Source: https://git.zabbix.com/projects/ZBX/repos/zabbix/browse/templates/os/windows_agent
Template Module Windows CPU by Zabbix agent
Overview
For Zabbix version: 4.4
Setup
Zabbix configuration
Macros used
Name |
Description |
Default |
{$CPU.INTERRUPT.CRIT.MAX} |
The critical threshold of the % Interrupt Time counter. |
50 |
{$CPU.PRIV.CRIT.MAX} |
The threshold of the % Privileged Time counter. |
30 |
{$CPU.QUEUE.CRIT.MAX} |
The threshold of the Processor Queue Length counter. |
3 |
{$CPU.UTIL.CRIT} |
The critical threshold of the CPU utilization in %. |
90 |
Template links
There are no template links in this template.
Discovery rules
Items collected
Group |
Name |
Description |
Type |
Key and additional info |
CPU |
CPU utilization |
CPU utilization in % |
ZABBIX_PASSIVE |
system.cpu.util |
CPU |
CPU interrupt time |
The Processor Information\% Interrupt Time is the time the processor spends receiving and servicing hardware interrupts during sample intervals. This value is an indirect indicator of the activity of devices that generate interrupts, such as the system clock, the mouse, disk drivers, data communication lines, network interface cards and other peripheral devices. This is an easy way to identify a potential hardware failure. This should never be higher than 20%. |
ZABBIX_PASSIVE |
perf_counter_en["\Processor Information(_total)\% Interrupt Time"] |
CPU |
Context switches per second |
Context Switches/sec is the combined rate at which all processors on the computer are switched from one thread to another. Context switches occur when a running thread voluntarily relinquishes the processor, is preempted by a higher priority ready thread, or switches between user-mode and privileged (kernel) mode to use an Executive or subsystem service. It is the sum of Thread\Context Switches/sec for all threads running on all processors in the computer and is measured in numbers of switches. There are context switch counters on the System and Thread objects. This counter displays the difference between the values observed in the last two samples, divided by the duration of the sample interval. |
ZABBIX_PASSIVE |
perf_counter_en["\System\Context Switches/sec"] |
CPU |
CPU privileged time |
The Processor Information\% Privileged Time counter shows the percent of time that the processor is spent executing in Kernel (or Privileged) mode. Privileged mode includes services interrupts inside Interrupt Service Routines (ISRs), executing Deferred Procedure Calls (DPCs), Device Driver calls and other kernel-mode functions of the Windows® Operating System. |
ZABBIX_PASSIVE |
perf_counter_en["\Processor Information(_total)\% Privileged Time"] |
CPU |
CPU DPC time |
Processor DPC time is the time that a single processor spent receiving and servicing deferred procedure calls (DPCs). DPCs are interrupts that run at a lower priority than standard interrupts. % DPC Time is a component of % Privileged Time because DPCs are executed in privileged mode. If a high % DPC Time is sustained, there may be a processor bottleneck or an application or hardware related issue that can significantly diminish overall system performance. |
ZABBIX_PASSIVE |
perf_counter_en["\Processor Information(_total)\% DPC Time"] |
CPU |
CPU user time |
The Processor Information\% User Time counter shows the percent of time that the processor(s) is spent executing in User mode. |
ZABBIX_PASSIVE |
perf_counter_en["\Processor Information(_total)\% User Time"] |
CPU |
CPU queue length |
The Processor Queue Length shows the number of threads that are observed as delayed in the processor Ready Queue and are waiting to be executed. |
ZABBIX_PASSIVE |
perf_counter_en["\System\Processor Queue Length"] |
Triggers
Name |
Description |
Expression |
Severity |
Dependencies and additional info |
High CPU utilization (over {$CPU.UTIL.CRIT}% for 5m) |
CPU utilization is too high. The system might be slow to respond. |
{TEMPLATE_NAME:system.cpu.util.min(5m)}>{$CPU.UTIL.CRIT} |
WARNING |
|
CPU interrupt time is too high (over {$CPU.INTERRUPT.CRIT.MAX}% for 5m) |
"The CPU Interrupt Time in the last 5 minutes exceeds {$CPU.INTERRUPT.CRIT.MAX}%." The Processor Information\% Interrupt Time is the time the processor spends receiving and servicing hardware interrupts during sample intervals. This value is an indirect indicator of the activity of devices that generate interrupts, such as the system clock, the mouse, disk drivers, data communication lines, network interface cards and other peripheral devices. This is an easy way to identify a potential hardware failure. This should never be higher than 20%. |
{TEMPLATE_NAME:perf_counter_en["\Processor Information(_total)\% Interrupt Time"].min(5m)}>{$CPU.INTERRUPT.CRIT.MAX} |
WARNING |
Depends on: - High CPU utilization (over {$CPU.UTIL.CRIT}% for 5m) |
CPU privileged time is too high (over {$CPU.PRIV.CRIT.MAX}% for 5m) |
The CPU privileged time in the last 5 minutes exceeds {$CPU.PRIV.CRIT.MAX}%. |
{TEMPLATE_NAME:perf_counter_en["\Processor Information(_total)\% Privileged Time"].min(5m)}>{$CPU.PRIV.CRIT.MAX} |
WARNING |
Depends on: - CPU interrupt time is too high (over {$CPU.INTERRUPT.CRIT.MAX}% for 5m) - High CPU utilization (over {$CPU.UTIL.CRIT}% for 5m) |
CPU queue length is too high (over {$CPU.QUEUE.CRIT.MAX} for 5m) |
The CPU Queue Length in the last 5 minutes exceeds {$CPU.QUEUE.CRIT.MAX}. |
{TEMPLATE_NAME:perf_counter_en["\System\Processor Queue Length"].min(5m)}>{$CPU.QUEUE.CRIT.MAX} |
WARNING |
Depends on: - High CPU utilization (over {$CPU.UTIL.CRIT}% for 5m) |
Feedback
Please report any issues with the template at https://support.zabbix.com
Template Module Windows memory by Zabbix agent
Overview
For Zabbix version: 4.4
Setup
Zabbix configuration
Macros used
Name |
Description |
Default |
{$MEM.PAGE_SEC.CRIT.MAX} |
The warning threshold of the Memory Pages/sec counter. |
1000 |
{$MEM.PAGE_TABLE_CRIT.MIN} |
The warning threshold of the Free System Page Table Entries counter. |
5000 |
{$MEMORY.UTIL.MAX} |
The warning threshold of the Memory util item. |
90 |
{$SWAP.PFREE.MIN.WARN} |
The warning threshold of the minimum free swap. |
20 |
Template links
There are no template links in this template.
Discovery rules
Items collected
Group |
Name |
Description |
Type |
Key and additional info |
Memory |
Used memory |
Used memory in Bytes |
ZABBIX_PASSIVE |
vm.memory.size[used] |
Memory |
Total memory |
Total memory in Bytes |
ZABBIX_PASSIVE |
vm.memory.size[total] |
Memory |
Memory utilization |
Memory utilization in % |
CALCULATED |
vm.memory.util Expression: last("vm.memory.size[used]") / last("vm.memory.size[total]") * 100 |
Memory |
Cache bytes |
Cache Bytes is the sum of the Memory\System Cache Resident Bytes, Memory\System Driver Resident Bytes, Memory\System Code Resident Bytes, and Memory\Pool Paged Resident Bytes counters. This counter displays the last observed value only; it is not an average. |
ZABBIX_PASSIVE |
perf_counter_en["\Memory\Cache Bytes"] |
Memory |
Free swap space |
The free space of swap volume/file in bytes. |
ZABBIX_PASSIVE |
system.swap.size[,free] |
Memory |
Free swap space in % |
The free space of swap volume/file in percent. |
ZABBIX_PASSIVE |
system.swap.size[,pfree] |
Memory |
Total swap space |
The total space of swap volume/file in bytes. |
ZABBIX_PASSIVE |
system.swap.size[,total] |
Memory |
Free system page table entries |
This indicates the number of page table entries not currently in use by the system. If the number is less than 5,000, there may well be a memory leak or you running out of memory. |
ZABBIX_PASSIVE |
perf_counter_en["\Memory\Free System Page Table Entries"] |
Memory |
Memory page faults per second |
Page Faults/sec is the average number of pages faulted per second. It is measured in number of pages faulted per second because only one page is faulted in each fault operation, hence this is also equal to the number of page fault operations. This counter includes both hard faults (those that require disk access) and soft faults (where the faulted page is found elsewhere in physical memory.) Most processors can handle large numbers of soft faults without significant consequence. However, hard faults, which require disk access, can cause significant delays. |
ZABBIX_PASSIVE |
perf_counter_en["\Memory\Page Faults/sec"] |
Memory |
Memory pages per second |
This measures the rate at which pages are read from or written to disk to resolve hard page faults. If the value is greater than 1,000, as a result of excessive paging, there may be a memory leak. |
ZABBIX_PASSIVE |
perf_counter_en["\Memory\Pages/sec"] |
Memory |
Memory pool non-paged |
This measures the size, in bytes, of the non-paged pool. This is an area of system memory for objects that cannot be written to disk but instead must remain in physical memory as long as they are allocated. There is a possible memory leak if the value is greater than 175MB (or 100MB with the /3GB switch). A typical Event ID 2019 is recorded in the system event log. |
