Windows Services not discovered by Windows Monitoring (Zabbix 3.2)

[anewark]

We're currently evaluating Zabbix for monitoring usage and we're really like it, however I've hit a small snag I hope someone else has as well.

Here's the situation:
We're doing monitoring of primarily Windows hosts. I've installed the agent, and added the host to Zabbix, applied the Windows OS template data is coming back but none of the services seem to be monitored.

What I've done:

• I have turned off services that are automatic and I don't get any indication of them being stopped (no messages come in to the dashboard)

• I don't see any data for Windows services available in the graphs

• Latest Data isn't showing any service information (like started services counts, details of what services are up, etc.) but shows all the other data it should show (drive usage, memory usage, CPU usage, etc.)

• I have ensured we're running 3.2 so Windows Service LLD should be included

• The template has what looks to be a service discovery job

• This is occurring on all 10 hosts we're test monitoring

• I've searched the forums for similar items, but they are all pre-3.0 related (before Windows Service LLD was added)

I'm stumped of what to do, and hoping someone can help. I've attached the export of the Windows OS template from my install for review to ensure there isn't an issue with that. I'm really new to Zabbix so I could be missing something but some help would be greatly appreciated.

[anewark]

As an update, I tried the Template from the Blog post for 3.2 (from here https://www.zabbix.org/wiki/Zabbix_T...cial_Templates) and still don't get the services added. I have tried reinstalling the agent (3.2), unlinking and clearing history, then reapplying the template. But no matter what I've done the services on the Windows hosts won't get discovered, on any of the 10 I have in now setup in Zabbix. Anyone have any suggestions?

[kasik]

Hey, when you look into item prototype what does it use simple check or zabbix agent ? you could try set up your own item, if it will work create new prototype Hope this will help.

Name: xxx
Type: Zabbix_agent
Key: service.info[service,<param>]

[onallion]

Check the interval for services discovery. It might be something long like 24 hours, which would be the reason you're not seeing any.

[anewark]

Hey, when you look into item prototype what does it use simple check or zabbix agent ? you could try set up your own item, if it will work create new prototype Hope this will help.

Name: xxx
Type: Zabbix_agent
Key: service.info[service,<param>]

So when I check the items prototypes I don't see anything for services. I just see the following:



(Direct Link to Image)

I've added what you suggested to the template to get a text value, tied it to the Service application name, and reapplied the template. Currently nothing has added, but I'll give it time as I just applied the template and the discovery interval is set to 3600 seconds (one hour).

[anewark]

Check the interval for services discovery. It might be something long like 24 hours, which would be the reason you're not seeing any.

Currently it's at 3600 seconds (1 hour) but I have had it applied for about 4-5 days without any success unfortunately. Good idea though, I didn't know that configuration value was there.

[anewark]

I don't see I've added what you suggested to the template to get a text value, tied it to the Service application name, and reapplied the template. Currently nothing has added, but I'll give it time as I just applied the template and the discovery interval is set to 3600 seconds (one hour).

So I was putting it in the wrong section (I made a template trigger, not a discovery prototype trigger) which I made, then reapplied the template (using unlink and clear), but I'm still not getting service details in the windows service.

[kasik]

So when I check the items prototypes I don't see anything for services. I just see the following:



(Direct Link to Image)

I've added what you suggested to the template to get a text value, tied it to the Service application name, and reapplied the template. Currently nothing has added, but I'll give it time as I just applied the template and the discovery interval is set to 3600 seconds (one hour).

What you showed are already created items by template you need to go into discovery rules and there is what you need.


If you dont have anything like that then try to look into host -> templates and you need to use Template OS Windows . And try to look into zabbix-server logs and zabbix agent log on your host if there is some error like "no active checks on server xxx.xxx.xxx.xxx : host [xx] not found..." then you need to set up in your cfg Hostname of that Host (same as you use in zabbix)

[anewark]

What you showed are already created items by template you need to go into discovery rules and there is what you need.


If you dont have anything like that then try to look into host -> templates and you need to use Template OS Windows . And try to look into zabbix-server logs and zabbix agent log on your host if there is some error like "no active checks on server xxx.xxx.xxx.xxx : host [xx] not found..." then you need to set up in your cfg Hostname of that Host (same as you use in zabbix)

So I made sure to have what you're asking for (see below)

Discovery Rules


Item Prototypes


and it appears I have what you're speaking of. I have them in the Template Windows OS template, and they are applied to the hosts. As for checking the logs, I don't see any thing about the windows hosts, only something from the check on the zabbix server only and it's not even from today after re-applying the Windows OS template. Below is a clip of what the log has, with the IP of the server changed to 1.1.1.1 and host name changed to XXXX.


