Upgrade to Pro — share decks privately, control downloads, hide ads and more …

Loadays 2018 - Zabbix 4.0 LTS

Loadays 2018 - Zabbix 4.0 LTS

Introduction of features in zabbix 3.0 LTS and what will be new in the upcoming 4.0 LTS release.

Avatar for Patrik Uytterhoeven

Patrik Uytterhoeven

April 23, 2018

Other Decks in Technology

Transcript

  1. Presenter Patrik Uytterhoeven Name: Open-Source Consultant @ Open-Future Certified Zabbix

    Trainer Position: Twitter: @Trikke76 Github: https://github.com/Trikke76 https://github.com/Open-Future-Belgium/ www.open-future.be ZABBIX Author Zabbix Cookbook (Packt Publishing)
  2. Overview Feature overview of ZABBIX 3.0 LTS Where are we

    today with ZABBIX 4.0 LTS www.open-future.be ZABBIX
  3. Zabbix Versions • Zabbix 2.2 LTS version • Zabbix 3.0

    Current LTS version • Zabbix 3.2 End of life • Zabbix 3.4 Current version • Zabbix 4.0 Next LTS version
  4. Why choose LTS ? 5 years of critical & security

    patches 3 years full support zabbix 2.2 limited support ending august 2019 zabbix 3.0 full support ending february 2019 Zabbix 3.0 limited support ending february 2021.
  5. ZABBIX www.open-future.be Zabbix Server Database Zabbix Proxy API Zabbix Agents

    Zabbix Agents Simple Check Mobile Applications Front-end PHP Ticket Ticketing Systems JSON-RPC Back-End C language
  6. ZABBIX www.open-future.be Zabbix Security Protect your data •Strong encryption between

    all Zabbix components •Multiple authentication methods: Open LDAP, Active Directory •Flexible user permission schema •Zabbix code is open for security audits
  7. ZABBIX www.open-future.be Zabbix Agent Zabbix Agent can work on different

    platforms and collect metrics from any device or application on performance and availability. Linux Windows HP-UX Solaris freeBSD OpenBSD macOS AIX NetBSD polling trapping extendable Log monitoring WMI efficient Zabbix Agent supports active / passive checks, is highly efficient and extendable via custom parameters, modules or scripts.
  8. ZABBIX www.open-future.be Zabbix Agent Less What if agent is not

    an option? • SNMP, IPMI and SSH agents • Agentless monitoring • Databases and Java applications monitoring • Custom metrics/scripts • Aggregation and calculated checks • VMware monitoring • Web monitoring
  9. ZABBIX www.open-future.be Items Sources of Information Zabbix agent Server polls

    Zabbix agent (active) Processed by Zabbix agent Simple check Executed by Zabbix server SNMP agent All SNMP versions are supported Trapper Used with Zabbix sender Log files VMware Internal Zabbix health Aggregate Average/min/max for host group External check script[parameters] SSH Password and key authentication supported Telnet Calculated From existing data ODBC
  10. ZABBIX www.open-future.be Triggers Logical expression that can describe threshold or

    complex problem condition 6 severity levels may be assigned to a Trigger ▪ visual representation - different colors for different severities ▪ audio in global alarms - different audio for different severities ▪ user media - different media (notification channel) for different severities ▪ limiting actions by conditions against trigger severities
  11. ZABBIX www.open-future.be Average server room temperature is 12-14ºC. Alarm if

    temperature exceeds 20ºC and release alarm only if temperature goes below 15ºC. ({TRIGGER.VALUE}=0 and {server:temp.last()} >20) or ({TRIGGER.VALUE}=1 and {server:temp.last()} >15) Trigger Hysteresis
  12. ZABBIX www.open-future.be Allows to compare the current result with some

    result in the past. Example {server:system.cpu.load.avg(1h)} / {server:system.cpu.load.avg(1h, 1w)}>2 Compare average load on system CPU for 1 hour today with average load for the same period 1 week ago and get notified if it is more than 2 times larger. Relative Trigger
  13. ZABBIX www.open-future.be Template A template is a set of elements

