
2015-09-28 18:02:41 +02:00
will not be joined.
2015-09-07 14:04:34 +02:00
2015-10-26 15:53:25 +01:00
Object Type | Object Relations (prefix name)
-------------|---------------------------------
Service | host, notification, check\_command, event\_command
Host | notification, check\_command, event\_command
Notification | host, service, command, period
Dependency | child\_host, child\_service, parent\_host, parent\_service, period
User | period
Zones | parent
2015-09-07 14:04:34 +02:00
2015-09-28 18:02:41 +02:00
### <a id="icinga2-api-config-objects-cluster-sync"></a> API Objects and Cluster Config Sync
2015-09-17 15:52:54 +02:00
Newly created or updated objects can be synced throughout your
Icinga 2 cluster. Set the `zone` attribute to the zone this object
belongs to and let the API and cluster handle the rest.
2015-10-22 16:24:42 +02:00
Objects without zone attribute are only synced in the same (HA) zone.
2015-09-17 15:52:54 +02:00
2015-10-22 16:24:42 +02:00
> **Note**
>
> Cluster nodes must accept configuration for creating, modifying
> and deleting objects. Ensure that `accept_config` is set to `true`
> in the [ApiListener](6-object-types.md#objecttype-apilistener) object
> on each node.
2015-10-26 15:53:25 +01:00
If you add a new cluster instance, or boot an instance which has been offline
for a while, Icinga 2 takes care of the initial object sync for all objects
created by the API.
2015-09-17 15:52:54 +02:00
More information about distributed monitoring, cluster and its
configuration can be found [here ](13-distributed-monitoring-ha.md#distributed-monitoring-high-availability ).
2015-09-07 14:04:34 +02:00
2015-08-28 17:17:07 +02:00
2015-09-28 18:02:41 +02:00
### <a id="icinga2-api-config-objects-list"></a> List All Objects
2015-08-28 17:17:07 +02:00
2015-09-28 18:02:41 +02:00
Send a `GET` request to `/v1/objects/hosts` to list all host objects and
2015-08-28 17:17:07 +02:00
their attributes.
2015-11-04 10:39:32 +01:00
$ curl -k -s -u root:icinga 'https://localhost:5665/v1/objects/hosts'
2015-08-28 17:17:07 +02:00
2015-09-28 18:02:41 +02:00
This works in a similar fashion for other [config objects ](9-icinga2-api.md#icinga2-api-config-objects ).
2015-08-28 17:17:07 +02:00
2015-09-28 18:02:41 +02:00
#### <a id="icinga2-api-objects-create"></a> Create New Config Object
2015-08-28 17:17:07 +02:00
New objects must be created by sending a PUT request. The following
parameters need to be passed inside the JSON body:
2015-10-26 15:53:25 +01:00
Parameters | Description
-----------|--------------
name | **Required.** Name of the newly created config object.
templates | **Optional.** Import existing configuration templates for this object type.
attrs | **Required.** Set specific object attributes for this [object type ](6-object-types.md#object-types ).
2015-08-28 17:17:07 +02:00
If attributes are of the Dictionary type, you can also use the indexer format:
"attrs": { "vars.os": "Linux" }
2015-11-01 18:30:46 +01:00
Example for creating the new host object `google.com` :
2015-08-28 17:17:07 +02:00
2015-11-04 10:39:32 +01:00
$ curl -k -s -u root:icinga 'https://localhost:5665/v1/objects/hosts/google.com' \
2015-08-28 17:17:07 +02:00
-X PUT \
2015-09-28 18:02:41 +02:00
-d '{ "templates": [ "generic-host" ], "attrs": { "address": "8.8.8.8", "check_command": "hostalive", "vars.os" : "Linux" } }' \
2015-08-28 17:17:07 +02:00
| python -m json.tool
{
"results": [
{
"code": 200.0,
"status": "Object was created."
