Hi evryone,
My problem is that the Windows agent is generating many false alarms when wbadmin process is on.
At start I thing it is case of priority, but no, I change manually zabbix process priority to high and it inset solve the problem.
Interesting is what give me neststat -an from zabbix server:
On next probes it looks similar...
I changed log level to debug and i don`t see here nothing interesting...
Logs attached, https://mega.co.nz/#!wZNmwDja!B91jdw...SH9DQJx4M36i6g
This machine and zabbix server are in same network.
Conf file looks like this:
This machine is my AD controller, its double important to have true values from this machine.
Please advice what can be wrong.
I have no ideas for now
My problem is that the Windows agent is generating many false alarms when wbadmin process is on.
At start I thing it is case of priority, but no, I change manually zabbix process priority to high and it inset solve the problem.
Interesting is what give me neststat -an from zabbix server:
Probe #1
tcp 0 0 ip.ip.ip.ip:53357 ip.ip.ip.ip:10050
ESTABLISHED
Probe #2
tcp 0 0 ip.ip.ip.ip:60051 ip.ip.ip.ip:10050 ESTABLISHED
Probe #3
<EMPTY>
Probe #4
tcp 0 0 ip.ip.ip.ip:61206 ip.ip.ip.ip:10050 ESTABLISHED
Probe #5
<EMPTY>
Probe #6
tcp 0 0 ip.ip.ip.ip:37739 ip.ip.ip.ip:10050 FIN_WAIT2
tcp 0 0 ip.ip.ip.ip:38375 ip.ip.ip.ip:10050 FIN_WAIT2
tcp 0 0 ip.ip.ip.ip:39091 ip.ip.ip.ip:10050 FIN_WAIT2
tcp 0 0 ip.ip.ip.ip:38854 ip.ip.ip.ip:10050 FIN_WAIT2
tcp 0 0 ip.ip.ip.ip:37748 ip.ip.ip.ip:10050 FIN_WAIT2
tcp 0 0 ip.ip.ip.ip:38685 ip.ip.ip.ip:10050 FIN_WAIT2
tcp 0 0 ip.ip.ip.ip:38153 ip.ip.ip.ip:10050 FIN_WAIT2
tcp 0 0 ip.ip.ip.ip:45369 ip.ip.ip.ip:10050 FIN_WAIT2
tcp 0 0 ip.ip.ip.ip:37735 ip.ip.ip.ip:10050 FIN_WAIT2
tcp 0 0 ip.ip.ip.ip:37930 ip.ip.ip.ip:10050 FIN_WAIT2
Probe #7
tcp 0 0 ip.ip.ip.ip:30051 ip.ip.ip.ip:10050 ESTABLISHED
tcp 0 0 ip.ip.ip.ip:53357 ip.ip.ip.ip:10050
ESTABLISHED
Probe #2
tcp 0 0 ip.ip.ip.ip:60051 ip.ip.ip.ip:10050 ESTABLISHED
Probe #3
<EMPTY>
Probe #4
tcp 0 0 ip.ip.ip.ip:61206 ip.ip.ip.ip:10050 ESTABLISHED
Probe #5
<EMPTY>
Probe #6
tcp 0 0 ip.ip.ip.ip:37739 ip.ip.ip.ip:10050 FIN_WAIT2
tcp 0 0 ip.ip.ip.ip:38375 ip.ip.ip.ip:10050 FIN_WAIT2
tcp 0 0 ip.ip.ip.ip:39091 ip.ip.ip.ip:10050 FIN_WAIT2
tcp 0 0 ip.ip.ip.ip:38854 ip.ip.ip.ip:10050 FIN_WAIT2
tcp 0 0 ip.ip.ip.ip:37748 ip.ip.ip.ip:10050 FIN_WAIT2
tcp 0 0 ip.ip.ip.ip:38685 ip.ip.ip.ip:10050 FIN_WAIT2
tcp 0 0 ip.ip.ip.ip:38153 ip.ip.ip.ip:10050 FIN_WAIT2
tcp 0 0 ip.ip.ip.ip:45369 ip.ip.ip.ip:10050 FIN_WAIT2
tcp 0 0 ip.ip.ip.ip:37735 ip.ip.ip.ip:10050 FIN_WAIT2
tcp 0 0 ip.ip.ip.ip:37930 ip.ip.ip.ip:10050 FIN_WAIT2
Probe #7
tcp 0 0 ip.ip.ip.ip:30051 ip.ip.ip.ip:10050 ESTABLISHED
I changed log level to debug and i don`t see here nothing interesting...
