Discover CPU temperature entities in Blockbit Sensors
|`SNMP agent`| +|Network Interfaces|Discovering interfaces from IF-MIB.
|`SNMP agent`| +|Block devices|Block devices are discovered from UCD-DISKIO-MIB::diskIOTable
|`SNMP agent`| +|Mounted filesytem|HOST-RESOURCES-MIB::hrStorage discovery with storage filter
|`SNMP agent`| +|CPU|This discovery will create set of per core CPU metrics from UCD-SNMP-MIB, using {#CPU.COUNT} in preprocessing. That's the only reason why LLD is used.
|`SNMP agent`| diff --git a/Network_Devices/Blockbit/template_blockbit_ngfw_snmp/6.4/blockbit_ngfw_snmp_templates_zabbix_6_4.yaml b/Network_Devices/Blockbit/template_blockbit_ngfw_snmp/6.4/blockbit_ngfw_snmp_templates_zabbix_6_4.yaml new file mode 100644 index 000000000..ffd6a1a16 --- /dev/null +++ b/Network_Devices/Blockbit/template_blockbit_ngfw_snmp/6.4/blockbit_ngfw_snmp_templates_zabbix_6_4.yaml @@ -0,0 +1,3727 @@ +zabbix_export: + version: '6.4' + template_groups: + - uuid: 36bff6c29af64692839d077febfc7079 + name: 'Templates/Network devices' + templates: + - uuid: 80a0006a5a8c402e8d9d16776139a137 + template: 'Blockbit NGFW by SNMP' + name: 'Blockbit NGFW by SNMP' + description: | + Template OS Blockbit + + MIBs used: + + EtherLike-MIB + HOST-RESOURCES-MIB + SNMPv2-MIB + UCD-DISKIO-MIB + UCD-SNMP-MIB + IF-MIB + NET-SNMP-EXTEND-MIB + + Created by Acelio Carvalho da Silva in CSST Squad + groups: + - name: 'Templates/Network devices' + items: + - uuid: dedca95a88cc48fba4c3aa43094ef261 + name: 'Blockbit NGFW: Count authsessions' + type: SNMP_AGENT + snmp_oid: 1.3.6.1.4.1.8072.1.3.2.4.1.2.12.65.85.84.72.83.69.83.83.73.79.78.83.1 + key: blockbit.monitor.auth.sessions + delay: 30s + tags: + - tag: Application + value: 'Services BLOCKBIT' + - uuid: d55d033256864475ba1a300d14bcad9d + name: 'Blockbit NGFW: Count consessions' + type: SNMP_AGENT + snmp_oid: 1.3.6.1.4.1.8072.1.3.2.4.1.2.12.67.79.78.78.83.69.83.83.73.79.78.83.1 + key: blockbit.monitor.connections.sessions + delay: 30s + tags: + - tag: Application + value: 'Services BLOCKBIT' + - uuid: fd1379e21fa5428492f6801441c61ec9 + name: 'Blockbit NGFW: Threat Protection Service' + type: SNMP_AGENT + snmp_oid: 1.3.6.1.4.1.8072.1.3.2.4.1.2.8.83.69.82.86.73.67.69.83.16 + key: blockbit.service.atp.status + trends: '0' + value_type: CHAR + tags: + - tag: Application + value: 'Services BLOCKBIT' + - tag: component + value: Service + triggers: + - uuid: 78c145d1a8394a27a80bffd17ad4bb6e + expression: 'find(/Blockbit NGFW by SNMP/blockbit.service.atp.status,1m,"like","enabled:stopped")=1' + name: 'Blockbit NGFW: ATP service is not running' + priority: HIGH + tags: + - tag: scope + value: availability + - uuid: 8cd9babb9ff440b1947805491ee4eb19 + name: 'Blockbit NGFW: Auth LDAP Service' + type: SNMP_AGENT + snmp_oid: 1.3.6.1.4.1.8072.1.3.2.4.1.2.8.83.69.82.86.73.67.69.83.29 + key: blockbit.service.auth-ldap.status + trends: '0' + value_type: CHAR + tags: + - tag: Application + value: 'Services BLOCKBIT' + - tag: component + value: Service + triggers: + - uuid: 934271ae29e74d42a4c0ba8e346eba05 + expression: 'find(/Blockbit NGFW by SNMP/blockbit.service.auth-ldap.status,1m,"like","enabled:stopped")=1' + name: 'Blockbit NGFW: Auth LDAP service is not running' + priority: HIGH + tags: + - tag: scope + value: availability + - uuid: e4015059e1fb4bbf8f1519ffd6434030 + name: 'Blockbit NGFW: Auth Radius Service' + type: SNMP_AGENT + snmp_oid: 1.3.6.1.4.1.8072.1.3.2.4.1.2.8.83.69.82.86.73.67.69.83.30 + key: blockbit.service.auth-radius.status + trends: '0' + value_type: CHAR + tags: + - tag: Application + value: 'Services BLOCKBIT' + - tag: component + value: Service + triggers: + - uuid: 7a81d7db12284cd68243adb9a90c3cb9 + expression: 'find(/Blockbit NGFW by SNMP/blockbit.service.auth-radius.status,1m,"like","enabled:stopped")=1' + name: 'Blockbit NGFW: Auth Radius service is not running' + priority: HIGH + tags: + - tag: scope + value: availability + - uuid: 8618bb7f78734232ac3f21a2605a59c8 + name: 'Blockbit NGFW: Auth Server Service' + type: SNMP_AGENT + snmp_oid: 1.3.6.1.4.1.8072.1.3.2.4.1.2.8.83.69.82.86.73.67.69.83.27 + key: blockbit.service.auth-server.status + trends: '0' + value_type: CHAR + tags: + - tag: Application + value: 'Services BLOCKBIT' + - tag: component + value: Service + triggers: + - uuid: b933d2b346e74b4ebc0e7bd2b396d327 + expression: 'find(/Blockbit NGFW by SNMP/blockbit.service.auth-server.status,1m,"like","enabled:stopped")=1' + name: 'Blockbit NGFW: Auth Server service is not running' + priority: HIGH + tags: + - tag: scope + value: availability + - uuid: 57013642591443e8b4ff28a22567d49e + name: 'Blockbit NGFW: Auth Windows Service' + type: SNMP_AGENT + snmp_oid: 1.3.6.1.4.1.8072.1.3.2.4.1.2.8.83.69.82.86.73.67.69.83.28 + key: blockbit.service.auth-windows.status + trends: '0' + value_type: CHAR + tags: + - tag: Application + value: 'Services BLOCKBIT' + - tag: component + value: Service + triggers: + - uuid: df473f11c11340b09c6551279e1d9be0 + expression: 'find(/Blockbit NGFW by SNMP/blockbit.service.auth-windows.status,1m,"like","enabled:stopped")=1' + name: 'Blockbit NGFW: Auth Windows service is not running' + priority: HIGH + tags: + - tag: scope + value: availability + - uuid: f0d3522400274e6aae90fd8ad0b6c4ed + name: 'Blockbit NGFW: DHCP Relay Service' + type: SNMP_AGENT + snmp_oid: 1.3.6.1.4.1.8072.1.3.2.4.1.2.8.83.69.82.86.73.67.69.83.23 + key: blockbit.service.dhcp-relay.status + trends: '0' + value_type: CHAR + tags: + - tag: Application + value: 'Services BLOCKBIT' + - tag: component + value: Service + triggers: + - uuid: 7934140a2d554d57a2fc3d19c4da5346 + expression: 'find(/Blockbit NGFW by SNMP/blockbit.service.dhcp-relay.status,1m,"like","enabled:stopped")=1' + name: 'Blockbit NGFW: DHCP Relay service is not running' + priority: HIGH + tags: + - tag: scope + value: availability + - uuid: 862eb000a7c24071a66ce69f17fc412d + name: 'Blockbit NGFW: DHCP Lease IPv4' + type: SNMP_AGENT + snmp_oid: .1.3.6.1.4.1.8072.1.3.2.4.1.2.10.68.67.72.80.76.69.65.83.69.83.1 + key: blockbit.service.dhcp-server-v4.lease + delay: 5m + tags: + - tag: Application + value: 'Services BLOCKBIT' + - tag: component + value: Service + - uuid: 8492716956f847a8b235fd3f7cdc5a74 + name: 'Blockbit NGFW: DHCP Server v4 Service' + type: SNMP_AGENT + snmp_oid: 1.3.6.1.4.1.8072.1.3.2.4.1.2.8.83.69.82.86.73.67.69.83.21 + key: blockbit.service.dhcp-server-v4.status + trends: '0' + value_type: CHAR + tags: + - tag: Application + value: 'Services BLOCKBIT' + - tag: component + value: Service + triggers: + - uuid: 666a2f3ca463487a8aab3d75b6043592 + expression: 'find(/Blockbit NGFW by SNMP/blockbit.service.dhcp-server-v4.status,1m,"like","enabled:stopped")=1' + name: 'Blockbit NGFW: DHCP Server v4 service is not running' + priority: HIGH + tags: + - tag: scope + value: availability + - uuid: 7be6226eebec407d8c2337790759bbd5 + name: 'Blockbit NGFW: DHCP Server v6 Service' + type: SNMP_AGENT + snmp_oid: 1.3.6.1.4.1.8072.1.3.2.4.1.2.8.83.69.82.86.73.67.69.83.22 + key: blockbit.service.dhcp-server-v6.status + trends: '0' + value_type: CHAR + tags: + - tag: Application + value: 'Services BLOCKBIT' + - tag: component + value: Service + triggers: + - uuid: f772aaa093204010a839073a980a53c7 + expression: 'find(/Blockbit NGFW by SNMP/blockbit.service.dhcp-server-v6.status,1m,"like","enabled:stopped")=1' + name: 'Blockbit NGFW: DHCP Server v6 service is not running' + priority: HIGH + tags: + - tag: scope + value: availability + - uuid: 315fbdcfdf0747b7a64de7fbd16ac7ef + name: 'Blockbit NGFW: DNS Service' + type: SNMP_AGENT + snmp_oid: 1.3.6.1.4.1.8072.1.3.2.4.1.2.8.83.69.82.86.73.67.69.83.20 + key: blockbit.service.dns.status + trends: '0' + value_type: CHAR + tags: + - tag: Application + value: 'Services BLOCKBIT' + - tag: component + value: Service + triggers: + - uuid: ba8c9bf51c90409d9ad913e9ccd9ea6c + expression: 'find(/Blockbit NGFW by SNMP/blockbit.service.dns.status,1m,"like","enabled:stopped")=1' + name: 'Blockbit NGFW: DNS service is not running' + priority: HIGH + tags: + - tag: scope + value: availability + - uuid: d6b69128f3cc456e9d28efa1b9a549fd + name: 'Blockbit NGFW: Application Control Service' + type: SNMP_AGENT + snmp_oid: 1.3.6.1.4.1.8072.1.3.2.4.1.2.8.83.69.82.86.73.67.69.83.18 + key: blockbit.service.dpi.status + trends: '0' + value_type: CHAR + tags: + - tag: Application + value: 'Services BLOCKBIT' + - tag: component + value: Service + triggers: + - uuid: bbf959a1b6e349a599e64927e4fb18d1 + expression: 'find(/Blockbit NGFW by SNMP/blockbit.service.dpi.status,1m,"like","enabled:stopped")=1' + name: 'Blockbit NGFW: Application Control service is not running' + priority: HIGH + tags: + - tag: scope + value: availability + - uuid: ecd0ac8bdd0c4f1ca0cda527ab4b517c + name: 'Blockbit NGFW: Firewall Service' + type: SNMP_AGENT + snmp_oid: 1.3.6.1.4.1.8072.1.3.2.4.1.2.8.83.69.82.86.73.67.69.83.1 + key: blockbit.service.firewall.status + trends: '0' + value_type: CHAR + tags: + - tag: Application + value: 'Services BLOCKBIT' + - tag: component + value: Service + triggers: + - uuid: 6631cadd219b4a14b7955534e208b5a0 + expression: 'find(/Blockbit NGFW by SNMP/blockbit.service.firewall.status,1m,"like","enabled:stopped")=1' + name: 'Blockbit NGFW: Firewall service is not running' + priority: HIGH + tags: + - tag: scope + value: availability + - uuid: 