zabbix_export: version: '7.0' template_groups: - uuid: 846977d1dfed4968bc5f8bdb363285bc name: 'Templates/Operating systems' templates: - uuid: f9a59315c8944853bb91c0a9ec3056d7 template: 'Windows by SNMP' name: 'Windows by SNMP' description: | Official Windows SNMP template. Requires Zabbix server 4.0.14, 4.2.8, 4.4.0 or newer (JSONPath function avg() used with types autoconversion). MIBs used: HOST-RESOURCES-MIB SNMPv2-MIB IF-MIB Known Issues: Description: Doesn't support In/Out 64 bit counters even though IfxTable is present: Currently, Windows gets it's interface status from MIB-2. Since these 64bit SNMP counters (ifHCInOctets, ifHCOutOctets, etc.) are defined as an extension to IF-MIB, Microsoft has not implemented it. https://social.technet.microsoft.com/Forums/windowsserver/en-US/07b62ff0-94f6-40ca-a99d-d129c1b33d70/windows-2008-r2-snmp-64bit-counters-support?forum=winservergen Version: Win2008, Win2012R2. Description: Doesn't support ifXTable at all Version: WindowsXP Description: EtherLike MIB is not supported Version: * Device: * Generated by official Zabbix template tool "Templator" 2.0.0 vendor: name: Zabbix version: 7.0-0 groups: - name: 'Templates/Operating systems' items: - uuid: d751b3ead8cd4509a3f87c9bb4c89f00 name: 'Windows: ICMP ping' type: SIMPLE key: icmpping history: 1w valuemap: name: 'Service state' tags: - tag: component value: health - tag: component value: network triggers: - uuid: 08e22bd77606469d9e03183ec70dc89d expression: 'max(/Windows by SNMP/icmpping,#3)=0' name: 'Windows: Unavailable by ICMP ping' priority: HIGH description: 'Last three attempts returned timeout. Please check device connectivity.' tags: - tag: scope value: availability - uuid: 9e311b1e5e8841da85c5ec6145d9c75f name: 'Windows: ICMP loss' type: SIMPLE key: icmppingloss history: 1w value_type: FLOAT units: '%' tags: - tag: component value: health - tag: component value: network triggers: - uuid: fa81e50132464ec486ea72929d18d778 expression: 'min(/Windows by SNMP/icmppingloss,5m)>{$ICMP_LOSS_WARN} and min(/Windows by SNMP/icmppingloss,5m)<100' name: 'Windows: High ICMP ping loss' opdata: 'Loss: {ITEM.LASTVALUE1}' priority: WARNING dependencies: - name: 'Windows: Unavailable by ICMP ping' expression: 'max(/Windows by SNMP/icmpping,#3)=0' tags: - tag: scope value: availability - tag: scope value: performance - uuid: fba6328e6e6240f28c1b901a9c2fc376 name: 'Windows: ICMP response time' type: SIMPLE key: icmppingsec history: 1w value_type: FLOAT units: s tags: - tag: component value: health - tag: component value: network triggers: - uuid: fba819f734de4b469fb7851501e55b21 expression: 'avg(/Windows by SNMP/icmppingsec,5m)>{$ICMP_RESPONSE_TIME_WARN}' name: 'Windows: High ICMP ping response time' opdata: 'Value: {ITEM.LASTVALUE1}' priority: WARNING dependencies: - name: 'Windows: High ICMP ping loss' expression: 'min(/Windows by SNMP/icmppingloss,5m)>{$ICMP_LOSS_WARN} and min(/Windows by SNMP/icmppingloss,5m)<100' - name: 'Windows: Unavailable by ICMP ping' expression: 'max(/Windows by SNMP/icmpping,#3)=0' tags: - tag: scope value: availability - tag: scope value: performance - uuid: 649fb89829c04fe9bec44e942aeb2b42 name: 'Windows: SNMP walk network interfaces' type: SNMP_AGENT snmp_oid: 'walk[1.3.6.1.2.1.2.2.1.8,1.3.6.1.2.1.2.2.1.7,1.3.6.1.2.1.31.1.1.1.18,1.3.6.1.2.1.31.1.1.1.1,1.3.6.1.2.1.2.2.1.2,1.3.6.1.2.1.2.2.1.3,1.3.6.1.2.1.2.2.1.10,1.3.6.1.2.1.2.2.1.16,1.3.6.1.2.1.2.2.1.13,1.3.6.1.2.1.2.2.1.19,1.3.6.1.2.1.31.1.1.1.15,1.3.6.1.2.1.2.2.1.14,1.3.6.1.2.1.2.2.1.20]' key: net.if.walk history: '0' trends: '0' value_type: TEXT description: 'Discovering interfaces from IF-MIB.' tags: - tag: component value: raw - uuid: b75c480b7ec648a5b2762b20fc5c2ed8 name: 'Windows: SNMP traps (fallback)' type: SNMP_TRAP key: snmptrap.fallback delay: '0' history: 2w trends: '0' value_type: LOG description: 'The item is used to collect all SNMP traps unmatched by other snmptrap items' logtimefmt: 'hh:mm:sszyyyy/MM/dd' tags: - tag: component value: network - uuid: dd26c7a0a46240279bb907b8a1253029 name: 'Windows: System contact details' type: SNMP_AGENT snmp_oid: 1.3.6.1.2.1.1.4.0 key: 'system.contact[sysContact.0]' delay: 15m history: 2w trends: '0' value_type: CHAR description: | MIB: SNMPv2-MIB The textual identification of the contact person for this managed node, together with information on how to contact this person. If no contact information is known, the value is the zero-length string. inventory_link: CONTACT preprocessing: - type: DISCARD_UNCHANGED_HEARTBEAT parameters: - 12h tags: - tag: component value: system - uuid: 16a592f6b9f64403999f92d677f1cd2e name: 'Windows: CPU utilization' type: SNMP_AGENT snmp_oid: 'discovery[{#CPU.UTIL},1.3.6.1.2.1.25.3.3.1.2]' key: system.cpu.util history: 7d value_type: FLOAT units: '%' description: | MIB: HOST-RESOURCES-MIB The average, over the last minute, of the percentage of time that processors was not idle. Implementations may approximate this one minute smoothing period if necessary. preprocessing: - type: JSONPATH parameters: - '$..[''{#CPU.UTIL}''].avg()' tags: - tag: component value: cpu triggers: - uuid: ad2261f1ab77449cb1279725e8cf02f9 expression: 'min(/Windows by SNMP/system.cpu.util,5m)>{$CPU.UTIL.CRIT}' name: 'Windows: High CPU utilization' event_name: 'Windows: High CPU utilization (over {$CPU.UTIL.CRIT}% for 5m)' opdata: 'Current utilization: {ITEM.LASTVALUE1}' priority: WARNING description: 'The CPU utilization is too high. The system might be slow to respond.' tags: - tag: scope value: performance - uuid: e95e030765e84abfa5a51194e81ac719 name: 'Windows: System description' type: SNMP_AGENT snmp_oid: 1.3.6.1.2.1.1.1.0 key: 'system.descr[sysDescr.0]' delay: 15m history: 2w trends: '0' value_type: CHAR description: | MIB: SNMPv2-MIB A textual description of the entity. This value should include the full name and version identification of the system's hardware type, software operating-system, and networking software. preprocessing: - type: DISCARD_UNCHANGED_HEARTBEAT parameters: - 12h tags: - tag: component value: system - uuid: 422d9e4a985347959d5ef07278a6a12c name: 'Windows: Uptime (hardware)' type: SNMP_AGENT snmp_oid: 1.3.6.1.2.1.25.1.1.0 key: 'system.hw.uptime[hrSystemUptime.0]' delay: 30s history: 2w trends: '0' units: uptime description: | MIB: HOST-RESOURCES-MIB The amount of time since this host was last initialized. Note that this is different from sysUpTime in the SNMPv2-MIB [RFC1907] because sysUpTime is the uptime of the network management portion of the system. preprocessing: - type: CHECK_NOT_SUPPORTED parameters: - '' error_handler: CUSTOM_VALUE error_handler_params: '0' - type: MULTIPLIER parameters: - '0.01' tags: - tag: component value: system - uuid: d19b9bfdfe7344a28eaf69a1b7961adb name: 'Windows: System location' type: SNMP_AGENT snmp_oid: 1.3.6.1.2.1.1.6.0 key: 'system.location[sysLocation.0]' delay: 15m history: 2w trends: '0' value_type: CHAR description: | MIB: SNMPv2-MIB The physical location of this node (e.g., `telephone closet, 3rd floor'). If the location is unknown, the value is the zero-length string. inventory_link: LOCATION preprocessing: - type: DISCARD_UNCHANGED_HEARTBEAT parameters: - 12h tags: - tag: component value: system - uuid: 9feb2f561b3d4356bc6ef2cac955a495 name: 'Windows: System name' type: SNMP_AGENT snmp_oid: 1.3.6.1.2.1.1.5.0 key: system.name delay: 15m history: 2w trends: '0' value_type: CHAR description: | MIB: SNMPv2-MIB An administratively-assigned name for this managed node.By convention, this is the node's fully-qualified domain name. If the name is unknown, the value is the zero-length string. inventory_link: NAME preprocessing: - type: DISCARD_UNCHANGED_HEARTBEAT parameters: - 12h tags: - tag: component value: system triggers: - uuid: e257b5cf5d9949028c690722e4153612 expression: 'last(/Windows by SNMP/system.name,#1)<>last(/Windows by SNMP/system.name,#2) and length(last(/Windows by SNMP/system.name))>0' name: 'Windows: System name has changed' event_name: 'Windows: System name has changed (new name: {ITEM.VALUE})' priority: INFO description: 'The name of the system has changed. Acknowledge to close the problem manually.' manual_close: 'YES' tags: - tag: scope value: notice - tag: scope value: security - uuid: af7f47f4cf884282bbd9d296ba61b1c2 name: 'Windows: Uptime (network)' type: SNMP_AGENT snmp_oid: 1.3.6.1.2.1.1.3.0 key: 'system.net.uptime[sysUpTime.0]' delay: 30s history: 2w trends: '0' units: uptime description: | MIB: SNMPv2-MIB The time (in hundredths of a second) since the network management portion of the system was last re-initialized. preprocessing: - type: MULTIPLIER parameters: - '0.01' tags: - tag: component value: system - uuid: c9e67b57c15747e8ab4f67e24837ce49 name: 'Windows: System object ID' type: SNMP_AGENT snmp_oid: 1.3.6.1.2.1.1.2.0 key: 'system.objectid[sysObjectID.0]' delay: 15m history: 2w trends: '0' value_type: CHAR description: | MIB: SNMPv2-MIB The vendor's authoritative identification of the network management subsystem contained in the entity. This value is allocated within the SMI enterprises subtree (1.3.6.1.4.1) and provides an easy and unambiguous means for determining`what kind of box' is being managed. For example, if vendor`Flintstones, Inc.' was assigned the subtree1.3.6.1.4.1.4242, it could assign the identifier 1.3.6.1.4.1.4242.1.1 to its `Fred Router'. preprocessing: - type: DISCARD_UNCHANGED_HEARTBEAT parameters: - 12h tags: - tag: component value: system - uuid: bab2a178a60c4dddae8f11f8be344339 name: 'Windows: SNMP walk mounted filesystems' type: SNMP_AGENT snmp_oid: 'walk[1.3.6.1.2.1.25.2.3.1.3,1.3.6.1.2.1.25.2.3.1.2,1.3.6.1.2.1.25.2.3.1.4,1.3.6.1.2.1.25.2.3.1.6,1.3.6.1.2.1.25.2.3.1.5]' key: vfs.fs.walk history: '0' trends: '0' value_type: TEXT description: 'HOST-RESOURCES-MIB::hrStorage discovery.' tags: - tag: component value: raw - uuid: 4863042ade2143a0b34e1fc9403742b0 name: 'Windows: SNMP agent availability' type: INTERNAL key: 'zabbix[host,snmp,available]' history: 7d description: | Availability of SNMP checks on the host. The value of this item corresponds to availability icons in the host list. Possible value: 0 - not available 1 - available 2 - unknown valuemap: name: zabbix.host.available tags: - tag: component value: health - tag: component value: network triggers: - uuid: a20254c09f7a4d4d9793da7b075121f3 expression: 'max(/Windows by SNMP/zabbix[host,snmp,available],{$SNMP.TIMEOUT})=0' name: 'Windows: No SNMP data collection' opdata: 'Current state: {ITEM.LASTVALUE1}' priority: WARNING description: 'SNMP is not available for polling. Please check device connectivity and SNMP settings.' dependencies: - name: 'Windows: Unavailable by ICMP ping' expression: 'max(/Windows by SNMP/icmpping,#3)=0' tags: - tag: scope value: availability discovery_rules: - uuid: 3c6bc0ce8a4c4452a3bd0c0c67a6995c name: 'Network interfaces discovery' type: DEPENDENT key: net.if.discovery delay: '0' filter: evaltype: AND conditions: - macro: '{#IFADMINSTATUS}' value: '{$NET.IF.IFADMINSTATUS.MATCHES}' formulaid: A - macro: '{#IFADMINSTATUS}' value: '{$NET.IF.IFADMINSTATUS.NOT_MATCHES}' operator: NOT_MATCHES_REGEX formulaid: B - macro: '{#IFOPERSTATUS}' value: '{$NET.IF.IFOPERSTATUS.MATCHES}' formulaid: I - macro: '{#IFOPERSTATUS}' value: '{$NET.IF.IFOPERSTATUS.NOT_MATCHES}' operator: NOT_MATCHES_REGEX formulaid: J - macro: '{#IFNAME}' value: '{$NET.IF.IFNAME.MATCHES}' formulaid: G - macro: '{#IFNAME}' value: '{$NET.IF.IFNAME.NOT_MATCHES}' operator: NOT_MATCHES_REGEX formulaid: H - macro: '{#IFDESCR}' value: '{$NET.IF.IFDESCR.MATCHES}' formulaid: E - macro: '{#IFDESCR}' value: '{$NET.IF.IFDESCR.NOT_MATCHES}' operator: NOT_MATCHES_REGEX formulaid: F - macro: '{#IFALIAS}' value: '{$NET.IF.IFALIAS.MATCHES}' formulaid: C - macro: '{#IFALIAS}' value: '{$NET.IF.IFALIAS.NOT_MATCHES}' operator: NOT_MATCHES_REGEX formulaid: D - macro: '{#IFTYPE}' value: '{$NET.IF.IFTYPE.MATCHES}' formulaid: K - macro: '{#IFTYPE}' value: '{$NET.IF.IFTYPE.NOT_MATCHES}' operator: NOT_MATCHES_REGEX formulaid: L description: 'Discovering interfaces from IF-MIB.' item_prototypes: - uuid: 9208bd833e4044f395ac14c8213885de name: 'Interface {#IFNAME}({#IFALIAS}): Inbound packets discarded' type: DEPENDENT key: 'net.if.in.discards[ifInDiscards.{#SNMPINDEX}]' delay: '0' history: 7d description: | MIB: IF-MIB The number of inbound packets which were chosen to be discarded even though no errors had been detected to prevent their being deliverable to a higher-layer protocol. One possible reason for discarding such a packet could be to free up buffer space. Discontinuities in the value of this counter can occur at re-initialization of the management system, and at other times as indicated by the value of ifCounterDiscontinuityTime. preprocessing: - type: SNMP_WALK_VALUE parameters: - '1.3.6.1.2.1.2.2.1.13.{#SNMPINDEX}' - '0' - type: CHANGE_PER_SECOND parameters: - '' - type: DISCARD_UNCHANGED_HEARTBEAT parameters: - 3m master_item: key: net.if.walk tags: - tag: component value: network - tag: description value: '{#IFALIAS}' - tag: interface value: '{#IFNAME}' - uuid: 758aca2642c146ddad89ed9934077533 name: 'Interface {#IFNAME}({#IFALIAS}): Inbound packets with errors' type: DEPENDENT key: 'net.if.in.errors[ifInErrors.