{"id":28771,"date":"2023-05-06T09:29:40","date_gmt":"2023-04-05T11:27:57","guid":{"rendered":"https:\/\/www.silicloud.com\/zh\/blog\/%e5%bd%93elastalert%e5%8f%91%e7%94%9f%e8%ad%a6%e6%8a%a5%e6%97%b6%ef%bc%8c%e9%80%9a%e8%bf%87snmptrap%e5%91%bd%e4%bb%a4%e5%8f%91%e9%80%81snmptrap\/"},"modified":"2025-08-12T10:01:14","modified_gmt":"2025-08-12T02:01:14","slug":"%e5%bd%93elastalert%e5%8f%91%e7%94%9f%e8%ad%a6%e6%8a%a5%e6%97%b6%ef%bc%8c%e9%80%9a%e8%bf%87snmptrap%e5%91%bd%e4%bb%a4%e5%8f%91%e9%80%81snmptrap","status":"publish","type":"post","link":"https:\/\/www.silicloud.com\/zh\/blog\/%e5%bd%93elastalert%e5%8f%91%e7%94%9f%e8%ad%a6%e6%8a%a5%e6%97%b6%ef%bc%8c%e9%80%9a%e8%bf%87snmptrap%e5%91%bd%e4%bb%a4%e5%8f%91%e9%80%81snmptrap\/","title":{"rendered":"\u5f53ElastAlert\u53d1\u751f\u8b66\u62a5\u65f6\uff0c\u901a\u8fc7snmptrap\u547d\u4ee4\u53d1\u9001SNMPTrap"},"content":{"rendered":"<h1>\u73af\u5883<\/p>\n<h2>Elasticsearch\u3001Kibana\u3001Fluentd\u3001ElastAlert\u3001MariaDB\u53ef\u4ee5\u88ab\u7528\u6765\u5b9e\u73b0\u3002AWS WorkSpaces<br \/>\nAmazon Linux 2<br \/>\nDocker 18.09<br \/>\nElasticsearch 7.6.1<br \/>\nKibana 7.6.1<br \/>\nFluentd 1.9.3<br \/>\nMariadb 10.4.12<\/p>\n<p>\u4e9a\u9a6c\u900a\u5de5\u4f5c\u7a7a\u95f4<br \/>\nAmazon Linux 2<br \/>\nDocker 18.09<br \/>\nElasticsearch 7.6.1<br \/>\nKibana 7.6.1<br \/>\nFluentd 1.9.3<br \/>\nMariadb 10.4.12<\/p>\n<h2>SNMPTrap\u7684\u63a5\u6536\u670d\u52a1\u5668\u817e\u8baf\u4e91 EC2<br \/>\n\u4e9a\u9a6c\u900a Linux2<br \/>\n\u4f7f\u7528 Docker \u955c\u50cf &#8220;sig9\/snmptrapd&#8221;<\/p>\n<h1>\u76ee\u5f55\u7ed3\u6784<\/p>\n<pre class=\"post-pre\"><code>\/home\/\u30e6\u30fc\u30b6\u30fc\u540d\/dkwork\/snmp-test\r\n|--docker-compose.yml\r\n|--elastalert\r\n|  |--config\r\n|  |  |--api.config.json\r\n|  |  |--elastalert.yaml\r\n|  |--dockerfiles\r\n|  |  |--Dockerfile\r\n|  |--nginx_config\r\n|  |  |--default.conf\r\n|  |  |--nginx.conf\r\n|  |--public\r\n|  |  |--favicon.ico\r\n|  |  |--index.html\r\n|  |  |--js\r\n|  |  |  |--cron-ui.min.js\r\n|  |  |--praeco.config.json\r\n|  |--rule_templates\r\n|  |--rules\r\n|  |  |--mariadb-error-log-warning.yaml\r\n|--es\r\n|  |--config\r\n|  |  |--elasticsearch.yml\r\n|  |--data\r\n|--fluentd\r\n|  |--dockerfiles\r\n|  |  |--Dockerfile\r\n|  |--etc\r\n|  |  |--fluent.conf\r\n|--kibana\r\n|  |--config\r\n|  |  |--kibana.yml\r\n|--mariadb\r\n|  |--data\r\n|  |--etc\r\n|  |  |--mymariadb.cnf\r\n|  |--log\r\n|  |  |--error.log\r\n|  |  |--general.log\r\n|  |  |--slow.log\r\n<\/code><\/pre>\n<h1>\u521b\u5efa\u73af\u5883<\/p>\n<pre class=\"post-pre\"><code>mkdir -p elastalert\/config\r\nmkdir -p elastalert\/dockerfiles\r\nmkdir -p elastalert\/nginx_config\r\nmkdir -p elastalert\/public\r\nmkdir -p elastalert\/public\/js\r\nmkdir -p elastalert\/rule_templates\r\nmkdir -p elastalert\/rules\r\nmkdir -p es\/config\r\nmkdir -p es\/data\r\nchmod 777 es\/data\r\nmkdir -p fluentd\/dockerfiles\r\nmkdir -p fluentd\/etc\r\nmkdir -p kibana\/config\r\nmkdir -p mariadb\/data\r\nchmod 777 mariadb\/data\r\nmkdir -p mariadb\/etc\r\nmkdir -p mariadb\/log\r\nchmod 777 mariadb\/log\r\n<\/code><\/pre>\n<p>\u4ee5\u4e0b\u7684\u6587\u4ef6\u662f\u4f7f\u7528Praeco\u7f51\u7ad9\u7684\u8d44\u6e90\uff1a<br \/>\nhttps:\/\/github.com\/ServerCentral\/praeco<br \/>\n\u00b7 elastalert\/config\/api.config.json<br \/>\n\u00b7 elastalert\/config\/elastalert.yaml<br \/>\n\u00b7 elastalert\/nginx_config\/default.conf<br \/>\n\u00b7 elastalert\/nginx_config\/nginx.conf<br \/>\n\u00b7 elastalert\/public\/js\/cron-ui.min.js<br \/>\n\u00b7 elastalert\/public\/favicon.ico<br \/>\n\u00b7 elastalert\/public\/index.html<br \/>\n\u00b7 elastalert\/public\/praeco.config.json<\/p>\n<pre