Zabbix: Difference between revisions

From DWIKI
mNo edit summary
(28 intermediate revisions by the same user not shown)
Line 4: Line 4:
*[http://www.zabbix.org/ Homepage]  
*[http://www.zabbix.org/ Homepage]  
*[https://zabbix.org/wiki/Docs/DB_schema/4.0 zabbix 4 database schema]  
*[https://zabbix.org/wiki/Docs/DB_schema/4.0 zabbix 4 database schema]  
*[https://www.zabbix.com/documentation/current/en/manual/appendix/compatibility Zabbix compatibility matrix]
*[https://www.digitalocean.com/community/tutorials/introduction-to-queries-mysql https://www.digitalocean.com/community/tutorials/introduction-to-queries-mysql]  
*[https://www.digitalocean.com/community/tutorials/introduction-to-queries-mysql https://www.digitalocean.com/community/tutorials/introduction-to-queries-mysql]  
*[http://zabbix.org/wiki/Compilation_instructions compilation instructions]  
*[http://zabbix.org/wiki/Compilation_instructions compilation instructions]  
Line 20: Line 21:
*[[Grafana|Grafana]]  
*[[Grafana|Grafana]]  
*[https://blog.zabbix.com/zabbix-ha-cluster-setups/8264/ https://blog.zabbix.com/zabbix-ha-cluster-setups/8264/] Zabbix HA cluster]  
*[https://blog.zabbix.com/zabbix-ha-cluster-setups/8264/ https://blog.zabbix.com/zabbix-ha-cluster-setups/8264/] Zabbix HA cluster]  
 
*[https://blog.zabbix.com/zabbix-agent-active-vs-passive/9207/ Active vs Passive]
*[https://geofrogger.net/review/zabbix20.svg Very old network diagram]  
*[https://geofrogger.net/review/zabbix20.svg Very old network diagram]  
*[https://blog.zabbix.com/fighting-notification-floods-and-misleading-alerts-in-distributed-zabbix-deployments/11600/ Fighting zabbix alert floods]  
*[https://blog.zabbix.com/fighting-notification-floods-and-misleading-alerts-in-distributed-zabbix-deployments/11600/ Fighting zabbix alert floods]  


 
==Installation==
*[https://repo.zabbix.com/ Zabbix repositories]
*[https://wiki.gentoo.org/wiki/User:MalakymR/Zabbix Zabbix on Gentoo]
 
== Installing Zabbix from git ==
 
git clone [https://github.com/zabbix/zabbix.git https://github.com/zabbix/zabbix.git]
cd zabbix
./bootstrap.sh
 


== Zabbix API ==
== Zabbix API ==
Line 31: Line 41:
*[https://www.zabbix.com/integrations/python API and python]  
*[https://www.zabbix.com/integrations/python API and python]  


= Installing from git =
git clone [https://github.com/zabbix/zabbix.git https://github.com/zabbix/zabbix.git]
cd zabbix
./bootstrap.sh


 
 
Line 46: Line 51:


= Items =
= Items =
*[https://www.zabbix.com/documentation/current/nl/manual/config/items/itemtypes/zabbix_agent#supported-item-keys Supported Item Keys]
==Item dialog==
*[https://www.zabbix.com/documentation/5.4/en/manual/config/items/item Item documentation]
*[https://www.zabbix.com/documentation/5.4/en/manual/config/items/itemtypes/zabbix_agent Zabbix agent items]
===Units===
*B
*uptime
*unixtime
*s


== proc.mem ==
== proc.mem ==


proc.mem[<name>,<user>,<mode>,<cmdline><memtype>]
proc.mem[<name>,<user>,<mode>,<cmdline>,<memtype>]


=== name ===
=== name ===
Line 57: Line 72:
=== cmdline ===
=== cmdline ===


probably the one to look for
regex like php-fpm:


&nbsp;
===memtype===
*[https://www.zabbix.com/documentation/5.0/en/manual/appendix/items/proc_mem_notes Notes on proc.mem memtypes]


&nbsp;
= Templates =


&nbsp;
*[https://github.com/zabbix/community-templates/ Community templates]


= Templates =
==Template App MySQL==
https://github.com/tiramiseb/zabbix-templates/blob/master/Template%20App%20MySQL.txt
TODO shouldn't this be user zabbix?