{#SNMPINDEX}]' delay: '0' history: 7d description: | MIB: IF-MIB For packet-oriented interfaces, the number of inbound packets that contained errors preventing them from being deliverable to a higher-layer protocol. For character-oriented or fixed-length interfaces, the number of inbound transmission units that contained errors preventing them from being deliverable to a higher-layer protocol. Discontinuities in the value of this counter can occur at re-initialization of the management system, and at other times as indicated by the value of ifCounterDiscontinuityTime. preprocessing: - type: SNMP_WALK_VALUE parameters: - '1.3.6.1.2.1.2.2.1.14.{#SNMPINDEX}' - '0' - type: CHANGE_PER_SECOND parameters: - '' - type: DISCARD_UNCHANGED_HEARTBEAT parameters: - 3m master_item: key: net.if.walk tags: - tag: component value: network - tag: description value: '{#IFALIAS}' - tag: interface value: '{#IFNAME}' - uuid: 713b5c5067174b90b686737606616664 name: 'Interface {#IFNAME}({#IFALIAS}): Bits received' type: DEPENDENT key: 'net.if.in[ifInOctets.{#SNMPINDEX}]' delay: '0' history: 7d units: bps description: | MIB: IF-MIB The total number of octets received on the interface,including framing characters. Discontinuities in the value of this counter can occur at re-initialization of the management system, and another times as indicated by the value of ifCounterDiscontinuityTime. preprocessing: - type: SNMP_WALK_VALUE parameters: - '1.3.6.1.2.1.2.2.1.10.{#SNMPINDEX}' - '0' - type: CHANGE_PER_SECOND parameters: - '' - type: MULTIPLIER parameters: - '8' master_item: key: net.if.walk tags: - tag: component value: network - tag: description value: '{#IFALIAS}' - tag: interface value: '{#IFNAME}' - uuid: 2d76edd04b2c4d35a15fc04749edfedc name: 'Interface {#IFNAME}({#IFALIAS}): Outbound packets discarded' type: DEPENDENT key: 'net.if.out.discards[ifOutDiscards.{#SNMPINDEX}]' delay: '0' history: 7d description: | MIB: IF-MIB The number of outbound packets which were chosen to be discarded even though no errors had been detected to prevent their being deliverable to a higher-layer protocol. One possible reason for discarding such a packet could be to free up buffer space. Discontinuities in the value of this counter can occur at re-initialization of the management system, and at other times as indicated by the value of ifCounterDiscontinuityTime. preprocessing: - type: SNMP_WALK_VALUE parameters: - '1.3.6.1.2.1.2.2.1.19.{#SNMPINDEX}' - '0' - type: CHANGE_PER_SECOND parameters: - '' - type: DISCARD_UNCHANGED_HEARTBEAT parameters: - 3m master_item: key: net.if.walk tags: - tag: component value: network - tag: description value: '{#IFALIAS}' - tag: interface value: '{#IFNAME}' - uuid: 40fe302325ff452997f34cb05d517c59 name: 'Interface {#IFNAME}({#IFALIAS}): Outbound packets with errors' type: DEPENDENT key: 'net.if.out.errors[ifOutErrors.{#SNMPINDEX}]' delay: '0' history: 7d description: | MIB: IF-MIB For packet-oriented interfaces, the number of outbound packets that contained errors preventing them from being deliverable to a higher-layer protocol. For character-oriented or fixed-length interfaces, the number of outbound transmission units that contained errors preventing them from being deliverable to a higher-layer protocol. Discontinuities in the value of this counter can occur at re-initialization of the management system, and at other times as indicated by the value of ifCounterDiscontinuityTime. preprocessing: - type: SNMP_WALK_VALUE parameters: - '1.3.6.1.2.1.2.2.1.20.{#SNMPINDEX}' - '0' - type: CHANGE_PER_SECOND parameters: - '' - type: DISCARD_UNCHANGED_HEARTBEAT parameters: - 3m master_item: key: net.if.walk tags: - tag: component value: network - tag: description value: '{#IFALIAS}' - tag: interface value: '{#IFNAME}' - uuid: 48652cf9a87142d39df11617f354df36 name: 'Interface {#IFNAME}({#IFALIAS}): Bits sent' type: DEPENDENT key: 'net.if.out[ifOutOctets.{#SNMPINDEX}]' delay: '0' history: 7d units: bps description: | MIB: IF-MIB The total number of octets transmitted out of the interface, including framing characters. Discontinuities in the value of this counter can occur at re-initialization of the management system, and at other times as indicated by the value of ifCounterDiscontinuityTime. preprocessing: - type: SNMP_WALK_VALUE parameters: - '1.3.6.1.2.1.2.2.1.16.{#SNMPINDEX}' - '0' - type: CHANGE_PER_SECOND parameters: - '' - type: MULTIPLIER parameters: - '8' master_item: key: net.if.walk tags: - tag: component value: network - tag: description value: '{#IFALIAS}' - tag: interface value: '{#IFNAME}' - uuid: 389b55d85fcc49219a055d0db005c715 name: 'Interface {#IFNAME}({#IFALIAS}): Speed' type: DEPENDENT key: 'net.if.speed[ifHighSpeed.{#SNMPINDEX}]' delay: '0' history: 7d trends: '0' units: bps description: | MIB: IF-MIB An estimate of the interface's current bandwidth in units of 1,000,000 bits per second. If this object reports a value of `n' then the speed of the interface is somewhere in the range of `n-500,000' to`n+499,999'. For interfaces which do not vary in bandwidth or for those where no accurate estimation can be made, this object should contain the nominal bandwidth. For a sub-layer which has no concept of bandwidth, this object should be zero. preprocessing: - type: SNMP_WALK_VALUE parameters: - '1.3.6.1.2.1.31.1.1.1.15.{#SNMPINDEX}' - '0' - type: MULTIPLIER parameters: - '1000000' - type: DISCARD_UNCHANGED_HEARTBEAT parameters: - 1h master_item: key: net.if.walk tags: - tag: component value: network - tag: description value: '{#IFALIAS}' - tag: interface value: '{#IFNAME}' - uuid: 71e55a8fd22c443e8a39a44c4c22433b name: 'Interface {#IFNAME}({#IFALIAS}): Operational status' type: DEPENDENT key: 'net.if.status[ifOperStatus.{#SNMPINDEX}]' delay: '0' history: 7d trends: '0' description: | MIB: IF-MIB The current operational state of the interface. - The testing(3) state indicates that no operational packet scan be passed - If ifAdminStatus is down(2) then ifOperStatus should be down(2) - If ifAdminStatus is changed to up(1) then ifOperStatus should change to up(1) if the interface is ready to transmit and receive network traffic - It should change todormant(5) if the interface is waiting for external actions (such as a serial line waiting for an incoming connection) - It should remain in the down(2) state if and only if there is a fault that prevents it from going to the up(1) state - It should remain in the notPresent(6) state if the interface has missing(typically, hardware) components. valuemap: name: 'IF-MIB::ifOperStatus' preprocessing: - type: SNMP_WALK_VALUE parameters: - '1.3.6.1.2.1.2.2.1.8.