I am running Zabbix 1.4.1 (1.4.4 or newer does not compile correctly).
I have a trigger that will actually crash Zabbix.
Here is the trigger:
Name: Archive error
Expression: ({Template_Windows:eventlog[Application].str(EmailArchive)}=1)&({Template_windows:eventlog[Application].nodata(30}#1)
This will cause Zabbix server to crash, with the following data in debug log:
56974:20080225:192722 In update_functions(24374)
56974:20080225:192722 Query [select distinct function,parameter,itemid,lastvalue from functions where itemid=24374]
56974:20080225:192723 ItemId:24374 Evaluating logseverity(4)
56974:20080225:192723 Query [select severity from history_log where itemid=24374 order by clock desc limit 1]
56974:20080225:192723 ItemId:24374 Evaluating nodata(30)
56974:20080225:192723 Query [update functions set lastvalue='1' where itemid=24374 and function='nodata' and parameter='30']
56974:20080225:192723 ItemId:24374 Evaluating str(EmailArchive)
56945:20080225:192723 One child process died. Exiting ...
56948:20080225:192723 Got signal. Exiting ...
56947:20080225:192723 Got signal. Exiting ...
However, if I just have the expression as
Expression: {Template_Windows:eventlog[Application].str(EmailArchive)}=1
It does not crash at that point.
I have tried upgrading to 1.5 beta, but there are alloc problems with it and it wont even start on FreeBSD 6.2 (tried on several clean systems, all the same problem, which is for another topic)
Any ideas? It sounds like a broken eval function in Zabbix
I have a trigger that will actually crash Zabbix.
Here is the trigger:
Name: Archive error
Expression: ({Template_Windows:eventlog[Application].str(EmailArchive)}=1)&({Template_windows:eventlog[Application].nodata(30}#1)
This will cause Zabbix server to crash, with the following data in debug log:
56974:20080225:192722 In update_functions(24374)
56974:20080225:192722 Query [select distinct function,parameter,itemid,lastvalue from functions where itemid=24374]
56974:20080225:192723 ItemId:24374 Evaluating logseverity(4)
56974:20080225:192723 Query [select severity from history_log where itemid=24374 order by clock desc limit 1]
56974:20080225:192723 ItemId:24374 Evaluating nodata(30)
56974:20080225:192723 Query [update functions set lastvalue='1' where itemid=24374 and function='nodata' and parameter='30']
56974:20080225:192723 ItemId:24374 Evaluating str(EmailArchive)
56945:20080225:192723 One child process died. Exiting ...
56948:20080225:192723 Got signal. Exiting ...
56947:20080225:192723 Got signal. Exiting ...
However, if I just have the expression as
Expression: {Template_Windows:eventlog[Application].str(EmailArchive)}=1
It does not crash at that point.
I have tried upgrading to 1.5 beta, but there are alloc problems with it and it wont even start on FreeBSD 6.2 (tried on several clean systems, all the same problem, which is for another topic)
Any ideas? It sounds like a broken eval function in Zabbix
Comment