}
]
}
2015-09-28 18:02:41 +02:00
**Note**: Host objects require the `check_command` attribute.
2015-08-28 17:17:07 +02:00
If the configuration validation fails, the new object will not be created and the response body
2015-09-28 18:02:41 +02:00
contains a detailed error message. The following example omits the `check_command` attribute required
by the host object.
2015-08-28 17:17:07 +02:00
2015-11-04 10:39:32 +01:00
$ curl -k -s -u root:icinga 'https://localhost:5665/v1/objects/hosts/google.com' \
2015-08-28 17:17:07 +02:00
-X PUT \
-d '{ "attrs": { "address": "8.8.8.8", "vars.os" : "Linux" } }' \
| python -m json.tool
{
"results": [
{
"code": 500.0,
"errors": [
"Error: Validation failed for object 'google.com' of type 'Host'; Attribute 'check_command': Attribute must not be empty."
],
"status": "Object could not be created."
}
]
}
2015-10-26 15:53:25 +01:00
2015-09-28 18:02:41 +02:00
#### <a id="icinga2-api-object-query"></a> Query Object
2015-08-28 17:17:07 +02:00
2015-10-26 15:53:25 +01:00
Send a `GET` request including the object name inside the URL.
2015-08-28 17:17:07 +02:00
2015-09-28 18:02:41 +02:00
Example for the host `google.com` :
2015-11-04 10:39:32 +01:00
$ curl -k -s -u root:icinga 'https://localhost:5665/v1/objects/hosts/google.com'
2015-08-28 17:17:07 +02:00
You can select specific attributes by adding them as url parameters using `?attrs=...` . Multiple
attributes must be added one by one, e.g. `?attrs=host.address&attrs=host.name` .
2015-11-04 10:39:32 +01:00
$ curl -k -s -u root:icinga 'https://localhost:5665/v1/objects/hosts/google.com?attrs=host.name& attrs=host.address' | python -m json.tool
2015-08-28 17:17:07 +02:00
{
"results": [
{
"attrs": {
"host.address": "8.8.8.8",
"host.name": "google.com"
}
}
]
}
2015-10-26 15:53:25 +01:00
2015-09-28 18:02:41 +02:00
#### <a id="icinga2-api-objects-modify"></a> Modify Object
2015-08-28 17:17:07 +02:00
2015-10-26 15:53:25 +01:00
Existing objects must be modified by sending a `POST` request. The following
2015-08-28 17:17:07 +02:00
parameters need to be passed inside the JSON body:
2015-10-26 15:53:25 +01:00
Parameters | Description
-----------|--------------
name | **Optional.** If not specified inside the url, this is **Required.** .
templates | **Optional.** Import existing object configuration templates.
attrs | **Required.** Set specific object attributes for this [object type ](6-object-types.md#object-types ).
2015-08-28 17:17:07 +02:00
If attributes are of the Dictionary type, you can also use the indexer format:
"attrs": { "vars.os": "Linux" }
Example for existing object `google.com` :
2015-11-04 10:39:32 +01:00
$ curl -k -s -u root:icinga 'https://localhost:5665/v1/objects/hosts/google.com' \
2015-08-28 17:17:07 +02:00
-X POST \
-d '{ "attrs": { "address": "8.8.4.4", "vars.os" : "Windows" } }' \
| python -m json.tool
{
"results": [
{
"code": 200.0,
"name": "google.com",
"status": "Attributes updated.",
"type": "Host"
}
]
}
2015-10-26 15:53:25 +01:00
2015-10-29 17:31:15 +01:00
#### <a id="icinga2-api-objects-delete"></a> Delete Object
2015-08-28 17:17:07 +02:00
You can delete objects created using the API by sending a `DELETE`
request. Specify the object name inside the url.
2015-10-26 15:53:25 +01:00
Parameters | Description
-----------|--------------
cascade | **Optional.** Delete objects depending on the deleted objects (e.g. services on a host).
2015-08-28 17:17:07 +02:00
2015-11-01 18:30:46 +01:00
**Note**: Objects created by apply rules (services, notifications, etc.) will implicitly require
2015-09-28 18:02:41 +02:00
to pass the `cascade` parameter on host object deletion.
