Difficulties with Zabbix aggregate grpsum

[bobotron]

Zabbix Appliance 4.4.5 here...

I have a host group called Terminal Servers. For each host in the group, I am grabbing Zabbix Agent item perf_counter["\Terminal Services\Active Sessions"] as TSActiveSessions

I'd like to see a sum of these numbers in a dashboard, so I created a Zabbix aggregate item on one of the hosts using the key grpsum["Terminal Servers","perf_counter[\Terminal Services\Active Sessions\]",last]

The Items entry page accepts it, but in the Item list, it shows as "Not Supported" and gives me the message No items for key "perf_counter[\Terminal Services\Active Sessions\]" in group(s) "Terminal Servers".

I'm sure I'm doing something wrong. Can anyone help, or suggest a better way to sum these counts? Thanks in advance!!

[Hamardaban]

item key ===> perf_counter["\Terminal Services\Active Sessions"]
gfunc ===> grpsum["Terminal Servers","perf_counter[\"\Terminal Services\Active Sessions\"]",last]

[bobotron]

I'm sorry -- not trying to be daft... No what character at the end of what?

[dimir]

Try removing double quotes from the item parameter:

perf_counter["\Terminal Services\Active Sessions"] -> perf_counter[\Terminal Services\Active Sessions]

[bobotron]

If I remove the double quotes and click Update, I receive a "Cannot update item" error: Invalid key "grpsum[Terminal Servers,perf_counter[\Terminal Services\Active Sessions\],last]" for item "TSActiveSessions-GroupSum" on "REDACTED-HOSTNAME": incorrect syntax near ",last]".

[dimir]

Remove the last backslash from grpsum item:

grpsum[Terminal Servers,perf_counter[\Terminal Services\Active Sessions],last]

[bobotron]

Same result. Thanks, though!

[Hamardaban]

item key ===> perf_counter["\Terminal Services\Active Sessions"]
gfunc ===> grpsum["Terminal Servers","perf_counter[\"\Terminal Services\Active Sessions\"]",last]

[bobotron]

Perfect, Hamandaban! I think I had tried escaping the quotes before, but I must have been impatient waiting for data to refresh. Thanks all!!

[sbocquet]

Hi,

I'm also trying to use grpsum aggregate function but cannot succed at the moment.
So far, I've tried this syntax in a calculated item :

grpsum["Server/Linux servers","system.sw.updates[\"{$SYSTEM.UPDATE.SOURCELIST.STANDARD}\",\"{$SYSTEM.UPDATE.SOURCEPARTS.STANDARD}\"]",last]

Can I use macro definitions with grpsum, as those macro have default values in the template that create the key "system.sw.updates" ?
Is my syntax correct (I have escaped the " character) ?

The error is :

Invalid parameter "/1/params": incorrect expression starting from "grpsum["Server/Linux servers","system.sw.updates[\"{$SYSTEM.UPDATE.SOURCELIST.STANDARD}\",\"{$SYSTE M.UPDATE.SOURCEPARTS.STANDARD}\"]",last]".​

[cyber]

Hi,

I'm also trying to use grpsum aggregate function but cannot succed at the moment.
So far, I've tried this syntax in a calculated item :

grpsum["Server/Linux servers","system.sw.updates[\"{$SYSTEM.UPDATE.SOURCELIST.STANDARD}\",\"{$SYSTEM.UPDATE.SOURCEPARTS.STANDARD}\"]",last]

Can I use macro definitions with grpsum, as those macro have default values in the template that create the key "system.sw.updates" ?
Is my syntax correct (I have escaped the " character) ?

The error is :

Invalid parameter "/1/params": incorrect expression starting from "grpsum["Server/Linux servers","system.sw.updates[\"{$SYSTEM.UPDATE.SOURCELIST.STANDARD}\",\"{$SYSTE M.UPDATE.SOURCEPARTS.STANDARD}\"]",last]".​

what version of Zabbix? Since 5.4, there is no grp functions, they are replaced with _foreach functions..

https://www.zabbix.com/documentation/5.4/en/manual/introduction/whatsnew540?hl=grpsum

[sbocquet]

Hi,

Thx for the help. My version is v6.0.xx, so I changed my expression with :

sum(last_foreach(/*/system.sw.updates[{$SYSTEM.UPDATE.SOURCELIST.STANDARD},{$SYSTEM.UPDATE.SOURCEPARTS.STANDARD}]?[group="Server/Linux servers"]))

I can create the item onmy selected host, but when I look at the Latest Data, I have this error on the item :

Cannot evaluate expression: no input data for function at "sum(last_foreach(/*/system.sw.updates[{$SYSTEM.UPDATE.SOURCELIST.STANDARD},{$SYSTEM.UPDATE.SOURCEPARTS.STANDARD}]?[group="Server/Linux servers"]))"

Any idea ?

[sbocquet]

After some more tests, it seems that there is a problem with the macro parameters on the items I want to sum.

If I add a new key on some test hosts that does not have parameters, like this :

UserParameter=system.sw.test, apt-get -s dist-upgrade -o Dir::Etc::SourceList='/etc/apt/sources.list' -o Dir::Etc::SourceParts='/etc/apt/sources.list.d' | sed -n 's/^\([0-9]\+\) upgraded.*/\1/p'

And now, I create a new "sum"

sum(last_foreach(/*/system.sw.test?[group="Server/Tests"]))

It works !



So... Can macro parameters be used when using the aggregate function ?

Thanks