├── discover_vpn_ipp.sh
├── discover_vpn.sh
├── zabbix_agentd.txt
├── README.md
└── openvpn.xml


/discover_vpn_ipp.sh:
--------------------------------------------------------------------------------
 1 | #!/bin/bash
 2 | 
 3 | path=/etc/openvpn/ipp.txt # path to ifconfig-pool-persist file
 4 | 
 5 | echo "{"
 6 | echo "\"data\":["
 7 | comma=""
 8 | 
 9 |   while read  line ; do
10 |   IFS=","
11 |   set -- $line
12 |   user=$1
13 |   echo "    $comma{\"{#VPNUSER}\":\"$user\"}"
14 |       comma=","
15 |   done < $path
16 | 
17 | echo "]"
18 | echo "}"
19 | 


--------------------------------------------------------------------------------
/discover_vpn.sh:
--------------------------------------------------------------------------------
 1 | #!/bin/bash
 2 | 
 3 | path=/etc/openvpn/ccd # path to certificate directory
 4 | 
 5 | users=`ls -F $path | sed 's/\///g'` # array of certificate name
 6 | 
 7 | echo "{"
 8 | echo "\"data\":["
 9 | 
10 | comma=""
11 | for user in $users
12 | do
13 |     echo "    $comma{\"{#VPNUSER}\":\"$user\"}"
14 |     comma=","
15 | done
16 | 
17 | echo "]"
18 | echo "}"
19 | 


--------------------------------------------------------------------------------
/zabbix_agentd.txt:
--------------------------------------------------------------------------------
1 | UserParameter=discovery.openvpn,/etc/zabbix/scripts/discover_vpn.sh
2 | UserParameter=user_status.openvpn[*], cat /var/log/openvpn-status.log | grep $1, >/dev/null && echo 1 || echo 0
3 | UserParameter=num_user.openvpn, cat /var/log/openvpn-status.log | sed -n '/Connected Since/,/ROUTING/p' | sed -e '1d' -e '$d' | wc -l
4 | UserParameter=user_byte_received.openvpn[*], if [ "`grep -c $1, /var/log/openvpn-status.log`" != "0" ]; then cat /var/log/openvpn-status.log | grep $1, | tr "," "\n" | sed -n '3p' ; else echo "0" ; fi
5 | UserParameter=user_byte_sent.openvpn[*], if [ "`grep -c $1, /var/log/openvpn-status.log`" != "0" ]; then cat /var/log/openvpn-status.log | grep $1, | tr "," "\n" | sed -n '4p' ; else echo "0" ; fi
6 | 
7 | UserParameter=discovery.openvpn.ipp,/etc/zabbix/scripts/discover_vpn_ipp.sh # for discovery with ifconfig-pool-persist
8 | 


--------------------------------------------------------------------------------
/README.md:
--------------------------------------------------------------------------------
 1 | # zabbix-openvpn 
 2 | Zabbix 3.0
 3 | 
 4 | Script for OpenVPN users monitoring.
 5 | It shows an OpenVPN user’s status, and its uplink and downlink traffic.
 6 | The “items” by the files certificates names are made using LLD.
 7 | 
 8 | Setup:
 9 | 
10 | 1)	 Copy the file discover_vpn.sh to any directory on the server were  OpenVPN  is(for example	/etc/zabbix/scripts/discover_vpn.sh ). In this file specify the path to directory where OpenVPN certificates are (line №3).
11 | 
12 | 2)	 Copy all lines from “zabbix_agentd.txt” file and paste to the end of zabbix agent  config (/etc/zabbix/zabbix_agentd.conf). Probably, will be necessary to change the path to  discover_vpn.sh. 
13 | 
14 | 3)	 Import openvpn.xml to zabbix template.
15 | 
16 | # zabbix-openvpn 
17 | Zabbix 3.0
18 | 
19 | Скрипт мониторинга пользователей OpenVPN.
20 | Проверяется статус каждого пользователя OpenVPN, и его входящий\исходящий трафик.
21 | 
22 | С помощью LLD создаются "элементы данных" по имени файлов сертификатов.