Example for deleting the host object `google.com` :
2015-08-28 17:17:07 +02:00
2015-11-04 10:39:32 +01:00
$ curl -k -s -u root:icinga 'https://localhost:5665/v1/objects/hosts/google.com?cascade=1' -X DELETE | python -m json.tool
2015-08-28 17:17:07 +02:00
{
"results": [
{
"code": 200.0,
"name": "google.com",
"status": "Object was deleted.",
"type": "Host"
}
]
}
2015-09-07 14:04:34 +02:00
## <a id="icinga2-api-config-management"></a> Configuration Management
The main idea behind configuration management is to allow external applications
creating configuration packages and stages based on configuration files and
directory trees. This replaces any additional SSH connection and whatnot to
dump configuration files to Icinga 2 directly.
2015-09-28 18:02:41 +02:00
In case you are pushing a new configuration stage to a package, Icinga 2 will
2015-09-07 14:04:34 +02:00
validate the configuration asynchronously and populate a status log which
can be fetched in a separated request.
2015-10-26 15:53:25 +01:00
2015-09-07 14:04:34 +02:00
### <a id="icinga2-api-config-management-create-package"></a> Create Config Package
2015-11-04 10:39:32 +01:00
Send a `POST` request to a new config package called `example-cmdb` in this example. This
2015-09-07 14:04:34 +02:00
will create a new empty configuration package.
2015-11-04 10:39:32 +01:00
$ curl -k -s -u root:icinga -X POST https://localhost:5665/v1/config/packages/example-cmdb | python -m json.tool
2015-09-07 14:04:34 +02:00
{
"results": [
{
"code": 200.0,
2015-11-04 10:39:32 +01:00
"package": "example-cmdb",
2015-09-07 14:04:34 +02:00
"status": "Created package."
}
]
}
2015-10-26 15:53:25 +01:00
2015-09-07 14:04:34 +02:00
### <a id="icinga2-api-config-management-create-config-stage"></a> Create Configuration to Package Stage
2015-10-22 12:16:59 +02:00
Send a `POST` request to the URL endpoint `/v1/config/stages` including an existing
2015-11-04 10:39:32 +01:00
configuration package, e.g. `example-cmdb` .
2015-09-07 14:04:34 +02:00
The request body must contain the `files` attribute with the value being
a dictionary of file targets and their content.
The example below will create a new file called `test.conf` underneath the `conf.d`
directory populated by the sent configuration.
The Icinga 2 API returns the `package` name this stage was created for, and also
generates a unique name for the `package` attribute you'll need for later requests.
Note: This example contains an error (`chec_command`), do not blindly copy paste it.
2015-11-04 10:39:32 +01:00
$ curl -k -s -u root:icinga -X POST -d '{ "files": { "conf.d/test.conf": "object Host \"cfg-mgmt\" { chec_command = \"dummy\" }" } }' https://localhost:5665/v1/config/stages/example-cmdb | python -m json.tool
2015-09-07 14:04:34 +02:00
{
"results": [
{
"code": 200.0,
2015-11-04 10:39:32 +01:00
"package": "example-cmdb",
"stage": "icinga2-node1.localdomain-1441625839-0",
2015-09-07 14:04:34 +02:00
"status": "Created stage."
}
]
}
If the configuration fails, the old active stage will remain active.
If everything is successful, the new config stage is activated and live.
Older stages will still be available in order to have some sort of revision
system in place.
Icinga 2 automatically creates the following files in the main configuration package
stage:
2015-10-26 15:53:25 +01:00
File | Description
------------|--------------
status | Contains the [configuration validation ](8-cli-commands.md#config-validation ) exit code (everything else than 0 indicates an error).
startup.log | Contains the [configuration validation ](8-cli-commands.md#config-validation ) output.
2015-09-07 14:04:34 +02:00
You can [fetch these files ](9-icinga2-api.md#icinga2-api-config-management-fetch-config-package-stage-files ) via API call
after creating a new stage.
