[ZABBIX3.4] Set monitoring exclusion time
table of contents
This is Nakagawa from the technical sales department.
Alerts may be issued due to increased server load at certain times due to daily backup and aggregation processing.
You can't stop processing, but you want to reduce unnecessary alerts...
In such cases, you can set monitoring exclusion time to reduce alerts that don't need to be issued.
Setting monitoring exclusion time
Use the time function to set exclusions at a specific time.
Settings > Host > Select target host > Trigger > Select the trigger for which you want to set monitoring exclusion time
Original conditional expression + and(time to start exclusion or time to end exclusion)
{hostname:icmpping[<target> ,<packets> ,<interval> ,<size> ,<timeout> ].max({$PING.RETRY.TH})}=0 and (({hostname:icmpping[<target> ,<packets> ,<interval> ,<size> ,<timeout> ].time(0)} < 030000) or ({hostname:icmpping[<target> ,<packets> ,<interval> ,<size> ,<timeout> ].time(0)} > 033000))
⇒With the above settings, an alert will not be generated only when ping communication fails between 3:00 and 3:30.
About the conditional expression builder
Conditional Expression Builder > Test
Conditional Expression Builder allows you to test multiple patterns using the conditional expressions you have created.
The input items are as follows
*Numeric (integer) items vary depending on the type of monitoring.
Number (integer) | Ping communication [0 = failure 1 = success] |
HHMMSS | hours, minutes, seconds |
The conditional expression for each ABC is as follows.
Condition B returns TRUE from 00:00:00 to 02:59:59.
Condition C returns TRUE from 03:30:01 to 23:59:59.
Conditions for the final result (bottom item) to be TRUE or FALSE
[A = TRUE B or C = TRUE]
If both results are TRUE, the final result at the bottom will be TRUE.
[A = TRUE B or C = FALSE]
Since only one is TRUE, the final result will be FALSE.
[A = FALSE B or C = TRUE]
Since only one is TRUE, the final result will be FALSE.
[A = FALSE B or C = FALSE]
Both are FALSE, so the final result is FALSE.
If the final result of the conditional expression is TRUE, an alert will be sent.
If the final result is FALSE, no alert will be sent.
We will conduct an operation test based on these points.
Test operation using conditional expression builder
Use the conditional expression builder to check whether the monitoring exclusion time settings are correct.
=======================================================
Example 1 (02:59:59 ping communication failed)
⇒A = TRUE (ping communication failed)
B = TRUE (corresponds to 00:00:00 ~ 02:59:59)
C = FALSE (03:30: 01 ~ 23:59:59)
The alert is triggered because the final result = TRUE.
Example 2 (03:30:01 ping communication failed)
⇒A = TRUE (ping communication failed)
B = FALSE (does not apply to 00:00:00 ~ 02:59:59)
C = TRUE (03:30: 01 ~ 23:59:59)
Final result = TRUE, so an alert is triggered.
Example 3 (03:00:00 ping communication failed)
⇒A = TRUE (ping communication failed)
B = FALSE (does not apply to 00:00:00 ~ 02:59:59)
C = FALSE (03:30: 01 ~ 23:59:59)
Final result = FALSE, so no alert is triggered.
Example 4 (03:30:00 ping communication failed)
⇒A = TRUE (ping communication failed)
B = FALSE (does not apply to 00:00:00 ~ 02:59:59)
C = FALSE (03:30: 01 ~ 23:59:59)
Final result = FALSE, so no alert is triggered.
Example 5 (02:59:59 ping communication succeeded)
⇒A = FALSE (ping communication succeeded)
B = TRUE (corresponds to 00:00:00 ~ 02:59:59)
C = FALSE (03:30: 01 ~ 23:59:59)
Final result = FALSE, so no alert is triggered.
Example 6 (03:30:01 ping communication succeeded)
⇒A = FALSE (ping communication succeeded)
B = FALSE (does not apply to 00:00:00 ~ 02:59:59)
C = TRUE (03:30: 01 ~ 23:59:59)
Final result = FALSE, so no alert is triggered.
Example 7 (03:00:00 ping communication succeeded)
⇒A = FALSE (ping communication succeeded)
B = FALSE (does not apply to 00:00:00 ~ 02:59:59)
C = FALSE (03:30: 01 ~ 23:59:59)
Final result = FALSE, so no alert is triggered.
Example 8 (03:30:00 ping communication succeeded)
⇒A = FALSE (ping communication succeeded)
B = FALSE (does not apply to 00:00:00 ~ 02:59:59)
C = FALSE (03:30: 01 ~ 23:59:59)
Final result = FALSE, so no alert is triggered.
Check the 8 patterns written in the example, and if it works as expected, I think there is no problem.
I hope this will be helpful to you.
summary
This time, I implemented ZABBIX's "monitoring exclusion time settings" and performed a simple test using the "conditional expression builder."
Even if you confirm that there is no problem with the test, be sure to check that the graph shows the expected behavior after changing the settings!