-
Notifications
You must be signed in to change notification settings - Fork 1
/
Copy pathHAVELSAN All Templates.yaml
4953 lines (4937 loc) · 190 KB
/
HAVELSAN All Templates.yaml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
zabbix_export:
version: '6.0'
date: '2024-12-23T09:09:05Z'
groups:
- uuid: 7df96b18c230490a9a0a9e2307226338
name: Templates
- uuid: 57b7ae836ca64446ba2c296389c009b7
name: Templates/Modules
- uuid: 36bff6c29af64692839d077febfc7079
name: 'Templates/Network devices'
- uuid: 846977d1dfed4968bc5f8bdb363285bc
name: 'Templates/Operating systems'
templates:
- uuid: 9c7eb190f49f4c0f87a602f5ef294b4b
template: 'HAVELSAN Agent Utilization'
name: 'HAVELSAN Agent Utilization'
description: 'HAVELSAN Agent Utilization'
groups:
- name: 'Templates/Operating systems'
items:
- uuid: 15805a40624043548a9732b93b11f7a3
name: 'lmn: Device Type'
type: CALCULATED
key: hvl.dev.type
params: 'last(//vfs.dir.get[{$PATH}])'
- uuid: 7b3d127455294133be589195221fce78
name: 'lmn: Zabbix Service Status'
type: SIMPLE
key: 'net.tcp.service[tcp,,{$AGENT_PORT}]'
triggers:
- uuid: e2fc04b9b3554c12b92a546baf5e6078
expression: 'last(/HAVELSAN Agent Utilization/net.tcp.service[tcp,,{$AGENT_PORT}],#3)=0'
name: 'Zabbix Agent Not Reachable'
priority: WARNING
- uuid: ef30042970e4497f9947fd8252d15af9
name: 'lmn: Used swap space in %'
key: 'perf_counter_en["\Paging file(_Total)\% Usage"]'
history: 7d
value_type: FLOAT
units: '%'
description: 'The used space of swap volume/file in percent.'
tags:
- tag: component
value: memory
- tag: component
value: storage
- uuid: 3492c272a6ef491e919393c46a344647
name: 'lmn: CPU utilization'
key: system.cpu.util
history: 7d
value_type: FLOAT
units: '%'
description: 'The CPU utilization expressed in %.'
tags:
- tag: component
value: cpu
triggers:
- uuid: 0d88a7e9ffa54cd18378b92fd0b5130b
expression: 'last(/HAVELSAN Agent Utilization/system.cpu.util,#2)>={$CPU.UTIL.CRIT}'
name: 'HAVELSAN: High CPU utilization'
event_name: 'Windows: High CPU utilization (over {$CPU.UTIL.CRIT}% for 5m)'
opdata: 'Current utilization: {ITEM.LASTVALUE1}'
priority: WARNING
description: 'The CPU utilization is too high. The system might be slow to respond.'
tags:
- tag: scope
value: performance
- uuid: 80ef0bd497614a48ac2a196d33925df5
name: 'lmn: Free swap space'
type: CALCULATED
key: system.swap.free
history: 7d
units: B
params: 'last(//system.swap.size[,total]) - last(//system.swap.size[,total]) / 100 * last(//perf_counter_en["\Paging file(_Total)\% Usage"])'
description: 'The free space of the swap volume/file expressed in bytes.'
tags:
- tag: component
value: memory
- tag: component
value: storage
- uuid: 2c9481cc11694ed0bdab62dff715dc84
name: 'lmn: Total swap space'
key: 'system.swap.size[,total]'
history: 7d
units: B
description: 'The total space of the swap volume/file expressed in bytes.'
tags:
- tag: component
value: memory
- tag: component
value: storage
- uuid: b8ab7134b7714ae096b26ef985146103
name: 'lmn: Uptime'
key: system.uptime
delay: 30s
history: 7d
trends: '0'
units: uptime
description: 'The system uptime expressed in the following format: "N days, hh:mm:ss".'
tags:
- tag: component
value: system
triggers:
- uuid: 40f444ed49114ba3ba1558b6a323dc01
expression: 'last(/HAVELSAN Agent Utilization/system.uptime)<10m'
name: 'HAVLESAN: Host has been restarted'
event_name: 'Windows: Host has been restarted (uptime < 10m)'
priority: WARNING
description: 'The device uptime is less than 10 minutes.'
manual_close: 'YES'
tags:
- tag: scope
value: notice
- uuid: da5e73e7728b4476949104f17c97a9a5
name: 'lmn: Path Item'
key: 'vfs.dir.get[{$PATH}]'
delay: 1d
history: 7d
description: 'HAVELSAN Path item'
preprocessing:
- type: JAVASCRIPT
parameters:
- |2
if (value.includes("Jemus5")) {
value = "1";
}
else if(value.includes("Jemus8"))
{
value = "2";
}
else {
value = "0";
}
return value;
- uuid: be0536da17df49ce8fc18e1f6fe792a7
name: 'lmn: Total memory'
key: 'vm.memory.size[total]'
history: 7d
units: B
description: 'The total memory expressed in bytes.'
tags:
- tag: component
value: memory
- uuid: c1da8b9fb1c241dd89ca9a657e233c6e
name: 'lmn: Used memory'
key: 'vm.memory.size[used]'
history: 7d
units: B
description: 'Used memory in bytes.'