23 | 
24 | Установка:
25 | 1)	скопировать файл discover_vpn.sh в любую директорию, на сервере с OpenVPN (например, /etc/zabbix/scripts/discover_vpn.sh)
26 | 	в этом файле указать путь до папки с сетификатами OpenVPN (строка №3).
27 | 	
28 | 2)	из файла zabbix_agentd.txt скопировать все строки в конец конфига zabbix агента (по умолчанию, /etc/zabbix/zabbix_agentd.conf)
29 | 	возможно потребуется изменить путь до discover_vpn.sh
30 | 	
31 | 3)	импортировать в zabbix шаблон openvpn.xml
32 | 


--------------------------------------------------------------------------------
/openvpn.xml:
--------------------------------------------------------------------------------
  1 | <?xml version="1.0" encoding="UTF-8"?>
  2 | <zabbix_export>
  3 |     <version>3.0</version>
  4 |     <date>2016-08-17T11:07:00Z</date>
  5 |     <groups>
  6 |         <group>
  7 |             <name>Templates</name>
  8 |         </group>
  9 |     </groups>
 10 |     <templates>
 11 |         <template>
 12 |             <template>Template App OpenVPN</template>
 13 |             <name>Template App OpenVPN</name>
 14 |             <description/>
 15 |             <groups>
 16 |                 <group>
 17 |                     <name>Templates</name>
 18 |                 </group>
 19 |             </groups>
 20 |             <applications>
 21 |                 <application>
 22 |                     <name>OpenVPN</name>
 23 |                 </application>
 24 |             </applications>
 25 |             <items>
 26 |                 <item>
 27 |                     <name>openvpn num_user</name>
 28 |                     <type>0</type>
 29 |                     <snmp_community/>
 30 |                     <multiplier>0</multiplier>
 31 |                     <snmp_oid/>
 32 |                     <key>num_user.openvpn</key>
 33 |                     <delay>120</delay>
 34 |                     <history>90</history>
 35 |                     <trends>365</trends>
 36 |                     <status>0</status>
 37 |                     <value_type>3</value_type>
 38 |                     <allowed_hosts/>
 39 |                     <units/>
 40 |                     <delta>0</delta>
 41 |                     <snmpv3_contextname/>
 42 |                     <snmpv3_securityname/>
 43 |                     <snmpv3_securitylevel>0</snmpv3_securitylevel>
 44 |                     <snmpv3_authprotocol>0</snmpv3_authprotocol>
 45 |                     <snmpv3_authpassphrase/>
 46 |                     <snmpv3_privprotocol>0</snmpv3_privprotocol>
 47 |                     <snmpv3_privpassphrase/>
 48 |                     <formula>1</formula>
 49 |                     <delay_flex/>
 50 |                     <params/>
 51 |                     <ipmi_sensor/>
 52 |                     <data_type>0</data_type>
 53 |                     <authtype>0</authtype>
 54 |                     <username/>
 55 |                     <password/>
 56 |                     <publickey/>
 57 |                     <privatekey/>
 58 |                     <port/>
 59 |                     <description/>
 60 |                     <inventory_link>0</inventory_link>
 61 |                     <applications>
 62 |                         <application>
 63 |                             <name>OpenVPN</name>
 64 |                         </application>
 65 |                     </applications>
 66 |                     <valuemap/>
 67 |                     <logtimefmt/>
 68 |                 </item>
 69 |             </items>
 70 |             <discovery_rules>
 71 |                 <discovery_rule>
 72 |                     <name>openvpn vpn_user</name>
 73 |                     <type>0</type>
 74 |                     <snmp_community/>
 75 |                     <snmp_oid/>
 76 |                     <key>discovery.openvpn</key>
 77 |                     <delay>60</delay>
 78 |                     <status>0</status>
 79 |                     <allowed_hosts/>
 80 |                     <snmpv3_contextname/>
 81 |                     <snmpv3_securityname/>
 82 |                     <snmpv3_securitylevel>0</snmpv3_securitylevel>
 83 |                     <snmpv3_authprotocol>0</snmpv3_authprotocol>
 84 |                     <snmpv3_authpassphrase/>
 85 |                     <snmpv3_privprotocol>0</snmpv3_privprotocol>
 86 |                     <snmpv3_privpassphrase/>
 87 |                     <delay_flex/>
 88 |                     <params/>
 89 |                     <ipmi_sensor/>
 90 |                     <authtype>0</authtype>
 91 |                     <username/>
 92 |                     <password/>
 93 |                     <publickey/>
 94 |                     <privatekey/>
 95 |                     <port/>
 96 |                     <filter>
 97 |                         <evaltype>0</evaltype>
 98 |                         <formula/>
 99 |                         <conditions/>
100 |                     </filter>
101 |                     <lifetime>1</lifetime>
102 |                     <description/>
103 |                     <item_prototypes>
