ZABBIX Forums - Zabbix Discussions and Feedback

A source to learn the very basics of OIDs and Keys in Zabbix?

John_W — Tue, 22 Sep 2026 17:35:56 GMT

Coming from Solarwinds, how Zabbix handles OIDs is different and there were no Keys to work with in SW. I've read the manual and watched videos, but it appears these topics aren't covered in the detail I need.

OIDs. Technically, the OID is just the numerical listing of a given OID, but Zabbix allows action terms like walk or get and puts the OID in brackets. It looks like you can also have a list of OIDs. I think I saw one example with macros. Perhaps that was in the Key field.

Keys. It appears there are predefined keys that have names with periods separating the portions of the name but there are some that do not. Can you create your own key using either syntax? Do the keys need to match the descriptions of the OIDs?

If there is a video that goes into the basics of OIDs and Keys that goes into the real basics of these two topics, I would really like to get a link.

Feature request: undo feature for template deletion

mikeely — Tue, 22 Sep 2026 00:11:19 GMT

Sure, for the default templates a user can simply redownload it, but if a user deletes a custom template then restoring it is a grab-bag of maybe pulling from binlogs, etc. Fraught, generally.

Proposal: Create a temporary "trash" type storage for deleted templates, allowing users to restore any templates deleted within a fixed period - perhaps 30 days since the templates themselves aren't very big.

Discovery action continues to process old IP ranges after rule modification

EddieDMorel — Mon, 21 Sep 2026 16:09:41 GMT

Hello there,

We are experiencing an issue with Zabbix network discovery rules (Zabbix version: 7.0.29).
We use discovery rules to automatically create hosts within specific IP ranges. When we modify a discovery rule and replace its IP range with a new one, Zabbix continues to discover and create hosts from the old IP range, even though that range is no longer configured in the rule.
To work around the issue, we created a cleanup action that removes hosts that do not belong to the new IP range. However, this results in a loop: the hosts are deleted by the cleanup process and then recreated again by discovery shortly afterward.
From our observations, it appears that the discovery process continues to scan both the old and the new IP ranges after the rule has been modified. The only successful workaround we have found so far is to completely delete the discovery rule and its associated actions, then recreate them from scratch using the new IP range.

We would like to understand what could cause Zabbix to continue discovering hosts from IP ranges that are no longer configured and whether there is any cache, proxy data, or discovery-related information that needs to be cleared after modifying a discovery rule.

Our environment includes a Zabbix proxy performing the discovery scans, which may be relevant to the issue.

Thanks in advance for you assistance,

Eddie

Best way to manage/add hosts (VM Servers)

rlongfield — Mon, 21 Sep 2026 15:40:57 GMT

I'm brand new to Zabbix and a bit overwhelmed with all the options.
We have a bunch of virtual servers and Citrix VDI running on VMs in VMware. I tried the VMWare VM discovery and it found all the VMs we have running.
Perhaps it's my lack of Zabbix knowledge but I can't seem to group or limit Dashboard reports to specific servers. For instance I want to create a widget that just reports on our VDAs that are in a powered off state.
My VDAs are in two groups. One group has all the VMs although it is a weirdly named (not the vSphere folder name). The other group has our Production and Development VDA's but also all the Citrix servers, they are in the same folder on vSphere.
I can't seem to isolate specific hosts for reports.

Would I be better off creating the groups I want and manually adding the VMs to the groups? Is there a way to group the discovered VMs in Zabbix that I haven't found? I can create a new folder for the Citrix Servers but I'd prefer to massage the setup/layout on the reporting side.

Thanks

Zabbix server preset graph lack of logic

Marcin_k — Sun, 20 Sep 2026 08:15:01 GMT

Zabbix Server 7.4: the preset graph for the zabbix-server host doesn't make any sense. Why is the grey area marked as total?

Combine zabbix with ML Models for Prediction

Maryam R — Sat, 19 Sep 2026 18:24:15 GMT

Has anyone built a proper ML-based predictive monitoring layer on top of Zabbix?

Asking because I genuinely couldn't find one.

And to be clear . It's about any metric that's heading toward trouble: CPU, memory, disk, queue depth, whatever. The real question is always the same: how long until this becomes a problem? Answer that early enough, and you avoid downtime and the cost that comes with it — both the financial hit and the scramble to fix things at 3am.

Zabbix's built-in forecast()/timeleft() functions are plain linear regression. Fine for something that grows in a straight line — useless for anything with a weekly pattern (backups, log rotation) or an accelerating trend. It just doesn't see it.

So I've been building a pipeline that:
→ Pulls history data via the Zabbix API
→ Trains one model pooled across ALL monitored items together — not per-item, since most metrics never actually breach a threshold within a given training window, so per-item training on crossing events alone starves on data
→ Predicts values at multiple horizons and interpolates to estimate days-to-threshold

XGBoost is just the current model — a solid, explainable baseline to prove the approach works. The pipeline itself is model-agnostic; the plan is to eventually plug in stronger ML approaches or even LLM-based reasoning on top, once the base is solid.

