Skip to main content

Zabbix integration

This integration ingests events from Zabbix and maps them to APEX AIOps Incident Management  events automatically.

This integration was validated with Zabbix 5.4.

Create a new integration in Incident Management

  1. Log in to your Incident Management instance.

  2. Choose Integrations > Ingestion Services > Zabbix.

  3. Click Add New Integration.

  4. Name the Incident Management Endpoint and enter an API Description based on your business needs. Then click Save.

  5. The UI displays the integration in a new page. The new integration includes a custom endpoint, a set of default mappings to convert Zabbix data to Incident Management events, and a deduplication key to group similar events into alerts. You can now set up Zabbix to send data to this endpoint, as described in the following section. Click Save at the top of the page.

(Optional) Once your endpoint starts receiving data from Zabbix, you can customize how the integration maps and deduplicates this data. To learn more about mapping and deduplication, read Use mapping types in custom integrations and Deduplicate events to reduce noise.

Zabbix setup

To set up Zabbix, do the following:

  1. Define the Incident Management media type

  2. Test the media type and message templates

  3. Create a user to receive event notifications

  4. Define the trigger actions

  5. Send events to Incident Management

Define the Incident Management media type

To create a new media type in Zabbix, do the following:

  1. Right click and download the following file, which defines the format of the data that Zabbix will send to Incident Management.

    Download Zabbix media file

  2. Log in to your Zabbix instance.

  3. Choose Administration > Media Types.

  4. In the Media Types window, click Import in the top-right corner.

  5. Select the file you just downloaded, then click Import. The Incident Management media type now appears as a link in the Media Types list.

  6. Return to the Media Types page, click Incident Management, and specify the API_KEY and URL parameters.

    To determine these fields, do the following:

    1. Go to Integrations > Ingestion Services > Zabbix and click on the integration you created in the Incident Management UI and copy the APEX AIOps Incident Management Endpoint URL. Paste it in the value box next to URL in the parameters section.

    2. Enter your Incident Management API Key in the value box next to API_KEY in the parameters section.

  7. The parameters are auto-defined from the data type file you imported. The check, description, service, severity, and source parameters are required.

    zabbix-parameters.png

  8. Click Update.

Test the media type and message templates

You should test your media and message settings after setup. Navigate to the Incident Management entry in the Media Types list, then click Test on the right and click test again in the popup.

You should see a "Media type test successful" message, which means that Zabbix sent a payload to Incident Management and got a successful response.

Create a user to receive event notifications

Now you need to create a user that receives Incident Management notifications. Do the following:

  1. Go to Administration > Users.

  2. Click Create User in the upper-right corner. Then specify the following:

    1. Username = Incident Management

    2. Click Select, next to Groups, and select No access to the front end.

    3. Click Password and enter any string.

      The password is required to set up the user, but a valid password is not required here. The API key you specified earlier provides the authentication needed to post requests to Incident Management.

  3. Specify the media type for this user:

    1. Click the Media tab. Click add under type.

    2. For Type, select Incident Management.

    3. For Send to, type "N/A".

      This field is required but the value is not needed or used for this integration.

    4. Leave the other settings at their defaults and click Add.

  4. Specify the user permissions:

    1. Click the Permissions tab.

    2. For User Type, select Super Admin role.

    3. Click Add.

Define the trigger actions

Now that you have the media type and user defined, you need to define the actions that trigger problem notifications. In this case, you will define one action that sends all notifications to Incident Management.

Do the following:

  1. In Zabbix, go to Configuration > Actions > Trigger actions. Then click Create action in the top-right corner.

  2. For the Name, enter Send to Incident Management.

  3. Optionally, you can filter the events that Zabbix sends: Click Add, under Conditions, and define the specific conditions for sending events.

Send events to Incident Management

To set up Zabbix to send events, do the following:

  1. Click the Operations tab to specify the actions to take when an event, update, or recovery occurs.

    1. In Operations, click Add. The Operation Details popup appears.

    2. In Send to Users, click Add and select the Incident Management user.

    3. In the "Send only to" pulldown, select Incident Management.

    4. Repeat the previous steps for Recovery operations and Update operations.

    5. Click Add.

In this section: