Zabbix | A great collection of Zabbix scripts and templates | REST library

by jjmartres Ruby Version: Current License: GPL-2.0

X-Ray Key Features Code Snippets Community Discussions(10)Vulnerabilities Install Support

kandi X-RAY | Zabbix Summary

Zabbix is a Ruby library typically used in Web Services, REST applications. Zabbix has no bugs, it has a Strong Copyleft License and it has medium support. However Zabbix has 19 vulnerabilities. You can download it from GitHub.

A great collection of Zabbix scripts and templates.

Support

Quality

Security

License

Reuse

Support

Zabbix has a medium active ecosystem.

It has 819 star(s) with 586 fork(s). There are 162 watchers for this library.

It had no major release in the last 6 months.

There are 80 open issues and 37 have been closed. On average issues are closed in 16 days. There are 22 open pull requests and 0 closed requests.

It has a neutral sentiment in the developer community.

The latest version of Zabbix is current.

Quality

Zabbix has 0 bugs and 2 code smells.

Security

Zabbix has 19 vulnerability issues reported (5 critical, 9 high, 4 medium, 1 low).

Zabbix code analysis shows 0 unresolved vulnerabilities.

There are 0 security hotspots that need review.

License

Zabbix is licensed under the GPL-2.0 License. This license is Strong Copyleft.

Strong Copyleft licenses enforce sharing, and you can use them when creating open source projects.

Reuse

Zabbix releases are not available. You will need to build from source code and install.

Zabbix saves you 22231 person hours of effort in developing the same functionality from scratch.

It has 43580 lines of code, 0 functions and 51 files.

It has low code complexity. Code complexity directly impacts maintainability of the code.

Top functions reviewed by kandi - BETA

kandi's functional review helps you automatically verify the functionalities of the libraries and avoid rework.
Currently covering the most popular Java, JavaScript and Python libraries. See a Sample of Zabbix

Get all kandi verified functions for this library.

Zabbix Key Features

No Key Features are available at this moment for Zabbix.

Zabbix Examples and Code Snippets

No Code Snippets are available at this moment for Zabbix.

Community Discussions

Trending Discussions on Zabbix

Basic PowerShell Script Issue: “Expressions are only allowed as the first element of a pipeline”

Zabbix strange behavior, can't access web interface

Zabbix 5.4: Report manager is disabled

Consumer Kafka via Rest Proxy with python

Failed to monitor another Vm using zabbix agent

mysql corrupted installation, makes mysql uninstallabe

Prevent Ansible to reorder the URI json post in alphabetical

Zabbix Agent Auto Registration - Zabbix Server

zabbix 5.X and MS teams integration

ignore or close zabbix problem for a period of time

QUESTION

Basic PowerShell Script Issue: “Expressions are only allowed as the first element of a pipeline”

Asked 2021-Jun-04 at 06:48

Please help me. Trying to use the variable as a value for subsequent processing does not work. I use it like this:

...

ANSWER

Answered 2021-Jun-04 at 06:48

if I understand your script correct you want to get all eventlog entries but not those that match the pattern of "ignore.txt". to achive this you have to create ScriptBlock out of the string $a:

Source https://stackoverflow.com/questions/67831353

QUESTION

Zabbix strange behavior, can't access web interface

Asked 2021-Jun-03 at 10:30

So recently i tried to access my zabbix web interface as usual (before it i played with my site nginx config, but reverted it back), but now on entering URL and pressing enter i only get some strange file downloaded without name, file extenstion with only 50~ bytes of data in it, any suggestions?

Here is the file contents, but of course it's not human readable and doesn't make any sense

UPD: i tried URL like /index.php and now it downloads same file but with name index.php

...

ANSWER

Answered 2021-May-28 at 13:36

So the problem was in nginx config of the SITE (not the zabbix nginx config), listen 80 http2; had to remove http2

Source https://stackoverflow.com/questions/67736537

QUESTION

Zabbix 5.4: Report manager is disabled

Asked 2021-May-24 at 15:05

I just installed Zabbix 5.4 and i want to test 'scheduled reports' but i keep getting:

...

