SNMP – Simple network management protocol is a networking protocol that is extremely prevalent in network hardware such as switches and routers, as well as a variety of other devices such as printers, power supplies and even regular server hosts. Depending on the device, a wide array of metrics can be retrieved by using SNMP without the need to deploy any additional software on the target device. Our newly introduced Zabbix SNMP monitoring one-day extra course will teach you all you need to know about SNMP and how to use Zabbix to get the most out of your SNMP devices with the most optimal data collection approach.
Course contents
The goal of the course is to introduce the core concepts behind SNMP and provide the attendees with the skills necessary to extract the required metrics from SNMP endpoints. The course covers topics such as:
SNMP core concepts
SNMP command line utilities
Differences between SNMP versions
SNMP resource discovery with Zabbix Low-level discovery feature
Optimizing SNMP data collection with the SNMP walk[*] item introduced in Zabbix 6.4
Configuring and monitoring SNMP traps
The course will be hosted by a Zabbix Certified Trainer with thorough experience in SNMP monitoring and Zabbix configuration. The courses are designed with open Q&A sessions in mind, where attendees can discuss their current and potential use cases and how the course contents can be applied to their own real-life scenarios.
Zabbix Certified Specialist on-site training
SNMP monitoring in Zabbix 6.4 and newer versions
Zabbix 6.4 introduces a whole new approach to bulk SNMP monitoring – the walk[*] item. During the course, attendees will learn how the new bulk data collection approach greatly increases the metric collection speed and reduces the potential performance impact on the monitoring endpoint. The course covers the main differences between the old and new approaches and demonstrates how the new SNMP items can be configured in the correct manner. Trainers will also demonstrate and provide the opportunity to practice SNMP resource discovery with the new walk[*] item and Zabbix low-level discovery (LLD) features.
Practical tasks
Depending on the device and vendor, configuring SNMP monitoring can be both very simple or it may require understanding the underlying OID structure to find the data that you’re looking for. To guide our students through real-life scenarios in understanding how SNMP monitoring may differ across devices and vendors, the course includes practical tasks, during which the participants will get the opportunity to configure Zabbix SNMP monitoring for an array of network devices belonging to a selection of the most popular vendors, such as Cisco, HP and Mikrotik. By the end of the course, students will have both a theoretical and practical understanding of SNMP as a protocol and how it can be used by Zabbix for metric collection and problem detection.
At the end of the course, every attendee will receive the course attendance certificate.
Sign up for the SNMP monitoring Zabbix training course and check our other one-day extra courses by visiting the Zabbix Training Extra Courses page.
Modern IT infrastructures tend to utilize multiple data sources to evaluate and react to the current state of the infrastructure. A set of internal solutions and dedicated software tools are used to correlate the collected information and react in a proper way to changes in the environment – be it a gradual increase or decrease in resource usage, unexpected load spikes or run-of-the-mill outages.
With the release of Zabbix 6.4, metrics collected by Zabbix and events generated based on trigger expressions can be integrated into such a data pipeline by using the new real-time metric and event streaming feature.
Zabbix real-time metric and event streaming
Before Zabbix 6.4 Zabbix supported real-time export of history, trends and events to files. The export was performed by exporting the data in newline-delimited JSON format. Additional scripting was mandatory if a user wanted to integrate this data within their data pipeline since Zabbix only exported the data to files without any further transformations or streaming.
On the other hand – real-time metric streaming can be a lot more flexible when it comes to integrating Zabbix with data pipelines, filtering the required data and securing the connection to the third party endpoint.
In addition to specifiying the streaming endpoint URL, Zabbix users can choose between streaming Item values and Events. On top of that, Tag filtering can be used to further narrow down the data that will be streamed to the endpoint.
Connectors
Real-time item value and event streaming can be configured by accessing the Administration – General – Connectors section. Here Zabbix administrators will have to create connectors and specify what kind of data the connector will be streaming. A single connector can only stream either Item values or events – if you wish to stream both, you will have to define at least two connectors, one for values and the other for events.
Configuring a new connector
Marking the Advanced configuration checkbox enables Zabbix administrators to further configure each individual connector – from specifying the number of concurrent sessions, limiting the number of attempts and specifying the connection Timeout to configuring HTTP proxies and enabling SSL connections.
An HTTP authentication method can also be specified for each connector. It is possible to use one of the following methods:
None – no authentication used;
Basic – basic authentication is used;
NTLM – NTLM (Windows NT LAN Manager) authentication is used;
Kerberos – Kerberos authentication is used;
Digest – Digest authentication is used;
Bearer – Bearer authentication is used.
In addition, the number of pre-forked connector worker instances must be specified in the Zabbix server configuration file in the StartConnectors parameter.
Setting StartConnectors parameter in Zabbix server configuration file
The following example shows a trigger event for Zabbix agent being unreachable:
{"clock":1519304285,"ns":123456789,"value":1,"name":"Either Zabbix agent is unreachable on Host B or pollers are too busy on Zabbix Server","severity":3,"eventid":42, "hosts":[{"host":"Host B", "name":"Host B visible"},{"host":"Zabbix Server","name":"Zabbix Server visible"}],"groups":["Group X","Group Y","Group Z","Zabbix servers"],"tags":[{"tag":"availability","value":""},{"tag":"data center","value":"Riga"}]}
Do not get confused by the value field, the value if which will always be 1 for problem events, while for items, it will contain the item value:
{"host":{"host":"Host B","name":"Host B visible"},"groups":["Group X","Group Y","Group Z"],"item_tags":[{"tag":"foo","value":"test"}],"itemid":4,"name":"CPU Load","clock":1519304285,"ns":123456789,"value":0.1,"type":0}
Use cases
Finally, what particular use cases can we use the real-time metric streaming feature for? As I mentioned in the introduction, Zabbix item values and events could serve as an additional source of near real-time information about the current system behavior.
For example, we could stream item values and events to message brokers such as Kafka, RabbitMQ or Amazon Kinesis. Combine this with additional automation solutions and your services could dynamically scale (think K8s/Docker containers) depending on the current (or expected) load. Zabbix Kubernetes and Docker container monitoring templates very much complement such an approach.
The streamed data could also be used to gain new insights about the system behavior by streaming it to an AI engine or data lakes/data warehouses for long-term storage and analysis.
Zabbix team is pleased to announce the release of the latest Zabbix major version – Zabbix 6.4. The release delivers many long-awaited improvements, such as Just-in-time LDAP and SAML user provisioning; support of older Zabbix proxy versions for simplified proxy management and zero–downtime Zabbix upgrades; near-instant configuration sync across Zabbix agents and proxies, and much more!
