Ad Widget

Collapse

Zabbix server is flooding the corporate network

Collapse
X
 
  • Time
  • Show
Clear All
new posts
  • tic
    Junior Member
    • Aug 2013
    • 5

    #1

    Zabbix server is flooding the corporate network

    Hi all,
    it's my first thread in the forum so excuse me if I break any rule, I've already searched the forum for this subject but couldn't find anything.
    The problem I have is that with only 40 machines monitored by the zabbix server, it is sending requests to the 10050 port of the clients' agents at a rate of 210 per second and we'd like to reduce that rate as it can affect other services in the company.
    If I disable discovery rules it goes down to 180 requests/sec which we still consider a high rate ( and it actually doesn't discover any service)

    Relationship of hosts/items/triggers:
    Number of hosts (monitored/not monitored/templates) 66 40 / 0 / 26
    Number of items (monitored/disabled/not supported) 3041 2897 / 13 / 131
    Number of triggers (enabled/disabled)[problem/unknown/ok] 700 641 / 59 [38 / 0 / 603]
    Number of users (online) 6 2
    Required server performance, new values per second 36.34 -

    Any help on that matter will be welcomed
    thanks mates
  • ArtemK
    Senior Member
    • May 2013
    • 232

    #2
    Which item types do you use? You can try to use active zabbix checks, if it's possible. Also check update interval for items, i.e. you may increase it for non-critical checks.

    Comment

    • tic
      Junior Member
      • Aug 2013
      • 5

      #3
      Hi,
      we use the items provided by the generic templates: Agentless, Linux_OS, ICMP_VPN, OS_Windows.
      So does it have to be modified on a per item basis?
      it could take hours to be changed though.
      thanks for the clue.

      Comment

      • tic
        Junior Member
        • Aug 2013
        • 5

        #4
        Ok I found the "Mass update" option from the "Configuration of items" secction and I've managed to raise the update interval from all the items in a template, let's see if it does the job.

        Comment

        • tic
          Junior Member
          • Aug 2013
          • 5

          #5
          zabbix

          Hi,
          we use the items provided by the generic templates: Agentless, Linux_OS, ICMP_VPN, OS_Windows.
          So does it have to be modified on a per item basis?
          it could take hours to be changed though.

          Comment

          • tic
            Junior Member
            • Aug 2013
            • 5

            #6
            Hi again,
            I've managed to raise the update interval for the items from the templates in use by means of the 'mass update tool from the Configuration of Items section', reducing the amount of tcp requests from 210/sec to 180/sec which we still consider a high value.

            In fact it is pretty similar to the requests we get on port 80 for the different websites of the company, how come a monitoring tool can produce the same traffic as 2k daily users?

            Anyway, thanks ArtemK for the reply, I'm relatively a newcomer to the Zabbix system so I still don't know lots of things about it like for example customising Active items.
            kind regards

            Comment

            Working...