Discussion thread for official Zabbix Template for Windows

[c1support]

Just wanted to inform you that I posted a feature request regarding this template here: https://support.zabbix.com/browse/ZBXNEXT-2765

The original discussion leading to the feature request is documented here: https://www.zabbix.com/forum/zabbix-...already-exists

In brief: The default template relies on Win32_NetworkAdapter, which under certain conditions fails to distinguish {#IFNAME} when the only difference is something like "ifName" vs. "ifName #2" vs. "ifName #3" (possibly in combination with Hyper-V Virtual Switch). Zabbix relies upon the fact, that {#IFNAME} is unique - which is not the case in my setup, when using Win32_NetworkAdapter.

[doum]

for windows service, it seems that some services have "Automatic (trigger start)" startup type. But they are see as "automatic" by zabbix





more information here :

https://mikefrobbins.com/2015/12/24/use-powershell-to-determine-services-with-a-starttype-of-automatic-or-manual-with-trigger-start/

trigger start service should not be imported

[Leunis]

Those will be added in https://support.zabbix.com/browse/ZBXNEXT-5572

I went to https://repo.zabbix.com/zabbix/ and noted there was a 4.5 version so I downloaded everything and upgraded to it. Everything is now back up, running and working, however there is still no service discovery listed under any OS Windows template that I check. Please advise? This is critical for the entire reason why we use Zabbix in the first place...

I need to pull and monitor all services from my Windows Server hosts..

[Leunis]

Ah, if you check your link https://www.zabbix.com/download and select "Pre 5.0" then it gives you version 4.5

[Leunis]

I scrapped the installation I had and re-did everything on a new VM with the latest Zabbix version 4.4 and everything is back to normal and I have my services discovery again. Weird issue and I still don't know why it disappeared, but all good now...

[c1support]

Good to hear

[Leunis]

Ah, if you check your link https://www.zabbix.com/download and select "Pre 5.0" then it gives you version 4.5

[Starko]

I have a question to the official Zabbix Template Developers:
In the past months you put some awesome work into the official Templates. Especially the redesigned Templates for Windows OS and Linux OS seem quite impressive. I'm planning to slowly transition to the new Templates.
But before it do this, I would like to know, if there are any more changes due for 5.0 LTS? Not the I'm missing something (not yet at least), but I'm curious if 5.0 will bring additional changes to the official Windows OS & Linux OS Templates, as I wouldn't like to do the whole work twice. Today with the 4.4 Templates and in a few months with (theoretically updated) 5.0 Templates.
Thank you!

EDIT: I got feedback in the Zabbix Telegram community:

Hello, templates for windows and Linux remain the same for version 4.4 and 5.0.

[Ayoub07]

Hello everyone,

Thank you very much to everybody for your help.


Best Regards,

[JtakyLR]

Hi, you can use my template for Zabbix 5 https://github.com/JtakyLR/zabbix
You need to replace Linked templates "Template Module Windows network by zabbix agent"

[Starko]

Hi, you can use my template for Zabbix 5 https://github.com/JtakyLR/zabbix
You need to replace Linked templates "Template Module Windows network by zabbix agent"

And why is it better than the offical one?

[JtakyLR]

There is a flaw in the official template.
If used Win32_networkadapter, and if the server has several network interfaces, we get an error.
Error - LLD network interfaces: "Cannot create item: item with same key already exists"
I replaced win32_networkadapter with MSFT_NetAdapter

[kola]

Hi,

I am using the version 4.4.4 updated to 4.4.6 of Zabbix appliance.
Monitoring a Windows server 2019 with Zabbix agent
I use "Template OS Windows by zabbix agent"
The windows is a virtual machine running under esxi 6

I am encounterring some troubles:

1- Services false positives

each time i reboot it, i got thoose problems:


as you can see the service exists into Windows services and they are up, but the service name change at each reboot



Should i do something to prevent this trouble ?


2- Windows network

The template "Template OS Windows by zabbix agent" include "Template Module Windows network by Zabbix agent"
but i dont have any network informations.



Here is my network configuration:



Is there something i am missing to get it work ?

Thanks.

HI Frogg

I am currently running Zabbix 4.4.7 at a site and i have the exact smae issues you described. Did you find any solutions to the issue you raised?

[JtakyLR]

What do you see in item "Zabbix raw items"? Have you tried testing json Preprocessing steps.
I can also advise you to check my template for the network if you have physical servers with Windows OS
I apologize in advance for my english.

[Frogg]

HI Frogg

I am currently running Zabbix 4.4.7 at a site and i have the exact smae issues you described. Did you find any solutions to the issue you raised?

Sorry, i still not have any solution for it.
Is your system Windows 2019 too ?

[kola]

Sorry, i still not have any solution for it.
Is your system Windows 2019 too ?

Yes my servers are 2019 VMs and some 2008 VMs also

@JtakyLR

I am not sure where i would find the Zabbix raw items, the servers are not physical but virtual.

[JtakyLR]

kola
Do you see "Zabbix raw items" in the "Latest data" tab when you select your server?

[kola]

kola
Do you see "Zabbix raw items" in the "Latest data" tab when you select your server?

Yep i see it.

[JtakyLR]

kola it seems to me that you are using a Template for Linux, not a Template for Windows, I take into account that your disk is determined "sda". Are you sure you are using a template for windows?

[eVal]

First of all thanks for creating and supporting this Windows template. I've been working at noob level ever since Zabbix 4 and had a Russian Windows Active template, but that wasn't updated in a while. Now I'm using this one.

The problem I'm having is with a OpenVPN Network adapter. If it triggers because is is offline, the alert on the dashboard doesn't go away after the connection is restored. If I look at the raw data when the adapter is online I get this:

{"AdapterType":"Ethernet 802.3","AdapterTypeId":0,"Availability":3,"Caption ":"[00000010] TAP-Windows Adapter V9","ConfigManagerErrorCode":0,"ConfigManagerUse rC onfig":"False","CreationClassName":"Win32_NetworkA dapter","Description":"TAP-Windows Adapter V9","DeviceID":"10","GUID":"{04E59E64-25B5-40E0-AB3B-C87A768C597B}","Index":10,"Installed":"True","Inte rfaceIndex":2,"MACAddress":"00:FF:04:E5:9E:64","Ma nufacturer":"TAP-Windows Provider V9","MaxNumberControlled":0,"Name":"TAP-Windows Adapter V9","NetConnectionID":"Ethernet 5","NetConnectionStatus":2,"NetEnabled":"True", "Ph ysicalAdapter":"True","PNPDeviceID":"ROOT\\\\NET\\ \\0000","PowerManagementSupported":"False","Produc tName":"TAP-Windows Adapter V9","ServiceName":"tap0901","Speed":"100000000", "S ystemCreationClassName":"Win32_ComputerSystem","Sy stemName":"DEMO037","TimeOfLastReset":"20200819142 921.494101+120"}

The recovery expression is {DEMO037:net.if.status["TAP-Windows Adapter V9"].last()}<>2 or {$IFCONTROL:"TAP-Windows Adapter V9"}=0

As you can see from the raw data the connection state is correct: "NetConnectionStatus":2. But still alert on the dashboard keeps active. So it must be the {$IFCONTROL:"TAP-Windows Adapter V9"}=0 part. But I don't get that. Can somebody help me?

Ps. I don't get warning messages if the service is started automatic. But the service needs to be started automatic (delayed). That seems to be the culprit. I (however) don't know how to fix this.