RMON Settings
RMON settings: general information
You can manage the RMON settings in the Admin area => Settings section.
The settings are applied to the All group, which includes all users by default.
You can specify the following parameters:
- basic settings for RMON;
- basic settings for RabbitMQ;
- settings for the system monitoring;
- general settings such as time zone, the address of the proxy server, TTL for tokens and sessions, etc.;
- settings for storing and managing the logs;
- settings for managing the LDAP access;
RabbitMQ settings
In this section, you can manage the following settings for RabbitMQ:
- rabbitmq_host — the IP address of FQDN of the RabbitMQ server host;
- rabbitmq_port — the port that RabbitMQ listens on;
- rabbitmq_vhost — the virtual host in RabbitMQ;
- rabbitmq_queue — the name of the queue for interaction with RMON;
- rabbitmq_user — the name of the RabbitMQ server user;
- rabbitmq_password — the password for the RabbitMQ server user.
Monitoring settings
This section contains the settings for system monitoring. Only users with the appropriate permissions (i.e., those of superAdmin) can access it. If you edit the settings here, the changes will affect the All group.
You can specify the following parameter:
- action_keep_history_range — the retention period for the RMON history (in days).
RMON settings
This section contains the settings for the RMON tool. Only users with the appropriate permissions (i.e., those of superAdmin) can access it. If you edit the settings here, the changes will affect the All group.
You can specify the following parameters:
- use_victoria_metrics — checkbox to enable or disable the collection of metrics in VictoriaMetrics;
- master_ip — IP address or hostname to connect to the RMON master;
- master_port — port for connecting to the RMON master;
- agent_port — RMON agent port;
- keep_history_range — retention period for RMON history (in days);
- ssl_expire_warning_alert — warning alert about SSL certificate expiration (in days);
- ssl_expire_critical_alert — critical alert about SSL certificate expiration (in days).
- victoria_metrics_insert — a link to collect metrics from Checks and send them to VictoriaMetrics;
- victoria_metrics_select — a link to retrieve data from VictoriaMetrics and display it in RMON;
Main settings
In this section, you can specify the following parameters:
- time_zone — the time zone;
- proxy — the IP address and port of the proxy server;
- session_ttl — TTL for a user session in days (the time period after which the session expires);
- token_ttl — TTL for a token in days (the time period after which the token expires);
- tmp_config_path — the path to the temporary directory (the directory must be owned by the user specified in the SSH settings);
- cert_path — the path to the directory where the SSL certificates are stored (the directory must be owned by the user specified in the SSH settings);
- ssl_local_path — the path to the directory where the SSL certificates are stored locally (the value of this parameter should be specified as a relative path beginning with $HOME_ROXY_WI/app/)
- lists_path — the path to the black and white lists (the value of this parameter should be specified as a relative path beginning with $HOME_ROXY-WI);
LDAP settings
In this section, you can specify the following parameters:
- ldap_enable — enable or disable LDAP (1 for enable, 0 for disable);
- ldap_server — the IP address of the LDAP server;
- ldap_port — the LDAP port (default is 389 or 636);
- ldap_user — LDAP username (format: user@domain.com);
- ldap_password — the password for the user specified in the previous parameter;
- ldap_base — LDAP base domain (e.g., dc=domain, dc=com);
- ldap_domain — LDAP domain;
- ldap_class_search — the class to which the user belongs (used for user search);
- ldap_user_attribute — the attribute used for searching the user;
- ldap_search_field — the user's email address;
- ldap_type — enable LDAPS (1 for enable, 0 for disable).
RMON configuration file
RMON keeps its configuration file (rmon.cfg) in the /etc/rmon folder. Keep in mind that you can edit it to change the RMON behavior as well.