New features and improvements
Just-in-time (JIT) user provisioning
Zabbix 6.4 adds support of JIT user provisioning for LDAP and SAML authentication.
JIT user provisioning can be enabled in LDAP/SAML authentication settings
Zabbix administrators can now configure user provisioning by selecting the LDAP group pattern for matching and automatically assign User groups and User roles to the discovered users. Media types can also be mapped based on LDAP/SAML attributes.
A media can be assigned to the provisioned users based on their LDAP/SAML attributesA group and role is assigned to the provisioned users
Cause and symptom events
Zabbix 6.4 adds the ability to mark events as Cause or Symptom events. This allows us to filter events in a way, where we can see only root cause problems instead of being overwhelmed by symptom events. It is also possible to pause action operations for symptom events as to avoid unnecessary noise.
Multiple symptom events can be linked to a single cause eventAny event can be marked as a symptom or converted to a cause eventAction operations can be paused for symptom problems
Instant propagation of configuration changes
Continuing to build on changes introduced in Zabbix 6.2 (Collecting only configuration change deltas), Zabbix 6.4 introduces instant configuration synchronization across passive and active agents and proxies.
Instead of receiving the full configuration copy every 2 minutes (old behavior), in Zabbix 6.4 active agent receives the configuration copy only when changes have been performed
RefreshActiveChecks parameter now supports a range 1-86400 (old range: 60-3600)
The ProxyConfigFrequency parameter is now used in both Zabbix server (for passive mode) and Zabbix proxy (for active mode) configuration files
ConfigFrequency parameter in Zabbix proxy configuration is now deprecated
Default ProxyConfigFrequency parameter is 10 seconds (down from 1 hour)
This also improves the performance of Zabbix servers and proxies, since only configuration deltas are synced. As for active agents – the active agent receives a full configuration copy only when any changes are detected in the configuration instead of receiving it every RefreshActiveChecks interval (old behavior)
New SNMP walk item for bulk collection and discovery of SNMP metrics
A new SNMP agent walk item has been introduced. The item looks at a specified OID or OIDs and polls their indexes by suing the SNMP GetBulk requests. An SNMP GetBulk request can provide better performance and more rapid metric collection and discovery from enterprise-tier SNMP devices.
Once the data is converted to JSON, we can use SNMP walk value preprocessing step together with LLD macros, to create dependent item prototypes:
SNMP walk value preprocessing step can be used to specify value for extraction in item prototypes
Support of data collection for outdated proxies
To improve the Zabbix component upgrade workflows (especially for large environments), outdated proxies can still perform data collection with a newer Zabbix server version:
Proxy is fully supported if it has the same major version as the Zabbix server
Proxy is marked as outdated if its major version is older than the Zabbix server but not older than the previous LTS release
Outdated proxies still support data collection and remote command execution
In other scenarios, the proxy becomes not supported
Deployed proxy compatibility can be seen in Zabbix frontend
Server version
Current proxy version
Outdated proxy version
Unsupported proxy version
6.4
6.4
6.0, 6.2
Older than 6.0; newer than 6.4
7.0
7.0
6.0, 6.2, 6.4
Older than 6.0; newer than 7.0
7.2
7.2
7.0
Older than 7.0; newer than 7.2
New menu layout
Zabbix menu layout has been redesigned. The goal of the new menu layout is to provide logical and consistent access to main Zabbix features.
The new menu provides a more consistent and logical layout to Zabbix features
Real-time streaming of metrics and events over HTTP
In addition to streaming collected metrics and events to files, Zabbix 6.4 adds the option to stream metrics and events over HTTP. Zabbix administrators have the option to filter the data for streaming by using tag filters. A new Connectors section has been introduced under Administration – General. Here Zabbix administrators can define an external system where item values and events should be pushed to.
Define a new connector to stream metrics and events over HTTP
Zabbix 6.4 can be used as a source of information for other applications, analytics reports, and AI engines by streaming metrics and events over HTTP in real time. Metrics and events can be streamed to message brokers like Kafka, RabbitMQ, or Amazon Kinesis to adapt the behavior of external systemsin real time.
Template versioning
Template versioning has been introduced to improve template management and ease of use. Templates are now marked with vendor ar version fields, which are visible in Zabbix frontend; these fields can also be added when writing a custom template.
Template version and vendor fields are visible in the frontend
Development framework for Zabbix widget creation
Zabbix has a large developer community creating their own custom frontend modules, widgets and Go plugins. In Zabbix 6.4, our goal was to streamline this process by creating a development framework for widget creation. To achieve this, the following changes have been introduced:
Widgets have been converted to modules
Modules are now fully self-contained and modular
Built-in widgets reside in ui/widgets
Custom widgets reside in ui/modules/<widget>
Adding new widgets is as simple as adding new files without changing the existing files
In addition to these changes, we have also added a new Developer Center section to our documentation. The section contains guides, tutorials and code examples to guide our community in developing Frontend modules and widgets, as well as help with Zabbix agent 2 custom Go plugin development.
The Developer Center section contains guides, tutorials, and code examples for extending Zabbix
Other features and improvements
The release includes many other changes:
Simple check, External check, SSH agent, Telnet agent item types now do not require an interface to be present on the host
Pre-configured email media type settings for Gmail and O365 email providers
Dynamic item value widget thresholds
Option to define custom labeled links for hosts and events
Ability to label trigger URLs
Improved preprocessing performance and thread-based preprocessing workers
Ability to label aggregated datasets in Graph widget
SQLite3 Zabbix proxies now automatically recreate the SQLite3 database file during an upgrade
A host status filter (enabled/disabled) has been added under Data collection – Hosts
Additional filtering options have been added to the Action log
Action log now supports import to CSV
Multiple context menu improvements to Host, Item and Event context menus
Old password verification is now required when changing your internal Zabbix user password
Value cache performance improvements when working with metrics that get updated less frequently than once per day
Added commands to enable profiling of rwlocks/mutexes (for debugging)
Zabbix 6.4 comes pre-packaged with many new templates and integrations for the most popular vendors and cloud providers. Multiple existing templates have also received improvements:
Microsoft Azure MySQL servers
Microsoft Azure PostgreSQL servers
Microsoft Azure virtual machines
Low-level discovery improvements in AWS by HTTP template
Veeam Backup Enterprise Manager
Veeam Backup and Replication
Cisco Nexus 9000 Series
BMC Control-M
Cisco Meraki dashboard
OS processes by Zabbix agent
Improvements to filesystem discovery in official Zabbix OS templates
Zabbix 6.4 introduces a webhook integration for the Line messaging app, allowing Zabbix events to be forwarded to the Line messenger.
