openITCOCKPIT CE

• Open the openITCOCKPIT Community Edition on Ubuntu 24.04 listing, then select Get It Now and Create.
• Choose your subscription, resource group and region.
• Set the VM size to Standard_D2s_v3 or larger, provide your SSH public key for the azureuser account, and allow inbound ports 22, 80 and 443.
• Review and create the VM. The instance is ready when first boot completes, typically after two to three minutes.

# Accept the Marketplace terms once per subscription (required before the first CLI deploy)
az vm image terms accept --urn sac1647283583153:openitcockpit-ce:default:latest
az vm create \
  --resource-group my-monitoring-rg \
  --name openitcockpit-ce \
  --image sac1647283583153:openitcockpit-ce:default:latest \
  --size Standard_D2s_v3 \
  --admin-username azureuser \
  --generate-ssh-keys \
  --public-ip-sku Standard

Open the web UI and SSH ports to your administrative network:

az vm open-port --resource-group my-monitoring-rg --name openitcockpit-ce --port 443 --priority 100
az vm open-port --resource-group my-monitoring-rg --name openitcockpit-ce --port 80 --priority 110

ssh azureuser@<vm-public-ip>

Confirm that the core services are running. The Naemon engine, the mod-gearman check runner and the Statusengine worker execute your monitoring checks and record the results.

sudo systemctl is-active nginx php8.3-fpm mysql redis-server naemon statusengine mod-gearman-worker

Expected output:

active active active active active active active

The perfdata graphing subsystem and the report node run as Docker containers on the same host. List them with sudo docker ps.

First boot generates a unique admin login and database password for this instance and writes them to a root-only file. The admin username is an email address, and the password is unique to this VM.

sudo cat /root/openitcockpit-ce-credentials.txt

The file lists the web UI URL, the admin user admin@sac.local and its per-instance password, the MySQL user and password, and the Grafana admin password. Store the file securely, and change the admin password in the web UI after your first login.

Only nginx is exposed to the network, on ports 80 and 443. MySQL uses auth_socket for the root account, so no root database password ships in the image. The monitoring engine, Redis and the graphing containers are all bound to loopback.

sudo ss -tlnp | grep -E ':80 |:443 '
sudo mysql --defaults-extra-file=/etc/mysql/debian.cnf -N -e "SELECT user, host, plugin FROM mysql.user WHERE user IN ('root','openitcockpit')"

Expected output:

LISTEN 0 511 0.0.0.0:443 0.0.0.0:* users:(("nginx",...)) LISTEN 0 511 0.0.0.0:80 0.0.0.0:* users:(("nginx",...)) openitcockpit localhost caching_sha2_password root localhost auth_socket

openITCOCKPIT monitors itself out of the box. Confirm that the Naemon engine is running checks and that Statusengine has recorded their results. Every service state should be 0 (OK).

sudo mysql --defaults-extra-file=/opt/openitc/etc/mysql/mysql.cnf \
  -e "SELECT current_state, LEFT(output,50) AS output FROM statusengine_servicestatus"

Expected output:

+---------------+----------------------------------------------------+ | current_state | output | +---------------+----------------------------------------------------+ | 0 | PING OK - Packet loss = 0%, RTA = 0.02 ms | | 0 | DISK OK - free space: / 5780MiB (20.2% inode=94%): | | 0 | LOAD OK - total load average: 0.23, 0.16, 0.24 | | 0 | Statusengine statistics | +---------------+----------------------------------------------------+

In a browser, open https://<vm-public-ip>/. The image uses a self-signed certificate, so accept the browser warning or install your own certificate on nginx. Log in with the admin user admin@sac.local and the password from /root/openitcockpit-ce-credentials.txt.

After you log in, the dashboard opens. The Welcome widget confirms that one host and four services are monitored on openITCOCKPIT 5.6.1. The Hosts and Services pie charts show everything in the green OK state.

Open Hosts in the Monitoring section of the navigation. The list shows every monitored host with its current state, last check time and check output. The default host monitors the openITCOCKPIT server itself at 127.0.0.1.

Open Services to see every monitored service and its live state. The four self-monitoring services (Ping, disk usage, Linux load and Statusengine performance) are all OK. Each shows its check output, last check time and next scheduled check.

To start monitoring your own infrastructure, use the web UI:

• Go to Hosts and select Add host, or launch the Wizard from the navigation for a guided setup.
• Enter the host name and the IP address or DNS name, choose a host template (for example a generic host with a Ping check), and assign the host to a container.
• Save the host, then add services to it from the service templates (HTTP, SSH, disk, load and many more from the bundled monitoring plugins).
• openITCOCKPIT writes the Naemon configuration and applies the changes. The new host and its services begin reporting within a couple of check intervals.

For agent-based monitoring of Linux and Windows servers, install the openITCOCKPIT monitoring agent on the target and register it from the Agent configuration.

sudo systemctl restart nginx
sudo systemctl status naemon --no-pager sudo docker ps

Naemon, Statusengine and mod-gearman form the monitoring pipeline. nginx and php8.3-fpm serve the UI, and MySQL holds the configuration and monitoring data. openitcockpit-graphing.service manages the graphing containers.

• Change the admin password. Do it from Profile after your first login, and create individual named user accounts instead of sharing the admin login.
• Restrict the network security group. Allow ports 80 and 443 only from your administrative network or a VPN, and SSH only from trusted addresses.
• Install a trusted TLS certificate. Replace the self-signed certificate on nginx, and consider redirecting all traffic to HTTPS.
• Keep the system patched. Unattended security upgrades remain enabled on the image.
• Protect the credentials file. The per-instance secrets in /root/openitcockpit-ce-credentials.txt are readable only by root. Treat the file as sensitive.

openITCOCKPIT Community Edition is licensed under the GNU General Public License version 3 and is a complete, functional monitoring platform. The optional Enterprise Edition adds ITSM integrations and distributed, highly available monitoring for large-scale deployments. The Community Edition does not require it. This image ships the Community Edition only.

Deploy on Azure

Find the openITCOCKPIT Community Edition on Ubuntu 24.04 listing on Azure Marketplace and select Get It Now.

Need Help?

SecureAnyCloud provides 24/7 support with a guaranteed 24 hour response SLA. Contact sales@secureanycloud.com for deployment assistance, configuration guidance or licensing questions.

Deploy on Azure

Launch openITCOCKPIT Community Edition on Ubuntu 24.04 LTS on Azure with 24/7 support from SecureAnyCloud.

View this image

Need Help?

Our support team is available 24/7.

sales@secureanycloud.com