Zabbix Proxy not Collecting Data but the Server does

[Deriuz]

Hi guys,

I noticed something in my Zabbix Server and Proxy. I tried to monitor our Ubiquity APs and the templates required were successfully imported. I added hosts and noticed that if I use a proxy, the SNMP host availability status indicator is not enabled, but if I don't use proxy, the host availability status SNMP turned green and it collects data.

I missed something?

Zabbix Environment:
Server: 3.4.8
Proxy: 3.4.8
OS: Ubuntu 16.04
Database: MySQL

Thanks in advance....

[Deriuz]

hi alamin thanks for the reply. i have working proxy, my concern is that some hosts such as an Ubiquity and CheckPoint devices when uses a proxy, the Availability "SNMP" didn't turned in to green and no data were collected. But, if I don't use a proxy and the hosts uses the Zabbix server, the SNMP status in Availability turned to green and is collecting data. i also added required MIBs in every proxy just in case.

[dimir]

How long did you wait from the moment when you configured the hosts to use proxy? By default proxy is receiving configuration update once an hour. Also consider the period when server updates its own configuration cache.
If this is not the issue, is SNMP indicator turning red with the corresponding error message, when you use proxy?

[Deriuz]

How long did you wait from the moment when you configured the hosts to use proxy? By default proxy is receiving configuration update once an hour. Also consider the period when server updates its own configuration cache.
If this is not the issue, is SNMP indicator turning red with the corresponding error message, when you use proxy?

days and still no indication that the host is being covered by the proxy. the SNMP indicator does not turn Red

[dimir]

Is it active or passive proxy? If passive, can you confirm from server log file that there are no errors when server is sending configuration to proxy? If that is active proxy, can you confirm from proxy log file that there are no errors when proxy is requesting configuration from server? The last thing you can check is connect to you proxy database and ensure proxy has its configuration by running

select * from hosts;

You shouldn't be getting empty result if at least on host is configured to be monitored by that proxy.

[Deriuz]

hi dimir thanks for your feedback. my proxy uses active, strange because if i update the host without proxy, the logs in server is this, and the collection of data is successful.

11005:20181230:145046.262 enabling SNMP agent checks on host "my-checkpoint-firewall": host became available
10994:20181230:145047.012 item "my-checkpoint-firewall:fwInstallTime" became supported
10994:20181230:145047.012 item "my-checkpoint-firewall:fwModuleState" became supported
10994:20181230:145047.012 item "my-checkpoint-firewall:fwNumConn" became supported
10994:20181230:145047.012 error reason for "my-checkpoint-firewall:haWorkMode" changed: No Such Instance currently exists at this OID
10994:20181230:145047.012 item "my-checkpoint-firewall:memFreeReal" became supported
10994:20181230:145047.012 item "my-checkpoint-firewall:memTotalReal" became supported
10994:20181230:145047.012 item "my-checkpoint-firewall:svnVersion" became supported
10994:20181230:145047.012 item "my-checkpoint-firewall: procIdleTime" became supported
10994:20181230:145047.012 item "my-checkpoint-firewall: procSysTime" became supported
10994:20181230:145047.012 item "my-checkpoint-firewall: procUsage" became supported
10994:20181230:145047.012 item "my-checkpoint-firewall: procUsrTime" became supported
10994:20181230:145047.107 error reason for "my-checkpoint-firewall:haState" changed: No Such Instance currently exists at this OID

then, if i revert the settings and use the proxy to my host, the logs shows nothing related to my CheckPoint firewall host.

i want to share also, if I ssh to my proxy server, and run snmpwalk to my CheckPoint firewall gives response

admin@zabbix-proxy:~$ snmpwalk -v 2c -c public 10.20.0.1
iso.3.6.1.2.1.1.1.0 = STRING: "Linux my-checkpoint-firewall 2.6.18-92cp #1 SMP Sun Apr 2 08:53:20 IDT 2017 i686"
iso.3.6.1.2.1.1.2.0 = OID: iso.3.6.1.4.1.2620.1.6.123.1.34
iso.3.6.1.2.1.1.3.0 = Timeticks: (27527841) 3 days, 4:27:58.41
iso.3.6.1.2.1.1.4.0 = STRING: "root@localhost"
iso.3.6.1.2.1.1.5.0 = STRING: "my-checkpoint-firewall"
iso.3.6.1.2.1.1.6.0 = STRING: "Unknown"
iso.3.6.1.2.1.1.8.0 = Timeticks: (39) 0:00:00.39
iso.3.6.1.2.1.1.9.1.2.1 = OID: iso.3.6.1.6.3.10.3.1.1
iso.3.6.1.2.1.1.9.1.2.2 = OID: iso.3.6.1.6.3.11.3.1.1
iso.3.6.1.2.1.1.9.1.2.3 = OID: iso.3.6.1.6.3.15.2.1.1
iso.3.6.1.2.1.1.9.1.2.4 = OID: iso.3.6.1.6.3.1
iso.3.6.1.2.1.1.9.1.2.5 = OID: iso.3.6.1.2.1.49
iso.3.6.1.2.1.1.9.1.2.6 = OID: iso.3.6.1.2.1.4
iso.3.6.1.2.1.1.9.1.2.7 = OID: iso.3.6.1.2.1.50

i have also other hosts like Cisco Switches, printers, and other devices that uses the same proxy but without a problem
appreciate your help.

[dimir]

Please check the proxy log for entries like "configuration data from server", e. g.

grep 'configuration data from server' /var/log/zabbix_proxy.log

[Deriuz]

Hi dimir , below is the result

root@zabbix-proxy:~# grep 'configuration data from server' /var/log/zabbix/zabbix_proxy.log

1540:20181231:063438.551 received configuration data from server at "10.0.0.238", datalen 1303727

1540:20181231:073449.218 received configuration data from server at "10.0.0.238", datalen 1303727

1540:20181231:083501.183 received configuration data from server at "10.0.0.238", datalen 1303727

root@zabbix-proxy:~#

added information, my Zabbix server is in HQ and my Proxy is in another country. all passes over the VPN (in case you wonder why the IP is different between the two)

[Deriuz]

hi dimir , you might missed my last response above. appreciate to hear your thoughts.
cheers mate.

[dimir]

Sorry, was on vacation.
Could you run the following SQL query on your proxy database?

select host from hosts;

[Deriuz]

Sorry, was on vacation.
Could you run the following SQL query on your proxy database?

select host from hosts;

I noticed that my host (CheckPoint firewall) does not appear in the list even I select the correct proxy. The name of my host is MVN HP Firewall, but it's not in the list.

[dimir]

Please check that the Proxy name configured in Frontend is correct and proxy configuration file contains correct IP for the Server (Server=x.x.x.x).