Zabbix 6.4 adds a variety of new templates and integrations
Zabbix 6.4 packages and images
Official Zabbix packages and images are available for:
Linux distributions for different hardware platforms on RHEL, CentOS, Oracle Linux, Debian, SUSE, Ubuntu, Raspbian
Virtualization platforms based on VMWare, VirtualBox, Hyper-V, XEN
Docker
Packages and pre-compiled agents for the most popular platforms, including macOS and MSI packages for Microsoft Windows
You can find the download instructions and download the new version on the Download page.
One-click deployments for the following cloud platforms are coming soon:
AWS, Azure, Google Cloud Platform, Digital Ocean
Upgrading to Zabbix 6.4
In order to upgrade to Zabbix 6.4 you need to upgrade your repository package and download and install the new Zabbix component packages (Zabbix server, proxy, frontend, and other Zabbix components). When you start the Zabbix server, an automatic database schema upgrade will be performed. Zabbix agents are backward compatible; therefore, it is not required to install the new agent versions. You can perform the agent upgrade at a later time.
If you’re using the official Docker container images – simply deploy a new set of containers for your Zabbix components. Once the Zabbix server container connects to the backend database, the database upgrade will be performed automatically.
You can find detailed step-by-step upgrade instructions on our Upgrade procedure page.
Join the webinar
If you wish to learn more about the Zabbix 6.4 features and improvements, we invite you to join our What’s new in Zabbix 6.4 public webinar.
During the webinar, you will get the opportunity to:
Learn about Zabbix 6.4 features and improvements
See the latest Zabbix templates and integrations
Participate in a Q&A session with Zabbix founder and CEO Alexei Vladishev
Discuss the latest Zabbix version with Zabbix community and Zabbix team members
This is a public webinar – anyone can sign up, attend and have their questions answered by the Zabbix team!
Streamline your data collection, problem detection and low-level discovery by defining global regular expressions.
Pattern matching within unstructured data is mostly done by using regular expressions. Defining a regular expression can be a lengthy task, that can be simplified by predefining a set of regular expressions which can be quickly referenced down the line.
Simplify pattern matching by defining global regular expressions:
Reference global regular expressions in log monitoring and snmp trap items
Simplify pattern matching in trigger functions and calculated items
Global regular expressions can be referenced in low-level discovery filters
Combine multiple subexpressions into a single global regular expression
Check out the video to learn how to define and use global regular expressions.
Define and use global regular expressions:
Navigate to Administration → General → Regular expressions
Type in your global regular expression name
Select the regular expression type and provide subexpressions
Press Add and provide multiple subexpressions
Navigate to the Test tab and enter the test string
Click on Test expressions and observe the result
Press Add to save and add the global regular expression
Navigate to Configuration → Hosts
Find the host on which you will test the global regular expression
Click on either the Items, Triggers or Discovery button to open the corresponding section
Find your item, trigger or LLD rule and open it
Insert the global regular expression
Use the @ symbol to reference a global regular expression by its name
Update the element to save the changes
Tips and best practices
Each subexpressions and the total combined result can be tested in Zabbix frontend
Zabbix uses AND logic if several subexpressions are defined
Global regular expressions can be referenced by referring to their name, prefixed with the @ symbol
Zabbix documentation contains the list of locations supporting the usage of global regular expression.
Sign up for the official Zabbix Certified Specialist course and learn how to optimize your data collection, enrich your alerts with useful information, and minimize the amount of noise and false alarms. During the course, you will perform a variety of practical tasks under the guidance of a Zabbix certified trainer, where you will get the chance to discuss how the current use cases apply to your own unique infrastructure.
Collect structured data in bulk and use Zabbix preprocessing to extract and transform the necessary metrics.
Collecting data from custom monitoring endpoints such as web applications or custom in-house software can result in the collected data requiring further extraction or transformation to fit our requirements.
Use Zabbix preprocessing to extract metrics from structured data:
Extract data with JSONPath and XPath expressions
Transform XML and CSV data to JSON structures
Check for error messages in JSON and XML structures
Extract and transform metrics from Prometheus exporter endpoints
Check out the video to learn how to use Zabbix preprocessing to extract metrics from structured data.
Extract metrics from structured data with Zabbix preprocessing:
Navigate to Configuration → Hosts
Find the host where structured data is collected
Click on the Items button next to the host
Create or open an item collecting structured data
For this example, we will transform CSV to JSON
Open the Preprocessing tab
Select a structured data preprocessing rule
If required, provide the necessary parameters
Optionally, select a validation preprocessing step
For this example, we will check for errors in JSON
Extract a value by using JSONPath or XML XPath preprocessing steps
Press Test to open the test window
Press Get value and test to test the item
Close the test window and press Add or Update to add or update the item
Optionally, create dependent items to extract values from this item
Tips and best practices
You check the Handy Tips #37 to learn how to collect structured data from HTTP end-points
For CSV to JSON preprocessing the first parameter allows you specify a CSV delimiter, while the second parameter specifies the quotation symbol
For CSV to JSON preprocessing If the With header row checkbox is marked, the header line values will be interpreted as column names
For details on XML to JSON preprocessing, refer to our serialization rules for more details.
Learn how to leverage the many types of data collection provided by Zabbix and empower your data collection and processing. Sign up for our Zabbix Certified Specialist course, where under the guidance of a Zabbix certified trainer you will learn more about different types and technologies of monitoring and learn how to get the most out of your Zabbix instance.
Let Zabbix automatically discover and start monitoring your SNMP data points.
Creating items manually for each network interface, fan, temperature sensor, and other SNMP data points can be a very time-consuming task. To save time, Zabbix administrators need to automate item, trigger, and graph creation as much as possible.
Automate item, trigger and graph creation with SNMP low-level discovery rules:
An entity will be created for each of the discovered indexes
Specify multiple OIDs to discover additional information about an entity
Filter entities based on any of the discovered OID values
Low-level discovery can be used with SNMP v1, v2c and v3
Check out the video to learn how to use Zabbix low-level discovery to discover SNMP entities.
