where can i find a total description of event?

[thierry]

hi,
in case of problem, the Agent 2 send an event to the server. I need to know a complete description of the fields in the event message
because i'd like to plug SEC Simple event correlator on Zabbix
Thanks
T.

[cyber]

Agent sends data, not events... Based on arriving data, Zabbix server generates events, based on trigger conditions...

[thierry]

so i ned to parse the events generated by Zabbix. Where can i find a description of the different events to correlate them?
Thanks

[thierry]

if i want to correlate events i have to install and parameter SEC simple correlator. Ihave to intercept the event before it is in the server. Is it right?
how to install and parameter SEC ?

[cyber]

If you want to "correlate" Zabbix events with something else and do it somewhere else with some other tool, then you only option seems to be creating an action in Zabbix, that forwards all the events, generated by Zabbix, to that 3rd party tool. https://www.zabbix.com/documentation.../notifications
Or try to stream events .. https://www.zabbix.com/documentation...port/streaming

For all this you should understand how Zabbix works, how it collects data, and what and when happens with that data. Currently seems yo do not have any idea, how it works...

[thierry]

hi,
that's right, i don't know how it works . That's the reason i need your help.
The documentation is very small for the subjects of API and correlation. is there a book about Zabbix and API and
i want to use SEC Simple Event Correlator on Zabbix Server.
I don't know if the data sent by the agent2 can be formatted to be used by SEC.
Perhaps must i work on event from agent2 which is the DATA formatted, isn't it?

Thanks for your help. I work from 0
Regards
Thierry

[cyber]

There is no way you can "insert" your correlator somewhere inside zabbix... I pointed to couple of chapters in docs, which allow you to forward events to 3rd party. That's it. There's really nothing else you can do...

I doubt there is many forum people here, who have heard of this tool.. I for one had never heard of SEC before, you cannot expect that your favorite tool is known to everyone and it will be possible to plug it into everything...

[thierry]

Thanks for your researchs!!

T Granier