    that can be conveniently applied to manage monitoring of multiple hosts. Nested templates allow to manage different hosts efficiently. Mail Server #1 Mail Server #2 Web Server Template_MailServer Template_WebServer Template_AppServer Template_Linux Template_Postfix Template_Bacula Template_Apache Template_MySQL Application Server Template_JBoss
  14. ZABBIX www.open-future.be Collect data Data is gathered using various methods,

    including Zabbix native agents and agent-less options: SNMP ver.1, 2, 3, IPMI, trappers, SSH, Telnet. Any application that Customer depends on. Business applications Hardware Network OS Middleware Virtual layer Logs & text files Incoming data 010110 0101 111
  15. ZABBIX www.open-future.be Automated Device Management Ways to manage 200,000 devices

    and more Network discovery Auto- registrat ion Low-level discovery Periodically search within IP+Port range for a certain reply Create/delete Host and assign Template Action New device arrives ! New file system added! Install Zabbix agent on a new device, provide Zabbix server location Condition Create/delete Host and assign Template Action Periodically search on all Hosts for a new / missing components For existing Hosts Create/delete Items for existing host Action Condition
  16. ZABBIX www.open-future.be Collect data | Web Monitoring ▪ Response code,

    time, and speed (200; 240ms; 256kB/s) ▪ Web scenarios, including login/logout, are supported ▪ HTTP and HTTPS are supported ▪ Check for pre-defined string [word/number] is supported ▪ Re-use of content extracted from one page on another page
  17. ZABBIX www.open-future.be Manage data ▪ History can be set per

    item ▪ Built-in data reduction ▪ Trends: averaged historical data ▪ Housekeeping: DB clean-up from older data ▪ Long term storage ▪ Per-item retention periods
  18. ZABBIX www.open-future.be Alert Notification methods: ▪ E-mail, SMS, & Jabber

    ▪ Chat message ▪ Command execution Event Acknowledgement function Flexible escalation
  19. ZABBIX www.open-future.be Visualize | Graphs ▪ Simple graphs are created

    automatically, no need to set up. ▪ Complex graphs may visualize data from different sources
  20. ZABBIX www.open-future.be Visualize | Maps ▪ Different available elements ▪

    Easy editing, Drag & Drop ▪ Reference data along elements ▪ Nested maps – ability to drill-down ▪ UTF-8 support
  21. ZABBIX www.open-future.be Data Pre-Processing In the new version, all item

    value preprocessing is brought together and put in the hands of the user under a new Preprocessing tab in item configuration. • Regular expression - find match by a regular expression/output template; • XML XPath - extract value or fragment from XML data using XPath; • JSON Path - extract value or fragment from JSON data using JSONPath (only a limited set of JSONPath features is supported).
  22. ZABBIX www.open-future.be Data Preprocessing Bulk metrics and dependent items There

    are situations when one item gathers multiple metrics at a time or it even makes more sense to collect related metrics simultaneously. To allow for bulk metric collection and simultaneous use in several related items, Zabbix supports dependent items. Dependent items use the master item to collect their data simultaneously, in one query
  23. ZABBIX www.open-future.be Data Preprocessing • Create a master item first

    • Then create dependent items • Do preprocessing
  24. ZABBIX www.open-future.be Problem Page The Problems section allows users to

    get a full view of various problems or the history of events.
  25. ZABBIX www.open-future.be Problems Sometimes problems in log monitoring or trap

    handling need to be closed manually because there is no easy way to determine when the problem has been resolved.For these cases, triggers can now be configured
  26. ZABBIX www.open-future.be Tags Customer: Nokia Customer: Сбербанк Datacenter: NY2 Datacenter:

    San Francisco Area: Performance Area: Availability Area: Security Environment: Staging Environment: Test User impact: None User impact: Critical Tag word: meaning Add Tags to triggers and create escalations based on tags
  27. ZABBIX www.open-future.be Improvements EVENT CORRELATION Customize macros • regsub -

    substring extraction by a regular expression match (case sensitive)
 • iregsub - substring extraction by a regular expression match (case insensitive)
 Nested representation of host groups
  28. ZABBIX www.open-future.be Improvements EVENT CORRELATION Easier trigger hysteresis Old Way:

    ({TRIGGER.VALUE}=0 and {server:temp.last()}>20) or ({TRIGGER.VALUE}=1 and {server:temp.last()}>15) New way :
  29. ZABBIX www.open-future.be Improvements EVENT CORRELATION Custom Dashboards Dashboards now can

    be several, instead of the one dashboard in previous Zabbix versions. Each dashboard consists of customizable widgets, the content of which the users themselves can choose.
  30. ZABBIX www.open-future.be Improvements EVENT CORRELATION Map Naviagation Tree This new

    widget allows to build a hierarchy of existing maps while also displaying problem statistics with each included map
  31. ZABBIX www.open-future.be Improvements EVENT CORRELATION Templates for network devices Remote

    command support through proxies To provide out-of-the-box monitoring for network devices such as switches and routers, new templates have been developed, based mostly on SNMPv2. Templates are provided for many families of network devices. Remote commands and global scripts previously could not be executed by Zabbix agent if the agent host was monitored by Zabbix proxy. Similarly, commands could not be executed by the proxy itself - the command was always executed by the server.
  32. ZABBIX www.open-future.be Improvements EVENT CORRELATION Parallel processing of alerts A

    single alerter process was used in the previous versions to send problem notifications. Alerts were sent out one by one and, in large environments with a large number of events happening in close succession, delays with alerts could occur. Similarly, delays could occur in a mix of slow media types with fast ones (like SMS and e-mail) with the email waiting for the SMS to be sent.
  33. ZABBIX www.open-future.be Improvements EVENT CORRELATION Notification on problem acknowledgement Now

    it is possible to receive a notification in all the ways available in Zabbix when a trigger-generated problem has been acknowledged.
  34. ZABBIX www.open-future.be Improvements EVENT CORRELATION JMX low-level discovery Low-level discovery

    of JMX objects is now supported by the new jmx.discovery[<discovery mode>,<object name>] item. This item allows to specify whether to discover MBeans or MBean attributes, as well as the pattern to look for Configurable JMX endpoints Previously, a JMX endpoint was hardcoded in Zabbix, which was limiting given that there are applications out there that use different endpoints. To lift this limitation, support for configurable JMX endpoints has been added as a separate field in JMX item configuration.
  35. ZABBIX www.open-future.be Improvements EVENT CORRELATION Elasticsearch support Zabbix will support

    the storage of historical data by means of Elasticsearch instead of a SQL database Like PostgreSQL, MySQL, .… Checking item value immediately Checking for a new item value in Zabbix has always been cyclic and based on configured update intervals. In real life situations there may be a need to check for a new value quicker - to pick up changes in discoverable resources, for example. This is now made possible in the new Zabbix version be means of a Check now button
  36. ZABBIX www.open-future.be Improvements EVENT CORRELATION New HTTP item type A

    new HTTP item type has been introduced allowing data polling using the HTTP/HTTPS protocol. Trapping is also possible using Zabbix sender or Zabbix sender protocol.
  37. ZABBIX www.open-future.be Improvements EVENT CORRELATION Multiple emails in one user

    media Multiple e-mail addresses can now be specified in one user media entry. Real-time export of events, values, trend Real-time export of trigger events, item values and trends in a newline-delimited JSON format is possible by specifying the new ExportDirparameter in server configuration. Another new parameter - ExportFileSize may be used to determine the maximum size of an individual export file.
  38. ZABBIX www.open-future.be Improvements EVENT CORRELATION Tag based permissions User groups

    form has been completed with a new Tag filter tab that allows to set tag based permissions for user groups to see problems filtered by tag name and its value:
  39. ZABBIX www.open-future.be Improvements EVENT CORRELATION Compression for communication server-proxy All

    communications between Server and all Proxies are now unconditionally compressed. Compression lowers the bandwidth requirements and improves data transfer speed.
  40. ZABBIX www.open-future.be Improvements EVENT CORRELATION New dashboard displaying option "Kiosk

    mode" “Kiosk mode” is an improved dashboard fullscreen display mode including only the widgets themselves. Kiosk Fullscreen
  41. ZABBIX www.open-future.be Improvements EVENT CORRELATION Many more improvements ….. https://www.zabbix.com/documentation/3.2/manual/introduction/whatsnew320

    https://www.zabbix.com/documentation/3.4/manual/introduction/whatsnew340 https://www.zabbix.com/documentation/4.0/manual/introduction/whatsnew400 https://support.zabbix.com/