2 Zabbix Servers & 1 Zabbix Agent Communication

[natalia]

also ask you DB team about MySQL HA cluster solution.
for example, MySQL Cluster: High Availability

it that case you will have HA Zabbix cluster + HA MySQL cluster and you will be on safe side.

btw, both clusters can have remote sites in different (geographically) places.

Thank you ! I will check this.

[Mukesh]

Script-Monitoring and non-monitoring

[QUOTE=ingus.vilnis;152000]Mukesh,

You're welcome!

However it is a bit hard for me to troubleshoot your situation because you don't give back


Thanks reply ingus

I still Working/Studying in zabbix HA .I will share with you full details regarding the Zabbix HA and zabbix migration(1.18.16 to 2.2.4).

Now i have got another problem can you help me regarding this:-

This is my script and please let me know what you understand below my script.(Which is monitoring and which is non-monitoring)
{Server:eventlog[application].logseverity(0)}=4 & {Server:eventlog[application].logsource("TerminalServices-Printers")}=0 & {Server:eventlog[application].str("Contact the administrator to install the driver before you log in again.")}#0

Thank you

Regards
Mukesh

[ingus.vilnis]

This is my script and please let me know what you understand below my script.(Which is monitoring and which is non-monitoring)
{Server:eventlog[application].logseverity(0)}=4 & {Server:eventlog[application].logsource("TerminalServices-Printers")}=0 & {Server:eventlog[application].str("Contact the administrator to install the driver before you log in again.")}#0

Mukesh,
That is not a script. That looks like trigger expression.

What do you want me to tell about it? Is it monitoring or not?
The only thing I see as a problem here is that you have the event log name without capital A (Application).

Best Regards,
Ingus

[Mukesh]

Oh.Its Trigger Experssion.

you already know i am very new guys in zabbix support.

yes my mean is it monitoring or not?

{Server:eventlog[Application].logseverity(0)}=4 &
{Server:eventlog[Application].logsource("TerminalServices-Printers")}=0 & {Server:eventlog[Application].str("Contact the administrator to install the driver before you log in again.")}#0

i just want to know what is mean #0,=0,=4

Please explan me.

Thanks you
Regards
Mukesh

[ingus.vilnis]

https://www.zabbix.com/documentation/2.2/manual/config/triggers/expression

[Mukesh]

Ingus,

I really not understand .

which trigger is appear and which trigger is not appear accordingly in my trigger expression.

{Server:eventlog[Application].logseverity(0)}=4 &
{Server:eventlog[Application].logsource("TerminalServices-Printers")}=0 & {Server:eventlog[Application].str("Contact the administrator to install the driver before you log in again.")}#0


can you please explain same .

Thanks
Regards
Mukesh

[Mukesh]

Trigger Experssion

Hi Ingus,

Thanks for reply

below i have mention trigger experssion.

I want to all trigger except this trigger (source :-Service Control Manage ("The mysql service terminated unexpectedly. It has done this 1 time(s)).

so please give me solution and correction my below mention trigger expersion

{Template EventLog:eventlog[System].logseverity(0)}=4 &
{Template EventLog:eventlog[System].logsource("Service Control Manager")}=0 &
{Template EventLog:eventlog[System].str("The mysql service terminated unexpectedly. It has done this 1 time(s).")}#0

Regards
Mukesh

[ingus.vilnis]

Hi Mukesh,

{Template EventLog:eventlog[System].logseverity(0)}=4 &
{Template EventLog:eventlog[System].logsource("Service Control Manager")}=0 &
{Template EventLog:eventlog[System].str("The mysql service terminated unexpectedly. It has done this 1 time(s).")}#0

The trigger expression itself is correct. However I think that you can simplify it by removing the last part. It will not be processed anyways since message "The mysql service terminated unexpectedly. It has done this 1 time(s)." comes from "Service Control Manager" which is already set as 0 in your expression, so you will not get triggered by any events that come from "Service Control Manager".

Best Regards,
Ingus

[Mukesh]

Trigger Experssion

Thanks for nice support ingus,

We want other events besides mentioned in the script to trigger alert.

Example :

SCM has 3 events as below :

1. ABCD
2. EFGH
3. IJKL

Out of 3 above, i would not want 2.IJKL to trigger.
But i want 1.ABCD and 3.IJKL to give trigger.

Regards,
Mukesh

[ingus.vilnis]

Dear Mukesh,

I am really glad that my advice has helped you!

Regarding your recent question, please spend some of your time to read our documentation. I posted you a link some days ago already. All answers to your questions can be logically answered there. It would be very nice if you first tried to solve your problems using already given information rather than simply asking someone else to find it for you.

Regarding the expression itself then. You just have to add these specific events and separate them with logical OR and give either values 1 or 0 to get triggered or not.

Best Regards,
Ingus

[natalia]

For full DB replication you can try Galera cluster. http://galeracluster.com/

Ingus,
I checked with our DB team regarding galeracluster, it's not so good in our case since :
- we are planning to install DB servers in 2 sites (different location)
- galeracluster based on Synchronous replication

some network delay between 2 sites will affect on all Zabbix,
so it's can't be solution for us (:-

Does Zabbix know to working with Master-Master configuration ? what will be happened if data will be insert into both DB servers ? I think it's call to be Active-Active ...

