Zabbix 101 - Enterprise Monitoring doesn't have to suck

download Zabbix 101 - Enterprise Monitoring doesn't have to suck

If you can't read please download the document

Transcript of Zabbix 101 - Enterprise Monitoring doesn't have to suck

ZABBIX

FredLUG/20111029

TitleAboutFOSSConceptsDemoLinks

ZABBIX

FredLUG | 20111029

Welcome and ThanksZabbixSeriously, Monitoring Can Be Your Friend and Even (sorta')Fun

Jamie Duncan

TitleAboutZabbixConceptsDemoLinksStoryHome

ZABBIX

FredLUG/20111029

TitleAboutZabbixConceptsDemoLinksMeZabbix

Jamie Duncan

5AM Solutions (www.5amsolutions.com)

Richmond, VA

Founder, RVaLUG (www.rvalug.org)

RHCE

CSM

Etc.

Today5AM

ZABBIX

FredLUG/20111029

TitleAboutZabbixConceptsDemoLinksMeZabbixZabbix (Zabbix SIA)

Started in 2001

Zabbix SIA formed in 2005

Alexei Vladishev, founder/CEO

Community: ~20,000

Downloads: ~500 daily

First Conference 10/2011

Big in Europe, Japan and S. America

Not a 70's Scandinavian Rock Band

No Marketing or Official Presence in
North America (1 reseller in WV?)

Today5AM

Image: Salvatore Vuono / FreeDigitalPhotos.net

NO!

ZABBIX

FredLUG/20111029

TitleAboutConceptsDemoLinksMeZabbixToday

Discussion & Comments
HIGHLY ENCOURAGED

How my company (typical small
company) came to use Zabbix

Zabbix basics (including Pros & CONS)

Q&A including a real, live Zabbix Server

TodayZabbix5AM

Image: Stuart Miles / FreeDigitalPhotos.net

ZABBIX

FredLUG/20111029

TitleAboutConceptsDemoLinksRequirementsComfort with application stack

No New Languages!

Do More With Less

FOSS

Do 1 thing. Do it well.

Hooks. Hooks. More Hooks

Lots of Community

Zabbix5AMZenossNagiosImage: http://www.5amsolutions.com

ZABBIX

FredLUG/20111029

TitleAboutConceptsDemoLinksRequirementsComfort with application stack

No New Languages!

Do More With Less

FOSS

Do 1 thing. Do it well.

Hooks. Hooks. More Hooks

Lots of Community

Zabbix5AMZenossNagiosImage: Jacob Feisley | www.feisley.com

ZABBIX

FredLUG/20111029

TitleAboutConceptsDemoLinksRequirementsComfort with application stack

No New Languages!

Do More With Less

FOSS

Do 1 thing. Do it well.

Hooks. Hooks. More Hooks

Lots of Community

Zabbix5AMZenossNagiosImage: nagios.com

ZABBIX

FredLUG/20111029

TitleAboutConceptsDemoLinksFit & FinishComfort with application stack

No New Languages!

Do More With Less

FOSS

Do 1 thing. Do it well.

Hooks. Hooks. More Hooks

Lots of Community

Zabbix5AM

Image: zabbix.com

DevOpsFootprintZabcon

ZABBIX

FredLUG/20111029

TitleAboutConceptsDemoLinksFit & FinishZabbix5AMZabconDevOpsFootprintInstallation

Binary packages maintained in EPEL and Canonical Universes

Database Agnonstic*

Highly Distributed Setups possible

ZABBIX

FredLUG/20111029

TitleAboutConceptsDemoLinksFit & FinishZabbix5AMZabconDevOpsFootprintDependencies

Server and Agent written in Pure C no funky libs

GUI is PHP requires a few packages (bcmath, mbstring,
db-specific connectors, etc.)

ZABBIX

FredLUG/20111029

TitleAboutConceptsDemoLinksFit & FinishZabbix5AMZabconDevOpsFootprintNetwork

Amazingly Light:

Example: Linux server with 50-60 items checked at varying intervals == ~2k/sec of consistent traffic

ZABBIX

FredLUG/20111029

TitleAboutConceptsDemoLinksFit & FinishZabbix5AMZabconDevOpsFootprintGUI

Light:

The GUI has been worked on for several years and scales pretty well now with high user loads.

