-
Incident report
-
Resolution: Won't fix
-
Major
-
None
-
2.2.5
-
Ubuntu 12.04 + Zabbix from official repo
We want to trigger certain actions when particular events occur in Zabbix.
Important is the fact that we can also act on when stuff is "OK" again while being able to know what the initial problem was. There is nothing in the OK/PROBLEM mails that can be used to make a relation between them.
The
for instance always contains a different event ID, unlike other tickets (e.g. ZBXNEXT-384) indicate what it should be.
Attached are screenshots of the interface how it has been configured.
The mail content :
Zabbix generated PROBLEM message:
ACTION.ID: 20
ACTION.NAME: Test EVENTS
DATE: 2014.07.30
DISCOVERY.DEVICE.IPADDRESS:Unknown macro: {DISCOVERY.DEVICE.IPADDRESS}
DISCOVERY.DEVICE.DNS:Unknown macro: {DISCOVERY.DEVICE.DNS}
DISCOVERY.DEVICE.STATUS:Unknown macro: {DISCOVERY.DEVICE.STATUS}
DISCOVERY.DEVICE.UPTIME:Unknown macro: {DISCOVERY.DEVICE.UPTIME}
DISCOVERY.RULE.NAME:Unknown macro: {DISCOVERY.RULE.NAME}
DISCOVERY.SERVICE.NAME:Unknown macro: {DISCOVERY.SERVICE.NAME}
DISCOVERY.SERVICE.PORT:Unknown macro: {DISCOVERY.SERVICE.PORT}
DISCOVERY.SERVICE.STATUS:Unknown macro: {DISCOVERY.SERVICE.STATUS}
DISCOVERY.SERVICE.UPTIME:Unknown macro: {DISCOVERY.SERVICE.UPTIME}
ESC.HISTORY: Problem started: 2014.07.30 08:53:30 Age: 1m
1. 2014.07.30 08:53:31 script executed "notification-testing-3.example.com"
EVENT.ACK.HISTORY:
EVENT.ACK.STATUS: No
EVENT.AGE: 1m
EVENT.DATE: 2014.07.30
EVENT.ID: 80514
EVENT.RECOVERY.DATE:Unknown macro: {EVENT.RECOVERY.DATE}
EVENT.RECOVERY.ID:Unknown macro: {EVENT.RECOVERY.ID}
EVENT.RECOVERY.STATUS:
Unknown macro: {EVENT.RECOVERY.STATUS}
EVENT.RECOVERY.TIME:Unknown macro: {EVENT.RECOVERY.TIME}
EVENT.RECOVERY.VALUE:Unknown macro: {EVENT.RECOVERY.VALUE}
EVENT.STATUS: PROBLEM
EVENT.TIME: 08:53:30
EVENT.VALUE: 1
HOST.ID:Unknown macro: {HOST.ID}
HOST.METADATA:Unknown macro: {HOST.METADATA}
HOSTGROUP.ID:Unknown macro: {HOSTGROUP.ID}
INVENTORY.ALIAS1: UNKNOWN
INVENTORY.ASSET.TAG1: UNKNOWN
INVENTORY.CHASSIS1: UNKNOWN
INVENTORY.CONTACT1: UNKNOWN
INVENTORY.CONTRACT.NUMBER1: UNKNOWN
INVENTORY.DEPLOYMENT.STATUS1: UNKNOWNINVENTORY.HARDWARE1: UNKNOWN
INVENTORY.HARDWARE.FULL1: UNKNOWN
INVENTORY.HOST.NETMASK1: UNKNOWN
INVENTORY.HOST.NETWORKS1: UNKNOWN
INVENTORY.HOST.ROUTER1: UNKNOWN
INVENTORY.HW.ARCH1: UNKNOWN
INVENTORY.HW.DATE.DECOMM1: UNKNOWN
INVENTORY.HW.DATE.EXPIRY1: UNKNOWN
INVENTORY.HW.DATE.INSTALL1: UNKNOWN
INVENTORY.HW.DATE.PURCHASE1: UNKNOWN
INVENTORY.INSTALLER.NAME1: UNKNOWN
INVENTORY.LOCATION1: UNKNOWN
INVENTORY.LOCATION.LAT1: UNKNOWN
INVENTORY.LOCATION.LON1: UNKNOWN
INVENTORY.MACADDRESS.A1: UNKNOWN
INVENTORY.MACADDRESS.B1: UNKNOWN
INVENTORY.MODEL1: UNKNOWN
INVENTORY.NAME1: UNKNOWN
INVENTORY.NOTES1: UNKNOWN
INVENTORY.OOB.IP1: UNKNOWNINVENTORY.OOB.NETMASK1: UNKNOWN
INVENTORY.OOB.ROUTER1: UNKNOWN
INVENTORY.OS1: UNKNOWN
INVENTORY.OS.FULL1: UNKNOWN
INVENTORY.OS.SHORT1: UNKNOWN
INVENTORY.POC.PRIMARY.CELL1: UNKNOWN
INVENTORY.POC.PRIMARY.EMAIL1: UNKNOWN
INVENTORY.POC.PRIMARY.NAME1: UNKNOWN
INVENTORY.POC.PRIMARY.NOTES1: UNKNOWN
INVENTORY.POC.PRIMARY.PHONE.A1: UNKNOWN
INVENTORY.POC.PRIMARY.PHONE.B1: UNKNOWN
INVENTORY.POC.PRIMARY.SCREEN1: UNKNOWN
INVENTORY.POC.SECONDARY.CELL1: UNKNOWN
INVENTORY.POC.SECONDARY.EMAIL1: UNKNOWN
INVENTORY.POC.SECONDARY.NAME1: UNKNOWN
INVENTORY.POC.SECONDARY.NOTES1: UNKNOWN
INVENTORY.POC.SECONDARY.PHONE.A1: UNKNOWN
INVENTORY.POC.SECONDARY.PHONE.B1: UNKNOWN
INVENTORY.POC.SECONDARY.SCREEN1: UNKNOWN
INVENTORY.SERIALNO.A1: UNKNOWNINVENTORY.SERIALNO.B1: UNKNOWN
INVENTORY.SITE.ADDRESS.A1: UNKNOWN
INVENTORY.SITE.ADDRESS.B1: UNKNOWN
INVENTORY.SITE.ADDRESS.C1: UNKNOWN
INVENTORY.SITE.CITY1: UNKNOWN
INVENTORY.SITE.COUNTRY1: UNKNOWN
INVENTORY.SITE.NOTES1: UNKNOWN
INVENTORY.SITE.RACK1: UNKNOWN
INVENTORY.SITE.STATE1: UNKNOWN
INVENTORY.SITE.ZIP1: UNKNOWN
INVENTORY.SOFTWARE1: UNKNOWN
INVENTORY.SOFTWARE.APP.A1: UNKNOWN
INVENTORY.SOFTWARE.APP.B1: UNKNOWN
INVENTORY.SOFTWARE.APP.C1: UNKNOWN
INVENTORY.SOFTWARE.APP.D1: UNKNOWN
INVENTORY.SOFTWARE.APP.E1: UNKNOWN
INVENTORY.SOFTWARE.FULL1: UNKNOWN
INVENTORY.TAG1: UNKNOWN
INVENTORY.TYPE1: UNKNOWN
INVENTORY.TYPE.FULL1: UNKNOWNINVENTORY.URL.A1: UNKNOWN
INVENTORY.URL.B1: UNKNOWN
INVENTORY.URL.C1: UNKNOWN
INVENTORY.VENDOR1: UNKNOWN
ITEM.DESCRIPTION1: The agent always returns 1 for this item. It could be used in combination with nodata() for availability check.