9294ada1059d4eae9f7b6564030dd5e8 + name: 'Blockbit NGFW: GSM Deployer Service' + type: SNMP_AGENT + snmp_oid: 1.3.6.1.4.1.8072.1.3.2.4.1.2.8.83.69.82.86.73.67.69.83.41 + key: blockbit.service.gsm-deployer.status + trends: '0' + value_type: CHAR + tags: + - tag: Application + value: 'Services BLOCKBIT' + - tag: component + value: Service + triggers: + - uuid: e5a734c812834451ac18aba859fac7c5 + expression: 'find(/Blockbit NGFW by SNMP/blockbit.service.gsm-deployer.status,1m,"like","enabled:stopped")=1' + name: 'Blockbit NGFW: GSM Deployer service is not running' + priority: HIGH + tags: + - tag: scope + value: availability + - uuid: 9337481745e64255a76d12c86f096d87 + name: 'Blockbit NGFW: GSM Logger Service' + type: SNMP_AGENT + snmp_oid: 1.3.6.1.4.1.8072.1.3.2.4.1.2.8.83.69.82.86.73.67.69.83.42 + key: blockbit.service.gsm-logger.status + trends: '0' + value_type: CHAR + tags: + - tag: Application + value: 'Services BLOCKBIT' + - tag: component + value: Service + triggers: + - uuid: f1a220c5a6a54cb5a24e10432697f241 + expression: 'find(/Blockbit NGFW by SNMP/blockbit.service.gsm-logger.status,1m,"like","enabled:stopped")=1' + name: 'Blockbit NGFW: GSM Logger service is not running' + priority: HIGH + tags: + - tag: scope + value: availability + - uuid: f573999a54324e9c87fc32ffe22e3507 + name: 'Blockbit NGFW: IPS Service' + type: SNMP_AGENT + snmp_oid: 1.3.6.1.4.1.8072.1.3.2.4.1.2.8.83.69.82.86.73.67.69.83.17 + key: blockbit.service.ips.status + trends: '0' + value_type: CHAR + tags: + - tag: Application + value: 'Services BLOCKBIT' + - tag: component + value: Service + triggers: + - uuid: 637fea0bb4f64673b9dd85590c2c226a + expression: 'find(/Blockbit NGFW by SNMP/blockbit.service.ips.status,1m,"like","enabled:stopped")=1' + name: 'Blockbit NGFW: IPS service is not running' + priority: HIGH + tags: + - tag: scope + value: availability + - uuid: f08944b51a9a4cc1b2bbb0310ebecf5e + name: 'Blockbit NGFW: Monitor Service' + type: SNMP_AGENT + snmp_oid: 1.3.6.1.4.1.8072.1.3.2.4.1.2.8.83.69.82.86.73.67.69.83.39 + key: blockbit.service.monitor.status + trends: '0' + value_type: CHAR + tags: + - tag: Application + value: 'Services BLOCKBIT' + - tag: component + value: Service + triggers: + - uuid: 5b74e41791de4950be24e85add58b2bd + expression: 'find(/Blockbit NGFW by SNMP/blockbit.service.monitor.status,1m,"like","enabled:stopped")=1' + name: 'Blockbit NGFW: Monitor service is not running' + priority: HIGH + tags: + - tag: scope + value: availability + - uuid: 9710710a6e5641f48f646df6e16f505c + name: 'Blockbit NGFW: Proxy E-mail Service' + type: SNMP_AGENT + snmp_oid: 1.3.6.1.4.1.8072.1.3.2.4.1.2.8.83.69.82.86.73.67.69.83.10 + key: blockbit.service.proxy-email.status + trends: '0' + value_type: CHAR + tags: + - tag: Application + value: 'Services BLOCKBIT' + - tag: component + value: Service + triggers: + - uuid: 000341b71c904830b8ca714434e295dc + expression: 'find(/Blockbit NGFW by SNMP/blockbit.service.proxy-email.status,1m,"like","enabled:stopped")=1' + name: 'Blockbit NGFW: Proxy E-Mail service is not running' + priority: HIGH + tags: + - tag: scope + value: availability + - uuid: ed7d1052a3d2449dbc791085641adf47 + name: 'Blockbit NGFW: Proxy FTP Service' + type: SNMP_AGENT + snmp_oid: 1.3.6.1.4.1.8072.1.3.2.4.1.2.8.83.69.82.86.73.67.69.83.8 + key: blockbit.service.proxy-ftp.status + trends: '0' + value_type: CHAR + tags: + - tag: Application + value: 'Services BLOCKBIT' + - tag: component + value: Service + triggers: + - uuid: d69b4967174e4dc185dc9cc4f9ecd7a4 + expression: 'find(/Blockbit NGFW by SNMP/blockbit.service.proxy-ftp.status,1m,"like","enabled:stopped")=1' + name: 'Blockbit NGFW: Proxy FTP service is not running' + priority: HIGH + tags: + - tag: scope + value: availability + - uuid: 451c0b3c3bc149859ca76b324b8a990b + name: 'Blockbit NGFW: Proxy HTTP Service' + type: SNMP_AGENT + snmp_oid: 1.3.6.1.4.1.8072.1.3.2.4.1.2.8.83.69.82.86.73.67.69.83.7 + key: blockbit.service.proxy-http.status + trends: '0' + value_type: CHAR + tags: + - tag: Application + value: 'Services BLOCKBIT' + - tag: component + value: Service + triggers: + - uuid: 55911409f2d340f180e8fae6ca1c781c + expression: 'find(/Blockbit NGFW by SNMP/blockbit.service.proxy-http.status,1m,"like","enabled:stopped")=1' + name: 'Blockbit NGFW: Proxy HTTP service is not running' + priority: HIGH + tags: + - tag: scope + value: availability + - uuid: c98d9b96f35740c399ac89e2c7c06fd9 + name: 'Blockbit NGFW: Proxy POP3 Service' + type: SNMP_AGENT + snmp_oid: 1.3.6.1.4.1.8072.1.3.2.4.1.2.8.83.69.82.86.73.67.69.83.9 + key: blockbit.service.proxy-pop3.status + trends: '0' + value_type: CHAR + tags: + - tag: Application + value: 