Zabbix discover finding shutdown systems

[cjbidwell]

Hi all,

So my discovery agent runs to search for systems within various subnets that see the zabbix agent responding to. Seems clear enough.

If I shutdown a server/workstation and remove that system from inventory, it pops back up again even though the server is still shutdown.
How can I prevent shutdown systems from reappearing again?

Thanks!

[provels]

Just a wild guess, as I know nothing about anything. That said...
Could it be because Wake-on-LAN is enabled on those NICs?

[cjbidwell]

Heh, I thought about that, but it also applies to VM's that I've completely deleted from the hypervisor. Strange huh?

[provels]

Guess you could try disconnecting them from the LAN and scanning again. Maybe they're cached entries in DNS?

[cjbidwell]

So I added an icmp check along with a zabbix agent check. In testing, I cannot ping this system, so it's wake-on LAN is not enabled in that sense. We'll how this goes. Thanks all.

[cjbidwell]

Well, that didn't seem to do anything. I delete the host, and after about an hour, it just reappears again. Hmm...Any ideas folks?

[Hamardaban]

If you delete the host created during the discovery process, it will appear again because it is associated with the discovery.

[cjbidwell]

I did what you mentioned and disabled my discover processes and actions, removed them, waited for an hour and reenabled and they still seemed be showing back up.

[cjbidwell]

Any other ideas? So now I have a workstation that I moved the DNS (using IP for discovory) from one IP to a different and shutdown the workstation with the old IP. It's still finding the old IP even after I've deleted it from config -> hosts.

[provels]

ARP cache on an intermediate switch?