ZABBIX_PASSIVE |
perf_counter_en["\Memory\Pool Nonpaged Bytes"] |
Triggers
Name |
Description |
Expression |
Severity |
Dependencies and additional info |
High memory utilization ( >{$MEMORY.UTIL.MAX}% for 5m) |
The system is running out of free memory. |
{TEMPLATE_NAME:vm.memory.util.min(5m)}>{$MEMORY.UTIL.MAX} |
AVERAGE |
|
High swap space usage ( less than {$SWAP.PFREE.MIN.WARN}% free) |
This trigger is ignored, if there is no swap configured |
{TEMPLATE_NAME:system.swap.size[,pfree].min(5m)}<{$SWAP.PFREE.MIN.WARN} and {Template Module Windows memory by Zabbix agent:system.swap.size[,total].last()}>0 |
WARNING |
Depends on: - High memory utilization ( >{$MEMORY.UTIL.MAX}% for 5m) |
Number of free system page table entries is too low (less {$MEM.PAGE_TABLE_CRIT.MIN} for 5m) |
The Memory Free System Page Table Entries is less than {$MEM.PAGE_TABLE_CRIT.MIN} for 5 minutes. If the number is less than 5,000, there may well be a memory leak. |
{TEMPLATE_NAME:perf_counter_en["\Memory\Free System Page Table Entries"].max(5m)}<{$MEM.PAGE_TABLE_CRIT.MIN} |
WARNING |
Depends on: - High memory utilization ( >{$MEMORY.UTIL.MAX}% for 5m) |
The Memory Pages/sec is too high (over {$MEM.PAGE_SEC.CRIT.MAX} for 5m) |
The Memory Pages/sec in the last 5 minutes exceeds {$MEM.PAGE_SEC.CRIT.MAX}. If the value is greater than 1,000, as a result of excessive paging, there may be a memory leak. |
{TEMPLATE_NAME:perf_counter_en["\Memory\Pages/sec"].min(5m)}>{$MEM.PAGE_SEC.CRIT.MAX} |
WARNING |
Depends on: - High memory utilization ( >{$MEMORY.UTIL.MAX}% for 5m) |
Feedback
Please report any issues with the template at https://support.zabbix.com
Template Module Windows filesystems by Zabbix agent
Overview
For Zabbix version: 4.4
Setup
Zabbix configuration
Macros used
Name |
Description |
Default |
{$VFS.FS.FSDRIVETYPE.MATCHES} |
This macro is used in filesystems discovery. Can be overridden on the host or linked template level. |
fixed |
{$VFS.FS.FSDRIVETYPE.NOT_MATCHES} |
This macro is used in filesystems discovery. Can be overridden on the host or linked template level. |
^\s$ |
{$VFS.FS.FSNAME.MATCHES} |
This macro is used in filesystems discovery. Can be overridden on the host or linked template level. |
.* |
{$VFS.FS.FSNAME.NOT_MATCHES} |
This macro is used in filesystems discovery. Can be overridden on the host or linked template level. |
^(/dev|/sys|/run|/proc|.+/shm$) |
{$VFS.FS.FSTYPE.MATCHES} |
This macro is used in filesystems discovery. Can be overridden on the host or linked template level. |
.* |
{$VFS.FS.FSTYPE.NOT_MATCHES} |
This macro is used in filesystems discovery. Can be overridden on the host or linked template level. |
^\s$ |
{$VFS.FS.PUSED.MAX.CRIT} |
The critical threshold of the filesystem utilization in percent. |
90 |
{$VFS.FS.PUSED.MAX.WARN} |
The warning threshold of the filesystem utilization in percent. |
80 |
Template links
There are no template links in this template.
Discovery rules
Name |
Description |
Type |
Key and additional info |
Mounted filesystem discovery |
Discovery of file systems of different types. |
ZABBIX_PASSIVE |
vfs.fs.discovery Filter: AND - A: {#FSTYPE} MATCHES_REGEX {$VFS.FS.FSTYPE.MATCHES} - B: {#FSTYPE} NOT_MATCHES_REGEX {$VFS.FS.FSTYPE.NOT_MATCHES} - C: {#FSNAME} MATCHES_REGEX {$VFS.FS.FSNAME.MATCHES} - D: {#FSNAME} NOT_MATCHES_REGEX {$VFS.FS.FSNAME.NOT_MATCHES} - E: {#FSDRIVETYPE} MATCHES_REGEX {$VFS.FS.FSDRIVETYPE.MATCHES} - F: {#FSDRIVETYPE} NOT_MATCHES_REGEX {$VFS.FS.FSDRIVETYPE.NOT_MATCHES} |
Items collected
Group |
Name |
Description |
Type |
Key and additional info |
Filesystems |
{#FSNAME}: Used space |
Used storage in Bytes |
ZABBIX_PASSIVE |
vfs.fs.size[{#FSNAME},used] |
Filesystems |
{#FSNAME}: Total space |
Total space in Bytes |
ZABBIX_PASSIVE |
vfs.fs.size[{#FSNAME},total] |
Filesystems |
{#FSNAME}: Space utilization |
Space utilization in % for {#FSNAME} |
ZABBIX_PASSIVE |
vfs.fs.size[{#FSNAME},pused] |
Triggers
Name |
Description |
Expression |
Severity |
Dependencies and additional info |
{#FSNAME}: Disk space is critically low (used > {$VFS.FS.PUSED.MAX.CRIT:"{#FSNAME}"}%) |
Two conditions should match: First, space utilization should be above {$VFS.FS.PUSED.MAX.CRIT:"{#FSNAME}"}. Second condition should be one of the following: - The disk free space is less than 5G. - The disk will be full in less than 24 hours. |
{TEMPLATE_NAME:vfs.fs.size[{#FSNAME},pused].last()}>{$VFS.FS.PUSED.MAX.CRIT:"{#FSNAME}"} and (({Template Module Windows filesystems by Zabbix agent:vfs.fs.size[{#FSNAME},total].last()}-{Template Module Windows filesystems by Zabbix agent:vfs.fs.size[{#FSNAME},used].last()})<5G or {TEMPLATE_NAME:vfs.fs.size[{#FSNAME},pused].timeleft(1h,,100)}<1d) |
AVERAGE |
Manual close: YES |
{#FSNAME}: Disk space is low (used > {$VFS.FS.PUSED.MAX.WARN:"{#FSNAME}"}%) |
Two conditions should match: First, space utilization should be above {$VFS.FS.PUSED.MAX.WARN:"{#FSNAME}"}. Second condition should be one of the following: - The disk free space is less than 10G. - The disk will be full in less than 24 hours. |
{TEMPLATE_NAME:vfs.fs.size[{#FSNAME},pused].last()}>{$VFS.FS.PUSED.MAX.WARN:"{#FSNAME}"} and (({Template Module Windows filesystems by Zabbix agent:vfs.fs.size[{#FSNAME},total].last()}-{Template Module Windows filesystems by Zabbix agent:vfs.fs.size[{#FSNAME},used].last()})<10G or {TEMPLATE_NAME:vfs.fs.size[{#FSNAME},pused].timeleft(1h,,100)}<1d) |
WARNING |
Manual close: YES Depends on: - {#FSNAME}: Disk space is critically low (used > {$VFS.FS.PUSED.MAX.CRIT:"{#FSNAME}"}%) |
Feedback
Please report any issues with the template at https://support.zabbix.com
Template Module Windows physical disks by Zabbix agent
Overview
For Zabbix version: 4.4
Setup
Zabbix configuration
Macros used
Name |
Description |
Default |
{$VFS.DEV.DEVNAME.MATCHES} |
This macro is used in physical disks discovery. Can be overridden on the host or linked template level. |
.* |
{$VFS.DEV.DEVNAME.NOT_MATCHES} |
This macro is used in physical disks discovery. Can be overridden on the host or linked template level. |
_Total |
{$VFS.DEV.UTIL.MAX.WARN} |
The warning threshold of disk time utilization in percent. |
95 |
Template links
There are no template links in this template.
Discovery rules
Name |
Description |
Type |
Key and additional info |
Physical disks discovery |
Discovery of installed physical disks. |
DEPENDENT |
vfs.dev.discovery Preprocessing: - JAVASCRIPT: output = JSON.parse(value).map(function(dev){ return { "{#DEVNAME}": dev.Name, "{#DEVQUEUE}": dev.CurrentDiskQueueLength, "{#DEVREADS}": dev.DiskReadsPersec, "{#DEVTIME}": dev.PercentDiskTime, "{#DEVWRITES}": dev.DiskWritesPersec }}) return JSON.stringify({"data": output}) - DISCARD_UNCHANGED_HEARTBEAT: 1h Filter: AND - A: {#DEVNAME} MATCHES_REGEX {$VFS.DEV.DEVNAME.MATCHES} - B: {#DEVNAME} NOT_MATCHES_REGEX {$VFS.DEV.DEVNAME.NOT_MATCHES} |
Items collected
Group |
Name |
Description |
Type |
Key and additional info |
Storage |
{#DEVNAME}: Disk read rate |
Rate of read operations on the disk. |
DEPENDENT |
vfs.dev.read.rate[DiskReadsPersec.{#DEVNAME}] Preprocessing: - JSONPATH: $[?(@.Name == "{#DEVNAME}")].DiskReadsPersec.first() |
Storage |
{#DEVNAME}: Disk write rate |
Rate of write operations on the disk. |
DEPENDENT |
vfs.dev.write.rate[DiskWritesPersec.{#DEVNAME}] Preprocessing: - JSONPATH: $[?(@.Name == "{#DEVNAME}")].DiskWritesPersec.first() |
Storage |
{#DEVNAME}: Disk average queue size (avgqu-sz) |
Current average disk queue, the number of requests outstanding on the disk at the time the performance data is collected. |
DEPENDENT |
vfs.dev.queue_size[CurrentDiskQueueLength.{#DEVNAME}] Preprocessing: - JSONPATH: $[?(@.Name == "{#DEVNAME}")].CurrentDiskQueueLength.first() |
Storage |
{#DEVNAME}: Disk utilization |
This item is the percentage of elapsed time that the selected disk drive was busy servicing read or writes requests. |
DEPENDENT |
vfs.dev.util[PercentDiskTime.{#DEVNAME}] Preprocessing: - JSONPATH: $[?(@.Name == "{#DEVNAME}")].PercentDiskTime.first() |
Zabbix_raw_items |
Physical disks WMI get |
Raw data of win32_perfformatteddata_perfdisk_physicaldisk. |
ZABBIX_PASSIVE |
wmi.getall[root\cimv2,"select * from win32_perfformatteddata_perfdisk_physicaldisk"] |
Triggers
Name |
Description |
Expression |
Severity |
Dependencies and additional info |
{#DEVNAME}: Disk is overloaded (util > {$VFS.DEV.UTIL.MAX.WARN}% for 15m) |
The disk appears to be under heavy load |
{TEMPLATE_NAME:vfs.dev.util[PercentDiskTime.{#DEVNAME}].min(15m)}>{$VFS.DEV.UTIL.MAX.WARN} |
WARNING |
Manual close: YES |
Feedback
Please report any issues with the template at https://support.zabbix.com
Template Module Windows generic by Zabbix agent
Overview
For Zabbix version: 4.4
Setup
Zabbix configuration
Macros used
Name |
Description |
Default |
{$SYSTEM.FUZZYTIME.MAX} |
The threshold for difference of system time in seconds. |
60 |
Template links
There are no template links in this template.