'Services BLOCKBIT' + - tag: component + value: Service + triggers: + - uuid: 5bbfcbefa3034530a38c7f723a4fe8a2 + expression: 'find(/Blockbit NGFW by SNMP/blockbit.service.proxy-pop3.status,1m,"like","enabled:stopped")=1' + name: 'Blockbit NGFW: Proxy POP3 service is not running' + priority: HIGH + tags: + - tag: scope + value: availability + - uuid: b7106de681f24573a435c31e96585b4c + name: 'Blockbit NGFW: Proxy SMTP Service' + type: SNMP_AGENT + snmp_oid: 1.3.6.1.4.1.8072.1.3.2.4.1.2.8.83.69.82.86.73.67.69.83.11 + key: blockbit.service.proxy-smtp.status + trends: '0' + value_type: CHAR + tags: + - tag: Application + value: 'Services BLOCKBIT' + - tag: component + value: Service + triggers: + - uuid: 975db0ad9f1442a1a51c0d245f8ba520 + expression: 'find(/Blockbit NGFW by SNMP/blockbit.service.proxy-smtp.status,1m,"like","enabled:stopped")=1' + name: 'Blockbit NGFW: Proxy SMTP service is not running' + priority: HIGH + tags: + - tag: scope + value: availability + - uuid: 6a397bea0f0d461db71b9adcd9c43cc7 + name: 'Blockbit NGFW: SSL Inspection Service' + type: SNMP_AGENT + snmp_oid: 1.3.6.1.4.1.8072.1.3.2.4.1.2.8.83.69.82.86.73.67.69.83.12 + key: blockbit.service.proxy-ssl.status + trends: '0' + value_type: CHAR + tags: + - tag: Application + value: 'Services BLOCKBIT' + - tag: component + value: Service + triggers: + - uuid: 5269e8c88f87451894857f1cd5c44ac5 + expression: 'find(/Blockbit NGFW by SNMP/blockbit.service.proxy-ssl.status,1m,"like","enabled:stopped")=1' + name: 'Blockbit NGFW: SSL Inspection service is not running' + priority: HIGH + tags: + - tag: scope + value: availability + - uuid: efb37dcb166d4510932ca69ad8499283 + name: 'Blockbit NGFW: Publisher Service' + type: SNMP_AGENT + snmp_oid: 1.3.6.1.4.1.8072.1.3.2.4.1.2.8.83.69.82.86.73.67.69.83.38 + key: blockbit.service.publisher.status + trends: '0' + value_type: CHAR + tags: + - tag: Application + value: 'Services BLOCKBIT' + - tag: component + value: Service + triggers: + - uuid: 96fb7784a2844c59b25c5e7d6c4b4695 + expression: 'find(/Blockbit NGFW by SNMP/blockbit.service.publisher.status,1m,"like","enabled:stopped")=1' + name: 'Blockbit NGFW: Publisher service is not running' + priority: HIGH + tags: + - tag: scope + value: availability + - uuid: d5f708a0f98b4e18a27a960f3aa96e3b + name: 'Blockbit NGFW: Reporter Service' + type: SNMP_AGENT + snmp_oid: 1.3.6.1.4.1.8072.1.3.2.4.1.2.8.83.69.82.86.73.67.69.83.37 + key: blockbit.service.reporter.status + trends: '0' + value_type: CHAR + tags: + - tag: Application + value: 'Services BLOCKBIT' + - tag: component + value: Service + triggers: + - uuid: ffa010a9352241d38a766a908cd11b86 + expression: 'find(/Blockbit NGFW by SNMP/blockbit.service.reporter.status,1m,"like","enabled:stopped")=1' + name: 'Blockbit NGFW: Reporter service is not running' + priority: HIGH + tags: + - tag: scope + value: availability + - uuid: 2178304ce243426ba4ecd409e1986204 + name: 'Blockbit NGFW: Router BGP Service' + type: SNMP_AGENT + snmp_oid: 1.3.6.1.4.1.8072.1.3.2.4.1.2.8.83.69.82.86.73.67.69.83.2 + key: blockbit.service.router-bgp.status + trends: '0' + value_type: CHAR + tags: + - tag: Application + value: 'Services BLOCKBIT' + - tag: component + value: Service + triggers: + - uuid: ee983870e9f241d08035d45c646a3140 + expression: 'find(/Blockbit NGFW by SNMP/blockbit.service.router-bgp.status,1m,"like","enabled:stopped")=1' + name: 'Blockbit NGFW: Router BGP service is not running' + priority: HIGH + tags: + - tag: scope + value: availability + - uuid: 377dec82b4bb4efc8a0d95ac026c9208 + name: 'Blockbit NGFW: Router NAT64 Service' + type: SNMP_AGENT + snmp_oid: 1.3.6.1.4.1.8072.1.3.2.4.1.2.8.83.69.82.86.73.67.69.83.6 + key: blockbit.service.router-nat64.status + trends: '0' + value_type: CHAR + tags: + - tag: Application + value: 'Services BLOCKBIT' + - tag: component + value: Service + triggers: + - uuid: 4f7118d989ef4b418fde178197e5a05d + expression: 'find(/Blockbit NGFW by SNMP/blockbit.service.router-nat64.status,1m,"like","enabled:stopped")=1' + name: 'Blockbit NGFW: Router NAT64 service is not running' + priority: HIGH + tags: + - tag: scope + value: availability + - uuid: ad6ec981ba694544bdc30af03dfd7f0b + name: 'Blockbit NGFW: Router OSPF Service' + type: SNMP_AGENT + snmp_oid: 1.3.6.1.4.1.8072.1.3.2.4.1.2.8.83.69.82.86.73.67.69.83.4 + key: blockbit.service.router-ospf.status + trends: '0' + value_type: CHAR + tags: + - tag: Application + value: 'Services BLOCKBIT' + - tag: component + value: Service + triggers: + - uuid: c0fcb3669e3248898d93a9fe6aa94355 + expression: 'find(/Blockbit NGFW by SNMP/blockbit.service.router-ospf.status,1m,"like","enabled:stopped")=1' + name: 'Blockbit NGFW: Router OSPF service is not running' + priority: HIGH + tags: + - tag: scope + value: availability + - uuid: ff1a7350889a42989160f7c91b7b99a0 + name: 'Blockbit NGFW: Router PIM Service' + type: SNMP_AGENT + snmp_oid: 1.3.6.1.4.1.8072.1.3.2.4.1.2.8.83.69.82.86.73.67.69.83.5 + key: blockbit.service.router-pim.status + trends: '0' + value_type: CHAR + tags: + - tag: Application + value: 'Services BLOCKBIT' + - tag: component + value: Service + triggers: + - uuid: a55f3885e64d47ce8ceecec705b057c7 + expression: 'find(/Blockbit NGFW by SNMP/blockbit.service.router-pim.status,1m,"like","enabled:stopped")=1' + name: 'Blockbit NGFW: Router PIM service is not running' + priority: HIGH + tags: + - tag: scope + value: availability + - uuid: e00e9138e2f04834b6e8b03061de8e4c + name: 'Blockbit NGFW: Router RIP Service' + type: SNMP_AGENT + snmp_oid: 1.3.6.1.4.1.8072.1.3.2.4.1.2.8.83.69.82.86.73.67.69.83.3 + key: blockbit.service.router-rip.status + trends: '0' + value_type: CHAR + tags: + - tag: Application + value: 'Services BLOCKBIT' + - tag: component + value: Service + triggers: + - uuid: 054badcbeca8433f927ef8cd9db70215 + expression: 'find(/Blockbit NGFW by SNMP/blockbit.service.router-rip.status,1m,"like","enabled:stopped")=1' + name: 'Blockbit NGFW: Router RIP service is not running' + priority: HIGH + tags: + - tag: scope + value: availability + - uuid: 11aa3beb51d04f689d0f832a0bf7cd36 + name: 'Blockbit NGFW: SD-WAN Service' + type: SNMP_AGENT + snmp_oid: 1.3.6.1.4.1.8072.1.3.2.4.1.2.8.83.69.82.86.73.67.69.83.15 + key: blockbit.service.sd-wan.status + trends: '0' + value_type: CHAR + tags: + - tag: Application + value: 'Services BLOCKBIT' + - tag: component + value: Service + triggers: + - uuid: 9736b0d762054b1ea4f72432b1988ad7 + expression: 'find(/Blockbit NGFW by SNMP/blockbit.service.sd-wan.status,1m,"like","enabled:stopped")=1' + name: 'Blockbit NGFW: SD-WAN service is not running' + priority: HIGH + tags: + - tag: scope + value: availability + - uuid: d41fd04289134db8a95cdd8a532b9164 + name: 'Blockbit NGFW: System-Admin Service' + type: SNMP_AGENT + snmp_oid: 1.3.6.1.4.1.8072.1.3.2.4.1.2.8.83.69.82.86.73.67.69.83.35 + key: blockbit.service.system-admin.status + trends: '0' + value_type: CHAR + tags: + - tag: Application + value: 'Services BLOCKBIT' + - tag: component + value: Service + triggers: + - uuid: 2d9a5a0db8554181bcf6522204491e1d + expression: 'find(/Blockbit NGFW by SNMP/blockbit.service.system-admin.status,1m,"like","enabled:stopped")=1' + name: 'Blockbit NGFW: System-Admin service is not running' + priority: HIGH + tags: + - tag: scope + value: availability + - uuid: f6bd5d09a8f84f27a02b047e291678d5 + name: 'Blockbit NGFW: System-DB Service' + type: SNMP_AGENT + snmp_oid: 1.3.6.1.4.1.8072.1.3.2.4.1.2.8.83.69.82.86.73.67.69.83.31 + key: blockbit.service.system-db.status + trends: '0' + value_type: CHAR + tags: + - tag: Application + value: 'Services BLOCKBIT' + - tag: component + value: Service + triggers: + - uuid: 398b1ef566b8404f83eacba33f10937e + expression: 'find(/Blockbit NGFW by SNMP/blockbit.service.system-db.status,1m,"like","enabled:stopped")=1' + name: 'Blockbit NGFW: System-DB service is not running' + priority: HIGH + tags: + - tag: scope + value: availability + - uuid: 3a986502e8374b32811c42e2052c96be + name: 'Blockbit NGFW: System-HA Service' + type: SNMP_AGENT + snmp_oid: 1.3.6.1.4.1.8072.1.3.2.4.1.2.8.83.69.82.86.73.67.69.83.36 + key: blockbit.service.system-ha.status + trends: '0' + value_type: CHAR + tags: + - tag: Application + value: 'Services BLOCKBIT' + - tag: component + value: Service + triggers: + - uuid: a0925236171e453eb5c1f60c69df98d7 + expression: 'find(/Blockbit NGFW by SNMP/blockbit.service.system-ha.status,1m,"like","enabled:stopped")=1' + name: 'Blockbit NGFW: System-HA service is not running' + priority: HIGH + tags: + - tag: scope + value: availability + - uuid: 99faf92fe912489399ce5e7a9b2cac1f + name: 'Blockbit NGFW: System-Storage Service' + type: SNMP_AGENT + snmp_oid: 1.3.6.1.4.1.8072.1.3.2.4.1.2.8.83.69.82.86.73.67.69.83.33 + key: blockbit.service.system-storage.status + trends: '0' + value_type: CHAR + tags: + - tag: Application + value: 'Services BLOCKBIT' + - tag: component + value: Service + triggers: + - uuid: 2ae36b4a78914caeb21d4f0884a181c3 + expression: 'find(/Blockbit NGFW by SNMP/blockbit.service.system-storage.status,1m,"like","enabled:stopped")=1' + name: 'Blockbit NGFW: System-Storage service is not running' + priority: HIGH + tags: + - tag: scope + value: availability + - uuid: 1ff05e12d09e4a878010eede280e6356 + name: 'Blockbit NGFW: System-Syslog Service' + type: SNMP_AGENT + snmp_oid: 