*[https://github.com/zabbix/community-templates/ Community templates]
mysql user account:
create user 'monitor'@'localhost' identified by auth_socket;
grant PROCESS,SHOW DATABASES,SHOW VIEW on *.* to 'monitor'@'localhost';
flush privileges;


= Configuration =
= Configuration =
Line 74: Line 95:


=== On client ===
=== On client ===
Have port 10051 open and:
ActiveServer zabbix.ser.ver


=== On server ===
=== On server ===
Line 80: Line 103:


&nbsp;
&nbsp;
=Zabbix and SQL=
==Find hosts with hostmacro defined==
select h.host, m.macro, m.value from hosts h, hostmacro m where macro like '%FOO%' and h.hostid = m.hostid;
==most frequent items in history_uint==
select itemid,count(itemid) as freq from history_uint group by itemid order by freq desc limit 5;
and then
select name from items where itemid = whateveryoufind;
= HOWTO =
== LLD with JSON ==
*[https://blog.zabbix.com/low-level-discovery-with-dependent-items/13634/ LLD with JSON and dependent items]
if you want multiple keys, use jsonpath like
$[?(@.share=='{#FSTYPE}' && @.name=='{#NAME}')].size.first()
===testing jsonpath preprocessing===
In Value paste valid json, then name {#NAME} value somevalue
== Test trapper ==


= FAQ =
= FAQ =
Line 118: Line 163:
== PROXY ==
== PROXY ==


=== Nodata and proxy ===
[[ Zabbix Proxy ]]
 
[https://www.zabbix.com/documentation/5.0/en/manual/introduction/whatsnew500#no-data-triggers-sensitive-to-proxy-availability https://www.zabbix.com/documentation/5.0/en/manual/introduction/whatsnew500#no-data-triggers-sensitive-to-proxy-availability]
 
 
=== Zabbix proxy poller processes more than 75% busy===
A passive proxy went away?
 
 
 
 
=== Zabbix does not support SQLite3 database upgrade. ===
 
Stop the proxy and (re)move the .db file
 
=== [Z3002] cannot create database 'zabbix_proxy': [0] unable to open database file ===
 
fix path
 
&nbsp;
 
=== Cannot parse heartbeat from active proxy ===
 
TBD, probably name issue
 
=== Troubleshoot high queue on proxy ===
 
*[https://blog.zabbix.com/how-to-troubleshoot-zabbix-proxy-high-queue/12244/ https://blog.zabbix.com/how-to-troubleshoot-zabbix-proxy-high-queue/12244/]
 
=== poller data processes ===
 
StartPollers
 
=== cannot obtain data from proxy "proxybox": ZBX_TCP_READ() failed: [104] Connection reset by peer ===
 
?????
 
&nbsp;
 
=== force "sending configuration data to proxy" ===
 
zabbix_proxy -R config_cache_reload
 
&nbsp;
 
&nbsp;
 
&nbsp;


== Front end ==
== Front end ==
Line 187: Line 185:
=== No permissions to referred object or it does not exist! ===
=== No permissions to referred object or it does not exist! ===


Graph no longer exists. Porbably items no longer discovered
Graph no longer exists. Probably items no longer discovered


=== Cannot add host ===
=== Cannot add host ===
Line 215: Line 213:


&nbsp;
&nbsp;
==LLD/Discovery==
=== Discover: value must be a JSON object ===
Could mean you need to escape slashes, check output with zabbix_get
===Cannot create item: item with the same key===
make sure the key containts "{#MACRONAME}"
== Discovery data example ==
Output of a discovery script should look like:
{"data":[
  {"{#VAR1}":"value11","#{VAR2":"value12"},
  {"{#VAR1}":"value21","#{VAR2":"value22"}
]}


== IPMI ==
== IPMI ==
Line 222: Line 242:
[https://www.thomas-krenn.com/en/wiki/Configuring_IPMI_under_Linux_using_ipmitool https://www.thomas-krenn.com/en/wiki/Configuring_IPMI_under_Linux_using_ipmitool]
[https://www.thomas-krenn.com/en/wiki/Configuring_IPMI_under_Linux_using_ipmitool https://www.thomas-krenn.com/en/wiki/Configuring_IPMI_under_Linux_using_ipmitool]


&nbsp;
ipmitool user set name 3 monitor
ipmitool user set password 3
ipmitool channel setaccess 1 3 link=on ipmi=on callin=on privilege=2
ipmitool user enable 3


=== cannot connect to IPMI host: [22] Operation canceled ===
=== cannot connect to IPMI host: [22] Operation canceled ===
Line 263: Line 286:
possibly authentication method issue
possibly authentication method issue


== Discover: value must be a JSON object ==
Could mean you need to escape slashes


&nbsp;
&nbsp;
 