104 |                         <item_prototype>
105 |                             <name>openvpn byte_received {#VPNUSER}</name>
106 |                             <type>0</type>
107 |                             <snmp_community/>
108 |                             <multiplier>0</multiplier>
109 |                             <snmp_oid/>
110 |                             <key>user_byte_received.openvpn[{#VPNUSER}]</key>
111 |                             <delay>120</delay>
112 |                             <history>90</history>
113 |                             <trends>365</trends>
114 |                             <status>0</status>
115 |                             <value_type>3</value_type>
116 |                             <allowed_hosts/>
117 |                             <units>b\s</units>
118 |                             <delta>1</delta>
119 |                             <snmpv3_contextname/>
120 |                             <snmpv3_securityname/>
121 |                             <snmpv3_securitylevel>0</snmpv3_securitylevel>
122 |                             <snmpv3_authprotocol>0</snmpv3_authprotocol>
123 |                             <snmpv3_authpassphrase/>
124 |                             <snmpv3_privprotocol>0</snmpv3_privprotocol>
125 |                             <snmpv3_privpassphrase/>
126 |                             <formula>1</formula>
127 |                             <delay_flex/>
128 |                             <params/>
129 |                             <ipmi_sensor/>
130 |                             <data_type>0</data_type>
131 |                             <authtype>0</authtype>
132 |                             <username/>
133 |                             <password/>
134 |                             <publickey/>
135 |                             <privatekey/>
136 |                             <port/>
137 |                             <description/>
138 |                             <inventory_link>0</inventory_link>
139 |                             <applications>
140 |                                 <application>
141 |                                     <name>OpenVPN</name>
142 |                                 </application>
143 |                             </applications>
144 |                             <valuemap/>
145 |                             <logtimefmt/>
146 |                             <application_prototypes/>
147 |                         </item_prototype>
148 |                         <item_prototype>
149 |                             <name>openvpn byte_sent {#VPNUSER}</name>
150 |                             <type>0</type>
151 |                             <snmp_community/>
152 |                             <multiplier>0</multiplier>
153 |                             <snmp_oid/>
154 |                             <key>user_byte_sent.openvpn[{#VPNUSER}]</key>
155 |                             <delay>120</delay>
156 |                             <history>90</history>
157 |                             <trends>365</trends>
158 |                             <status>0</status>
159 |                             <value_type>3</value_type>
160 |                             <allowed_hosts/>
161 |                             <units>b\s</units>
162 |                             <delta>1</delta>
163 |                             <snmpv3_contextname/>
164 |                             <snmpv3_securityname/>
165 |                             <snmpv3_securitylevel>0</snmpv3_securitylevel>
166 |                             <snmpv3_authprotocol>0</snmpv3_authprotocol>
167 |                             <snmpv3_authpassphrase/>
168 |                             <snmpv3_privprotocol>0</snmpv3_privprotocol>
169 |                             <snmpv3_privpassphrase/>
170 |                             <formula>1</formula>
171 |                             <delay_flex/>
172 |                             <params/>
173 |                             <ipmi_sensor/>
174 |                             <data_type>0</data_type>
175 |                             <authtype>0</authtype>
176 |                             <username/>
177 |                             <password/>
178 |                             <publickey/>
179 |                             <privatekey/>
180 |                             <port/>
181 |                             <description/>
182 |                             <inventory_link>0</inventory_link>
183 |                             <applications>
184 |                                 <application>
185 |                                     <name>OpenVPN</name>
186 |                                 </application>
187 |                             </applications>
188 |                             <valuemap/>
189 |                             <logtimefmt/>
190 |                             <application_prototypes/>
191 |                         </item_prototype>
192 |                         <item_prototype>
193 |                             <name>openvpn user_status openvpn {#VPNUSER}</name>
194 |                             <type>0</type>