{#SNMPINDEX}' - '0' master_item: key: net.if.walk tags: - tag: component value: network - tag: description value: '{#IFALIAS}' - tag: interface value: '{#IFNAME}' trigger_prototypes: - uuid: 101b888ea92348689bbc499bbe15b212 expression: '{$IFCONTROL:"{#IFNAME}"}=1 and last(/Windows by SNMP/net.if.status[ifOperStatus.{#SNMPINDEX}])=2 and (last(/Windows by SNMP/net.if.status[ifOperStatus.{#SNMPINDEX}],#1)<>last(/Windows by SNMP/net.if.status[ifOperStatus.{#SNMPINDEX}],#2))' recovery_mode: RECOVERY_EXPRESSION recovery_expression: 'last(/Windows by SNMP/net.if.status[ifOperStatus.{#SNMPINDEX}])<>2 or {$IFCONTROL:"{#IFNAME}"}=0' name: 'Interface {#IFNAME}({#IFALIAS}): Link down' opdata: 'Current state: {ITEM.LASTVALUE1}' priority: AVERAGE description: | This trigger expression works as follows: 1. It can be triggered if the operations status is down. 2. `{$IFCONTROL:"{#IFNAME}"}=1` - a user can redefine context macro to value - 0. That marks this interface as not important. No new trigger will be fired if this interface is down. 3. `{TEMPLATE_NAME:METRIC.diff()}=1` - the trigger fires only if the operational status was up to (1) sometime before (so, do not fire for the 'eternal off' interfaces.) WARNING: if closed manually - it will not fire again on the next poll, because of .diff. manual_close: 'YES' tags: - tag: scope value: availability - uuid: ad62c98e35b24d0082c07ea4543963ad name: 'Interface {#IFNAME}({#IFALIAS}): Interface type' type: DEPENDENT key: 'net.if.type[ifType.{#SNMPINDEX}]' delay: '0' history: 7d trends: '0' description: | MIB: IF-MIB The type of interface. Additional values for ifType are assigned by the Internet Assigned Numbers Authority (IANA), through updating the syntax of the IANAifType textual convention. valuemap: name: 'IF-MIB::ifType' preprocessing: - type: SNMP_WALK_VALUE parameters: - '1.3.6.1.2.1.2.2.1.3.{#SNMPINDEX}' - '0' - type: DISCARD_UNCHANGED_HEARTBEAT parameters: - 1d master_item: key: net.if.walk tags: - tag: component value: network - tag: description value: '{#IFALIAS}' - tag: interface value: '{#IFNAME}' trigger_prototypes: - uuid: fe3e2d20c6eb475ba9f0e8f0c5766720 expression: | change(/Windows by SNMP/net.if.speed[ifHighSpeed.{#SNMPINDEX}])<0 and last(/Windows by SNMP/net.if.speed[ifHighSpeed.{#SNMPINDEX}])>0 and ( last(/Windows by SNMP/net.if.type[ifType.{#SNMPINDEX}])=6 or last(/Windows by SNMP/net.if.type[ifType.{#SNMPINDEX}])=7 or last(/Windows by SNMP/net.if.type[ifType.{#SNMPINDEX}])=11 or last(/Windows by SNMP/net.if.type[ifType.{#SNMPINDEX}])=62 or last(/Windows by SNMP/net.if.type[ifType.{#SNMPINDEX}])=69 or last(/Windows by SNMP/net.if.type[ifType.{#SNMPINDEX}])=117 ) and (last(/Windows by SNMP/net.if.status[ifOperStatus.{#SNMPINDEX}])<>2) recovery_mode: RECOVERY_EXPRESSION recovery_expression: | (change(/Windows by SNMP/net.if.speed[ifHighSpeed.{#SNMPINDEX}])>0 and last(/Windows by SNMP/net.if.speed[ifHighSpeed.{#SNMPINDEX}],#2)>0) or (last(/Windows by SNMP/net.if.status[ifOperStatus.{#SNMPINDEX}])=2) name: 'Interface {#IFNAME}({#IFALIAS}): Ethernet has changed to lower speed than it was before' opdata: 'Current reported speed: {ITEM.LASTVALUE1}' priority: INFO description: 'This Ethernet connection has transitioned down from its known maximum speed. This might be a sign of autonegotiation issues. Acknowledge to close the problem manually.' manual_close: 'YES' dependencies: - name: 'Interface {#IFNAME}({#IFALIAS}): Link down' expression: '{$IFCONTROL:"{#IFNAME}"}=1 and last(/Windows by SNMP/net.if.status[ifOperStatus.{#SNMPINDEX}])=2 and (last(/Windows by SNMP/net.if.status[ifOperStatus.{#SNMPINDEX}],#1)<>last(/Windows by SNMP/net.if.status[ifOperStatus.{#SNMPINDEX}],#2))' recovery_expression: 'last(/Windows by SNMP/net.if.status[ifOperStatus.{#SNMPINDEX}])<>2 or {$IFCONTROL:"{#IFNAME}"}=0' tags: - tag: scope value: performance - uuid: 5ab179badc3747438cf988c437b7b735 expression: | (avg(/Windows by SNMP/net.if.in[ifInOctets.{#SNMPINDEX}],15m)>({$IF.UTIL.MAX:"{#IFNAME}"}/100)*last(/Windows by SNMP/net.if.speed[ifHighSpeed.{#SNMPINDEX}]) or avg(/Windows by SNMP/net.if.out[ifOutOctets.{#SNMPINDEX}],15m)>({$IF.UTIL.MAX:"{#IFNAME}"}/100)*last(/Windows by SNMP/net.if.speed[ifHighSpeed.{#SNMPINDEX}])) and last(/Windows by SNMP/net.if.speed[ifHighSpeed.{#SNMPINDEX}])>0 recovery_mode: RECOVERY_EXPRESSION recovery_expression: | avg(/Windows by SNMP/net.if.in[ifInOctets.{#SNMPINDEX}],15m)<(({$IF.UTIL.MAX:"{#IFNAME}"}-3)/100)*last(/Windows by SNMP/net.if.speed[ifHighSpeed.{#SNMPINDEX}]) and avg(/Windows by SNMP/net.if.out[ifOutOctets.{#SNMPINDEX}],15m)<(({$IF.UTIL.MAX:"{#IFNAME}"}-3)/100)*last(/Windows by SNMP/net.if.speed[ifHighSpeed.{#SNMPINDEX}]) name: 'Interface {#IFNAME}({#IFALIAS}): High bandwidth usage' event_name: 'Interface {#IFNAME}({#IFALIAS}): High bandwidth usage (>{$IF.UTIL.MAX:"{#IFNAME}"}%)' opdata: 'In: {ITEM.LASTVALUE1}, out: {ITEM.LASTVALUE3}, speed: {ITEM.LASTVALUE2}' priority: WARNING description: 'The utilization of the network interface is close to its estimated maximum bandwidth.' manual_close: 'YES' dependencies: - name: 'Interface {#IFNAME}({#IFALIAS}): Link down' expression: '{$IFCONTROL:"{#IFNAME}"}=1 and last(/Windows by SNMP/net.if.status[ifOperStatus.{#SNMPINDEX}])=2 and (last(/Windows by SNMP/net.if.status[ifOperStatus.{#SNMPINDEX}],#1)<>last(/Windows by SNMP/net.if.status[ifOperStatus.{#SNMPINDEX}],#2))' recovery_expression: 'last(/Windows by SNMP/net.if.status[ifOperStatus.{#SNMPINDEX}])<>2 or {$IFCONTROL:"{#IFNAME}"}=0' tags: - tag: scope value: performance - uuid: 8acdf247d86b4b2785c92266291682ac expression: | min(/Windows by SNMP/net.if.in.errors[ifInErrors.{#SNMPINDEX}],5m)>{$IF.ERRORS.WARN:"{#IFNAME}"} or min(/Windows by SNMP/net.if.out.errors[ifOutErrors.{#SNMPINDEX}],5m)>{$IF.ERRORS.WARN:"{#IFNAME}"} recovery_mode: RECOVERY_EXPRESSION recovery_expression: | max(/Windows by SNMP/net.if.in.errors[ifInErrors.{#SNMPINDEX}],5m)<{$IF.ERRORS.WARN:"{#IFNAME}"}*0.8 and max(/Windows by SNMP/net.if.out.errors[ifOutErrors.{#SNMPINDEX}],5m)<{$IF.ERRORS.WARN:"{#IFNAME}"}*0.8 name: 'Interface {#IFNAME}({#IFALIAS}): High error rate' event_name: 'Interface {#IFNAME}({#IFALIAS}): High error rate (>{$IF.ERRORS.WARN:"{#IFNAME}"} for 5m)' opdata: 'errors in: {ITEM.LASTVALUE1}, errors out: {ITEM.LASTVALUE2}' priority: WARNING description: 'It recovers when it is below 80% of the `{$IF.ERRORS.WARN:"{#IFNAME}"}` threshold.' manual_close: 'YES' dependencies: - name: 'Interface {#IFNAME}({#IFALIAS}): Link down' expression: '{$IFCONTROL:"{#IFNAME}"}=1 and last(/Windows by SNMP/net.if.status[ifOperStatus.{#SNMPINDEX}])=2 and (last(/Windows by SNMP/net.if.status[ifOperStatus.{#SNMPINDEX}],#1)<>last(/Windows by SNMP/net.if.status[ifOperStatus.