Remove specific service monitoring from all hosts

[scotty07]

I have modified my discovery template to exclude monitoring certain services but Zabbix has already discovered over 200 hosts and are all reporting the "TrustedInstaller" service is not running.

Is there a way to delete the item "Windows services discovery: State of service "TrustedInstaller" (Windows Modules Installer)" from all hosts?

Can I issue a rediscover the host so it updates to remove that monitoring item?

Thanks,

Scott

[tomijs]

You can delete the item prototype on the discovery template and change "keep lost resources" from whatever you have set there to 0, but remember to change it back. When you set it to 0 it will automatically delete the item from all hosts.

[scotty07]

Thanks for the response.

I only seem to have one item prototype that seems to look for all services. If I delete that won't it delete all my services from my hosts.



Perhaps I am looking in the wrong place.

Thanks,

Scott

[fvilarnovo]

Depending on how you excluded those services to be discovered/monitored are going to be erased. As tomijs said before, the "keep lost resources" value, will retain for the specified time those items discovered and then will be erased. The proper way should be to use a filter on the discovery, so the discovery handles erasing those items automatically.

Example:

https://www.zabbix.com/documentation/current/en/manual/discovery/low_level_discovery#filter

Hope it helps!.

[scotty07]

OK, I have set keep lost resources to 0. How long shold I wait before setting it back to 30d? Also, is there a way to have hosts run the discovery process again so that picks up the filter I created? Thanks.

[fvilarnovo]

Depending on how you excluded those services to be discovered/monitored are going to be erased. As tomijs said before, the "keep lost resources" value, will retain for the specified time those items discovered and then will be erased. The proper way should be to use a filter on the discovery, so the discovery handles erasing those items automatically.

Example:

https://www.zabbix.com/documentation/current/en/manual/discovery/low_level_discovery#filter

Hope it helps!.

It depends on the interval that the discovery has. Once that disovery runs again it should do what you expect!

[ViniciusBr]

Hi all,

I am trying to get rid of the service monitoring.. It is simple as disabling "windows service discovery" in the template, but I am not getting rid of the existing alerts for services.

I wonder what is the correct flow to clean them up? I understand that I have to change the "Keep lost resources period" to a low value, but I disabled the item completely. Does it need to be enabled in order to clean the existing items?

I was thinking on doing this, please let me know if this is the correct flow:

- change the "update interval" to a high number, 24h or something (so no new items are added)
- change the "Keep lost resources period" to 1h
- enable the discovery rule
- wait a bit more than 1 hour so the items get cleaned

Is it correct? If not, how do I clean my dashboard?

Thanks!