Thanks !

also ask you DB team about MySQL HA cluster solution.
for example, MySQL Cluster: High Availability

it that case you will have HA Zabbix cluster + HA MySQL cluster and you will be on safe side.

btw, both clusters can have remote sites in different (geographically) places.

Hi,

our DB team had bad experience with implemented/working with MySQL HA cluster and they think that it will not working good when sites in different (geographically) places ,
Do you using this in your zabbix ?
Could you provide more details regarding your configuration ?
Thanks a lot !

[ingus.vilnis]

Natalia,

I know you have a complicated environment and it is not easy, but I hope that we can try to find some appropriate solutions for you.

If your DB team is not satisfied with the given DB HA suggestions, they are always welcome to come up with their own.

What you are telling me now

I checked with our DB team regarding galeracluster, it's not so good in our case since :
- we are planning to install DB servers in 2 sites (different location)
- galeracluster based on Synchronous replication

some network delay between 2 sites will affect on all Zabbix,
so it's can't be solution for us (:-

does not really connect with

DB replication is a solution that I got from our DB experts and the sync will be very fast (DB servers with SSD and network also very fast).

So is your connection between two locations fast or not?

Does Zabbix know to working with Master-Master configuration ? what will be happened if data will be insert into both DB servers ? I think it's call to be Active-Active ...

Again, I don't think it is a good idea for you to think of the HA that way. Some posts back we both discussed the idea of having servers on two locations but that does not mean that they will be mirrored so that only one location work at a time. Separate the levels by having a Zabbix server cluster at two sites and an independent DB cluster.

our DB team had bad experience with implemented/working with MySQL HA cluster and they think that it will not working good when sites in different (geographically) places ,
Do you using this in your zabbix ?
Could you provide more details regarding your configuration ?
Thanks a lot !

I think we should see if other HA experts have something to say and kindly recommend in your situation. There can be many solutions of which I might not even know because this is not so much Zabbix related than a general infrastructure issue.

Best Regards,
Ingus

[natalia]

Ingus, thanks a lot for your comments!!! see below my answers :-)

Regarding galeracluster :
Our connection between two locations fast but if we will have any problem/delay (it should not happened but I should think about this scenario as well) update/insert data into DB will be also affect because galeracluster based on Synchronous replication,meaning that until data not updated in the both DB's the process will not completed - let me know if my explanation are clear :-)

Again, I don't think it is a good idea for you to think of the HA that way. Some posts back we both discussed the idea of having servers on two locations but that does not mean that they will be mirrored so that only one location work at a time. Separate the levels by having a Zabbix server cluster at two sites and an independent DB cluster.

I fully agree with your suggestion, just wanted to verify that Zabbix not supported Active-Active configuration.
btw, if all hosts are monitoring by proxy (per each site) should I have strong physical Zabbix server ? or maybe I can not split Zabbix server and Zabbix Web UI ?
another question, can zabbix proxy monitoring 2000 hosts?

Thanks a lot for your help and sorry for too many question :-)

[ingus.vilnis]

Hello Natalia,

I really can't comment on your DB cluster issues because it is very environment dependent. I would say that synchronous replication would work because of the solutions provided by Galera cluster, but your DB team should know better.

btw, if all hosts are monitoring by proxy (per each site) should I have strong physical Zabbix server ? or maybe I can not split Zabbix server and Zabbix Web UI ?

Even though your hosts are monitored via proxies, you need a powerful Zabbix server that will do the final processing of all incoming data. You see, proxies are simply collectors of data. It is Zabbix server that handles the received data to DB and frontend.

You can have Zabbix server and Zabbix PHP frontend and DB server all on different machines and locations. It is even recommended to separate them on large environments.

Yes, Zabbix Proxy could monitor 2000 hosts if the proxy has powerful hardware in terms of CPU and RAM, but it highly depends on how many items and what is the update interval for each of the hosts you monitor with proxy (new values per second).

Best Regards,
Ingus

[natalia]

Hello Natalia,

I really can't comment on your DB cluster issues because it is very environment dependent. I would say that synchronous replication would work because of the solutions provided by Galera cluster, but your DB team should know better.

Even though your hosts are monitored via proxies, you need a powerful Zabbix server that will do the final processing of all incoming data. You see, proxies are simply collectors of data. It is Zabbix server that handles the received data to DB and frontend.

You can have Zabbix server and Zabbix PHP frontend and DB server all on different machines and locations. It is even recommended to separate them on large environments.

Yes, Zabbix Proxy could monitor 2000 hosts if the proxy has powerful hardware in terms of CPU and RAM, but it highly depends on how many items and what is the update interval for each of the hosts you monitor with proxy (new values per second).

Best Regards,
Ingus

Thanks a lot ! I think I have decision regarding the structure, just waiting for answer from our DB and then will update final plan.

Many Many Thanks !

one last question :

Does Zabbix support that all zabbix proxy servers will send from source NAT ?

Thanks !