librenms-librenms/includes/alerts/transport.elasticsearch.php

/* LibreNMS 
 *
 * Copyright (C) 2017 Paul Blasquez <pblasquez@gmail.com>
 * This program is free software: you can redistribute it and/or modify
 * it under the terms of the GNU General Public License as published by
 * the Free Software Foundation, either version 3 of the License, or
 * (at your option) any later version.
 *
 * This program is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.See the
 * GNU General Public License for more details.
 *
 * You should have received a copy of the GNU General Public License
 * along with this program.  If not, see <http://www.gnu.org/licenses/>. */

$es_host = '127.0.0.1';
$es_port = 9200;
$index = strftime("librenms-%Y.%m.%d");
$type = 'alert';
$severity = $obj['severity'];
$device = device_by_id_cache($obj['device_id']); // for event logging

if (!empty($opts['es_host'])) {
    if (preg_match("/[a-zA-Z]/", $opts['es_host'])) {
        $es_host = gethostbyname($opts['es_host']);
        if ($es_host === $opts['es_host']) {
          return "Alphanumeric hostname found but does not resolve to an IP.";
        }
    } elseif (filter_var($opts['es_host'], FILTER_VALIDATE_IP)) {
        $es_host = $opts['es_host'];
    } else {
        return "Elasticsearch host is not a valid IP: " . $opts['es_host'];
    }
}

if (!empty($opts['es_port']) && preg_match("/^\d+$/", $opts['es_port'])) {
    $es_port = $opts['es_port'];
}

if (!empty($opts['es_index'])) {
    $index = strftime($opts['es_index']);
}

$host = $es_host.':'.$es_port.'/'.$index.'/'.$type;

switch( $obj['state'] ) {
case 0:
    $state = "ok";
    break;
case 1:
    $state = $severity;
    break;
case 2:
    $state = "acknowledged";
    break;
case 3:
    $state = "worse";
    break;
case 4:
    $state = "better";
    break;
}

$data = array(
    '@timestamp' => strftime("%Y-%m-%dT%T"),
    "host" => gethostname(),
    "location" => $obj['location'],
    "title" => $obj['name'],
    "message" => $obj['string'],
    "device_id" => $obj['device_id'],
    "device_name" => $obj['hostname'],
    "device_hardware" => $obj['hardware'],
    "device_version" => $obj['version'],
    "state" => $state,
    "severity" => $severity,
    "first_occurrence" => $obj['timestamp'],
    "entity_type" => "device",
    "entity_tab" => "overview",
    "entity_id" => $obj['device_id'],
    "entity_name" => $obj['hostname'],
    "entity_descr" => $obj['sysDescr'],
);

if( !empty( $obj['faults'] ) ) {
    foreach($obj['faults'] as $k => $v) {
        $curl = curl_init();
        $data['message'] = $v['string'];
        switch (true) {
            case (array_key_exists('port_id', $v)):
                $data['entity_type'] = 'port';
                $data['entity_tab'] = 'port';
                $data['entity_id'] = $v['port_id'];
                $data['entity_name'] = $v['ifName'];
                $data['entity_descr'] = $v['ifAlias'];
                break;
            case (array_key_exists('sensor_id', $v)):
                $data['entity_type'] = $v['sensor_class'];
                $data['entity_tab'] = 'health';
                $data['entity_id'] = $v['sensor_id'];
                $data['entity_name'] = $v['sensor_descr'];
                $data['entity_descr'] = $v['sensor_type'];
                break;
            case (array_key_exists('mempool_id', $v)):
                $data['entity_type'] = 'mempool';
                $data['entity_tab'] = 'health';
                $data['entity_id'] = $v['mempool_id'];
                $data['entity_name'] = $v['mempool_index'];
                $data['entity_descr'] = $v['mempool_descr'];
                break;
            case (array_key_exists('storage_id', $v)):
                $data['entity_type'] = 'storage';
                $data['entity_tab'] = 'health';
                $data['entity_id'] = $v['storage_id'];
                $data['entity_name'] = $v['storage_index'];
                $data['entity_descr'] = $v['storage_descr'];
                break;
            case (array_key_exists('processor_id', $v)):
                $data['entity_type'] = 'processor';
                $data['entity_tab'] = 'health';
                $data['entity_id'] = $v['processor_id'];
                $data['entity_name'] = $v['processor_type'];
                $data['entity_descr'] = $v['processor_descr'];
                break;
            case (array_key_exists('bgpPeer_id', $v)):
                $data['entity_type'] = 'bgp';
                $data['entity_tab'] = 'routing';
                $data['entity_id'] = $v['bgpPeer_id'];
                $data['entity_name'] = 'local: '.$v['bgpPeerLocalAddr'].' - AS'.$obj['bgpLocalAs'];
                $data['entity_descr'] = 'remote: '.$v['bgpPeerIdentifier'].' - AS'.$v['bgpPeerRemoteAs'];
                break;
            case (array_key_exists('tunnel_id', $v)):
                $data['entity_type'] = 'ipsec_tunnel';
                $data['entity_tab'] = 'routing';
                $data['entity_id'] = $v['tunnel_id'];
                $data['entity_name'] = $v['tunnel_name'];
                $data['entity_descr'] = 'local: '.$v['local_addr'].':'.$v['local_port'].', remote: '.$v['peer_addr'].':'.$v['peer_port'];
                break;
            default:
                $data['entity_type'] = 'generic';
                break;
        }
        $alert_message = json_encode($data);
        curl_setopt($curl, CURLOPT_HTTPHEADER, array(
            'Content-Type: application/json')
        );
        if ($opts['es_proxy'] === true) {
            set_curl_proxy($curl);
        }
        curl_setopt($curl, CURLOPT_URL, $host);
        curl_setopt($curl, CURLOPT_RETURNTRANSFER, 1);
        curl_setopt($curl, CURLOPT_POST,true);
        curl_setopt($curl, CURLOPT_POSTFIELDS, $alert_message );
    
        $ret = curl_exec($curl);
        $code = curl_getinfo($curl, CURLINFO_HTTP_CODE);
        if( $code != 200 && $code != 201 ) {
            return $host.' returned HTTP Status code '.$code.' for '.$alert_message;
        }
    }
} else {
    $curl = curl_init();
    $alert_message = json_encode($data);
    curl_setopt($curl, CURLOPT_HTTPHEADER, array(
        'Content-Type: application/json')
    );
    if ($opts['es_proxy'] === true) {
        set_curl_proxy($curl);
    }
    curl_setopt($curl, CURLOPT_URL, $host);
    curl_setopt($curl, CURLOPT_RETURNTRANSFER, 1);
    curl_setopt($curl, CURLOPT_POST,true);
    curl_setopt($curl, CURLOPT_POSTFIELDS, $alert_message );

    $ret = curl_exec($curl);
    $code = curl_getinfo($curl, CURLINFO_HTTP_CODE);
    if( $code != 200 && $code != 201 ) {
        return $host.' returned HTTP Status code '.$code.' for '.$alert_message;
    }
}
return true;