Logs attached, https://mega.co.nz/#!wZNmwDja!B91jdw...SH9DQJx4M36i6g
This machine and zabbix server are in same network.
Conf file looks like this:
# This is a config file for zabbix_agent
# To get more information about Zabbix visit http://www.zabbix.com
### Option: Server
# IP address of Zabbix server
# Connections from other hosts will be denied
# If IPv6 support is enabled then '127.0.0.1', '::127.0.0.1', '::ffff:127.0.0.1' are treated equally.
#
# Mandatory: yes
# Default:
# Server=
LogFile=C:\zabbix\zabbix_agentd.log
Server=ip.ip.ip.ip
#ServerPort=10051
#ServerActive=
################################################## #####
###########BUFORY################################# #####
BufferSend=3600
BufferSize=60000
############ ADVANCED PARAMETERS #################
### Option: Alias
# Sets an alias for parameter. It can be useful to substitute long and complex parameter name with a smaller and simpler one.
#
# Mandatory: no
# Range:
# Default:
### Option: Timeout
# Spend no more than Timeout seconds on processing
#
# Mandatory: no
# Range: 1-30
# Default:
Timeout=30
### Option: Include
# You may include individual files or all files in a directory in the configuration file.
# Installing Zabbix will create include directory in /usr/local/etc, unless modified during the compile time.
#
# Mandatory: no
# Default:
# Include=
# Include=/usr/local/etc/zabbix_agent.userparams.conf
# Include=/usr/local/etc/zabbix_agent.conf.d/
####### USER-DEFINED MONITORED PARAMETERS #######
### Option: UnsafeUserParameters
# Allow all characters to be passed in arguments to user-defined parameters.
# 0 - do not allow
# 1 - allow
#
# Mandatory: no
# Default:
# UnsafeUserParameters=0
### Option: UserParameter
# User-defined parameter to monitor. There can be several user-defined parameters.
# Format: UserParameter=<key>,<shell command>
# Note that shell command must not return empty string or EOL only.
# Example: UserParameter=system.test,who|wc -l
#UserParameter=system.test,who|wc -l
### Set of parameters for monitoring MySQL server (v3.23.42 and later)
### Change -u<username> and add -p<password> if required
#UserParameter=mysql.ping,mysqladmin -uroot ping|grep alive|wc -l
#UserParameter=mysql.uptime,mysqladmin -uroot status|cut -f2 -d":"|cut -f1 -d"T"
#UserParameter=mysql.threads,mysqladmin -uroot status|cut -f3 -d":"|cut -f1 -d"Q"
#UserParameter=mysql.questions,mysqladmin -uroot status|cut -f4 -d":"|cut -f1 -d"S"
#UserParameter=mysql.slowqueries,mysqladmin -uroot status|cut -f5 -d":"|cut -f1 -d"O"
#UserParameter=mysql.qps,mysqladmin -uroot status|cut -f9 -d":"
#UserParameter=mysql.version,mysql -V
Hostname= some name
StartAgents=8
DebugLevel=4
UserParameter=symfonia,type D:\SQL_2005_BackUp\BackupBazySymfonii\wynik_backup u_bazy.txt
UserParameter=winupdate,type c:\zabbix\getup.log
#ServerActive=ip.ip.ip.ip:10051
#ServerPort=10051
#RefreshActiveChecks=300
#LogFile=C:\Zabbix\zabbix_agentd.log
LogFileSize=15
#exchange database size
#Alias = exc.db0.size:vfs.file.size[D:\Exchange Server\V14\Mailbox\Mailbox Database 2\Mailbox Database 2.edb]
#UserParameter = exc.db0.log.size,cscript "C:\Zabbix\zabbix_exc_db_log_size.vbs" //Nologo "D:\Exchange Server\V14\Mailbox\Mailbox Database 2"
##Alias = exc.db1.size:vfs.file.size[D:\Exchange\Second Storage Group\Public Folder Database.edb]
##UserParameter = exc.db1.log.size,cscript "C:\Zabbix\zabbix_exc_db_log_size.vbs" //Nologo "D:\Exchange2003\Exchange 2003 mdbdata"
