{"id":2295,"date":"2025-06-13T17:30:00","date_gmt":"2025-06-13T21:30:00","guid":{"rendered":"https:\/\/enterpriseadmins.org\/blog\/?p=2295"},"modified":"2025-06-13T14:27:27","modified_gmt":"2025-06-13T18:27:27","slug":"monitoring-a-raspberry-pi-with-telegraf-and-aria-operations","status":"publish","type":"post","link":"https:\/\/enterpriseadmins.org\/blog\/virtualization\/monitoring-a-raspberry-pi-with-telegraf-and-aria-operations\/","title":{"rendered":"Monitoring a Raspberry Pi with Telegraf and Aria Operations"},"content":{"rendered":"\n

I recently set out to configure the open-source Telegraf agent on a physical system in my lab, with the goal of sending telemetry data to Aria Operations. The process for setting this up is documented here: https:\/\/techdocs.broadcom.com\/us\/en\/vmware-cis\/aria\/aria-operations\/8-18\/vmware-aria-operations-configuration-guide-8-18\/connect-to-data-sources\/monitoring-applications-and-os-using-open-source-telegraf\/monitoring-applications-using-open-source-telegraf\/monitoring-applications-using-open-source-telegraf-on-a-linux-platform-saas-onprem.html<\/a>. Since most of my lab systems are virtualized, the only physical candidate available was a Raspberry Pi running Ubuntu 24.04, and with its ARM-based CPU, I wasn’t sure if it would be supported.<\/p>\n\n\n\n

Installing Telegraf on ARM (Ubuntu 24.04)<\/h2>\n\n\n\n

The first step was to install telegraf from the appropriate repository. <\/p>\n\n\n\n