ZABBIX

FredLUG/20111029

TitleAboutConceptsDemoLinksFit & FinishZabbix5AMZabconDevOpsFootprintDatabase

Big Time:

The database is extremely read/write heavy.The only part of Zabbix that is a poor candidate for virtualization for production environments.

ZABBIX

FredLUG/20111029

TitleAboutConceptsDemoLinksFit & FinishZabbix5AMZabconDevOpsFootprintZabcon

A command shell for Zabbix written in Ruby.Written by Andrew Nelson (@nelsonab)

http://trac.red-tux.net/wiki/zbx_api/zabcon

Example:

get host show=[hostid, host, ip, error, port]Host result set+--------+---------------+-----------+-------+-------+| hostid | host | ip | error | port |+--------+---------------+-----------+-------+-------+| 10017 | ZABBIX Server | 127.0.0.1 | | 10050 |+--------+---------------+-----------+-------+-------+1 rows total

ZABBIX

FredLUG/20111029

TitleAboutConceptsDemoLinksChecksZabbix5AMTriggersActionsChecks

The information that populates the database.Individual measurements made by Zabbix.

Examples:

tcp ping to a monitored hostfree space on /var on a monitored hostSNMP checkresult of a custom script executed on a remote hostCPU 5 min. load average

ZABBIX

FredLUG/20111029

TitleAboutConceptsDemoLinksChecksZabbix5AMTriggersActionsPassive Checks

A regular check is initiated by ZABBIX server, it periodically sends requests to an agent to get latest info. The agent is passive, it just processes requests sent by server. -Alexei

ZABBIX

FredLUG/20111029

TitleAboutConceptsDemoLinksChecksZabbix5AMTriggersActionsActive Checks

An active check works the following way. ZABBIX agent connects to ZABBIX server to get list of all checks for a host. Then it periodically sends required information to ZABBIX server. Note that ZABBIX server does not initiate anything. ZABBIX agent does all active work. This doesn't require polling on server side, thus it significantly (1.5x-2x) improve performance of ZABBIX server. -Alexei

ZABBIX

FredLUG/20111029

TitleAboutConceptsDemoLinksChecksZabbix5AMTriggersActionsOther Checks

Passive methods that other applications use to gather information from a server:

SNMPicmp echoesIPMI accessPort Scanning

ZABBIX

FredLUG/20111029

TitleAboutConceptsDemoLinksChecksZabbix5AMTriggersActionsWeb Checks

Can access / interact with web sites to determine health and availability

Can check for proper HTTP Response codes (200 OK)

Can pass POST or GET variables, logging in / evaluating functionality

Can handle HTTPS Basic Auth / Windows IIS Auth

Measures response times and download speeds for each step of a check.

ZABBIX

FredLUG/20111029

TitleAboutConceptsDemoLinksChecksZabbix5AMTriggersActionsTriggers

Fancy On/Off Switches

{Template_Linux:system.hostname.diff(0)}>0

Literal Translation:the diff between the last value and the current value of system.hostname is greater than 0.

Proper Translation:The hostname on Template_Linux has changed.

ZABBIX

FredLUG/20111029

TitleAboutConceptsDemoLinksChecksZabbix5AMTriggersActionsActions

Are triggered (typically) when a trigger flips to on.

Can become very complex, evaluating against multiple triggers, time of day, etc.

Can act only for certain groups and certain types of communications.

Can execute remote actions on servers on command (eg restart service)

The bridge between Zabbix and Users.

ZABBIX

FredLUG/20111029

TitleAboutConceptsDemoLinksLIVE!Zabbix5AM

ZABBIX

FredLUG/20111029

TitleAboutConceptsDemoLinksThanksZabbix5AMZabbix http://www.zabbix.comZabbix Forums - http://www.zabbix.com/forum/Zabcon - http://trac.red-tux.net/wiki/zbx_api/zabcon@zabbix#zabbix

@jamieeduncanhttp://[email protected]