What I couldn't find anywhere: someone doing this for Zabbix specifically, at this level. Grafana Cloud ML offers something similar for Prometheus — nothing comparable for Zabbix shops.

Genuine question: has anyone here built or seen a similar approach for Zabbix? Would love to compare notes.

Trigger with tags does not match when filtering for trigger action

aDutchZabbixUser — Thu, 17 Sep 2026 09:22:52 GMT

I have a friend who provides me with a IPv6 uplink, because my ISP doesn't. I monitor this uplink with a couple of ping checks, and I would love for him to know when I think he is down.

Using Zabbix server and agent 7.4.14, no proxy
I have set this up as follows:

With the following tags:

The trigger looks like this:

with the following tags:

I have added an "alerts > trigger actions" action, which looks like this:

With the following operations:

But the trigger action never gets triggered:

The trigger does get triggered, because through the same messaging service (matrix) I DO get a message. That is just "all events, send to matrix room x".

The "matrix" media type is adapted from https://github.com/jooola/zabbix-matrix-webhook, specifically PR #67 that makes it ready for Matrix v3-type interface

What is going wrong here? What am I missing?

Creating links on a Map

John_W — Tue, 15 Sep 2026 21:49:54 GMT

When selecting two items on a Map, the Mass Update window opens, and I can't choose the Add link. How do I add a link, then?

Random Spikes in Utilization of configuration syncer worker internal processes

Desired — Tue, 15 Sep 2026 12:45:51 GMT

Hello there,

We recently made many of our core services highly available, zabbix server being one of them.
We're using a Patroni cluster of postgres databases behind a load balancer running on our Firewall.
This entails only one 'master' postgres server ever being read from and/or written to at any given time.
These database servers are running with SSD based storage behind them.

Zabbix was the first service we spun up to use this new Patroni cluster - previously we had a single Zabbix server v7.0.23 with a locally running MySQL backend (as opposed to postgres).
We had the same amount of hosts and general configuration from the old server, this recent exercise was really to just change to being highly available - not to change the overall host monitoring scheme or count.

This new postgres backend isn't being loaded/used-by any other services other than Zabbix at this time.
From my current research there are some suggestions this could be database slowness - though I've yet to confirm that is truly the cause and the spiking nature makes me dubious of that diagnosis.

For whatever reason we're getting random spikes of Utilization of configuration syncer worker internal processes hitting 100% for 17mins every occurrence.
The time between occurrences appears random and does not correlate with any other backend operations in our environment.

I'm attaching some graphs to show that on both HA Zabbix servers the spikes occur at the same time.
In addition is a last 7 days graph showing the inconsistency between occurrences.

I'm really stumped as to what's happening here.
Most of our hosts are Active Zabbix Agents (Linux, macOS, Windows), however the Windows Zabbix Agent Active template is the most used (by 317 hosts at this time).
I attempted to modify the template to bring the Windows services discovery to 6hr intervals rather than the default 1hr interval - but this really had no change on these spikes we're seeing.

Ultimately we're not seeing any performance or data gathering issues, but I'd like to address these spikes rather than just ignore them.

Here are some stats on our old and new server estates, do let me know if I can clarify anything further.

Old Zabbix server with MySQL Backend stats:
Zabbix server is running Yes localhost:10051
Zabbix server version 7.0.23 New update available
Zabbix frontend version 7.0.23 New update available
Number of hosts (enabled/disabled) 493 480 / 13
Number of templates 330
Number of items (enabled/disabled/not supported) 80840 77154 / 3096 / 590
Number of triggers (enabled/disabled [problem/ok]) 54706 24899 / 29807 [1307 / 23592]
Number of users (online) 21 1
Required server performance, new values per second 1138.21
High availability cluster Disabled

Current Server stats:
Zabbix server is running Yes ns-zabbix:10051
Zabbix server version 7.0.30 Up to date
Zabbix frontend version 7.0.30 Up to date
Number of hosts (enabled/disabled) 455 455 / 0
Number of templates 375
Number of items (enabled/disabled/not supported) 77048 76150 / 385 / 513
Number of triggers (enabled/disabled [problem/ok]) 51736 26458 / 25278 [448 / 26010]
Number of users (online) 17 1
Required server performance, new values per second 1119.11
High availability cluster Enabled Fail-over delay: 1 minute

Thank you for reading.

Best practice for certificate management in large Zabbix environments?

Jannis Ehrnhofer — Tue, 15 Sep 2026 12:30:42 GMT

Hello everyone,

I am currently looking into certificate-based encryption for a larger Zabbix environment and would like to understand what the recommended approach is in practice.

For organizations with many Proxies and hundreds or even thousands of Agents:
- What solution are you using for certificate management?
- Are you using an internal CA, Active Directory Certificate Services, Vault, step-ca, or something else?
- How do you handle certificate issuance and renewal at scale?
- Is the entire process automated, or is there still some manual intervention required?
- Are you using certificate-based encryption only between Zabbix Cloud and Proxies, or also between Agents and Proxies?

My goal is to have a solution that provides:
- Encrypted communication
- Automatic certificate renewal
- Minimal administrative overhead
- Good scalability for large environments

I would be very interested in hearing about real-world deployments and what has worked well (or not worked well) for your organization.