195 |                             <snmp_community/>
196 |                             <multiplier>0</multiplier>
197 |                             <snmp_oid/>
198 |                             <key>user_status.openvpn[{#VPNUSER}]</key>
199 |                             <delay>120</delay>
200 |                             <history>90</history>
201 |                             <trends>365</trends>
202 |                             <status>0</status>
203 |                             <value_type>3</value_type>
204 |                             <allowed_hosts/>
205 |                             <units/>
206 |                             <delta>0</delta>
207 |                             <snmpv3_contextname/>
208 |                             <snmpv3_securityname/>
209 |                             <snmpv3_securitylevel>0</snmpv3_securitylevel>
210 |                             <snmpv3_authprotocol>0</snmpv3_authprotocol>
211 |                             <snmpv3_authpassphrase/>
212 |                             <snmpv3_privprotocol>0</snmpv3_privprotocol>
213 |                             <snmpv3_privpassphrase/>
214 |                             <formula>1</formula>
215 |                             <delay_flex/>
216 |                             <params/>
217 |                             <ipmi_sensor/>
218 |                             <data_type>0</data_type>
219 |                             <authtype>0</authtype>
220 |                             <username/>
221 |                             <password/>
222 |                             <publickey/>
223 |                             <privatekey/>
224 |                             <port/>
225 |                             <description/>
226 |                             <inventory_link>0</inventory_link>
227 |                             <applications>
228 |                                 <application>
229 |                                     <name>OpenVPN</name>
230 |                                 </application>
231 |                             </applications>
232 |                             <valuemap/>
233 |                             <logtimefmt/>
234 |                             <application_prototypes/>
235 |                         </item_prototype>
236 |                     </item_prototypes>
237 |                     <trigger_prototypes/>
238 |                     <graph_prototypes>
239 |                         <graph_prototype>
240 |                             <name>openvpn byte_sent/received {#VPNUSER}</name>
241 |                             <width>900</width>
242 |                             <height>200</height>
243 |                             <yaxismin>0.0000</yaxismin>
244 |                             <yaxismax>100.0000</yaxismax>
245 |                             <show_work_period>1</show_work_period>
246 |                             <show_triggers>1</show_triggers>
247 |                             <type>0</type>
248 |                             <show_legend>1</show_legend>
249 |                             <show_3d>0</show_3d>
250 |                             <percent_left>0.0000</percent_left>
251 |                             <percent_right>0.0000</percent_right>
252 |                             <ymin_type_1>0</ymin_type_1>
253 |                             <ymax_type_1>0</ymax_type_1>
254 |                             <ymin_item_1>0</ymin_item_1>
255 |                             <ymax_item_1>0</ymax_item_1>
256 |                             <graph_items>
257 |                                 <graph_item>
258 |                                     <sortorder>0</sortorder>
259 |                                     <drawtype>0</drawtype>
260 |                                     <color>1A7C11</color>
261 |                                     <yaxisside>0</yaxisside>
262 |                                     <calc_fnc>2</calc_fnc>
263 |                                     <type>0</type>
264 |                                     <item>
265 |                                         <host>Template App OpenVPN</host>
266 |                                         <key>user_byte_received.openvpn[{#VPNUSER}]</key>
267 |                                     </item>
268 |                                 </graph_item>
269 |                                 <graph_item>
270 |                                     <sortorder>1</sortorder>
271 |                                     <drawtype>0</drawtype>
272 |                                     <color>F63100</color>
273 |                                     <yaxisside>0</yaxisside>
274 |                                     <calc_fnc>2</calc_fnc>
275 |                                     <type>0</type>
276 |                                     <item>
277 |                                         <host>Template App OpenVPN</host>
278 |                                         <key>user_byte_sent.openvpn[{#VPNUSER}]</key>
279 |                                     </item>
280 |                                 </graph_item>
281 |                             </graph_items>
