Skip to content

Zabbix Template: rsyslog

class: software target: rsyslog vendor: RaBe version: 6.4

Monitoring of rsyslog.

This template is part of RaBe's Zabbix template and helpers collection.

Items

Item: rsyslog: process summary

component: raw

Get info about rsyslog processes

proc.get[rsyslogd,root,,summary]

Settings:

Item Setting Value
Type ZABBIX_ACTIVE
Value type TEXT

Item: rsyslog: Unit active state

component: service

State value that reflects whether the unit is currently active or not. The following states are currently defined: "active", "reloading", "inactive", "failed", "activating", and "deactivating".

rabe.rsyslog.active_state

Settings:

Item Setting Value
Type DEPENDENT
History 7d
Source item systemd.unit.get["rsyslog.service"]

Preprocessing steps:

Type Parameters
JSONPATH ["$.ActiveState.state"]
DISCARD_UNCHANGED_HEARTBEAT ["30m"]

Item: rsyslog: CPU seconds (system)

component: rsyslog

Total CPU seconds (system) of rsyslog processes.

rabe.rsyslog.cputime_system

Settings:

Item Setting Value
Type DEPENDENT
Value type FLOAT
History 7d
Source item proc.get[rsyslogd,root,,summary]

Preprocessing steps:

Type Parameters
JSONPATH ["$[*].cputime_system.first()"]
SIMPLE_CHANGE [""]
DISCARD_UNCHANGED_HEARTBEAT ["5m"]

Item: rsyslog: CPU seconds (user)

component: rsyslog

Total CPU seconds (user) of rsyslog processes.

rabe.rsyslog.cputime_user

Settings:

Item Setting Value
Type DEPENDENT
Value type FLOAT
History 7d
Source item proc.get[rsyslogd,root,,summary]

Preprocessing steps:

Type Parameters
JSONPATH ["$[*].cputime_user.first()"]
SIMPLE_CHANGE [""]
DISCARD_UNCHANGED_HEARTBEAT ["5m"]

Item: rsyslog: Service load state

component: service

State value that reflects whether the configuration file of this unit has been loaded. The following states are currently defined: "loaded", "error", and "masked".

rabe.rsyslog.load_state

Settings:

Item Setting Value
Type DEPENDENT
History 7d
Source item systemd.unit.get["rsyslog.service"]

Preprocessing steps:

Type Parameters
JSONPATH ["$.LoadState.state"]
DISCARD_UNCHANGED_HEARTBEAT ["30m"]

Item: rsyslog: Number of processes

component: rsyslog

Number of rsyslog processes.

rabe.rsyslog.processes

Settings:

Item Setting Value
Type DEPENDENT
History 7d
Source item proc.get[rsyslogd,root,,summary]

Preprocessing steps:

Type Parameters
JSONPATH ["$[*].processes.first()"]
DISCARD_UNCHANGED_HEARTBEAT ["5m"]

Item: rsyslog: Memory usage (RSS)

component: rsyslog

Memory usage of rsyslog processes.

rabe.rsyslog.rss

Settings:

Item Setting Value
Type DEPENDENT
History 7d
Source item proc.get[rsyslogd,root,,summary]

Preprocessing steps:

Type Parameters
JSONPATH ["$[*].rss.first()"]
DISCARD_UNCHANGED_HEARTBEAT ["5m"]

Item: rsyslog: Swap usage

component: rsyslog

Swap usage of rsyslog processes.

rabe.rsyslog.swap

Settings:

Item Setting Value
Type DEPENDENT
History 7d
Source item proc.get[rsyslogd,root,,summary]

Preprocessing steps:

Type Parameters
JSONPATH ["$[*].swap.first()"]
DISCARD_UNCHANGED_HEARTBEAT ["5m"]

Item: rsyslog: Number of threads

component: rsyslog

Number of rsyslog threads.

rabe.rsyslog.threads

Settings:

Item Setting Value
Type DEPENDENT
History 7d
Source item proc.get[rsyslogd,root,,summary]

Preprocessing steps:

Type Parameters
JSONPATH ["$[*].threads.first()"]
DISCARD_UNCHANGED_HEARTBEAT ["5m"]

Item: rsyslog: Unit file state

component: service

Encodes the install state of the unit file of FragmentPath. It currently knows the following states: "enabled", "enabled-runtime", "linked", "linked-runtime", "masked", "masked-runtime", "static", "disabled", and "invalid".

rabe.rsyslog.unitfile_state

Settings:

Item Setting Value
Type DEPENDENT
History 7d
Source item systemd.unit.get["rsyslog.service"]

Preprocessing steps:

Type Parameters
JSONPATH ["$.UnitFileState.state"]
DISCARD_UNCHANGED_HEARTBEAT ["30m"]

Item: rsyslog: Uptime

component: service

Number of seconds since unit entered the active state.

rabe.rsyslog.uptime

Settings:

Item Setting Value
Type DEPENDENT
Value type FLOAT in uptime
History 7d
Source item systemd.unit.get["rsyslog.service"]

Preprocessing steps:

Type Parameters
JAVASCRIPT ["data = JSON.parse(value);\nif (data.ActiveEnterTimestamp > data.ActiveExitTimestamp) {\n return Math.floor(Date.now() / 1000) - Number(data.ActiveEnterTimestamp) / 1000000;\n}\nreturn null;\n"]

Item: rsyslog: unit info

component: raw component: unit

Get unit info from systemd

systemd.unit.get["rsyslog.service"]

Settings:

Item Setting Value
Type ZABBIX_ACTIVE
Value type TEXT

Triggers

Trigger: rsyslog: Service is not running

scope: availability

Settings:

Trigger Setting Values
Priority WARNING
Manual close YES 
last(/rsyslog/rabe.rsyslog.active_state)<>1

Trigger: rsyslog: No running processes

scope: availability

No running rsyslog processes. Settings:

Trigger Setting Values
Priority HIGH 
last(/rsyslog/rabe.rsyslog.processes)<{$RSYSLOG.THRESHOLD.MIN_PROC}

Trigger: rsyslog: has been restarted

scope: notice

Settings:

Trigger Setting Values
Priority INFO
Manual close YES 
last(/rsyslog/rabe.rsyslog.uptime)<=10m

Macros

The following Zabbix macros are configured via this template.

Macro: {$RSYSLOG.THRESHOLD.MIN_PROC}

Minimum amount of processes expected to be running at all times.

Default:

1

Dashboards

The following Zabbix dashboards are included in this template.

  • rsyslog: Overview

License

This template is free software: you can redistribute it and/or modify it under the terms of the GNU Affero General Public License as published by the Free Software Foundation, version 3 of the License.

Copyright (c) 2017 - 2024 Radio Bern RaBe