== Calculated items ==
== Cannot create item: Invalid first parameter ==
See [https://blog.zabbix.com/zabbix-monitoring-with-calculated-items-explained/9950/ Calculated items explained]
 
=== Cannot create item: Invalid first parameter ===
=== Cannot create item, error in formula ===
Problably a calculated item, try doublequoting the item key:
Problably a calculated item, try doublequoting the item key:


Line 282: Line 303:
  yum install zabbix-agent
  yum install zabbix-agent


== Discovery data example ==
Output of a discovery script should look like:
{"data":[
  {"{#VAR1}":"value11","#{VAR2":"value12"},
  {"{#VAR1}":"value21","#{VAR2":"value22"}
]}


== Backing up tables ==
== Backing up tables ==
Line 445: Line 458:


== no active checks on server ==
== no active checks on server ==
 
*Hostname in agent config must match name on server
*simple no connection possible? firewall?
???
???


Line 455: Line 469:


Monitoring->host->graphs
Monitoring->host->graphs
===fuzzytime on command line===
TS=lotsofseconds
#output in hours
echo $(( ($(date +%s) - $TS) / 3600 ))
[[Category:Monitoring]]

Revision as of 14:14, 12 September 2022

Links

Installation

Installing Zabbix from git

git clone https://github.com/zabbix/zabbix.git
cd zabbix 
./bootstrap.sh


Zabbix API


 

Zabbix error codes

Z3005

Database issue

Items

Item dialog

Units

  • B
  • uptime
  • unixtime
  • s

proc.mem

proc.mem[<name>,<user>,<mode>,<cmdline>,<memtype>]

name

??

cmdline

regex like php-fpm:

memtype

Templates

Template App MySQL

https://github.com/tiramiseb/zabbix-templates/blob/master/Template%20App%20MySQL.txt TODO shouldn't this be user zabbix?

mysql user account:

create user 'monitor'@'localhost' identified by auth_socket;
grant PROCESS,SHOW DATABASES,SHOW VIEW on *.* to 'monitor'@'localhost';
flush privileges;

Configuration

Zabbix agent active

On client

Have port 10051 open and:

ActiveServer zabbix.ser.ver

On server

Set Agent IP to 0.0.0.0

 

Zabbix and SQL

Find hosts with hostmacro defined

select h.host, m.macro, m.value from hosts h, hostmacro m where macro like '%FOO%' and h.hostid = m.hostid;


most frequent items in history_uint

select itemid,count(itemid) as freq from history_uint group by itemid order by freq desc limit 5;

and then

select name from items where itemid = whateveryoufind;

HOWTO

LLD with JSON

if you want multiple keys, use jsonpath like

$[?(@.share=='{#FSTYPE}' && @.name=='{#NAME}')].size.first()

testing jsonpath preprocessing

In Value paste valid json, then name {#NAME} value somevalue

Test trapper

FAQ

SERVER

Adjust loglevel

zabbix_server --runtime-control log_level_increase=trapper
      

 

Reload zabbix server configuration

You can't, but you might want

zabbix_server -c /etc/zabbix/zabbix_server.conf -R config_cache_reload

 

No media defined for user

The frontend does not match Zabbix database.

Probably version conflict between frontend and server

 

value cache working in low memory mode

Increase ValueCacheSize

 

 

PROXY

Zabbix Proxy

Front end

Visable name vs hostname

Visible name: {HOST.NAME}

Hostname: {HOST.HOST}

Host IP: (as defined in Interface->IP/DNS) {HOST.CONN}

 

Acknowledge multiple items

Monitor->Problems apply filters, select all, mass update

 

No permissions to referred object or it does not exist!

Graph no longer exists. Probably items no longer discovered

Cannot add host

??

SNMP

Cannot find host interface on "xxxhost" for item key foo

Might mean you're trying to import an SNMP template before configuring SNMP for the host

 

 

No SNMP data

snmp_parse_oid(): cannot parse OID "IF-MIB::ifSpeed.3

Agent side ping check

UserParameter=pingtime[*],fping -e $1|sed 's/^.*(\([0-9].*\) ms).*$/\1/g'
UserParameter=pingalive[*],fping $1|grep -q alive;echo $?