sudo curl -fsSL https:\/\/repos.influxdata.com\/influxdata-archive_compat.key -o \/etc\/apt\/keyrings\/influxdata-archive_compat.key\necho \"deb [signed-by=\/etc\/apt\/keyrings\/influxdata-archive_compat.key] https:\/\/repos.influxdata.com\/ubuntu stable main\" | sudo tee \/etc\/apt\/sources.list.d\/influxdata.list\nsudo apt update\nsudo apt -y install telegraf<\/code><\/pre>\n\n\n\n
I then needed to download the utility script to help configure telegraf to send to Aria Operations.<\/p>\n\n\n\n
wget --no-check-certificate https:\/\/cm-opscp-01.lab.enterpriseadmins.org\/downloads\/salt\/telegraf-utils.sh\nchmod +x telegraf-utils.sh<\/code><\/pre>\n\n\n\n
The telegraf-utils.sh<\/code> script requires an auth token.  I accessed the Swager UI at https:\/\/ops.example.com\/suite-api<\/a> and used the \/auth\/token\/acquire<\/code> endpoint to generate the token.  Here is the body I submitted.<\/p>\n\n\n\n
{\n  \"username\" : \"svc-physvr\",\n  \"password\" : \"VMware1!\"\n}<\/code><\/pre>\n\n\n\n
In this case, the svc-physvr<\/code> is a user account created in the Aria Operations UI which maps to a limited access user account.  The response body included the necessary token<\/code> value, which I used when invoking the helper script:<\/p>\n\n\n\n
sudo .\/telegraf-utils.sh opensource -c 192.168.45.73 -t 24c884f0-2558-40fa-9626-61f577487ea5::7d209766-11f2-456a-a2d9-2a40b4459920 -v 192.168.45.73 -d \/etc\/telegraf\/telegraf.d -e \/usr\/bin\/telegraf<\/code><\/pre>\n\n\n\n
The parameters used in this script are explained in the product documentation<\/a>.<\/p>\n\n\n\n
Finally, I restarted the telegraf service.<\/p>\n\n\n\n
sudo systemctl restart telegraf<\/code><\/pre>\n\n\n\n
Unfortunately that was met with an error.<\/p>\n\n\n\n
Job for telegraf.service failed because the control process exited with error code.\nSee \"systemctl status telegraf.service\" and \"journalctl -xeu telegraf.service\" for details.<\/code><\/pre>\n\n\n\n
Looking at the logs, we could see that a certificate could not be read<\/p>\n\n\n\n
sudo journalctl --no-pager -u telegraf\n\n[...]\nJun  12 19:53:09 rpi-extdns-01 telegraf[1292]: 2025-06-12T18:53:09Z E! loading config file \/etc\/telegraf\/telegraf.d\/cloudproxy-http.conf failed: error parsing http array, could not load certificate \"\/etc\/telegraf\/telegraf.d\/cert.pem\": open \/etc\/telegraf\/telegraf.d\/cert.pem: permission denied\nJun  12 19:53:09 rpi-extdns-01 systemd[1]: telegraf.service: Main process exited, code=exited, status=1\/FAILURE\n[...]<\/code><\/pre>\n\n\n\n
I checked permissions on the cert.pem<\/code> file and confirmed it was owned by root<\/code> for user and group.  The same was true for the key.pem<\/code> file.  I adjusted permissions for both files and tried again:<\/p>\n\n\n\n
sudo chown telegraf:telegraf \/etc\/telegraf\/telegraf.d\/cert.pem\nsudo chown telegraf:telegraf \/etc\/telegraf\/telegraf.d\/key.pem\nsudo systemctl restart telegraf<\/code><\/pre>\n\n\n\n
This time no errors occurred.  In short, the Telegraf service was unable to read its TLS certificate files because they were owned by root, but the service runs as the telegraf user. Fixing ownership resolved the issue.<\/p>\n\n\n\n
Validating Success in Aria Operations<\/h2>\n\n\n\n
After waiting some time, I could see data in Aria Operations for this physical server.  I first searched for the VM name and found an object called “Linux OS on rpi-extdns-01” (the servers hostname).  <\/p>\n\n\n\n
\"\"<\/a><\/figure>\n\n\n\n
Clicking on that object allowed me to view metrics\/properties which were collected.  For example, the below screenshot shows the disk used over time for the root file system. <\/p>\n\n\n\n
\"\"<\/a><\/figure>\n\n\n\n
More details on this system could be found in the dashboard “Linux OS discovered by Telegraf.”<\/p>\n\n\n\n
Conclusion<\/h2>\n\n\n\n
It’s great to have full visibility into this physical server using the same Aria Operations dashboards and alerts I already rely on for virtual systems. The setup was straightforward, and with a few tweaks for file permissions, the integration worked well even on a low-cost Raspberry Pi with an ARM processor.<\/p>\n","protected":false},"excerpt":{"rendered":"
I recently set out to configure the open-source Telegraf agent on a physical system in my lab, with the goal of sending telemetry data to Aria Operations. The process for setting this up is documented here: https:\/\/techdocs.broadcom.com\/us\/en\/vmware-cis\/aria\/aria-operations\/8-18\/vmware-aria-operations-configuration-guide-8-18\/connect-to-data-sources\/monitoring-applications-and-os-using-open-source-telegraf\/monitoring-applications-using-open-source-telegraf\/monitoring-applications-using-open-source-telegraf-on-a-linux-platform-saas-onprem.html. Since most of … Continue reading →<\/span><\/a><\/p>\n","protected":false},"author":6,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"footnotes":""},"categories":[9,4],"tags":[],"class_list":["post-2295","post","type-post","status-publish","format-standard","hentry","category-lab-infrastructure","category-virtualization"],"_links":{"self":[{"href":"https:\/\/enterpriseadmins.org\/blog\/wp-json\/wp\/v2\/posts\/2295","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/enterpriseadmins.org\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/enterpriseadmins.org\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/enterpriseadmins.org\/blog\/wp-json\/wp\/v2\/users\/6"}],"replies":[{"embeddable":true,"href":"https:\/\/enterpriseadmins.org\/blog\/wp-json\/wp\/v2\/comments?post=2295"}],"version-history":[{"count":2,"href":"https:\/\/enterpriseadmins.org\/blog\/wp-json\/wp\/v2\/posts\/2295\/revisions"}],"predecessor-version":[{"id":2299,"href":"https:\/\/enterpriseadmins.org\/blog\/wp-json\/wp\/v2\/posts\/2295\/revisions\/2299"}],"wp:attachment":[{"href":"https:\/\/enterpriseadmins.org\/blog\/wp-json\/wp\/v2\/media?parent=2295"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/enterpriseadmins.org\/blog\/wp-json\/wp\/v2\/categories?post=2295"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/enterpriseadmins.org\/blog\/wp-json\/wp\/v2\/tags?post=2295"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}