ANSWER

Answered 2021-May-24 at 15:05

You need to enable report writer in server config. In /etc/zabbix/zabbix_server.conf (assuming you are running Zabbix on a Linux machine) change the value of StartReportWriters to at least 1, then restart the server.

Edit

You also need to set WebServiceURL parameter in zabbix_server.conf. The URL should be in format :/report. Default port is 10053.

Source https://stackoverflow.com/questions/67650571

QUESTION

Consumer Kafka via Rest Proxy with python

Asked 2021-May-18 at 04:40

I am using a kafka environment via docker. It went up correctly!

But I can't perform REST queries with my python script...

I am trying to read all messages received on the streamer!

Any suggestions for correction?

Sorry for the longs outputs, I wanted to detail the problem to facilitate debugging :)

consumer.py

...

ANSWER

Answered 2021-May-18 at 04:40

just use kafka-python package.

Source https://stackoverflow.com/questions/67579105

QUESTION

Failed to monitor another Vm using zabbix agent

Asked 2021-May-17 at 20:33

I'm trying to monitor a virtual machine from another. have two ubuntu virtual machines one with the zabbix server and another with the zabbix agent. but after setting up my agent by using my public ip i get this error :Received empty response from Zabbix Agent at [192.168.x.x]. Assuming that agent dropped connection because of access permissions.

in /etc/zabbix/zabbix_agentd i changed my server to server= 127.0.0.1,192.168.x.x and i turned off my firewall just in case.

My agent status: If you are familiar please help and /var/log/zabbix_agentd.log

...

ANSWER

Answered 2021-May-17 at 20:33

In logs you got:

Failed to accept an incoming connection: connection from "192.168.243.2" rejected, allowed hosts: "127.0.0.1,192.168.243.3"

The log itself tells you what host is trying to connect and what hosts are allowed :)

It's trying to connect x.x.x.2 and the allowed host in the config is x.x.x.3. Change agent config 192.168.243.2 to 192.168.243.3 +restart and it should work

Source https://stackoverflow.com/questions/67486173

QUESTION

mysql corrupted installation, makes mysql uninstallabe

Asked 2021-May-07 at 13:22

OS - Ubuntu 20.04.2 LTS

Task - create puppet manifest, that will make apache2-zabbix page.

...

ANSWER

Answered 2021-May-07 at 13:22

This is most likely just a dependency issue - Puppet is trying to install and run Zabbix before MySQL server is running.

Try changing the package resource to

Source https://stackoverflow.com/questions/67339811

QUESTION

Prevent Ansible to reorder the URI json post in alphabetical

Asked 2021-Apr-23 at 20:14

I try to communicate with zabbix API with ansible. It waits for a json input and process it, however, it does not work. My playbook task looks like this:

...

ANSWER

Answered 2021-Apr-23 at 20:14

Based on comment, I fixed the playbook and quoted every input.

Source https://stackoverflow.com/questions/67232987

QUESTION

Zabbix Agent Auto Registration - Zabbix Server

Asked 2021-Apr-20 at 07:22

I am trying to register Zabbix agent to Zabbix server UI automatically but seems i am missing something but when i am trying to do it via UI(Manually) it is working. can someone help me to do it.

My configurations -

...

ANSWER

Answered 2021-Mar-03 at 15:45

You are configuring Server and ServerActive wrong: both need to be set to the IP/DNS of the Zabbix Proxy/Server, no the local IP/DNS.

Source https://stackoverflow.com/questions/66457463

QUESTION

zabbix 5.X and MS teams integration

Asked 2021-Apr-20 at 07:06

I am trying to integrate alerting system from zabbix 5.2.6 to MS teams i am following below document but this doesn't seems to be working.

https://www.zabbix.com/integrations/msteams

can anyone please suggest a doc or any other lead would be appreciated.

...

ANSWER

Answered 2021-Apr-20 at 07:06

This Doc works fine but need to keep three important configuration in mind that are not mentioned in the doc.