tags:
- tag: component
value: memory
- uuid: dd3ad4759ccb41d2a168a8e11e84c760
name: 'lmn: Memory utilization'
type: CALCULATED
key: vm.memory.util
history: 7d
value_type: FLOAT
units: '%'
params: 'last(//vm.memory.size[used]) / last(//vm.memory.size[total]) * 100'
description: 'Memory utilization in %.'
tags:
- tag: component
value: memory
triggers:
- uuid: ea52b5f4cfdd489dab9af64df742a3a8
expression: 'min(/HAVELSAN Agent Utilization/vm.memory.util,5m)>{$MEMORY.UTIL.MAX}'
name: 'HAVELSAN: High memory utilization'
event_name: 'Windows: High memory utilization (>{$MEMORY.UTIL.MAX}% for 5m)'
priority: AVERAGE
description: 'The system is running out of free memory.'
tags:
- tag: scope
value: capacity
- tag: scope
value: performance
discovery_rules:
- uuid: b1dacf0b068d4c3ca0fa051ccc60a7f2
name: 'Physical disks discovery'
key: 'perf_instance_en.discovery[PhysicalDisk]'
delay: 1h
filter:
evaltype: AND
conditions:
- macro: '{#DEVNAME}'
value: '{$VFS.DEV.DEVNAME.MATCHES}'
formulaid: A
- macro: '{#DEVNAME}'
value: '{$VFS.DEV.DEVNAME.NOT_MATCHES}'
operator: NOT_MATCHES_REGEX
formulaid: B
description: 'Discovery of installed physical disks.'
item_prototypes:
- uuid: 78b2c8e3cc55448ea4277541b91eacaf
name: '{#DEVNAME}: Disk utilization by idle time'
key: 'perf_counter_en["\PhysicalDisk({#DEVNAME})\% Idle Time",60]'
history: 7d
value_type: FLOAT
units: '%'
description: 'This item is the percentage of elapsed time that the selected disk drive was busy servicing read or writes requests based on idle time.'
preprocessing:
- type: JAVASCRIPT
parameters:
- 'return (100 - value)'
tags:
- tag: component
value: storage
- tag: disk
value: '{#DEVNAME}'
trigger_prototypes:
- uuid: 5358633bce4a4ebe9bea1c074cc95093
expression: 'min(/HAVELSAN Agent Utilization/perf_counter_en["\PhysicalDisk({#DEVNAME})\% Idle Time",60],15m)>{$VFS.DEV.UTIL.MAX.WARN}'
name: '{#DEVNAME}: Disk is overloaded'
event_name: '{#DEVNAME}: Disk is overloaded (util > {$VFS.DEV.UTIL.MAX.WARN}% for 15m)'
priority: WARNING
description: 'The disk appears to be under heavy load.'
manual_close: 'YES'
dependencies:
- name: '{#DEVNAME}: Disk read request responses are too high'
expression: 'min(/HAVELSAN Agent Utilization/perf_counter_en["\PhysicalDisk({#DEVNAME})\Avg. Disk sec/Read",60],15m) > {$VFS.DEV.READ.AWAIT.WARN:"{#DEVNAME}"}'
- name: '{#DEVNAME}: Disk write request responses are too high'
expression: 'min(/HAVELSAN Agent Utilization/perf_counter_en["\PhysicalDisk({#DEVNAME})\Avg. Disk sec/Write",60],15m) > {$VFS.DEV.WRITE.AWAIT.WARN:"{#DEVNAME}"}'
tags:
- tag: scope
value: performance
- uuid: a36911950c1f4b9e9b9315ccab35e516
name: '{#DEVNAME}: Average disk read queue length'
key: 'perf_counter_en["\PhysicalDisk({#DEVNAME})\Avg. Disk Read Queue Length",60]'
history: 7d
value_type: FLOAT
description: 'Average disk read queue, the number of requests outstanding on the disk at the time the performance data is collected.'
tags:
- tag: component
value: storage
- tag: disk
value: '{#DEVNAME}'
- uuid: 6e4029b2372d47ee89bf13732d0a9989
name: '{#DEVNAME}: Disk read request avg waiting time'
key: 'perf_counter_en["\PhysicalDisk({#DEVNAME})\Avg. Disk sec/Read",60]'
history: 7d
value_type: FLOAT
units: s
description: 'The average time for read requests issued to the device to be served. This includes the time spent by the requests in queue and the time spent servicing them.'
tags:
- tag: component
value: storage
- tag: disk
value: '{#DEVNAME}'
trigger_prototypes:
- uuid: c94df2a19ec54b0b86c105ad3578a7e9
expression: 'min(/HAVELSAN Agent Utilization/perf_counter_en["\PhysicalDisk({#DEVNAME})\Avg. Disk sec/Read",60],15m) > {$VFS.DEV.READ.AWAIT.WARN:"{#DEVNAME}"}'
name: '{#DEVNAME}: Disk read request responses are too high'
event_name: '{#DEVNAME}: Disk read request responses are too high (read > {$VFS.DEV.READ.AWAIT.WARN:"{#DEVNAME}"}s for 15m)'
priority: WARNING
description: 'This trigger might indicate the disk {#DEVNAME} saturation.'
manual_close: 'YES'
tags:
- tag: scope
value: performance
- uuid: aeba26a0c1b24871b1fa8a966aa2ffec
name: '{#DEVNAME}: Disk write request avg waiting time'
key: 'perf_counter_en["\PhysicalDisk({#DEVNAME})\Avg. Disk sec/Write",60]'
history: 7d
value_type: FLOAT
units: s
description: 'The average time for write requests issued to the device to be served. This includes the time spent by the requests in queue and the time spent servicing them.'
