Sidebar

5 Windows agent itemsWindows agent监控项的最低权限级别

概述

使用agent监控系统时,一个好的做法是获取 来自安装agent的主机的指标。要使用 最小权限原则,有必要确定哪些指标 是从agent那里获得的。

本文档中的表格允许您选择最低权限 保证 Zabbix agent的正确运行。

如果给agent选择了不同的用户,而不是"LocalSystem",那么为了将agent作为 Windows 服务运行,新用户必须具有“本地策略→用户权限分配"中的"作为服务登录”权限分配”以及创建、写入和删除 Zabbix 代理日志文件的权利. 必须将 Active Directory 用户添加到性能监视器用户组.

在基于agent的权限处理问题上,需要给出 "最低技术上可接受 "的权限组,并且事先为监控对象提供权限.

Windows 上支持的常用代理项

监控项 key 用户组
推荐的 最低技术上可接受的权限组 (功能有限)
agent.hostname Guests Guests
agent.ping Guests Guests
agent.variant Guests Guests
agent.version Guests Guests
log Administrators Guests
log.count Administrators Guests
logrt Administrators Guests
logrt.count Administrators Guests
net.dns Guests Guests
net.dns.record Guests Guests
net.if.discovery Guests Guests
net.if.in Guests Guests
net.if.out Guests Guests
net.if.total Guests Guests
net.tcp.listen Guests Guests
net.tcp.port Guests Guests
net.tcp.service Guests Guests
net.tcp.service.perf Guests Guests
net.udp.service Guests Guests
net.udp.service.perf Guests Guests
proc.num Administrators Guests
system.cpu.discovery Performance Monitor Users Performance Monitor Users
system.cpu.load Performance Monitor Users Performance Monitor Users
system.cpu.num Guests Guests
system.cpu.util Performance Monitor Users Performance Monitor Users
system.hostname Guests Guests
system.localtime Guests Guests
system.run Administrators Guests
system.sw.arch Guests Guests
system.swap.size Guests Guests
system.uname Guests Guests
system.uptime Performance Monitor Users Performance Monitor Users
vfs.dir.count Administrators Guests
vfs.dir.get Administrators Guests
vfs.dir.size Administrators Guests
vfs.file.cksum Administrators Guests
vfs.file.contents Administrators Guests
vfs.file.exists Administrators Guests
vfs.file.md5sum Administrators Guests
vfs.file.regexp Administrators Guests
vfs.file.regmatch Administrators Guests
vfs.file.size Administrators Guests
vfs.file.time Administrators Guests
vfs.fs.discovery Administrators Guests
vfs.fs.size Administrators Guests
vm.memory.size Guests Guests
web.page.get Guests Guests
web.page.perf Guests Guests
web.page.regexp Guests Guests
zabbix.stats Guests Guests

特定的监控项keys

监控项 key 用户组
推荐的 技术上可接受的最低限度 (功能有限)
eventlog Event Log Readers Guests
net.if.list Guests Guests
perf_counter Performance Monitor Users Performance Monitor Users
proc_info Administrators Guests
service.discovery Guests Guests
service.info Guests Guests
services Guests Guests
wmi.get Administrators Guests
vm.vmemory.size Guests Guests