{#SNMPINDEX}],#2))' recovery_expression: 'last(/Windows by SNMP/net.if.status[ifOperStatus.{#SNMPINDEX}])<>2 or {$IFCONTROL:"{#IFNAME}"}=0' tags: - tag: scope value: performance graph_prototypes: - uuid: 616105fbea704079b1257feb370367a5 name: 'Interface {#IFNAME}({#IFALIAS}): Network traffic' graph_items: - drawtype: GRADIENT_LINE color: 199C0D item: host: 'Windows by SNMP' key: 'net.if.in[ifInOctets.{#SNMPINDEX}]' - sortorder: '1' drawtype: BOLD_LINE color: F63100 item: host: 'Windows by SNMP' key: 'net.if.out[ifOutOctets.{#SNMPINDEX}]' - sortorder: '2' color: 00611C yaxisside: RIGHT item: host: 'Windows by SNMP' key: 'net.if.out.errors[ifOutErrors.{#SNMPINDEX}]' - sortorder: '3' color: F7941D yaxisside: RIGHT item: host: 'Windows by SNMP' key: 'net.if.in.errors[ifInErrors.{#SNMPINDEX}]' - sortorder: '4' color: FC6EA3 yaxisside: RIGHT item: host: 'Windows by SNMP' key: 'net.if.out.discards[ifOutDiscards.{#SNMPINDEX}]' - sortorder: '5' color: 6C59DC yaxisside: RIGHT item: host: 'Windows by SNMP' key: 'net.if.in.discards[ifInDiscards.{#SNMPINDEX}]' master_item: key: net.if.walk preprocessing: - type: SNMP_WALK_TO_JSON parameters: - '{#IFOPERSTATUS}' - 1.3.6.1.2.1.2.2.1.8 - '0' - '{#IFADMINSTATUS}' - 1.3.6.1.2.1.2.2.1.7 - '0' - '{#IFALIAS}' - 1.3.6.1.2.1.31.1.1.1.18 - '0' - '{#IFNAME}' - 1.3.6.1.2.1.31.1.1.1.1 - '0' - '{#IFDESCR}' - 1.3.6.1.2.1.2.2.1.2 - '0' - '{#IFTYPE}' - 1.3.6.1.2.1.2.2.1.3 - '0' - type: DISCARD_UNCHANGED_HEARTBEAT parameters: - 1h - uuid: b2c0a897e22d438f8b1bbff44e493b13 name: 'Storage discovery' type: DEPENDENT key: 'vfs.fs.discovery[snmp]' delay: '0' filter: evaltype: AND conditions: - macro: '{#FSTYPE}' value: '{$VFS.FS.FSTYPE.MATCHES}' formulaid: C - macro: '{#FSTYPE}' value: '{$VFS.FS.FSTYPE.NOT_MATCHES}' operator: NOT_MATCHES_REGEX formulaid: D - macro: '{#FSNAME}' value: '{$VFS.FS.FSNAME.MATCHES}' formulaid: A - macro: '{#FSNAME}' value: '{$VFS.FS.FSNAME.NOT_MATCHES}' operator: NOT_MATCHES_REGEX formulaid: B description: 'HOST-RESOURCES-MIB::hrStorage discovery with storage filter.' item_prototypes: - uuid: 1524fab7760340b1a6eb8f5368d11edd name: '{#FSNAME}: Space utilization' type: CALCULATED key: 'vfs.fs.pused[storageUsedPercentage.{#SNMPINDEX}]' history: 7d value_type: FLOAT units: '%' params: '(last(//vfs.fs.used[hrStorageUsed.{#SNMPINDEX}])/last(//vfs.fs.total[hrStorageSize.{#SNMPINDEX}]))*100' description: 'The space utilization expressed in % for {#FSNAME}.' tags: - tag: component value: storage - tag: filesystem value: '{#FSNAME}' - uuid: 19d244950a414faa86cbcaf0d2859cbd name: '{#FSNAME}: Total space' type: DEPENDENT key: 'vfs.fs.total[hrStorageSize.{#SNMPINDEX}]' delay: '0' history: 7d units: B description: | MIB: HOST-RESOURCES-MIB The size of the storage represented by this entry, in units of hrStorageAllocationUnits. This object is writable to allow remote configuration of the size of the storage area in those cases where such an operation makes sense and is possible on the underlying system. For example, the amount of main storage allocated to a buffer pool might be modified or the amount of disk space allocated to virtual storage might be modified. preprocessing: - type: SNMP_WALK_VALUE parameters: - '1.3.6.1.2.1.25.2.3.1.5.{#SNMPINDEX}' - '0' - type: MULTIPLIER parameters: - '{#ALLOC_UNITS}' master_item: key: vfs.fs.walk tags: - tag: component value: storage - tag: filesystem value: '{#FSNAME}' - uuid: 2d00ecfcea564fef8b94d293d023b709 name: '{#FSNAME}: Used space' type: DEPENDENT key: 'vfs.fs.used[hrStorageUsed.{#SNMPINDEX}]' delay: '0' history: 7d units: B description: | MIB: HOST-RESOURCES-MIB The amount of the storage represented by this entry that is allocated, in units of hrStorageAllocationUnits. preprocessing: - type: SNMP_WALK_VALUE parameters: - '1.3.6.1.2.1.25.2.3.1.6.{#SNMPINDEX}' - '0' - type: MULTIPLIER parameters: - '{#ALLOC_UNITS}' master_item: key: vfs.fs.walk tags: - tag: component value: storage - tag: filesystem value: '{#FSNAME}' trigger_prototypes: - uuid: 597ea2f6059746c0b2e5b7312f764224 expression: | last(/Windows by SNMP/vfs.fs.pused[storageUsedPercentage.{#SNMPINDEX}])>{$VFS.FS.PUSED.MAX.CRIT:"{#FSNAME}"} and ((last(/Windows by SNMP/vfs.fs.total[hrStorageSize.{#SNMPINDEX}])-last(/Windows by SNMP/vfs.fs.used[hrStorageUsed.{#SNMPINDEX}]))<{$VFS.FS.FREE.MIN.CRIT:"{#FSNAME}"} or timeleft(/Windows by SNMP/vfs.fs.pused[storageUsedPercentage.{#SNMPINDEX}],1h,100)<1d) name: '{#FSNAME}: Disk space is critically low' event_name: '{#FSNAME}: Disk space is critically low (used > {$VFS.FS.PUSED.MAX.CRIT:"{#FSNAME}"}%)' opdata: 'Space used: {ITEM.LASTVALUE3} of {ITEM.LASTVALUE2} ({ITEM.LASTVALUE1})' priority: AVERAGE description: | Two conditions should match: 1. The first condition - utilization of the space should be above `{$VFS.FS.PUSED.MAX.CRIT:"{#FSNAME}"}`. 2. The second condition should be one of the following: - the disk free space is less than `{$VFS.FS.FREE.MIN.CRIT:"{#FSNAME}"}`; - the disk will be full in less than 24 hours. manual_close: 'YES' tags: - tag: scope value: availability - tag: scope value: capacity - uuid: 028b24edaf9c4640a2316845f50a4a7e expression: | last(/Windows by SNMP/vfs.fs.pused[storageUsedPercentage.{#SNMPINDEX}])>{$VFS.FS.PUSED.MAX.WARN:"{#FSNAME}"} and ((last(/Windows by SNMP/vfs.fs.total[hrStorageSize.{#SNMPINDEX}])-last(/Windows by SNMP/vfs.fs.used[hrStorageUsed.{#SNMPINDEX}]))<{$VFS.FS.FREE.MIN.WARN:"{#FSNAME}"} or timeleft(/Windows by SNMP/vfs.fs.pused[storageUsedPercentage.{#SNMPINDEX}],1h,100)<1d) name: '{#FSNAME}: Disk space is low' event_name: '{#FSNAME}: Disk space is low (used > {$VFS.FS.PUSED.MAX.WARN:"{#FSNAME}"}%)' opdata: 'Space used: {ITEM.LASTVALUE3} of {ITEM.LASTVALUE2} ({ITEM.LASTVALUE1})' priority: WARNING description: | Two conditions should match: 1. The first condition - utilization of the space should be above `{$VFS.FS.PUSED.MAX.WARN:"{#FSNAME}"}`. 2. The second condition should be one of the following: - the disk free space is less than `{$VFS.FS.FREE.MIN.WARN:"{#FSNAME}"}`; - the disk will be full in less than 24 hours. manual_close: 'YES' dependencies: - name: '{#FSNAME}: Disk space is critically low' expression: | last(/Windows by SNMP/vfs.fs.pused[storageUsedPercentage.{#SNMPINDEX}])>{$VFS.FS.PUSED.MAX.CRIT:"{#FSNAME}"} and ((last(/Windows by SNMP/vfs.fs.total[hrStorageSize.{#SNMPINDEX}])-last(/Windows by SNMP/vfs.fs.used[hrStorageUsed.{#SNMPINDEX}]))<{$VFS.FS.FREE.MIN.CRIT:"{#FSNAME}"} or timeleft(/Windows by SNMP/vfs.fs.pused[storageUsedPercentage.