icinga2/docs/icinga2-config.txt

Icinga 2 Configuration
======================

:keywords:	Icinga, documentation, configuration
:description:	Description of the Icinga 2 config

Configuration Format
--------------------

Object Definition
~~~~~~~~~~~~~~~~~

Icinga 2 features an object-based configuration format. In order to define
objects the "object" keyword is used:

-------------------------------------------------------------------------------
object Host "host1.example.org" {
  alias = "host1",

  check_interval = 30,
  retry_interval = 15,

  macros = {
    address = "192.168.0.1"
  }
}
-------------------------------------------------------------------------------

NOTE: The Icinga 2 configuration format is agnostic to whitespaces and
new-lines.

Each object is uniquely identified by its type ("Host") and name
("host1.example.org"). Objects can contain a comma-separated list of property
declarations. The following data types are available for property values:

Numeric Literals
^^^^^^^^^^^^^^^^

A floating-point number.

Example:

-------------------------------------------------------------------------------
-27.3
-------------------------------------------------------------------------------

Duration Literal
^^^^^^^^^^^^^^^^

Similar to floating-point numbers except for that fact that they support
suffixes to help with specifying time durations.

Example:

-------------------------------------------------------------------------------
2.5m
-------------------------------------------------------------------------------

Supported suffixes include ms (milliseconds), s (seconds), m (minutes) and h (hours).

String Literals
^^^^^^^^^^^^^^^

A string. No escape characters are supported at present though this will likely
change.

Example:

-------------------------------------------------------------------------------
"Hello World!"
-------------------------------------------------------------------------------

Expression List
^^^^^^^^^^^^^^^

A list of expressions that when executed has a dictionary as a result.

Example:

-------------------------------------------------------------------------------
{
  address = "192.168.0.1",
  port = 443
}
-------------------------------------------------------------------------------

NOTE: Identifiers may not contain certain characters (e.g. space) or start with
certain characters (e.g. digits). If you want to use a dictionary key that is
not a valid identifier you can put the key in double quotes.

Operators
~~~~~~~~~

In addition to the "=" operator shown above a number of other operators to
manipulate configuration objects are supported. Here's a list of all available
operators:

Operator "="
^^^^^^^^^^^^

Sets a dictionary element to the specified value.

Example:

-------------------------------------------------------------------------------
{
  a = 5,
  a = 7
}
-------------------------------------------------------------------------------

In this example a has the value 7 after both instructions are executed.

Operator "+="
^^^^^^^^^^^^^

Modifies a dictionary by adding new elements to it.

Example:

-------------------------------------------------------------------------------
{
  a = { "hello" },
  a += { "world" }
}
-------------------------------------------------------------------------------

In this example a contains both "hello" and "world". This currently only works
for expression lists. Support for numbers might be added later on.

Operator "-="
^^^^^^^^^^^^^

Removes elements from a dictionary.

Example:

-------------------------------------------------------------------------------
{
  a = { "hello", "world" },
  a -= { "world" }
}
-------------------------------------------------------------------------------

In this example a contains "hello". Trying to remove an item that does not
exist is not an error. Not implemented yet.

Operator "*="
^^^^^^^^^^^^^

Multiplies an existing dictionary element with the specified number. If the
dictionary element does not already exist 0 is used as its value.

Example:

-------------------------------------------------------------------------------
{
  a = 60,
  a *= 5
}
-------------------------------------------------------------------------------

In this example a is 300. This only works for numbers. Not implemented yet.

Operator "/="
^^^^^^^^^^^^^

Divides an existing dictionary element by the specified number. If the
dictionary element does not already exist 0 is used as its value.

Example:

-------------------------------------------------------------------------------
{
  a = 300,
  a /= 5
}
-------------------------------------------------------------------------------

In this example a is 60. This only works for numbers. Not implemented yet.


