MSV FM

dot.antimicrobial@66.96.161.157: ~ $
Path : /etc/
File Upload :
Current < : //etc/grafana-agent.yaml

server:
  log_level: warn

metrics:
  global:
    scrape_interval: 60s
    external_labels:
      hostname: ${HOSTNAME}
      technical_service: vDeck
      technical_service_offering: vDeck - Custweb
    remote_write:
      - url: https://metrics.grafanacloud.newfold.com/api/v1/push
        proxy_url: http://grafana@wvkKaC2l2Vg6O5w@walproxy01-vip.int.bizland.net:3128
        queue_config:
          max_shards: 2
          max_samples_per_send: 1000
        oauth2:
          client_id: 4f04a668-c6e8-4b60-8212-ac214cdb4279 
          client_secret: vUd8Q~T5nrL55wjo-yl7qynZMV4EJhaDOjIMNadN
          scopes:
            - api://b74a3403-e87b-414e-94cb-3a467920de4e/.default
          endpoint_params:
            grant_type: 'client_credentials'
          token_url: https://login.microsoftonline.com/d3008fd4-0d20-418b-bf30-4e70d910c727/oauth2/v2.0/token
          proxy_url: http://grafana@wvkKaC2l2Vg6O5w@walproxy01-vip.int.bizland.net:3128
        write_relabel_configs:
          - source_labels: ['__name__']
            regex: '^namedprocess_namegroup_thread.*'
            action: 'drop'
  wal_directory: /var/lib/grafana-agent/wal
  wal_cleanup_age: 2h
  wal_cleanup_period: 15m
  configs:
   - name: default
     scrape_configs:
       - job_name: 'metrics/libvirt'
         static_configs:
           - targets: ['localhost:9000']
         relabel_configs:
           - target_label: instance
             replacement: ${HOSTNAME}:9000




integrations:
  agent:
    enabled: false

  node_exporter:
    enabled: true
    textfile_directory: /opt/nf-observability/prometheus/data
    filesystem_mount_points_exclude: "^/(dev|proc|sys|var/lib/docker/.+|home.*?/virtfs/.*)($|/)"
    # systemd_unit_include: "(sshd_client.service|sshd.service|crond.service|grafana-agent.service|libvirtd.service|chronyd.service|rsyslog.service|sophos-spl.service|taniumclient.service)"
    # Very Shitty way to add service :)
    systemd_unit_include: "(crond.service|apache2.service|nginx.service|pdnsd.service|varnish.service|sshd_client.service|sshd.service)"
    netdev_address_info: false
    netdev_device_exclude: "^lo$"
    enable_collectors:
      - systemd
    disable_collectors:
      - sockstat
      - tapestats
      - ipvs
      - zfs
      - bonding
      - fibrechannel
      - infiniband
      - nfsd
      - nfs
      - rapl
      - softnet
    metric_relabel_configs:
      - source_labels: [__name__]
        regex: "^(node_memory_MemTotal_bytes|node_memory_MemFree_bytes|node_memory_MemAvailable_bytes|node_memory_Buffers_bytes|node_memory_Cached_bytes|node_cpu_seconds_total|node_filesystem_avail_bytes|node_boot_time_seconds|node_disk_io_now|node_disk_io_time_seconds_total|node_disk_read_bytes_total|node_disk_reads_completed_total|node_disk_write_time_seconds_total|node_disk_read_time_seconds_total|node_disk_writes_completed_total|node_disk_written_bytes_total|node_filesystem_device_error|node_filesystem_files|node_filesystem_files_free|node_filesystem_free_bytes|node_filesystem_readonly|node_filesystem_size_bytes|node_load1|node_load15|node_load5|node_memory_SwapCached_bytes|node_memory_SwapFree_bytes|node_memory_SwapTotal_bytes|node_time_seconds|node_uname_info|node_systemd_unit_state|node_network_receive_bytes_total|node_network_transmit_bytes_total|node_netstat_Tcp_InSegs|node_disk_info|node_filesystem_health|node_md_state|node_md_disks_required|node_md_disks|node_md_blocks_synced|node_md_blocks|node_procs_running|node_selinux_enabled|node_systemd_system_running|node_systemd_unit_state|node_systemd_units|node_timex_maxerror_seconds|node_timex_offset_seconds|node_timex_sync_status|megaraid_pd_media_errors|raidSSD_Life_Left|smartmon_reallocated_sector_ct_raw_value|megaraid_pd_info|megaraid_vd_info|puppet_status|puppet_modified|node_md_disks|node_network_transmit_drop_total|node_network_receive_drop_total|node_network_transmit_errs_total|node_network_receive_errs_total|node_os_info|node_disk_io_time_weighted_seconds_total|node_context_switches_total|node_intr_total|node_netstat_IpExt_InOctets|node_netstat_IpExt_OutOctets|node_netstat_TcpExt_ListenOverflows|node_netstat_TcpExt_ListenDrops|node_netstat_TcpExt_TCPSynRetrans|node_netstat_Tcp_RetransSegs|node_netstat_Tcp_InErrs|node_netstat_Tcp_OutRsts|node_netstat_Udp_InDatagrams|node_netstat_Udp_OutDatagrams|node_netstat_Udp6_InDatagrams|node_netstat_Udp6_OutDatagrams|node_netstat_UdpLite_InErrors|node_netstat_Udp_InErrors|node_netstat_Udp6_InErrors|node_netstat_Udp_NoPorts|node_netstat_Udp6_NoPorts|node_netstat_Udp_RcvbufErrors|node_netstat_Udp6_RcvbufErrors|node_netstat_Udp_SndbufErrors|node_netstat_Udp6_SndbufErrors|node_netstat_Icmp_InMsgs|node_netstat_Icmp_OutMsgs|node_netstat_Icmp6_InMsgs|node_netstat_Icmp6_OutMsgs|node_netstat_Icmp_InErrors|node_netstat_Icmp6_InErrors|node_network_carrier|node_network_receive_packets_total|node_network_transmit_packets_total|node_nf_conntrack_entries|node_nf_conntrack_entries_limit|node_network_info|node_network_speed_bytes|node_network_mtu_bytes|node_arp_entries|node_network_up|node_network_transmit_queue_length|node_vmstat_pgpgin|node_vmstat_pgpgout|node_vmstat_pgmajfault|node_vmstat_pgfault|node_vmstat_oom_kill|node_vmstat_pswpout|node_vmstat_pswpin|node_disk_discard_time_seconds_total|libvirt_domains_number|libvirt_domain_state_code|libvirt_domain_info_virtual_cpus|libvirt_domain_info_cpu_time_seconds_total|libvirt_domain_block_stats_read_requests_total|libvirt_domain_block_stats_read_bytes_total|libvirt_domain_info_maximum_memory_bytes|libvirt_domain_stat_memory_unused_bytes|libvirt_domain_info_maximum_memory_bytes|libvirt_domain_interface_stats_receive_bytes_total|libvirt_domain_interface_stats_transmit_bytes_total|libvirt_domain_interface_stats_receive_drops_total|libvirt_domain_interface_stats_transmit_drops_total|cron_start|cron_last|cgi_mail_15min_count|grsec_status)$"
        action: keep