How to use Zabbix low-level discovery to discover SNMP entities:
Navigate to Configuration → Hosts and find your SNMP host
Open the Discovery section and create a discovery rule
Provide a name, a key, and select the Type – SNMP agent
Populate the SNMP OID field with the following LLD syntax
Navigate to the Filters section and provide the LLD filters
Press Add to create the LLD rule
Open the Item prototypes section and create an item prototype
Provide the Item prototype name and key
Populate the OID field ending it with the {#SNMPINDEX} LLD macro
Configure the required tags and preprocessing rules
Press Add to create the item prototype
Wait for the LLD rule to execute and observe the discovered items
Tips and best practices
snmpwalk tool can be used to list the OIDs provided by the monitored device
If a particular entity does not have the specified OID, the corresponding macro will be omitted for it
OIDs can be added to your LLD rule for usage in filters and tags
The {#SNMPINDEX} LLD macro is discovered automatically based on the indexes listed for each OID in the LLD rule
Learn how Zabbix low-level discovery rules can be used to automate the creation of your Zabbix entities by attending our Zabbix Certified Professional course. During the course, you will learn the many use cases of low-level discovery by performing a variety of practical tasks under the guidance of a Zabbix certified trainer.
Collect metrics from HTTP endpoints such as web application APIs by defining HTTP agent items.
Collecting metrics from web services and applications is a complex affair usually done by scripting around CLIs and APIs. Organizations require an efficient way to monitor such and endpoints and react to collected data.
Collect and react to data from web services and applications with Zabbix HTTP agent items:
Collect metrics agentlessly using HTTP/HTTPS protocols
Collect metrics in bulk to reduce the number of outgoing requests
Zabbix preprocessing can be utilized to extract the required metrics from the response
Select from multiple HTTP authentication types
Check out the video to learn how to define HTTP items and collect metrics from HTTP endpoints.
Define HTTP items and collect metrics from HTTP endpoints:
Navigate to Configuration → Hosts and find your host
Open the Items section and press the Create item button
Select Type – HTTP agent
Provide the item key, name and URL
For now, set the Type of information to Text
Optionally, provide the request body and required status codes
Press the Test button and then press Get value and test
Save the resulting value to help you define the preprocessing steps
Navigate to the Preprocessing tab
Define a JSONPath preprocessing step to extract a value from the previous test result
Navigate to the Item section
Change the Type of information to Numeric (float)
Perform the item test one more time
Press Add to add the item
Tips and best practices
HTTP item check is executed by Zabbix server or Zabbix proxy
Zabbix will follow redirects if the Follow redirects option is checked
HTTP items have their own Timeout parameter defined in the item configuration
Receiving a status code not listed in the Required status codes field will result in the item becoming unsupported
Learn how to automate your Zabbix configuration workflows and integrate Zabbix with external systems by signing up for the Automation and Integration with Zabbix API course. During the course, students will learn how to use the Zabbix API by implementing different use cases under the guidance of a Zabbix certified trainer.
Define custom agent keys to collect custom metrics by executing scripts or commands with Zabbix user parameters.
Having a simple way to extend the metric collection functionality of a monitoring tool can be vital if we wish to monitor custom in-house software or simply collect metrics not available out of the box.
Collect custom metrics with Zabbix agent by defining user parameters:
Define an unlimited number of user parameters for your Zabbix agents
Parameters such as usernames and passwords can be passed to flexible user parameters
User parameters support Zabbix agent data collection in active and passive modes
User parameters can collect bulk data for further processing by dependent items
Check out the video to learn how to define user parameters for Zabbix agents.
Define user parameters for Zabbix agents:
Test your custom command on the host on which you will create the user parameter
Open the Zabbix agent configuration file in a text editor
A simple user parameter can be defined by adding the line: UserParameter=key,command
A flexible user parameter can be defined by adding the line: UserParameter=key[*],command
For flexible user parameters, use $1…$9 positional references to reference your custom key parameters
Save the changes
Reload user parameters by using the command zabbix_agentd -R userparameter_reload
Open the Zabbix frontend and navigate to Configuration → Hosts
Find your host and click on the Items button next to the host
Press the Create item button
Give your item a name and select the item type – Zabbix agent or Zabbix agent (active)
Provide the key that you defined as your user parameter key
For flexible user parameters, provide the key parameters
Press the Test button and then press Get value and test to test your user parameter
Press the Add button to add the item
Tips and best practices
User parameter commands need to be executed within the Zabbix agent Timeout parameter value
User parameters can be reloaded by executing the zabbix_agentd -R userparameter_reload command
User parameters can be defined in the Zabbix agent configuration file, or the files specified by the Include parameter
By default, certain symbols are not permitted to be used in user parameters
The usage of restricted characters can be permitted by setting the value of UnsafeUserParameters parameter to 1
Learn how to leverage the many types of data collection provided by Zabbix and empower your data collection and processing. Sign up for our Zabbix Certified Specialist course, where under the guidance of a Zabbix certified trainer you will learn more about different types and technologies of monitoring and learn how to get the most out of your Zabbix instance.
Collect and react on entries in your Windows or Linux logs with Zabbix log monitoring.
Log file entries can contain OS or application-level information that can help you react proactively to potential issues or track the root cause of a problem after it has occurred. For this reason, keeping a constant lookout for issues in mission-critical log files is vital.
Collect log file entries with Zabbix agent and react on them:
Zabbix agent can monitor log files on Windows and Unix-like operating systems
Decide between collecting every log entry or only entries matching your criteria
Monitor Windows event logs and collect entries matching specific severity, source or eventid
Choose between returning the whole log line or simply count the number of matched lines
Check out the video to learn how to collect and match log file entries.
How to match and collect log file entries:
Navigate to Configuration → Hosts
Find your Host
Click on the Items button next to the host
Click the Create item button
Select the item type – Zabbix agent (active)
Make sure that the Type of information is selected as Log
Provide the item name and key
Select the log item key
Use the log file as the first parameter of the key
The second parameter should contain a regular expression used to match the log lines
Optionally, provide the log time format to collect the local log timestamp
Set the Update interval to 1s
Press the Add button
Generate new log line entries
Navigate to Monitoring → Latest data
Confirm that the matching log entries are being collected
Tips and best practices
Log monitoring is supported only by active Zabbix agent
If restarted, Zabbix agent will continue monitoring the log file from where it left off
The mode log item parameter can be used to specify should the monitoring begin from the start of the file or its latest entry
The logrt item can be used to monitor log files that are being rotated
The output parameter can be used to output specific regexp capture groups
Learn how to configure and optimize your log monitoring by attending our Zabbix Certified Specialist course, where under the guidance of a Zabbix certified trainer you will obtain hands-on experience with different log file monitoring items and learn how to create trigger expressions to detect problems based on the collected log lines.
