blob: 750eaeff87bbbb3da263f0faa2a1f2f5c6f04c48 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
|
# Security <a id="monitoring-module-security"></a>
The monitoring module provides an additional set of restrictions and permissions
that can be used for access control. The following sections will list those
restrictions and permissions in detail:
## Permissions <a id="monitoring-module-security-permissions"></a>
The monitoring module allows to send commands to an Icinga 2 instance.
A user needs specific permissions to be able to send those commands
when using the monitoring module.
Name | Permits
-------------------------------------------------|-----------------------------------------------
monitoring/command/* | Allow all commands.
monitoring/command/schedule-check | Allow scheduling host and service checks.
monitoring/command/schedule-check/active-only | Allow scheduling host and service checks. (Only on objects with active checks enabled)
monitoring/command/acknowledge-problem | Allow acknowledging host and service problems.
monitoring/command/remove-acknowledgement | Allow removing problem acknowledgements.
monitoring/command/comment/* | Allow adding and deleting host and service comments.
monitoring/command/comment/add | Allow commenting on hosts and services.
monitoring/command/comment/delete | Allow deleting host and service comments.
monitoring/command/downtime/* | Allow scheduling and deleting host and service downtimes.
monitoring/command/downtime/schedule | Allow scheduling host and service downtimes.
monitoring/command/downtime/delete | Allow deleting host and service downtimes.
monitoring/command/process-check-result | Allow processing host and service check results.
monitoring/command/feature/instance | Allow processing commands for toggling features on an instance-wide basis.
monitoring/command/feature/object/* | Allow processing commands for toggling features on host and service objects.
monitoring/command/feature/object/active-checks | Allow processing commands for toggling active checks on host and service objects.
monitoring/command/feature/object/passive-checks | Allow processing commands for toggling passive checks on host and service objects.
monitoring/command/feature/object/notifications | Allow processing commands for toggling notifications on host and service objects.
monitoring/command/feature/object/event-handler | Allow processing commands for toggling event handlers on host and service objects.
monitoring/command/feature/object/flap-detection | Allow processing commands for toggling flap detection on host and service objects.
monitoring/command/send-custom-notification | Allow sending custom notifications for hosts and services.
## Restrictions <a id="monitoring-module-security-restrictions"></a>
The monitoring module allows filtering objects:
Keys | Restricts
--------------------------------------------|-----------------------------------------------
monitoring/filter/objects | Applies a filter to all hosts and services.
This filter will affect all hosts and services. Furthermore, it will also
affect all related objects, like notifications, downtimes and events. If a
service is hidden, all notifications, downtimes on that service will be hidden too.
### Filter Column Names <a id="monitoring-module-security-restrictions-filter-column-names"></a>
The following filter column names are available in filter expressions:
Column | Description
-----------------------------------------------------------|-----------------------------------------------
instance\_name | Filter on an Icinga 2 instance.
host\_name | Filter on host object names.
hostgroup\_name | Filter on hostgroup object names.
service\_description | Filter on service object names.
servicegroup\_name | Filter on servicegroup object names.
all custom variables prefixed with `_host_` or `_service_` | Filter on specified custom variables.
|
