Testing Zabbix ....need some help

[Ibrahim]

Hi,
After a long evaluation of available monitoring tools, I have made the choice to go on with Zabbix. Basically I will be using Zabbix to monitor the resources of our product hosts while under performance tests. The host might be a single node or a cluster of nodes. In any case, the purpose is to monitor many values like memory. cpu, disk, database size, log files, core dumps, processes, etc. I am now in the phase of configuraing Zabbix to monitor all these items that are required during a performance test. I am very optimistic that Zabbix will prove to be the right choise and it will get the acceptance of my superiors to be used in real life testing.

I have a currently a problem. I am trying to use this log item that is based on Zabbix agent (active) mode. It doesnt work. I have done the following:

1- I am running the server on Redhat Linux E4, and the agent on HPUX 11.00
2- I made sure active mode is not disabled in the agent config file, and that zabbix user has access to the log file I am monitoring.
3- I added a new item to the host, and configured it according to documentation (Zabbix agent active, type: log) and for the key I enetered log[file path]. I enetered date format as yyyy-mm-ddThh:mm:ss matching the file format (dont know what T is for , just copied this from an example)

.... it doesnt work....what is wrong?

Many thanks
Ibrahim

[Alexei]

Make sure you have Hostname and Server configured properly in zabbix_agentd.conf.

[just2blue4u]

Can the agent support other Items or is this an item-independend problem?

Try (Agent): zabbix_agentd -p
zabbix_agentd -t log[file_path]
(Server): zabbix_get -s <client> -k log[file_path]

[Alexei]

One cannot use zabbix_get for log[] because the latter is an active check. Active checks are processed independently of ZABBIX server.

[Ibrahim]

Hi,
In fact log item still doesnt work. I double checked the server IP address and port number. Here is my configuration:

#################################################
Server=<server ip address>

# Server port for sending active checks

ServerPort=10051

# Unique hostname. Required for active checks.

Hostname=<server host name>

# Listen port. Default is 10050

ListenPort=10050

# IP address to bind agent
# If missing, bind to all available IPs

#ListenIP=127.0.0.1
##################################################

Port 10051 is open for listening in the server side and is accessable from the agent side. What about ListenIP, it is not mandatory, is it?

When I test like this in agent side:
zabbix_agentd -t log[file path]
I get:
[m|ZBX_NOTSUPPORTED]

Any idea what is wrong here?

Best Regards,
Ibrahim

[Alexei]

What did you put into:

Hostname=<server host name>

The Hostname is name of the host you're monitoring. It must match host
name of the log[] item. It is NOT name of ZABBIX server!

[sysigs]

Hello, i have the same problem
i want to scan /var/log/boot.log.When i connect to zabbix user i can read the file

[root@svr01 zabbix]# cat /var/log/boot.log
from ::ffff:10.166.5.152 port 1281 ssh2
Sep 30 17:36:18 swi-062 1508: 011960: Sep 30 17:36:17: %SYS-5-CONFIG_I: Configured from console by cisadm on vty0 (10.166.1.52)
Sep 30 17:36:59 swi-062 1509: 011961: Sep 30 17:36:58: %SYS-5-CONFIG_I: Configured from console by cisadm on vty0 (10.166.1.52)
S
Oct 8 11:23:33 svr01 sshd[20105]: Did not receive identification string from ::ffff:10.166.1.45
Oct 9 08:21:52 svr01 sshd[28337]: Accepted password for root

my zabbix_agent.conf
Server=127.0.0.1
ServerPort=10051
Hostname=svr01
ListenPort=10050
StartAgents=5
#DisableActive=1
DebugLevel=3
PidFile=/var/tmp/zabbix_agentd.pid
LogFile=/var/log/zabbix/zabbix_agentd.log
Timeout=3

and

zabbix_agent -t log[/var/log/boot.log]
log[] [m|ZBX_NOTSUPPORTED]

[Ibrahim]

Hi,
I have changed the hostname to the monitored host name. It didnt help. I have also run zabbix_agentd on the server host, and configured one log item to monitor a very simple log file (zabbix.test) in zabbix home directory:

$ cat zabbix.test
15:33:45 hello
15:34:45 hello again
15:34:45 hello again
15:35:45 hello again
15:36:45 hello again
15:37:45 hello again

I also put the agent log level to 4 (debugging). Then I started logging into the zabbix.test file and monitoring the agent log file. What I have found is that agent is not sending anything to port 10051 as I log into zabbix.test file. I also found that the agent is trying every 2 minutes to get active checks from the server and it seems without sucess:

here is a part of zabbix_agentd.log:

027910:20061009:121003 get_active_checks: host[127.0.0.1] port[10051]
027910:20061009:121003 Sending [ZBX_GET_ACTIVE_CHECKS
testpc1.test.noklab.net
]
027910:20061009:121003 Before read
027910:20061009:121003 In delete_all_metrics()
027910:20061009:121003 Parsed [ZBX_EOF]
027910:20061009:121003 Sleeping for 60 seconds


Can you see any problem here?
Regards,
Ibrahim

[Alexei]

Did you read my previous post? Please respond.

[Ibrahim]

Yes it works now
I didn't pay attention that you meant the Hostname and the log item host should match.
Thank you and best Regards,
Ibrahim

[sysigs]

Yes for me. The name server is svr01.fr.mysite
in zabbix_agent.conf
Hostname=svr01
and in boot.log i have
Oct 8 11:23:33 svr01 sshd[20105]: Did not receive identification string from ::ffff:10.166.1.45
O
and it still not working

Did you read my previous post? Please respond.