ITEM.ID1: 49873
ITEM.KEY1: agent.ping
ITEM.KEY.ORIG1: agent.ping
ITEM.LASTVALUE1: 1
ITEM.LOG.AGE1: UNKNOWN
ITEM.LOG.DATE1: UNKNOWN
ITEM.LOG.EVENTID1: UNKNOWN
ITEM.LOG.NSEVERITY1: UNKNOWN
ITEM.LOG.SEVERITY1: UNKNOWN
ITEM.LOG.SOURCE1: UNKNOWN
ITEM.LOG.TIME1: UNKNOWN
ITEM.NAME1: Agent ping
ITEM.NAME.ORIG1: Agent ping
ITEM.STATE1:Unknown macro: {ITEM.STATE1}
ITEM.VALUE1: 1LLDRULE.DESCRIPTION:
Unknown macro: {LLDRULE.DESCRIPTION}
LLDRULE.ID:Unknown macro: {LLDRULE.ID}
LLDRULE.KEY:Unknown macro: {LLDRULE.KEY}
LLDRULE.KEY.ORIG:Unknown macro: {LLDRULE.KEY.ORIG}
LLDRULE.NAME:Unknown macro: {LLDRULE.NAME}
LLDRULE.NAME.ORIG:Unknown macro: {LLDRULE.NAME.ORIG}
LLDRULE.STATE:Unknown macro: {LLDRULE.STATE}
MAP.ID:Unknown macro: {MAP.ID}
NODE.ID1: 0
NODE.NAME1: UNKNOWN
PROXY.NAME1:
TIME: 08:54:31
TRIGGER.DESCRIPTION:
TRIGGER.EVENTS.PROBLEM.ACK: 0
TRIGGER.EVENTS.PROBLEM.UNACK: 2
TRIGGER.EVENTS.UNACK: 3
TRIGGER.HOSTGROUP.NAME: Debugging
TRIGGER.PROBLEM.EVENTS.PROBLEM.ACK:Unknown macro: {TRIGGER.PROBLEM.EVENTS.PROBLEM.ACK}
TRIGGER.PROBLEM.EVENTS.PROBLEM.UNACK:Unknown macro: {TRIGGER.PROBLEM.EVENTS.PROBLEM.UNACK}
TRIGGER.EXPRESSION:
Unknown macro: {notification-testing-3.example.com}=1
TRIGGER.ID: 24137
TRIGGER.NAME: Zabbix agent on notification-testing-3.example.com is unreachable for 5 minutes
TRIGGER.NAME.ORIG: Zabbix agent onUnknown macro: {HOST.NAME}is unreachable for 5 minutes
TRIGGER.NSEVERITY: 3
TRIGGER.SEVERITY: Average
TRIGGER.STATE:Unknown macro: {TRIGGER.STATE}
TRIGGER.STATUS: PROBLEM
TRIGGER.TEMPLATE.NAME: Template App Zabbix Agent
TRIGGER.URL:
TRIGGER.VALUE: 1
TRIGGERS.UNACK:Unknown macro: {TRIGGERS.UNACK}
TRIGGERS.PROBLEM.UNACK:Unknown macro: {TRIGGERS.PROBLEM.UNACK}
TRIGGERS.ACK:Unknown macro: {TRIGGERS.ACK}
TRIGGERS.PROBLEM.ACK:Unknown macro: {TRIGGERS.PROBLEM.ACK}
Zabbix generated OK message:
ACTION.ID: 20
ACTION.NAME: Test EVENTS
DATE: 2014.07.30
DISCOVERY.DEVICE.IPADDRESS:Unknown macro: {DISCOVERY.DEVICE.IPADDRESS}
DISCOVERY.DEVICE.DNS:Unknown macro: {DISCOVERY.DEVICE.DNS}
DISCOVERY.DEVICE.STATUS:Unknown macro: {DISCOVERY.DEVICE.STATUS}
DISCOVERY.DEVICE.UPTIME:Unknown macro: {DISCOVERY.DEVICE.UPTIME}
DISCOVERY.RULE.NAME:Unknown macro: {DISCOVERY.RULE.NAME}
DISCOVERY.SERVICE.NAME:Unknown macro: {DISCOVERY.SERVICE.NAME}
DISCOVERY.SERVICE.PORT:Unknown macro: {DISCOVERY.SERVICE.PORT}
DISCOVERY.SERVICE.STATUS:Unknown macro: {DISCOVERY.SERVICE.STATUS}
DISCOVERY.SERVICE.UPTIME:Unknown macro: {DISCOVERY.SERVICE.UPTIME}
ESC.HISTORY: Problem started: 2014.07.30 09:05:56 Age: 1m
1. 2014.07.30 09:05:57 script executed "notification-testing-3.example.com"
EVENT.ACK.HISTORY:
EVENT.ACK.STATUS: No
EVENT.AGE: 1m
EVENT.DATE: 2014.07.30
EVENT.ID: 80521
EVENT.RECOVERY.DATE:Unknown macro: {EVENT.RECOVERY.DATE}
EVENT.RECOVERY.ID:Unknown macro: {EVENT.RECOVERY.ID}