Provide context and define custom problem thresholds by using Zabbix user macros.
Problem thresholds can vary for the same metric on different monitoring endpoints. We can have a server where having 10% of free space is perfectly fine, and a server where anything below 20% is a cause for concern.
Define Zabbix user macros with context:
Override the default macro value with a context-specific value
Add flexibility by using context macros as problem thresholds
Define a default value that will be used if a matching context is not found
Any low-level discovery macro value can be used as the context
Check out the video to learn how to define and use user macros with context:
How to define macros with context:
Navigate to Configuration → Hosts
Click on the Discovery button next to your host
Press the Create discovery rule button
We will use the net.if.discovery key to discover network interfaces
Add the discovery rule
Press the Item prototypes button
Press the Create item prototype button
We will use the net.if.in[“{#IFNAME}”] item key
Add the Change per second and Custom multiplier:8 preprocessing steps
Add the item prototype
Press the trigger prototypes button
Press the Create trigger prototype button
Create a trigger prototype: avg(/Linux server/net.if.in[“{#IFNAME}”],1m)>{$IF.BAND.MAX:”{#IFNAME}”}
Add the trigger prototype
Click on the host and navigate to the Macros section
Create macros with context
Provide context for interface names: {$IF.BAND.MAX:”enp0s3″}
Press the Update button
Simulate a problem and check if context is taken into account
Tips and best practices
Macro context can be matched with static text or a regular expression
Only low-level discovery macros are supported in the context
Simple context macros are matched before matching context macros that contain regular expressions
Macro context must be quoted with ” if the context contains a } character or starts with a ” character
Learn how to get the most out of your low-level discovery rules to create smart and flexible items, triggers, and hosts by registering for the Zabbix Certified Professional course. During the course, you will learn how to enhance your low-level discovery workflows by using overrides, filters, macro context, and receive hands-on practical experience in creating fully custom low-level discovery rules from scratch.
Many of us have visited a number of different conferences over the years. The setting and the goal of the conferences can vary by a large degree – from product presentations to technology stack overviews and community get-togethers. Zabbix Summit is somewhat special in that, as it aims to combine all of the aforementioned goals and present them in a friendly, inclusive, and approachable manner.
As an open-source product with a team consisting of open-source enthusiasts, it is essential for us to ensure that the core tenets of what we stand for are also represented in the events that we host, especially so for Zabbix Summit. Our goal is for our attendees to feel right at home and welcome during the Summit – no matter if you’re a hardened IT and monitoring professional or just a beginner looking to chat and learn from the leading industry experts.
Connecting with the Zabbix community
Networking plays a large part in achieving the goals that we have set up for the event. From friendly banter during coffee breaks and speeches (you never know when a question will turn into a full-fledged discussion) to the evening fun-part events – all of this helps us build our community and encourages people to help each other and mutually contribute to each other’s projects.
Of course, the past two years have challenged our preconceptions of how such an event can be hosted in a way where we achieve our usual goals. While hosting a conference online can make things a bit more simple (everyone is already in the comfort of their home or office and organizers don’t have to spend time and other resources renting a venue, for example) the novelty of “online events” can wear of quite quickly. The conversations don’t flow as naturally as they do in person. Perusing through a list of attendees in Zoom isn’t quite the same as noticing a friend or recognizing an acquaintance while standing in line at the snack bar. As for the event speakers – steering your presentation in the correct direction can be quite complex without observing the emotional feedback of your audience. Are they bored? Are they excited? Is everyone half asleep 5 minutes in? Who knows.
With travel and on-premise events slowly becoming a part of our lives again, we’re excited to get back to our usual way of hosting Zabbix Summit. In 2022, it will be held on-premises in Riga, Latvia on October 7-8, and we can’t wait to interact with our community members, clients, and partners face-to-face again!
Making the best Zabbix Summit yet
As with every Zabbix Summit, this year’s event will build on the knowledge and feedback we have gained in previous years to make this year’s Summit the best it has ever been. This year will be special for us – we will be celebrating the 10th anniversary of the Zabbix Summit hosted on-premises! In addition to conducting the event on-site, we will also be live-streaming the event online, so if you can’t meet us in person – tune in and say hello to the Zabbix team virtually!
Zabbix Summit 2019 conference venue
Over the years we have managed to define a set of criteria for the Zabbix Summit speeches with the goal to provide content that can deliver unique value to our attendees. As a Zabbix certified trainer, a Zabbix fan, and a long-time Zabbix user, I know that there are certain types of speeches that immediately attract my attention:
In-depth Zabbix functionality overviews from Zabbix experts or Zabbix team members
Unique business monitoring use cases
Custom Zabbix integrations, applications, and extensions
How Zabbix is used in the context of the latest IT trends (e.g.: Kubernetes, cloud environments, configuration management tools such as Ansible and Chef)
Designing and scaling Zabbix deployments for different types of large and distributed environments
This is something that we try to put extra focus on for the Zabbix Summit. Speeches like these are bound to encourage questions from the audience and serve as a great demonstration of using Zabbix outside the proverbial box that is simple infrastructure monitoring.
Looking back at Zabbix Summit 2021, we had an abundance of truly unique speeches that can serve as guidelines for complex monitoring use cases. Some of the speeches that come to mind are Wolfgang Alper’s Zabbix meets television – Clever use of Zabbix features, where Wolfgang talked about how Zabbix is used in the broadcasting industry to collect Graylog entries and even monitor TV production trucks!
As Zabbix has greatly expanded its set of features since the previous year’s summit, this year we expect the speeches to cover an even larger scope of topics related to many different industries and technology stacks.
Workshops – what to expect
Workshops are a whole other type of ordeal. In an environment where we can have participants coming from different IT backgrounds with very different skill sets, it’s important to make the workshop interesting, while at the same time making it accessible to everyone.
Zabbix workshop session at the Zabbix Summit 2019
There are a few ways we go about this to ensure the best possible workshop experience for our Zabbix Summit attendees:
Use native Zabbix features to configure and deploy unique use cases
Focus on a thorough analysis of a particular feature, uncovering functionality that many users may not be aware of
Demonstrate the latest or even upcoming Zabbix features
Interact with the audience and be open to questions and discussions
In the vast majority of cases, this allows keeping a smooth pace during the workshop while also having fun and discussing the potential use cases and the functionality of the features on display.
