3 Windows的最低权限级别 agent 监控项

概述

使用agent进行系统监控时，最佳实践是从安装agent的主机获取指标。为了遵循最小权限原则，需要明确从agent获取了哪些指标。

本文档中的表格可帮助您选择确保Zabbix agent正常运行所需的最低权限。

如果为agent运行选择了不同于“LocalSystem”的用户，则为了将agent作为Windows服务运行，新用户必须拥有“以服务身份登录”的权限（位于“本地策略→用户权限分配”中），以及创建、写入和deleteZabbix agent日志文件的权限。此外，Active Directory用户还必须加入“Performance Monitor Users”组。

当基于“技术上可接受的最低权限”组配置agent权限时，需要预先授予对objects的监控权限。

Windows 上支持的常用 agent 监控项

监控项键值 用户组
推荐 最低技术上可接受（功能受限）
agent.hostname Guests Guests
agent.ping Guests Guests
agent.variant Guests Guests
agent.version Guests Guests
log Administrators Guests
log.count Administrators Guests
logrt Administrators Guests
logrt.count Administrators Guests
net.dns Guests Guests
net.dns.perf Guests Guests
net.dns.record Guests Guests
net.if.discovery Guests Guests
net.if.in Guests Guests
net.if.out Guests Guests
net.if.total Guests Guests
net.tcp.listen Guests Guests
net.tcp.port Guests Guests
net.tcp.service Guests Guests
net.tcp.service.perf Guests Guests
net.udp.service Guests Guests
net.udp.service.perf Guests Guests
proc.num Administrators Guests
system.cpu.discovery Performance Monitor Users Performance Monitor Users
system.cpu.load Performance Monitor Users Performance Monitor Users
system.cpu.num Guests Guests
system.cpu.util Performance Monitor Users Performance Monitor Users
system.hostname Guests Guests
system.localtime Guests Guests
system.run Administrators Guests
system.sw.arch Guests Guests
system.swap.size Guests Guests
system.uname Guests Guests
system.uptime Performance Monitor Users Performance Monitor Users
vfs.dir.count Administrators Guests
vfs.dir.get Administrators Guests
vfs.dir.size Administrators Guests
vfs.file.cksum Administrators Guests
vfs.file.contents Administrators Guests
vfs.file.exists Administrators Guests
vfs.file.md5sum Administrators Guests
vfs.file.regexp Administrators Guests
vfs.file.regmatch Administrators Guests
vfs.file.size Administrators Guests
vfs.file.time Administrators Guests
vfs.fs.discovery Administrators Guests
vfs.fs.get Administrators Guests
vfs.fs.size Administrators Guests
vm.memory.size Guests Guests
web.page.get Guests Guests
web.page.perf Guests Guests
web.page.regexp Guests Guests
zabbix.stats Guests Guests

Windows 特定的监控项键

监控项键 用户组
推荐 最低技术上可接受（功能受限）
eventlog Event Log Readers Guests
net.if.list Guests Guests
perf_counter Performance Monitor Users Performance Monitor Users
proc_info Administrators Guests
service.discovery Guests Guests
service.info Guests Guests
services Guests Guests
wmi.get Administrators Guests
vm.vmemory.size Guests Guests