{#SNMPINDEX}],1h,100)<1d) tags: - tag: scope value: availability - tag: scope value: capacity graph_prototypes: - uuid: 2c1a1d995f8646dd82739a56e411ccf4 name: '{#FSNAME}: Disk space usage' width: '600' height: '340' type: PIE show_3d: 'YES' graph_items: - color: '969696' calc_fnc: LAST type: GRAPH_SUM item: host: 'Windows by SNMP' key: 'vfs.fs.total[hrStorageSize.{#SNMPINDEX}]' - sortorder: '1' color: C80000 calc_fnc: LAST item: host: 'Windows by SNMP' key: 'vfs.fs.used[hrStorageUsed.{#SNMPINDEX}]' master_item: key: vfs.fs.walk preprocessing: - type: SNMP_WALK_TO_JSON parameters: - '{#FSNAME}' - 1.3.6.1.2.1.25.2.3.1.3 - '0' - '{#FSTYPE}' - 1.3.6.1.2.1.25.2.3.1.2 - '0' - '{#ALLOC_UNITS}' - 1.3.6.1.2.1.25.2.3.1.4 - '0' - type: DISCARD_UNCHANGED_HEARTBEAT parameters: - 1h - uuid: 23bb0567e4194546a09da96ded5182dd name: 'Memory discovery' type: DEPENDENT key: vm.memory.discovery delay: '0' filter: evaltype: AND conditions: - macro: '{#MEMTYPE}' value: '{$MEMORY.TYPE.MATCHES}' formulaid: C - macro: '{#MEMTYPE}' value: '{$MEMORY.TYPE.NOT_MATCHES}' operator: NOT_MATCHES_REGEX formulaid: D - macro: '{#MEMNAME}' value: '{$MEMORY.NAME.MATCHES}' formulaid: A - macro: '{#MEMNAME}' value: '{$MEMORY.NAME.NOT_MATCHES}' operator: NOT_MATCHES_REGEX formulaid: B description: 'HOST-RESOURCES-MIB::hrStorage discovery with memory filter' item_prototypes: - uuid: ea1c8d22d38042f7ac824d59b9d6a720 name: '{#MEMNAME}: Total memory' type: DEPENDENT key: 'vm.memory.total[hrStorageSize.{#SNMPINDEX}]' delay: '0' history: 7d units: B description: | MIB: HOST-RESOURCES-MIB The size of the storage represented by this entry, in units of hrStorageAllocationUnits. This object is writable to allow remote configuration of the size of the storage area in those cases where such an operation makes sense and is possible on the underlying system. For example, the amount of main memory allocated to a buffer pool might be modified or the amount of disk space allocated to virtual memory might be modified. preprocessing: - type: SNMP_WALK_VALUE parameters: - '1.3.6.1.2.1.25.2.3.1.5.{#SNMPINDEX}' - '0' - type: MULTIPLIER parameters: - '{#ALLOC_UNITS}' master_item: key: vfs.fs.walk tags: - tag: component value: memory - uuid: 71453175f6f54027a8e428b7438af99a name: '{#MEMNAME}: Used memory' type: DEPENDENT key: 'vm.memory.used[hrStorageUsed.{#SNMPINDEX}]' delay: '0' history: 7d units: B description: | MIB: HOST-RESOURCES-MIB The amount of the storage represented by this entry that is allocated, in units of hrStorageAllocationUnits. preprocessing: - type: SNMP_WALK_VALUE parameters: - '1.3.6.1.2.1.25.2.3.1.6.{#SNMPINDEX}' - '0' - type: MULTIPLIER parameters: - '{#ALLOC_UNITS}' master_item: key: vfs.fs.walk tags: - tag: component value: memory - uuid: 5ccc66d7a78f4501b794bd46759c738b name: '{#MEMNAME}: Memory utilization' type: CALCULATED key: 'vm.memory.util[memoryUsedPercentage.{#SNMPINDEX}]' history: 7d value_type: FLOAT units: '%' params: 'last(//vm.memory.used[hrStorageUsed.{#SNMPINDEX}])/last(//vm.memory.total[hrStorageSize.{#SNMPINDEX}])*100' description: 'Memory utilization in %.' tags: - tag: component value: memory trigger_prototypes: - uuid: ab4b4ad08664454096f5e2cf3b7da1e9 expression: 'min(/Windows by SNMP/vm.memory.util[memoryUsedPercentage.{#SNMPINDEX}],5m)>{$MEMORY.UTIL.MAX}' name: '{#MEMNAME}: High memory utilization' event_name: '{#MEMNAME}: High memory utilization (>{$MEMORY.UTIL.MAX}% for 5m)' priority: AVERAGE description: 'The system is running out of free memory.' tags: - tag: scope value: capacity - tag: scope value: performance graph_prototypes: - uuid: 864bc9c487984f68b4da443b8af6c448 name: '{#MEMNAME}: Memory utilization' ymin_type_1: FIXED ymax_type_1: FIXED graph_items: - drawtype: GRADIENT_LINE color: 199C0D item: host: 'Windows by SNMP' key: 'vm.memory.util[memoryUsedPercentage.{#SNMPINDEX}]' master_item: key: vfs.fs.walk preprocessing: - type: SNMP_WALK_TO_JSON parameters: - '{#MEMNAME}' - 1.3.6.1.2.1.25.2.3.1.3 - '0' - '{#MEMTYPE}' - 1.3.6.1.2.1.25.2.3.1.2 - '0' - '{#ALLOC_UNITS}' - 1.3.6.1.2.1.25.2.3.1.4 - '0' - type: DISCARD_UNCHANGED_HEARTBEAT parameters: - 1h tags: - tag: class value: os - tag: target value: windows macros: - macro: '{$CPU.UTIL.CRIT}' value: '90' - macro: '{$ICMP_LOSS_WARN}' value: '20' - macro: '{$ICMP_RESPONSE_TIME_WARN}' value: '0.15' - macro: '{$IF.ERRORS.WARN}' value: '2' - macro: '{$IF.UTIL.MAX}' value: '90' - macro: '{$IFCONTROL}' value: '1' - macro: '{$MEMORY.NAME.MATCHES}' value: '.*' description: 'This macro is used in memory discovery. Can be overridden on the host or linked template level.' - macro: '{$MEMORY.NAME.NOT_MATCHES}' value: CHANGE_IF_NEEDED description: 'This macro is used in memory discovery. Can be overridden on the host or linked template level if you need to filter out results.' - macro: '{$MEMORY.TYPE.MATCHES}' value: '.*(\.2|hrStorageRam)$' description: 'This macro is used in memory discovery. Can be overridden on the host or linked template level.' - macro: '{$MEMORY.TYPE.NOT_MATCHES}' value: CHANGE_IF_NEEDED description: 'This macro is used in memory discovery. Can be overridden on the host or linked template level if you need to filter out results.' - macro: '{$MEMORY.UTIL.MAX}' value: '90' description: 'The warning threshold of the "Physical memory: Memory utilization" item.' - macro: '{$NET.IF.IFADMINSTATUS.MATCHES}' value: '^.*$' - macro: '{$NET.IF.IFADMINSTATUS.NOT_MATCHES}' value: ^2$ description: 'Ignore down(2) administrative status' - macro: '{$NET.IF.IFALIAS.MATCHES}' value: '.*' - macro: '{$NET.IF.IFALIAS.NOT_MATCHES}' value: CHANGE_IF_NEEDED - macro: '{$NET.IF.IFDESCR.MATCHES}' value: '.*' - macro: '{$NET.IF.IFDESCR.NOT_MATCHES}' value: Miniport|Virtual|Teredo|Kernel|Loopback|Bluetooth|HTTPS|6to4|QoS|Layer|isatap|ISATAP - macro: '{$NET.IF.IFNAME.MATCHES}' value: '^.*$' - macro: '{$NET.IF.IFNAME.NOT_MATCHES}' value: '(^Software Loopback Interface|^NULL[0-9.]*$|^[Ll]o[0-9.]*$|^[Ss]ystem$|^Nu[0-9.]*$|^veth[0-9a-z]+$|docker[0-9]+|br-[a-z0-9]{12})' description: 'Filter out loopbacks, nulls, docker veth links and docker0 bridge by default' - macro: '{$NET.IF.IFOPERSTATUS.MATCHES}' value: '^.*$' - macro: '{$NET.IF.IFOPERSTATUS.NOT_MATCHES}' value: ^6$ description: 'Ignore notPresent(6)' - macro: '{$NET.IF.IFTYPE.MATCHES}' value: '.*' - macro: '{$NET.IF.IFTYPE.NOT_MATCHES}' value: CHANGE_IF_NEEDED - macro: '{$SNMP.TIMEOUT}' value: 5m - macro: '{$VFS.FS.FREE.MIN.CRIT}' value: 5G description: 'The critical threshold of the filesystem utilization.' - macro: '{$VFS.FS.FREE.MIN.WARN}' value: 10G description: 'The warning threshold of the filesystem utilization.' - macro: '{$VFS.FS.FSNAME.MATCHES}' value: .+ description: 'This macro is used in filesystems discovery. Can be overridden on the host or linked template level.' - macro: '{$VFS.FS.FSNAME.NOT_MATCHES}' value: ^(/dev|/sys|/run|/proc|.