2015-10-26 15:53:25 +01:00
2015-09-07 14:04:34 +02:00
### <a id="icinga2-api-config-management-list-config-packages"></a> List Configuration Packages and their Stages
List all config packages, their active stage and other stages.
That way you may iterate of all of them programmatically for
older revisions and their requests.
2015-11-04 10:39:32 +01:00
The following example contains one configuration package `example-cmdb` .
2015-09-07 14:04:34 +02:00
The latter already has a stage created, but it is not active.
2015-09-25 11:56:10 +02:00
$ curl -k -s -u root:icinga https://localhost:5665/v1/config/packages | python -m json.tool
2015-09-07 14:04:34 +02:00
{
"results": [
{
"active-stage": "",
2015-11-04 10:39:32 +01:00
"name": "example-cmdb",
2015-09-07 14:04:34 +02:00
"stages": [
2015-11-04 10:39:32 +01:00
"icinga2-node1.localdomain-1441625839-0"
2015-09-07 14:04:34 +02:00
]
}
]
}
2015-10-26 15:53:25 +01:00
2015-09-07 14:04:34 +02:00
### <a id="icinga2-api-config-management-list-config-package-stage-files"></a> List Configuration Packages and their Stages
2015-10-22 12:16:59 +02:00
Sent a `GET` request to the URL endpoint `/v1/config/stages` including the package
2015-11-04 10:39:32 +01:00
(`example-cmdb`) and stage (`icinga2-node1.localdomain-1441625839-0`) name.
2015-09-07 14:04:34 +02:00
2015-11-04 10:39:32 +01:00
$ curl -k -s -u root:icinga https://localhost:5665/v1/config/stages/example-cmdb/icinga2-node1.localdomain-1441625839-0 | python -m json.tool
2015-09-07 14:04:34 +02:00
{
"results": [
...
{
"name": "startup.log",
"type": "file"
},
{
"name": "status",
"type": "file"
},
{
"name": "conf.d",
"type": "directory"
},
{
"name": "zones.d",
"type": "directory"
},
{
"name": "conf.d/test.conf",
"type": "file"
}
]
}
### <a id="icinga2-api-config-management-fetch-config-package-stage-files"></a> Fetch Configuration Package Stage Files
2015-10-22 12:16:59 +02:00
Send a `GET` request to the URL endpoint `/v1/config/files` including
2015-09-07 14:04:34 +02:00
the package name, the stage name and the relative path to the file.
Note: You cannot use dots in paths.
You can fetch a [list of existing files ](9-icinga2-api.md#icinga2-api-config-management-list-config-package-stage-files )
in a configuration stage and then specifically request their content.
2015-11-04 10:39:32 +01:00
The following example fetches the **erroneous** configuration inside `conf.d/test.conf`
2015-09-07 14:04:34 +02:00
for further analysis.
2015-11-04 10:39:32 +01:00
$ curl -k -s -u root:icinga https://localhost:5665/v1/config/files/example-cmdb/icinga2-node1.localdomain-1441625839-0/conf.d/test.conf
2015-09-07 14:04:34 +02:00
object Host "cfg-mgmt" { chec_command = "dummy" }
Note: The returned files are plain-text instead of JSON-encoded.
2015-10-26 15:53:25 +01:00
2015-09-07 14:04:34 +02:00
### <a id="icinga2-api-config-management-config-package-stage-errors"></a> Configuration Package Stage Errors
2015-11-04 10:39:32 +01:00
Now that we don't have an active stage for `example-cmdb` yet seen [here ](9-icinga2-api.md#icinga2-api-config-management-list-config-packages ),
2015-09-07 14:04:34 +02:00
there must have been an error.
Fetch the `startup.log` file and check the config validation errors:
2015-11-04 10:39:32 +01:00
$ curl -k -s -u root:icinga https://localhost:5665/v1/config/files/example-cmdb/imagine-1441133065-1/startup.log
2015-09-07 14:04:34 +02:00
...