# To get more information about Zabbix visit http://www.zabbix.com
### Option: Server
# IP address of Zabbix server
# Connections from other hosts will be denied
# If IPv6 support is enabled then '127.0.0.1', '::127.0.0.1', '::ffff:127.0.0.1' are treated equally.
#
# Mandatory: yes
# Default:
# Server=
LogFile=C:\zabbix\zabbix_agentd.log
Server=ip.ip.ip.ip
#ServerPort=10051
#ServerActive=
################################################## #####
###########BUFORY################################# #####
BufferSend=3600
BufferSize=60000
############ ADVANCED PARAMETERS #################
### Option: Alias
# Sets an alias for parameter. It can be useful to substitute long and complex parameter name with a smaller and simpler one.
#
# Mandatory: no
# Range:
# Default:
### Option: Timeout
# Spend no more than Timeout seconds on processing
#
# Mandatory: no
# Range: 1-30
# Default:
Timeout=30
### Option: Include
# You may include individual files or all files in a directory in the configuration file.
# Installing Zabbix will create include directory in /usr/local/etc, unless modified during the compile time.
#
# Mandatory: no
# Default:
# Include=
# Include=/usr/local/etc/zabbix_agent.userparams.conf
# Include=/usr/local/etc/zabbix_agent.conf.d/
####### USER-DEFINED MONITORED PARAMETERS #######
### Option: UnsafeUserParameters
# Allow all characters to be passed in arguments to user-defined parameters.
# 0 - do not allow
# 1 - allow
#
# Mandatory: no
# Default:
# UnsafeUserParameters=0
### Option: UserParameter
# User-defined parameter to monitor. There can be several user-defined parameters.
# Format: UserParameter=<key>,<shell command>
# Note that shell command must not return empty string or EOL only.
# Example: UserParameter=system.test,who|wc -l
#UserParameter=system.test,who|wc -l
### Set of parameters for monitoring MySQL server (v3.23.42 and later)
### Change -u<username> and add -p<password> if required
#UserParameter=mysql.ping,mysqladmin -uroot ping|grep alive|wc -l
#UserParameter=mysql.uptime,mysqladmin -uroot status|cut -f2 -d":"|cut -f1 -d"T"
#UserParameter=mysql.threads,mysqladmin -uroot status|cut -f3 -d":"|cut -f1 -d"Q"
#UserParameter=mysql.questions,mysqladmin -uroot status|cut -f4 -d":"|cut -f1 -d"S"
#UserParameter=mysql.slowqueries,mysqladmin -uroot status|cut -f5 -d":"|cut -f1 -d"O"
#UserParameter=mysql.qps,mysqladmin -uroot status|cut -f9 -d":"
#UserParameter=mysql.version,mysql -V
Hostname= some name
StartAgents=8
DebugLevel=4
UserParameter=symfonia,type D:\SQL_2005_BackUp\BackupBazySymfonii\wynik_backup u_bazy.txt
UserParameter=winupdate,type c:\zabbix\getup.log
#ServerActive=ip.ip.ip.ip:10051
#ServerPort=10051
#RefreshActiveChecks=300
#LogFile=C:\Zabbix\zabbix_agentd.log
LogFileSize=15
#exchange database size
#Alias = exc.db0.size:vfs.file.size[D:\Exchange Server\V14\Mailbox\Mailbox Database 2\Mailbox Database 2.edb]
#UserParameter = exc.db0.log.size,cscript "C:\Zabbix\zabbix_exc_db_log_size.vbs" //Nologo "D:\Exchange Server\V14\Mailbox\Mailbox Database 2"
##Alias = exc.db1.size:vfs.file.size[D:\Exchange\Second Storage Group\Public Folder Database.edb]
##UserParameter = exc.db1.log.size,cscript "C:\Zabbix\zabbix_exc_db_log_size.vbs" //Nologo "D:\Exchange2003\Exchange 2003 mdbdata"
Please advice what can be wrong.
I have no ideas for now