 

 


LLD/Discovery

Discover: value must be a JSON object

Could mean you need to escape slashes, check output with zabbix_get


Cannot create item: item with the same key

make sure the key containts "{#MACRONAME}"

Discovery data example

Output of a discovery script should look like:

{"data":[
  {"{#VAR1}":"value11","#{VAR2":"value12"},
  {"{#VAR1}":"value21","#{VAR2":"value22"}
]}



IPMI

IPMI Monitoring account for zabbix

https://www.thomas-krenn.com/en/wiki/Configuring_IPMI_under_Linux_using_ipmitool

ipmitool user set name 3 monitor
ipmitool user set password 3
ipmitool channel setaccess 1 3 link=on ipmi=on callin=on privilege=2
ipmitool user enable 3

cannot connect to IPMI host: [22] Operation canceled

Usually temporary because of broken ipmi lib, ignore it

 

cannot connect to IPMI host: [16777411] Unknown error 16777411

classic, probably authentication problem

cannot connect to IPMI host: [22] Invalid argument

zabbix_sender

processed: 0; failed: 1

Possible causes:

  • incorrect hostname
  • incorrect item key
  • item not in the server configuration cache yet
  • Allowed hosts in trapper item
  • phase of moon
  • aliens

 

Testing zabbix_sender

zabbix_sender stuff

Filters

The regular expressions referred to in discovery are found under Administration->General, and then "Regular expressions" in the dropdown at top right of the page

cannot connect to IPMI host: [125] Operation canceled

possibly authentication method issue


 

Calculated items

See Calculated items explained

Cannot create item: Invalid first parameter

Cannot create item, error in formula

Problably a calculated item, try doublequoting the item key:

last("foo[bar]")

 

Install recent zabbix on CentOS/RHEL

rpm -ivh https://repo.zabbix.com/zabbix/3.4/rhel/7/x86_64/zabbix-release-3.4-2.el7.noarch.rpm
yum install zabbix-agent


Backing up tables

https://www.zabbix.org/wiki/Docs/howto/mysql_backup_script

 

cannot send list of active checks

If in agent log: most likely ServerActive is defined in agent config, while not used at all

It is also possible agent is sending some active check to server while host is monitored via proxy.

active check configuration update started to fail

??

Latest 20 issues

DEFAULT_LATEST_ISSUES_CNT in/usr/share/zabbix/include/defines.inc.php

 

Zabbix unreachable poller processes more than 75% busy

Increase StartPollersUnreachable

 

Zabbix poller processes more than 75% busy

another mystery

More than 100 items having missing data for more than 10 minutes

Could be high load. Also check Administration->Queue

Zabbix escalator processes more than 75% busy

probably high system load overall

Check agent

zabbix_get -s my.host.com -k agent.version

ZBX_NOTSUPPORTED

Could be anything, enable logging on agent. It could be version mismatch. Check

zabbix_get -s yourhost -k agent.version

If that works, you're calling for an undefined or unsupported key.

Incorrect trigger expression. Host "xx" does not exist or you have no access to this host.

Means there's no related item.

zabbix_get returns nothing

best look at log on agent side

run playbook on single host

ansible_playbook -l somehost somplay.yml

Category:Monitoring

 

Zabbix server is not running: the information displayed may not be current

Might be selinux: http://sysads.co.uk/2013/11/zabbix-server-running-alert/

 

 

 

Monitoring vmware

vmware.hv.cpu.usage[{$URL},{HOST.HOST}]" became not supported: Couldn't resolve host name

Set macro {$URL} to https://your.ip/sdk/ (shouldn't discovery figure that out from {$HOST} ?
      

Couldn't resolve host name

Sometimes it's a matter of waiting a few hours

 

vmware events collector returned empty result

???

No "vmware collector" processes started.

Check StartVMwareCollectors on server or proxy

 

unsupported item key

This might mean it's expecting a value from the script you're calling.

echo 1

became not supported: Not supported by Zabbix Agent

probably output by userparameter/script

ansible or API not showing host groups

Permissions!! See Administration->User Groups

 

failed to update local proxy configuration copy: invalid field name "items.lastlogsize"

check everything :)

Received value [11] is not suitable for value type [Numeric (unsigned)] and data type [Decimal]

This probably means the agent returned 1\n1

 

database is down: retrying in 10 seconds

try upping max_connections

[Incorrect key file for table 'items'; try to repair it

Could be something /tmp related

 

 

another network error, wait for 8 seconds

UnreachableDelay=8

 

failed: first network error

Setting Timeout in server configuration

also Timeout in agents?

 

no active checks on server

  • Hostname in agent config must match name on server
  • simple no connection possible? firewall?

???

 

 

show cpu utilization

Monitoring->host->graphs

fuzzytime on command line

TS=lotsofseconds
  1. output in hours
echo $(( ($(date +%s) - $TS) / 3600 ))