467 lines
12 KiB
YAML
467 lines
12 KiB
YAML
zabbix_export:
|
|
version: '7.0'
|
|
template_groups:
|
|
- uuid: 7df96b18c230490a9a0a9e2307226338
|
|
name: Templates/Applications
|
|
templates:
|
|
- uuid: sat00000-0000-0000-0000-000000000001
|
|
template: Template Nginx Custom Site Analysis
|
|
name: Template Nginx Custom Site Analysis
|
|
description: Analyzes JSON logs for a specific Nginx site host.
|
|
groups:
|
|
- name: Templates/Applications
|
|
items:
|
|
- uuid: ab0f217e-2203-44b3-90ea-47b3eeebb80a
|
|
name: Access Log Stream
|
|
type: ZABBIX_ACTIVE
|
|
key: log[{$NGINX.SITE.LOG}]
|
|
delay: 1s
|
|
value_type: LOG
|
|
history: 7d
|
|
tags:
|
|
- tag: component
|
|
value: log_stream
|
|
- uuid: 6cecf19b-845b-4158-a90f-3c67af72f2fa
|
|
name: 'Nginx Site: Time ISO8601'
|
|
type: DEPENDENT
|
|
key: nginx.site.timestamp
|
|
delay: '0'
|
|
value_type: TEXT
|
|
description: Time ISO8601
|
|
history: 30d
|
|
preprocessing:
|
|
- type: JSONPATH
|
|
parameters:
|
|
- $.@timestamp
|
|
error_handler: DISCARD_VALUE
|
|
master_item:
|
|
key: log[{$NGINX.SITE.LOG}]
|
|
tags:
|
|
- tag: component
|
|
value: timestamps
|
|
- uuid: d55e36ba-c7c7-4e80-98aa-725b3935ae71
|
|
name: 'Nginx Site: Unique Request ID'
|
|
type: DEPENDENT
|
|
key: nginx.site.request_id
|
|
delay: '0'
|
|
value_type: TEXT
|
|
description: Unique Request ID
|
|
history: 30d
|
|
preprocessing:
|
|
- type: JSONPATH
|
|
parameters:
|
|
- $.request_id
|
|
error_handler: DISCARD_VALUE
|
|
master_item:
|
|
key: log[{$NGINX.SITE.LOG}]
|
|
tags:
|
|
- tag: component
|
|
value: timestamps
|
|
- uuid: bc5b35db-700b-4e2c-9925-e1c03aad24e3
|
|
name: 'Nginx Site: Client IP'
|
|
type: DEPENDENT
|
|
key: nginx.site.remote_addr
|
|
delay: '0'
|
|
value_type: TEXT
|
|
description: Client IP
|
|
history: 30d
|
|
preprocessing:
|
|
- type: JSONPATH
|
|
parameters:
|
|
- $.remote_addr
|
|
error_handler: DISCARD_VALUE
|
|
master_item:
|
|
key: log[{$NGINX.SITE.LOG}]
|
|
tags:
|
|
- tag: component
|
|
value: network
|
|
- uuid: c81de241-e241-452c-8287-c00c74fcc95b
|
|
name: 'Nginx Site: Real IP (X-Forwarded-For)'
|
|
type: DEPENDENT
|
|
key: nginx.site.real_ip
|
|
delay: '0'
|
|
value_type: TEXT
|
|
description: Real IP (X-Forwarded-For)
|
|
history: 30d
|
|
preprocessing:
|
|
- type: JSONPATH
|
|
parameters:
|
|
- $.real_ip
|
|
error_handler: DISCARD_VALUE
|
|
master_item:
|
|
key: log[{$NGINX.SITE.LOG}]
|
|
tags:
|
|
- tag: component
|
|
value: network
|
|
- uuid: f5fd7a97-6578-44c9-8731-ef3c6cfd9a30
|
|
name: 'Nginx Site: Authenticated User'
|
|
type: DEPENDENT
|
|
key: nginx.site.remote_user
|
|
delay: '0'
|
|
value_type: TEXT
|
|
description: Authenticated User
|
|
history: 30d
|
|
preprocessing:
|
|
- type: JSONPATH
|
|
parameters:
|
|
- $.remote_user
|
|
error_handler: DISCARD_VALUE
|
|
master_item:
|
|
key: log[{$NGINX.SITE.LOG}]
|
|
tags:
|
|
- tag: component
|
|
value: network
|
|
