Hot answers tagged

13

For Version 3: https://www.zabbix.com/documentation/3.0/manual/appliance States that the default username and password for the front-end is: Admin zabbix and for the console it is appliance zabbix


9

The way to handle this is to collect all the information about what access the program needs, and then explicitly allow only that access in a custom policy module. This is fairly easy to do. First, you set the domain permissive, so that SELinux temporarily does not enforce its rules. It will still log the denials, and later you will use these logs. ...


9

For Version 4 and 4.2 (2019) https://www.zabbix.com/documentation/4.0/manual/appliance https://www.zabbix.com/documentation/4.2/manual/appliance Frontend username is: Admin (with capital A) password is: zabbix


9

Try to unmask zabbix-agent service? systemctl unmask zabbix-agent.service


7

You can setup a trigger prototype using the "nodata" function. You'll need to pick an item that will be in all the monitored systems. Using Device Name (OID: SNMPv2-MIB::sysName.0, key: sysName) in the Template SNMP Generic as an example, you could create a trigger with an expression such as: {Template SNMP Generic:sysName.nodata(5m)}=1 This would fire ...


6

It is possible. First thing you will have to do is enable remote actions on zabbix agents, by setting the following in zabbix_agentd.conf: EnableRemoteCommands=1 You will also need to grant sudo privileges to your zabbix user, so create a file /etc/sudoers.d/zabbix_nopasswd with the following content: zabbix ALL=NOPASSWD: ALL For better security concerns,...


6

You should install mailx (yum install mailx). It looks like you can probably replace the script with this: #!/bin/sh echo "$3" | /bin/mailx \ -r zabbix@yourdomain.example \ -s "$2" \ -S smtp="yoursmtpserver.example:25" \ -S smtp-auth=login \ -S smtp-auth-user="your-user" \ -S smtp-auth-password="your-password" \ "$1" Consider using port 587 (submission) ...


6

Monitoring tells you what it is configured to tell. In this case, do you need swap? If you need it, configure it. If you do not need it, adjust monitoring not to complain about the lack of swap. Do not modify your systems just because the default settings of a monitoring system complain about something. Understand it and make sure the expectations of the ...


6

HostMetadataItem is an item key that will be evaluated and the result sent as HostMetadata, for example, system.uname HostMetadata is just user defined string. Write there, what do you need. Example of Zabbix agent HostMetadataItem setting: HostMetadata=:osname=Linux:env=staging:color=blue:docker=yes:app=apache: Example Zabbix autoregistration with ...


5

The answer from Mick's comment: Problem: Zabbix proxy poller processes more than 75% busy Solution: In zabbix_server.conf StartPollers=20 Problem: Zabbix icmp pinger processes more than 75% busy Solution: In zabbix_server.conf StartPingers=10 StartDiscoverers=10 Problem: Zabbix unreachable poller processes more than 75% busy Solution: In ...


5

The fact that you are using zabbix_sender implies that these items are of type "Zabbix trapper". With trapper items, the graphing behavior you described above is expected. Regular items of types like "Zabbix agent" and "Zabbix agent (active)" have update interval configured, so the frontend knows that data is expected to come, say, every 30 seconds. If ...


5

Why is "Processor load is too high" false alarm in your case? It's real symptom for me - CPU is saturated. IMHO: use only {Template OS Linux:system.cpu.load[percpu,avg1].avg(5m)}>5 but threshold depends on your server - what and how is it doing. But >5 value is suspicious for me. Example: CPU usage can be low, but CPU load high - in this case it can ...


5

Lines like "cannot send list of active checks to ..." are not logged by the agent - they are logged by the server when it receives a request for a list of active checks from an agent. In these requests, the agent specifies its hostname ("Hostname" parameter in the configuration file). If the server cannot find such a host in its database, it logs this error ...


5

The last screenshot that you have is that of an item being "not supported", rather than a trigger. If you hover over the red cross on the right side, you should see the reason why the item is not supported. According to https://www.zabbix.com/documentation/2.4/manual/config/items/itemtypes/zabbix_agent, the log[] item must be configured as an active check, ...


5

There are three basic types of checks in Zabbix: Active checks are pushed from systems with the Zabbix agent installed. These checks do not require that any ports be open on the client (monitored) system (unless you want to be able to issue remote commands). However, there does need to be a port open on the Zabbix server for the agent(s) to connect to which ...