Discovery rules
Items collected
Group |
Name |
Description |
Type |
Key and additional info |
General |
System local time |
System local time of the host. |
ZABBIX_PASSIVE |
system.localtime |
General |
System name |
System host name. |
ZABBIX_PASSIVE |
system.hostname Preprocessing: - DISCARD_UNCHANGED_HEARTBEAT: 1d |
General |
System description |
System description of the host. |
ZABBIX_PASSIVE |
system.uname Preprocessing: - DISCARD_UNCHANGED_HEARTBEAT: 1d |
General |
Number of processes |
The number of processes. |
ZABBIX_PASSIVE |
proc.num[] |
General |
Number of threads |
The number of threads used by all running processes. |
ZABBIX_PASSIVE |
perf_counter_en["\System\Threads"] |
Inventory |
Operating system architecture |
Operating system architecture of the host. |
ZABBIX_PASSIVE |
system.sw.arch Preprocessing: - DISCARD_UNCHANGED_HEARTBEAT: 1d |
Status |
Uptime |
System uptime in 'N days, hh:mm:ss' format. |
ZABBIX_PASSIVE |
system.uptime |
Triggers
Name |
Description |
Expression |
Severity |
Dependencies and additional info |
System time is out of sync (diff with Zabbix server > {$SYSTEM.FUZZYTIME.MAX}s) |
The host system time is different from the Zabbix server time. |
{TEMPLATE_NAME:system.localtime.fuzzytime({$SYSTEM.FUZZYTIME.MAX})}=0 |
WARNING |
Manual close: YES |
System name has changed (new name: {ITEM.VALUE}) |
System name has changed. Ack to close. |
{TEMPLATE_NAME:system.hostname.diff()}=1 and {TEMPLATE_NAME:system.hostname.strlen()}>0 |
INFO |
Manual close: YES |
Host has been restarted (uptime < 10m) |
The device uptime is less than 10 minutes. |
{TEMPLATE_NAME:system.uptime.last()}<10m |
WARNING |
Manual close: YES |
Feedback
Please report any issues with the template at https://support.zabbix.com
Template Module Windows network by Zabbix agent
Overview
For Zabbix version: 4.4
Setup
Zabbix configuration
Macros used
Name |
Description |
Default |
{$IF.ERRORS.WARN} |
- |
2 |
{$IF.UTIL.MAX} |
- |
90 |
{$IFCONTROL} |
- |
1 |
{$NET.IF.IFALIAS.MATCHES} |
This macro is used in Network interface discovery. Can be overridden on the host or linked template level. |
.* |
{$NET.IF.IFALIAS.NOT_MATCHES} |
This macro is used in Network interface discovery. Can be overridden on the host or linked template level. |
CHANGE_THIS |
{$NET.IF.IFDESCR.MATCHES} |
This macro is used in Network interface discovery. Can be overridden on the host or linked template level. |
.* |
{$NET.IF.IFDESCR.NOT_MATCHES} |
This macro is used in Network interface discovery. Can be overridden on the host or linked template level. |
CHANGE_THIS |
{$NET.IF.IFNAME.MATCHES} |
This macro is used in Network interface discovery. Can be overridden on the host or linked template level. |
.* |
{$NET.IF.IFNAME.NOT_MATCHES} |
This macro is used in Network interface discovery. Can be overridden on the host or linked template level. |
Miniport|Virtual|Teredo|Kernel|Loopback|Bluetooth|HTTPS|6to4|QoS|Layer |
{$NET.IF.IFNETENABLED.MATCHES} |
This macro is used in Network interface discovery. Can be overridden on the host or linked template level. |
True |
{$NET.IF.IFNETENABLED.NOT_MATCHES} |
This macro is used in Network interface discovery. Can be overridden on the host or linked template level. |
CHANGE_THIS |
{$NET.IF.PHYSICALADAPTER.MATCHES} |
This macro is used in Network interface discovery. Can be overridden on the host or linked template level. |
True |
{$NET.IF.PHYSICALADAPTER.NOT_MATCHES} |
This macro is used in Network interface discovery. Can be overridden on the host or linked template level. |
CHANGE_THIS |
Template links
There are no template links in this template.
Discovery rules
Name |
Description |
Type |
Key and additional info |
Network interfaces discovery |
Discovery of installed network interfaces. |
DEPENDENT |
net.if.discovery Preprocessing: - JAVASCRIPT: output = JSON.parse(value).map(function(net){ return { "{#IFNAME}": net.Name, "{#IFDESCR}": net.Description, "{#IFPHYSICALADAPTER}": net.PhysicalAdapter, "{#IFALIAS}" : net.NetConnectionID, "{#IFNETENABLED}": net.NetEnabled, "{#IFNETSTATUS}": net.NetConnectionStatus, "{#IFSPEED}": net.Speed }}) return JSON.stringify({"data": output}) - DISCARD_UNCHANGED_HEARTBEAT: 1h Filter: AND - A: {#IFPHYSICALADAPTER} MATCHES_REGEX {$NET.IF.PHYSICALADAPTER.MATCHES} - B: {#IFPHYSICALADAPTER} NOT_MATCHES_REGEX {$NET.IF.PHYSICALADAPTER.NOT_MATCHES} - C: {#IFNAME} MATCHES_REGEX {$NET.IF.IFNAME.MATCHES} - D: {#IFNAME} NOT_MATCHES_REGEX {$NET.IF.IFNAME.NOT_MATCHES} - E: {#IFDESCR} MATCHES_REGEX {$NET.IF.IFDESCR.MATCHES} - F: {#IFDESCR} NOT_MATCHES_REGEX {$NET.IF.IFDESCR.NOT_MATCHES} - G: {#IFALIAS} MATCHES_REGEX {$NET.IF.IFALIAS.MATCHES} - H: {#IFALIAS} NOT_MATCHES_REGEX {$NET.IF.IFALIAS.NOT_MATCHES} - I: {#IFNETENABLED} MATCHES_REGEX {$NET.IF.IFNETENABLED.MATCHES} - J: {#IFNETENABLED} NOT_MATCHES_REGEX {$NET.IF.IFNETENABLED.NOT_MATCHES} |
Items collected
Group |
Name |
Description |
Type |
Key and additional info |
Network_interfaces |
Interface {#IFNAME}({#IFALIAS}): Bits received |
Incoming traffic on the network interface. |
ZABBIX_PASSIVE |
net.if.in["{#IFNAME}"] Preprocessing: - CHANGE_PER_SECOND - MULTIPLIER: 8 |
Network_interfaces |
Interface {#IFNAME}({#IFALIAS}): Bits sent |
Outgoing traffic on the network interface. |
ZABBIX_PASSIVE |
net.if.out["{#IFNAME}"] Preprocessing: - CHANGE_PER_SECOND - MULTIPLIER: 8 |
Network_interfaces |
Interface {#IFNAME}({#IFALIAS}): Inbound packets discarded |
The number of incoming packets dropped on the network interface. |
ZABBIX_PASSIVE |
net.if.in["{#IFNAME}",dropped] Preprocessing: - CHANGE_PER_SECOND |
Network_interfaces |
Interface {#IFNAME}({#IFALIAS}): Outbound packets discarded |
The number of outgoing packets dropped on the network interface. |
ZABBIX_PASSIVE |
net.if.out["{#IFNAME}",dropped] Preprocessing: - CHANGE_PER_SECOND |
Network_interfaces |
Interface {#IFNAME}({#IFALIAS}): Inbound packets with errors |
The number of incoming packets with errors on the network interface. |
ZABBIX_PASSIVE |
net.if.in["{#IFNAME}",errors] Preprocessing: - CHANGE_PER_SECOND |
Network_interfaces |
Interface {#IFNAME}({#IFALIAS}): Outbound packets with errors |
The number of outgoing packets with errors on the network interface. |
ZABBIX_PASSIVE |
net.if.out["{#IFNAME}",errors] Preprocessing: - CHANGE_PER_SECOND |
Network_interfaces |
Interface {#IFNAME}({#IFALIAS}): Speed |
Estimated bandwidth of the network interface if any. |
DEPENDENT |
net.if.speed["{#IFNAME}"] Preprocessing: - JSONPATH: $[?(@.Name == "{#IFNAME}")].Speed.first() ⛔️ON_FAIL: CUSTOM_VALUE -> 0 |
Network_interfaces |
Interface {#IFNAME}({#IFALIAS}): Interface type |
The type of the network interface. |
DEPENDENT |
net.if.type["{#IFNAME}"] Preprocessing: - JSONPATH: $[?(@.Name == "{#IFNAME}")].AdapterTypeId.first() |
Network_interfaces |
Interface {#IFNAME}({#IFALIAS}): Operational status |
The operational status of the network interface. |
DEPENDENT |
net.if.status["{#IFNAME}"] Preprocessing: - JSONPATH: $[?(@.Name == "{#IFNAME}")].NetConnectionStatus.first() |
Zabbix_raw_items |
Network interfaces WMI get |
Raw data of win32_networkadapter. |
ZABBIX_PASSIVE |
wmi.getall[root\cimv2,"select * from win32_networkadapter where PhysicalAdapter=True"] |
Triggers
Name |
Description |
Expression |
Severity |
Dependencies and additional info |
Interface {#IFNAME}({#IFALIAS}): High bandwidth usage ( > {$IF.UTIL.MAX:"{#IFNAME}"}% ) |
The network interface utilization is close to its estimated maximum bandwidth. |
