Integrate SNMP monitoring with InfluxDB and Telegraf for time-series analysis

#!/usr/bin/env bash

set -euo pipefail

# Colors
readonly RED='\033[0;31m'
readonly GREEN='\033[0;32m'
readonly YELLOW='\033[1;33m'
readonly NC='\033[0m'

# Configuration
INFLUX_ORG="${INFLUX_ORG:-monitoring}"
INFLUX_BUCKET="${INFLUX_BUCKET:-telegraf}"
INFLUX_USERNAME="${INFLUX_USERNAME:-admin}"
INFLUX_PASSWORD="${INFLUX_PASSWORD:-$(openssl rand -base64 32)}"

log_info() { echo -e "${GREEN}[INFO]${NC} $1"; }
log_warn() { echo -e "${YELLOW}[WARN]${NC} $1"; }
log_error() { echo -e "${RED}[ERROR]${NC} $1"; }

cleanup() {
    log_error "Installation failed. Cleaning up..."
    systemctl stop influxdb telegraf grafana-server 2>/dev/null || true
}

trap cleanup ERR

usage() {
    cat << EOF
Usage: $0 [OPTIONS]
Install SNMP monitoring with InfluxDB and Telegraf

Options:
    -o, --org NAME          InfluxDB organization name (default: monitoring)
    -b, --bucket NAME       InfluxDB bucket name (default: telegraf)
    -u, --username NAME     InfluxDB admin username (default: admin)
    -p, --password PASS     InfluxDB admin password (auto-generated if not set)
    -h, --help             Show this help message

Example:
    $0 --org mycompany --bucket snmp-metrics
EOF
}

while [[ $# -gt 0 ]]; do
    case $1 in
        -o|--org) INFLUX_ORG="$2"; shift 2 ;;
        -b|--bucket) INFLUX_BUCKET="$2"; shift 2 ;;
        -u|--username) INFLUX_USERNAME="$2"; shift 2 ;;
        -p|--password) INFLUX_PASSWORD="$2"; shift 2 ;;
        -h|--help) usage; exit 0 ;;
        *) log_error "Unknown option: $1"; usage; exit 1 ;;
    esac
done

# Check prerequisites
if [[ $EUID -ne 0 ]]; then
    log_error "This script must be run as root"
    exit 1
fi

# Detect distribution
if [ -f /etc/os-release ]; then
    . /etc/os-release
    case "$ID" in
        ubuntu|debian) 
            PKG_MGR="apt"
            PKG_INSTALL="apt install -y"
            PKG_UPDATE="apt update && apt upgrade -y"
            FIREWALL_CMD="ufw"
            ;;
        almalinux|rocky|centos|rhel|ol|fedora) 
            PKG_MGR="dnf"
            PKG_INSTALL="dnf install -y"
            PKG_UPDATE="dnf update -y"
            FIREWALL_CMD="firewall-cmd"
            ;;
        amzn) 
            PKG_MGR="yum"
            PKG_INSTALL="yum install -y"
            PKG_UPDATE="yum update -y"
            FIREWALL_CMD="firewall-cmd"
            ;;
        *) log_error "Unsupported distro: $ID"; exit 1 ;;
    esac
else
    log_error "Cannot detect distribution"
    exit 1
fi

log_info "[1/8] Updating system packages"
$PKG_UPDATE

if [[ "$PKG_MGR" == "apt" ]]; then
    $PKG_INSTALL wget curl gnupg2 software-properties-common apt-transport-https snmp-utils
else
    $PKG_INSTALL wget curl gnupg2 yum-utils net-snmp-utils
fi

log_info "[2/8] Installing InfluxDB 2.7"
if [[ "$PKG_MGR" == "apt" ]]; then
    wget -qO- https://repos.influxdata.com/influxdata-archive_compat.key | apt-key add -
    echo "deb https://repos.influxdata.com/ubuntu $(lsb_release -cs) stable" > /etc/apt/sources.list.d/influxdb.list
    apt update
    $PKG_INSTALL influxdb2
else
    cat > /etc/yum.repos.d/influxdb.repo << 'EOF'
[influxdb]
name = InfluxDB Repository
baseurl = https://repos.influxdata.com/rhel/$releasever/$basearch/stable/
enabled = 1
gpgcheck = 1
gpgkey = https://repos.influxdata.com/influxdata-archive_compat.key
EOF
    $PKG_INSTALL influxdb2
fi

systemctl enable influxdb
systemctl start influxdb

log_info "[3/8] Installing Telegraf"
if [[ "$PKG_MGR" == "apt" ]]; then
    $PKG_INSTALL telegraf
else
    $PKG_INSTALL telegraf
fi