+/shm$) description: 'This macro is used in filesystems discovery. Can be overridden on the host or linked template level.' - macro: '{$VFS.FS.FSTYPE.MATCHES}' value: '.*(\.4|\.9|hrStorageFixedDisk|hrStorageFlashMemory)$' description: 'This macro is used in filesystems discovery. Can be overridden on the host or linked template level.' - macro: '{$VFS.FS.FSTYPE.NOT_MATCHES}' value: CHANGE_IF_NEEDED description: 'This macro is used in filesystems discovery. Can be overridden on the host or linked template level.' - macro: '{$VFS.FS.PUSED.MAX.CRIT}' value: '90' - macro: '{$VFS.FS.PUSED.MAX.WARN}' value: '80' dashboards: - uuid: 8aeb65d3f8b645d28994cdc680c0f0fd name: 'Network interfaces' pages: - widgets: - type: graphprototype width: '24' height: '5' fields: - type: INTEGER name: columns value: '1' - type: INTEGER name: rows value: '1' - type: GRAPH_PROTOTYPE name: graphid value: host: 'Windows by SNMP' name: 'Interface {#IFNAME}({#IFALIAS}): Network traffic' - uuid: 3b28bdbfdb6d4cf1a69c7466a4f059f3 name: 'System performance' pages: - widgets: - type: graph width: '12' height: '5' fields: - type: GRAPH name: graphid value: host: 'Windows by SNMP' name: 'Windows: CPU utilization' - type: graphprototype 'y': '5' width: '12' height: '5' fields: - type: INTEGER name: columns value: '1' - type: INTEGER name: rows value: '1' - type: GRAPH_PROTOTYPE name: graphid value: host: 'Windows by SNMP' name: '{#MEMNAME}: Memory utilization' - type: graphprototype 'y': '10' width: '12' height: '5' fields: - type: INTEGER name: columns value: '1' - type: INTEGER name: rows value: '1' - type: GRAPH_PROTOTYPE name: graphid value: host: 'Windows by SNMP' name: '{#FSNAME}: Disk space usage' valuemaps: - uuid: 2357d81186e34d5b91db98c2350e0bdf name: 'IF-MIB::ifOperStatus' mappings: - value: '1' newvalue: up - value: '2' newvalue: down - value: '4' newvalue: unknown - value: '5' newvalue: dormant - value: '6' newvalue: notPresent - value: '7' newvalue: lowerLayerDown - uuid: b3f64ce647bc4647a692f2e3bafa3760 name: 'IF-MIB::ifType' mappings: - value: '1' newvalue: other - value: '2' newvalue: regular1822 - value: '3' newvalue: hdh1822 - value: '4' newvalue: ddnX25 - value: '5' newvalue: rfc877x25 - value: '6' newvalue: ethernetCsmacd - value: '7' newvalue: iso88023Csmacd - value: '8' newvalue: iso88024TokenBus - value: '9' newvalue: iso88025TokenRing - value: '10' newvalue: iso88026Man - value: '11' newvalue: starLan - value: '12' newvalue: proteon10Mbit - value: '13' newvalue: proteon80Mbit - value: '14' newvalue: hyperchannel - value: '15' newvalue: fddi - value: '16' newvalue: lapb - value: '17' newvalue: sdlc - value: '18' newvalue: ds1 - value: '19' newvalue: e1 - value: '20' newvalue: basicISDN - value: '21' newvalue: primaryISDN - value: '22' newvalue: propPointToPointSerial - value: '23' newvalue: ppp - value: '24' newvalue: softwareLoopback - value: '25' newvalue: eon - value: '26' newvalue: ethernet3Mbit - value: '27' newvalue: nsip - value: '28' newvalue: slip - value: '29' newvalue: ultra - value: '30' newvalue: ds3 - value: '31' newvalue: sip - value: '32' newvalue: frameRelay - value: '33' newvalue: rs232 - value: '34' newvalue: para - value: '35' newvalue: arcnet - value: '36' newvalue: arcnetPlus - value: '37' newvalue: atm - value: '38' newvalue: miox25 - value: '39' newvalue: sonet - value: '40' newvalue: x25ple - value: '41' newvalue: iso88022llc - value: '42' newvalue: localTalk - value: '43' newvalue: smdsDxi - value: '44' newvalue: frameRelayService - value: '45' newvalue: v35 - value: '46' newvalue: hssi - value: '47' newvalue: hippi - value: '48' newvalue: modem - value: '49' newvalue: aal5 - value: '50' newvalue: sonetPath - value: '51' newvalue: sonetVT - value: '52' newvalue: smdsIcip - value: '53' newvalue: propVirtual - value: '54' newvalue: propMultiplexor - value: '55' newvalue: ieee80212 - value: '56' newvalue: fibreChannel - value: '57' newvalue: hippiInterface - value: '58' newvalue: frameRelayInterconnect - value: '59' newvalue: aflane8023 - value: '60' newvalue: aflane8025 - value: '61' newvalue: cctEmul - value: '62' newvalue: fastEther - value: '63' newvalue: isdn - value: '64' newvalue: v11 - value: '65' newvalue: v36 - value: '66' newvalue: g703at64k - value: '67' newvalue: g703at2mb - value: '68' newvalue: qllc - value: '69' newvalue: fastEtherFX - value: '70' newvalue: channel - value: '71' newvalue: ieee80211 - value: '72' newvalue: ibm370parChan - value: '73' newvalue: escon - value: '74' newvalue: dlsw - value: '75' newvalue: isdns - value: '76' newvalue: isdnu - value: '77' newvalue: lapd - value: '78' newvalue: ipSwitch - value: '79' newvalue: rsrb - value: '80' newvalue: atmLogical - value: '81' newvalue: ds0 - value: '82' newvalue: ds0Bundle - value: '83' newvalue: bsc - value: '84' newvalue: async - value: '85' newvalue: cnr - value: '86' newvalue: iso88025Dtr - value: '87' newvalue: eplrs - value: '88' newvalue: arap - value: '89' newvalue: propCnls - value: '90' newvalue: hostPad - value: '91' newvalue: termPad - value: '92' newvalue: frameRelayMPI - value: '93' newvalue: x213 - value: '94' newvalue: adsl - value: '95' newvalue: radsl - value: '96' newvalue: sdsl - value: '97' newvalue: vdsl - value: '98' newvalue: iso88025CRFPInt - value: '99' newvalue: myrinet - value: '100' newvalue: voiceEM - value: '101' newvalue: voiceFXO - value: '102' newvalue: voiceFXS - value: '103' newvalue: voiceEncap - value: '104' newvalue: voiceOverIp - value: '105' newvalue: atmDxi - value: '106' newvalue: atmFuni - value: '107' newvalue: atmIma - value: '108' newvalue: pppMultilinkBundle - value: '109' newvalue: ipOverCdlc - value: '110' newvalue: ipOverClaw - value: '111' newvalue: stackToStack - value: '112' newvalue: virtualIpAddress - value: '113' newvalue: mpc - value: '114' newvalue: ipOverAtm - value: '115' newvalue: iso88025Fiber - value: '116' newvalue: tdlc - value: '117' newvalue: gigabitEthernet - value: '118' newvalue: hdlc - value: '119' newvalue: lapf - value: '120' newvalue: v37 - value: '121' newvalue: x25mlp - value: '122' newvalue: x25huntGroup - value: '123' newvalue: trasnpHdlc - value: '124' newvalue: interleave - value: '125' newvalue: fast - value: '126' newvalue: ip - value: '127' newvalue: docsCableMaclayer - value: '128' newvalue: docsCableDownstream - value: '129' newvalue: docsCableUpstream - value: '130' newvalue: a12MppSwitch - value: '131' newvalue: tunnel - value: '132' newvalue: coffee - value: '133' newvalue: ces - value: '134' newvalue: atmSubInterface - value: '135' newvalue: l2vlan - value: '136' newvalue: l3ipvlan - value: '137' newvalue: l3ipxvlan - value: '138' newvalue: digitalPowerline - value: '139' newvalue: mediaMailOverIp - value: '140' newvalue: dtm - value: '141' newvalue: dcn - value: '142' newvalue: ipForward - value: '143' newvalue: msdsl - value: '144' newvalue: ieee1394 - value: '145' newvalue: if-gsn - value: '146' newvalue: dvbRccMacLayer - value: '147' newvalue: dvbRccDownstream - value: '148' newvalue: dvbRccUpstream - value: '149' newvalue: atmVirtual - value: '150' newvalue: mplsTunnel - value: '151' newvalue: srp - value: '152' newvalue: voiceOverAtm - value: '153' newvalue: voiceOverFrameRelay - value: '154' newvalue: idsl - value: '155' newvalue: compositeLink - value: '156' newvalue: ss7SigLink - value: '157' newvalue: propWirelessP2P - value: '158' newvalue: frForward - value: '159' newvalue: rfc1483 - value: '160' newvalue: usb - value: '161' newvalue: ieee8023adLag - value: '162' newvalue: bgppolicyaccounting - value: '163' newvalue: frf16MfrBundle - value: '164' newvalue: h323Gatekeeper - value: '165' newvalue: h323Proxy - value: '166' newvalue: mpls - value: '167' newvalue: mfSigLink - value: '168' newvalue: hdsl2 - value: '169' newvalue: shdsl - value: '170' newvalue: ds1FDL - value: '171' newvalue: pos - value: '172' newvalue: dvbAsiIn - value: '173' newvalue: dvbAsiOut - value: '174' newvalue: plc - value: '175' newvalue: nfas - value: '176' newvalue: tr008 - value: '177' newvalue: gr303RDT - value: '178' newvalue: gr303IDT - value: '179' newvalue: isup - value: '180' newvalue: propDocsWirelessMaclayer - value: '181' newvalue: propDocsWirelessDownstream - value: '182' newvalue: propDocsWirelessUpstream - value: '183' newvalue: hiperlan2 - value: '184' newvalue: propBWAp2Mp - value: '185' newvalue: sonetOverheadChannel - value: '186' newvalue: digitalWrapperOverheadChannel - value: '187' newvalue: aal2 - value: '188' newvalue: radioMAC - value: '189' newvalue: atmRadio - value: '190' newvalue: imt - value: '191' newvalue: mvl - value: '192' newvalue: reachDSL - value: '193' newvalue: frDlciEndPt - value: '194' newvalue: atmVciEndPt - value: '195' newvalue: opticalChannel - value: '196' newvalue: opticalTransport - value: '197' newvalue: propAtm - value: '198' newvalue: voiceOverCable - value: '199' newvalue: infiniband - value: '200' newvalue: teLink - value: '201' newvalue: q2931 - value: '202' newvalue: virtualTg - value: '203' newvalue: sipTg - value: '204' newvalue: sipSig - value: '205' newvalue: docsCableUpstreamChannel - value: '206' newvalue: econet - value: '207' newvalue: pon155 - value: '208' newvalue: pon622 - value: '209' newvalue: bridge - value: '210' newvalue: linegroup - value: '211' newvalue: voiceEMFGD - value: '212' newvalue: voiceFGDEANA - value: '213' newvalue: voiceDID - value: '214' newvalue: mpegTransport - value: '215' newvalue: sixToFour - value: '216' newvalue: gtp - value: '217' newvalue: pdnEtherLoop1 - value: '218' newvalue: pdnEtherLoop2 - value: '219' newvalue: opticalChannelGroup - value: '220' newvalue: homepna - value: '221' newvalue: gfp - value: '222' newvalue: ciscoISLvlan - value: '223' newvalue: actelisMetaLOOP - value: '224' newvalue: fcipLink - value: '225' newvalue: rpr - value: '226' newvalue: qam - value: '227' newvalue: lmp - value: '228' newvalue: cblVectaStar - value: '229' newvalue: docsCableMCmtsDownstream - value: '230' newvalue: adsl2 - value: '231' newvalue: macSecControlledIF - value: '232' newvalue: macSecUncontrolledIF - value: '233' newvalue: aviciOpticalEther - value: '234' newvalue: atmbond - value: '235' newvalue: voiceFGDOS - value: '236' newvalue: mocaVersion1 - value: '237' newvalue: ieee80216WMAN - value: '238' newvalue: adsl2plus - value: '239' newvalue: dvbRcsMacLayer - value: '240' newvalue: dvbTdm - value: '241' newvalue: dvbRcsTdma - value: '242' newvalue: x86Laps - value: '243' newvalue: wwanPP - value: '244' newvalue: wwanPP2 - value: '245' newvalue: voiceEBS - value: '246' newvalue: ifPwType - value: '247' newvalue: ilan - value: '248' newvalue: pip - value: '249' newvalue: aluELP - value: '250' newvalue: gpon - value: '251' newvalue: vdsl2 - value: '252' newvalue: capwapDot11Profile - value: '253' newvalue: capwapDot11Bss - value: '254' newvalue: capwapWtpVirtualRadio - value: '255' newvalue: bits - value: '256' newvalue: docsCableUpstreamRfPort - value: '257' newvalue: cableDownstreamRfPort - value: '258' newvalue: vmwareVirtualNic - value: '259' newvalue: ieee802154 - value: '260' newvalue: otnOdu - value: '261' newvalue: otnOtu - value: '262' newvalue: ifVfiType - value: '263' newvalue: g9981 - value: '264' newvalue: g9982 - value: '265' newvalue: g9983 - value: '266' newvalue: aluEpon - value: '267' newvalue: aluEponOnu - value: '268' newvalue: aluEponPhysicalUni - value: '269' newvalue: aluEponLogicalLink - value: '270' newvalue: aluGponOnu - value: '271' newvalue: aluGponPhysicalUni - value: '272' newvalue: vmwareNicTeam - value: '277' newvalue: docsOfdmDownstream - value: '278' newvalue: docsOfdmaUpstream - value: '279' newvalue: gfast - value: '280' newvalue: sdci - value: '281' newvalue: xboxWireless - value: '282' newvalue: fastdsl - value: '283' newvalue: docsCableScte55d1FwdOob - value: '284' newvalue: docsCableScte55d1RetOob - value: '285' newvalue: docsCableScte55d2DsOob - value: '286' newvalue: docsCableScte55d2UsOob - value: '287' newvalue: docsCableNdf - value: '288' newvalue: docsCableNdr - value: '289' newvalue: ptm - value: '290' newvalue: ghn - uuid: 43b61695bdf347cb8ec9bd23e7cdbc88 name: 'Service state' mappings: - value: '0' newvalue: Down - value: '1' newvalue: Up - uuid: a979f49c325344e0b6c064b829a21f62 name: zabbix.host.available mappings: - value: '0' newvalue: 'not available' - value: '1' newvalue: available - value: '2' newvalue: unknown triggers: - uuid: b7a0b390f8844d2aa05ee849d12495f7 expression: '(last(/Windows by SNMP/system.hw.uptime[hrSystemUptime.0])>0 and last(/Windows by SNMP/system.hw.uptime[hrSystemUptime.0])<10m) or (last(/Windows by SNMP/system.hw.uptime[hrSystemUptime.0])=0 and last(/Windows by SNMP/system.net.uptime[sysUpTime.0])<10m)' name: 'Windows: Host has been restarted' event_name: 'Windows: {HOST.NAME} has been restarted (uptime < 10m)' priority: WARNING description: 'Uptime is less than 10 minutes.' manual_close: 'YES' dependencies: - name: 'Windows: No SNMP data collection' expression: 'max(/Windows by SNMP/zabbix[host,snmp,available],{$SNMP.TIMEOUT})=0' tags: - tag: scope value: notice graphs: - uuid: 1be13ea06a404fc88ced6c6a972290c8 name: 'Windows: CPU utilization' ymin_type_1: FIXED ymax_type_1: FIXED graph_items: - drawtype: GRADIENT_LINE color: 199C0D item: host: 'Windows by SNMP' key: system.cpu.util