- uuid: 2792452d-6c55-4bfa-8e37-fd134d0bf76b
|
|
name: 'Nginx Site: HTTP Method'
|
|
type: DEPENDENT
|
|
key: nginx.site.request_method
|
|
delay: '0'
|
|
value_type: TEXT
|
|
description: HTTP Method
|
|
history: 30d
|
|
preprocessing:
|
|
- type: JSONPATH
|
|
parameters:
|
|
- $.request_method
|
|
error_handler: DISCARD_VALUE
|
|
master_item:
|
|
key: log[{$NGINX.SITE.LOG}]
|
|
tags:
|
|
- tag: component
|
|
value: request
|
|
- uuid: c32f7902-1683-4a99-8832-4d190f02ca81
|
|
name: 'Nginx Site: Host Header'
|
|
type: DEPENDENT
|
|
key: nginx.site.host_header
|
|
delay: '0'
|
|
value_type: TEXT
|
|
description: Host Header
|
|
history: 30d
|
|
preprocessing:
|
|
- type: JSONPATH
|
|
parameters:
|
|
- $.host_header
|
|
error_handler: DISCARD_VALUE
|
|
master_item:
|
|
key: log[{$NGINX.SITE.LOG}]
|
|
tags:
|
|
- tag: component
|
|
value: request
|
|
- uuid: 8e156772-27be-45df-afff-4cc7214aa838
|
|
name: 'Nginx Site: URI'
|
|
type: DEPENDENT
|
|
key: nginx.site.uri
|
|
delay: '0'
|
|
value_type: TEXT
|
|
description: URI
|
|
history: 30d
|
|
preprocessing:
|
|
- type: JSONPATH
|
|
parameters:
|
|
- $.uri
|
|
error_handler: DISCARD_VALUE
|
|
master_item:
|
|
key: log[{$NGINX.SITE.LOG}]
|
|
tags:
|
|
- tag: component
|
|
value: request
|
|
- uuid: 4febe104-a59a-4204-bf42-f21cb550d625
|
|
name: 'Nginx Site: Request Length (bytes)'
|
|
type: DEPENDENT
|
|
key: nginx.site.request_length
|
|
delay: '0'
|
|
value_type: FLOAT
|
|
description: Request Length (bytes)
|
|
history: 30d
|
|
preprocessing:
|
|
- type: JSONPATH
|
|
parameters:
|
|
- $.request_length
|
|
error_handler: DISCARD_VALUE
|
|
master_item:
|
|
key: log[{$NGINX.SITE.LOG}]
|
|
tags:
|
|
- tag: component
|
|
value: request
|
|
- uuid: 6ab853fb-2b27-4185-be8c-65c06bd02d4a
|
|
name: 'Nginx Site: HTTP Status Code'
|
|
type: DEPENDENT
|
|
key: nginx.site.status
|
|
delay: '0'
|
|
value_type: FLOAT
|
|
description: HTTP Status Code
|
|
history: 30d
|
|
preprocessing:
|
|
- type: JSONPATH
|
|
parameters:
|
|
- $.status
|
|
error_handler: DISCARD_VALUE
|
|
master_item:
|
|
key: log[{$NGINX.SITE.LOG}]
|
|
tags:
|
|
- tag: component
|
|
value: response
|
|
- uuid: 91c8ed8e-1631-435d-9114-9a2f21eaa152
|
|
name: 'Nginx Site: Body Bytes Sent'
|
|
type: DEPENDENT
|
|
key: nginx.site.body_bytes_sent
|
|
delay: '0'
|
|
value_type: FLOAT
|
|
description: Body Bytes Sent
|
|
history: 30d
|
|
preprocessing:
|
|
- type: JSONPATH
|
|
parameters:
|
|
- $.body_bytes_sent
|
|
error_handler: DISCARD_VALUE
|
|
master_item:
|
|
key: log[{$NGINX.SITE.LOG}]
|
|
tags:
|
|
- tag: component
|
|
value: response
|
|
- uuid: 803bf915-8366-4c0b-ba79-eba29496f69f
|
|
name: 'Nginx Site: Total Bytes Sent'
|
|
type: DEPENDENT
|
|
key: nginx.site.bytes_sent
|
|
delay: '0'
|
|
value_type: FLOAT
|
|
description: Total Bytes Sent
|
|
history: 30d
|
|
preprocessing:
|
|
- type: JSONPATH
|
|
parameters:
|
|
- $.bytes_sent
|
|