({TEMPLATE_NAME:net.if.in["{#IFNAME}"].avg(15m)}>({$IF.UTIL.MAX:"{#IFNAME}"}/100)*{Template Module Windows network by Zabbix agent:net.if.speed["{#IFNAME}"].last()} or {Template Module Windows network by Zabbix agent:net.if.out["{#IFNAME}"].avg(15m)}>({$IF.UTIL.MAX:"{#IFNAME}"}/100)*{Template Module Windows network by Zabbix agent:net.if.speed["{#IFNAME}"].last()}) and {Template Module Windows network by Zabbix agent:net.if.speed["{#IFNAME}"].last()}>0 Recovery expression: {TEMPLATE_NAME:net.if.in["{#IFNAME}"].avg(15m)}<(({$IF.UTIL.MAX:"{#IFNAME}"}-3)/100)*{Template Module Windows network by Zabbix agent:net.if.speed["{#IFNAME}"].last()} and {Template Module Windows network by Zabbix agent:net.if.out["{#IFNAME}"].avg(15m)}<(({$IF.UTIL.MAX:"{#IFNAME}"}-3)/100)*{Template Module Windows network by Zabbix agent:net.if.speed["{#IFNAME}"].last()} |
WARNING |
Manual close: YES Depends on: - Interface {#IFNAME}({#IFALIAS}): Link down |
Interface {#IFNAME}({#IFALIAS}): High error rate ( > {$IF.ERRORS.WARN:"{#IFNAME}"} for 5m) |
Recovers when below 80% of {$IF.ERRORS.WARN:"{#IFNAME}"} threshold |
{TEMPLATE_NAME:net.if.in["{#IFNAME}",errors].min(5m)}>{$IF.ERRORS.WARN:"{#IFNAME}"} or {Template Module Windows network by Zabbix agent:net.if.out["{#IFNAME}",errors].min(5m)}>{$IF.ERRORS.WARN:"{#IFNAME}"} Recovery expression: {TEMPLATE_NAME:net.if.in["{#IFNAME}",errors].max(5m)}<{$IF.ERRORS.WARN:"{#IFNAME}"}*0.8 and {Template Module Windows network by Zabbix agent:net.if.out["{#IFNAME}",errors].max(5m)}<{$IF.ERRORS.WARN:"{#IFNAME}"}*0.8 |
WARNING |
Manual close: YES Depends on: - Interface {#IFNAME}({#IFALIAS}): Link down |
Interface {#IFNAME}({#IFALIAS}): Ethernet has changed to lower speed than it was before |
This Ethernet connection has transitioned down from its known maximum speed. This might be a sign of autonegotiation issues. Ack to close. |
{TEMPLATE_NAME:net.if.speed["{#IFNAME}"].change()}<0 and {TEMPLATE_NAME:net.if.speed["{#IFNAME}"].last()}>0 and ( {Template Module Windows network by Zabbix agent:net.if.type["{#IFNAME}"].last()}=6 or {Template Module Windows network by Zabbix agent:net.if.type["{#IFNAME}"].last()}=7 or {Template Module Windows network by Zabbix agent:net.if.type["{#IFNAME}"].last()}=11 or {Template Module Windows network by Zabbix agent:net.if.type["{#IFNAME}"].last()}=62 or {Template Module Windows network by Zabbix agent:net.if.type["{#IFNAME}"].last()}=69 or {Template Module Windows network by Zabbix agent:net.if.type["{#IFNAME}"].last()}=117 ) and ({Template Module Windows network by Zabbix agent:net.if.status["{#IFNAME}"].last()}<>2) Recovery expression: ({TEMPLATE_NAME:net.if.speed["{#IFNAME}"].change()}>0 and {TEMPLATE_NAME:net.if.speed["{#IFNAME}"].prev()}>0) or ({Template Module Windows network by Zabbix agent:net.if.status["{#IFNAME}"].last()}=2) |
INFO |
Manual close: YES Depends on: - Interface {#IFNAME}({#IFALIAS}): Link down |
Interface {#IFNAME}({#IFALIAS}): Link down |
This trigger expression works as follows: 1. Can be triggered if operations status is down. 2. {$IFCONTROL:"{#IFNAME}"}=1 - user can redefine Context macro to value - 0. That marks this interface as not important. No new trigger will be fired if this interface is down. 3. {TEMPLATE_NAME:METRIC.diff()}=1) - trigger fires only if operational status was up(1) sometime before. (So, do not fire 'ethernal off' interfaces.) WARNING: if closed manually - won't fire again on next poll, because of .diff. |
{$IFCONTROL:"{#IFNAME}"}=1 and ({TEMPLATE_NAME:net.if.status["{#IFNAME}"].last()}=2 and {TEMPLATE_NAME:net.if.status["{#IFNAME}"].diff()}=1) Recovery expression: {TEMPLATE_NAME:net.if.status["{#IFNAME}"].last()}<>2 |
AVERAGE |
Manual close: YES |
Feedback
Please report any issues with the template at https://support.zabbix.com
Template Module Windows services by Zabbix agent
Overview
For Zabbix version: 4.4
Special version of services template that is required for Windows OS.
Setup
Refer to the vendor documentation.
Zabbix configuration
No specific Zabbix configuration is required.
Macros used
Name |
Description |
Default |
{$SERVICE.NAME.MATCHES} |
This macro is used in Service discovery. Can be overridden on the host or linked template level. |
^.*$ |
{$SERVICE.NAME.NOT_MATCHES} |
This macro is used in Service discovery. Can be overridden on the host or linked template level. |
^RemoteRegistry|MMCSS|gupdate|SysmonLog|clr_optimization_v.+|clr_optimization_v.+|sppsvc|gpsvc|Pml Driver HPZ12|Net Driver HPZ12|MapsBroker|IntelAudioService|Intel\(R\) TPM Provisioning Service|dbupdate|DoSvc$ |
{$SERVICE.STARTUPNAME.MATCHES} |
This macro is used in Service discovery. Can be overridden on the host or linked template level. |
^automatic|automatic delayed$ |
{$SERVICE.STARTUPNAME.NOT_MATCHES} |
This macro is used in Service discovery. Can be overridden on the host or linked template level. |
^manual|disabled$ |
Template links
There are no template links in this template.
Discovery rules
Name |
Description |
Type |
Key and additional info |
Windows services discovery |
Discovery of Windows services of different types as defined in template's macros. |
ZABBIX_PASSIVE |
service.discovery Filter: AND - A: {#SERVICE.NAME} MATCHES_REGEX {$SERVICE.NAME.MATCHES} - B: {#SERVICE.NAME} NOT_MATCHES_REGEX {$SERVICE.NAME.NOT_MATCHES} - C: {#SERVICE.STARTUPNAME} MATCHES_REGEX {$SERVICE.STARTUPNAME.MATCHES} - D: {#SERVICE.STARTUPNAME} NOT_MATCHES_REGEX {$SERVICE.STARTUPNAME.NOT_MATCHES} |
Items collected
Group |
Name |
Description |
Type |
Key and additional info |
Services |
State of service "{#SERVICE.NAME}" ({#SERVICE.DISPLAYNAME}) |
- |
ZABBIX_PASSIVE |
service.info["{#SERVICE.NAME}",state] |
Triggers
Name |
Description |
Expression |
Severity |
Dependencies and additional info |
"{#SERVICE.NAME}" ({#SERVICE.DISPLAYNAME}) is not running (startup type {#SERVICE.STARTUPNAME}) |
The service has a state other than "Running" for the last three times. |
{TEMPLATE_NAME:service.info["{#SERVICE.NAME}",state].min(#3)}<>0 |
AVERAGE |
|
Feedback
Please report any issues with the template at https://support.zabbix.com
Template OS Windows by Zabbix agent
Overview
For Zabbix version: 4.4
New official Windows template. Requires agent of Zabbix 4.4 and newer.
This template was tested on:
- Windows, version 7 and newer.
- Windows Server, version 2008 R2 and newer.
Setup
Install Zabbix agent on Windows OS according to Zabbix documentation.
Zabbix configuration
No specific Zabbix configuration is required.
Template links
Name |
Template Module Windows CPU by Zabbix agent |
Template Module Windows filesystems by Zabbix agent |
Template Module Windows generic by Zabbix agent |
Template Module Windows memory by Zabbix agent |
Template Module Windows network by Zabbix agent |
Template Module Windows physical disks by Zabbix agent |
Template Module Windows services by Zabbix agent |
Template Module Zabbix agent |
Discovery rules
Items collected
Group |
Name |
Description |
Type |
Key and additional info |
Triggers
Name |
Description |
Expression |
Severity |
Dependencies and additional info |
Feedback
Please report any issues with the template at https://support.zabbix.com
You can also provide feedback, discuss the template or ask for help with it at
ZABBIX forums.
Source: https://git.zabbix.com/projects/ZBX/repos/zabbix/browse/templates/os/windows_agent_active
Template Module Windows CPU by Zabbix agent active
Overview
For Zabbix version: 4.4
Setup
Zabbix configuration
Macros used
Name |
Description |
Default |
{$CPU.INTERRUPT.CRIT.MAX} |
The critical threshold of the % Interrupt Time counter. |
50 |
{$CPU.PRIV.CRIT.MAX} |
The threshold of the % Privileged Time counter. |
30 |
{$CPU.QUEUE.CRIT.MAX} |
The threshold of the Processor Queue Length counter. |
3 |
{$CPU.UTIL.CRIT} |
The critical threshold of the CPU utilization in %. |
90 |
Template links
There are no template links in this template.