2849:20170808:070514.031 cannot send list of active checks to "1.1.1.1": host [XXXX] not found
2850:20170808:070633.100 cannot send list of active checks to "1.1.1.1": host [XXXX] not found
2853:20170808:070710.211 cannot send list of active checks to "1.1.1.1": host [XXXX] not found

[anewark]

Also, just as an extra point, when I restart Zabbix server here is the startup details

9329:20170808:073301.708 Starting Zabbix Server. Zabbix 3.2.6 (revision 67849).
9329:20170808:073301.708 ****** Enabled features ******
9329:20170808:073301.708 SNMP monitoring: YES
9329:20170808:073301.708 IPMI monitoring: YES
9329:20170808:073301.708 Web monitoring: YES
9329:20170808:073301.708 VMware monitoring: YES
9329:20170808:073301.708 SMTP authentication: YES
9329:20170808:073301.708 Jabber notifications: YES
9329:20170808:073301.708 Ez Texting notifications: YES
9329:20170808:073301.708 ODBC: YES
9329:20170808:073301.708 SSH2 support: YES
9329:20170808:073301.708 IPv6 support: YES
9329:20170808:073301.708 TLS support: YES
9329:20170808:073301.708 ******************************
9329:20170808:073301.708 using configuration file: /etc/zabbix/zabbix_server.conf
9329:20170808:073301.712 current database version (mandatory/optional): 03020000/03020000
9329:20170808:073301.712 required mandatory version: 03020000
9329:20170808:073302.040 server #0 started [main process]
9334:20170808:073302.040 server #1 started [configuration syncer #1]
9335:20170808:073302.041 server #2 started [db watchdog #1]
9336:20170808:073302.041 server #3 started [poller #1]
9338:20170808:073302.042 server #4 started [poller #2]
9339:20170808:073302.055 server #5 started [poller #3]
9342:20170808:073302.063 server #8 started [unreachable poller #1]
9340:20170808:073302.066 server #6 started [poller #4]
9341:20170808:073302.074 server #7 started [poller #5]
9343:20170808:073302.075 server #9 started [trapper #1]
9345:20170808:073302.093 server #10 started [trapper #2]
9347:20170808:073302.101 server #12 started [trapper #4]
9346:20170808:073302.103 server #11 started [trapper #3]
9349:20170808:073302.114 server #14 started [icmp pinger #1]
9348:20170808:073302.114 server #13 started [trapper #5]
9353:20170808:073302.129 server #15 started [alerter #1]
9355:20170808:073302.130 server #16 started [housekeeper #1]
9357:20170808:073302.130 server #18 started [http poller #1]
9365:20170808:073302.134 server #20 started [history syncer #1]
9356:20170808:073302.134 server #17 started [timer #1]
9367:20170808:073302.134 server #21 started [history syncer #2]
9369:20170808:073302.135 server #22 started [history syncer #3]
9372:20170808:073302.135 server #23 started [history syncer #4]
9358:20170808:073302.135 server #19 started [discoverer #1]
9376:20170808:073302.137 server #24 started [escalator #1]
9377:20170808:073302.138 server #25 started [proxy poller #1]
9379:20170808:073302.139 server #27 started [task manager #1]
9378:20170808:073302.141 server #26 started [self-monitoring #1]

[kasik]

So I made sure to have what you're asking for (see below)

Discovery Rules


Item Prototypes


and it appears I have what you're speaking of. I have them in the Template Windows OS template, and they are applied to the hosts. As for checking the logs, I don't see any thing about the windows hosts, only something from the check on the zabbix server only and it's not even from today after re-applying the Windows OS template. Below is a clip of what the log has, with the IP of the server changed to 1.1.1.1 and host name changed to XXXX.


2849:20170808:070514.031 cannot send list of active checks to "1.1.1.1": host [XXXX] not found
2850:20170808:070633.100 cannot send list of active checks to "1.1.1.1": host [XXXX] not found
2853:20170808:070710.211 cannot send list of active checks to "1.1.1.1": host [XXXX] not found

Then you must specify name of your host in zabbix_agent.config

Hostname=NameOfYourHOST //case sensitive

in zabbix you have host named MyPC then in Hostname=MyPC

[anewark]

Then you must specify name of your host in zabbix_agent.config

Hostname=NameOfYourHOST //case sensitive

in zabbix you have host named MyPC then in Hostname=MyPC

I'm honestly not worried about these, as I have the stats coming in from the Zabbix host, and on top of that, my concern is around the windows hosts not getting service detail back. Is it possible the issue is related to the fact that I have FQDN for the windows hosts I'm monitoring? Should it only be host name only?

[kasik]

I'm honestly not worried about these, as I have the stats coming in from the Zabbix host, and on top of that, my concern is around the windows hosts not getting service detail back. Is it possible the issue is related to the fact that I have FQDN for the windows hosts I'm monitoring? Should it only be host name only?

Services are going through active checks so if your pc is not able to find host on zabbix server recognised by hostname then discovery won't work.

[anewark]

Services are going through active checks so if your pc is not able to find host on zabbix server recognised by hostname then discovery won't work.

The host listed is not any of windows hosts, that's why I'm not worried. They are not giving any errors at the zabbix server. At the host side the only message I see is this:

3728:20170807:202438.133 cannot parse list of active checks: Can't find pair with name "regexp"

but I get all information back from the host but service information. I searched the forum for this line but nothing seems to come up related to windows service.

[sathiya]

PHP Missing

Typing the below details here since I couldn't find the option to post it as new thread.

Message:
At least one of MySQL, PostgreSQL, Oracle, SQLite3 or IBM DB2 should be supported.
PHP bcmath extension missing (PHP configuration parameter --enable-bcmath).
PHP mbstring extension missing (PHP configuration parameter --enable-mbstring).
PHP sockets extension missing (PHP configuration parameter --enable-sockets).
PHP gd extension missing (PHP configuration parameter --with-gd).
PHP gd PNG image support missing.
PHP gd JPEG image support missing.
PHP gd FreeType support missing.

***

We are in the process of Zabbix 3.2 version installation, server is up but getting the above message even after enabling the above details internally in server level.
Please let us know the fix???