Attribute Shortcuts
~~~~~~~~~~~~~~~~~~~

Value Shortcut
^^^^^^^^^^^^^^

Example:

-------------------------------------------------------------------------------
{
  "hello"
}
-------------------------------------------------------------------------------

This is equivalent to writing:

-------------------------------------------------------------------------------
{
  hello = "hello"
}
-------------------------------------------------------------------------------

Indexer Shortcut
^^^^^^^^^^^^^^^^

Example:

-------------------------------------------------------------------------------
{
  hello["key"] = "world"
}
-------------------------------------------------------------------------------

This is equivalent to writing:

-------------------------------------------------------------------------------
{
  hello += {
    key = "world"
  }
}
-------------------------------------------------------------------------------

Specifiers
~~~~~~~~~~

Objects can have specifiers that have special meaning. The following specifiers
can be used (before the "object" keyword):

Specifier "abstract"
^^^^^^^^^^^^^^^^^^^^

This specifier identifies the object as a template which can be used by other
object definitions. The object will not be instantiated on its own.

Specifier "local"
^^^^^^^^^^^^^^^^^

This specifier disables replication for this object. The object will not be
sent to remote Icinga instances.

Inheritance
~~~~~~~~~~~

Objects can inherit attributes from one or more other objects.

Example:

-------------------------------------------------------------------------------
abstract object Host "default-host" {
  check_interval = 30,

  macros = {
    color = "red"
  }
}

abstract object Host "test-host" inherits "default-host" {
  macros += {
    color = "blue"
  }
}

object Host "localhost" inherits "test-host" {
  macros += {
    address = "127.0.0.1",
    address6 = "::1"
  }
}
-------------------------------------------------------------------------------

NOTE: The "default-host" and "test-host" objects are marked as templates using
the "abstract" keyword. Parent objects do not necessarily have to be "abstract"
though in general they are.

NOTE: The += operator is used to insert additional properties into the macros
dictionary. The final dictionary contains all 3 macros and the property "color"
has the value "blue".

Parent objects are resolved in the order they're specified using the "inherits"
keyword. Parent objects must already be defined by the time they're used in an
object definition.

Comments
~~~~~~~~

The Icinga 2 configuration format supports C/C++-style comments.

Example:

-------------------------------------------------------------------------------
/*
 This is a comment.
 */
object Host "localhost" {
  check_interval = 30, // this is also a comment.
  retry_interval = 15
}
-------------------------------------------------------------------------------

Includes
~~~~~~~~

Other configuration files can be included using the "#include" directive. Paths
must be relative to the configuration file that contains the "#include"
keyword:

Example:

-------------------------------------------------------------------------------
#include "some/other/file.conf"
#include "conf.d/*.conf"
-------------------------------------------------------------------------------

Icinga also supports include search paths similar to how they work in a
C/C++ compiler:

-------------------------------------------------------------------------------
#include <itl/itl.conf>
-------------------------------------------------------------------------------

Note the use of angle brackets instead of double quotes. This causes the
config compiler to search the include search paths for the specified file.
By default $PREFIX/icinga2 is included in the list of search paths.

Wildcards are not permitted when using angle brackets.

Library directive
~~~~~~~~~~~~~~~~~

The "#library" directive can be used to manually load additional libraries.
Upon loading these libraries may provide additional classes or methods.

Example:

-------------------------------------------------------------------------------
#library "snmphelper"
-------------------------------------------------------------------------------

NOTE: The "icinga" library is automatically loaded by Icinga.

Type Definition
~~~~~~~~~~~~~~~

By default Icinga has no way of semantically verifying its configuration
objects. This is where type definitions come in. Using type definitions you
can specify which attributes are allowed in an object definition.

Example:

-------------------------------------------------------------------------------
type Pizza {
	%require "radius",
	%attribute number "radius",

	%attribute dictionary "ingredients" {
		%validator "native::ValidateIngredients",

		%attribute string "*",

		%attribute dictionary "*" {
			%attribute number "quantity",
			%attribute string "name"
		}
	},

	%attribute any "custom::*"
}
-------------------------------------------------------------------------------

The Pizza definition provides the following validation rules:

* Pizza objects must contain an attribute "radius" which has to be a number.
* Pizza objects may contain an attribute "ingredients" which has to be a
dictionary.
* Elements in the ingredients dictionary can be either a string or a dictionary.
* If they're a dictionary they may contain attributes "quantity" (of type
number) and "name" (of type string).
* The script function "native::ValidateIngredients" is run to perform further
validation of the ingredients dictionary.
* Pizza objects may contain attribute matching the pattern "custom::*" of any
type.

Valid types for type rules include:
* any
* number
* string
* scalar (an alias for string)
* dictionary

Configuration Objects
---------------------

Type: IcingaApplication
~~~~~~~~~~~~~~~~~~~~~~~

The "IcingaApplication" type is used to specify global configuration parameters
for Icinga. There must be exactly one application object in each Icinga 2
configuration. The object must have the "local" specifier.