Administration -> General -> Macros -> add {$ZABBIX.URL} = http://DNSNAME/zabbix/ You Must Get Zabbix UI
Enable Configuration -> Actions -> Trigger actions -> Report problems to Zabbix administrators
You can send alerts via Admin user too. Administration -> Users -> Admin -> Media -> Type (MS Teams) -> Send to (MS team connector) -> update

I tried on Zabbix 5.2.6 Follow This Doc Link for more details

Source https://stackoverflow.com/questions/66997501

QUESTION

ignore or close zabbix problem for a period of time

Asked 2021-Apr-12 at 13:04

I have both zabbix 3 and zabbix 5. I have a template that monitors Database statistics. there is a trigger that is important, but sometimes when we are operating on Database the trigger is not needed because we caused that situation. sometimes i don't want this trigger on my dashboard so i attend to close it. but the interval for its item is 60s and after a minute it appears again. so is there any way to close or ignore a trigger for a period of time?

i don't want to put the machine in maintenance mode because operation may take a week. i can't disable the item, we need its data and history. i can't change it's interval since it is in template.

in this question Q1 someone explained about closing the problem but it's not what i want.

...

ANSWER

Answered 2021-Apr-12 at 13:04

Since Zabbix 4, you can put a single item in maintenance using Tags.

If maintenance tags are specified, maintenance for the selected hosts will still be activated, but problems will only be suppressed (i.e. no actions will be taken) if their tags are a match.

https://www.zabbix.com/documentation/current/manual/maintenance

So:

tag the trigger in the template
create a maintenace for that host/tag and activate it when needed

Source https://stackoverflow.com/questions/67054674

Community Discussions, Code Snippets contain sources that include Stack Exchange Network

Vulnerabilities

CVE-2020-11800 CRITICAL

Zabbix Server 2.2.x and 3.0.x before 3.0.31, and 3.2 allows remote attackers to execute arbitrary code.

https://support.zabbix.com/browse/DEV-1538

https://support.zabbix.com/browse/ZBXSEC-30

https://support.zabbix.com/browse/ZBX-17600

http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00007.html

https://lists.debian.org/debian-lts-announce/2020/11/msg00039.html

CVE-2016-10742 MEDIUM

Zabbix before 2.2.21rc1, 3.x before 3.0.13rc1, 3.1.x and 3.2.x before 3.2.10rc1, and 3.3.x and 3.4.x before 3.4.4rc1 allows open redirect via the request parameter.

https://support.zabbix.com/browse/ZBX-13133

https://support.zabbix.com/browse/ZBX-10272

https://lists.debian.org/debian-lts-announce/2019/03/msg00010.html

https://lists.debian.org/debian-lts-announce/2020/11/msg00039.html

CVE-2020-15803 MEDIUM

Zabbix before 3.0.32rc1, 4.x before 4.0.22rc1, 4.1.x through 4.4.x before 4.4.10rc1, and 5.x before 5.0.2rc1 allows stored XSS in the URL Widget.

https://support.zabbix.com/browse/ZBX-18057

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TIRIMOXH6GSBAANDCB3ANLJK4CRLWRXT/

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2ZHHIUYIVA5GZYLKW6A5G6HRELPOBZFE/

https://lists.debian.org/debian-lts-announce/2020/08/msg00007.html

http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00007.html

CVE-2019-17382 CRITICAL

An issue was discovered in zabbix.php?action=dashboard.view&dashboardid=1 in Zabbix through 4.4. An attacker can bypass the login page and access the dashboard page, and then create a Dashboard, Report, Screen, or Map without any Username/Password (i.e., anonymously). All created elements (Dashboard/Report/Screen/Map) are accessible by other users and by an admin.

https://www.exploit-db.com/exploits/47467

CVE-2013-3738 CRITICAL

A File Inclusion vulnerability exists in Zabbix 2.0.6 due to inadequate sanitization of request strings in CGI scripts, which could let a remote malicious user execute arbitrary code.

