Microsoft Windows Web Server 2008 R2
Zabbix Agent 2 5.4.4 (amd64)

It looks like you forgot to attach configuration and log file. Could you attach them?

Alexey,

I attached the agent conf file. The log was already attached.

the log file contain only ~10 seconds, it does not contain restart / crash or any other unexpected behaviour messages. Just normal operating...

Alexey,

I did not include the entire log as I did not think it would be relevant.

it does not contain restart / crash or any other unexpected behaviour messages. Just normal operating...

You are correct. The agent is crashing without outputting any errors to the log which is not expected behavior.

Do you have any thoughts on how I can troubleshoot this?

Thank you

The first of all we need to check Zabbix agent log file for the same time period when issue happened.

Alexey,

I have attached a picture of the Zabbix problem for another agent crash that happened around 15:00 on Monday 9/12. I also attached the log file for that time period. There are no errors in the log file to indicate why the agent crashed.

The log file does not contain the same time period when you had problem. Log file is stopped at 15:00:42.

That is correct. The crash happened around that time. You can see it in the Zabbix problem picture: Agent crash 20210912.png

So it just stopped and does not write anything to the log file anymore? I do not see restart.

Yes, it crashes and does not write any errors to the log. We don't have the 'Zabbix Agent 2' service set up to restart on failure.

I added another log file and picture for an agent crash that happened today.

Thank you! Do you see the same information in Event Viewer? May I ask you to attach details of the crash event?

I attached zabbix_agent2_crash_20210916.log and a picture of the event viewer for the crash.

Here is the output of sc queryex "Zabbix Agent 2" from a command prompt after the agent has crashed:

SERVICE_NAME: Zabbix Agent 2
TYPE : 10 WIN32_OWN_PROCESS
STATE : 1 STOPPED
WIN32_EXIT_CODE : 1067 (0x42b)
SERVICE_EXIT_CODE : 0 (0x0)
CHECKPOINT : 0x0
WAIT_HINT : 0x0
PID : 0
FLAGS :

I am still getting intermittent agent 2 crashes on several machines. The release notes for 5.4.5 include some other fixes that we need so when that is released I will upgrade our agents and see if the crashes still happen.

Hello!
Thanks for the input!
Does all these machines, who have crashes, monitor wmi? with keys like: wmi.get or wmi.getall ?
We have similar bug request - ZBX-19595.
For now, if indeed the agent 2 monitors wmi, and you do not need agent 2 features on these machines, I would advise using Zabbix Agent version 1.

Thanks,
Karlis

Yes, we are using some keys that use WMI

I upgraded our agents to use the latest 5.4.5 release today and will continue to monitor them for crashes.

Please, keep us posted! 

One of our machines running Zabbix agent 2 5.4.5 crashed over the weekend and it did not produce any relevant error information in the log (like previous agent versions). Perhaps it is related to the ZBX-19595 ticket that you mentioned.

Hello!
Thank you for your help with the issue! 
This indeed seems to a duplicate of ZBX-19595. I will be closing this ticket, as developers have started the bug fixing process on the mentioned bug. Feel free to vote for it and follow its progress.

Best regards,
Karlis