Becoming Zabbix certified during Zabbix Summit 2022
But why stop at workshops? During the Zabbix Summit conferences, we always give our attendees a chance to test their knowledge by attempting to pass the Zabbix certified user, specialist, or professional certification exams. The exams not only test your proficiency in Zabbix but can also reveal some missing pieces in your Zabbix knowledge that you can discuss with the Zabbix community right on the spot. Receiving a brand new Zabbix certificate is also a great way to start your day, won’t you agree?
A moment of jubilation for our freshly certified Zabbix specialists and professionals
This year the Summit attendees will also get the chance to participate in Zabbix one-day courses focused on problem detection, Zabbix security, Zabbix API, and data pre-processing. Our trainers will walk you through each of these topics from A-Z and they’re worth checking out both for Zabbix beginners as well as seasoned Zabbix veterans. I can attest that by the end of the course you will have a list of features that you will want to try out in your own infrastructure – and I’m saying that as a Zabbix-certified expert.
As for those who already have Zabbix 5.0 certifications – we’ve got a nice surprise in store for you too. We will be holding Zabbix certified specialist and professional upgrade courses, which will get you up to speed with the latest Zabbix 6.0 features and upgrade your certification level to Zabbix 6.0 certified specialist and professional.
Scaling up the Zabbix Summit
But we haven’t slumbered for the last two years of working and hosting events remotely. We have continued growing as a team and expanding our partner and customer network. Who knows what surprises October will bring, but currently our plan is for Zabbix Summit 2022 to reflect our growth.
Zabbix team at the Zabbix Summit 2019
Currently, we stand to host approximately 500 attendees on-site and expect the online viewership to reach approximately 7000 unique viewers from over 80 countries all across the globe.
With over 20 speakers from industries such as banking and finance, healthcare and medical, IT & Telecommunications, and an audience consisting of system administrators, engineers, developers, technical leads, and system architects, Zabbix Summit is the monitoring event for knowledge sharing and networking across different industries and roles.
The fun part
Spending the major part of the day networking and partaking in knowledge sharing can be an amazing experience, but when all is said and done, most of us will want to unwind after an eventful day at the conference. The Zabbix Summit conference fun part events are where you will get to strengthen your bonds with other fellow Zabbix community members and simply relax in an informal atmosphere.
Zabbix Summit 2019 Sunset afterparty
The Zabbix Summit fun part consists of three parties.
Kick off Zabbix Summit 2022 by joining the Zabbix team and your fellow conference attendees for an evening of social networking and fun over cocktails and games at the Meet & Greet party.
Join the main networking event to mark the 10th anniversary of the Zabbix Summit. Apart from good vibes, cool music, and like-minded people, expect the award ceremony honoring the most loyal Zabbix Summit attendees, fun games to play, and other entertaining activities.
Celebrate the end of the Zabbix Summit 2022 by attending the closing party where you can network with conference peers and discuss the latest IT trends with like-minded people in a relaxed atmosphere.
Zabbix Summit 2019 Main party
Invite a travel companion
Zabbix Summit is also a great chance to take a friend or a loved one to the conference. The conference premises are located in the very heart of Riga – perfect for taking strolls across and exploring Riga Old Town.
If you’re interested in a more guided experience for your companion, we invite you to register for the Travel companion upgrade. Your travel companion will get to enjoy the Riga city tour followed by a lunch with the rest of the guests accompanying the Zabbix conference participants. Last time, we nurtured our travel companions with a delightful tour across the Riga Central market, accompanied by the Latvian-famous chef Martins Sirmais, and full of local food tasting. Our team is preparing something special also for this year. The tour will take place on October 7 during the conference time.
Visit the Zabbix offices
Are you a fan of the product and what we stand for? Why not pay us a visit and attend the Zabbix open doors day on October 6 from 13:00 till 15:00. Take a tour of the office and sit down with us for an informal chat and a cup of coffee or tea. There won’t be any speeches, workshops, or presentations, just friendly conversations with Zabbix team, our partners, and the community to warm up before the Summit. Although, there might be friendly foosball and office badminton tournaments if any volunteers will appear.
Welcoming our community members at the Zabbix Summit 2019 Open Doors day
All things said and done – Zabbix Summit is not only about deep technical knowledge and opinion sharing on monitoring. It is and has always been primarily a celebration of the Zabbix community. It is the community feedback that largely shapes the Zabbix summit and helps us build upcoming events on the foundations laid in the previous year. Throughout the years Zabbix summit has grown into much more than a simple conference – it’s an opportunity to travel, visit us, connect with like-minded people and spend a couple of days in a relaxed atmosphere in the heart of a beautiful Northern European city.
Suppress problems indefinitely or until a specific point in time with the problem suppression feature.
There are plenty of use cases when detected infrastructure or business problems need to be temporarily suppressed, and the alerting workflows have to be paused. This applies to scenarios such as emergency maintenance, unexpected load on your systems, migrations to new environments, and many others.
Use Zabbix problem suppression feature to suppress unwanted problems and pause your alerts:
Suppress problems indefinitely or until a specific point in time
Suppress a single problem or together with all of the related problems
Pause your actions until the problem suppression is over
Use relative or absolute time syntax to suppress problems until a specific point in time
Check out the video to learn how to use the problem suppression feature:
How to suppress unwanted problems:
Open the Monitoring – Problems page or a Problems widget
Find the problem that you wish to suppress
Press the No button under the Ack column
Select the suppression scope
Mark the Suppress checkbox
Select the suppression method
If you have selected Until provide the date or suppression interval
Optionally, provide a message that will be visible to others
Press the Update button
Once the window has been refreshed, the problem will be hidden
Open the Problems widget or the Problems page configuration
Mark the Show suppressed problems checkbox
Inspect the suppressed problem
Tips and best practices
Once suppressed the problem is marked by a blinking suppression icon in the Info column, before being hidden
A suppressed problem may be hidden or shown, depending on the problem filter/widget settings
Suppression details are displayed in a popup when positioning the mouse on the suppression icon in the Actions column
The event.acknowledge API method can be used to suppress/unsuppress a problem via Zabbix API
Do you wish to learn how to automatically detect and resolve complex problems in your infrastructure by creating smart problem thresholds? Check out the Advanced Problem and Anomaly Detection with Zabbix training course, where under the guidance of a Zabbix certified trainer you will learn how to get the most out of Zabbix problem detection.
The Zabbix team is pleased to announce the release of the latest Zabbix major version – Zabbix 6.2! The latest version delivers features aimed at improving configuration management and performance on large Zabbix instances as well as extending the flexibility of the existing Zabbix functionality.