2015-09-28 18:02:41 +02:00
2015-09-07 14:04:34 +02:00
critical/config: Error: Attribute 'chec_command' does not exist.
Location:
2015-11-04 10:39:32 +01:00
/var/lib/icinga2/api/packages/example-cmdb/imagine-1441133065-1/conf.d/test.conf(1): object Host "cfg-mgmt" { chec_command = "dummy" }
2015-09-07 14:04:34 +02:00
^^^^^^^^^^^^^^^^^^^^^^
2015-09-28 18:02:41 +02:00
2015-09-07 14:04:34 +02:00
critical/config: 1 error
The output is similar to the manual [configuration validation ](8-cli-commands.md#config-validation ).
2015-11-04 10:39:32 +01:00
## <a id="icinga2-api-clients"></a> API Clients
There's a couple of existing clients using the Icinga 2 API
for various use cases:
* [curl ](http://curl.haxx.se )
* [console cli command ](9-icinga2-api.md#icinga2-api-clients-cli-console )
* [Icinga Studio ](9-icinga2-api.md#icinga2-api-clients-icinga-studio )
* [Icinga Web 2 Director ](https://dev.icinga.org/projects/icingaweb2-modules )
Demo cases:
* [Dashing ](https://github.com/Icinga/dashing-icinga2 )
* [AWS host creation/update/deletion ](https://github.com/Icinga/aws-icinga2 )
Additional [programmatic examples ](9-icinga2-api.md#icinga2-api-clients-programmatic-examples )
will help you getting started using the Icinga 2 API in your environment.
### <a id="icinga2-api-clients-icinga-studio"></a> Icinga Studio
Icinga Studio is a graphical application to query configuration objects provided by the API.
![Icinga Studio Connection ](images/icinga2-api/icinga2_api_icinga_studio_connect.png )
![Icinga Studio Overview ](images/icinga2-api/icinga2_api_icinga_studio_overview.png )
Please check the package repository of your distribution for available
packages.
The Windows installer includes Icinga Studio already. You must additionally
install the [WxWidgets library ](https://www.wxwidgets.org/downloads/ ).
### <a id="icinga2-api-clients-cli-console"></a> Console Command using the API
The [console cli command ](8-cli-commands.md#cli-command-console ) accepts the API URL as `--connect` parameter. Note: You can omit the
username and/or password string and use the environment variables `ICINGA2_API_USERNAME`
and `ICINGA2_API_PASSWORD` instead.
$ icinga2 console --connect 'https://root:icinga@localhost:5665/'
Icinga 2 (version: v2.3.11-762-g1d327ac)
< 1 > =>
Once connected fetch the host object and print its attribute `last_check_result` .
Tip: On systems with enabled auto-completion press < TAB > .
