Syslog in Zabbix

[Xyue]

Hi Guys,

I would like to collect syslog from my devices like F5/servers.

Currently I have a server and below are the items which is running on it now.
CentOS 6.7
Zabbix server
MySQL

I have read through few post in this forum and got below conclusion.

• Install syslog collector (rsyslog)
• Install zabbix agent to monitor syslog collector

.
*Both collector and zabbix agent probably will install in the same server.

My question is how it is going to show on zabbix web interface when there is something wrong? Do i need to log in to server and check the log file every time ?

Thank you very much in advance for your reply.

[pc99096]

Hi Guys,

I would like to collect syslog from my devices like F5/servers.

Currently I have a server and below are the items which is running on it now.
CentOS 6.7
Zabbix server
MySQL

I have read through few post in this forum and got below conclusion.

• Install syslog collector (rsyslog)
• Install zabbix agent to monitor syslog collector

.
*Both collector and zabbix agent probably will install in the same server.

My question is how it is going to show on zabbix web interface when there is something wrong? Do i need to log in to server and check the log file every time ?

Thank you very much in advance for your reply.

i am not sure i understand the question. what exactly do you want to monitor in those log files? you have to search for some strings in the log files and create zabbix triggers based on the string occurence.

[Xyue]

Hi,

As what i know, Zabbix does not have the syslog collector function right. If i want to have syslog function, I need to install third part application (e.g rsyslog) in zabbix server and configure all devices send the syslog to rsyslog.

after the rsyslog collect the syslog details from my devices, how it is going to show on zabbix web interface ? Or Zabbix is not support syslog at all ?

Sorry for the late reply and my poor grammar.

Thank you very much.

[pc99096]

zabbix has nothing to do with syslog. syslog (rsyslog for example) is a linux feature. however, zabbix can monitor any log file created by syslog.

https://www.zabbix.com/documentation/2.4/manual/config/items/itemtypes/log_items?s[]=log

for this, you will have to obviously create and configure each device in the zabbix GUI. what devices are we talking about? what exactly are you trying to monitor in those syslog files? isn't it easier to either install zabbix agent on the devices (if possible), or use SNMP?

for example F5 SNMP:

https://www.zabbix.org/wiki/F5_BIG-IP_SNMP_Template

[Xyue]

Hi,

I was trying to monitor F5 devices and I'm not sure if zabbix agent can be install in F5. Even yes, I'm not allowed to install also.

I did tried to use the SNMP and import the F5 template which download from the link you provide and when I import, I have below error message.

Error Message
Cannot import template "tmplF5BigIpAdc", linked template "Template SNMP common" does not exist.

Do you have any idea what is the error message mention about ?

Thank you very much.

[pc99096]

maybe wrong template. try this one:

https://github.com/thecamels/zabbix/blob/master/templates/Template%20Device%20BigIP%20F5.xml

BUT

create the following value mappings first:

Template Device BigIP F5

Monitoring of F5 BigIP network load balancer. It uses SNMP items to monitor basic device parameters (CPU/RAM usage, hardware failure, global traffic) and also it discovers network interfaces, storage, virtual servers and pools. It requires manual addition of value mappings (Administration -> General -> Value Mapping)

Name: F5 ltmPoolStatusAvailState

0 -> Pool Error
1 -> Pool available
2 -> Pool member(s) are currently not available
3 -> Pool member(s) are down
4 -> Pool availability is unknown
5 -> Pool unlicensed

[Xyue]

Hi,

Thanks a lot. I was able to import the xml file to monitor my F5.

Thank you very much.