zabbix_export: version: '7.0' template_groups: - uuid: 7df96b18c230490a9a0a9e2307226338 name: Templates/Applications templates: - uuid: sat00000-0000-0000-0000-000000000001 template: Template Nginx Custom Site Analysis name: Template Nginx Custom Site Analysis description: Analyzes JSON logs for a specific Nginx site host. groups: - name: Templates/Applications items: - uuid: ab0f217e-2203-44b3-90ea-47b3eeebb80a name: Access Log Stream type: ZABBIX_ACTIVE key: log[{$NGINX.SITE.LOG}] delay: 1s value_type: LOG history: 7d tags: - tag: component value: log_stream - uuid: 6cecf19b-845b-4158-a90f-3c67af72f2fa name: 'Nginx Site: Time ISO8601' type: DEPENDENT key: nginx.site.timestamp delay: '0' value_type: TEXT description: Time ISO8601 history: 30d preprocessing: - type: JSONPATH parameters: - $.@timestamp error_handler: DISCARD_VALUE master_item: key: log[{$NGINX.SITE.LOG}] tags: - tag: component value: timestamps - uuid: d55e36ba-c7c7-4e80-98aa-725b3935ae71 name: 'Nginx Site: Unique Request ID' type: DEPENDENT key: nginx.site.request_id delay: '0' value_type: TEXT description: Unique Request ID history: 30d preprocessing: - type: JSONPATH parameters: - $.request_id error_handler: DISCARD_VALUE master_item: key: log[{$NGINX.SITE.LOG}] tags: - tag: component value: timestamps - uuid: bc5b35db-700b-4e2c-9925-e1c03aad24e3 name: 'Nginx Site: Client IP' type: DEPENDENT key: nginx.site.remote_addr delay: '0' value_type: TEXT description: Client IP history: 30d preprocessing: - type: JSONPATH parameters: - $.remote_addr error_handler: DISCARD_VALUE master_item: key: log[{$NGINX.SITE.LOG}] tags: - tag: component value: network - uuid: c81de241-e241-452c-8287-c00c74fcc95b name: 'Nginx Site: Real IP (X-Forwarded-For)' type: DEPENDENT key: nginx.site.real_ip delay: '0' value_type: TEXT description: Real IP (X-Forwarded-For) history: 30d preprocessing: - type: JSONPATH parameters: - $.real_ip error_handler: DISCARD_VALUE master_item: key: log[{$NGINX.SITE.LOG}] tags: - tag: component value: network - uuid: f5fd7a97-6578-44c9-8731-ef3c6cfd9a30 name: 'Nginx Site: Authenticated User' type: DEPENDENT key: nginx.site.remote_user delay: '0' value_type: TEXT description: Authenticated User history: 30d preprocessing: - type: JSONPATH parameters: - $.remote_user error_handler: DISCARD_VALUE master_item: key: log[{$NGINX.SITE.LOG}] tags: - tag: component value: network - uuid: 2792452d-6c55-4bfa-8e37-fd134d0bf76b name: 'Nginx Site: HTTP Method' type: DEPENDENT key: nginx.site.request_method delay: '0' value_type: TEXT description: HTTP Method history: 30d preprocessing: - type: JSONPATH parameters: - $.request_method error_handler: DISCARD_VALUE master_item: key: log[{$NGINX.SITE.LOG}] tags: - tag: component value: request - uuid: c32f7902-1683-4a99-8832-4d190f02ca81 name: 'Nginx Site: Host Header' type: DEPENDENT key: nginx.site.host_header delay: '0' value_type: TEXT description: Host Header history: 30d preprocessing: - type: JSONPATH parameters: - $.host_header error_handler: DISCARD_VALUE master_item: key: log[{$NGINX.SITE.LOG}] tags: - tag: component value: request - uuid: 8e156772-27be-45df-afff-4cc7214aa838 name: 'Nginx Site: URI' type: DEPENDENT key: nginx.site.uri delay: '0' value_type: TEXT description: URI history: 30d preprocessing: - type: JSONPATH parameters: - $.uri error_handler: DISCARD_VALUE master_item: key: log[{$NGINX.SITE.LOG}] tags: - tag: component value: request - uuid: 4febe104-a59a-4204-bf42-f21cb550d625 name: 'Nginx Site: Request Length (bytes)' type: DEPENDENT key: nginx.site.request_length delay: '0' value_type: FLOAT description: Request Length (bytes) history: 30d preprocessing: - type: JSONPATH parameters: - $.request_length error_handler: DISCARD_VALUE master_item: key: log[{$NGINX.SITE.LOG}] tags: - tag: component value: request - uuid: 6ab853fb-2b27-4185-be8c-65c06bd02d4a name: 'Nginx Site: HTTP Status Code' type: DEPENDENT key: nginx.site.status delay: '0' value_type: FLOAT description: HTTP Status Code history: 30d preprocessing: - type: JSONPATH parameters: - $.status error_handler: DISCARD_VALUE master_item: key: log[{$NGINX.SITE.LOG}] tags: - tag: component value: response - uuid: 91c8ed8e-1631-435d-9114-9a2f21eaa152 name: 'Nginx Site: Body Bytes Sent' type: DEPENDENT key: nginx.site.body_bytes_sent delay: '0' value_type: FLOAT description: Body Bytes Sent history: 30d preprocessing: - type: JSONPATH parameters: - $.body_bytes_sent error_handler: DISCARD_VALUE master_item: key: log[{$NGINX.SITE.LOG}] tags: - tag: component value: response - uuid: 803bf915-8366-4c0b-ba79-eba29496f69f name: 'Nginx Site: Total Bytes Sent' type: DEPENDENT key: nginx.site.bytes_sent delay: '0' value_type: FLOAT description: Total Bytes Sent history: 30d preprocessing: - type: JSONPATH parameters: - $.bytes_sent error_handler: DISCARD_VALUE master_item: key: log[{$NGINX.SITE.LOG}] tags: - tag: component value: response - uuid: 82a7d2fd-1e09-4976-9b29-12551791029f name: 'Nginx Site: Request Time (Total)' type: DEPENDENT key: nginx.site.request_time delay: '0' value_type: FLOAT description: Request Time (Total) history: 30d preprocessing: - type: JSONPATH parameters: - $.request_time error_handler: DISCARD_VALUE master_item: key: log[{$NGINX.SITE.LOG}] tags: - tag: component value: performance - uuid: f65cdff7-b3d9-428a-98a6-d0ccbe557589 name: 'Nginx Site: Upstream Connect Time' type: DEPENDENT key: nginx.site.upstream_connect_time delay: '0' value_type: FLOAT description: Upstream Connect Time history: 30d preprocessing: - type: JSONPATH parameters: - $.upstream_connect_time error_handler: DISCARD_VALUE master_item: key: log[{$NGINX.SITE.LOG}] tags: - tag: component value: performance - uuid: 8c7e5f38-9865-41b3-b22c-f5e7b51bfcfe name: 'Nginx Site: Upstream Header Time' type: DEPENDENT key: nginx.site.upstream_header_time delay: '0' value_type: FLOAT description: Upstream Header Time history: 30d preprocessing: - type: JSONPATH parameters: - $.upstream_header_time error_handler: DISCARD_VALUE master_item: key: log[{$NGINX.SITE.LOG}] tags: - tag: component value: performance - uuid: 20f65169-9c54-4fe1-9468-3df9de93f8e4 name: 'Nginx Site: Upstream Response Time' type: DEPENDENT key: nginx.site.upstream_response_time delay: '0' value_type: FLOAT description: Upstream Response Time history: 30d preprocessing: - type: JSONPATH parameters: - $.upstream_response_time error_handler: DISCARD_VALUE master_item: key: log[{$NGINX.SITE.LOG}] tags: - tag: component value: performance - uuid: 943cce09-54a4-42c2-8c17-81eff8d4069f name: 'Nginx Site: Cache Status' type: DEPENDENT key: nginx.site.upstream_cache_status delay: '0' value_type: TEXT description: Cache Status history: 30d preprocessing: - type: JSONPATH parameters: - $.upstream_cache_status error_handler: DISCARD_VALUE master_item: key: log[{$NGINX.SITE.LOG}] tags: - tag: component value: performance - uuid: 9ccc7f5e-e8d0-47ba-8e4a-92b6cad62879 name: 'Nginx Site: GeoIP Country Code' type: DEPENDENT key: nginx.site.geoip_country_code delay: '0' value_type: TEXT description: GeoIP Country Code history: 30d preprocessing: - type: JSONPATH parameters: - $.geoip_country_code error_handler: DISCARD_VALUE master_item: key: log[{$NGINX.SITE.LOG}] tags: - tag: component value: geoip - uuid: c6cfd5f9-dd0e-495d-bca9-300b9d9c5c96 name: 'Nginx Site: GeoIP City Name' type: DEPENDENT key: nginx.site.geoip_city_name delay: '0' value_type: TEXT description: GeoIP City Name history: 30d preprocessing: - type: JSONPATH parameters: - $.geoip_city_name error_handler: DISCARD_VALUE master_item: key: log[{$NGINX.SITE.LOG}] tags: - tag: component value: geoip - uuid: 24b4d01c-ce56-4bf8-84b3-a2b54ba0bc08 name: 'Nginx Site: GeoIP ISP' type: DEPENDENT key: nginx.site.geoip_isp delay: '0' value_type: TEXT description: GeoIP ISP history: 30d preprocessing: - type: JSONPATH parameters: - $.geoip_isp error_handler: DISCARD_VALUE master_item: key: log[{$NGINX.SITE.LOG}] tags: - tag: component value: geoip - uuid: 52fde988-999a-4b54-8f6f-042c5e83e46f name: 'Nginx Site: Bad Bot Flag' type: DEPENDENT key: nginx.site.is_bad_bot delay: '0' value_type: TEXT description: Bad Bot Flag history: 30d preprocessing: - type: JSONPATH parameters: - $.is_bad_bot error_handler: DISCARD_VALUE master_item: key: log[{$NGINX.SITE.LOG}] tags: - tag: component value: security - uuid: abd94490-38f1-4672-a5ec-4a62ab04870b name: 'Nginx Site: WAF Block Flag' type: DEPENDENT key: nginx.site.block_request delay: '0' value_type: TEXT description: WAF Block Flag history: 30d preprocessing: - type: JSONPATH parameters: - $.block_request error_handler: DISCARD_VALUE master_item: key: log[{$NGINX.SITE.LOG}] tags: - tag: component value: security - uuid: 2d75c9e6-ef88-4205-aa6c-440037fcacb4 name: 'Nginx Site: SSL Protocol' type: DEPENDENT key: nginx.site.ssl_protocol delay: '0' value_type: TEXT description: SSL Protocol history: 30d preprocessing: - type: JSONPATH parameters: - $.ssl_protocol error_handler: DISCARD_VALUE master_item: key: log[{$NGINX.SITE.LOG}] tags: - tag: component value: security - uuid: 827b7c96-1994-49f1-a476-7f2036ae9075 name: 'Nginx Site: SSL Cipher' type: DEPENDENT key: nginx.site.ssl_cipher delay: '0' value_type: TEXT description: SSL Cipher history: 30d preprocessing: - type: JSONPATH parameters: - $.ssl_cipher error_handler: DISCARD_VALUE master_item: key: log[{$NGINX.SITE.LOG}] tags: - tag: component value: security - uuid: 42766b9a-5bb3-4b0e-816f-c250c00a6f00 name: 'Nginx Site: HTTP 5xx Rate' type: CALCULATED key: nginx.site.status.5xx.rate params: count(//nginx.site.status, 1m, "ge", 500) value_type: FLOAT units: rps delay: 1m tags: - tag: component value: availability