error_handler: DISCARD_VALUE
|
|
master_item:
|
|
key: log[{$NGINX.SITE.LOG}]
|
|
tags:
|
|
- tag: component
|
|
value: response
|
|
- uuid: 82a7d2fd-1e09-4976-9b29-12551791029f
|
|
name: 'Nginx Site: Request Time (Total)'
|
|
type: DEPENDENT
|
|
key: nginx.site.request_time
|
|
delay: '0'
|
|
value_type: FLOAT
|
|
description: Request Time (Total)
|
|
history: 30d
|
|
preprocessing:
|
|
- type: JSONPATH
|
|
parameters:
|
|
- $.request_time
|
|
error_handler: DISCARD_VALUE
|
|
master_item:
|
|
key: log[{$NGINX.SITE.LOG}]
|
|
tags:
|
|
- tag: component
|
|
value: performance
|
|
- uuid: f65cdff7-b3d9-428a-98a6-d0ccbe557589
|
|
name: 'Nginx Site: Upstream Connect Time'
|
|
type: DEPENDENT
|
|
key: nginx.site.upstream_connect_time
|
|
delay: '0'
|
|
value_type: FLOAT
|
|
description: Upstream Connect Time
|
|
history: 30d
|
|
preprocessing:
|
|
- type: JSONPATH
|
|
parameters:
|
|
- $.upstream_connect_time
|
|
error_handler: DISCARD_VALUE
|
|
master_item:
|
|
key: log[{$NGINX.SITE.LOG}]
|
|
tags:
|
|
- tag: component
|
|
value: performance
|
|
- uuid: 8c7e5f38-9865-41b3-b22c-f5e7b51bfcfe
|
|
name: 'Nginx Site: Upstream Header Time'
|
|
type: DEPENDENT
|
|
key: nginx.site.upstream_header_time
|
|
delay: '0'
|
|
value_type: FLOAT
|
|
description: Upstream Header Time
|
|
history: 30d
|
|
preprocessing:
|
|
- type: JSONPATH
|
|
parameters:
|
|
- $.upstream_header_time
|
|
error_handler: DISCARD_VALUE
|
|
master_item:
|
|
key: log[{$NGINX.SITE.LOG}]
|
|
tags:
|
|
- tag: component
|
|
value: performance
|
|
- uuid: 20f65169-9c54-4fe1-9468-3df9de93f8e4
|
|
name: 'Nginx Site: Upstream Response Time'
|
|
type: DEPENDENT
|
|
key: nginx.site.upstream_response_time
|
|
delay: '0'
|
|
value_type: FLOAT
|
|
description: Upstream Response Time
|
|
history: 30d
|
|
preprocessing:
|
|
- type: JSONPATH
|
|
parameters:
|
|
- $.upstream_response_time
|
|
error_handler: DISCARD_VALUE
|
|
master_item:
|
|
key: log[{$NGINX.SITE.LOG}]
|
|
tags:
|
|
- tag: component
|
|
value: performance
|
|
- uuid: 943cce09-54a4-42c2-8c17-81eff8d4069f
|
|
name: 'Nginx Site: Cache Status'
|
|
type: DEPENDENT
|
|
key: nginx.site.upstream_cache_status
|
|
delay: '0'
|
|
value_type: TEXT
|
|
description: Cache Status
|
|
history: 30d
|
|
preprocessing:
|
|
- type: JSONPATH
|
|
parameters:
|
|
- $.upstream_cache_status
|
|
error_handler: DISCARD_VALUE
|
|
master_item:
|
|
key: log[{$NGINX.SITE.LOG}]
|
|
tags:
|
|
- tag: component
|
|
value: performance
|
|
- uuid: 9ccc7f5e-e8d0-47ba-8e4a-92b6cad62879
|
|
name: 'Nginx Site: GeoIP Country Code'
|
|
type: DEPENDENT
|
|
key: nginx.site.geoip_country_code
|
|
delay: '0'
|
|
value_type: TEXT
|
|
description: GeoIP Country Code
|
|
history: 30d
|
|
preprocessing:
|
|
- type: JSONPATH
|
|
parameters:
|
|
- $.geoip_country_code
|
|
error_handler: DISCARD_VALUE
|
|
master_item:
|
|
key: log[{$NGINX.SITE.LOG}]
|
|
tags:
|
|
- tag: component
|
|
value: geoip