EVENT.RECOVERY.STATUS:
Unknown macro: {EVENT.RECOVERY.STATUS}
EVENT.RECOVERY.TIME:Unknown macro: {EVENT.RECOVERY.TIME}
EVENT.RECOVERY.VALUE:Unknown macro: {EVENT.RECOVERY.VALUE}
EVENT.STATUS: OK
EVENT.TIME: 09:05:56
EVENT.VALUE: 0
HOST.ID:Unknown macro: {HOST.ID}
HOST.METADATA:Unknown macro: {HOST.METADATA}
HOSTGROUP.ID:Unknown macro: {HOSTGROUP.ID}
INVENTORY.ALIAS1: UNKNOWN
INVENTORY.ASSET.TAG1: UNKNOWN
INVENTORY.CHASSIS1: UNKNOWN
INVENTORY.CONTACT1: UNKNOWN
INVENTORY.CONTRACT.NUMBER1: UNKNOWN
INVENTORY.DEPLOYMENT.STATUS1: UNKNOWNINVENTORY.HARDWARE1: UNKNOWN
INVENTORY.HARDWARE.FULL1: UNKNOWN
INVENTORY.HOST.NETMASK1: UNKNOWN
INVENTORY.HOST.NETWORKS1: UNKNOWN
INVENTORY.HOST.ROUTER1: UNKNOWN
INVENTORY.HW.ARCH1: UNKNOWN
INVENTORY.HW.DATE.DECOMM1: UNKNOWN
INVENTORY.HW.DATE.EXPIRY1: UNKNOWN
INVENTORY.HW.DATE.INSTALL1: UNKNOWN
INVENTORY.HW.DATE.PURCHASE1: UNKNOWN
INVENTORY.INSTALLER.NAME1: UNKNOWN
INVENTORY.LOCATION1: UNKNOWN
INVENTORY.LOCATION.LAT1: UNKNOWN
INVENTORY.LOCATION.LON1: UNKNOWN
INVENTORY.MACADDRESS.A1: UNKNOWN
INVENTORY.MACADDRESS.B1: UNKNOWN
INVENTORY.MODEL1: UNKNOWN
INVENTORY.NAME1: UNKNOWN
INVENTORY.NOTES1: UNKNOWN
INVENTORY.OOB.IP1: UNKNOWNINVENTORY.OOB.NETMASK1: UNKNOWN
INVENTORY.OOB.ROUTER1: UNKNOWN
INVENTORY.OS1: UNKNOWN
INVENTORY.OS.FULL1: UNKNOWN
INVENTORY.OS.SHORT1: UNKNOWN
INVENTORY.POC.PRIMARY.CELL1: UNKNOWN
INVENTORY.POC.PRIMARY.EMAIL1: UNKNOWN
INVENTORY.POC.PRIMARY.NAME1: UNKNOWN
INVENTORY.POC.PRIMARY.NOTES1: UNKNOWN
INVENTORY.POC.PRIMARY.PHONE.A1: UNKNOWN
INVENTORY.POC.PRIMARY.PHONE.B1: UNKNOWN
INVENTORY.POC.PRIMARY.SCREEN1: UNKNOWN
INVENTORY.POC.SECONDARY.CELL1: UNKNOWN
INVENTORY.POC.SECONDARY.EMAIL1: UNKNOWN
INVENTORY.POC.SECONDARY.NAME1: UNKNOWN
INVENTORY.POC.SECONDARY.NOTES1: UNKNOWN
INVENTORY.POC.SECONDARY.PHONE.A1: UNKNOWN
INVENTORY.POC.SECONDARY.PHONE.B1: UNKNOWN
INVENTORY.POC.SECONDARY.SCREEN1: UNKNOWN
INVENTORY.SERIALNO.A1: UNKNOWNINVENTORY.SERIALNO.B1: UNKNOWN
INVENTORY.SITE.ADDRESS.A1: UNKNOWN
INVENTORY.SITE.ADDRESS.B1: UNKNOWN
INVENTORY.SITE.ADDRESS.C1: UNKNOWN
INVENTORY.SITE.CITY1: UNKNOWN
INVENTORY.SITE.COUNTRY1: UNKNOWN
INVENTORY.SITE.NOTES1: UNKNOWN
INVENTORY.SITE.RACK1: UNKNOWN
INVENTORY.SITE.STATE1: UNKNOWN
INVENTORY.SITE.ZIP1: UNKNOWN
INVENTORY.SOFTWARE1: UNKNOWN
INVENTORY.SOFTWARE.APP.A1: UNKNOWN
INVENTORY.SOFTWARE.APP.B1: UNKNOWN
INVENTORY.SOFTWARE.APP.C1: UNKNOWN
INVENTORY.SOFTWARE.APP.D1: UNKNOWN
INVENTORY.SOFTWARE.APP.E1: UNKNOWN
INVENTORY.SOFTWARE.FULL1: UNKNOWN
INVENTORY.TAG1: UNKNOWN
INVENTORY.TYPE1: UNKNOWN
INVENTORY.TYPE.FULL1: UNKNOWNINVENTORY.URL.A1: UNKNOWN
INVENTORY.URL.B1: UNKNOWN
INVENTORY.URL.C1: UNKNOWN
INVENTORY.VENDOR1: UNKNOWN
ITEM.DESCRIPTION1: The agent always returns 1 for this item. It could be used in combination with nodata() for availability check.