tags:
- tag: component
value: storage
- tag: disk
value: '{#DEVNAME}'
trigger_prototypes:
- uuid: c74fe2b4932147df9e497cfb73e3a7e0
expression: 'min(/HAVELSAN Agent Utilization/perf_counter_en["\PhysicalDisk({#DEVNAME})\Avg. Disk sec/Write",60],15m) > {$VFS.DEV.WRITE.AWAIT.WARN:"{#DEVNAME}"}'
name: '{#DEVNAME}: Disk write request responses are too high'
event_name: '{#DEVNAME}: Disk write request responses are too high (write > {$VFS.DEV.WRITE.AWAIT.WARN:"{#DEVNAME}"}s for 15m)'
priority: WARNING
description: 'This trigger might indicate the disk {#DEVNAME} saturation.'
manual_close: 'YES'
tags:
- tag: scope
value: performance
- uuid: 8b0bcb646cea42a8b694ced09893cada
name: '{#DEVNAME}: Average disk write queue length'
key: 'perf_counter_en["\PhysicalDisk({#DEVNAME})\Avg. Disk Write Queue Length",60]'
history: 7d
value_type: FLOAT
description: 'Average disk write queue, the number of requests outstanding on the disk at the time the performance data is collected.'
tags:
- tag: component
value: storage
- tag: disk
value: '{#DEVNAME}'
- uuid: c65dda882b95408b86e358b83327cf43
name: '{#DEVNAME}: Disk average queue size (avgqu-sz)'
key: 'perf_counter_en["\PhysicalDisk({#DEVNAME})\Current Disk Queue Length",60]'
history: 7d
value_type: FLOAT
description: 'The current average disk queue; the number of requests outstanding on the disk while the performance data is being collected.'
tags:
- tag: component
value: storage
- tag: disk
value: '{#DEVNAME}'
- uuid: 092c311ebf984fe695d587f0c0ab203f
name: '{#DEVNAME}: Disk read rate'
key: 'perf_counter_en["\PhysicalDisk({#DEVNAME})\Disk Reads/sec",60]'
history: 7d
value_type: FLOAT
units: '!r/s'
description: 'Rate of read operations on the disk.'
tags:
- tag: component
value: storage
- tag: disk
value: '{#DEVNAME}'
- uuid: 4192c39abf3641b2ba7b512ecccf53ee
name: '{#DEVNAME}: Disk write rate'
key: 'perf_counter_en["\PhysicalDisk({#DEVNAME})\Disk Writes/sec",60]'
history: 7d
value_type: FLOAT
units: '!w/s'
description: 'Rate of write operations on the disk.'
tags:
- tag: component
value: storage
- tag: disk
value: '{#DEVNAME}'
graph_prototypes:
- uuid: d2ce2d6358a649358083120cb72f88ea
name: '{#DEVNAME}: Disk average queue length'
graph_items:
- color: 199C0D
item:
host: 'HAVELSAN Agent Utilization'
key: 'perf_counter_en["\PhysicalDisk({#DEVNAME})\Avg. Disk Read Queue Length",60]'
- sortorder: '1'
color: F63100
item:
host: 'HAVELSAN Agent Utilization'
key: 'perf_counter_en["\PhysicalDisk({#DEVNAME})\Avg. Disk Write Queue Length",60]'
- uuid: 25d8009e29e2480cac09c981164e7adf
name: '{#DEVNAME}: Disk average waiting time'
graph_items:
- color: 199C0D
item:
host: 'HAVELSAN Agent Utilization'
key: 'perf_counter_en["\PhysicalDisk({#DEVNAME})\Avg. Disk sec/Read",60]'
- sortorder: '1'
drawtype: GRADIENT_LINE
color: F63100
item:
host: 'HAVELSAN Agent Utilization'
key: 'perf_counter_en["\PhysicalDisk({#DEVNAME})\Avg. Disk sec/Write",60]'
- uuid: 3960467555d84435bb248133c8abbf4a
name: '{#DEVNAME}: Disk read/write rates'
graph_items:
- color: 199C0D
item:
host: 'HAVELSAN Agent Utilization'
key: 'perf_counter_en["\PhysicalDisk({#DEVNAME})\Disk Reads/sec",60]'
- sortorder: '1'
drawtype: GRADIENT_LINE
color: F63100
item:
host: 'HAVELSAN Agent Utilization'
key: 'perf_counter_en["\PhysicalDisk({#DEVNAME})\Disk Writes/sec",60]'
- uuid: 7e64421427ed4fb09978b1fbeedaf5f1
name: '{#DEVNAME}: Disk utilization and queue'
graph_items:
- color: 199C0D
yaxisside: RIGHT
item:
host: 'HAVELSAN Agent Utilization'
key: 'perf_counter_en["\PhysicalDisk({#DEVNAME})\Current Disk Queue Length",60]'
- sortorder: '1'
drawtype: GRADIENT_LINE
color: F63100
item:
host: 'HAVELSAN Agent Utilization'
key: 'perf_counter_en["\PhysicalDisk({#DEVNAME})\% Idle Time",60]'
preprocessing:
- type: STR_REPLACE
parameters:
- '{#INSTANCE}'
- '{#DEVNAME}'
- uuid: 8be47c6061df41fda5d344dc90e3c256
name: 'Mounted filesystem discovery'
key: vfs.fs.discovery
delay: 1h
filter:
evaltype: AND
conditions:
- macro: '{#FSDRIVETYPE}'
value: '{$VFS.FS.FSDRIVETYPE.MATCHES}'
formulaid: A
- macro: '{#FSDRIVETYPE}'
value: '{$VFS.FS.FSDRIVETYPE.NOT_MATCHES}'
operator: NOT_MATCHES_REGEX
formulaid: B
- macro: '{#FSNAME}'
value: '{$VFS.FS.FSNAME.MATCHES}'
formulaid: C
- macro: '{#FSNAME}'
value: '{$VFS.FS.FSNAME.NOT_MATCHES}'
operator: NOT_MATCHES_REGEX
formulaid: D
- macro: '{#FSTYPE}'
value: '{$VFS.FS.FSTYPE.MATCHES}'
formulaid: E
- macro: '{#FSTYPE}'
value: '{$VFS.FS.FSTYPE.NOT_MATCHES}'
operator: NOT_MATCHES_REGEX
formulaid: F
description: 'Discovery of file systems of different types.'
