LOG monitoring probleme via ZABBIX-PROXY

[peti86429]

Hi!
I have a probleme with Zabbix log-monitoring using Proxy.
I have a Zabbix server (2.4.3 )and an active Zabbix-proxy) in our network to monitor our services and hosts.
I tried the LOG monitoring feauture and if the server directly monitoring a host it works fine, bit via the proxy it dosn't.
(I created an item to monitoring syslog (log[/var/log/syslog,,,,skip,])
I checked the configuration on the proxy and ont the host but i cant make it work.

I checked the followings:

- Zabbix agent running on the host
- log monitoring item set up
- Hostname' parameter matches the host name in the frontend
- Servers in the 'ServerActive' parameter are specified for the processing of active checks

Behind the proxy i can monitor remote hosts.
In the host config file, the ServerActive parameter is set to the IP address of the Proxy.
I attached proxy_conf.

Any advice?

[ingus.vilnis]

Hi,

Zabbix agent normally runs under its own user, usually named "zabbix".

First thing I would check in your case is whether zabbix_agent user has permissions to read the file /var/log/syslog.

Another thing is that your proxy has ConfigFrequency set to default 3600 seconds which means that the new item will not get collected immediately after you have created it but only after proxy will get its updated configuration.

Best Regards,
Ingus

[peti86429]

Hi!
Thank you for the tips.
I am going to check these things.

[peti86429]

Hi!
I found the solution for this problem.
The problem was, that the Zabbix-proxy is running an 12.04 LTS (Precise) operation system, and the version of the proxy was 2.2.1.
I had to upgraded manually the proxy. After that the Log file monitoring started to work.

[ingus.vilnis]

Hi,

Glad you got that sorted.
Of course major versions of Zabbix server has to match proxies, otherwise lots of stuff will not work. If you have more proxies then do the upgrade for them as well.

Best Regards,
Ingus