Zabbix Discovery finding devices very slowly

[greavette]

Hello Forum,

I've installed Zabbix 5.0 LTS on ubuntu 20.04.

I've setup Zabbix Discovery to run on my network 10.101.1.0/24 where I'm using a TCP (0-20000) Check and my update interval is 6 hours.

I have roughly 90 devices on my network and the Zabbix discovery has only found the first 5.

Is there any advice for me on why this discovery is taking so long to complete? I'd like to be able to use Zabbix Discovery once in a while as a check but this is taking far too long.

Any advice you can provide me would be greatly appreciated.

Thank you.

[dimir]

If that's possible, I'd advise to increase discoverer process log level

zabbix_server -R log_level_increase=discoverer

and follow the proxy/server log file to see some unusual activity. Don't forget to decrease the log level of discoverer when done

zabbix_server -R log_level_decrease=discoverer

Are your discoveries done by proxy? If yes, it takes time till the discoveries are sent to the server which stores them in the database, only after which they are visible in the frontend.

[Hamardaban]

You need to reduce the “timeout” parameter in zabbix conf and divide the discovery on the many by subnet.

[greavette]

Thank you dimir and Hamardaban for your help with my question. I will increase the log level to see if there is something wrong.

My zabbix config does not have timeout enabled and it doesn't say what the default timeout is. Is there a timeout value you can suggest I use that would reduce timeout? My network is a flat network (one subnet).

Thank you.

[Hamardaban]

timeout - https://www.zabbix.com/documentation.../zabbix_server

net disc - https://www.zabbix.com/documentation...discovery/rule

IP range

The range of IP addresses for discovery. It may have the following formats: Single IP: 192.168.1.33 Range of IP addresses: 192.168.1-10.1-255. The range is limited by the total number of covered addresses (less than 64K). IP mask: 192.168.4.0/24 supported IP masks: /16 - /30 for IPv4 addresses /112 - /128 for IPv6 addresses List: 192.168.1.1-255, 192.168.2.1-100, 192.168.2.200, 192.168.4.0/24 Since Zabbix 3.0.0 this field supports spaces, tabulation and multiple lines.

just make several netdico rules with different ip range

PS
20000 ports * 254 hosts * 3sec noanswer timeout = 176 days

PPS
I advise you to use nmap for such purposes. and if you need to transfer the results of his work to zabix. but this is a completely different story.

[greavette]

Excellent information Hamardaban , very much appreciate your support with my questions!

Good to know the math behind the port scan! I will use nmap instead for this typeof query. I have no need to run this all the time so using nmap will suffice.

Thank you.