立即与支持人员聊天
与支持团队交流

Foglight for Apache 6.1.0 - User Guide

Configuring Apache monitoring

To view status and performance for an Apache web server in Foglight for Apache, you must deploy an Apache monitor (an agent) to a Foglight Agent Manager. Configure the Apache monitor to detect the server status and server information pages on the Apache web server; the monitor collects data from the web server according to the collection schedule.

Related topics:
•
Configuring Apache web servers for monitoring
•
Adding Apache monitors

Configuring Apache web servers for monitoring

The following three options are required for monitoring a web server with an Apache agent. These options are set in the http.conf configuration file.

Normally, the required Apache modules are installed and enabled by default. In some instances, the web server administrator may have to enable them manually. If so, see the Apache HTTP Server Documentation, available online at: http://httpd.apache.org/docs/.

* 
IMPORTANT: There may be security implications with enabling the server status and information pages. Your web server administrator may not want to expose this information publicly. Ensure that you read and understand the appropriate Apache documentation, and configure your web server access accordingly. For more information, see the topic “Apache Module mod_info — Security Issues” in the Apache HTTP Server documentation: https://httpd.apache.org/docs/current/mod/mod_info.html. Also see Limiting access to server status and information pages .
To configure an Apache Web Server for monitoring:
1
Open the http.conf file in a text editor.
2
Verify that mod_info is enabled.
3
Verify that mod_status is enabled, and that the ExtendedStatus directive is also enabled (set to On).
 
* 
IMPORTANT: For Apache versions 2.3.6 and later, ExtendedStatus is enabled (On) when mod_status is loaded. For earlier versions, the default for ExtendedStatus is Off, so manually enable it.
4
Verify that the server-status and server-info handlers are configured. These handlers are built in to a standard Apache distribution and allow the agent to get the server’s status report and configuration information respectively.
5
Save the file.

Monitoring Apache web servers in FIPS-compliant mode

Foglight for Apache agent supports to run in FIPS-compliant mode, depending on the Agent Manager where it's deployed on. That is to say if the Agent Manager runs in FIPS-compliant mode, the Apache agent will be configured to be FIPS-compliant automatically, and vice versa.

When Foglight for Apache agent runs in FIPS-compliant mode, and tries to access an Apache web server with HTTPs connection, the Apache agent requires to authenticate the Apache web server's certificate. In order to successfully access these web servers and collect metrics, you need to import the web server's certificates to Agent Manager's certificate store.

To import the Apache web server’s certificate to the Agent Manager certificate store:
1
Launch a command shell on the Agent Manager machine, and navigate to the <fglam_home>/bin directory.
2
Import the Apache web server’s certificate with the following command:
fglam --add-certificate <alias=/path/to/certificate>
For example:
fglam --add-certificate your_alias_name=C:\Certificates\test\ServerSSL.cer
Related topics:
•
Adding Apache monitors
•
Limiting access to server status and information pages

Limiting access to server status and information pages

To restrict access to the server status page by requiring a password and a valid user:
1
Add the following authentication settings to your http.conf file:
<Location /server-status>
    SetHandler server-status
AuthType basic
AuthName "Server-Status"
AuthUserFile c:/.htpasswd
require valid-user
</Location>

The Apache agent includes a credential wizard to enable access to secure pages. For more information, see Step 5 of the procedure in Adding Apache monitors.

Related topics:
•
Configuring Apache web servers for monitoring
相关文档

The document was helpful.

选择评级

I easily found the information I needed.

选择评级