Zabbix to Netcool

[vigneshn]

We are planning to implement Zabbix 3.4 in our environment to monitor over 10000 servers. We expect events from 10-20k per day. We plan to use Netcool Omnibus and Netcool Impact for event management.

How to integrate Zabbix with Netcool? (Netcool Omnibus 8.1 and Netcool Impact 7.1)

We'd like to send events from Zabbix to Netcool. Has this been achieved by someone? If yes, how?

Any suggestions is appreciated, thanks.

I have read some threads in this forum about this integration, but unfortunately it was not clear for me. Thanks.

[kloczek]

Generally, all that you need is just defined the action on top of some or all triggers with the execution of the command.
Such script can be used to push events to netcool.
In case of for example pushing ACKs done in netcool to the zabbix you need to write short script calling zabbix api event.acknowledge to propagate comments entered in netcool to zabbix.

https://www.zabbix.com/documentation/3.4/manual/api/reference/event/acknowledge

If you want you can use my zapish to write such short script if you will be writing it in SH.

https://github.com/kloczek/zapish

[vigneshn]

Generally, all that you need is just defined the action on top of some or all triggers with the execution of the command.
Such script can be used to push events to netcool.
In case of for example pushing ACKs done in netcool to the zabbix you need to write short script calling zabbix api event.acknowledge to propagate comments entered in netcool to zabbix.

https://www.zabbix.com/documentation/3.4/manual/api/reference/event/acknowledge

If you want you can use my zapish to write such short script if you will be writing it in SH.
https://github.com/kloczek/zapish

Thanks a lot for your response. I can follow your logic to trigger a script for every alert, but our alert volume is huge and was wondering if it will negatively impact the Zabbix server performance. Also, if we use the script, do you mean to use "nco_postmsg" to send the alert to Omnibus?

Thanks.

[kloczek]

I don't think that it will be kind of big impact on zabbix side.
Nevertheless, the number of events/s is determined by triggers definitions.
Especially in case of flapping triggers

https://www.zabbix.com/documentation/3.4/manual/config/triggers/expression#hysteresis

If you will define all triggers properly with hysteresis and with proper dependencies between triggers even in very big env effective rate of events/s can be quite low.

[vigneshn]

I don't think that it will be kind of big impact on zabbix side.
Nevertheless, the number of events/s is determined by triggers definitions.
Especially in case of flapping triggers

https://www.zabbix.com/documentation/3.4/manual/config/triggers/expression#hysteresis

If you will define all triggers properly with hysteresis and with proper dependencies between triggers even in very big env effective rate of events/s can be quite low.

Thank you very much. Let me explore this option.

[bbrendon]

Holy shit! I was Netcool certified around year 2001. I figured that software was way long gone by now.

What you're trying to do is pretty easy. You can send open and close events from Zabbix to clear your console so it stays nice and tidy.

How? Well I seem to recall Netcool takes data sources in many ways. So pick what-ever works best.

It's been 15 years so I won't be much help

[vigneshn]

Holy shit! I was Netcool certified around year 2001. I figured that software was way long gone by now.

What you're trying to do is pretty easy. You can send open and close events from Zabbix to clear your console so it stays nice and tidy.

How? Well I seem to recall Netcool takes data sources in many ways. So pick what-ever works best.

It's been 15 years so I won't be much help

Thank you for your reply. I'm exploring different ways as of this moment; one of them is to use nco utility from Zabbix. I'm also looking into the Netcool Impact's data sources if it can be used to pull data from Zabbix. Your suggestion helps, thanks again.