IP Service Monitoring
While it isn't obvious from the documentation, IP Service monitoring will not only use SNMP to check for services that exist on a system, but will also remotely check to see if the port is available and responding. If you enable the zenoss.nmap.IpServiceMap modeler, Zenoss will use nmap to detect open ports on a system. Any ports detected with SNMP or the nmap modeler will automatically appear under the IP Service component of the device.
You can also add ports to monitor manually by navigating to the device and selecting "Add Ip Service" from the "+" menu at the bottom of the page. Simply select the already defined service from the Service Class list, and the protocol to use for the port.
By default Zenoss comes with a large list of services to monitor. If you wish to add additional ones, you can do this under the Infrastructure -> IP Services menu.
- Click on the "+" at the bottom of the page and select "Add Service"
- Enter a name for the service, with no spaces. This should probably be the same name as in /etc/services on a Linux system, but could be anything.
- Select the name from the list of services and update the fields in the right-hand pane as follows:
- Add a description (optional, but strongly encouraged)
- Enter the port the service is listening on
- Enter a send string and regex if you wish to do more than just open the port
- Enter service keys -- at a minimum this should contain the service name and the tcp port, ex: ssh, tcp_00022, udp_00022 (see some of the pre-defined services for examples)
- Optionally enable monitoring by default for this port and set the severity level of failures
NOTE:Some services such as smtp and http may have monitoring enabled by default, this can be changed by editing the service definition.