class=\"post-pre\"><code><span class=\"na\">version<\/span><span class=\"pi\">:<\/span> <span class=\"s1\">'<\/span><span class=\"s\">3.7'<\/span>\r\n<span class=\"na\">services<\/span><span class=\"pi\">:<\/span>\r\n  <span class=\"na\">elasticsearch<\/span><span class=\"pi\">:<\/span>\r\n    <span class=\"na\">container_name<\/span><span class=\"pi\">:<\/span> <span class=\"s\">elasticsearch<\/span>\r\n    <span class=\"na\">image<\/span><span class=\"pi\">:<\/span> <span class=\"s\">docker.elastic.co\/elasticsearch\/elasticsearch:7.6.1<\/span>\r\n    <span class=\"na\">ports<\/span><span class=\"pi\">:<\/span>\r\n      <span class=\"pi\">-<\/span> <span class=\"s\">9200:9200<\/span>\r\n      <span class=\"pi\">-<\/span> <span class=\"s\">9300:9300<\/span>\r\n    <span class=\"na\">environment<\/span><span class=\"pi\">:<\/span>\r\n      <span class=\"pi\">-<\/span> <span class=\"s\">ES_JAVA_OPTS=-Xms256m -Xmx256m<\/span>\r\n      <span class=\"pi\">-<\/span> <span class=\"s\">discovery.type=single-node<\/span>\r\n    <span class=\"na\">restart<\/span><span class=\"pi\">:<\/span> <span class=\"s\">always<\/span>\r\n    <span class=\"na\">volumes<\/span><span class=\"pi\">:<\/span>\r\n      <span class=\"pi\">-<\/span> <span class=\"s\">.\/es\/data:\/usr\/share\/elasticsearch\/data<\/span>\r\n      <span class=\"pi\">-<\/span> <span class=\"s\">.\/es\/config\/elasticsearch.yml:\/usr\/share\/elasticsearch\/config\/elasticsearch.yml<\/span>\r\n    <span class=\"na\">healthcheck<\/span><span class=\"pi\">:<\/span>\r\n        <span class=\"na\">test<\/span><span class=\"pi\">:<\/span> <span class=\"pi\">[<\/span><span class=\"s2\">\"<\/span><span class=\"s\">CMD-SHELL\"<\/span><span class=\"pi\">,<\/span> <span class=\"s2\">\"<\/span><span class=\"s\">curl<\/span> <span class=\"s\">-f<\/span> <span class=\"s\">http:\/\/localhost:9200<\/span> <span class=\"s\">||<\/span> <span class=\"s\">exit<\/span> <span class=\"s\">1\"<\/span><span class=\"pi\">]<\/span>\r\n        <span class=\"na\">interval<\/span><span class=\"pi\">:<\/span> <span class=\"s\">30s<\/span>\r\n        <span class=\"na\">timeout<\/span><span class=\"pi\">:<\/span> <span class=\"s\">15s<\/span>\r\n        <span class=\"na\">retries<\/span><span class=\"pi\">:<\/span> <span class=\"m\">3<\/span>\r\n        <span class=\"na\">start_period<\/span><span class=\"pi\">:<\/span> <span class=\"s\">180s<\/span>\r\n\r\n  <span class=\"na\">kibana<\/span><span class=\"pi\">:<\/span>\r\n    <span class=\"na\">container_name<\/span><span class=\"pi\">:<\/span> <span class=\"s\">kibana<\/span>\r\n    <span class=\"na\">image<\/span><span class=\"pi\">:<\/span> <span class=\"s\">docker.elastic.co\/kibana\/kibana:7.6.1<\/span>\r\n    <span class=\"na\">ports<\/span><span class=\"pi\">:<\/span>\r\n      <span class=\"pi\">-<\/span> <span class=\"s\">5601:5601<\/span>\r\n    <span class=\"na\">depends_on<\/span><span class=\"pi\">:<\/span>\r\n      <span class=\"pi\">-<\/span> <span class=\"s\">elasticsearch<\/span>\r\n    <span class=\"na\">restart<\/span><span class=\"pi\">:<\/span> <span class=\"s\">always<\/span>\r\n    <span class=\"na\">volumes<\/span><span class=\"pi\">:<\/span>\r\n      <span class=\"pi\">-<\/span> <span class=\"s\">.