Discovery rules
Items collected
Group |
Name |
Description |
Type |
Key and additional info |
CPU |
CPU utilization |
CPU utilization in % |
ZABBIX_ACTIVE |
system.cpu.util |
CPU |
CPU interrupt time |
The Processor Information\% Interrupt Time is the time the processor spends receiving and servicing hardware interrupts during sample intervals. This value is an indirect indicator of the activity of devices that generate interrupts, such as the system clock, the mouse, disk drivers, data communication lines, network interface cards and other peripheral devices. This is an easy way to identify a potential hardware failure. This should never be higher than 20%. |
ZABBIX_ACTIVE |
perf_counter_en["\Processor Information(_total)\% Interrupt Time"] |
CPU |
Context switches per second |
Context Switches/sec is the combined rate at which all processors on the computer are switched from one thread to another. Context switches occur when a running thread voluntarily relinquishes the processor, is preempted by a higher priority ready thread, or switches between user-mode and privileged (kernel) mode to use an Executive or subsystem service. It is the sum of Thread\Context Switches/sec for all threads running on all processors in the computer and is measured in numbers of switches. There are context switch counters on the System and Thread objects. This counter displays the difference between the values observed in the last two samples, divided by the duration of the sample interval. |
ZABBIX_ACTIVE |
perf_counter_en["\System\Context Switches/sec"] |
CPU |
CPU privileged time |
The Processor Information\% Privileged Time counter shows the percent of time that the processor is spent executing in Kernel (or Privileged) mode. Privileged mode includes services interrupts inside Interrupt Service Routines (ISRs), executing Deferred Procedure Calls (DPCs), Device Driver calls and other kernel-mode functions of the Windows® Operating System. |
ZABBIX_ACTIVE |
perf_counter_en["\Processor Information(_total)\% Privileged Time"] |
CPU |
CPU DPC time |
Processor DPC time is the time that a single processor spent receiving and servicing deferred procedure calls (DPCs). DPCs are interrupts that run at a lower priority than standard interrupts. % DPC Time is a component of % Privileged Time because DPCs are executed in privileged mode. If a high % DPC Time is sustained, there may be a processor bottleneck or an application or hardware related issue that can significantly diminish overall system performance. |
ZABBIX_ACTIVE |
perf_counter_en["\Processor Information(_total)\% DPC Time"] |
CPU |
CPU user time |
The Processor Information\% User Time counter shows the percent of time that the processor(s) is spent executing in User mode. |
ZABBIX_ACTIVE |
perf_counter_en["\Processor Information(_total)\% User Time"] |
CPU |
CPU queue length |
The Processor Queue Length shows the number of threads that are observed as delayed in the processor Ready Queue and are waiting to be executed. |
ZABBIX_ACTIVE |
perf_counter_en["\System\Processor Queue Length"] |
Triggers
Name |
Description |
Expression |
Severity |
Dependencies and additional info |
High CPU utilization (over {$CPU.UTIL.CRIT}% for 5m) |
CPU utilization is too high. The system might be slow to respond. |
{TEMPLATE_NAME:system.cpu.util.min(5m)}>{$CPU.UTIL.CRIT} |
WARNING |
|
CPU interrupt time is too high (over {$CPU.INTERRUPT.CRIT.MAX}% for 5m) |
"The CPU Interrupt Time in the last 5 minutes exceeds {$CPU.INTERRUPT.CRIT.MAX}%." The Processor Information\% Interrupt Time is the time the processor spends receiving and servicing hardware interrupts during sample intervals. This value is an indirect indicator of the activity of devices that generate interrupts, such as the system clock, the mouse, disk drivers, data communication lines, network interface cards and other peripheral devices. This is an easy way to identify a potential hardware failure. This should never be higher than 20%. |
{TEMPLATE_NAME:perf_counter_en["\Processor Information(_total)\% Interrupt Time"].min(5m)}>{$CPU.INTERRUPT.CRIT.MAX} |
WARNING |
Depends on: - High CPU utilization (over {$CPU.UTIL.CRIT}% for 5m) |
CPU privileged time is too high (over {$CPU.PRIV.CRIT.MAX}% for 5m) |
The CPU privileged time in the last 5 minutes exceeds {$CPU.PRIV.CRIT.MAX}%. |
{TEMPLATE_NAME:perf_counter_en["\Processor Information(_total)\% Privileged Time"].min(5m)}>{$CPU.PRIV.CRIT.MAX} |
WARNING |
Depends on: - CPU interrupt time is too high (over {$CPU.INTERRUPT.CRIT.MAX}% for 5m) - High CPU utilization (over {$CPU.UTIL.CRIT}% for 5m) |
CPU queue length is too high (over {$CPU.QUEUE.CRIT.MAX} for 5m) |
The CPU Queue Length in the last 5 minutes exceeds {$CPU.QUEUE.CRIT.MAX}. |
{TEMPLATE_NAME:perf_counter_en["\System\Processor Queue Length"].min(5m)}>{$CPU.QUEUE.CRIT.MAX} |
WARNING |
Depends on: - High CPU utilization (over {$CPU.UTIL.CRIT}% for 5m) |
Feedback
Please report any issues with the template at https://support.zabbix.com
Template Module Windows memory by Zabbix agent active
Overview
For Zabbix version: 4.4
Setup
Zabbix configuration
Macros used
Name |
Description |
Default |
{$MEM.PAGE_SEC.CRIT.MAX} |
The warning threshold of the Memory Pages/sec counter. |
1000 |
{$MEM.PAGE_TABLE_CRIT.MIN} |
The warning threshold of the Free System Page Table Entries counter. |
5000 |
{$MEMORY.UTIL.MAX} |
The warning threshold of the Memory util item. |
90 |
{$SWAP.PFREE.MIN.WARN} |
The warning threshold of the minimum free swap. |
20 |
Template links
There are no template links in this template.
Discovery rules
Items collected
Group |
Name |
Description |
Type |
Key and additional info |
Memory |
Used memory |
Used memory in Bytes |
ZABBIX_ACTIVE |
vm.memory.size[used] |
Memory |
Total memory |
Total memory in Bytes |
ZABBIX_ACTIVE |
vm.memory.size[total] |
Memory |
Memory utilization |
Memory utilization in % |
CALCULATED |
vm.memory.util Expression: last("vm.memory.size[used]") / last("vm.memory.size[total]") * 100 |
Memory |
Cache bytes |
Cache Bytes is the sum of the Memory\System Cache Resident Bytes, Memory\System Driver Resident Bytes, Memory\System Code Resident Bytes, and Memory\Pool Paged Resident Bytes counters. This counter displays the last observed value only; it is not an average. |
ZABBIX_ACTIVE |
perf_counter_en["\Memory\Cache Bytes"] |
Memory |
Free swap space |
The free space of swap volume/file in bytes. |
ZABBIX_ACTIVE |
system.swap.size[,free] |
Memory |
Free swap space in % |
The free space of swap volume/file in percent. |
ZABBIX_ACTIVE |
system.swap.size[,pfree] |
Memory |
Total swap space |
The total space of swap volume/file in bytes. |
ZABBIX_ACTIVE |
system.swap.size[,total] |
Memory |
Free system page table entries |
This indicates the number of page table entries not currently in use by the system. If the number is less than 5,000, there may well be a memory leak or you running out of memory. |
ZABBIX_ACTIVE |
perf_counter_en["\Memory\Free System Page Table Entries"] |
Memory |
Memory page faults per second |
Page Faults/sec is the average number of pages faulted per second. It is measured in number of pages faulted per second because only one page is faulted in each fault operation, hence this is also equal to the number of page fault operations. This counter includes both hard faults (those that require disk access) and soft faults (where the faulted page is found elsewhere in physical memory.) Most processors can handle large numbers of soft faults without significant consequence. However, hard faults, which require disk access, can cause significant delays. |
ZABBIX_ACTIVE |
perf_counter_en["\Memory\Page Faults/sec"] |
Memory |
Memory pages per second |
This measures the rate at which pages are read from or written to disk to resolve hard page faults. If the value is greater than 1,000, as a result of excessive paging, there may be a memory leak. |
ZABBIX_ACTIVE |
perf_counter_en["\Memory\Pages/sec"] |
Memory |
Memory pool non-paged |
This measures the size, in bytes, of the non-paged pool. This is an area of system memory for objects that cannot be written to disk but instead must remain in physical memory as long as they are allocated. There is a possible memory leak if the value is greater than 175MB (or 100MB with the /3GB switch). A typical Event ID 2019 is recorded in the system event log. |
ZABBIX_ACTIVE |
perf_counter_en["\Memory\Pool Nonpaged Bytes"] |
Triggers
Name |
Description |
Expression |
Severity |
Dependencies and additional info |
High memory utilization ( >{$MEMORY.UTIL.MAX}% for 5m) |
The system is running out of free memory. |
{TEMPLATE_NAME:vm.memory.util.min(5m)}>{$MEMORY.UTIL.MAX} |
AVERAGE |
|
High swap space usage ( less than {$SWAP.PFREE.MIN.WARN}% free) |
This trigger is ignored, if there is no swap configured |
{TEMPLATE_NAME:system.swap.size[,pfree].min(5m)}<{$SWAP.PFREE.MIN.WARN} and {Template Module Windows memory by Zabbix agent active:system.swap.size[,total].last()}>0 |
WARNING |
Depends on: - High memory utilization ( >{$MEMORY.UTIL.MAX}% for 5m) |
Number of free system page table entries is too low (less {$MEM.PAGE_TABLE_CRIT.MIN} for 5m) |
The Memory Free System Page Table Entries is less than {$MEM.PAGE_TABLE_CRIT.MIN} for 5 minutes. If the number is less than 5,000, there may well be a memory leak. |
{TEMPLATE_NAME:perf_counter_en["\Memory\Free System Page Table Entries"].max(5m)}<{$MEM.PAGE_TABLE_CRIT.MIN} |
WARNING |
Depends on: - High memory utilization ( >{$MEMORY.UTIL.MAX}% for 5m) |
The Memory Pages/sec is too high (over {$MEM.PAGE_SEC.CRIT.MAX} for 5m) |
The Memory Pages/sec in the last 5 minutes exceeds {$MEM.PAGE_SEC.CRIT.MAX}. If the value is greater than 1,000, as a result of excessive paging, there may be a memory leak. |
{TEMPLATE_NAME:perf_counter_en["\Memory\Pages/sec"].min(5m)}>{$MEM.PAGE_SEC.CRIT.MAX} |
WARNING |
Depends on: - High memory utilization ( >{$MEMORY.UTIL.MAX}% for 5m) |
Feedback
Please report any issues with the template at https://support.zabbix.com
Template Module Windows filesystems by Zabbix agent active
Overview
For Zabbix version: 4.4
Setup
Zabbix configuration
Macros used
Name |
Description |
Default |
{$VFS.FS.FSDRIVETYPE.MATCHES} |
This macro is used in filesystems discovery. Can be overridden on the host or linked template level. |
fixed |
{$VFS.FS.FSDRIVETYPE.NOT_MATCHES} |
This macro is used in filesystems discovery. Can be overridden on the host or linked template level. |
^\s$ |
{$VFS.FS.FSNAME.MATCHES} |
This macro is used in filesystems discovery. Can be overridden on the host or linked template level. |
.* |
{$VFS.FS.FSNAME.NOT_MATCHES} |
This macro is used in filesystems discovery. Can be overridden on the host or linked template level. |
^(/dev|/sys|/run|/proc|.+/shm$) |
{$VFS.FS.FSTYPE.MATCHES} |
This macro is used in filesystems discovery. Can be overridden on the host or linked template level. |
.* |
{$VFS.FS.FSTYPE.NOT_MATCHES} |
This macro is used in filesystems discovery. Can be overridden on the host or linked template level. |
^\s$ |
{$VFS.FS.PUSED.MAX.CRIT} |
The critical threshold of the filesystem utilization in percent. |
90 |
{$VFS.FS.PUSED.MAX.WARN} |
The warning threshold of the filesystem utilization in percent. |
80 |
Template links
There are no template links in this template.