Example:

-------------------------------------------------------------------------------
local object IcingaApplication "icinga" {
  cert_path = "my-cert.pem",
  ca_path = "ca.crt",

  node = "192.168.0.1",
  service = 7777,

  pid_path = "./var/run/icinga2.pid",
  state_path = "./var/lib/icinga2.state",

  macros = {
    plugindir = "/usr/local/icinga/libexec"
  }
}
-------------------------------------------------------------------------------

Attribute: cert_path
^^^^^^^^^^^^^^^^^^^^

This is used to specify the SSL client certificate Icinga 2 will use when
connecting to other Icinga 2 instances. This property is optional when you're
setting up a non-networked Icinga 2 instance.

Attribute: ca_path
^^^^^^^^^^^^^^^^^^

This is the public CA certificate that is used to verify connections from other
Icinga 2 instances. This property is optional when you're setting up a
non-networked Icinga 2 instance.

Attribute: node
^^^^^^^^^^^^^^^

The externally visible IP address that is used by other Icinga 2 instances to
connect to this instance. This property is optional when you're setting up a
non-networked Icinga 2 instance.

NOTE: Icinga does not bind to this IP address.

Attribute: service
^^^^^^^^^^^^^^^^^^

The port this Icinga 2 instance should listen on. This property is optional
when you're setting up a non-networked Icinga 2 instance.

Attribute: pid_path
^^^^^^^^^^^^^^^^^^^

Optional. The path to the PID file. Defaults to "icinga.pid" in the current
working directory.

Attribute: state_path
^^^^^^^^^^^^^^^^^^^^^

Optional. The path of the state file. This is the file Icinga 2 uses to persist
objects between program runs. Defaults to "icinga2.state" in the current working
directory.

Attribute: macros
^^^^^^^^^^^^^^^^^

Optional. Global macros that are used for service checks and notifications.


Type: Component
~~~~~~~~~~~~~~~

Icinga 2 uses a number of components to implement its feature-set. The
"Component" configuration object is used to load these components and specify
additional parameters for them. "Component" objects must have the "local"
specifier. The typical components to be loaded in the default configuration
would be "checker", "delegation" and more.
There are optional components which may not run on every operating system, such as
"compat" or "compatido".

Example "compat":

-------------------------------------------------------------------------------
local object Component "compat" {
  status_path = "./var/cache/icinga2/status.dat",
  objects_path = "./var/cache/icinga2/objects.cache",
}
-------------------------------------------------------------------------------

Attribute: status_path
^^^^^^^^^^^^^^^^^^^^^^

Specifies where Icinga 2 Compat component will put the status.dat file, which can
be read by Icinga 1.x Classic UI and other addons. If not set, it defaults to the
localstatedir location.

Attribute: objects_path
^^^^^^^^^^^^^^^^^^^^^^^

Specifies where Icinga 2 Compat component will put the objects.cache file, which can
be read by Icinga 1.x Classic UI and other addons. If not set, it defaults to the
localstatedir location.

Example "compatido":

-------------------------------------------------------------------------------
local object Component "compatido" {
  socket_address = "127.0.0.1",
  socket_port = "5668",
  instance_name = "i2-default",
  reconnect_interval = 15,
}
-------------------------------------------------------------------------------

Attribute: socket_address
^^^^^^^^^^^^^^^^^^^^^^^^^

Specifies the tcp socket address of ido2db where Icinga 2 CompatIDO component will
try to connect to. ido2db must be running and listening there already. The default
is set to "127.0.0.1" if missing.

Attribute: socket_port
^^^^^^^^^^^^^^^^^^^^^^

Specifies the tcp socket port of ido2db where Icinga 2 CompatIDO component will try
to connect to. ido2db must be running and listening there already. The default is
set to "5668" if missing.

Attribute: instance_name
^^^^^^^^^^^^^^^^^^^^^^^^

This is the instance name which Icinga 2 CompatIDO will use to identify itsself to
ido2db (same as idomod would use). Once set, do not change that unless knowing the
consequences of data inconsistency. If not set, this will default to "i2-default".

Attribute: reconnect_interval
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

Specifies the interval compatido will try to reconnect, if the connection to the
ido socket fails (ido2db drops out, and will require a reconnect handshake,
opening the socket and saying hello again).


Type: Logger
~~~~~~~~~~~~

Specifies where Icinga 2 should be logging. Objects of this type must have the
"local" specifier.