item_prototypes:
- uuid: 56eca81d4a69489c93c12d108d066835
name: '{#FSLABEL}({#FSNAME}): Space utilization'
key: 'vfs.fs.size[{#FSNAME},pused]'
history: 7d
value_type: FLOAT
units: '%'
description: 'Space utilization in % for {#FSNAME}'
tags:
- tag: component
value: storage
- tag: filesystem
value: '{#FSNAME}'
- uuid: 7b50636ca40e4f599994d07942e5b0e9
name: '{#FSLABEL}({#FSNAME}): Total space'
key: 'vfs.fs.size[{#FSNAME},total]'
history: 7d
units: B
description: 'Total space in bytes'
tags:
- tag: component
value: storage
- tag: filesystem
value: '{#FSNAME}'
- uuid: 9f0e6c087c0f4eb992ba8c2adcfa1e53
name: '{#FSLABEL}({#FSNAME}): Used space'
key: 'vfs.fs.size[{#FSNAME},used]'
history: 7d
units: B
description: 'Used storage in bytes'
tags:
- tag: component
value: storage
- tag: filesystem
value: '{#FSNAME}'
trigger_prototypes:
- uuid: d4f467d3c1374cca8e36c3ba787a41f8
expression: |
last(/HAVELSAN Agent Utilization/vfs.fs.size[{#FSNAME},pused])>{$VFS.FS.PUSED.MAX.CRIT:"{#FSNAME}"} and
((last(/HAVELSAN Agent Utilization/vfs.fs.size[{#FSNAME},total])-last(/HAVELSAN Agent Utilization/vfs.fs.size[{#FSNAME},used]))<{$VFS.FS.FREE.MIN.CRIT:"{#FSNAME}"} or timeleft(/HAVELSAN Agent Utilization/vfs.fs.size[{#FSNAME},pused],1h,100)<1d)
name: '{#FSLABEL}({#FSNAME}): Disk space is critically low'
event_name: '{#FSLABEL}({#FSNAME}): Disk space is critically low (used > {$VFS.FS.PUSED.MAX.CRIT:"{#FSNAME}"}%)'
opdata: 'Space used: {ITEM.LASTVALUE3} of {ITEM.LASTVALUE2} ({ITEM.LASTVALUE1})'
priority: AVERAGE
description: |
Two conditions should match:
1. The first condition - utilization of the space should be above `{$VFS.FS.PUSED.MAX.CRIT:"{#FSNAME}"}`.
2. The second condition should be one of the following:
- the disk free space is less than `{$VFS.FS.FREE.MIN.CRIT:"{#FSNAME}"}`;
- the disk will be full in less than 24 hours.
manual_close: 'YES'
tags:
- tag: scope
value: capacity
- uuid: fe2b52bb13e84ebb8607e382cb92f7a5
expression: |
last(/HAVELSAN Agent Utilization/vfs.fs.size[{#FSNAME},pused])>{$VFS.FS.PUSED.MAX.WARN:"{#FSNAME}"} and
((last(/HAVELSAN Agent Utilization/vfs.fs.size[{#FSNAME},total])-last(/HAVELSAN Agent Utilization/vfs.fs.size[{#FSNAME},used]))<{$VFS.FS.FREE.MIN.WARN:"{#FSNAME}"} or timeleft(/HAVELSAN Agent Utilization/vfs.fs.size[{#FSNAME},pused],1h,100)<1d)
name: '{#FSLABEL}({#FSNAME}): Disk space is low'
event_name: '{#FSLABEL}({#FSNAME}): Disk space is low (used > {$VFS.FS.PUSED.MAX.WARN:"{#FSNAME}"}%)'
opdata: 'Space used: {ITEM.LASTVALUE3} of {ITEM.LASTVALUE2} ({ITEM.LASTVALUE1})'
priority: WARNING
description: |
Two conditions should match:
1. The first condition - utilization of the space should be above `{$VFS.FS.PUSED.MAX.WARN:"{#FSNAME}"}`.
2. The second condition should be one of the following:
- the disk free space is less than `{$VFS.FS.FREE.MIN.WARN:"{#FSNAME}"}`;
- the disk will be full in less than 24 hours.