Discovery rules
Name |
Description |
Type |
Key and additional info |
Mounted filesystem discovery |
Discovery of file systems of different types. |
ZABBIX_ACTIVE |
vfs.fs.discovery Filter: AND - A: {#FSTYPE} MATCHES_REGEX {$VFS.FS.FSTYPE.MATCHES} - B: {#FSTYPE} NOT_MATCHES_REGEX {$VFS.FS.FSTYPE.NOT_MATCHES} - C: {#FSNAME} MATCHES_REGEX {$VFS.FS.FSNAME.MATCHES} - D: {#FSNAME} NOT_MATCHES_REGEX {$VFS.FS.FSNAME.NOT_MATCHES} - E: {#FSDRIVETYPE} MATCHES_REGEX {$VFS.FS.FSDRIVETYPE.MATCHES} - F: {#FSDRIVETYPE} NOT_MATCHES_REGEX {$VFS.FS.FSDRIVETYPE.NOT_MATCHES} |
Items collected
Group |
Name |
Description |
Type |
Key and additional info |
Filesystems |
{#FSNAME}: Used space |
Used storage in Bytes |
ZABBIX_ACTIVE |
vfs.fs.size[{#FSNAME},used] |
Filesystems |
{#FSNAME}: Total space |
Total space in Bytes |
ZABBIX_ACTIVE |
vfs.fs.size[{#FSNAME},total] |
Filesystems |
{#FSNAME}: Space utilization |
Space utilization in % for {#FSNAME} |
ZABBIX_ACTIVE |
vfs.fs.size[{#FSNAME},pused] |
Triggers
Name |
Description |
Expression |
Severity |
Dependencies and additional info |
{#FSNAME}: Disk space is critically low (used > {$VFS.FS.PUSED.MAX.CRIT:"{#FSNAME}"}%) |
Two conditions should match: First, space utilization should be above {$VFS.FS.PUSED.MAX.CRIT:"{#FSNAME}"}. Second condition should be one of the following: - The disk free space is less than 5G. - The disk will be full in less than 24 hours. |
{TEMPLATE_NAME:vfs.fs.size[{#FSNAME},pused].last()}>{$VFS.FS.PUSED.MAX.CRIT:"{#FSNAME}"} and (({Template Module Windows filesystems by Zabbix agent active:vfs.fs.size[{#FSNAME},total].last()}-{Template Module Windows filesystems by Zabbix agent active:vfs.fs.size[{#FSNAME},used].last()})<5G or {TEMPLATE_NAME:vfs.fs.size[{#FSNAME},pused].timeleft(1h,,100)}<1d) |
AVERAGE |
Manual close: YES |
{#FSNAME}: Disk space is low (used > {$VFS.FS.PUSED.MAX.WARN:"{#FSNAME}"}%) |
Two conditions should match: First, space utilization should be above {$VFS.FS.PUSED.MAX.WARN:"{#FSNAME}"}. Second condition should be one of the following: - The disk free space is less than 10G. - The disk will be full in less than 24 hours. |
{TEMPLATE_NAME:vfs.fs.size[{#FSNAME},pused].last()}>{$VFS.FS.PUSED.MAX.WARN:"{#FSNAME}"} and (({Template Module Windows filesystems by Zabbix agent active:vfs.fs.size[{#FSNAME},total].last()}-{Template Module Windows filesystems by Zabbix agent active:vfs.fs.size[{#FSNAME},used].last()})<10G or {TEMPLATE_NAME:vfs.fs.size[{#FSNAME},pused].timeleft(1h,,100)}<1d) |
WARNING |
Manual close: YES Depends on: - {#FSNAME}: Disk space is critically low (used > {$VFS.FS.PUSED.MAX.CRIT:"{#FSNAME}"}%) |
Feedback
Please report any issues with the template at https://support.zabbix.com
Template Module Windows physical disks by Zabbix agent active
Overview
For Zabbix version: 4.4
Setup
Zabbix configuration
Macros used
Name |
Description |
Default |
{$VFS.DEV.DEVNAME.MATCHES} |
This macro is used in physical disks discovery. Can be overridden on the host or linked template level. |
.* |
{$VFS.DEV.DEVNAME.NOT_MATCHES} |
This macro is used in physical disks discovery. Can be overridden on the host or linked template level. |
_Total |
{$VFS.DEV.UTIL.MAX.WARN} |
The warning threshold of disk time utilization in percent. |
95 |
Template links
There are no template links in this template.
Discovery rules
Name |
Description |
Type |
Key and additional info |
Physical disks discovery |
Discovery of installed physical disks. |
DEPENDENT |
vfs.dev.discovery Preprocessing: - JAVASCRIPT: output = JSON.parse(value).map(function(dev){ return { "{#DEVNAME}": dev.Name, "{#DEVQUEUE}": dev.CurrentDiskQueueLength, "{#DEVREADS}": dev.DiskReadsPersec, "{#DEVTIME}": dev.PercentDiskTime, "{#DEVWRITES}": dev.DiskWritesPersec }}) return JSON.stringify({"data": output}) - DISCARD_UNCHANGED_HEARTBEAT: 1h Filter: AND - A: {#DEVNAME} MATCHES_REGEX {$VFS.DEV.DEVNAME.MATCHES} - B: {#DEVNAME} NOT_MATCHES_REGEX {$VFS.DEV.DEVNAME.NOT_MATCHES} |
Items collected
Group |
Name |
Description |
Type |
Key and additional info |
Storage |
{#DEVNAME}: Disk read rate |
Rate of read operations on the disk. |
DEPENDENT |
vfs.dev.read.rate[DiskReadsPersec.{#DEVNAME}] Preprocessing: - JSONPATH: $[?(@.Name == "{#DEVNAME}")].DiskReadsPersec.first() |
Storage |
{#DEVNAME}: Disk write rate |
Rate of write operations on the disk. |
DEPENDENT |
vfs.dev.write.rate[DiskWritesPersec.{#DEVNAME}] Preprocessing: - JSONPATH: $[?(@.Name == "{#DEVNAME}")].DiskWritesPersec.first() |
Storage |
{#DEVNAME}: Disk average queue size (avgqu-sz) |
Current average disk queue, the number of requests outstanding on the disk at the time the performance data is collected. |
DEPENDENT |
vfs.dev.queue_size[CurrentDiskQueueLength.{#DEVNAME}] Preprocessing: - JSONPATH: $[?(@.Name == "{#DEVNAME}")].CurrentDiskQueueLength.first() |
Storage |
{#DEVNAME}: Disk utilization |
This item is the percentage of elapsed time that the selected disk drive was busy servicing read or writes requests. |
DEPENDENT |
vfs.dev.util[PercentDiskTime.{#DEVNAME}] Preprocessing: - JSONPATH: $[?(@.Name == "{#DEVNAME}")].PercentDiskTime.first() |
Zabbix_raw_items |
Physical disks WMI get |
Raw data of win32_perfformatteddata_perfdisk_physicaldisk. |
ZABBIX_ACTIVE |
wmi.getall[root\cimv2,"select * from win32_perfformatteddata_perfdisk_physicaldisk"] |
Triggers
Name |
Description |
Expression |
Severity |
Dependencies and additional info |
{#DEVNAME}: Disk is overloaded (util > {$VFS.DEV.UTIL.MAX.WARN}% for 15m) |
The disk appears to be under heavy load |
{TEMPLATE_NAME:vfs.dev.util[PercentDiskTime.{#DEVNAME}].min(15m)}>{$VFS.DEV.UTIL.MAX.WARN} |
WARNING |
Manual close: YES |
Feedback
Please report any issues with the template at https://support.zabbix.com
Template Module Windows generic by Zabbix agent active
Overview
For Zabbix version: 4.4
Setup
Zabbix configuration
Macros used
Name |
Description |
Default |
{$SYSTEM.FUZZYTIME.MAX} |
The threshold for difference of system time in seconds. |
60 |
Template links
There are no template links in this template.