  process_exporter:
    enabled: true
    instance: ${HOSTNAME}:9256
    gather_smaps: true
    process_names:
      - name: Tanium
        comm:
          - TaniumClient
          - TaniumDetectEng
          - TaniumCX
      - name: Sophos
        comm:
          - savd
          - savscand
          - sophosmgmtd
      - name: Grafana
        comm:
          - grafana-agent
      - name: "Zabbix/Monit"
        comm:
          - zabbix_agentd
          - monit
      - name: "OSQuery"
        comm:
          - osqueryd
          - osquery-extensions
          - nf-osquery.ext
      - name: Monarx
        comm:
          - monarx-agent

logs:
  configs:
  - name: default
    positions:
      filename: /var/lib/grafana-agent/wal/positions.yaml
    clients:
    - url: https://logs.grafanacloud.newfold.com/loki/api/v1/push
      proxy_url: http://grafana@wvkKaC2l2Vg6O5w@walproxy01-vip.int.bizland.net:3128
      oauth2:
        client_id: 4f04a668-c6e8-4b60-8212-ac214cdb4279 
        client_secret: vUd8Q~T5nrL55wjo-yl7qynZMV4EJhaDOjIMNadN
        scopes:
          - api://b74a3403-e87b-414e-94cb-3a467920de4e/.default
        endpoint_params:
          grant_type: 'client_credentials'
        token_url: https://login.microsoftonline.com/d3008fd4-0d20-418b-bf30-4e70d910c727/oauth2/v2.0/token
        proxy_url: http://grafana@wvkKaC2l2Vg6O5w@walproxy01-vip.int.bizland.net:3128
    scrape_configs:
    - job_name: integrations/node_exporter_journal_unit
      journal:
        max_age: 24h
        matches: UNIT=grafana-agent.service UNIT=osqueryd.service
        labels:
          job: integrations/node_exporter
      relabel_configs:
      - source_labels: ['__journal__hostname']
        target_label: 'hostname'
      - source_labels: ['__journal_unit']
        target_label: 'unit'
    - job_name: integrations/node_exporter_journal__systemd_unit
      journal:
        max_age: 24h
        matches: _SYSTEMD_UNIT=grafana-agent.service _SYSTEMD_UNIT=osqueryd.service
        labels:
          job: integrations/node_exporter
      relabel_configs:
      - source_labels: ['__journal__hostname']
        target_label: 'hostname'
      - source_labels: ['__journal__systemd_unit']
        target_label: 'unit'
    - job_name: osquery
      static_configs:
      - targets:
          - localhost
        labels:
          __path__: /var/log/osquery/*.log
      pipeline_stages:
      - json:
          expressions:
            name: name
            hostname: hostIdentifier
            timestamp: unixTime
      - template:
          source: name
          template: 'osquery/{{ .Value }}'
      - timestamp:
          source: timestamp
          format: Unix
      - labels:
          job: name
          hostname: