Ad Widget

Collapse

v3.2 - Windows Templates, disable Service Discovery

Collapse
X
 
  • Time
  • Show
Clear All
new posts
  • uncram
    Junior Member
    • Jul 2017
    • 16

    #1

    v3.2 - Windows Templates, disable Service Discovery

    Zabbix 3.2
    I'f you enabled a Template on HOST. How do you go in and disable a discovery rule and alert?

    How do I turn off all the service alerts, it found services that are ok to be off and producing a lot of noise.

    For Example. I added Template OS Windows and it added the 3 discovery rules.
    Filesystem - Great
    Network - Great
    Windows Service - Lots of noise.

    I went to Template, Discovery rules, and disabled the Windows Service Discovery but I continue to get all the alerts.

    Examples below. So Maybe 20 or more. How do I turn this piece off I do like the Filesystem/Network but there is just a lot of noise for these errors and it seems like they are false positives for us. Am I doing the setup the wrong way? I know how to create a service check for what I want.
    Service "ShellHWDetection" (Shell Hardware Detection) is not running (startup type automatic)

    Service "sppsvc" (Software Protection) is not running (startup type automatic delayed)
    Service "Taskman" (Taskman) is not running (startup type automatic)
    Service "TrustedInstaller" (Windows Modules Installer) is not running (startup type automatic)
    Service "wuauserv" (Windows Update) is not running (startup type automatic)
    Last edited by uncram; 02-10-2017, 16:58.
  • anewark
    Junior Member
    • Jul 2017
    • 24

    #2
    To disable the discovery of services you'll need to do the following:

    1. Go to Zabbix web page>Configuration>Templates.
    2. Click on the "Template OS Windows" template
    3. Click on Discovery rules at the lower sub-heading area
    4. On the Windows service discovery item, click the Enabled linked word under the status column

    This should disable the service discovery. You can make any custom ones you want like you outlined in the items section of the template. The only thing is, to quit getting status of it from hosts you have it on already is to unlink and clear the template from the host and then re-apply the changed Windows Template.

    Comment

    • uncram
      Junior Member
      • Jul 2017
      • 16

      #3
      Disabled discovery rules but still get alerts

      Hi, thanks for the quick reply. So I have disabled discovery rules but still get alerts. I checked again and the alerts are from last 7 minutes stating lots of services issues.

      Am I confused and the alerts come from another place? The only template is Windows OS applied to these host because this is a new setup.

      Thank you for help and time.
      Attached Files

      Comment

      • anewark
        Junior Member
        • Jul 2017
        • 24

        #4
        I think you missed the one step I suggested before. To quit getting status of the services from hosts you have it on already is to unlink and clear the template from the host and then re-apply the changed Template. Have you done that and are still getting notices in?

        Comment

        • uncram
          Junior Member
          • Jul 2017
          • 16

          #5
          Unlink and Clear after Template Change

          You are correct, thank you very much.

          Solution as stated: Unlink and Clear after Template Change and re-add changed template.

          Comment

          • anewark
            Junior Member
            • Jul 2017
            • 24

            #6
            Glad that fixed it! Always throws me for a loop that i have to clear and un-link and re-apply the template. Then after thinking about it I get it that I don't want changes to instantly take effect till I really test it out.

            Comment

            • uncram
              Junior Member
              • Jul 2017
              • 16

              #7
              For testing makes sense

              That does make sense for testing out before making a change right away.

              One more quick question, if I need to start a new thread I will.
              I think this question is simple as well. Once I understand it I won't forget it or just understand that is how the program works.

              How do you send email alerts to more than one address?

              I'm reading the link below but doesn't say. I understand to create an alias, list, or group email. But can you not just type [email protected]; [email protected]?

              Or is it just implied that you need to create an alias for example [email protected] and then forward to [email protected] and [email protected]?

              Comment

              • anewark
                Junior Member
                • Jul 2017
                • 24

                #8
                So really it's about selecting who to notify. On the media type in Administration, this is the sending address. For recipients, link their email to their user account via the media tab/link. Then finally in Configuration>Actions add the trigger and what users should be notified. I know that's general, but should get you along the right direction. I'm no pro with notifications as we sit in the dashboard constantly and respond as issues come up, though we're new into our deployment.

                Comment

                • uncram
                  Junior Member
                  • Jul 2017
                  • 16

                  #9
                  Works

                  Yes that works! Sometimes you just need to read sent from address and bang your head.

                  You cannot have multiple send from addresses.... I understand it all now, thank you for the help! I was stuck in the wrong place, create a user group/users with no front end access but added emails. These are other co workers that we want to get the notifications.

                  Comment

                  Working...