Hi all;
I created an active item earlier today that said "give me the modification time of file xyz every 10 seconds". I added a "discard unchanged values with heartbeat of a day", since the file is only being written once a day.
All of my hosts reported the current modification time of the file, except for one, which bounced between two values.
I think this means that I've got two zabbix_agent2 daemons reporting the same hostname.
When I look at the host record, it only reports one ip address, and that it's being reported via one of our proxies.
If I delete the host record, it is recreated after a minute or so, but the problem recurs again.
I've been trying to run tcpdump on the proxy to identify all agents connecting to the proxy, but the hostname is not readable in the tcpdump ascii dump output.
How can I track down the true source ip addresses of the duplicate hosts?
Thanks
(Zabbix server 6.4.13)
I created an active item earlier today that said "give me the modification time of file xyz every 10 seconds". I added a "discard unchanged values with heartbeat of a day", since the file is only being written once a day.
All of my hosts reported the current modification time of the file, except for one, which bounced between two values.
I think this means that I've got two zabbix_agent2 daemons reporting the same hostname.
When I look at the host record, it only reports one ip address, and that it's being reported via one of our proxies.
If I delete the host record, it is recreated after a minute or so, but the problem recurs again.
I've been trying to run tcpdump on the proxy to identify all agents connecting to the proxy, but the hostname is not readable in the tcpdump ascii dump output.
How can I track down the true source ip addresses of the duplicate hosts?
Thanks
(Zabbix server 6.4.13)
Attached Files