New features
A brief overview of the major new features available with the release of Zabbix 6.2:
Ability to suppress individual problems
Suppress problems indefinitely or until a specific point in time
Support of CyberArk vault for secret storage
Official AWS EC2 template
discover and monitor AWS EC2 performance statistics, alarms, and AWS EBS volumes
Ability to synchronize Zabbix proxy configuration directly from Zabbix frontend
Configuration synchronization is supported by active and passive proxies
Improved flexibility for hosts discovered from host prototypes
Link additional templates
Create and modify user macros
Populate the host with new tags
New items for VMware monitoring
The ability to further customize the hosts discovered by VMware discovery
Active agent check status can now be tracked from Zabbix frontend
Newly created items are now checked within a minute after their creation
Execute now functionality is now available from the Latest data section
A warning message is now displayed when performing Execute now on items that do not support it
Templates are now grouped in template groups, instead of host groups
Improved host and template filtering
Multiple LDAP servers can now be defined and saved under Authentication – LDAP settings
Ability to collect Windows registry key values with the new registry monitoring items
New item for OS process discovery and collecting individual process statistics
New digital clock widget
The default Global view dashboard has been updated with the latest Zabbix widgets
The Graph widget has been further improved
Added stacked graph support
Legend now provides additional information
Added support of simple trigger display
UI forms now provide direct links to the relevant documentation sections
Many other improvements and features
Enhance the observability of your VMware infrastructure with the new itemsTrack your EC2 instances in a single pane of glass viewSuppress problems indefinitely or until a specific point in timeTrack the active agent interface status from Zabbix frontend
New templates and integrations
Zabbix 6.2 comes pre-packaged with many new templates for the most popular vendors:
Envoy proxy
HashiCorp Consul
AWS EC2 Template
CockroachDB
TrueNAS
HPE MSA 2060 & 2040
HPE Primera
The S.M.A.R.T. monitoring template has received improvements
Zabbix 6.2 introduces a webhook integration for the GLPI IT Asset Management solution. This webhook can be used to forward problems created in Zabbix to the GLPi Assistance section
Zabbix 6.2 packages and images
The official Zabbix packages and images are available for:
Linux distributions for different hardware platforms on RHEL, CentOS, Oracle Linux, Debian, SUSE, Ubuntu, Raspbian, Alma Linux, Rocky Linux
Virtualization platforms based on VMware, VirtualBox, Hyper-V, XEN
Docker
Packages and precompiled agents for most popular platforms, including macOS and MSI packages for Windows
One-click deployments for the following cloud platforms are coming soon:
AWS, Azure, Google Cloud, Digital Ocean, Linode, Oracle Cloud, Red Hat OpenShift
Upgrading to Zabbix 6.2
In order to upgrade to Zabbix 6.2, you need to upgrade your repository package and download and install the new Zabbix component packages (Zabbix server, proxy, frontend, and other Zabbix components). When you start the Zabbix Server, an automatic database schema upgrade will be performed. Zabbix agents are backward compatible; therefore, it is not required to install the new agent versions. You can do it at a later time if needed.
If you’re using the official Docker container images – simply deploy a new set of containers for your Zabbix components. Once the Zabbix server container connects to the backend database, the database upgrade will be performed automatically.
You can find step-by-step instructions for the upgrade process to Zabbix 6.2 in the Zabbix documentation.
Join the webinar
If you wish to learn more about the Zabbix 6.2 features and improvements, we invite you to join our What’s new in Zabbix 6.2 public webinar.
During the webinar, you will get the opportunity to:
Learn about the Zabbix 6.2 features and improvements
See the latest Zabbix templates and integrations
Participate in a Q&A session with Zabbix founder and CEO Alexei Vladishev
Discuss the latest Zabbix version with Zabbix community and Zabbix team members
Anyone can sign up and attend the webinar at absolutely no cost
Deploy your Zabbix servers and proxies in the Azure cloud.
There are many use cases where deploying your Zabbix server or Zabbix proxies in the cloud can reduce costs, provide an additional layer of security and redundancy, and improve the available management toolset.
Deploy your Zabbix instance in the Azure cloud with the official Zabbix cloud images:
Cloud images are available for the latest Zabbix server and proxy versions
Deploy a fresh Zabbix instance in 5 minutes
Dynamically scale the cloud resources
Select the deployment options based on your budget
Check out the video to learn how to deploy Zabbix in the Microsoft Azure cloud platform:
How to deploy Zabbix in the Azure cloud platform:
Navigate to the Zabbix Cloud Images page
Select the Microsoft Azure vendor and Zabbix server cloud image
Press the Get it now button and press Continue in the next window
On the deployment page press the Create button
Provide the virtual machine name, resource group, region
Specify the administrator account settings
Provide the disk, network, tag, and advanced settings
Verify the provided settings
Press Create to begin deploying the virtual machine
For public key authentication: download and store the private key
Once the deployment is complete, press the Go to resource button
Save your public IP address and connect to it via SSH
Save the initial frontend username and password
Use the public IP address to connect to your Zabbix frontend
Log in with the saved username and password obtained
Tips and best practices
The default SSH user is called azureuser
Remember to store your SSH private key in a secure location
You can access the Zabbix database by using the root user
The password for the MySQL database root user is stored in /root/.my.cnf configuration file
Feeling overwhelmed with deploying and managing your Zabbix instance? Check out the Zabbix certified specialist courses, where under the guidance of a Zabbix certified trainer, you will learn how to deploy, configure and manage your Zabbix instance.
Monitor and react to unexpected or faulty outputs from your monitoring targets by using Zabbix validation preprocessing.
In case of a failure, some monitoring endpoints like sensors or specific application or OS level counters can start outputting faulty metrics. Such behavior needs to be detected and reacted to as soon as possible.
Use Zabbix preprocessing to validate the collected metrics:
Select from and combine multiple preprocessing validation steps
Display a custom error message in case of an unexpected metric
Discard or change the value in case of an unexpected metric
Create an internal action to react to items becoming not supported
Check out the video to learn how to use preprocessing to detect invalid metrics.
Define preprocessing steps and react on invalid metrics:
Navigate to Configuration → Hosts and find your host
Click on the Items button
Find the item for which the preprocessing steps will be defined
Open the item and click on the Preprocessing tab
For our example, we will use the Temperature item
Select the In range preprocessing step
Define the min and max preprocessing parameters
Mark the Custom on fail checkbox
Press the Set error to button and enter your custom error message
Press the Update button
Simulate an invalid metric by sending an out-of-range value to this item
Navigate to Configuration → Hosts → Your Host → Items
Observe the custom error message being displayed next to your item
Tips and best practices
Validation preprocessing can check for errors in JSON, XML, or unstructured text with JSONPath, XPath, or Regex
User macros and low-level discovery macros can be used to define the In range validation values
The Check for not supported value preprocessing step is always executed as the first preprocessing step
Internal actions can be used to define action conditions and receive alerts about specific items receiving invalid metrics
Analyze your incoming metrics and look for interruptions in continuously increasing or decreasing metrics with the monoinc and monodec history functions.
