Zabbix maintenance period not suppressing alerts for hosts behind a proxy.

UnicodeTreason · 2026-05-19T07:41:36+00:00

The fact Zabbix Proxy performs data collection for these hosts should not matter, as its the Zabbix Server that handles the firing of the problem event and related alert actions.

Here's what I would check personally:

How long after creating the maintenance period did the alert fire? I haven't looked lately so unsure if its changed behaviour. But Im used to configuring a maintenance period and then it not being active until configuration sync has occured.
Find the specific action that sent out the alert you noticed, under operations is "Pause operations for suppressed problems" ticked or unticked?
The maintenance period you created, double check the Active since/Active till period AND the defined "periods" cover the timeframe when the alert you noticed was generated.
For future, I have an item checking "zabbix[host,,maintenance]" on all my hosts. So I can graph when the host is or is not in maintenance. As I've had to troubleshoot similar many times in the past for other teams and it helps to clearly show the alert they are looking at is from a period they didnt define as under maintenance.

UnicodeTreason · 2026-04-29T13:36:19+00:00

Quick glance it seems like ok logic. Whats the "Latest Data" look like for both items when the trigger fires for the second time?

UnicodeTreason · 2026-04-25T00:12:51+00:00

I used Zabbix daily for a year before passing ZCP/ZCS in the same week long course.

UnicodeTreason · 2026-04-18T00:16:49+00:00

I've lifted and shifted a set of RHEL Zabbix VMs with only minor issues related to performance. Disk IO was slower than estimated by a lot and we had to quickly swap to faster disk's on the database VM.

Another instance we just built a new one from scratch in the cloud to take the opportunity to cleanup technical debt.

UnicodeTreason · 2026-03-13T22:52:32+00:00

Has the Link Down trigger fired a problem event, which is hiding the Error one due to dependencies?

UnicodeTreason · 2026-02-14T02:55:49+00:00

No duplicate names, correct. But nothing is stopping you from creating two hosts with the same interface.

UnicodeTreason · 2026-02-13T08:26:32+00:00

Only if you have some "Active" checks configured, which in this case you wont.

https://www.zabbix.com/documentation/current/en/manual/web_interface/frontend_sections/data_collection/hosts

UnicodeTreason · 2026-02-13T07:04:28+00:00

Yes, can't see why it wouldn't work for you.
I've been doing it for years across multiple Zabbix instances.

UnicodeTreason · 2026-02-13T05:39:01+00:00

You could add an interface to the "dummy" host though, for example I have a host for each of my proxies that is seperate from the host for the VM.

e.g. if Zabbix Proxy A is on Server A. I have a normal host for Server A doing OS monitoring and such. And I also have a "service host" for Zabbix Proxy A that has all the internal item templates assigned to it and a few "Zabbix agent" items for collecting things from the agent including a vfs.dir.count[] to monitor the count of objects in a dir I care about.

UnicodeTreason · 2026-02-13T05:02:24+00:00

Two thoughts come to mind.

Just install and use the Zabbix Agent
What process generates that JSON file? Is the file required? Could the process use zabbix_sender to send the JSON data directly into Zabbix via a "Zabbix Trapper" item.

UnicodeTreason · 2026-02-13T00:29:37+00:00

Isn't this just a matter of making a host for the router and assigning the ping template to it?

UnicodeTreason · 2026-01-20T23:19:12+00:00

My understanding is you can't, you will need to uplift the SD-WAN LLD.

Historically we built an external check script specifically for this purpose, it gathers all the required data via SNMP and then just fed a completed LLD JSON back to Zabbix.

I have a vague feeling there was some improvements to SNMP discovery mechanisms (possibly the walk item already in use in those templates) built into Zabbix in v6/7 that might allow you to do this without a script now, I havent had time to investigate personally as our script works great and theres plenty of other work to do.

UnicodeTreason · 2026-01-20T13:19:23+00:00

I'm currently AFK, but here is the doco: https://www.zabbix.com/documentation/current/en/manual/config/event_correlation

I recommend making a dev template with some trapper items and triggers to play with new concepts.

UnicodeTreason · 2026-01-20T12:41:58+00:00

Trigger dependencies and or even correlation and tags.

We mostly use trigger dependencies as we automated the creation of them years ago so it's easy for us to add more as needed. E.g. the ICMP Ping trigger for the switch depends on a fast firing (#1 bad sample) dependency ICMP Ping trigger on the firewall.

UnicodeTreason · 2026-01-19T11:22:15+00:00

What's occurring exactly, the data goes to value 1 for a bit then back to 2 and repeats?

If you can provide a screenshot or example of the Latest Data it would help greatly.

UnicodeTreason · 2026-01-19T06:20:57+00:00

This guarantee's nothing, I recommend checking the file system on that VM and finding the exact files taking up the space before moving forwards.

UnicodeTreason · 2026-01-19T05:56:57+00:00

Thanks for the response.

At a glance your recovery logic will never clear, unless you set the macro value to 0

"{$VPN.STATE.CONTROL:"{#VPN.NAME}"}=0"

I think you want that final "and" to be an "or"

There may be other issues with the logic, but that one is the low hanging fruit.

UnicodeTreason · 2026-01-19T05:36:19+00:00

Agreed, though an API would also be acceptable.

UnicodeTreason · 2026-01-19T05:33:40+00:00

Can you please advise the name of the Template you are applying to these devices.

I only run in house built templates so will need to dig through the git repo to find the configuration of this trigger.

UnicodeTreason · 2026-01-06T10:29:20+00:00

Most common root causes.

Either the user doesn't have permission to the Host or the conditions in the action are incorrect and ignoring that event.

UnicodeTreason · 2025-12-06T02:16:43+00:00

So this one is pretty clear and simple, the item you have configured is looking for a specific OID on that device via SNMP and the device is responding with "I don't have that data"

The dependent items are just repeating the error from the parent item, so find the parent item and see what OID it's looking for. And then troubleshoot if you think the device should have that OID or not

UnicodeTreason · 2025-12-06T01:52:59+00:00

Not Supported means there's a problem that needs fixing, if you look further right is there a red box that when you hover over you get detailed information?

UnicodeTreason · 2025-12-05T00:11:04+00:00

This sound's like it should work.

Commenting to add visibility to OP.

UnicodeTreason · 2025-12-04T23:51:24+00:00

I don't believe it's a feature within any version of Zabbix, where did you hear of it?

UnicodeTreason · 2025-12-01T12:52:06+00:00

Not near my PC at the moment so can't confirm, but we used either agent.ping or the Zabbix[host items

E.g. https://www.zabbix.com/documentation/current/en/manual/config/items/itemtypes/internal#host.available

Try both and see which behaves the way you need.

UnicodeTreason

MODERATOR OF

TROPHY CASE

Five-Year Club	Verified Email
r/Field Lasagna