ITEM.ID1: 49873
ITEM.KEY1: agent.ping
ITEM.KEY.ORIG1: agent.ping
ITEM.LASTVALUE1: 1
ITEM.LOG.AGE1: UNKNOWN
ITEM.LOG.DATE1: UNKNOWN
ITEM.LOG.EVENTID1: UNKNOWN
ITEM.LOG.NSEVERITY1: UNKNOWN
ITEM.LOG.SEVERITY1: UNKNOWN
ITEM.LOG.SOURCE1: UNKNOWN
ITEM.LOG.TIME1: UNKNOWN
ITEM.NAME1: Agent ping
ITEM.NAME.ORIG1: Agent ping
ITEM.STATE1:Unknown macro: {ITEM.STATE1}
ITEM.VALUE1: 1LLDRULE.DESCRIPTION:
Unknown macro: {LLDRULE.DESCRIPTION}
LLDRULE.ID:Unknown macro: {LLDRULE.ID}
LLDRULE.KEY:Unknown macro: {LLDRULE.KEY}
LLDRULE.KEY.ORIG:Unknown macro: {LLDRULE.KEY.ORIG}
LLDRULE.NAME:Unknown macro: {LLDRULE.NAME}
LLDRULE.NAME.ORIG:Unknown macro: {LLDRULE.NAME.ORIG}
LLDRULE.STATE:Unknown macro: {LLDRULE.STATE}
MAP.ID:Unknown macro: {MAP.ID}
NODE.ID1: 0
NODE.NAME1: UNKNOWN
PROXY.NAME1:
TIME: 09:06:57
TRIGGER.DESCRIPTION:
TRIGGER.EVENTS.PROBLEM.ACK: 0
TRIGGER.EVENTS.PROBLEM.UNACK: 2
TRIGGER.EVENTS.UNACK: 4
TRIGGER.HOSTGROUP.NAME: Debugging
TRIGGER.PROBLEM.EVENTS.PROBLEM.ACK:Unknown macro: {TRIGGER.PROBLEM.EVENTS.PROBLEM.ACK}
TRIGGER.PROBLEM.EVENTS.PROBLEM.UNACK:Unknown macro: {TRIGGER.PROBLEM.EVENTS.PROBLEM.UNACK}
TRIGGER.EXPRESSION:
Unknown macro: {notification-testing-3.example.com}=1
TRIGGER.ID: 24137
TRIGGER.NAME: Zabbix agent on notification-testing-3.example.com is unreachable for 5 minutes
TRIGGER.NAME.ORIG: Zabbix agent onUnknown macro: {HOST.NAME}is unreachable for 5 minutes
TRIGGER.NSEVERITY: 3
TRIGGER.SEVERITY: Average
TRIGGER.STATE:Unknown macro: {TRIGGER.STATE}
TRIGGER.STATUS: OK
TRIGGER.TEMPLATE.NAME: Template App Zabbix Agent
TRIGGER.URL:
TRIGGER.VALUE: 0
TRIGGERS.UNACK:Unknown macro: {TRIGGERS.UNACK}
TRIGGERS.PROBLEM.UNACK:Unknown macro: {TRIGGERS.PROBLEM.UNACK}
TRIGGERS.ACK:Unknown macro: {TRIGGERS.ACK}
TRIGGERS.PROBLEM.ACK:Unknown macro: {TRIGGERS.PROBLEM.ACK}