Discovery rules
Items collected
Group |
Name |
Description |
Type |
Key and additional info |
General |
System local time |
System local time of the host. |
ZABBIX_ACTIVE |
system.localtime |
General |
System name |
System host name. |
ZABBIX_ACTIVE |
system.hostname Preprocessing: - DISCARD_UNCHANGED_HEARTBEAT: 1d |
General |
System description |
System description of the host. |
ZABBIX_ACTIVE |
system.uname Preprocessing: - DISCARD_UNCHANGED_HEARTBEAT: 1d |
General |
Number of processes |
The number of processes. |
ZABBIX_ACTIVE |
proc.num[] |
General |
Number of threads |
The number of threads used by all running processes. |
ZABBIX_ACTIVE |
perf_counter_en["\System\Threads"] |
Inventory |
Operating system architecture |
Operating system architecture of the host. |
ZABBIX_ACTIVE |
system.sw.arch Preprocessing: - DISCARD_UNCHANGED_HEARTBEAT: 1d |
Status |
Uptime |
System uptime in 'N days, hh:mm:ss' format. |
ZABBIX_ACTIVE |
system.uptime |
Triggers
Name |
Description |
Expression |
Severity |
Dependencies and additional info |
System time is out of sync (diff with Zabbix server > {$SYSTEM.FUZZYTIME.MAX}s) |
The host system time is different from the Zabbix server time. |
{TEMPLATE_NAME:system.localtime.fuzzytime({$SYSTEM.FUZZYTIME.MAX})}=0 |
WARNING |
Manual close: YES |
System name has changed (new name: {ITEM.VALUE}) |
System name has changed. Ack to close. |
{TEMPLATE_NAME:system.hostname.diff()}=1 and {TEMPLATE_NAME:system.hostname.strlen()}>0 |
INFO |
Manual close: YES |
Host has been restarted (uptime < 10m) |
The device uptime is less than 10 minutes. |
{TEMPLATE_NAME:system.uptime.last()}<10m |
WARNING |
Manual close: YES |
Feedback
Please report any issues with the template at https://support.zabbix.com
Template Module Windows network by Zabbix agent active
Overview
For Zabbix version: 4.4
Setup
Zabbix configuration
Macros used
Name |
Description |
Default |
{$IF.ERRORS.WARN} |
- |
2 |
{$IF.UTIL.MAX} |
- |
90 |
{$IFCONTROL} |
- |
1 |
{$NET.IF.IFALIAS.MATCHES} |
This macro is used in Network interface discovery. Can be overridden on the host or linked template level. |
.* |
{$NET.IF.IFALIAS.NOT_MATCHES} |
This macro is used in Network interface discovery. Can be overridden on the host or linked template level. |
CHANGE_THIS |
{$NET.IF.IFDESCR.MATCHES} |
This macro is used in Network interface discovery. Can be overridden on the host or linked template level. |
.* |
{$NET.IF.IFDESCR.NOT_MATCHES} |
This macro is used in Network interface discovery. Can be overridden on the host or linked template level. |
CHANGE_THIS |
{$NET.IF.IFNAME.MATCHES} |
This macro is used in Network interface discovery. Can be overridden on the host or linked template level. |
.* |
{$NET.IF.IFNAME.NOT_MATCHES} |
This macro is used in Network interface discovery. Can be overridden on the host or linked template level. |
Miniport|Virtual|Teredo|Kernel|Loopback|Bluetooth|HTTPS|6to4|QoS|Layer |
{$NET.IF.IFNETENABLED.MATCHES} |
This macro is used in Network interface discovery. Can be overridden on the host or linked template level. |
True |
{$NET.IF.IFNETENABLED.NOT_MATCHES} |
This macro is used in Network interface discovery. Can be overridden on the host or linked template level. |
CHANGE_THIS |
{$NET.IF.PHYSICALADAPTER.MATCHES} |
This macro is used in Network interface discovery. Can be overridden on the host or linked template level. |
True |
{$NET.IF.PHYSICALADAPTER.NOT_MATCHES} |
This macro is used in Network interface discovery. Can be overridden on the host or linked template level. |
CHANGE_THIS |
Template links
There are no template links in this template.
Discovery rules
Name |
Description |
Type |
Key and additional info |
Network interfaces discovery |
Discovery of installed network interfaces. |
DEPENDENT |
net.if.discovery Preprocessing: - JAVASCRIPT: output = JSON.parse(value).map(function(net){ return { "{#IFNAME}": net.Name, "{#IFDESCR}": net.Description, "{#IFPHYSICALADAPTER}": net.PhysicalAdapter, "{#IFALIAS}" : net.NetConnectionID, "{#IFNETENABLED}": net.NetEnabled, "{#IFNETSTATUS}": net.NetConnectionStatus, "{#IFSPEED}": net.Speed }}) return JSON.stringify({"data": output}) - DISCARD_UNCHANGED_HEARTBEAT: 1h Filter: AND - A: {#IFPHYSICALADAPTER} MATCHES_REGEX {$NET.IF.PHYSICALADAPTER.MATCHES} - B: {#IFPHYSICALADAPTER} NOT_MATCHES_REGEX {$NET.IF.PHYSICALADAPTER.NOT_MATCHES} - C: {#IFNAME} MATCHES_REGEX {$NET.IF.IFNAME.MATCHES} - D: {#IFNAME} NOT_MATCHES_REGEX {$NET.IF.IFNAME.NOT_MATCHES} - E: {#IFDESCR} MATCHES_REGEX {$NET.IF.IFDESCR.MATCHES} - F: {#IFDESCR} NOT_MATCHES_REGEX {$NET.IF.IFDESCR.NOT_MATCHES} - G: {#IFALIAS} MATCHES_REGEX {$NET.IF.IFALIAS.MATCHES} - H: {#IFALIAS} NOT_MATCHES_REGEX {$NET.IF.IFALIAS.NOT_MATCHES} - I: {#IFNETENABLED} MATCHES_REGEX {$NET.IF.IFNETENABLED.MATCHES} - J: {#IFNETENABLED} NOT_MATCHES_REGEX {$NET.IF.IFNETENABLED.NOT_MATCHES} |
Items collected
Group |
Name |
Description |
Type |
Key and additional info |
Network_interfaces |
Interface {#IFNAME}({#IFALIAS}): Bits received |
Incoming traffic on the network interface. |
ZABBIX_ACTIVE |
net.if.in["{#IFNAME}"] Preprocessing: - CHANGE_PER_SECOND - MULTIPLIER: 8 |
Network_interfaces |
Interface {#IFNAME}({#IFALIAS}): Bits sent |
Outgoing traffic on the network interface. |
ZABBIX_ACTIVE |
net.if.out["{#IFNAME}"] Preprocessing: - CHANGE_PER_SECOND - MULTIPLIER: 8 |
Network_interfaces |
Interface {#IFNAME}({#IFALIAS}): Inbound packets discarded |
The number of incoming packets dropped on the network interface. |
ZABBIX_ACTIVE |
net.if.in["{#IFNAME}",dropped] Preprocessing: - CHANGE_PER_SECOND |
Network_interfaces |
Interface {#IFNAME}({#IFALIAS}): Outbound packets discarded |
The number of outgoing packets dropped on the network interface. |
ZABBIX_ACTIVE |
net.if.out["{#IFNAME}",dropped] Preprocessing: - CHANGE_PER_SECOND |
Network_interfaces |
Interface {#IFNAME}({#IFALIAS}): Inbound packets with errors |
The number of incoming packets with errors on the network interface. |
ZABBIX_ACTIVE |
net.if.in["{#IFNAME}",errors] Preprocessing: - CHANGE_PER_SECOND |
Network_interfaces |
Interface {#IFNAME}({#IFALIAS}): Outbound packets with errors |
The number of outgoing packets with errors on the network interface. |
ZABBIX_ACTIVE |
net.if.out["{#IFNAME}",errors] Preprocessing: - CHANGE_PER_SECOND |
Network_interfaces |
Interface {#IFNAME}({#IFALIAS}): Speed |
Estimated bandwidth of the network interface if any. |
DEPENDENT |
net.if.speed["{#IFNAME}"] Preprocessing: - JSONPATH: $[?(@.Name == "{#IFNAME}")].Speed.first() ⛔️ON_FAIL: CUSTOM_VALUE -> 0 |
Network_interfaces |
Interface {#IFNAME}({#IFALIAS}): Interface type |
The type of the network interface. |
DEPENDENT |
net.if.type["{#IFNAME}"] Preprocessing: - JSONPATH: $[?(@.Name == "{#IFNAME}")].AdapterTypeId.first() |
Network_interfaces |
Interface {#IFNAME}({#IFALIAS}): Operational status |
The operational status of the network interface. |
DEPENDENT |
net.if.status["{#IFNAME}"] Preprocessing: - JSONPATH: $[?(@.Name == "{#IFNAME}")].NetConnectionStatus.first() |
Zabbix_raw_items |
Network interfaces WMI get |
Raw data of win32_networkadapter. |
ZABBIX_ACTIVE |
wmi.getall[root\cimv2,"select * from win32_networkadapter where PhysicalAdapter=True"] |
Triggers
Name |
Description |
Expression |
Severity |
Dependencies and additional info |
Interface {#IFNAME}({#IFALIAS}): High bandwidth usage ( > {$IF.UTIL.MAX:"{#IFNAME}"}% ) |
The network interface utilization is close to its estimated maximum bandwidth. |
