3 Minimālais atļauju līmenis Windows aģenta vienumiem
Pārskats
Uzraugot sistēmas, izmantojot aģentu, laba prakse ir iegūt metriku no hosta, kurā aģents ir instalēts. Lai izmantotu mazāko privilēģiju principu, ir nepieciešams noteikt, kāda metrika tiek iegūta no aģenta.
Šajā dokumentā esošā tabula ļauj izvēlēties minimālās tiesības, kas nepieciešamas garantētai korektai Zabbix aģenta darbībai.
Ja aģenta darbībai tiek izvēlēts cits lietotājs, nevis 'LocalSystem', tad, lai aģents darbotos kā Windows serviss, jaunajam lietotājam jābūt piešķirtām tiesībām "Log on as a service" no "Local Policy→User Rights Assignment", kā arī tiesībām izveidot, rakstīt un dzēst Zabbix aģenta žurnālfailu. Active Directory lietotājs ir jāpievieno grupai Performance Monitor Users.
Strādājot ar aģenta tiesībām, kas balstītas uz "minimum technically acceptable" grupu, ir nepieciešama iepriekšēja tiesību piešķiršana uzraugāmajiem objektiem.
Biežāk izmantotie Windows atbalstītie aģenta vienumi
| Vienuma atslēga | Lietotāju grupa | |
|---|---|---|
| Ieteicamā | Tehniski minimāli pieļaujamā (funkcionalitāte ir ierobežota) | |
| agent.hostname | Guests | Guests |
| agent.ping | Guests | Guests |
| agent.variant | Guests | Guests |
| agent.version | Guests | Guests |
| log | Administrators | Guests |
| log.count | Administrators | Guests |
| logrt | Administrators | Guests |
| logrt.count | Administrators | Guests |
| net.dns | Guests | Guests |
| net.dns.perf | Guests | Guests |
| net.dns.record | Guests | Guests |
| net.if.discovery | Guests | Guests |
| net.if.in | Guests | Guests |
| net.if.out | Guests | Guests |
| net.if.total | Guests | Guests |
| net.tcp.listen | Guests | Guests |
| net.tcp.port | Guests | Guests |
| net.tcp.service | Guests | Guests |
| net.tcp.service.perf | Guests | Guests |
| net.udp.service | Guests | Guests |
| net.udp.service.perf | Guests | Guests |
| proc.num | Administrators | Guests |
| system.cpu.discovery | Performance Monitor Users | Performance Monitor Users |
| system.cpu.load | Performance Monitor Users | Performance Monitor Users |
| system.cpu.num | Guests | Guests |
| system.cpu.util | Performance Monitor Users | Performance Monitor Users |
| system.hostname | Guests | Guests |
| system.localtime | Guests | Guests |
| system.run | Administrators | Guests |
| system.sw.arch | Guests | Guests |
| system.swap.size | Guests | Guests |
| system.uname | Guests | Guests |
| system.uptime | Performance Monitor Users | Performance Monitor Users |
| vfs.dir.count | Administrators | Guests |
| vfs.dir.get | Administrators | Guests |
| vfs.dir.size | Administrators | Guests |
| vfs.file.cksum | Administrators | Guests |
| vfs.file.contents | Administrators | Guests |
| vfs.file.exists | Administrators | Guests |
| vfs.file.md5sum | Administrators | Guests |
| vfs.file.regexp | Administrators | Guests |
| vfs.file.regmatch | Administrators | Guests |
| vfs.file.size | Administrators | Guests |
| vfs.file.time | Administrators | Guests |
| vfs.fs.discovery | Administrators | Guests |
| vfs.fs.size | Administrators | Guests |
| vfs.fs.get | Administrators | Guests |
| vm.memory.size | Guests | Guests |
| web.page.get | Guests | Guests |
| web.page.perf | Guests | Guests |
| web.page.regexp | Guests | Guests |
| zabbix.stats | Guests | Guests |
Windows specifiskās vienumu atslēgas
| Vienuma atslēga | Lietotāju grupa | |
|---|---|---|
| Ieteicamā | Minimāli tehniski pieļaujamā (funkcionalitāte ir ierobežota) | |
| eventlog | Event Log Readers | Guests |
| net.if.list | Guests | Guests |
| perf_counter | Performance Monitor Users | Performance Monitor Users |
| proc_info | Administrators | Guests |
| service.discovery | Guests | Guests |
| service.info | Guests | Guests |
| services | Guests | Guests |
| wmi.get | Administrators | Guests |
| vm.vmemory.size | Guests | Guests |