282 |                         </graph_prototype>
283 |                         <graph_prototype>
284 |                             <name>OpenVPN Status {#VPNUSER}</name>
285 |                             <width>900</width>
286 |                             <height>200</height>
287 |                             <yaxismin>0.0000</yaxismin>
288 |                             <yaxismax>100.0000</yaxismax>
289 |                             <show_work_period>1</show_work_period>
290 |                             <show_triggers>1</show_triggers>
291 |                             <type>0</type>
292 |                             <show_legend>1</show_legend>
293 |                             <show_3d>0</show_3d>
294 |                             <percent_left>0.0000</percent_left>
295 |                             <percent_right>0.0000</percent_right>
296 |                             <ymin_type_1>0</ymin_type_1>
297 |                             <ymax_type_1>0</ymax_type_1>
298 |                             <ymin_item_1>0</ymin_item_1>
299 |                             <ymax_item_1>0</ymax_item_1>
300 |                             <graph_items>
301 |                                 <graph_item>
302 |                                     <sortorder>0</sortorder>
303 |                                     <drawtype>0</drawtype>
304 |                                     <color>1A7C11</color>
305 |                                     <yaxisside>0</yaxisside>
306 |                                     <calc_fnc>2</calc_fnc>
307 |                                     <type>0</type>
308 |                                     <item>
309 |                                         <host>Template App OpenVPN</host>
310 |                                         <key>user_status.openvpn[{#VPNUSER}]</key>
311 |                                     </item>
312 |                                 </graph_item>
313 |                             </graph_items>
314 |                         </graph_prototype>
315 |                     </graph_prototypes>
316 |                     <host_prototypes/>
317 |                 </discovery_rule>
318 |             </discovery_rules>
319 |             <macros/>
320 |             <templates/>
321 |             <screens>
322 |                 <screen>
323 |                     <name>1OpenVPN</name>
324 |                     <hsize>1</hsize>
325 |                     <vsize>2</vsize>
326 |                     <screen_items>
327 |                         <screen_item>
328 |                             <resourcetype>1</resourcetype>
329 |                             <width>500</width>
330 |                             <height>100</height>
331 |                             <x>0</x>
332 |                             <y>0</y>
333 |                             <colspan>1</colspan>
334 |                             <rowspan>1</rowspan>
335 |                             <elements>0</elements>
336 |                             <valign>0</valign>
337 |                             <halign>0</halign>
338 |                             <style>0</style>
339 |                             <url/>
340 |                             <dynamic>0</dynamic>
341 |                             <sort_triggers>0</sort_triggers>
342 |                             <resource>
343 |                                 <key>num_user.openvpn</key>
344 |                                 <host>Template App OpenVPN</host>
345 |                             </resource>
346 |                             <max_columns>3</max_columns>
347 |                             <application/>
348 |                         </screen_item>
349 |                         <screen_item>
350 |                             <resourcetype>20</resourcetype>
351 |                             <width>500</width>
352 |                             <height>100</height>
353 |                             <x>0</x>
354 |                             <y>1</y>
355 |                             <colspan>1</colspan>
356 |                             <rowspan>1</rowspan>
357 |                             <elements>0</elements>
358 |                             <valign>0</valign>
359 |                             <halign>0</halign>
360 |                             <style>0</style>
361 |                             <url/>
362 |                             <dynamic>0</dynamic>
363 |                             <sort_triggers>0</sort_triggers>
364 |                             <resource>
365 |                                 <name>OpenVPN Status {#VPNUSER}</name>
366 |                                 <host>Template App OpenVPN</host>
367 |                             </resource>
368 |                             <max_columns>3</max_columns>
369 |                             <application/>
370 |                         </screen_item>
371 |                     </screen_items>
372 |                 </screen>
373 |             </screens>
374 |         </template>
375 |     </templates>
376 | </zabbix_export>
377 | 


--------------------------------------------------------------------------------