4

This is mentioned in the documentation sectors, operations, bytes, sps, ops, bps (must be specified, since defaults differ under various OSes). sps, ops, bps stand for: sectors, operations, bytes per second, respectively


4

Yes, that is possible. First you need to create a web check with instructions at https://www.zabbix.com/documentation/2.0/manual/web_monitoring Then, after making the test, you get new items, which you can use in a trigger. In your case, you want to check the HTTP error code, so the trigger would be like: {HOST:web.test.error[TESTNAME].count(10,500)}>1 ...


4

From previous comment: I've managed to resolve the issue, SE Linux was enabled incorrectly and was blocking zabbix from networking. To solve the issue I ran: setsebool -P zabbix_can_network 1 The topic discussing this can be found at (Warning: In russian): http://zabbix.com/forum/showthread.php?t=47247


4

As I am a long time Munin user, I can give you few quick thoughts on using it: using a SSH tunnel (is that illegal as well?) to get behind the firewall. The obvious port forward, you mentioned. If you have SSH of the monitored machines already exposed, you can use Munin's SSH support to get to those. You can use one very light-weight node behind firewall, ...


4

The reason was I had renamed the old one instead of removing it and zabbix agent picked up the renamed file in addition to the new one. Moving the backup file away solved the problem. Easy enough but I had already googled it and seen a couple of others struggle without getting an answer before I realized this so I figured I better post it.


4

I have just resolved my item with the same error. It is related to the windows page file and in my case it was configured to be automatically managed by windows. In my situation Windows didn't think it wanted a higher swap space and wasn't taking out more space but it was at 0 remaining so zabbix was reporting the error. I have chosen to move to a custom ...


4

It sounds like you would like to monitor process state and resource usage. If so, the following agent keys might help: proc.num - can monitor the number of processes, based on process name, user, parameters etc proc.mem - can monitor process memory usage (single process or a group of them) proc.cpu.util - can monitor process CPU utilisation (single process ...


4

Yes, zabbix_server syncs configuration from the database every CacheUpdateFrequency seconds. By default, this setting is 60 seconds, but it may have been changed for your installation.


4

There is no way, I'm afraid (or that I know of). However, you can use an external call / new media type to send mails, via PHPmailer or python or even a shell-script, using whatever message body you like - even HTML. It's not really nice, but it works. I've done it myself, but not recently, check this howto. Main info: Create script in /etc/zabbix/alert.d/,...


4

You could use spamcop statistics to find an IP. It give netblock in the /24 You can see here; https://www.spamcop.net/w3m?action=map;net=cmaxcnt;mask=65535;sort=spamcnt From that page after you can click the SB link, and you will have directly some IP An example; https://talosintelligence.com/reputation_center/lookup?search=77.120.228.0%2F24


4

It is not a process, it is the time things are waiting for IO. I would say you possibly have a hard disc there that is totally overloaded at those times. Like ridiculously overloaded - possibly by: Extremely bad programming that does not buffer things in memory. Extremely bad hardware selection (i.e. a hard disc where there simply is not enough IO budget ...


3

If you don't wish to monitor the Shared memoryon your system, you can easyly add it to the filter expression. For this go to "Administration"->"General"->"Regular expressions" Select the entry Storage devices for SNMP discovery entry Add the Shared memoryentry to the list At the same time you could also remove the various /run/xxx filesystems from ...


3

I found the answer eventually. It seems creating a full clone of the template Template App Zabbix Agent to a new Template Template App Zabbix Agent Active. Then in the 3 items linked to this new cloned template Agent ping Host name of zabbix_agentd running Version of zabbix_agent(d) running" Change the type field for each item from Zabbix agent to ...


3

Zabbix has no direct analog for this page, and I for one am glad. That Nagios page really doesn't give me a good sense of priority, precisely because the alerts are grouped by host. So it's much less useful than it could be. The best you can really do (and probably should have already done) is to define IT Services. This will give you a more high-level, ...


3

The correct syntax for item references in trigger expressions is: {host:item.func()} In your particular case, the func() part is missing after system.cpu.num, so the correct expression would be: {Template OS Linux:proc.num[].avg(5m)}/{Template OS Linux:system.cpu.num.last()}>300 Note that if you are not comfortable with editing trigger expressions by ...


Only top voted, non community-wiki answers of a minimum length are eligible