manual_close: 'YES'
dependencies:
- name: '{#FSLABEL}({#FSNAME}): Disk space is critically low'
expression: |
last(/HAVELSAN Agent Utilization/vfs.fs.size[{#FSNAME},pused])>{$VFS.FS.PUSED.MAX.CRIT:"{#FSNAME}"} and
((last(/HAVELSAN Agent Utilization/vfs.fs.size[{#FSNAME},total])-last(/HAVELSAN Agent Utilization/vfs.fs.size[{#FSNAME},used]))<{$VFS.FS.FREE.MIN.CRIT:"{#FSNAME}"} or timeleft(/HAVELSAN Agent Utilization/vfs.fs.size[{#FSNAME},pused],1h,100)<1d)
tags:
- tag: scope
value: capacity
graph_prototypes:
- uuid: 3b89310e90934596bee400655db4f163
name: '{#FSLABEL}({#FSNAME}): Disk space usage'
width: '600'
height: '340'
type: PIE
show_3d: 'YES'
graph_items:
- color: '969696'
calc_fnc: LAST
type: GRAPH_SUM
item:
host: 'HAVELSAN Agent Utilization'
key: 'vfs.fs.size[{#FSNAME},total]'
- sortorder: '1'
color: C80000
calc_fnc: LAST
item:
host: 'HAVELSAN Agent Utilization'
key: 'vfs.fs.size[{#FSNAME},used]'
tags:
- tag: class
value: os
- tag: target
value: windows
macros:
- macro: '{$AGENT.TIMEOUT}'
value: 3m
description: 'Timeout after which agent is considered unavailable. Works only for agents reachable from Zabbix server/proxy (passive mode).'
- macro: '{$AGENT_PORT}'
value: '10050'
description: 'Zabbix agent port'
- macro: '{$CPU.INTERRUPT.CRIT.MAX}'
value: '50'
description: 'The critical threshold of the % Interrupt Time counter.'
- macro: '{$CPU.PRIV.CRIT.MAX}'
value: '30'
description: 'The threshold of the % Privileged Time counter.'
- macro: '{$CPU.QUEUE.CRIT.MAX}'
value: '3'
description: 'The threshold of the Processor Queue Length counter.'
- macro: '{$CPU.UTIL.CRIT}'
value: '90'
description: 'The critical threshold of the CPU utilization expressed in %.'
- macro: '{$IF.ERRORS.WARN}'
value: '2'
- macro: '{$IF.UTIL.MAX}'
value: '90'
- macro: '{$IFCONTROL}'
value: '1'
- macro: '{$MEM.PAGE_SEC.CRIT.MAX}'
value: '1000'
description: 'The warning threshold of the Memory Pages/sec counter.'
- macro: '{$MEM.PAGE_TABLE_CRIT.MIN}'
value: '5000'
description: 'The warning threshold of the Free System Page Table Entries counter.'
- macro: '{$MEMORY.UTIL.MAX}'
value: '90'
description: 'The warning threshold of the Memory util item.'
- macro: '{$NET.IF.IFALIAS.MATCHES}'
value: '.*'
description: 'This macro is used in Network interface discovery. Can be overridden on the host or linked template level.'
- macro: '{$NET.IF.IFALIAS.NOT_MATCHES}'
value: CHANGE_THIS
description: 'This macro is used in Network interface discovery. Can be overridden on the host or linked template level.'
- macro: '{$NET.IF.IFDESCR.MATCHES}'
value: '.*'
description: 'This macro is used in Network interface discovery. Can be overridden on the host or linked template level.'
- macro: '{$NET.IF.IFDESCR.NOT_MATCHES}'
value: CHANGE_THIS
description: 'This macro is used in Network interface discovery. Can be overridden on the host or linked template level.'
- macro: '{$NET.IF.IFNAME.MATCHES}'
value: '.*'
description: 'This macro is used in Network interface discovery. Can be overridden on the host or linked template level.'
- macro: '{$NET.IF.IFNAME.NOT_MATCHES}'
value: Miniport|Virtual|Teredo|Kernel|Loopback|Bluetooth|HTTPS|6to4|QoS|Layer
description: 'This macro is used in Network interface discovery. Can be overridden on the host or linked template level.'
- macro: '{$PATH}'
value: 'C:\Program Files (x86)\Microsoft\Edge'
- macro: '{$SERVICE.NAME.MATCHES}'
value: '^.*$'
description: 'This macro is used in Service discovery. Can be overridden on the host or linked template level.'
- macro: '{$SERVICE.NAME.NOT_MATCHES}'
value: '^(?:RemoteRegistry|MMCSS|gupdate|SysmonLog|clr_optimization_v.+|sppsvc|gpsvc|Pml Driver HPZ12|Net Driver HPZ12|MapsBroker|IntelAudioService|Intel\(R\) TPM Provisioning Service|dbupdate|DoSvc|CDPUserSvc_.+|WpnUserService_.+|OneSyncSvc_.+|WbioSrvc|BITS|tiledatamodelsvc|GISvc|ShellHWDetection|TrustedInstaller|TabletInputService|CDPSvc|wuauserv|edgeupdate)$'
description: 'This macro is used in Service discovery. Can be overridden on the host or linked template level.'
- macro: '{$SERVICE.STARTUPNAME.MATCHES}'
value: '^(?:automatic|automatic delayed)$'
description: 'This macro is used in Service discovery. Can be overridden on the host or linked template level.'
- macro: '{$SERVICE.STARTUPNAME.NOT_MATCHES}'
value: '^(?:manual|disabled)$'
description: 'This macro is used in Service discovery. Can be overridden on the host or linked template level.'
- macro: '{$SWAP.PFREE.MIN.WARN}'
value: '20'
description: 'The warning threshold of the minimum free swap.'
