Setting up a Trigger for Idle Users logged into Servers

[tehrev]

Hello,

I'm really new to Zabbix and am looking to setup a trigger that will warn me when a User has been logged into one of my servers and has been idle for over 15 minutes. Is there a way to do that? Currently I have an item that just shows me the users who are currently logged in. It looks like this



The output looks like this



So is there anyway to alert me when Idle time is over 15 minutes as you can see in the example above the user is logged in over 24 minutes idle.

Any help would be greatly appreciated.

Thanks.

[poxeron]

Did you resolve this issue ?

[tehrev]

No I have not

[poxeron]

I will share with you my way.

[poxeron]

1) PowerShell scripts as USER PARAM. my called "user_idle_time.ps1"

function Get-QUserInfo
{
[CmdletBinding()]
Param (
[Parameter ()]
[string[]]
$ComputerName = $env:COMPUTERNAME
)

begin
{
$Header = 'UserName','SessionName','ID','State','IdleTime',' LogonTime'
$No_Connection = '-- No Connection --'

}

process
{
foreach ($CN_Item in $ComputerName)
{
if (Test-Connection -ComputerName $CN_Item -Count 1 -Quiet)
{
quser /server:$CN_Item |
Select-Object -Skip 1 |
ForEach-Object {($_ -replace '\s{2,}', ',').Trim()} |
ConvertFrom-Csv -Header $Header |
ForEach-Object {
if ($_.IdleTime -eq 'none')
{
$IdleTime = $Null
}
else
{

$IdleTime = $_.IdleTime
}
[PSCustomObject]@{
ComputerName = $CN_Item
UserName = $_.UserName
SessionName = $_.SessionName
ID = $_.ID
State = $_.State
IdleTime =$IdleTime
LogonTime = [datetime]$_.LogonTime
}
}
}
else
{
[PSCustomObject]@{
ComputerName = $CN_Item
UserName = $No_Connection
SessionName = $No_Connection
ID = $No_Connection
State = $No_Connection
IdleTime = $No_Connection
LogonTime = $No_Connection

}
}
} # end >> foreach ($CN_Item in $ComputerName)
} # end >> process {}

end {}

} # end >> function Get-QUserInfo



Get-QUserInfo -ComputerName LocalHost

[poxeron]

2) add route to zabbix config file
UserParameter=user.idle.time[*],powershell -NoP -NonI -executionpolicy bypass "& {&'PATH:\TO\Scripts\user_idle_time.ps1'}"

3) create Item

[poxeron]

4) create separate dependence items for login, computer, idle time

[poxeron]

5) like on pictures

[poxeron]

6) create trigger. I could not fine where in PowerShell script i get the (.) but i use it in trigger.

[poxeron]

7) Enjoy