Monitoring Applications and Services on Windows with Zabbix Agent

admin • • 好物分享

Zabbix application provides lots of templates to integrate those popular software into their monitoring system.  https://www.zabbix.com/integrations privides the list and in this post, I will show a detailed steps regarding how to integrate some Windows popular services or applications into Zabbix. 

 

Not Discover Certain Windows Services

There are always some service you might not want to monitoring. Here is the right way to not monitor them.
For example:
  •  GoogleUpdateService and GoogleUpdateInternalService

Question, why sometimes those problems become resolved? 

All Windows Services are discovered by four Windows discovery rules. 

Windows Services Discover Rule:
Host - Macros (37) - SERVICE.NAME.NOT_MATCHES

You might work on it at template level:

You might want to put the service you want to be ignored into following regex string:
^(?:RemoteRegistry|MMCSS|gupdate|SysmonLog|clr_optimization_v.+|sppsvc|gpsvc|Pml Driver HPZ12|Net Driver HPZ12|MapsBroker|IntelAudioService|Intel/(R/) TPM Provisioning Service|dbupdate|DoSvc|CDPUserSvc_.+|WpnUserService_.+|OneSyncSvc_.+|WbioSrvc|BITS|tiledatamodelsvc|GISvc|ShellHWDetection|TrustedInstaller|TabletInputService|CDPSvc|wuauserv|edgeupdate|cbdhsvc_.+)$
Change it to 
^(?:RemoteRegistry|GoogleUpdater.*|MMCSS|gupdate|SysmonLog|clr_optimization_v.+|sppsvc|gpsvc|Pml Driver HPZ12|Net Driver HPZ12|MapsBroker|IntelAudioService|Intel/(R/) TPM Provisioning Service|dbupdate|DoSvc|CDPUserSvc_.+|WpnUserService_.+|OneSyncSvc_.+|WbioSrvc|BITS|tiledatamodelsvc|GISvc|ShellHWDetection|TrustedInstaller|TabletInputService|CDPSvc|wuauserv|edgeupdate|cbdhsvc_.+)$
Bascially, any service start with GoogleUpdater, will not be discovered by this template.

Monitor Terminal Service CPU

1 Find the counter from Windows Performance Monitor


2 Right click the counter and choose Properties where you can find the counter name

In my case, it is /Terminal Services Session(Services)/% Processor Time

3 Put it into your host new item

You might want to clone your host first then modify your cloned host

4 Add a new item and add the key to monitor

Here is the key value configuration:

Field Value
Name CPU Usage for Terminal Services
Type Zabbix agent
Key perf_counter_en["/Process(sqlservr)/% Processor Time",60]
perf_counter["/Terminal Services Session(Services)/% Processor Time",60]
Type of Info Numeric (float)
Units %
Update Interval 60 (seconds)

Monitor Terminal Services Total / Active Sessions

Field Value
Name Terminal Services Active Sessions
Type Zabbix agent
Key perf_counter_en["/Terminal Services/Total Sessions",60]
perf_counter["/Terminal Services/Active Sessions"]
Type of Info Numeric (float)
Units %
Update Interval 60 (seconds)

Videos

 

important to verify what we can pull form windows host with this command:

typeperf -qx

https://blog.51sec.org

版权声明：
作者：admin
链接：https://www.techfm.club/p/226794.html
来源：TechFM
文章版权归作者所有，未经允许请勿转载。

THE END
分享
二维码
< <上一篇
下一篇>>