http://support.zabbix.com/browse/ZBX-6652

CVE-2013-3628 HIGH

Zabbix 2.0.9 has an Arbitrary Command Execution Vulnerability

http://www.securityfocus.com/bid/63453

http://www.exploit-db.com/exploits/29321

https://community.rapid7.com/community/metasploit/blog/2013/10/30/seven-tricks-and-treats

https://community.rapid7.com/community/metasploit/blog/2013/10/30/seven-foss-disclosures-part-one

CVE-2013-5743 CRITICAL

Multiple SQL injection vulnerabilities in Zabbix 1.8.x before 1.8.18rc1, 2.0.x before 2.0.9rc1, and 2.1.x before 2.1.7.

https://admin.fedoraproject.org/updates/zabbix20-2.0.8-3.el6

https://admin.fedoraproject.org/updates/zabbix20-2.0.9-1.el5

https://support.zabbix.com/browse/ZBX-7091

https://admin.fedoraproject.org/updates/zabbix-1.8.18-1.el6

CVE-2013-7484 HIGH

Zabbix before 5.0 represents passwords in the users table with unsalted MD5.

https://support.zabbix.com/browse/ZBXNEXT-1898

https://support.zabbix.com/browse/ZBX-16551

CVE-2017-2824 HIGH

An exploitable code execution vulnerability exists in the trapper command functionality of Zabbix Server 2.4.X. A specially crafted set of packets can cause a command injection resulting in remote code execution. An attacker can make requests from an active Zabbix Proxy to trigger this vulnerability.

https://talosintelligence.com/vulnerability_reports/TALOS-2017-0325

http://www.securityfocus.com/bid/98083

http://www.debian.org/security/2017/dsa-3937

CVE-2017-2825 HIGH

In the trapper functionality of Zabbix Server 2.4.x, specifically crafted trapper packets can pass database logic checks, resulting in database writes. An attacker can set up a Man-in-the-Middle server to alter trapper requests made between an active Zabbix proxy and Server to trigger this vulnerability.

https://talosintelligence.com/vulnerability_reports/TALOS-2017-0326

https://www.debian.org/security/2017/dsa-3937

http://www.securityfocus.com/bid/98094

CVE-2019-15132 MEDIUM

Zabbix through 4.4.0alpha1 allows User Enumeration. With login requests, it is possible to enumerate application usernames based on the variability of server responses (e.g., the "Login name or password is incorrect" and "No permissions for system access" messages, or just blocking for a number of seconds). This affects both api_jsonrpc.php and index.php.

https://support.zabbix.com/browse/ZBX-16532

CVE-2017-2826 LOW

An information disclosure vulnerability exists in the iConfig proxy request of Zabbix server 2.4.X. A specially crafted iConfig proxy request can cause the Zabbix server to send the configuration information of any Zabbix proxy, resulting in information disclosure. An attacker can make requests from an active Zabbix proxy to trigger this vulnerability.

https://talosintelligence.com/vulnerability_reports/TALOS-2017-0327

https://lists.debian.org/debian-lts-announce/2019/03/msg00010.html

CVE-2018-18289 HIGH

The MESILAT Zabbix plugin before 1.1.15 for Atlassian Confluence allows attackers to read arbitrary files.

https://marketplace.atlassian.com/apps/1215171/zabbix-plugin?hosting=server&tab=versions

CVE-2008-1353 MEDIUM

zabbix_agentd in ZABBIX 1.4.4 allows remote attackers to cause a denial of service (CPU and connection consumption) via multiple vfs.file.cksum commands with a special device node such as /dev/urandom or /dev/zero.

http://www.securityfocus.com/bid/28244

http://secunia.com/advisories/29383

http://securityreason.com/securityalert/3747

http://www.vupen.com/english/advisories/2008/0878

https://exchange.xforce.ibmcloud.com/vulnerabilities/41196

http://www.securityfocus.com/archive/1/489506/100/0/threaded

CVE-2010-5049 HIGH

SQL injection vulnerability in events.php in Zabbix 1.8.1 and earlier allows remote attackers to execute arbitrary SQL commands via the nav_time parameter.