< 1 > => h = get_host("mbmif.int.netways.de")
null
< 2 > => h.last_check_result
{
active = true
check_source = "mbmif.int.netways.de"
command = [ "/usr/local/sbin/check_ping", "-H", "127.0.0.1", "-c", "5000,100%", "-w", "3000,80%" ]
execution_end = 1446653527.174983
execution_start = 1446653523.152673
exit_status = 0.000000
output = "PING OK - Packet loss = 0%, RTA = 0.11 ms"
performance_data = [ "rta=0.114000ms;3000.000000;5000.000000;0.000000", "pl=0%;80;100;0" ]
schedule_end = 1446653527.175133
schedule_start = 1446653583.150000
state = 0.000000
type = "CheckResult"
vars_after = {
attempt = 1.000000
reachable = true
state = 0.000000
state_type = 1.000000
}
vars_before = {
attempt = 1.000000
reachable = true
state = 0.000000
state_type = 1.000000
}
}
< 3 > =>
Use the `--eval` parameter to evaluate a single expression in batch mode. The
following example fetches the local node object and its check result:
$ icinga2 console --connect 'https://root:icinga@localhost:5665/' --eval "get_host(NodeName).last_check_result.command" | python -m json.tool
[
"/usr/local/sbin/check_ping",
"-H",
"127.0.0.1",
"-c",
"5000,100%",
"-w",
"3000,80%"
]
### <a id="icinga2-api-clients-programmatic-examples"></a> API Clients Programmatic Examples
#### <a id="icinga2-api-clients-programmatic-examples-Python"></a> Example API Client using Python
Example for **Python** using the `requests` and `json` module:
# pip install requests
# pip install json
$ vim icinga2-api-example.py
#!/usr/bin/env python
import requests, json
request_url = "https://localhost:5665/v1/status"
headers = {"Content-Type": "application/json", "Accept": "application/json"}
r = requests.get(request_url, headers=headers, auth=('root', 'icinga'), verify=False)
print "Status code: " + str(r.status_code)
print "Result: " + json.dumps(r.json())
$ python icinga2-api-example.py
#### <a id="icinga2-api-clients-programmatic-examples-ruby"></a> Example API Client using Ruby
Example for **Ruby** using the `rest_client` gem:
# gem install rest_client
$ vim icinga2-api-example.rb
#!/usr/bin/ruby
require 'rest_client'
request_url = "https://localhost:5665/v1/status"
options = { :user => "root", :password => "icinga", :verify_ssl => OpenSSL::SSL::VERIFY_NONE }
headers = {"Content-Type" => "application/json", "Accept" => "application/json"}
r = RestClient::Resource.new(URI.encode(request_url), options)
response = r.get(headers)
puts "Status: " + response.code.to_s
puts "Result: " + (JSON.pretty_generate JSON.parse(response.body))
$ ruby icinga2-api-example.rb
A more detailed example can be found in the [Dashing demo ](https://github.com/Icinga/dashing-icinga2 ).
#### <a id="icinga2-api-clients-programmatic-examples-php"></a> Example API Client using PHP
Example for **PHP** using `curl` :
$ vim icinga2-api-example.php
#!/usr/bin/env php
< ?php
$request_url = "https://localhost:5665/v1/status";
$username = "root";
$password = "icinga";
$headers = array(
'Accept: application/json',
'Content-Type: application/json',
);
$curl = curl_init();
curl_setopt($curl, CURLOPT_URL, $request_url);
curl_setopt($curl, CURLOPT_HTTPHEADER, $headers);
curl_setopt($curl, CURLOPT_USERPWD, $username . ":" . $password);
curl_setopt($curl, CURLOPT_RETURNTRANSFER, true);
curl_setopt($curl, CURLOPT_SSL_VERIFYHOST, false);
curl_setopt($curl, CURLOPT_SSL_VERIFYPEER, false);
$response = curl_exec($curl);
$code = curl_getinfo($curl, CURLINFO_HTTP_CODE);
curl_close($curl);
if ($code == 200) {
$response = json_decode($response, true);
print_r($response);
} else {
echo 'error ' . $code;
}
?>
$ php icinga2-api-example.php
#### <a id="icinga2-api-clients-programmatic-examples-perl"></a> Example API Client using Perl
Example for **Perl** using the `Rest::Client` module:
# perl -MCPAN -e 'install REST::Client'
# perl -MCPAN -e 'install JSON'
# perl -MCPAN -e 'install MIME::Base64'
$ vim icinga2-api-example.pl
#!/usr/bin/env perl
use REST::Client;
use MIME::Base64;
use JSON;
$ENV{PERL_LWP_SSL_VERIFY_HOSTNAME}=0;
$userpass = "root:icinga";
my $client = REST::Client->new();
$client->setHost("https://127.0.0.1:5665");
$client->addHeader("Content-Type", "application/json");
$client->addHeader("Accept", "application/json");
$client->addHeader("Authorization", "Basic ".encode_base64($userpass));
$client->GET("/v1/status");
print "Status: " . $client->responseCode() . "\n";
print "Result: " . $client->responseContent() . "\n";
$ perl icinga2-api-example.pl