|
|
- uuid: c6cfd5f9-dd0e-495d-bca9-300b9d9c5c96
|
|
name: 'Nginx Site: GeoIP City Name'
|
|
type: DEPENDENT
|
|
key: nginx.site.geoip_city_name
|
|
delay: '0'
|
|
value_type: TEXT
|
|
description: GeoIP City Name
|
|
history: 30d
|
|
preprocessing:
|
|
- type: JSONPATH
|
|
parameters:
|
|
- $.geoip_city_name
|
|
error_handler: DISCARD_VALUE
|
|
master_item:
|
|
key: log[{$NGINX.SITE.LOG}]
|
|
tags:
|
|
- tag: component
|
|
value: geoip
|
|
- uuid: 24b4d01c-ce56-4bf8-84b3-a2b54ba0bc08
|
|
name: 'Nginx Site: GeoIP ISP'
|
|
type: DEPENDENT
|
|
key: nginx.site.geoip_isp
|
|
delay: '0'
|
|
value_type: TEXT
|
|
description: GeoIP ISP
|
|
history: 30d
|
|
preprocessing:
|
|
- type: JSONPATH
|
|
parameters:
|
|
- $.geoip_isp
|
|
error_handler: DISCARD_VALUE
|
|
master_item:
|
|
key: log[{$NGINX.SITE.LOG}]
|
|
tags:
|
|
- tag: component
|
|
value: geoip
|
|
- uuid: 52fde988-999a-4b54-8f6f-042c5e83e46f
|
|
name: 'Nginx Site: Bad Bot Flag'
|
|
type: DEPENDENT
|
|
key: nginx.site.is_bad_bot
|
|
delay: '0'
|
|
value_type: TEXT
|
|
description: Bad Bot Flag
|
|
history: 30d
|
|
preprocessing:
|
|
- type: JSONPATH
|
|
parameters:
|
|
- $.is_bad_bot
|
|
error_handler: DISCARD_VALUE
|
|
master_item:
|
|
key: log[{$NGINX.SITE.LOG}]
|
|
tags:
|
|
- tag: component
|
|
value: security
|
|
- uuid: abd94490-38f1-4672-a5ec-4a62ab04870b
|
|
name: 'Nginx Site: WAF Block Flag'
|
|
type: DEPENDENT
|
|
key: nginx.site.block_request
|
|
delay: '0'
|
|
value_type: TEXT
|
|
description: WAF Block Flag
|
|
history: 30d
|
|
preprocessing:
|
|
- type: JSONPATH
|
|
parameters:
|
|
- $.block_request
|
|
error_handler: DISCARD_VALUE
|
|
master_item:
|
|
key: log[{$NGINX.SITE.LOG}]
|
|
tags:
|
|
- tag: component
|
|
value: security
|
|
- uuid: 2d75c9e6-ef88-4205-aa6c-440037fcacb4
|
|
name: 'Nginx Site: SSL Protocol'
|
|
type: DEPENDENT
|
|
key: nginx.site.ssl_protocol
|
|
delay: '0'
|
|
value_type: TEXT
|
|
description: SSL Protocol
|
|
history: 30d
|
|
preprocessing:
|
|
- type: JSONPATH
|
|
parameters:
|
|
- $.ssl_protocol
|
|
error_handler: DISCARD_VALUE
|
|
master_item:
|
|
key: log[{$NGINX.SITE.LOG}]
|
|
tags:
|
|
- tag: component
|
|
value: security
|
|
- uuid: 827b7c96-1994-49f1-a476-7f2036ae9075
|
|
name: 'Nginx Site: SSL Cipher'
|
|
type: DEPENDENT
|
|
key: nginx.site.ssl_cipher
|
|
delay: '0'
|
|
value_type: TEXT
|
|
description: SSL Cipher
|
|
history: 30d
|
|
preprocessing:
|
|
- type: JSONPATH
|
|
parameters:
|
|
- $.ssl_cipher
|
|
error_handler: DISCARD_VALUE
|
|
master_item:
|
|
key: log[{$NGINX.SITE.LOG}]
|
|
tags:
|
|
- tag: component
|
|
value: security
|
|
- uuid: 42766b9a-5bb3-4b0e-816f-c250c00a6f00
|
|
name: 'Nginx Site: HTTP 5xx Rate'
|
|
type: CALCULATED
|
|
key: nginx.site.status.5xx.rate
|
|
params: count(//nginx.site.status, 1m, "ge", 500)
|
|
value_type: FLOAT
|
|
units: rps
|
|
delay: 1m
|
|
tags:
|
|
- tag: component
|
|
value: availability
|