log_info "[4/8] Installing Grafana"
if [[ "$PKG_MGR" == "apt" ]]; then
    wget -q -O - https://packages.grafana.com/gpg.key | apt-key add -
    echo "deb https://packages.grafana.com/oss/deb stable main" > /etc/apt/sources.list.d/grafana.list
    apt update
    $PKG_INSTALL grafana
else
    cat > /etc/yum.repos.d/grafana.repo << 'EOF'
[grafana]
name=grafana
baseurl=https://packages.grafana.com/oss/rpm
repo_gpgcheck=1
enabled=1
gpgcheck=1
gpgkey=https://packages.grafana.com/gpg.key
EOF
    $PKG_INSTALL grafana
fi

systemctl enable grafana-server
systemctl start grafana-server

log_info "[5/8] Configuring InfluxDB"
sleep 10

INFLUX_TOKEN=$(influx setup \
    --username "$INFLUX_USERNAME" \
    --password "$INFLUX_PASSWORD" \
    --org "$INFLUX_ORG" \
    --bucket "$INFLUX_BUCKET" \
    --force 2>/dev/null | grep -o 'token: .*' | cut -d' ' -f2 || echo "")

if [[ -z "$INFLUX_TOKEN" ]]; then
    INFLUX_TOKEN=$(influx auth list --json 2>/dev/null | grep -o '"token":"[^"]*"' | cut -d'"' -f4 | head -1)
fi

if [[ -z "$INFLUX_TOKEN" ]]; then
    log_error "Failed to get InfluxDB token"
    exit 1
fi

log_info "[6/8] Configuring Telegraf"
cat > /etc/telegraf/telegraf.conf << EOF
[global_tags]

[agent]
  interval = "60s"
  round_interval = true
  metric_batch_size = 1000
  metric_buffer_limit = 10000
  collection_jitter = "0s"
  flush_interval = "10s"
  flush_jitter = "0s"
  precision = ""
  hostname = ""
  omit_hostname = false

[[outputs.influxdb_v2]]
  urls = ["http://localhost:8086"]
  token = "$INFLUX_TOKEN"
  organization = "$INFLUX_ORG"
  bucket = "$INFLUX_BUCKET"

[[inputs.snmp]]
  agents = ["localhost:161"]
  version = 2
  community = "public"
  interval = "60s"
  timeout = "10s"
  retries = 3

  [[inputs.snmp.field]]
    name = "hostname"
    oid = "1.3.6.1.2.1.1.5.0"
    is_tag = true

  [[inputs.snmp.field]]
    name = "uptime"
    oid = "1.3.6.1.2.1.1.3.0"

  [[inputs.snmp.table]]
    name = "interface"
    inherit_tags = ["hostname"]
    oid = "1.3.6.1.2.1.2.2"

    [[inputs.snmp.table.field]]
      name = "ifIndex"
      oid = "1.3.6.1.2.1.2.2.1.1"
      is_tag = true

    [[inputs.snmp.table.field]]
      name = "ifDescr"
      oid = "1.3.6.1.2.1.2.2.1.2"
      is_tag = true

    [[inputs.snmp.table.field]]
      name = "ifInOctets"
      oid = "1.3.6.1.2.1.2.2.1.10"

    [[inputs.snmp.table.field]]
      name = "ifOutOctets"
      oid = "1.3.6.1.2.1.2.2.1.16"
EOF

chown telegraf:telegraf /etc/telegraf/telegraf.conf
chmod 640 /etc/telegraf/telegraf.conf

systemctl enable telegraf
systemctl start telegraf

log_info "[7/8] Configuring firewall"
if command -v ufw >/dev/null; then
    ufw --force enable
    ufw allow 8086/tcp comment "InfluxDB"
    ufw allow 3000/tcp comment "Grafana"
    ufw allow 161/udp comment "SNMP"
elif command -v firewall-cmd >/dev/null; then
    systemctl enable firewalld
    systemctl start firewalld
    firewall-cmd --permanent --add-port=8086/tcp
    firewall-cmd --permanent --add-port=3000/tcp
    firewall-cmd --permanent --add-port=161/udp
    firewall-cmd --reload
fi

log_info "[8/8] Verifying installation"

sleep 5

if ! curl -s http://localhost:8086/health | grep -q '"status":"pass"'; then
    log_error "InfluxDB health check failed"
    exit 1
fi

if ! curl -s http://localhost:3000/api/health | grep -q '"database":"ok"'; then
    log_warn "Grafana may still be starting up"
fi

if ! systemctl is-active --quiet telegraf; then
    log_error "Telegraf is not running"
    exit 1
fi

log_info "Installation completed successfully!"
echo
echo "InfluxDB: http://localhost:8086"
echo "Grafana: http://localhost:3000 (admin/admin)"
echo "Organization: $INFLUX_ORG"
echo "Bucket: $INFLUX_BUCKET"
echo "Token: $INFLUX_TOKEN"
echo
echo "To add SNMP devices, edit /etc/telegraf/telegraf.conf and restart telegraf"