Thanks in advance!

BunkerWeb by HTTP | Zabbix 7.0 WAF monitoring template

theophile_bunkerity — Tue, 15 Sep 2026 11:18:25 GMT

Hi everyone,

I work on BunkerWeb at Bunkerity, and we have recently published a Zabbix template for monitoring BunkerWeb, an open-source Web Application Firewall and reverse proxy based on NGINX.

The template is called BunkerWeb by HTTP and targets Zabbix 7.0 LTS and later 7.x releases.

It monitors BunkerWeb directly through its Prometheus exporter endpoint. Zabbix performs a single HTTP scrape per interval, while the remaining metrics and discovery rules are implemented as dependent items using Prometheus preprocessing.

This means that no Zabbix agent needs to be installed on the BunkerWeb instance, and no separate Prometheus server is required.

WHAT IT MONITORS

• BunkerWeb version and exporter availability
• Connections and request rates
• Blocked attacks
• HTTP response codes
• Request latency
• Bandwidth
• Upstream/backend behavior
• Cache status
• TLS protocol usage
• Metric collection errors
• NGINX shared dictionary usage

The template also automatically discovers BunkerWeb services and NGINX shared dictionaries.

It includes triggers for conditions such as:

• Prometheus exporter unavailability
• Monitoring plugin not initialized
• Metric collection errors
• Sustained 5xx rates
• Elevated attack rates
• Failing upstreams
• Deprecated TLS versions
• Projected shared-dictionary exhaustion

Connection parameters, discovery filters and alert thresholds are exposed as macros, so they can be adjusted per host without modifying the template.

HOW THE COLLECTION WORKS

The master HTTP item requests the BunkerWeb exporter endpoint using the host connection details and template macros.

Default values:

{$BUNKERWEB.EXPORTER.SCHEME} = http
{$BUNKERWEB.EXPORTER.PORT} = 9113
{$BUNKERWEB.EXPORTER.PATH} = /metrics
{$BUNKERWEB.EXPORTER.INTERVAL} = 1m

All the other items and discovery rules are derived from that single scrape.

BUNKERWEB CONFIGURATION

The metrics endpoint requires the BunkerWeb Monitoring and Prometheus exporter PRO plugins.

Minimal configuration:

USE_MONITORING=yes
USE_PROMETHEUS_EXPORTER=yes
PROMETHEUS_EXPORTER_ALLOW_IP=

The Zabbix template itself is public and released under the MIT license.

For clustered deployments, one Zabbix host should be created for each BunkerWeb instance, because the exporter exposes per-instance metrics rather than aggregating the whole BunkerWeb cluster.

REPOSITORY AND DOCUMENTATION

Template source, releases and installation instructions:

https://github.com/bunkerity/bunkerweb-zabbix-template

BunkerWeb Prometheus exporter documentation:

https://docs.bunkerweb.io/latest/fea...s-exporter-pro

The latest release contains an importable template_bunkerweb.yaml file.

I would be interested in feedback from people running Zabbix 7.x, particularly on larger BunkerWeb deployments.

If you encounter an issue with discovery, preprocessing, triggers, or have metrics you think would be useful to add, feedback is welcome here or through the GitHub repository.

Zabbix queue backlog with IIS AppPool current queue size items

andrewkirwin — Tue, 15 Sep 2026 10:25:09 GMT

Zabbix Server: 7.0.17
Zabbix Agent 2 (Windows): 7.0.30
Client: Windows Server 2022 Standard
Template: IIS by Zabbix Agent (7.0-3)

Hi All,

I am experiencing an issue with the IIS by Zabbix Agent AppPool current queue size item getting stuck in the queue when the AppPool is stopped, or running but unassigned.

I have investigated the Zabbix Agent 2 logs on the client machine and believe I have found the culprit, but was wondering if anyone else has seen or been able to resolve this issue?

got nil value, skipping sending of response

I see this after the agent is queried for the AppPool current queue size of a stopped/unassigned IIS application on version 7.0.30 of the Windows client.

Rolling back to version 7.0.12 I get the below...

sending passive check response: '{"version":"7.0.12","variant":2,"data":[{value":null}]}' to 'PROXY-IP-REDACTED'

Suggesting a change in logic between the versions, where the older version sends a "null" value and the newer version doesn't send anything.

Sending nothing means the item sits in the queue on the server... waiting for a value... forever.

Thanks in advance for you assistance,

Andrew

how to alert notification configure in zabbix

Networkmonitor — Tue, 15 Sep 2026 07:16:14 GMT

alert notification configure in zabbix ?

Dell Server IDrac Custom Template Required for all Dell servers

prabhudas — Tue, 15 Sep 2026 07:08:08 GMT

Hi Team Please suggest good template for Dell Server IDrac Custom data required??

Display ITEM.VALUE number of lines in Trigger Event Name

opol — Mon, 14 Sep 2026 11:30:28 GMT

Hi, I am monitoring log files and would like to display in network map the number of lines in Item.Value.
In fact, the trigger raises an event when this item.value is different from standard content.
Is there a way with a Macro to have this info ?
Thanks and Regards,