Ad Widget

Collapse

DNS monitoring in Zabbix

Collapse
X
Collapse
 
  • Page of 1
  • Time
  • Show
Clear All
new posts
Previous template Next
  • mwwlodek
    Junior Member
    • Nov 2025
    • 5
    #1

    DNS monitoring in Zabbix

    OK, i have tried so many things that I googled and even AI is struggling to provide accurate answers.
    I need to monitor some of the DNS servers inside my network.
    I manage to setup agent monioring on AD server, but it is not enaugh, as it is going from inside the machine. I also do have some linux (appliance) and SAAS DNS services that I need to monitor somehow from Proxy inside network.

    Idea is simply: proxy have access to port 53 on all od the devices and in 1min need to do simply nslookup, net.dns to those servers. \
    Every idea that manage as Simply check with net.dns I got "unsupported".

    Does anybody have thought out about this situation? Maybe somebody have similar setup already working?

    Zabbix enviroment on 7.0.21
    Tags: None
    • troffasky
      Senior Member
      • Jul 2008
      • 565
      #2
      What is your full item key? "net.dns" by itself is not sufficient, you need to give it some parameters: https://www.zabbix.com/documentation..._agent#net.dns
      You can use zabbix_get to test items, eg,
      # zabbix_get -k net.dns.record[1.1.1.1,google.com,TXT,,,tcp] -s agenthostname
      google.com TXT "MS=E4A68B9AB2BB9670BCE15412F62916164C0B20BB"
      google.com TXT "onetrust-domain-verification=de01ed21f2fa4d8781cbc3ffb89cf4ef"
      google.com TXT "facebook-domain-verification=22rm551cu4k0ab0bxsw536tlds4h95"
      google.com TXT "cisco-ci-domain-verification=47c38bc8c4b74b7233e9053220c1bbe76bcc1 cd33c7acf7acd36cd6a5332004b"
      google.com TXT "google-site-verification=TV9-DBe4R80X4v0M4U_bd_J9cpOJM0nikft0jAgjmsQ"
      google.com TXT "v=spf1 include:_spf.google.com ~all"
      google.com TXT "docusign=1b0a6754-49b1-4db5-8540-d2c12664b289"
      google.com TXT "apple-domain-verification=30afIBcvSuDV2PLX"
      google.com TXT "globalsign-smime-dv=CDYX+XFHUw2wml6/Gb8+59BsH31KzUr6c1l2BPvqKX8="
      google.com TXT "google-site-verification=4ibFUgB-wXLQ_S7vsXVomSTVamuOXBiVAzpR5IZ87D0"
      google.com TXT "docusign=05958488-4752-4ef2-95eb-aa7ba8a3bd0e"
      google.com TXT "google-site-verification=wD8N7i1JTNTkezJ49swvWW48f8_9xveREV4oB-0Hf5o"

        Comment

        • mwwlodek
          Junior Member
          • Nov 2025
          • 5
          #3
          I have tried with multiple arguments and net.dns[{HOST.IP},{$DOMAIN}] resolve some of my issue, but still it is asking itself (example windows dc zabbix agent is asking 127.0.0.1 [simplified] for url).
          There is this post - which I also revieved before asking here - DNS Request Check In Zabbix - ZABBIX Forums (and many others).

          My main goal is to be able to verify any dns if it resolve (performance should be also).
          Let pretend that i want to verify from Proxy dns 1.1.1.1 if it resolve in my network.
          Something as net.dns.get/null/record/perf[1.1.1.1,google.com] doesnt work.
          There is also something like net.tcp.service[tcp,,53], but it only verify if port is reachable, not dns itself (serivice my be frozen or in error state and still listen).
          Last edited by mwwlodek; 22-12-2025, 17:52.

            Comment

            • troffasky
              Senior Member
              • Jul 2008
              • 565
              #4
              Take my example of TXT record and substitute A in, and it works.


              # zabbix_get -k net.dns.record[1.1.1.1,google.com,A,,,tcp] -s agenthostname
              google.com A 142.250.117.101
              google.com A 142.250.117.139
              google.com A 142.250.117.100
              google.com A 142.250.117.138
              google.com A 142.250.117.113
              google.com A 142.250.117.102

              ​

                Comment

                • guntis_liepins
                  Junior Member
                  • Oct 2025
                  • 12
                  #5
                  It is very nice suggestion, but why use tcp instead of UDP which is default for DNS?

                    Comment

                    • troffasky
                      #5.1
                      troffasky commented
                      30-12-2025, 16:51
                      Editing a comment
                      Because with TXT record, only TCP works with Zabbix agent2, which is where I was testing this.
                      ZBX_NOTSUPPORTED: Cannot perform DNS query.
                    Previous template Next
                    Working...