http://secunia.com/advisories/39119

http://www.securityfocus.com/bid/39752

http://packetstormsecurity.org/1004-exploits/zabbix181-sql.txt

http://www.vupen.com/english/advisories/2010/1240

http://www.securityfocus.com/archive/1/511454/100/0/threaded

CVE-2010-1277 HIGH

SQL injection vulnerability in the user.authenticate method in the API in Zabbix 1.8 before 1.8.2 allows remote attackers to execute arbitrary SQL commands via the user parameter in JSON data to api_jsonrpc.php.

http://www.securityfocus.com/bid/39148

http://archives.neohapsis.com/archives/fulldisclosure/2010-04/0001.html

http://legalhackers.com/advisories/zabbix181api-sql.txt

http://www.zabbix.com/rn1.8.2.php

http://secunia.com/advisories/39119

http://www.osvdb.org/63456

http://legalhackers.com/poc/zabbix181api.pl-poc

http://www.vupen.com/english/advisories/2010/0799

http://www.securityfocus.com/archive/1/510480/100/0/threaded

CVE-2016-4338 HIGH

The mysql user parameter configuration script (userparameter_mysql.conf) in the agent in Zabbix before 2.0.18, 2.2.x before 2.2.13, and 3.0.x before 3.0.3, when used with a shell other than bash, allows context-dependent attackers to execute arbitrary code or SQL commands via the mysql.size parameter.

https://www.zabbix.com/documentation/3.0/manual/introduction/whatsnew303#miscellaneous_improvements

https://www.zabbix.com/documentation/2.2/manual/introduction/whatsnew2213#miscellaneous_improvements

https://www.zabbix.com/documentation/2.0/manual/introduction/whatsnew2018#miscellaneous_improvements

https://www.exploit-db.com/exploits/39769/

https://support.zabbix.com/browse/ZBX-10741

https://security.gentoo.org/glsa/201612-42

http://www.securityfocus.com/bid/89631

http://seclists.org/fulldisclosure/2016/May/9

http://packetstormsecurity.com/files/136898/Zabbix-Agent-3.0.1-mysql.size-Shell-Command-Injection.html

http://www.securityfocus.com/archive/1/538258/100/0/threaded

CVE-2014-3005 CRITICAL

XML external entity (XXE) vulnerability in Zabbix 1.8.x before 1.8.21rc1, 2.0.x before 2.0.13rc1, 2.2.x before 2.2.5rc1, and 2.3.x before 2.3.2 allows remote attackers to read arbitrary files or potentially execute arbitrary code via a crafted DTD in an XML request.

https://web.archive.org/web/20140622034155/http://www.pnigos.com:80/?p=273

https://support.zabbix.com/browse/ZBX-8151

https://bugzilla.redhat.com/show_bug.cgi?id=1110496

http://www.securityfocus.com/bid/68075

http://seclists.org/fulldisclosure/2014/Jun/87

http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134909.html

http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134885.html

CVE-2016-10134 CRITICAL

SQL injection vulnerability in Zabbix before 2.2.14 and 3.0 before 3.0.4 allows remote attackers to execute arbitrary SQL commands via the toggle_ids array parameter in latest.php.

https://support.zabbix.com/browse/ZBX-11023

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=850936

http://www.securityfocus.com/bid/95423

http://www.openwall.com/lists/oss-security/2017/01/13/4

http://www.openwall.com/lists/oss-security/2017/01/12/4

https://code610.blogspot.com/2017/10/zbx-11023-quick-autopsy.html

http://www.debian.org/security/2017/dsa-3802

Install Zabbix

You can download it from GitHub.
On a UNIX-like operating system, using your system’s package manager is easiest. However, the packaged Ruby version may not be the newest one. There is also an installer for Windows. Managers help you to switch between multiple Ruby versions on your system. Installers can be used to install a specific or multiple Ruby versions. Please refer ruby-lang.org for more information.

Support

For any new features, suggestions and bugs create an issue on GitHub. If you have any questions check and ask questions on community page Stack Overflow .

Find more information at: