Zabbix integration

This integration ingests events from Zabbix and maps them to Moogsoft  events automatically.

This integration was validated with Zabbix 5.0.15.

Create a new integration in Moogsoft

  1. Log in to your Moogsoft instance.

  2. Choose Data Config > Ingestion Services > Zabbix.

  3. Click Add New Integration.

  4. Define the Moogsoft Endpoint and API Description based on your business needs. Then click Save.

  5. The UI displays the integration in a new page. Click Save at the bottom of the page.

The new integration includes a custom endpoint, a set of default mappings to convert Zabbix data to Moogsoft events, and a deduplication key to group similar events into alerts. You can now set up Zabbix to send data to this endpoint, as described in the following section.

(Optional) Once your endpoint starts receiving data from Zabbix, you can customize how the integration maps and deduplicates this data. For more information, see Map External Data to the Moogsoft Schema and Test your Deduplication Key under Define a custom integration.

Zabbix setup

To set up Zabbix, do the following:

Define the Moogsoft media type

To create a new media type in Zabbix, do the following:

  1. Download the following file, which defines the format of the data that Zabbix will send to Moogsoft.

    Download Zabbix media file

  2. Log in to your Zabbix instance.

  3. Choose Administration > Media Types.

  4. In the Media Types window, click Import in the top-right corner.

  5. Select the file you just downloaded, then click Import. Moogsoft media type now appears as a link in the Media Types list.

  6. Return to the Media Types page, click Moogsoft, and specify the API_KEY and URL parameters.

    To determine these fields, do the following.

    1. Go to Data Config > Ingestion Services > Zabbix in the Moogsoft UI and copy the Moogsoft Endpoint URL.

    2. Copy your Moogsoft API Key.

  7. The parameters are auto-defined from the data type file you imported. The check, description, service, severity, and source parameters are required.

    zabbix-parameters.png
  8. Click Update.

Specify the message templates for problem notifications

The next step is to specify the message templates to use when Zabbix sends a problem notification to Moogsoft.

  1. Return to the edit page for the Moogsoft media type.

  2. Go to the Message Templates tab.

  3. Add the default templates for Problem, Problem Recovery, and Problem Update.

    zabbix-message-templates.png
  4. Click Update. This returns you to the Media Types page.

Test the media type and message templates

You should test your media and message settings after setup. Navigate to the Moogsoft entry in the Media Types list, then click Test on the right.

You should see a "Media type test successful" message, which means that Zabbix sent a payload to Moogsoft and got a successful response.

Create a user to receive event notifications

Now you need to create a user that receives Moogsoft notifications. Do the following:

  1. Go to Administration > Users.

  2. Click Create User in the upper-right corner. Then specify the following:

    1. Alias = Moogsoft

    2. Click Select, next to Groups, and select No access to the front end.

    3. Click Password and enter any string.

      The password is required to set up the user, but a valid password is not required here. The API key you specified earlier provides the authentication needed to post requests to Moogsoft.

    4. Click Add.

  3. Specify the media type for this user:

    1. Click Media. The Media popup appears.

    2. For Type, select Moogsoft.

    3. For Send to, type "N/A".

      This field is required but the value is not needed or used for this integration.

    4. Leave the other settings at their defaults and click Add.

  4. Specify the user permissions:

    1. Click Permissions.

    2. For User Type, select Zabbix Super Admin.

    3. Click Add. Then click Update.

Define the trigger actions

Now that you have the media type and user defined, you need to define the actions that trigger problem notifications. In this case, you will define one action that sends all notifications to Moogsoft.

Do the following:

  1. Go to Configuration > Actions. Then click Create action in the top-right corner.

  2. For the Name, enter Send to Moogsoft.

  3. Optionally, you can filter the events that Zabbix sends: Click Add, under Conditions, and define the specific conditions for sending events.

  4. Click Add.

Send events to Moogsoft

To set up Zabbix to send events, do the following.

  1. Go to Configuration > Actions. Then click Create Action in the top right.

  2. In the Name field, enter Send to Moogsoft.

  3. Click Operations and specify the actions to take when an event, update, or recovery occurs.

    1. In Operations, click Add. The Operation Details popup appears.

    2. In Send to Users, click Add and select the Moogsoft user.

    3. In the "Default media type" pulldown, select Moogsoft.

    4. Click Add.

    5. Repeat the previous steps for Recovery operations and Update operations.

2021-11-18T20:45:37-05:00