Example:

-------------------------------------------------------------------------------
local object Logger "my-debug-log" {
  type = "file",
  path = "./var/log/icinga2/icinga2.log",
  severity = "debug"
}
-------------------------------------------------------------------------------

Attribute: type
^^^^^^^^^^^^^^^

The type of the log. Can be "console", "syslog" or "file".

Attribute: path
^^^^^^^^^^^^^^^

The log path. Ignored if the log type is not "file".

Attribute: severity
^^^^^^^^^^^^^^^^^^^

The minimum severity for this log. Can be "debug", "information", "warning" or
"critical". Defaults to "information".

Type: Endpoint
~~~~~~~~~~~~~~

Endpoint objects are used to specify connection information for remote Icinga 2
instances. Objects of this type should not be local:

-------------------------------------------------------------------------------
object Endpoint "icinga-c2" {
  node = "192.168.5.46",
  service = 7777,
}
-------------------------------------------------------------------------------

Attribute: node
^^^^^^^^^^^^^^^

The hostname/IP address of the remote Icinga 2 instance.

Attribute: service
^^^^^^^^^^^^^^^^^^

The service name/port of the remote Icinga 2 instance.

Type: Service
~~~~~~~~~~~~~

Service objects describe network services and how they should be checked by
Icinga 2.

Example:

-------------------------------------------------------------------------------
object Service "localhost-uptime" {
  host_name = "localhost",

  alias = "localhost Uptime",

  methods = {
    check = "native::PluginCheck"
  },

  check_command = "$plugindir$/check_snmp -H $address$ -C $community$ -o $oid$",

  macros = {
    plugindir = "/usr/lib/nagios/plugins",
    address = "127.0.0.1",
    community = "public" ,A hos
    oid = "DISMAN-EVENT-MIB::sysUpTimeInstance"
  }

  check_interval = 60,
  retry_interval = 15,

  servicegroups = { "all-services", "snmp" },

  checkers = { "*" },
}
-------------------------------------------------------------------------------

Attribute: host_name
^^^^^^^^^^^^^^^^^^^^

The host this service belongs to. There must be a "Host" object with that name.

Attribute: alias
^^^^^^^^^^^^^^^^

Optional. A short description of the service.

Attribute: methods - check
^^^^^^^^^^^^^^^^^^^^^^^^^^

The check type of the service. For now only external check plugins are
supported ("native::PluginCheck").

Attribute: check_command
^^^^^^^^^^^^^^^^^^^^^^^^

Optional when not using the "external plugin" check type. The check command.
May contain macros.

Attribute: check_interval
^^^^^^^^^^^^^^^^^^^^^^^^^

Optional. The check interval (in seconds).

Attribute: retry_interval
^^^^^^^^^^^^^^^^^^^^^^^^^

Optional. The retry interval (in seconds). This is used when the service is in
a soft state.

Attribute: servicegroups
^^^^^^^^^^^^^^^^^^^^^^^^

Optional. The service groups this service belongs to.

Attribute: checkers
^^^^^^^^^^^^^^^^^^^

Optional. A list of remote endpoints that may check this service. Wildcards can
be used here.

Type: ServiceGroup
~~~~~~~~~~~~~~~~~~

A group of services.

Example:

-------------------------------------------------------------------------------
object ServiceGroup "snmp" {
  alias = "SNMP services",

  notes_url = "http://www.example.org/",
  action_url = "http://www.example.org/",
}
-------------------------------------------------------------------------------

Attribute: alias
^^^^^^^^^^^^^^^^

Optional. A short description of the service group.

Attribute: notes_url
^^^^^^^^^^^^^^^^^^^^

Optional. Notes URL. Used by the CGIs.

Attribute: action_url
^^^^^^^^^^^^^^^^^^^^^

Optional. Action URL. Used by the CGIs.

Type: Host
~~~~~~~~~~

A host. Unlike in Icinga 1.x hosts are not checkable objects in Icinga 2.

