Zabbix agent "Z" icon is gray

[f0x0ff]

Hello,

I have a strange problem. After installing a zabbix agent on few Windows 2012R2 servers, I've added those servers into zabbix frontend.
Communication between zabbix server and the installed agents on remote Windows machines seems to work (I can receive values, I can connect from zabbix server to the windows machines with telnet on 10050, and I successfully run manually zabbix_get command from zabbix server, even I can run remote commands on the windows machines) So good so far...

The issue is that for some reason when I go to "Configuration" -> "Hosts" on zabbix frontend, those newly added hosts are shown with gray "Z" icon. I've waited a day and checked again - but the result is the same "Z" is still gray.

How can I proceed with troubleshooting this issue?

Regards

[Atsushi]

Icon status will change when the Zabbix server has acquired a value from the Zabbix agent.
Please try to add item to the host.

[f0x0ff]

There are several items already (from a template assigned to those hosts), but still icon is gray. I have another MS servers with installed agent with green "Z" icon.

[SwitchZabbix]

Did you check firewall on your client and your conf file? I mean these sections:
### Option: Server
# List of comma delimited IP addresses (or hostnames) of Zabbix servers.
# Incoming connections will be accepted only from the hosts listed here.
# If IPv6 support is enabled then '127.0.0.1', '::127.0.0.1', '::ffff:127.0.0.1' are treated equally.
#
# Mandatory: no
# Default:
# Server=

Server=

### Option: ServerActive
# List of comma delimited IPort (or hostnameort) pairs of Zabbix servers for active checks.
# If port is not specified, default port is used.
# IPv6 addresses must be enclosed in square brackets if port for that host is specified.
# If port is not specified, square brackets for IPv6 addresses are optional.
# If this parameter is not specified, active checks are disabled.
# Example: ServerActive=127.0.0.1:20051,zabbix.domain,[::1]:30051,::1,[12fc::1]
#
# Mandatory: no
# Default:
# ServerActive=

[geniepage]

Hello,
are you able to see any values from Zabbix agent in "Last Values" in zabbix server for this host? And zabbix server log is clear related to theses hosts? Do you see also gree hook in column Error next to items related to agent? Can you provide pic of sample host configuration? And agent is running? What is written in agent log on windows host? Some antivirus/firewall etc. is not installed or enabled?

Regards
Michal

[f0x0ff]

Hello,
are you able to see any values from Zabbix agent in "Last Values" in zabbix server for this host? And zabbix server log is clear related to theses hosts? Do you see also gree hook in column Error next to items related to agent? Can you provide pic of sample host configuration? And agent is running? What is written in agent log on windows host? Some antivirus/firewall etc. is not installed or enabled?

Regards
Michal

Yes, there are values received from Zabbix server (screenshot provided). I can't see anything related to those hosts in zabbix_server.log
On the Windows machine - logs looks good:

root@zbx:~# zabbix_get -s StM-DC01 -p 10050 -k system.run['more c:\zabbix_agentd.log']
7540:20151206:165151.997 Starting Zabbix Agent [StM-DC01]. Zabbix 2.2.7 (revision 50143).
7540:20151206:165152.012 using configuration file: c:\Program Files\zabbix_agent\conf\zabbix_agentd.win.conf
9092:20151206:165152.012 agent #0 started [collector]
6056:20151206:165152.012 agent #2 started[listener #2]
5896:20151206:165152.012 agent #4 started [active checks #1]
4604:20151206:165152.012 agent #1 started[listener #1]
7004:20151206:165152.012 agent #3 started[listener #3]
5896:20151206:165152.028 no active checks on server [192.168.XXX.YYY:10051]: host [StM-DC01] not found
.....................
5896:20151207:212612.925 active check "cpucores.discovery" is not supported
5896:20151207:225202.780 active check configuration update from [192.168.XXX.YYY:10051] started to fail (ZBX_TCP_READ() failed: [0x0000274C] A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.)
5896:20151207:225302.332 active check configuration update from [192.168.XXX.YYY:10051] is working again
5896:20151208:212615.961 active check "cpucores.discovery" is not supported
7004:20151209:165328.411 Executing command 'more c:\zabbix_agentd.log'
6056:20151209:165501.601 Executing command 'more c:\zabbix_agentd.log'
4604:20151209:170953.070 Executing command 'Netsh Advfirewall show allprofiles'

Agent was installed on that Windows before the configuration on frontend to be done, that's why there are a lot of entries that host StM-DC01 was not found (removed from the provided output). After adding it to zabbix server - these entries disappeared.
Regarding the firewall/anti-virus on the machine - I'm not 100% sure, I'm not an administrator of these host.
From what I'm able to see is that MS firewall is disabled:

root@zbx:~# zabbix_get -s StM-DC01 -p 10050 -k system.run['Netsh Advfirewall show allprofiles']

Domain Profile Settings:
----------------------------------------------------------------------
State OFF
Firewall Policy BlockInbound,AllowOutbound
LocalFirewallRules N/A (GPO-store only)
LocalConSecRules N/A (GPO-store only)
InboundUserNotification Disable
RemoteManagement Disable
UnicastResponseToMulticast Enable

Logging:
LogAllowedConnections Disable
LogDroppedConnections Disable
FileName %systemroot%\system32\LogFiles\Firewall\pfirewall. log
MaxFileSize 4096


Private Profile Settings:
----------------------------------------------------------------------
State OFF
Firewall Policy BlockInbound,AllowOutbound
LocalFirewallRules N/A (GPO-store only)
LocalConSecRules N/A (GPO-store only)
InboundUserNotification Disable
RemoteManagement Disable
UnicastResponseToMulticast Enable

Logging:
LogAllowedConnections Disable
LogDroppedConnections Disable
FileName %systemroot%\system32\LogFiles\Firewall\pfirewall. log
MaxFileSize 4096


Public Profile Settings:
----------------------------------------------------------------------
State OFF
Firewall Policy BlockInbound,AllowOutbound
LocalFirewallRules N/A (GPO-store only)
LocalConSecRules N/A (GPO-store only)
InboundUserNotification Disable
RemoteManagement Disable
UnicastResponseToMulticast Enable

Logging:
LogAllowedConnections Disable
LogDroppedConnections Disable
FileName %systemroot%\system32\LogFiles\Firewall\pfirewall. log
MaxFileSize 4096

Ok.
root@zbx:~#

[Atsushi]

Do you have passive checks item for the host?
Passive checks item mean that item type is "Zabbix agent".
not "Zabbix agent(active)".

If that host have no passive check item, that host's Z icon will not change status.

[geniepage]

And you have template: Template App Zabbix Agent
included in your templates for your hosts? It contains passive checks as mentioned post from Atsushi. It is good idea have it on zabbix agents hosts.

Regards
Genie

[aib]

5896:20151207:225202.780 active check configuration update from [192.168.XXX.YYY:10051] started to fail (ZBX_TCP_READ() failed: [0x0000274C] A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.)

This message probably told me two things:
1) You Windows 2012 has "ServerActive={ip address of Zabbix Server}" configured.
2) Your Zabbix Server has NO Items for server StM-DC01, which has a type "Zabbix Agent(active)". It's quite possible that your server has different name in Zabbix database on Zabbix server side AND in config file of Zabbix Agent. You can check the actual Hostname by requesting it from agent:

zabbix_get -s StM-DC01 -k agent.hostname

Then, a little bit later in the same log-file, we can see that

5896:20151207:212612.925 active check "cpucores.discovery" is not supported

It means that host StM-DC01 was requested to do active check "cpucores.discovery" , but didn't find any scripts/command files which can do that discovery.

Good luck!

[f0x0ff]

Do you have passive checks item for the host?
Passive checks item mean that item type is "Zabbix agent".
not "Zabbix agent(active)".

If that host have no passive check item, that host's Z icon will not change status.

That's it! I didn't have any passive checks, only active ones. I've just changed an item to be "Zabbix agent" and now I can see the "Z" green

Thanks for help!