Install Zabbix on CentOS 7

Sparkum

Both are set to 192.168.1.167 (which is internal IP of zabbix server)

And I created inbound and outbound rules for 10050 and 10051

dafyre

@Sparkum said in Install Zabbix on CentOS 7:

@dafyre

Both are set to 192.168.1.167 (which is internal IP of zabbix server)

And I created inbound and outbound rules for 10050 and 10051

Got the 10050 and 10051 open on your Zabbix server?

Sparkum

@dafyre

Well I did this

firewall-cmd --permanent --add-port=10051/tcp
firewall-cmd --permanent --add-port=10050/tcp

So I assume yes?

How exactly would I check, sorry

dafyre

@Sparkum said in Install Zabbix on CentOS 7:

@dafyre

Well I did this

firewall-cmd --permanent --add-port=10051/tcp
firewall-cmd --permanent --add-port=10050/tcp

So I assume yes?

How exactly would I check, sorry

Did you

firewall-cmd --reload ?

Edit: That's a good question... I'm not sure about how to do that with firewalld.

Sparkum

@dafyre

Yep I've reloaded and rebooted.

Romo

@dafyre said in Install Zabbix on CentOS 7:

@Sparkum said in Install Zabbix on CentOS 7:

@dafyre

Well I did this

firewall-cmd --permanent --add-port=10051/tcp
firewall-cmd --permanent --add-port=10050/tcp

So I assume yes?

How exactly would I check, sorry

Did you

firewall-cmd --reload ?

Edit: That's a good question... I'm not sure about how to do that with firewalld.

sudo firewall-cmd --permanent --list-all

Sparkum

@Romo

sparkum@Zabbix:~$ sudo firewall-cmd --permanent --list-all
public (default)
interfaces:
sources:
services: dhcpv6-client ssh
ports: 10050/tcp http/tcp 10051/tcp
masquerade: no
forward-ports:
icmp-blocks:
rich rules:

Romo

@Sparkum Your ports are open

Sparkum

Anyone have anymore ideas on what I should try to get the windows agent to communicate with my server?

Want any config files?

Romo

@Sparkum yes post your windows agent config.

Sparkum

@Romo

https://www.dropbox.com/s/23eek30r787pa1e/zabbix_agentd.txt?dl=0

Romo

@Sparkum Finally got a windows vm setup and got the agent working.

alt text

This are the steps I took to get it working:

Download windows pre-compiled agent:
http://www.zabbix.com/downloads/3.0.0/zabbix_agents_3.0.0.win.zip

From an elevated cmd promt
I went inside the extracted folders to install the zabbix agent as a service:
zabbix_agents_3.0.0.win\bin\win64\

Executed the following command to install the service and point to the config file:
zabbix_agent_d.exe --config "..\..\conf\zabbix_agentd.win.conf" --install

Now we need to edit the config file to point to our zabbix server:
zabbix_agents_3.0.0.win\conf\zabbix_agentd.win.conf

Modify the following options:

Server=Zabbix Server IP Address
ServerActive=Zabbix Server IP Address
Hostname= FQDN of windows host

Went back to the bin folder and started the service:
..\zabbix_agents_3.0.0.win\bin\win64\zabbix_agent_d.exe --start

Allow the zabbix_agentd.exe executable throught the windows firewall.

Add the host to the Zabbix Server
alt text

In new host settings add:

# HOST TAB 
Host name = FQDN of your windows host
Groups = Use a preset group or create a new one
Agent Interfaces = IP address of Windows Host
Enabled =  Checked.

#Templates Tab
Link new templates = Template OS Windows

Save your newly created host and wait for a couple of minutes to get it talking to your server
alt text

Its done and reporting =).
alt text

Sparkum

@Romo

I'm getting closer!

So the only thing I did from what you wrote was

Hostname= FQDN of windows host

But after that I have a red Z!
Progress!

Currently getting

 Get value from agent failed: ZBX_TCP_READ() failed: [104] Connection reset by peer

I'll try to google my way through that now!

Thanks

JaredBusch

I just upgraded my install from Zabbix 3.0.5 to 3.2.1 painlessly.

yum -y install http://repo.zabbix.com/zabbix/3.2/rhel/7/x86_64/zabbix-release-3.2-1.el7.noarch.rpm
yum clean all
yum -y upgrade

Only poked around a little but everything seems to be working.

I only have 6 devices reporting in on this for the moment. Been meaning to get this fully functional for months now.

hobbit666

@JaredBusch said in Install Zabbix on CentOS 7:

I only have 6 devices reporting in on this for the moment. Been meaning to get this fully functional for months now.

Same here I really need to wipe mine and re-do it all and get some better info out of it like Performance and IOPS on the servers etc, instead of just ping to see if up or down

JaredBusch

Had to modify the instructions a bit to handle SELinux. The below have been added to the first post already.

Install SELinux tools.

yum -y install setroubleshoot setools

After your system is up and running, reboot. You should hopefully have a problem with SELinux blocking a couple of things.

[root@zabbix ~]# sealert -a /var/log/audit/audit.log | grep zabbix
SELinux is preventing /usr/sbin/zabbix_server_mysql from using the setrlimit access on a process.
<snip lots of text>
SELinux is preventing /usr/sbin/zabbix_agentd from using the setrlimit access on a process.

Now that these errors are in the audit log, we can set up SELinux to allow it.

If anyone knows SELinux well enough to create the policies needed without waiting for a fail, just let me know. I will be happy to update these instructions.

ausearch -c 'zabbix_server' --raw | audit2allow -M my-zabbixserver
semodule -i my-zabbixserver.pp
ausearch -c 'zabbix_agentd' --raw | audit2allow -M my-zabbixagentd
semodule -i my-zabbixagentd.pp

coliver

Did anyone get Zabbix working over SSL? I'm getting a 403 error when I try to setup the certificates.

wirestyle22

@coliver said in Install Zabbix on CentOS 7:

Did anyone get Zabbix working over SSL? I'm getting a 403 error when I try to setup the certificates.

I'm planning to do this and I think the best way (from what I've read) is to use a proxy to handle the SSL cert for you

Dashrender

@wirestyle22 said in Install Zabbix on CentOS 7:

@coliver said in Install Zabbix on CentOS 7:

Did anyone get Zabbix working over SSL? I'm getting a 403 error when I try to setup the certificates.

I'm planning to do this and I think the best way (from what I've read) is to use a proxy to handle the SSL cert for you

Does this mean proxying internal connections as well?

I know Scott loves his LANLess design, so maybe my question is meaningless, because to him there is no internal?

coliver

@dashrender said in Install Zabbix on CentOS 7:

@wirestyle22 said in Install Zabbix on CentOS 7:

@coliver said in Install Zabbix on CentOS 7:

Did anyone get Zabbix working over SSL? I'm getting a 403 error when I try to setup the certificates.

I'm planning to do this and I think the best way (from what I've read) is to use a proxy to handle the SSL cert for you

Does this mean proxying internal connections as well?

I know Scott loves his LANLess design, so maybe my question is meaningless, because to him there is no internal?

Yes, you could setup a proxy on the same box as Zabbix.