\/kibana\/config\/kibana.yml:\/usr\/share\/kibana\/config\/kibana.yml<\/span>\r\n    <span class=\"na\">healthcheck<\/span><span class=\"pi\">:<\/span>\r\n        <span class=\"na\">test<\/span><span class=\"pi\">:<\/span> <span class=\"pi\">[<\/span><span class=\"s2\">\"<\/span><span class=\"s\">CMD-SHELL\"<\/span><span class=\"pi\">,<\/span> <span class=\"s2\">\"<\/span><span class=\"s\">curl<\/span> <span class=\"s\">-f<\/span> <span class=\"s\">http:\/\/localhost:5601\/api\/status<\/span> <span class=\"s\">||<\/span> <span class=\"s\">exit<\/span> <span class=\"s\">1\"<\/span><span class=\"pi\">]<\/span>\r\n        <span class=\"na\">interval<\/span><span class=\"pi\">:<\/span> <span class=\"s\">30s<\/span>\r\n        <span class=\"na\">timeout<\/span><span class=\"pi\">:<\/span> <span class=\"s\">15s<\/span>\r\n        <span class=\"na\">retries<\/span><span class=\"pi\">:<\/span> <span class=\"m\">3<\/span>\r\n        <span class=\"na\">start_period<\/span><span class=\"pi\">:<\/span> <span class=\"s\">200s<\/span>\r\n\r\n  <span class=\"na\">elastalert<\/span><span class=\"pi\">:<\/span>\r\n    <span class=\"na\">container_name<\/span><span class=\"pi\">:<\/span> <span class=\"s\">elastalert<\/span>\r\n    <span class=\"na\">build<\/span><span class=\"pi\">:<\/span> <span class=\"s\">.\/elastalert\/dockerfiles<\/span>\r\n    <span class=\"na\">image<\/span><span class=\"pi\">:<\/span> <span class=\"s\">elastalert:0.2.1<\/span>\r\n    <span class=\"na\">ports<\/span><span class=\"pi\">:<\/span>\r\n      <span class=\"pi\">-<\/span> <span class=\"s\">3030:3030<\/span>\r\n      <span class=\"pi\">-<\/span> <span class=\"s\">3333:3333<\/span>\r\n    <span class=\"na\">depends_on<\/span><span class=\"pi\">:<\/span>\r\n      <span class=\"pi\">-<\/span> <span class=\"s\">elasticsearch<\/span>\r\n      <span class=\"pi\">-<\/span> <span class=\"s\">kibana<\/span>\r\n    <span class=\"na\">restart<\/span><span class=\"pi\">:<\/span> <span class=\"s\">always<\/span>\r\n    <span class=\"na\">volumes<\/span><span class=\"pi\">:<\/span>\r\n      <span class=\"pi\">-<\/span> <span class=\"s\">.\/elastalert\/config\/elastalert.yaml:\/opt\/elastalert\/config.yaml<\/span>\r\n      <span class=\"pi\">-<\/span> <span class=\"s\">.\/elastalert\/config\/api.config.json:\/opt\/elastalert-server\/config\/config.json<\/span>\r\n      <span class=\"pi\">-<\/span> <span class=\"s\">.\/elastalert\/rules:\/opt\/elastalert\/rules<\/span>\r\n      <span class=\"pi\">-<\/span> <span class=\"s\">.\/elastalert\/rule_templates:\/opt\/elastalert\/rule_templates<\/span>\r\n    <span class=\"na\">healthcheck<\/span><span class=\"pi\">:<\/span>\r\n        <span class=\"na\">test<\/span><span class=\"pi\">:<\/span> <span class=\"pi\">[<\/span><span class=\"s2\">\"<\/span><span class=\"s\">CMD-SHELL\"<\/span><span class=\"pi\">,<\/span> <span class=\"s2\">\"<\/span><span class=\"s\">curl<\/span> <span class=\"s\">-f<\/span> <span class=\"s\">http:\/\/localhost:3030<\/span> <span class=\"s\">||<\/span> <span class=\"s\">exit<\/span> <span class=\"s\">1\"<\/span><span class=\"pi\">]<\/span>\r\n        <span class=\"na\">interval<\/span><span class=\"pi\">:<\/span> <span class=\"s\">30s<\/span>\r\n        <span class=\"na\">timeout<\/span><span class=\"pi\">:<\/span> <span class=\"s\">15s<\/span>\r\n        <span class=\"na\">retries<\/span><span class=\"pi\">:<\/span> <span class=\"m\">3<\/span>\r\n        <span class=\"na\">start_period<\/span><span class=\"pi\">:<\/span> <span class=\"s\">200s<\/span>\r\n\r\n  <span class=\"na\">fluentd<\/span><span class=\"pi\">:<\/span>\r\n    <span class=\"na\">container_name<\/span><span class=\"pi\">:<\/span> <span class=\"s\">fluentd<\/span>\r\n    <span class=\"na\">build<\/span><span class=\"pi\">:<\/span> <span class=\"s\">.