A continuous increase or decrease is the norm for metrics such as server uptime, time remaining until a task is executed, number of daily transactions, and many other such use cases. A software or hardware failure could impact these counters and we need to ensure that they are providing the data in an expected manner.
Use monoinc and monodec history functions and detect if value monotonicity is true or false:
Detect monotonicity over a number of values or a time period
Strict and weak modes of monotonicity detection
Receive alerts if a metric is not monotonic
The monotonicity check can be combined with other functions to create flexible problem generation logic
Check out the video to learn how to use the monoinc and monodec history functions
How to configure monoinc and monodec history functions:
Identify the items for which you wish to detect monotonicity
For this example, the system.uptime key is used
Navigate to Configuration → Hosts → Your host → Triggers
Press the Create trigger button
Provide the trigger name and severity
Press the Add button to add the trigger expression
Select the item, the monoinc function, evaluation period, mode and result
For this example, we will use the strict mode
An example expression: monoinc(/Linux server/system.uptime,1h,”strict”)=0
Simulate a problem by restarting the host
Navigate to Monitoring → Problems
Confirm that the problem has been generated
Tips and best practices
The functions return 1 if all elements in the evaluation period continuously decrease or increase, 0 otherwise
The default mode – weak, checks if every value is bigger/smaller or the same as the previous one
The strict mode checks if every value has increased/decreased
Relative and absolute time shifts can be used to analyze time periods for monotonicity
Automate host creation and monitoring with Zabbix network discovery.
Creating hosts for a large number of monitoring endpoints can become a menial and time-consuming task. It is important to provide the end-users with the tools to automate such tasks to create and start monitoring hosts based on a user-defined set of rules and conditions.
Automate host onboarding and offboarding with Zabbix network discovery:
Discover monitoring endpoints and services in user defined IP ranges
Define a set of services that should be discovered
Provide custom workflows based on the received values
Onboard or offboard hosts based on the discovery status
Check out the video to learn how to discover your monitoring endpoints with Zabbix network discovery.
How to configure Zabbix network discovery:
Navigate to Configuration → Discovery
Press the Create discovery rule button service button
Provide the discovery rule name, IP range and update interval
Define discovery checks
Press the Add button
Navigate to Configuration → Actions → Discovery actions
Press the Create action button
Provide the action name and action conditions
Navigate to the Operations tab
Define operations to assign templates and host groups
Press the Add button
Wait for the services to be discovered
Navigate to Monitoring → Discovery and confirm the discovery status
Confirm that the hosts have been created in Zabbix
Tips and best practices
A single discovery rule will always be processed by a single Discoverer process
Every check of a service and a host generates one of the following events: Host or service – Discovered/Up/Lost/Down
The hosts discovered by different proxies are always treated as different hosts
A host is also added, even if the Add host operation is missing, if you select operations resulting in actions on a host, such as enable/disable/add to host group/link template
Configure and deploy flexible business services and monitor the availability of your business and its individual components.
The availability of a business service tends to depend on the state of many interconnected components. Therefore, detecting the current state of a business service requires a sufficiently complex and flexible monitoring logic.
Define flexible business service trees and stay informed about the state of your business services:
Business services can depend on an unlimited number of underlying components
Select from multiple business service status propagation rules
Calculate the business service state based on the weight of the business service components
Receive alerts whenever your business service is unavailable
Check out the video to learn how to configure business service monitoring.
How to configure business service monitoring:
Navigate to Services – Services
Click the Edit button and then click the Create service button
For this example, we will define an Online store business service
Name your service and mark the Advanced configuration checkbox
Click the Add button under the Additional rules
Set the service status and select the conditions
For this example, we will set the status to High
We will use the condition “If weight of child services with Warning status or above is at least 6“
Set the Status calculation rule to Set status to OK
Press the Add button
Press the Add childservice button
For this example, we will define Web server child services
Provide a child service name and a problem tag
For our example, we will use node name Equals node # tag
Mark the Advanced configuration checkbox and assign the service weight
Press the Add button
Repeat steps 12 – 17 and add additional child services
Simulate a problem on your services so the summary weight is >= 6
Navigate to Services – Services and check the parent service state
Tips and best practices
Service actions can be defined in the Services → Serviceactions menu section
Service root cause problem can be displayed in notifications with the {SERVICE.ROOTCAUSE} macro
Service status will not be propagated to the parent service if the status propagation rule is set to Ignore this service
Service-level tags are used to identify a service. Service-level tags are not used to map problems to the service
Track the creation of new entities, updates to the existing configuration, and potential intrusion attempts with Zabbix audit log.
If your monitoring environment is managed by more than a single administrator, it can become hard to track the implemented changes and additions. Having a detailed audit log can help you analyze any potentially unwanted changes and detect potential intrusion attempts.
Use Zabbix audit log to track changes in your environment:
Track configuration changes and updates
Audit log displays information about Zabbix server and frontend operations
Identify potential intrusion attempts and their source
Filter the audit log by action and resource types
Check out the video to learn how to track changes in Zabbix audit log.
How to track changes in Zabbix audit log:
Navigate to Administration → General → Audit log
Enable and configure your Zabbix audit log settings
Perform a failed login attempt
Check the related entries under Reports → Audit log
Navigate to Configuration → Hosts
Import hosts or templates from a YAML file
Check the related entries under Reports → Audit log
Filter the entries by the Recordset ID
Navigate to Configuration → Hosts
Find a host with a low-level discovery rule on it
Execute the low-level discovery rule
Check the related entries under Reports → Audit log
Tips and best practices
Audit logging should be enabled in the Administration settings to collect audit records
Audit log entry storage period can be defined under Administration → General → Audit log
Each audit log entry belongs to a Recordset ID which is shared by entries created as a result of the same operation
auditlog.get API method can be used to obtain audit log entries via the Zabbix API
Secure your Zabbix logins from brute-force and dictionary attacks by defining password complexity requirements.
Enforcing an organization-wide password policy can be extremely unreliable if we don’t have a toolset to enforce these policies. By using native password complexity settings, we can provide an additional layer of security and ensure that our users follow our organization’s password complexity policies.
