Zabbix Agent alert on active mode?
-
Hi
I was wondering if someone could shed some light on the issue im having. Before i had my zabbix agents connecting directly to my zabbix server on different remote sites which worked fine until my zabbix got overloaded. Then on each remote site i put a zabbix proxy which helped alot on my server. So one day one of servers got shutdown and didn't alert me only 30min later which is odd. So my question is how can configure the alert of zabbix when the data stops coming in after 5min rather then 30min?Thank you
-
Hi, first of all I need to know if you did the setup to alert when agent is offline, that´s on the template configuration at the zabbix server dashboard. Simply check the active templates and triggers assigned to your agents. If not, you may need to set that first.
If you did the setup, then you may need to check how it was setup (I may assume that you did, due to you received the alert), so, to do that, simply open current trigger and verify how it´s setup, if you want to receive the alert after 5 min, it should be set on the "Expression" as: {"name of your template":agent.ping.nodata(5m)}=1 , note that the (5m) expression is the time you may need to change (probably in your case is set as 30m or 0.5h.
Hope this helps.
-
thanks for the reply, so currently running zabbix 5.0, i have a proxy on each remote site which the agents goes though the proxy which sends the data to the zabbix server. Here is the issue, when a agent goes off line it alerted me every 30mins so what i did went to the template and changed the macro from 30min to 5min. But whats odd is that it doesnt appear offline rather then in the section unknown. And whats even more odd if the zabbix proxy of the remote site goes offline it doesnt alert me just shows unknown. The template i have for the agents on windows and linux called OS windows active agent and OS linux active agent. But i implemented proxy i had it directly to the zabbix server only issue there is that my server was getting overloaded
This server has been out since 9am and has passed more then 12 hours and no alert only shows unknown
which shows like this
and on the templates you see that it has configured the trigger when no data is received
in this case its at 30min
-
@killmasta93 said in Zabbix Agent alert on active mode?:
The template i have for the agents on windows and linux called OS windows active agent and OS linux active agent. But i implemented proxy i had it directly to the zabbix server only issue there is that my server was getting overloaded
Really odd, my suggestion for the alert you´re working with is based on ping trigger (usually included on the template) instead of Timeout macro (but I´m not plenty sure that´s the reason of the issue), because, as far I can see on your screenshots or the setup its not responding to macro (may happen some times) or macro may not respond on short period of times (see the warning on "Consider to keep it relatively high"), As far I know macros are not useful on short periods of time, that´s why I have not used on my side (unless necessary)