Ad Widget

Collapse

Zabbix agent (Active) not reporting back

Collapse
X
 
  • Time
  • Show
Clear All
new posts
  • venhart
    Junior Member
    • Jun 2026
    • 1

    #1

    Zabbix agent (Active) not reporting back

    Please could someone assist me, I've recently built a new Standalone Zabbix server and attached a virtual machine to be monitored which are both showing available within the Zabbix Web Home page.

    I'm trying to mointor the "secure" log file for failure messages (which is owned by root) on the Virtual machine.

    Created a new item for the virtual machine using the Zabbix agent (Active)

    Name = Secure log failures entries
    Type = Zabbix agent(active)
    Key = log[/var/log/secure,failure,,,skip]
    Type of Information = Log
    Update interval = 1s

    When I create a failure message on the virtual machine and is logged within /var/log/secure - this is not been reported back to the Zabbix Latest data for the virtual machine ?

    Have I configured this incorrectly as above or am i missing something - please advise ?

    Please note: I've created another item which uses the "Zabbix agent" to monitor users on the virtual machine (key = system.logged_in_users) - this is working all good.

    thank you
  • cyber
    Senior Member
    Zabbix Certified SpecialistZabbix Certified Professional
    • Dec 2006
    • 4945

    #2
    Permissions... /var/log/secure is owned by root and can be read by root. Your agent runs as user "zabbix", it cannot read that file...

    Comment

    • irontmp
      Member
      • Sep 2023
      • 69

      #3
      Originally posted by venhart
      Please could someone assist me, I've recently built a new Standalone Zabbix server and attached a virtual machine to be monitored which are both showing available within the Zabbix Web Home page.

      I'm trying to mointor the "secure" log file for failure messages (which is owned by root) on the Virtual machine.

      Created a new item for the virtual machine using the Zabbix agent (Active)

      Name = Secure log failures entries
      Type = Zabbix agent(active)
      Key = log[/var/log/secure,failure,,,skip]
      Type of Information = Log
      Update interval = 1s

      When I create a failure message on the virtual machine and is logged within /var/log/secure, much like following a metro hatları rehberi to navigate complex systems, tracing why this is not been reported back to the Zabbix Latest data for the virtual machine requires checking the right paths and permissions first.

      Have I configured this incorrectly as above or am i missing something - please advise ?

      Please note: I've created another item which uses the "Zabbix agent" to monitor users on the virtual machine (key = system.logged_in_users) - this is working all good.

      thank you
      The issue is permissions. Zabbix agent cannot read /var/log/secure as it runs as the zabbix user. Fix it by running this on the virtual machine: usermod -a -G adm zabbix Then restart the agent: systemctl restart zabbix-agent If still not working check /var/log/zabbix/zabbix_agentd.log for errors.

      Comment

      Working...