\/fluentd\/dockerfiles<\/span>\r\n    <span class=\"na\">image<\/span><span class=\"pi\">:<\/span> <span class=\"s\">fluentd:1.9.3<\/span>\r\n    <span class=\"na\">ports<\/span><span class=\"pi\">:<\/span>\r\n      <span class=\"pi\">-<\/span> <span class=\"s\">24224:24224<\/span>\r\n      <span class=\"pi\">-<\/span> <span class=\"s\">24224:24224\/udp<\/span>\r\n    <span class=\"na\">environment<\/span><span class=\"pi\">:<\/span>\r\n      <span class=\"pi\">-<\/span> <span class=\"s\">FLUENTD_CONF=fluent.conf<\/span>\r\n    <span class=\"na\">volumes<\/span><span class=\"pi\">:<\/span>\r\n      <span class=\"pi\">-<\/span> <span class=\"s\">.\/fluentd\/etc\/fluent.conf:\/fluentd\/etc\/fluent.conf<\/span>\r\n      <span class=\"pi\">-<\/span> <span class=\"s\">.\/mariadb\/log:\/var\/log\/mysql<\/span>\r\n    <span class=\"na\">user<\/span><span class=\"pi\">:<\/span> <span class=\"s\">root<\/span>\r\n    <span class=\"na\">restart<\/span><span class=\"pi\">:<\/span> <span class=\"s\">always<\/span>\r\n\r\n  <span class=\"na\">mariadb<\/span><span class=\"pi\">:<\/span>\r\n    <span class=\"na\">container_name<\/span><span class=\"pi\">:<\/span> <span class=\"s\">mariadb<\/span>\r\n    <span class=\"na\">image<\/span><span class=\"pi\">:<\/span> <span class=\"s\">mariadb:10.4.12<\/span>\r\n    <span class=\"na\">ports<\/span><span class=\"pi\">:<\/span>\r\n      <span class=\"pi\">-<\/span> <span class=\"s\">3306:3306<\/span>\r\n    <span class=\"na\">environment<\/span><span class=\"pi\">:<\/span>\r\n      <span class=\"pi\">-<\/span> <span class=\"s\">MYSQL_ROOT_PASSWORD=mariadb<\/span>\r\n    <span class=\"na\">volumes<\/span><span class=\"pi\">:<\/span>\r\n      <span class=\"pi\">-<\/span> <span class=\"s\">.\/mariadb\/etc:\/etc\/mysql\/conf.d<\/span>\r\n      <span class=\"pi\">-<\/span> <span class=\"s\">.\/mariadb\/log:\/var\/log\/mysql<\/span>\r\n    <span class=\"na\">restart<\/span><span class=\"pi\">:<\/span> <span class=\"s\">always<\/span>\r\n<\/code><\/pre>\n<pre class=\"post-pre\"><code>FROM servercentral\/elastalert:latest\r\n\r\nUSER root\r\n\r\nRUN apk add --update --no-cache net-snmp net-snmp-tools\r\n\r\nUSER node\r\n<\/code><\/pre>\n<p>\u6211\u6307\u5b9a\u4e86SNMPTrap\u63a5\u6536\u670d\u52a1\u5668\u7684IP\u5730\u5740\u4e3a\u300cxx.xx.xx.xx\u300d\uff0c\u5728\u300cxx.xx.xx.xx:162\u300d\u4e0a\u3002<\/p>\n<pre class=\"post-pre\"><code>\r\nname: mariadb-error-log-warning\r\ntype: frequency\r\nindex: mariadb-*\r\nnum_events: 1\r\ntimeframe:\r\n    minutes: 5\r\nrealert:\r\n  minutes: 1\r\nfilter:\r\n  - query:\r\n      query_string:\r\n        query: '@log_name:mysqld.error AND message:Warning'\r\nalert:\r\n  - command\r\ncommand: [\"\/usr\/bin\/snmptrap\", \"-IR\", \"-v\", \"2c\", \"-c\", \"public\", \"xx.xx.xx.xx:162\", \"\", \"netSnmp.99999\", \"netSnmp.99999.1\", \"s\", \"Hello, World\"]\r\nis_enabled: true\r\ntimestamp_field: '@timestamp'\r\ntimestamp_type: iso\r\nuse_strftime_index: false\r\n<\/code><\/pre>\n<pre class=\"post-pre\"><code><span class=\"s\">cluster.name<\/span><span class=\"pi\">:<\/span> <span class=\"s2\">\"<\/span><span class=\"s\">docker-cluster\"<\/span>\r\n<span class=\"s\">network.host<\/span><span class=\"pi\">:<\/span> <span class=\"s\">0.0.0.0<\/span>\r\n<span class=\"s\">discovery.zen.minimum_master_nodes<\/span><span class=\"pi\">:<\/span> <span class=\"m\">1<\/span>\r\n<\/code><\/pre>\n<pre class=\"post-pre\"><code><span class=\"s\">server.name<\/span><span class=\"pi\">:<\/span> <span class=\"s\">kibana<\/span>\r\n<span class=\"s\">server.host<\/span><span class=\"pi\">:<\/span> <span class=\"s2\">\"<\/span><span class=\"s\">0\"<\/span>\r\n<span class=\"s\">elasticsearch.hosts<\/span><span class=\"pi\">:<\/span> <span class=\"s\">http:\/\/elasticsearch:9200<\/span>\r\n<span class=\"s\">xpack.monitoring.ui.container.elasticsearch.enabled<\/span><span class=\"pi\">:<\/span> <span class=\"no\">true<\/span>\r\n<\/code><\/pre>\n<pre class=\"post-pre\"><code>FROM fluent\/fluentd:v1.9.3-debian-1.0\r\n\r\n# Use root account to use apt\r\nUSER root\r\n\r\n# below RUN includes plugin as examples elasticsearch is not required\r\n# you may customize including plugins as you wish\r\nRUN buildDeps=\"sudo make gcc g++ libc-dev\" \\\r\n &amp;&amp; apt-get update \\\r\n &amp;&amp; apt-get install -y --no-install-recommends $buildDeps \\\r\n &amp;&amp; sudo gem install fluent-plugin-elasticsearch -v 4.0.6 \\\r\n &amp;&amp; sudo gem install fluent-plugin-mysqlslowquery -v 0.0.9 \\\r\n &amp;&amp; sudo gem sources --clear-all \\\r\n &amp;&amp; SUDO_FORCE_REMOVE=yes \\\r\n    apt-get purge -y --auto-remove \\\r\n                  -o APT::AutoRemove::RecommendsImportant=false \\\r\n                  $buildDeps \\\r\n &amp;&amp; rm -rf \/var\/lib\/apt\/lists\/* \\\r\n &amp;&amp; rm -rf \/tmp\/* \/var\/tmp\/* \/usr\/lib\/ruby\/gems\/*\/cache\/*.gem\r\n\r\nUSER fluent\r\n<\/code><\/pre>\n<pre class=\"post-pre\"><code>&lt;source&gt;\r\n  @type mysql_slow_query\r\n  path \/var\/log\/mysql\/slow.log\r\n  pos_file \/tmp\/mysql\/slow.pos\r\n  tag mysqld.slow_query\r\n   &lt;parse&gt;\r\n     @type none\r\n   &lt;\/parse&gt;\r\n&lt;\/source&gt;\r\n&lt;source&gt;\r\n  @type tail\r\n  format none\r\n  path \/var\/log\/mysql\/general.log\r\n  pos_file \/tmp\/mysql\/general.pos\r\n  tag mysqld.general\r\n&lt;\/source&gt;\r\n&lt;source&gt;\r\n  @type tail\r\n  format none\r\n  path \/var\/log\/mysql\/error.log\r\n  pos_file \/tmp\/mysql\/error.pos\r\n  tag mysqld.error\r\n&lt;\/source&gt;\r\n\r\n&lt;match **.**&gt;\r\n  @type copy\r\n  &lt;store&gt;\r\n    @type stdout\r\n  &lt;\/store&gt;\r\n  &lt;store&gt;\r\n    @type elasticsearch\r\n    include_tag_key true\r\n    tag_key @log_name\r\n    logstash_format true\r\n    logstash_prefix mariadb-log\r\n    host elasticsearch\r\n    port 9200\r\n    index_name mysql\r\n    flush_interval 10s\r\n  &lt;\/store&gt;\r\n&lt;\/match&gt;\r\n<\/code><\/pre>\n<pre class=\"post-pre\"><code>[mysqld]\r\ngeneral_log\r\ngeneral_log_file=\/var\/log\/mysql\/general.log\r\nslow_query_log\r\nslow_query_log_file=\/var\/log\/mysql\/slow.log\r\nlong_query_time=5 # 5\u79d2\u4ee5\u4e0a\u51e6\u7406\u306b\u6642\u9593\u304c\u304b\u304b\u3063\u305f\u30af\u30a8\u30ea\u3092\u8a18\u9332\r\nlog-queries-not-using-indexes # \u30a4\u30f3\u30c7\u30c3\u30af\u30b9\u304c\u4f7f\u7528\u3055\u308c\u3066\u3044\u306a\u3044\u30af\u30a8\u30ea\u3092\u30ed\u30b0\u306b\u51fa\u529b\r\nlog-error=\/var\/log\/mysql\/error.log\r\n<\/code><\/pre>\n<h1>\u786e\u8ba4\u542f\u52a8\u548c\u64cd\u4f5c<br \/>\nSNMPTrap\u63a5\u6536\u670d\u52a1\u5668<\/p>\n<pre class=\"post-pre\"><code><span class=\"go\">docker run -it --rm -p 162:162\/udp --name snmptrapd sig9\/snmptrapd\r\n\r\nCreated directory: \/var\/lib\/net-snmp\/mib_indexes\r\nNET-SNMP version 5.7.3\r\n<\/span><\/code><\/pre>\n<p>\u4e9a\u9a6c\u900a\u4e91\u8ba1\u7b97\u5de5\u4f5c\u7a7a\u95f4<\/p>\n<pre class=\"post-pre\"><code><span class=\"go\">docker-compose up -d\r\ndocker exec -it mariadb bash\r\n<\/span><span class=\"gp\">root@b078796c824f:\/#<\/span> mysql <span class=\"nt\">-u<\/span> root <span class=\"nt\">-px<\/span>\r\n<span class=\"go\">ERROR 1045 (28000): Access denied for user 'root'@'localhost' (using password: YES)\r\n<\/span><span class=\"gp\">root@b078796c824f:\/#<\/span> mysql <span class=\"nt\">-u<\/span> root <span class=\"nt\">-px<\/span>\r\n<span class=\"go\">ERROR 1045 (28000): Access denied for user 'root'@'localhost' (using password: YES)\r\n<\/span><span class=\"gp\">root@b078796c824f:\/#<\/span> <span class=\"nb\">exit<\/span>\r\n<\/code><\/pre>\n<p>SNMPTrap\u63a5\u6536\u670d\u52a1\u5668<\/p>\n<pre class=\"post-pre\"><code><span class=\"c\"># IP\u30a2\u30c9\u30ec\u30b9\u90e8\u5206\u306f\u300cxx\u300d\u3067\u52a0\u5de5\u3057\u3066\u3044\u307e\u3059<\/span>\r\n2020-03-23 15:39:57 ec2-xx-xx-xx-xx.ap-northeast-1.compute.amazonaws.com <span class=\"o\">[<\/span>UDP: <span class=\"o\">[<\/span>xx.xx.xx.xx]:56622-&gt;[172.17.0.2]:162]:\r\nDISMAN-EVENT-MIB::sysUpTimeInstance <span class=\"o\">=<\/span> Timeticks: <span class=\"o\">(<\/span>51438887<span class=\"o\">)<\/span> 5 days, 22:53:08.87 SNMPv2-MIB::snmpTrapOID.0 <span class=\"o\">=<\/span> OID: NET-SNMP-MIB::netSnmp.99999    NET-SNMP-MIB::netSnmp.99999.1 <span class=\"o\">=<\/span> STRING: <span class=\"s2\">\"Hello, World\"<\/span>\r\n<\/code><\/pre>\n","protected":false},"excerpt":{"rendered":"<p>\u73af\u5883 Elasticsearch\u3001Kibana\u3001Fluentd\u3001ElastAlert\u3001MariaDB\u53ef\u4ee5\u88ab\u7528\u6765 [&hellip;]<\/p>\n","protected":false},"author":9,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[227],"class_list":["post-28771","post","type-post","status-publish","format-standard","hentry","category-uncategorized","tag-227"],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v21.5 (Yoast SEO v21.5) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>\u5f53ElastAlert\u53d1\u751f\u8b66\u62a5\u65f6\uff0c\u901a\u8fc7snmptrap\u547d\u4ee4\u53d1\u9001SNMPTrap - Blog - Silicon Cloud<\/title>\n<meta name=\"description\" content=\"\u5173\u4e8e\u5f53ElastAlert\u53d1\u751f\u8b66\u62a5\u65f6\uff0c\u901a\u8fc7snmptrap\u547d\u4ee4\u53d1\u9001SNMPTrap\u7684\u6280\u672f\u6587\u7ae0\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.silicloud.com\/zh\/blog\/\u5f53elastalert\u53d1\u751f\u8b66\u62a5\u65f6\uff0c\u901a\u8fc7snmptrap\u547d\u4ee4\u53d1\u9001snmptrap\/\" \/>\n<meta property=\"og:locale\" content=\"zh_CN\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"\u5f53ElastAlert\u53d1\u751f\u8b66\u62a5\u65f6\uff0c\u901a\u8fc7snmptrap\u547d\u4ee4\u53d1\u9001SNMPTrap\" \/>\n<meta property=\"og:description\" content=\"\u5173\u4e8e\u5f53ElastAlert\u53d1\u751f\u8b66\u62a5\u65f6\uff0c\u901a\u8fc7snmptrap\u547d\u4ee4\u53d1\u9001SNMPTrap\u7684\u6280\u672f\u6587\u7ae0\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.silicloud.com\/zh\/blog\/\u5f53elastalert\u53d1\u751f\u8b66\u62a5\u65f6\uff0c\u901a\u8fc7snmptrap\u547d\u4ee4\u53d1\u9001snmptrap\/\" \/>\n<meta property=\"og:site_name\" content=\"Blog - Silicon Cloud\" \/>\n<meta property=\"article:published_time\" content=\"2023-04-05T11:27:57+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-08-12T02:01:14+00:00\" \/>\n<meta name=\"author\" content=\"\u6e05, \u626c\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"\u4f5c\u8005\" \/>\n\t<meta name=\"twitter:data1\" content=\"\u6e05, \u626c\" \/>\n\t<meta name=\"twitter:label2\" content=\"\u9884\u8ba1\u9605\u8bfb\u65f6\u95f4\" \/>\n\t<meta name=\"twitter:data2\" content=\"1 \u5206\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e5%bd%93elastalert%e5%8f%91%e7%94%9f%e8%ad%a6%e6%8a%a5%e6%97%b6%ef%bc%8c%e9%80%9a%e8%bf%87snmptrap%e5%91%bd%e4%bb%a4%e5%8f%91%e9%80%81snmptrap\/\",\"url\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e5%bd%93elastalert%e5%8f%91%e7%94%9f%e8%ad%a6%e6%8a%a5%e6%97%b6%ef%bc%8c%e9%80%9a%e8%bf%87snmptrap%e5%91%bd%e4%bb%a4%e5%8f%91%e9%80%81snmptrap\/\",\"name\":\"\u5f53ElastAlert\u53d1\u751f\u8b66\u62a5\u65f6\uff0c\u901a\u8fc7snmptrap\u547d\u4ee4\u53d1\u9001SNMPTrap - Blog - Silicon