Example:

-------------------------------------------------------------------------------
object Host "localhost" {
  alias = "The best host there is",

  hostgroups = { "all-hosts" },

  hostcheck = "ping",
  dependencies = { "router-ping" }

  services = {
    "ping",
    "my-http" {
      service = "http",

      macros = {
        vhost = "test1.example.org",
        port = 81
      }
    }
  }

  check_interval = 60,
  retry_interval = 15,

  servicegroups = { "all-services" },

  checkers = { "*" },
}
-------------------------------------------------------------------------------

Attribute: alias
^^^^^^^^^^^^^^^^

Optional. A short description of the host.

Attribute: hostgroups
^^^^^^^^^^^^^^^^^^^^^

Optional. A list of host groups this host belongs to.

Attribute: hostcheck
^^^^^^^^^^^^^^^^^^^^

Optional. A service that is used to determine whether the host is up or down.

Attribute: hostdependencies
^^^^^^^^^^^^^^^^^^^^^^^^^^^

Optional. A list of hosts that are used to determine whether the host is
unreachable.

Attribute: servicedependencies
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

Optional. A list of services that are used to determine whether the host is
unreachable.

Attribute: services
^^^^^^^^^^^^^^^^^^^

Inline definition of services. Each property in this dictionary specifies a
service. If the value of a property is a string it is interpreted as the name
of a service template and is used as a parent object for the new service. If it
is a dictionary its service property is used to determine the parent object and
all other service-related properties are additively copied into the new service
object.

The new service's name is "hostname-service" - where "service" is the
dictionary key in the services dictionary.

The priority for service properties is (from highest to lowest):

1. Properties specified in the dictionary of the inline service definition
2. Host properties
3. Properties inherited from the new service's parent object

Attribute: check_interval
^^^^^^^^^^^^^^^^^^^^^^^^^

Optional. Copied into inline service definitions. The host itself does not have
any checks.

Attribute: retry_interval
^^^^^^^^^^^^^^^^^^^^^^^^^

Optional. Copied into inline service definitions. The host itself does not have
any checks.

Attribute: servicegroups
^^^^^^^^^^^^^^^^^^^^^^^^

Optional. Copied into inline service definitions. The host itself does not have
any checks.

Attribute: checkers
^^^^^^^^^^^^^^^^^^^

Optional. Copied into inline service definitions. The host itself does not have
any checks.

Type: HostGroup
~~~~~~~~~~~~~~~

A group of hosts.

Example

-------------------------------------------------------------------------------
object HostGroup "my-hosts" {
  alias = "My hosts",

  notes_url = "http://www.example.org/",
  action_url = "http://www.example.org/",
}
-------------------------------------------------------------------------------

Attribute: alias
^^^^^^^^^^^^^^^^

Optional. A short description of the host group.

Attribute: notes_url
^^^^^^^^^^^^^^^^^^^^

Optional. Notes URL. Used by the CGIs.

Attribute: action_url
^^^^^^^^^^^^^^^^^^^^^

Optional. Action URL. Used by the CGIs.

Configuration Examples
----------------------

Non-networked minimal example
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

-------------------------------------------------------------------------------
local object IcingaApplication "icinga" {

}

local object Component "checker" {

}

local object Component "delegation" {

}

abstract object Service "icinga-service" {
  methods = {
    check = "native::PluginCheck"
  },

  macros = {
    plugindir = "/usr/lib/nagios/plugins"
  }
}

abstract object Service "ping" inherits "icinga-service" {
  check_command = "$plugindir$/check_ping -H $address$ -w $wrta$,$wpl$% -c $crta$,$cpl$%",

  macros += {
    wrta = 50,
    wpl = 5,
    crta = 100,
    cpl = 10
  }
}

object Host "localhost" {
  services = { "ping" },

  macros = {
    address = "127.0.0.1"
  },

  check_interval = 10
}
-------------------------------------------------------------------------------

NOTE: You may also want to load the "compat" component if you want Icinga 2 to
write status.dat and objects.cache files.
If you require an idomod connector for ido2db, outputting into idoutils database,
you may also load the "compatido" component (default: tcpsocket, 127.0.0.1:5668).
Make sure that ido2db is running and listening to the tcpsocket!

/* vim: set syntax=asciidoc filetype=asciidoc: */