aleksandra-galara
commented
4 years ago Hi, as for now, I've installed Zabbix 4.4 in Kubernetes and collected sample trigger payloads (using PyZabbix library to communicate with API).
Zabbix 4.4 gives us out-of-the-box templates for operating systems (Linux/Windows), databases (MySQL,PostgreSQL/Redis), network devices (Cisco, Dell, Hp, Juniper), servers and apps (apache, haproxy, nginx, rabbitmg) with 432 collected items and 219 triggers. There is also a template for integrating Zabbix with Prometheus and collecting data from Node Exporter instead of Zabbix agents.
I think that, for the beginning, we could focus on mapping the triggers from OS Linux Template:
Template Module Linux CPU by Zabbix agent:
- [ ] Load average is too high (per CPU load over {$LOAD_AVG_PER_CPU.MAX.WARN} for 5m)
- [ ] High CPU utilization (over {$CPU.UTIL.CRIT}% for 5m)
Template Module Linux filesystems by Zabbix agent:
- [ ] {#FSNAME}: Disk space is critically low (used > {$VFS.FS.PUSED.MAX.CRIT:"{#FSNAME}"}%)
- [ ] {#FSNAME}: Disk space is low (used > {$VFS.FS.PUSED.MAX.WARN:"{#FSNAME}"}%)
- [ ] {#FSNAME}: Running out of free inodes (free < {$VFS.FS.INODE.PFREE.MIN.CRIT:"{#FSNAME}"}%)
- [ ] {#FSNAME}: Running out of free inodes (free < {$VFS.FS.INODE.PFREE.MIN.WARN:"{#FSNAME}"}%)
Template Module Linux memory by Zabbix agent:
- [ ] High memory utilization ( >{$MEMORY.UTIL.MAX}% for 5m)
- [ ] Lack of available memory ( < {$MEMORY.AVAILABLE.MIN} of {ITEM.VALUE2})
- [ ] High swap space usage ( less than {$SWAP.PFREE.MIN.WARN}% free)
Template Module Linux block devices by Zabbix agent:
- [ ] {#DEVNAME}: Disk read/write request responses are too high (read > {$VFS.DEV.READ.AWAIT.WARN:"{#DEVNAME}"} ms for 15m or write > {$VFS.DEV.WRITE.AWAIT.WARN:"{#DEVNAME}"} ms for 15m)
Template Module Linux network interfaces by Zabbix agent:
- [ ] Interface {#IFNAME}: High error rate ( > {$IF.ERRORS.WARN:"{#IFNAME}"} for 5m)
- [ ] Interface {#IFNAME}: Link down
- [ ] Interface {#IFNAME}: Ethernet has changed to lower speed than it was before
Template Module Linux generic by Zabbix agent:
- [ ] System time is out of sync (diff with Zabbix server > {$SYSTEM.FUZZYTIME.MAX}s)
- [ ] System name has changed (new name: {ITEM.VALUE})
- [ ] Configured max number of open filedescriptors is too low (< {$KERNEL.MAXFILES.MIN})
- [ ] Configured max number of processes is too low (< {$KERNEL.MAXPROC.MIN})
- [ ] Getting closer to process limit (over 80% used)
- [ ] Operating system description has changed
- [ ] /etc/passwd has been changed
- [ ] {HOST.NAME} has been restarted (uptime < 10m)And maybe MySQL or Docker template (which came in release 5.0) could be useful for us?
Zabbix is an open-source monitoring software tool for diverse IT components, including networks, servers, virtual machines, and cloud services. It could be evaluated as a potential source for relevant telemetry data - triggers (alerts).
Prior to attempting implementation, we should collect some initial facts about Zabbix operation:
After collecting the above information, we will decide whether Zabbix can be integrated into OpenRCA and what elements must be taken into account in the development effort.