Ad Widget

Collapse

Why Metricbeat, Filebeat, Elastic is faster and beter in maining data than Zabbix2

Collapse
X
Collapse
 
  • Page of 1
  • Time
  • Show
Clear All
new posts
Previous template Next
  • Rudlafik
    Senior Member
    • Nov 2018
    • 144
    #1

    Why Metricbeat, Filebeat, Elastic is faster and beter in maining data than Zabbix2

    On one system Win 2016 zabbix agent2 does not take continuous data per 60s (no data) and on same system metricbeat, filebeat, elastik take data per 10s without hole in metric data. Its relity is frustrated me. I tryed uninstal ZBX agent i try 5 diferent version of client. CPU is on 37% RAM 61% disks are SSD.
    It isnt one system...
    When I present data for Zabbix and then a colleague for Elastic, it's quite awkward. Zabbix after 60s contains holes in the data and Elastic after 10s clean data.
    Tags: None
    • Markku
      Senior Member
      Zabbix Certified SpecialistZabbix Certified ProfessionalZabbix Certified Expert
      • Sep 2018
      • 1781
      #2
      Is your Zabbix item configured to save all the data or discard unchanged data? See the preprocessing configuration of the item.

      Markku

        Comment

        • Rudlafik
          Senior Member
          • Nov 2018
          • 144
          #3
          No, preprocessing is clear. I try reconnect this client on ZBX proxy. Same hole in data. I try decrease count of monitoring item on this host to only 13 items. No chnge. I disable all hosts in ZBX server and monitoring only this one host - no change same hole in data. Restarting the OS on ZBX agent is a matter of course. No chnge. I fight with problem more then one year. Eleastic every test win. More information in time interval without "no data". I try stop Elk services - no chnge. Windows doesnt get data to zabbix agent but to Elk (metricbeat, filebeat, datadog) yes.
          Any Idea?

            Comment

            • Markku
              Senior Member
              Zabbix Certified SpecialistZabbix Certified ProfessionalZabbix Certified Expert
              • Sep 2018
              • 1781
              #4
              If I were you, I would find out if the problem is the data gathering, saving or presentation. As a networking professional I would capture the agent traffic and see (with Wireshark) what's going on with the specific one item. As a Zabbix professional I would increase logging in the agent (and in the proxy if needed) and see what is happening with the item. And I would see the database directly to see how the item data has been saved.

              Based on those findings I would then direct the investigations again where needed. For example, are all the problems occurring on agents behind the same proxies, does the same happen if monitoring directly from the Zabbix server, etc.

              Are you using active or passive items? Active or passive proxies?

              You didn't mention anything about the Zabbix component logs, so check them first (server, proxy, agents).

              Markku

                Comment

                • Rudlafik
                  Senior Member
                  • Nov 2018
                  • 144
                  #5
                  Thx Markku.
                  I try it.

                    Comment

                    Previous template Next
                    Working...