({TEMPLATE_NAME:net.if.in["{#IFNAME}"].avg(15m)}>({$IF.UTIL.MAX:"{#IFNAME}"}/100)*{Template Module Windows network by Zabbix agent active:net.if.speed["{#IFNAME}"].last()} or {Template Module Windows network by Zabbix agent active:net.if.out["{#IFNAME}"].avg(15m)}>({$IF.UTIL.MAX:"{#IFNAME}"}/100)*{Template Module Windows network by Zabbix agent active:net.if.speed["{#IFNAME}"].last()}) and {Template Module Windows network by Zabbix agent active:net.if.speed["{#IFNAME}"].last()}>0 Recovery expression: {TEMPLATE_NAME:net.if.in["{#IFNAME}"].avg(15m)}<(({$IF.UTIL.MAX:"{#IFNAME}"}-3)/100)*{Template Module Windows network by Zabbix agent active:net.if.speed["{#IFNAME}"].last()} and {Template Module Windows network by Zabbix agent active:net.if.out["{#IFNAME}"].avg(15m)}<(({$IF.UTIL.MAX:"{#IFNAME}"}-3)/100)*{Template Module Windows network by Zabbix agent active:net.if.speed["{#IFNAME}"].last()} |
WARNING |
Manual close: YES Depends on: - Interface {#IFNAME}({#IFALIAS}): Link down |
Interface {#IFNAME}({#IFALIAS}): High error rate ( > {$IF.ERRORS.WARN:"{#IFNAME}"} for 5m) |
Recovers when below 80% of {$IF.ERRORS.WARN:"{#IFNAME}"} threshold |
{TEMPLATE_NAME:net.if.in["{#IFNAME}",errors].min(5m)}>{$IF.ERRORS.WARN:"{#IFNAME}"} or {Template Module Windows network by Zabbix agent active:net.if.out["{#IFNAME}",errors].min(5m)}>{$IF.ERRORS.WARN:"{#IFNAME}"} Recovery expression: {TEMPLATE_NAME:net.if.in["{#IFNAME}",errors].max(5m)}<{$IF.ERRORS.WARN:"{#IFNAME}"}*0.8 and {Template Module Windows network by Zabbix agent active:net.if.out["{#IFNAME}",errors].max(5m)}<{$IF.ERRORS.WARN:"{#IFNAME}"}*0.8 |
WARNING |
Manual close: YES Depends on: - Interface {#IFNAME}({#IFALIAS}): Link down |
Interface {#IFNAME}({#IFALIAS}): Ethernet has changed to lower speed than it was before |
This Ethernet connection has transitioned down from its known maximum speed. This might be a sign of autonegotiation issues. Ack to close. |
{TEMPLATE_NAME:net.if.speed["{#IFNAME}"].change()}<0 and {TEMPLATE_NAME:net.if.speed["{#IFNAME}"].last()}>0 and ( {Template Module Windows network by Zabbix agent active:net.if.type["{#IFNAME}"].last()}=6 or {Template Module Windows network by Zabbix agent active:net.if.type["{#IFNAME}"].last()}=7 or {Template Module Windows network by Zabbix agent active:net.if.type["{#IFNAME}"].last()}=11 or {Template Module Windows network by Zabbix agent active:net.if.type["{#IFNAME}"].last()}=62 or {Template Module Windows network by Zabbix agent active:net.if.type["{#IFNAME}"].last()}=69 or {Template Module Windows network by Zabbix agent active:net.if.type["{#IFNAME}"].last()}=117 ) and ({Template Module Windows network by Zabbix agent active:net.if.status["{#IFNAME}"].last()}<>2) Recovery expression: ({TEMPLATE_NAME:net.if.speed["{#IFNAME}"].change()}>0 and {TEMPLATE_NAME:net.if.speed["{#IFNAME}"].prev()}>0) or ({Template Module Windows network by Zabbix agent active:net.if.status["{#IFNAME}"].last()}=2) |
INFO |
Manual close: YES Depends on: - Interface {#IFNAME}({#IFALIAS}): Link down |
Interface {#IFNAME}({#IFALIAS}): Link down |
This trigger expression works as follows: 1. Can be triggered if operations status is down. 2. {$IFCONTROL:"{#IFNAME}"}=1 - user can redefine Context macro to value - 0. That marks this interface as not important. No new trigger will be fired if this interface is down. 3. {TEMPLATE_NAME:METRIC.diff()}=1) - trigger fires only if operational status was up(1) sometime before. (So, do not fire 'ethernal off' interfaces.) WARNING: if closed manually - won't fire again on next poll, because of .diff. |
{$IFCONTROL:"{#IFNAME}"}=1 and ({TEMPLATE_NAME:net.if.status["{#IFNAME}"].last()}=2 and {TEMPLATE_NAME:net.if.status["{#IFNAME}"].diff()}=1) Recovery expression: {TEMPLATE_NAME:net.if.status["{#IFNAME}"].last()}<>2 |
AVERAGE |
Manual close: YES |
Feedback
Please report any issues with the template at https://support.zabbix.com
Template Module Windows services by Zabbix agent active
Overview
For Zabbix version: 4.4
Special version of services template that is required for Windows OS.
Setup
Refer to the vendor documentation.
Zabbix configuration
No specific Zabbix configuration is required.
Macros used
Name |
Description |
Default |
{$SERVICE.NAME.MATCHES} |
This macro is used in Service discovery. Can be overridden on the host or linked template level. |
^.*$ |
{$SERVICE.NAME.NOT_MATCHES} |
This macro is used in Service discovery. Can be overridden on the host or linked template level. |
^RemoteRegistry|MMCSS|gupdate|SysmonLog|clr_optimization_v.+|clr_optimization_v.+|sppsvc|gpsvc|Pml Driver HPZ12|Net Driver HPZ12|MapsBroker|IntelAudioService|Intel\(R\) TPM Provisioning Service|dbupdate|DoSvc$ |
{$SERVICE.STARTUPNAME.MATCHES} |
This macro is used in Service discovery. Can be overridden on the host or linked template level. |
^automatic|automatic delayed$ |
{$SERVICE.STARTUPNAME.NOT_MATCHES} |
This macro is used in Service discovery. Can be overridden on the host or linked template level. |
^manual|disabled$ |
Template links
There are no template links in this template.
Discovery rules
Name |
Description |
Type |
Key and additional info |
Windows services discovery |
Discovery of Windows services of different types as defined in template's macros. |
ZABBIX_ACTIVE |
service.discovery Filter: AND - A: {#SERVICE.NAME} MATCHES_REGEX {$SERVICE.NAME.MATCHES} - B: {#SERVICE.NAME} NOT_MATCHES_REGEX {$SERVICE.NAME.NOT_MATCHES} - C: {#SERVICE.STARTUPNAME} MATCHES_REGEX {$SERVICE.STARTUPNAME.MATCHES} - D: {#SERVICE.STARTUPNAME} NOT_MATCHES_REGEX {$SERVICE.STARTUPNAME.NOT_MATCHES} |
Items collected
Group |
Name |
Description |
Type |
Key and additional info |
Services |
State of service "{#SERVICE.NAME}" ({#SERVICE.DISPLAYNAME}) |
- |
ZABBIX_ACTIVE |
service.info["{#SERVICE.NAME}",state] |
Triggers
Name |
Description |
Expression |
Severity |
Dependencies and additional info |
"{#SERVICE.NAME}" ({#SERVICE.DISPLAYNAME}) is not running (startup type {#SERVICE.STARTUPNAME}) |
The service has a state other than "Running" for the last three times. |
{TEMPLATE_NAME:service.info["{#SERVICE.NAME}",state].min(#3)}<>0 |
AVERAGE |
|
Feedback
Please report any issues with the template at https://support.zabbix.com
Template OS Windows by Zabbix agent active
Overview
For Zabbix version: 4.4
New official Windows template. Requires agent of Zabbix 4.4 and newer.
This template was tested on:
- Windows, version 7 and newer.
- Windows Server, version 2008 R2 and newer.
Setup
Install Zabbix agent on Windows OS according to Zabbix documentation.
Zabbix configuration
No specific Zabbix configuration is required.
Template links
Name |
Template Module Windows CPU by Zabbix agent active |
Template Module Windows filesystems by Zabbix agent active |
Template Module Windows generic by Zabbix agent active |
Template Module Windows memory by Zabbix agent active |
Template Module Windows network by Zabbix agent active |
Template Module Windows physical disks by Zabbix agent active |
Template Module Windows services by Zabbix agent active |
Template Module Zabbix agent |
Discovery rules
Items collected
Group |
Name |
Description |
Type |
Key and additional info |
Triggers
Name |
Description |
Expression |
Severity |
Dependencies and additional info |
Feedback
Please report any issues with the template at https://support.zabbix.com
You can also provide feedback, discuss the template or ask for help with it at
ZABBIX forums.
Source: https://git.zabbix.com/projects/ZBX/repos/zabbix/browse/templates/os/windows_snmp
Template OS Windows SNMPv2
Overview
For Zabbix version: 4.4
Setup
Refer to the vendor documentation.
Zabbix configuration
No specific Zabbix configuration is required.
Template links
Name |
Template Module Generic SNMPv2 |
Template Module HOST-RESOURCES-MIB SNMPv2 |
Template Module Interfaces Windows SNMPv2 |
Discovery rules
Items collected
Group |
Name |
Description |
Type |
Key and additional info |
Triggers
Name |
Description |
Expression |
Severity |
Dependencies and additional info |
Feedback
Please report any issues with the template at https://support.zabbix.com
Known Issues