DumbMonit

IntégrationsBases de données et messagerie

Surveiller Apache Kafka avec DumbMonit

The event streaming cluster: offline and under-replicated partitions, a missing controller, and the lag of the consumer groups.

DocumentationSite officiel : Apache Kafka

Les descriptions des produits sont en anglais, comme dans le produit. Les libellés de la page suivent votre langue.

Ce que DumbMonit surveille

Apache Kafka and compatible brokers (Redpanda, Confluent): offline and under-replicated partitions, a missing controller, and the lag of the consumer groups.

Usage typique. Offline and under-replicated partitions, controller, consumer group lag

Exemples

  • Apache Kafka (KRaft or ZooKeeper)
  • Redpanda
  • Confluent Platform

Comment il se connecte

Ce qu'il faut

  • SASL/PLAINFor a SASL_SSL listener only: the password is accepted over TLS and never sent in clear text.

Aucun compte nécessaire.

Ports réseau à ouvrir

  • 9092/TCPKafka protocol (default port, plain or TLS), every broker is contacted
Étapes de mise en place: Give DumbMonit read-only access to Kafka
  1. Skip this step for a cluster without an authorizer. Otherwise give a dedicated principal read-only ACLs, from a host that can reach the brokers.

    kafka-acls.sh --bootstrap-server kafka.lan:9092 --add --allow-principal User:dumbmonit --operation Describe --cluster
    kafka-acls.sh --bootstrap-server kafka.lan:9092 --add --allow-principal User:dumbmonit --operation Describe --topic '*'
    kafka-acls.sh --bootstrap-server kafka.lan:9092 --add --allow-principal User:dumbmonit --operation Describe --group '*'
  2. In DumbMonit, enter the address of one broker, for example kafka.lan:9092: DumbMonit then contacts the other brokers at the addresses they advertise.

  3. Tick TLS if the listener is SSL or SASL_SSL, and enter the SASL/PLAIN user and password if the listener asks for them.

À savoir. Each broker must be reachable at the address it advertises (advertised.listeners): a broker DumbMonit cannot reach leaves the consumer lag incomplete. SASL/PLAIN is accepted only over TLS; SCRAM and Kerberos are not supported.