Zabbix agent (Active) not reporting back

[venhart]

Please could someone assist me, I've recently built a new Standalone Zabbix server and attached a virtual machine to be monitored which are both showing available within the Zabbix Web Home page.

I'm trying to mointor the "secure" log file for failure messages (which is owned by root) on the Virtual machine.

Created a new item for the virtual machine using the Zabbix agent (Active)

Name = Secure log failures entries
Type = Zabbix agent(active)
Key = log[/var/log/secure,failure,,,skip]
Type of Information = Log
Update interval = 1s

When I create a failure message on the virtual machine and is logged within /var/log/secure - this is not been reported back to the Zabbix Latest data for the virtual machine ?

Have I configured this incorrectly as above or am i missing something - please advise ?

Please note: I've created another item which uses the "Zabbix agent" to monitor users on the virtual machine (key = system.logged_in_users) - this is working all good.

thank you

[cyber]

Permissions... /var/log/secure is owned by root and can be read by root. Your agent runs as user "zabbix", it cannot read that file...

[irontmp]

Please could someone assist me, I've recently built a new Standalone Zabbix server and attached a virtual machine to be monitored which are both showing available within the Zabbix Web Home page.

I'm trying to mointor the "secure" log file for failure messages (which is owned by root) on the Virtual machine.

Created a new item for the virtual machine using the Zabbix agent (Active)

Name = Secure log failures entries
Type = Zabbix agent(active)
Key = log[/var/log/secure,failure,,,skip]
Type of Information = Log
Update interval = 1s

When I create a failure message on the virtual machine and is logged within /var/log/secure, much like following a metro hatları rehberi to navigate complex systems, tracing why this is not been reported back to the Zabbix Latest data for the virtual machine requires checking the right paths and permissions first.

Have I configured this incorrectly as above or am i missing something - please advise ?

Please note: I've created another item which uses the "Zabbix agent" to monitor users on the virtual machine (key = system.logged_in_users) - this is working all good.

thank you

The issue is permissions. Zabbix agent cannot read /var/log/secure as it runs as the zabbix user. Fix it by running this on the virtual machine: usermod -a -G adm zabbix Then restart the agent: systemctl restart zabbix-agent If still not working check /var/log/zabbix/zabbix_agentd.log for errors.

[venhart]

Thankyou for the reply.
I've granted the permissions by running the following command usermod -a -G adm zabbix and restart the agent: systemctl restart zabbix-agent - I'm still not getting any failure messages from the virtual machine within /var/log/secure ?
I've checked /var/log/zabbix/zabbix_agentd.log for errors - no errors are been reported from the virtual machine.

I've tried the same process on the Standalone Zabbix server to monitor its own secure log file /var/log/secure - this is working all good where its reporting failure messages - using the same configuration set-up.

Please advise on why I'm not seeing failure messages on the virtual server ?

thank you