How To Setup Icinga Web 2 on CentOS 8 / RHEL 8

In the last post, we covered how to install Icinga 2 on CentOS 8 / RHEL 8. We now continue to the installation of Icinga web 2, a web interface for Icinga 2, where you can monitor all your servers.

Here, we will see how to install Icinga web 2 CentOS 8 / RHEL 8.

Install Icinga Web 2

Contents

1 Install Icinga Web 2
2 Setup Icinga Web 2
- 2.1 Setup Command Transport
  - 2.1.1 Local Command File
  - 2.1.2 Icinga 2 API
3 Access Icinga Web 2
4 Conclusion

Install PHP and PHP Extensions

Install the PHP (v7.2) package and extensions for Icinga Web 2.

READ: How To Install PHP 7.4 / 7.3 On CentOS 8 / RHEL 8

dnf install -y php php-json php-xml php-intl php-common php-pdo php-mysqlnd php-cli php-mbstring php-fpm php-gd php-zip php-ldap

Install Icinga Web 2

Use the yum command to install the Icinga Web 2 package along with Icinga CLI and Apache webserver.

dnf install -y icingaweb2 icingacli httpd

Start the Apache web server and PHP FPM.

systemctl start httpd systemctl start php-fpm

Enable Apache web server and PHP FPM to start automatically on the system boot.

systemctl enable httpd systemctl enable php-fpm

SELinux

If your system has SELinux enabled, then install the below package to set SELinux policy for Icinga Web 2.

dnf install -y icingaweb2-selinux

Firewall

Allow HTTP traffic in Firewall to access the Icinga web interface from external machines.

firewall-cmd --permanent --add-service=http firewall-cmd --reload

Setup Icinga Web 2

Go to the below URL to access the Icinga Web 2 setup wizard, which will guide you through all the steps for the installation of Icinga Web 2.

http://your.ip.addr.ess/icingaweb2/setup

For security reasons, you would need to generate the token to begin the installation of Icinga Web 2.

icingacli setup token create

Output: The newly generated setup token is: 08423344cc1ce96f

Copy and paste the generated token on the setup page and then click Next.

In the next screen, choose the modules to enable and configure it. These modules were installed during the Icinga 2 installation. Then, click Next.

Enter Security TokenEnable Icinga 2 Modules

The following page shows information about the system, PHP, and required PHP extensions.

You may get a warning message for missing PHP Imagick extension.

Image Magick’s PHP extension is not available in the OS repository. Follow the below link to install it.

READ: How To Install PHP Imagick On CentOS 8 / RHEL 8

For RHEL 8, You either choose to install it (which is against Red Hat Policies) or proceed further without installing Image Magick’s PHP extension.

After the installation of the PHP module for Imagick, restart the Apache and PHP FPM services and click the Refresh button and then click Next or Simply click Next if you are not installing the PHP module Imagick.

systemctl restart httpd systemctl restart php-fpm

On the next page, we will configure the Icinga Web 2 authentication. Icinga Web 2 supports Active Directory, LDAP, and Local authentication mechanism.

Here, for this demo, we will create a local Icinga Web 2 user account. So, select the authentication type as Database and click Next.

mysql -u root -p

Create a database to store authentication details.

CREATE DATABASE icingaweb2db; grant all privileges on icingaweb2db.* to icingaweb2@localhost identified by 'icinga123'; quit

Enter the database details on the following page and then click Next.

Click Next.

Enter the desired username and password for the Icinga Web 2 admin account.

Choose where to save the application and logging related configurations. Click Next.

Review your settings on the next screen.

Click Next.

Click Next on the configuration of the monitoring module for the Icinga Web 2 page.

Configure Icinga Web 2 Monitoring Module

Monitoring backend lets Icinga Web 2 retrieves the monitoring information from Icinga 2 database. Here, we use IDO.

Enter the IDO database details on the following page and then click Next.

IDO database was created during the installation of Icinga 2, click HERE to get the database details.

Setup Command Transport

This page tells how you want to send commands to your remote server for monitoring.

Icinga Web 2 supports Local Command File, Remote Command File, and Icinga 2 API as command transport.

Here, for this demo, we will configure Icinga Web 2 with single command transport. Choose either one of the below command transport

Local Command File
Icinga 2 API (Recommended)
Remote Command File

You can define multiple command modes of transport in Icinga Web 2.

Local Command File

Icinga 2 API

Run the below command to setup Icinga 2 API.

icinga2 api setup

Output: information/cli: Generating new CA.
information/base: Writing private key to '/var/lib/icinga2/ca//ca.key'.
information/base: Writing X509 certificate to '/var/lib/icinga2/ca//ca.crt'.
information/cli: Generating new CSR in '/var/lib/icinga2/certs//centos8.itzgeek.local.csr'.
information/base: Writing private key to '/var/lib/icinga2/certs//centos8.itzgeek.local.key'.
information/base: Writing certificate signing request to '/var/lib/icinga2/certs//centos8.itzgeek.local.csr'.
information/cli: Signing CSR with CA and writing certificate to '/var/lib/icinga2/certs//centos8.itzgeek.local.crt'.
information/pki: Writing certificate to file '/var/lib/icinga2/certs//centos8.itzgeek.local.crt'.
information/cli: Copying CA certificate to '/var/lib/icinga2/certs//ca.crt'.
information/cli: Adding new ApiUser 'root' in '/etc/icinga2/conf.d/api-users.conf'.
information/cli: Reading '/etc/icinga2/icinga2.conf'.
information/cli: Enabling the 'api' feature.
Enabling feature api. Make sure to restart Icinga 2 for these changes to take effect.
information/cli: Updating 'NodeName' constant in '/etc/icinga2/constants.conf'.
information/cli: Created backup file '/etc/icinga2/constants.conf.orig'.
information/cli: Updating 'ZoneName' constant in '/etc/icinga2/constants.conf'.
information/cli: Backup file '/etc/icinga2/constants.conf.orig' already exists. Skipping backup.
Done. Now restart your Icinga 2 daemon to finish the installation!

Get the API user details from /etc/icinga2/conf.d/api-users.conf file.

cat /etc/icinga2/conf.d/api-users.conf

Output: /** * The ApiUser objects are used for authentication against the API. */
object ApiUser "root" { password = "c6bbfdd8afceceb1" // client_cn = "" permissions = [ "*" ]
}

Restart the Icinga 2 service.