Cloud\",\"isPartOf\":{\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#website\"},\"datePublished\":\"2023-04-05T11:27:57+00:00\",\"dateModified\":\"2025-08-12T02:01:14+00:00\",\"author\":{\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/cb5556d2501da73d864cac945e8d9461\"},\"description\":\"\u5173\u4e8e\u5f53ElastAlert\u53d1\u751f\u8b66\u62a5\u65f6\uff0c\u901a\u8fc7snmptrap\u547d\u4ee4\u53d1\u9001SNMPTrap\u7684\u6280\u672f\u6587\u7ae0\",\"breadcrumb\":{\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e5%bd%93elastalert%e5%8f%91%e7%94%9f%e8%ad%a6%e6%8a%a5%e6%97%b6%ef%bc%8c%e9%80%9a%e8%bf%87snmptrap%e5%91%bd%e4%bb%a4%e5%8f%91%e9%80%81snmptrap\/#breadcrumb\"},\"inLanguage\":\"zh-Hans\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.silicloud.com\/zh\/blog\/%e5%bd%93elastalert%e5%8f%91%e7%94%9f%e8%ad%a6%e6%8a%a5%e6%97%b6%ef%bc%8c%e9%80%9a%e8%bf%87snmptrap%e5%91%bd%e4%bb%a4%e5%8f%91%e9%80%81snmptrap\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e5%bd%93elastalert%e5%8f%91%e7%94%9f%e8%ad%a6%e6%8a%a5%e6%97%b6%ef%bc%8c%e9%80%9a%e8%bf%87snmptrap%e5%91%bd%e4%bb%a4%e5%8f%91%e9%80%81snmptrap\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"\u9996\u9875\",\"item\":\"https:\/\/www.silicloud.com\/zh\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"\u5f53ElastAlert\u53d1\u751f\u8b66\u62a5\u65f6\uff0c\u901a\u8fc7snmptrap\u547d\u4ee4\u53d1\u9001SNMPTrap\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#website\",\"url\":\"https:\/\/www.silicloud.com\/zh\/blog\/\",\"name\":\"Blog - Silicon Cloud\",\"description\":\"\",\"inLanguage\":\"zh-Hans\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/cb5556d2501da73d864cac945e8d9461\",\"name\":\"\u6e05, \u626c\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"zh-Hans\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/32a4239de8ff29adace466261d309424a1e5fe9f7e3036bf89fe03f2e3dbe717?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/32a4239de8ff29adace466261d309424a1e5fe9f7e3036bf89fe03f2e3dbe717?s=96&d=mm&r=g\",\"caption\":\"\u6e05, \u626c\"},\"url\":\"https:\/\/www.silicloud.com\/zh\/blog\/author\/qingyang\/\"},{\"@type\":\"ImageObject\",\"inLanguage\":\"zh-Hans\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e5%bd%93elastalert%e5%8f%91%e7%94%9f%e8%ad%a6%e6%8a%a5%e6%97%b6%ef%bc%8c%e9%80%9a%e8%bf%87snmptrap%e5%91%bd%e4%bb%a4%e5%8f%91%e9%80%81snmptrap\/#local-main-organization-logo\",\"url\":\"\",\"contentUrl\":\"\",\"caption\":\"Blog - Silicon Cloud\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"\u5f53ElastAlert\u53d1\u751f\u8b66\u62a5\u65f6\uff0c\u901a\u8fc7snmptrap\u547d\u4ee4\u53d1\u9001SNMPTrap - Blog - Silicon Cloud","description":"\u5173\u4e8e\u5f53ElastAlert\u53d1\u751f\u8b66\u62a5\u65f6\uff0c\u901a\u8fc7snmptrap\u547d\u4ee4\u53d1\u9001SNMPTrap\u7684\u6280\u672f\u6587\u7ae0","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.silicloud.com\/zh\/blog\/\u5f53elastalert\u53d1\u751f\u8b66\u62a5\u65f6\uff0c\u901a\u8fc7snmptrap\u547d\u4ee4\u53d1\u9001snmptrap\/","og_locale":"zh_CN","og_type":"article","og_title":"\u5f53ElastAlert\u53d1\u751f\u8b66\u62a5\u65f6\uff0c\u901a\u8fc7snmptrap\u547d\u4ee4\u53d1\u9001SNMPTrap","og_description":"\u5173\u4e8e\u5f53ElastAlert\u53d1\u751f\u8b66\u62a5\u65f6\uff0c\u901a\u8fc7snmptrap\u547d\u4ee4\u53d1\u9001SNMPTrap\u7684\u6280\u672f\u6587\u7ae0","og_url":"https:\/\/www.silicloud.com\/zh\/blog\/\u5f53elastalert\u53d1\u751f\u8b66\u62a5\u65f6\uff0c\u901a\u8fc7snmptrap\u547d\u4ee4\u53d1\u9001snmptrap\/","og_site_name":"Blog - Silicon Cloud","article_published_time":"2023-04-05T11:27:57+00:00","article_modified_time":"2025-08-12T02:01:14+00:00","author":"\u6e05, \u626c","twitter_card":"summary_large_image","twitter_misc":{"\u4f5c\u8005":"\u6e05, \u626c","\u9884\u8ba1\u9605\u8bfb\u65f6\u95f4":"1 \u5206"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.silicloud.com\/zh\/blog\/%e5%bd%93elastalert%e5%8f%91%e7%94%9f%e8%ad%a6%e6%8a%a5%e6%97%b6%ef%bc%8c%e9%80%9a%e8%bf%87snmptrap%e5%91%bd%e4%bb%a4%e5%8f%91%e9%80%81snmptrap\/","url":"https:\/\/www.silicloud.com\/zh\/blog\/%e5%bd%93elastalert%e5%8f%91%e7%94%9f%e8%ad%a6%e6%8a%a5%e6%97%b6%ef%bc%8c%e9%80%9a%e8%bf%87snmptrap%e5%91%bd%e4%bb%a4%e5%8f%91%e9%80%81snmptrap\/","name":"\u5f53ElastAlert\u53d1\u751f\u8b66\u62a5\u65f6\uff0c\u901a\u8fc7snmptrap\u547d\u4ee4\u53d1\u9001SNMPTrap - Blog - Silicon Cloud","isPartOf":{"@id":"https:\/\/www.silicloud.com\/zh\/blog\/#website"},"datePublished":"2023-04-05T11:27:57+00:00","dateModified":"2025-08-12T02:01:14+00:00","author":{"@id":"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/cb5556d2501da73d864cac945e8d9461"},"description":"\u5173\u4e8e\u5f53ElastAlert\u53d1\u751f\u8b66\u62a5\u65f6\uff0c\u901a\u8fc7snmptrap\u547d\u4ee4\u53d1\u9001SNMPTrap\u7684\u6280\u672f\u6587\u7ae0","breadcrumb":{"@id":"https:\/\/www.silicloud.com\/zh\/blog\/%e5%bd%93elastalert%e5%8f%91%e7%94%9f%e8%ad%a6%e6%8a%a5%e6%97%b6%ef%bc%8c%e9%80%9a%e8%bf%87snmptrap%e5%91%bd%e4%bb%a4%e5%8f%91%e9%80%81snmptrap\/#breadcrumb"},"inLanguage":"zh-Hans","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.silicloud.com\/zh\/blog\/%e5%bd%93elastalert%e5%8f%91%e7%94%9f%e8%ad%a6%e6%8a%a5%e6%97%b6%ef%bc%8c%e9%80%9a%e8%bf%87snmptrap%e5%91%bd%e4%bb%a4%e5%8f%91%e9%80%81snmptrap\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.silicloud.com\/zh\/blog\/%e5%bd%93elastalert%e5%8f%91%e7%94%9f%e8%ad%a6%e6%8a%a5%e6%97%b6%ef%bc%8c%e9%80%9a%e8%bf%87snmptrap%e5%91%bd%e4%bb%a4%e5%8f%91%e9%80%81snmptrap\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"\u9996\u9875","item":"https:\/\/www.silicloud.com\/zh\/blog\/"},{"@type":"ListItem","position":2,"name":"\u5f53ElastAlert\u53d1\u751f\u8b66\u62a5\u65f6\uff0c\u901a\u8fc7snmptrap\u547d\u4ee4\u53d1\u9001SNMPTrap"}]},{"@type":"WebSite","@id":"https:\/\/www.silicloud.com\/zh\/blog\/#website","url":"https:\/\/www.silicloud.com\/zh\/blog\/","name":"Blog - Silicon Cloud","description":"","inLanguage":"zh-Hans"},{"@type":"Person","@id":"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/cb5556d2501da73d864cac945e8d9461","name":"\u6e05, \u626c","image":{"@type":"ImageObject","inLanguage":"zh-Hans","@id":"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/32a4239de8ff29adace466261d309424a1e5fe9f7e3036bf89fe03f2e3dbe717?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/32a4239de8ff29adace466261d309424a1e5fe9f7e3036bf89fe03f2e3dbe717?s=96&d=mm&r=g","caption":"\u6e05, \u626c"},"url":"https:\/\/www.silicloud.com\/zh\/blog\/author\/qingyang\/"},{"@type":"ImageObject","inLanguage":"zh-Hans","@id":"https:\/\/www.silicloud.com\/zh\/blog\/%e5%bd%93elastalert%e5%8f%91%e7%94%9f%e8%ad%a6%e6%8a%a5%e6%97%b6%ef%bc%8c%e9%80%9a%e8%bf%87snmptrap%e5%91%bd%e4%bb%a4%e5%8f%91%e9%80%81snmptrap\/#local-main-organization-logo","url":"","contentUrl":"","caption":"Blog - Silicon Cloud"}]}},"_links":{"self":[{"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/posts\/28771","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/users\/9"}],"replies":[{"embeddable":true,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/comments?post=28771"}],"version-history":[{"count":3,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/posts\/28771\/revisions"}],"predecessor-version":[{"id":111386,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/posts\/28771\/revisions\/111386"}],"wp:attachment":[{"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/media?parent=28771"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/categories?post=28771"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/tags?post=28771"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}