Skip to main content

Item types in Zabbix

Zabbix agent checks

These checks use the communication with Zabbix agent for data gathering.
There are passive and active agent checks.

Passive checks
A passive check is a simple data request. Zabbix server or proxy asks for some data (for example, CPU load) and Zabbix agent sends back the result to the server.

Active cheks
Active checks require more complex processing. The agent must first retrieve from the server(s) a list of items for independent processing.
The servers to get the active checks from are listed in the ‘ServerActive‘ parameter of the agent configuration file. The frequency of asking for these checks is set by the ‘RefreshActiveChecks‘ parameter in the same configuration file. However, if refreshing active checks fails, it is retried after hardcoded 60 seconds.

Getting the list of items

۱٫Agent opens a TCP connection

۲٫Agent asks for the list of checks

۳٫Server responds with a list of items (item key, delay)

۴٫Agent parses the response

۵٫TCP connection is closed

Agent starts periodical collection of data

Agent request { "request":"active checks", "host":"<hostname>" }

Server response { "response":"success", "data":[ { "key":"agent.version", "delay":600, "lastlogsize":0, "mtime":0 },

Sending in collected data

Agent sends{ "request":"agent data", "session": "12345678901234567890123456789012", "data":[ { "host":"<hostname>", "key":"agent.version", "value":"2.4.0", "id": 1, "clock":1400675595, "ns":76808644 },

Server response{ "response":"success", "info":"processed: 3; failed: 0; total: 3; seconds spent: 0.003534" } A virtual ID is assigned to each value.This ID is used to discard duplicate values that might be sent in poor connectivity environments.

config zabbix agent for windows

۱٫download zabbix-agent for windows

۲٫copy in directory and run cmd : cd <path-directory>

۳٫run cmd an typing : <directory-path> -c <config-file-path> -i

۴٫۱۰۰۵۰,۱۰۰۵۱ and zabbix-agent add to firewall

۵٫in zabbix server add host and monitoring

SNMP agent

SNMP (Simple Network Management Protocol) is an application layer protocol which uses UDP protocol to maintain and manage routers, hubs and switches other network devices on an IP network.
You may want to use SNMP monitoring on devices such as printers, network switches, routers or UPS that usually are SNMP-enabled and on which it would be impractical to attempt setting up complete operating systems and Zabbix agents.
To be able to retrieve data provided by SNMP agents on these devices, Zabbix server must be initially configured with SNMP support.
SNMP checks are performed over the UDP protocol only.

An agent running on every SNMP device will be providing access to a read and writable database. The database is referred to as the management information base (MIB) which is organized hierarchically and is a virtual database containing a formal description of all the network objects identified by a specific object identifier (OID) that can be managed using SNMP.
Community strings is a text string used to authenticate communications between the management stations and network devices on which SNMP agents are hosted.

Two types of community strings

Read only: This mode permits querying the device and reading the information, but does not permit any kind of changes to the configuration. The default community string for this mode is “public.”

Read Write: In this mode, changes to the device are permitted; hence if one connects with this community string, we can even modify the remote device ’s configurations. The default community string for this mode is “private.”

SNMP traps

In this case the information is sent from a SNMP-enabled device and is collected or “trapped” by Zabbix
Receiving SNMP traps in Zabbix is designed to work with snmptrapd .

The workflow of receiving a trap:

۱٫snmptrapd receives a trap

۲٫snmptrapd passes the trap to SNMPTT or calls Perl trap receiver

۳٫SNMPTT or Perl trap receiver parses, formats and writes the trap to a file

۴٫Zabbix SNMP trapper reads and parses the trap file

IPMI checks

You can monitor the health and availability of Intelligent Platform Management Interface (IPMI) devices in Zabbix. To perform IPMI checks Zabbix server must be initially configured with IPMI support.Zabbix IPMI monitoring works only for devices having IPMI support.

IPMI main features

۱٫Monitoring(temp, fans, …)

۲٫Recovery Control(power on/off/reset)

۳٫Logging(System Event Log)

۴٫Inventory(FRU information)

Simple checks

Simple checks are normally used for remote agent-less checks of services.
Zabbix agent is not needed for simple checks. Zabbix server/proxy is responsible for the processing of simple checks (making external connections, etc).

ICMP pings
Zabbix uses external utility fping for processing of ICMP pings.

Log file monitoring

Zabbix can be used for centralized monitoring and analysis of log files with/without log rotation support.Notifications can be used to warn users when a log file contains certain strings or string patterns.

To monitor a log file you must have:

Zabbix agent running on the host

log monitoring item set up

key syntax : log[file,<regexp>,<encoding>,<maxlines>,<mode>,<output>,<maxdelay>]

Calculated items

With calculated items you can create calculations on the basis of other items.
All calculations are done by the Zabbix servernothing related to calculated items is performed on Zabbix agents or proxies.
Calculation definition should be entered in the Formula field. There is virtually no connection between the formula and the key. The key parameters are not used in formula in any way.

for example : 100*last("[eth0,bytes]")/(last("[eth0,bytes]")+last("net.if.out[eth0,bytes]"))

Internal checks

Internal checks allow to monitor the internal processes of Zabbix. In other words, you can monitor what goes on with Zabbix server or Zabbix proxy.

Internal checks are calculated

on Zabbix server – if the host is monitored by server

on Zabbix proxy – if the host is monitored by proxy

External checks

External check is a check executed by Zabbix server by running a shell script or a binary. However, when hosts are monitored by a Zabbix proxy, the external checks are executed by the proxy.

External checks do not require any agent running on a host being monitored.

Create a script that will collect the data.

SSH checks

SSH checks are performed as agent-less monitoring. Zabbix agent is not needed for SSH checks.To perform SSH checks Zabbix server must be initially configured with SSH2 support.
SSH checks provide two authentication methods, a user/password pair and key-file based.

Telnet checks

Telnet checks are performed as agent-less monitoring. Zabbix agent is not needed for Telnet checks.

Run a command on a remote device using telnet connection

Aggregate checks

In aggregate checks Zabbix server collects aggregate information from items by doing direct database queries.Aggregate checks do not require any agent running on the host being monitored.

for example : Average CPU load on all hosts in multiple host groups.
grpavg[["Servers A","Servers B","Servers C"],system.cpu.load,last]

Trapper items

Trapper items accept incoming data instead of querying for it. It is useful for any data you might want to “push” into Zabbix.

Sending in data
In the simplest of cases, we may use zabbix_sender utility to send in some ‘test value‘:

step1: create item : type = zabbix-trapper and key= trap

step2: from host send value to zabbix server
zabbix_sender -z <server IP address> -p 10051 -s "New host" -k trap -o "test value"

step3 monitoring → latest data → select Host → see value

HTTP agent

This item type allows data polling using the HTTP/HTTPS protocol. Trapping is also possible using Zabbix sender or Zabbix sender protocol.
HTTP item checks do not require any agent running on a host being monitored.

ODBC monitoring

ODBC monitoring corresponds to the Database monitor item type in the Zabbix frontend.
Zabbix may query any database, which is supported by ODBC.
To do that, Zabbix does not directly connect to the databases, but uses the ODBC interface and drivers set up in ODBC.

پاسخی بگذارید

نشانی ایمیل شما منتشر نخواهد شد. بخش‌های موردنیاز علامت‌گذاری شده‌اند *