- macro: '{$SYSTEM.FUZZYTIME.MAX}'
value: '60'
description: 'The threshold for difference of system time in seconds.'
- macro: '{$VFS.DEV.DEVNAME.MATCHES}'
value: '.*'
description: 'This macro is used in physical disks discovery. Can be overridden on the host or linked template level.'
- macro: '{$VFS.DEV.DEVNAME.NOT_MATCHES}'
value: _Total
description: 'This macro is used in physical disks discovery. Can be overridden on the host or linked template level.'
- macro: '{$VFS.DEV.READ.AWAIT.WARN}'
value: '0.02'
description: 'Disk read average response time (in s) before the trigger would fire.'
- macro: '{$VFS.DEV.UTIL.MAX.WARN}'
value: '95'
description: 'The warning threshold of disk time utilization in percent.'
- macro: '{$VFS.DEV.WRITE.AWAIT.WARN}'
value: '0.02'
description: 'Disk write average response time (in s) before the trigger would fire.'
- macro: '{$VFS.FS.FREE.MIN.CRIT}'
value: 5G
description: 'The critical threshold of the filesystem utilization.'
- macro: '{$VFS.FS.FREE.MIN.WARN}'
value: 10G
description: 'The warning threshold of the filesystem utilization.'
- macro: '{$VFS.FS.FSDRIVETYPE.MATCHES}'
value: fixed
description: 'This macro is used in filesystems discovery. Can be overridden on the host or linked template level.'
- macro: '{$VFS.FS.FSDRIVETYPE.NOT_MATCHES}'
value: ^\s$
description: 'This macro is used in filesystems discovery. Can be overridden on the host or linked template level.'
- macro: '{$VFS.FS.FSNAME.MATCHES}'
value: '.*'
description: 'This macro is used in filesystems discovery. Can be overridden on the host or linked template level.'
- macro: '{$VFS.FS.FSNAME.NOT_MATCHES}'
value: '^(?:/dev|/sys|/run|/proc|.+/shm$)'
description: 'This macro is used in filesystems discovery. Can be overridden on the host or linked template level.'
- macro: '{$VFS.FS.FSTYPE.MATCHES}'
value: '.*'
description: 'This macro is used in filesystems discovery. Can be overridden on the host or linked template level.'
- macro: '{$VFS.FS.FSTYPE.NOT_MATCHES}'
value: ^\s$
description: 'This macro is used in filesystems discovery. Can be overridden on the host or linked template level.'
- macro: '{$VFS.FS.PUSED.MAX.CRIT}'
value: '90'
description: 'The critical threshold of the filesystem utilization in percent.'
- macro: '{$VFS.FS.PUSED.MAX.WARN}'
value: '80'
description: 'The warning threshold of the filesystem utilization in percent.'
dashboards:
- uuid: 048989b425314bb9bfb6ece8075c3f18
name: 'Network interfaces'
pages:
- name: Overview
widgets:
- type: GRAPH_PROTOTYPE
width: '24'
height: '5'
fields:
- type: INTEGER
name: columns
value: '1'
- uuid: aeacfa6be189495abe9da4a3483e075f
name: 'System performance'
pages:
- widgets:
- type: GRAPH_CLASSIC
width: '12'
height: '5'
- type: GRAPH_CLASSIC
'y': '5'
width: '12'
height: '5'
fields:
- type: GRAPH
name: graphid
value:
host: 'HAVELSAN Agent Utilization'
name: 'Windows: Memory utilization'
- type: GRAPH_PROTOTYPE
'y': '10'
width: '24'
height: '5'
fields:
- type: INTEGER
name: columns
value: '1'
- type: GRAPH_PROTOTYPE
name: graphid
value:
host: 'HAVELSAN Agent Utilization'
name: '{#FSLABEL}({#FSNAME}): Disk space usage'
- type: GRAPH_PROTOTYPE
'y': '15'
width: '24'
height: '5'
fields:
- type: INTEGER
name: columns
value: '1'
- type: GRAPH_PROTOTYPE
name: graphid
value:
host: 'HAVELSAN Agent Utilization'
name: '{#DEVNAME}: Disk read/write rates'
- type: GRAPH_PROTOTYPE
'y': '20'
width: '24'
height: '5'
fields:
- type: INTEGER
name: columns
value: '1'
- type: GRAPH_PROTOTYPE
name: graphid
value:
host: 'HAVELSAN Agent Utilization'
name: '{#DEVNAME}: Disk utilization and queue'
- type: GRAPH_PROTOTYPE
'y': '25'
width: '24'
height: '5'
fields:
- type: INTEGER
name: columns
value: '1'
- type: GRAPH_CLASSIC
x: '12'
width: '12'
height: '5'
fields:
- type: INTEGER
name: source_type
value: '1'
- type: GRAPH_CLASSIC
x: '12'
'y': '5'
width: '12'
height: '5'
fields:
- type: GRAPH
name: graphid
value:
host: 'HAVELSAN Agent Utilization'
name: 'Windows: Swap usage'
valuemaps:
- uuid: 523900a05baa453483aedd4a105900fe
name: Default
mappings:
- type: DEFAULT
newvalue: '0'
- uuid: bbf10fc46aa44184871fcc41ed78866c
name: 'Win32_NetworkAdapter::AdapterTypeId'
mappings:
- value: '0'
newvalue: 'Ethernet 802.3'
- value: '1'
newvalue: 'Token Ring 802.5'
- value: '2'
newvalue: 'Fiber Distributed Data Interface (FDDI)'
- value: '3'
newvalue: 'Wide Area Network (WAN)'
- value: '4'
newvalue: LocalTalk
- value: '5'
newvalue: 'Ethernet using DIX header format'
- value: '6'
newvalue: ARCNET
- value: '7'
newvalue: 'ARCNET (878.2)'
- value: '8'
newvalue: ATM
- value: '9'
newvalue: Wireless
- value: '10'
newvalue: 'Infrared Wireless'
- value: '11'
newvalue: Bpc
- value: '12'
newvalue: CoWan
- value: '13'
newvalue: '1394'
- uuid: f831185ba913471eae45e16dbb0cabb5
name: 'Win32_NetworkAdapter::NetConnectionStatus'
mappings:
- value: '0'
newvalue: Disconnected
- value: '1'
newvalue: Connecting
- value: '2'
newvalue: Connected
- value: '3'
newvalue: Disconnecting
- value: '4'
newvalue: 'Hardware Not Present'
- value: '5'
newvalue: 'Hardware Disabled'
- value: '6'
newvalue: 'Hardware Malfunction'
- value: '7'
newvalue: 'Media Disconnected'
- value: '8'
newvalue: Authenticating
- value: '9'
newvalue: 'Authentication Succeeded'
- value: '10'
newvalue: 'Authentication Failed'
- value: '11'
newvalue: 'Invalid Address'
- value: '12'
newvalue: 'Credentials Required'
- uuid: b4d4dc1ef5704b918600ccc7a1a8334b
name: 'Windows service state'
mappings:
- value: '0'
newvalue: Running
- value: '1'
newvalue: Paused
- value: '2'
newvalue: 'Start pending'
- value: '3'
newvalue: 'Pause pending'
- value: '4'
newvalue: 'Continue pending'
- value: '5'
newvalue: 'Stop pending'
- value: '6'
newvalue: Stopped
- value: '7'
newvalue: Unknown
- value: '255'
newvalue: 'No such service'
- uuid: 60fbdd9068514341b11cbaf9b474deba
name: zabbix.host.available
mappings:
- value: '0'
newvalue: 'not available'
- value: '1'
newvalue: available
- value: '2'
newvalue: unknown
- uuid: 99fa0d34de4d4509b3d7bd679fa4203a
name: 'Zabbix agent ping status'
mappings:
- value: '1'
newvalue: Up
- uuid: 465f78198b5948999f5ec2b8fc989fa9
template: 'HAVELSAN Cisco Utilization Template'
name: 'HAVELSAN Cisco Utilization Template'
description: |
HAVELSAN
Template Cisco IOS Software releases 12.2(3.5) or later
MIBs used:
CISCO-MEMORY-POOL-MIB
IF-MIB
EtherLike-MIB
HOST-RESOURCES-MIB
SNMPv2-MIB
CISCO-ENVMON-MIB
CISCO-PROCESS-MIB
ENTITY-MIB
Known Issues:
Description: no if(in|out)(Errors|Discards) are available for vlan ifType
Version: IOS for example: 12.1(22)EA11, 15.4(3)M2
Device: C2911, C7600
Generated by official Zabbix template tool "Templator"
groups:
- name: 'Templates/Network devices'
discovery_rules:
- uuid: bfa9e1a6d9004c0eb4ccfd50966dc657
name: 'CPU Discovery'
type: SNMP_AGENT
snmp_oid: 'discovery[{#SNMPVALUE},1.3.6.1.4.1.9.9.109.1.1.1.1.5]'
key: cpu.discovery
delay: 1h
description: |
If your IOS device has several CPUs, you must use CISCO-PROCESS-MIB and its object cpmCPUTotal5minRev from the table called cpmCPUTotalTable,
indexed with cpmCPUTotalIndex.
This table allows CISCO-PROCESS-MIB to keep CPU statistics for different physical entities in the router,
like different CPU chips, group of CPUs, or CPUs in different modules/cards.
In case of a single CPU, cpmCPUTotalTable has only one entry.
item_prototypes:
- uuid: c0ff3d56536f4b57b53fe972be4a8ccb
name: '#{#SNMPINDEX}: CPU utilization'
type: SNMP_AGENT
snmp_oid: '1.3.6.1.4.1.9.9.109.1.1.1.1.8.{#SNMPINDEX}'
key: 'system.cpu.util[cpmCPUTotal5minRev.{#SNMPINDEX}]'
delay: 5m
history: 7d
value_type: FLOAT
units: '%'
description: |
MIB: CISCO-PROCESS-MIB
The cpmCPUTotal5minRev MIB object provides a more accurate view of the performance of the router over time than the MIB objects cpmCPUTotal1minRev and cpmCPUTotal5secRev . These MIB objects are not accurate because they look at CPU at one minute and five second intervals, respectively. These MIBs enable you to monitor the trends and plan the capacity of your network. The recommended baseline rising threshold for cpmCPUTotal5minRev is 90 percent. Depending on the platform, some routers that run at 90 percent, for example, 2500s, can exhibit performance degradation versus a high-end router, for example, the 7500 series, which can operate fine.
Reference: http://www.cisco.com/c/en/us/support/docs/ip/simple-network-management-protocol-snmp/15215-collect-cpu-util-snmp.html
tags:
- tag: component
value: cpu
trigger_prototypes:
- uuid: b288ba2d86564090a55a4cee34368b45
expression: 'min(/HAVELSAN Cisco Utilization Template/system.cpu.util[cpmCPUTotal5minRev.{#SNMPINDEX}],5m)>{$CPU.UTIL.CRIT}'
name: '#{#SNMPINDEX}: High CPU utilization'
event_name: '#{#SNMPINDEX}: High CPU utilization (over {$CPU.UTIL.CRIT}% for 5m)'
opdata: 'Current utilization: {ITEM.LASTVALUE1}'
priority: WARNING
description: 'The CPU utilization is too high. The system might be slow to respond.'
tags:
- tag: scope
value: performance
graph_prototypes:
- uuid: 331c53d1f85d4fd18a9bdb9526edac62
name: '#{#SNMPINDEX}: CPU utilization'
ymin_type_1: FIXED
ymax_type_1: FIXED
graph_items:
- drawtype: GRADIENT_LINE
color: 199C0D
item:
host: 'HAVELSAN Cisco Utilization Template'
key: 'system.cpu.util[cpmCPUTotal5minRev.{#SNMPINDEX}]'
- uuid: 031a48d438e1487d8dbd5c6b7ad2e184
name: 'Memory Discovery'
type: SNMP_AGENT
snmp_oid: 'discovery[{#SNMPVALUE},1.3.6.1.4.1.9.9.48.1.1.1.2]'
key: memory.discovery
delay: 1h
description: |
Discovery of ciscoMemoryPoolTable, a table of memory pool monitoring entries.
http://www.cisco.com/c/en/us/support/docs/ip/simple-network-management-protocol-snmp/15216-contiguous-memory.html
item_prototypes:
- uuid: 7f92daf97bce41839dd8f0a42337d5dc
name: '{#SNMPVALUE}: Free memory'
type: SNMP_AGENT
snmp_oid: '1.3.6.1.4.1.9.9.48.1.1.1.6.{#SNMPINDEX}'
key: 'vm.memory.free[ciscoMemoryPoolFree.{#SNMPINDEX}]'
history: 7d
units: B
description: |
MIB: CISCO-MEMORY-POOL-MIB
Indicates the number of bytes from the memory pool that are currently unused on the managed device. Note that the sum of ciscoMemoryPoolUsed and ciscoMemoryPoolFree is the total amount of memory in the pool
Reference: http://www.cisco.com/c/en/us/support/docs/ip/simple-network-management-protocol-snmp/15216-contiguous-memory.html
tags:
- tag: component
value: memory
- uuid: b0c7fa662d4e4d299ffeeff822fa4b72
name: '{#SNMPVALUE}: Used memory'
type: SNMP_AGENT
snmp_oid: '1.3.6.1.4.1.9.9.48.1.1.1.5.{#SNMPINDEX}'
key: 'vm.memory.used[ciscoMemoryPoolUsed.{#SNMPINDEX}]'
history: 7d
units: B
description: |
MIB: CISCO-MEMORY-POOL-MIB
Indicates the number of bytes from the memory pool that are currently in use by applications on the managed device.
Reference: http://www.cisco.com/c/en/us/support/docs/ip/simple-network-management-protocol-snmp/15216-contiguous-memory.html
tags:
- tag: component
value: memory
- uuid: c2b57e8eb4794acf8fccf905a5d5ba7e
name: '{#SNMPVALUE}: Memory utilization'
type: CALCULATED
key: 'vm.memory.util[vm.memory.util.{#SNMPINDEX}]'
history: 7d
value_type: FLOAT
units: '%'
params: 'last(//vm.memory.used[ciscoMemoryPoolUsed.{#SNMPINDEX}])/(last(//vm.memory.free[ciscoMemoryPoolFree.{#SNMPINDEX}])+last(//vm.memory.used[ciscoMemoryPoolUsed.{#SNMPINDEX}]))*100'
description: 'Memory utilization in %.'
tags:
- tag: component
value: memory
trigger_prototypes:
- uuid: f08bceef6ac24a0c82e04ae424ce958f
expression: 'min(/HAVELSAN Cisco Utilization Template/vm.memory.util[vm.memory.util.{#SNMPINDEX}],5m)>{$MEMORY.UTIL.MAX}'
name: '{#SNMPVALUE}: High memory utilization'
event_name: '{#SNMPVALUE}: High memory utilization (>{$MEMORY.UTIL.MAX}% for 5m)'
priority: AVERAGE
description: 'The system is running out of free memory.'
tags:
- tag: scope
value: capacity
- tag: scope
value: performance
graph_prototypes:
- uuid: 767a056784304cc5bb2d7f3e3b5a4fab
name: '{#SNMPVALUE}: Memory utilization'
ymin_type_1: FIXED
ymax_type_1: FIXED
graph_items:
- drawtype: GRADIENT_LINE
color: 199C0D
item:
host: 'HAVELSAN Cisco Utilization Template'
key: 'vm.memory.util[vm.memory.util.{#SNMPINDEX}]'
tags:
- tag: class
value: network
- tag: target
value: cisco
- tag: target
value: cisco-ios
macros:
- macro: '{$CPU.UTIL.CRIT}'
value: '90'
- macro: '{$FAN_CRIT_STATUS:"critical"}'
value: '3'
- macro: '{$FAN_CRIT_STATUS:"shutdown"}'
value: '4'
- macro: '{$FAN_WARN_STATUS:"notFunctioning"}'
value: '6'
- macro: '{$FAN_WARN_STATUS:"warning"}'