1.3.6.1.4.1.8072.1.3.2.4.1.2.8.83.69.82.86.73.67.69.83.34 + key: blockbit.service.system-syslog.status + trends: '0' + value_type: CHAR + tags: + - tag: Application + value: 'Services BLOCKBIT' + - tag: component + value: Service + triggers: + - uuid: 3b4094e91ed8437c8b0e0e4c8350de75 + expression: 'find(/Blockbit NGFW by SNMP/blockbit.service.system-syslog.status,1m,"like","enabled:stopped")=1' + name: 'Blockbit NGFW: System-Syslog service is not running' + priority: HIGH + tags: + - tag: scope + value: availability + - uuid: 463b3ef896614b26b24feac6a27e738e + name: 'Blockbit NGFW: System-Terminal Service' + type: SNMP_AGENT + snmp_oid: 1.3.6.1.4.1.8072.1.3.2.4.1.2.8.83.69.82.86.73.67.69.83.32 + key: blockbit.service.system-terminal.status + trends: '0' + value_type: CHAR + tags: + - tag: Application + value: 'Services BLOCKBIT' + - tag: component + value: Service + triggers: + - uuid: fb4700c8172043389c958ef90407f9c6 + expression: 'find(/Blockbit NGFW by SNMP/blockbit.service.system-terminal.status,1m,"like","enabled:stopped")=1' + name: 'Blockbit NGFW: System-Terminal service is not running' + priority: HIGH + tags: + - tag: scope + value: availability + - uuid: c56f0457bfed49a8b36a1beb7b7b158f + name: 'Blockbit NGFW: VPN IPSEC Service' + type: SNMP_AGENT + snmp_oid: 1.3.6.1.4.1.8072.1.3.2.4.1.2.8.83.69.82.86.73.67.69.83.24 + key: blockbit.service.vpn-ipsec.status + trends: '0' + value_type: CHAR + tags: + - tag: Application + value: 'Services BLOCKBIT' + - tag: component + value: Service + triggers: + - uuid: b6c5162f35b1439da1b0be073dba6c2f + expression: 'find(/Blockbit NGFW by SNMP/blockbit.service.vpn-ipsec.status,1m,"like","enabled:stopped")=1' + name: 'Blockbit NGFW: VPN IPsec service is not running' + priority: HIGH + tags: + - tag: scope + value: availability + - uuid: 374f511f54af4cdca1b47240fa582406 + name: 'Blockbit NGFW: VPN Monitor Service' + type: SNMP_AGENT + snmp_oid: 1.3.6.1.4.1.8072.1.3.2.4.1.2.8.83.69.82.86.73.67.69.83.40 + key: blockbit.service.vpn-monitor.status + trends: '0' + value_type: CHAR + tags: + - tag: Application + value: 'Services BLOCKBIT' + - tag: component + value: Service + triggers: + - uuid: 349ef4b819f94b0189287409fe749eb3 + expression: 'find(/Blockbit NGFW by SNMP/blockbit.service.vpn-monitor.status,1m,"like","enabled:stopped")=1' + name: 'Blockbit NGFW: VPN Monitor service is not running' + priority: HIGH + tags: + - tag: scope + value: availability + - uuid: 1c9e733ed4904b2b8719c84fe26b4541 + name: 'Blockbit NGFW: VPN RAS NG Service' + type: SNMP_AGENT + snmp_oid: 1.3.6.1.4.1.8072.1.3.2.4.1.2.8.83.69.82.86.73.67.69.83.43 + key: blockbit.service.vpn-ng.status + trends: '0' + value_type: CHAR + tags: + - tag: Application + value: 'Services BLOCKBIT' + - tag: component + value: Service + triggers: + - uuid: 9376842268ff4ca995c8932b2f7c2440 + expression: 'find(/Blockbit NGFW by SNMP/blockbit.service.vpn-ng.status,1m,"like","enabled:stopped")=1' + name: 'Blockbit NGFW: VPN RAS NG service is not running' + priority: HIGH + tags: + - tag: scope + value: availability + - uuid: 3120b14fa0f24333a7e200ad00efc9cf + name: 'Blockbit NGFW: VPN SSL Service' + type: SNMP_AGENT + snmp_oid: 1.3.6.1.4.1.8072.1.3.2.4.1.2.8.83.69.82.86.73.67.69.83.25 + key: blockbit.service.vpn-ssl.status + trends: '0' + value_type: CHAR + tags: + - tag: Application + value: 'Services BLOCKBIT' + - tag: component + value: Service + triggers: + - uuid: c341d5d84f0c49aea411be428c940248 + expression: 'find(/Blockbit NGFW by SNMP/blockbit.service.vpn-ssl.status,1m,"like","enabled:stopped")=1' + name: 'Blockbit NGFW: VPN SSL service is not running' + priority: HIGH + tags: + - tag: scope + value: availability + - uuid: 1140125c460043809931630e67b6ac46 + name: 'Blockbit NGFW: Web Filter Service' + type: SNMP_AGENT + snmp_oid: 1.3.6.1.4.1.8072.1.3.2.4.1.2.8.83.69.82.86.73.67.69.83.13 + key: blockbit.service.webfilter.status + trends: '0' + value_type: CHAR + tags: + - tag: Application + value: 'Services BLOCKBIT' + - tag: component + value: Service + triggers: + - uuid: e979c99a5f224683b8edd921701c463f + expression: 'find(/Blockbit NGFW by SNMP/blockbit.service.webfilter.status,1m,"like","enabled:stopped")=1' + name: 'Blockbit NGFW: Web Filter service is not running' + priority: HIGH + tags: + - tag: scope + value: availability + - uuid: 808f65a121384fbb94bcb19583e27f17 + name: 'Blockbit NGFW: WWAN Service' + type: SNMP_AGENT + snmp_oid: 1.3.6.1.4.1.8072.1.3.2.4.1.2.8.83.69.82.86.73.67.69.83.14 + key: blockbit.service.wwan.status + trends: '0' + value_type: CHAR + tags: + - tag: Application + value: 'Services BLOCKBIT' + - tag: component + value: Service + triggers: + - uuid: 719d634ca0b24d06a5dbbb6bcf596480 + expression: 'find(/Blockbit NGFW by SNMP/blockbit.service.wwan.status,1m,"like","enabled:stopped")=1' + name: 'Blockbit NGFW: WWAN service is not running' + priority: HIGH + tags: + - tag: scope + value: availability + - uuid: 5a9fe57bcf0e475a84175532e906ac0c + name: 'Blockbit NGFW: SNMP Service' + type: SNMP_AGENT + snmp_oid: 1.3.6.1.4.1.8072.1.3.2.4.1.2.8.83.69.82.86.73.67.69.83.19 + key: blockbit.snmp.status + trends: '0' + value_type: CHAR + tags: + - tag: Application + value: 'Services BLOCKBIT' + - tag: component + value: Service + triggers: + - uuid: 6625df0c67944c668a62ad851f1c30bb + expression: 'find(/Blockbit NGFW by SNMP/blockbit.snmp.status,1m,"like","enabled:stopped")=1' + name: 'Blockbit NGFW: SNMP service is not running' + priority: HIGH + tags: + - tag: scope + value: availability + - uuid: 1a78a8a0b5ef46f0b49e1eaee35197db + name: 'Blockbit NGFW: Throughput RX+TX' + type: CALCULATED + key: blockbit.throughput.rx.tx + delay: 30s + units: bps + params: (last(//blockbit.traffic.sum.rx)+last(//blockbit.traffic.sum.tx)) + tags: + - tag: Application + value: 'Services BLOCKBIT' + - uuid: a25c97e5aa5548b38ca1fa8d7c9ed70e + name: 'Blockbit NGFW: Incoming traffic summarized - RX' + type: SNMP_AGENT + snmp_oid: 1.3.6.1.4.1.8072.1.3.2.4.1.2.10.84.82.65.70.70.73.67.83.85.77.1 + key: blockbit.traffic.sum.rx + units: bps + tags: + - tag: Application + value: 'Services BLOCKBIT' + - uuid: b8a1e7c14bfc459f8461e438290011bc + name: 'Blockbit NGFW: Outbound traffic summarized - TX' + type: SNMP_AGENT + snmp_oid: 1.3.6.1.4.1.8072.1.3.2.4.1.2.10.84.82.65.70.70.73.67.83.85.77.2 + key: blockbit.traffic.sum.tx + units: bps + tags: + - tag: Application + value: 'Services BLOCKBIT' + - uuid: a0bc17f40899405ab826f50b20455456 + name: 'Blockbit NGFW: ICMP ping' + type: SIMPLE + key: icmpping + history: 1w + valuemap: + name: 'Service state' + tags: + - tag: component + value: health + - tag: component + value: network + triggers: + - uuid: 282483c7f82f427db30790fee8f2389e + expression: 'max(/Blockbit NGFW by SNMP/icmpping,#3)=0' + name: 'Blockbit NGFW: Unavailable by ICMP ping' + priority: HIGH + description: 'Last three attempts returned timeout. Please check device connectivity.' + tags: + - tag: scope + value: availability + - uuid: 344620891a38490594d33835c7db045c + name: 'Blockbit NGFW: ICMP loss' + type: SIMPLE + key: icmppingloss + history: 1w + value_type: FLOAT + units: '%' + tags: + - tag: component + value: health + - tag: component + value: network + triggers: + - uuid: 3ad4edd2a9614b58815d1e665f46c947 + expression: 'min(/Blockbit NGFW by SNMP/icmppingloss,5m)>{$ICMP_LOSS_WARN} and min(/Blockbit NGFW by SNMP/icmppingloss,5m)<100' + name: 'Blockbit NGFW: High ICMP ping loss' + opdata: 'Loss: {ITEM.LASTVALUE1}' + priority: WARNING + dependencies: + - name: 'Blockbit NGFW: Unavailable by ICMP ping' + expression: 'max(/Blockbit NGFW by SNMP/icmpping,#3)=0' + tags: + - tag: scope + value: availability + - tag: scope + value: performance + - uuid: 559b844671a2488385cf22b50dbca26e + name: 'Blockbit NGFW: ICMP response time' + type: SIMPLE + key: icmppingsec + history: 1w + value_type: FLOAT + units: s + tags: + - tag: component + value: health + - tag: component + value: network + triggers: + - uuid: 3cf781deb9d74160855dbb3d3d9f52da + expression: 'avg(/Blockbit NGFW by SNMP/icmppingsec,5m)>{$ICMP_RESPONSE_TIME_WARN}' + name: 'Blockbit NGFW: High ICMP ping response time' + opdata: 'Value: {ITEM.LASTVALUE1}' + priority: WARNING + dependencies: + - name: 'Blockbit NGFW: High ICMP ping loss' + expression: 'min(/Blockbit NGFW by SNMP/icmppingloss,5m)>{$ICMP_LOSS_WARN} and min(/Blockbit NGFW by SNMP/icmppingloss,5m)<100' + - name: 'Blockbit NGFW: Unavailable by ICMP ping' + expression: 'max(/Blockbit NGFW by SNMP/icmpping,#3)=0' + tags: + - tag: scope + value: availability + - tag: scope + value: performance + - uuid: 9f8f1a1a1bd045e897b4bdc84f257b0e + name: 'Blockbit NGFW: SNMP walk EtherLike-MIB interfaces' + type: SNMP_AGENT + snmp_oid: 'walk[1.3.6.1.2.1.10.7.2.1.19,1.3.6.1.2.1.2.2.1.8,1.3.6.1.2.1.31.1.1.1.18,1.3.6.1.2.1.31.1.1.1.1,1.3.6.1.2.1.2.2.1.2]' + key: net.if.duplex.walk + history: '0' + trends: '0' + value_type: TEXT + description: 'Discovering interfaces from IF-MIB and EtherLike-MIB. Interfaces with up(1) Operational Status are discovered.' + tags: + - tag: component + value: raw + - uuid: 9001b4d551054fef845dd566f655e923 + name: 'Blockbit NGFW: SNMP walk network interfaces' + type: SNMP_AGENT + snmp_oid: 'walk[1.3.6.1.2.1.2.2.1.8,1.3.6.1.2.1.2.2.1.7,1.3.6.1.2.1.31.1.1.1.18,1.3.6.1.2.1.31.1.1.1.1,1.3.6.1.2.1.2.2.1.2,1.3.6.1.2.1.2.2.1.3,1.3.6.1.2.1.31.1.1.1.6,1.3.6.1.2.1.31.1.1.1.10,1.3.6.1.2.1.2.2.1.14,1.3.6.1.2.1.2.2.1.20,1.3.6.1.2.1.2.2.1.19,1.3.6.1.2.1.2.2.1.13,1.3.6.1.2.1.31.1.1.1.15]' + key: net.if.walk + history: '0' + trends: '0' + value_type: TEXT + description: 'Discovering interfaces from IF-MIB.' + tags: + - tag: component + value: raw + - uuid: dea6966c3d154332b61c19ec5c9c77ee + name: 'Blockbit NGFW: SNMP traps (fallback)' + type: SNMP_TRAP + key: snmptrap.fallback + delay: '0' + history: 2w + trends: '0' + value_type: LOG + description: 'The item is used to collect all SNMP traps unmatched by other snmptrap items' + logtimefmt: 'hh:mm:sszyyyy/MM/dd' + tags: + - tag: component + value: network + - uuid: e8070d89c5344e62a4e3d0990f7deaf4 + name: 'Blockbit NGFW: SNMP traps (regex)' + type: SNMP_TRAP + key: 'snmptrap[STRING: "(INFO|WARN|CRITICAL):]' + delay: '0' + history: 2w + trends: '0' + value_type: TEXT + preprocessing: + - type: REGEX + parameters: + - 'value=STRING: "(.*)"' + - \1 + tags: + - tag: component + value: network + triggers: + - uuid: 0acc6c4a285044bd88e02b9c985e2e06 + expression: 'find(/Blockbit NGFW by SNMP/snmptrap[STRING: "(INFO|WARN|CRITICAL):],1m,"like","CRITICAL:")=1' + recovery_mode: RECOVERY_EXPRESSION + recovery_expression: 'nodata(/Blockbit NGFW by SNMP/snmptrap[STRING: "(INFO|WARN|CRITICAL):],5)=1' + name: 'Blockbit NGFW: SNMP Trap Notify CRITICAL' + priority: HIGH + - uuid: d0e72e8757c14cfb9ca380c66cd4ce7e + expression: 'find(/Blockbit NGFW by SNMP/snmptrap[STRING: "(INFO|WARN|CRITICAL):],1m,"like","INFO:")=1' + recovery_mode: RECOVERY_EXPRESSION + recovery_expression: 'nodata(/Blockbit NGFW by SNMP/snmptrap[STRING: "(INFO|WARN|CRITICAL):],5)=1' + name: 'Blockbit NGFW: SNMP Trap Notify INFO' + priority: INFO + manual_close: 'YES' + - uuid: 89502d400d524f7e8858236641285201 + expression: 'find(/Blockbit NGFW by SNMP/snmptrap[STRING: "(INFO|WARN|CRITICAL):],1m,"like","WARN:")=1' + recovery_mode: RECOVERY_EXPRESSION + recovery_expression: 'nodata(/Blockbit NGFW by SNMP/snmptrap[STRING: "(INFO|WARN|CRITICAL):],5)=1' + name: 'Blockbit NGFW: SNMP Trap Notify WARN' + priority: WARNING + - uuid: 3c9dc5b08176405bb153e11d4d430828 + name: 'Blockbit NGFW: System contact details' + type: SNMP_AGENT + snmp_oid: 1.3.6.1.2.1.1.4.0 + key: 'system.contact[sysContact.0]' + delay: 15m + history: 2w + trends: '0' + value_type: CHAR + description: | + MIB: SNMPv2-MIB + The textual identification of the contact person for this managed node, together with information on how to contact this person. If no contact information is known, the value is the zero-length string. + inventory_link: CONTACT + preprocessing: + - type: DISCARD_UNCHANGED_HEARTBEAT + parameters: + - 12h + tags: + - tag: component + value: system + - uuid: 2a1acf57cf654b8f9ac2d5d6ddb0e5ee + name: 'Blockbit NGFW: Interrupts per second' + type: SNMP_AGENT + snmp_oid: 1.3.6.1.4.1.2021.11.59.0 + key: 'system.cpu.intr[ssRawInterrupts.0]' + history: 7d + value_type: FLOAT + preprocessing: + - type: CHANGE_PER_SECOND + parameters: + - '' + tags: + - tag: component + value: cpu + - uuid: 5f251c9550c544cab86bd9c3937b7205 + name: 'Blockbit NGFW: Load average (1m avg)' + type: SNMP_AGENT + snmp_oid: '1.3.6.1.4.1.2021.10.1.3["index","1.3.6.1.4.1.2021.10.1.2", "Load-1"]' + key: 'system.cpu.load.avg1[laLoad.1]' + history: 7d + value_type: FLOAT + description: 'MIB: UCD-SNMP-MIB' + tags: + - tag: component + value: cpu + - uuid: c690dd0978b74e0f93b6932eb65b62c4 + name: 'Blockbit NGFW: Load average (5m avg)' + type: SNMP_AGENT + snmp_oid: '1.3.6.1.4.1.2021.10.1.3["index","1.3.6.1.4.1.2021.10.1.2", "Load-5"]' + key: 'system.cpu.load.avg5[laLoad.2]' + history: 7d + value_type: FLOAT + description: 'MIB: UCD-SNMP-MIB' + tags: + - tag: component + value: cpu + - uuid: 37cd376528ed463caac6a0cb841b3cc3 + name: 'Blockbit NGFW: Load average (15m avg)' + type: SNMP_AGENT + snmp_oid: '1.3.6.1.4.1.2021.10.1.3["index","1.3.6.1.4.1.2021.10.1.2", "Load-15"]' + key: 'system.cpu.load.avg15[laLoad.3]' + history: 7d + value_type: FLOAT + description: 'MIB: UCD-SNMP-MIB' + tags: + - tag: component + value: cpu + - uuid: 13ed6912d37e43a3a068ca6d6f113466 + name: 'Blockbit NGFW: Number of CPUs' + type: DEPENDENT + key: 'system.cpu.num[snmp]' + delay: '0' + history: 7d + description: 'Count the number of CPU cores by counting number of cores discovered in hrProcessorTable using LLD.' + preprocessing: + - type: SNMP_WALK_TO_JSON + parameters: + - '{#SNMPVALUE}' + - 1.3.6.1.2.1.25.3.3.1.1 + - '0' + - type: JAVASCRIPT + parameters: + - | + //count the number of cores + return JSON.parse(value).length; + master_item: + key: system.cpu.walk + tags: + - tag: component + value: cpu + - uuid: 29e5618240b44dd6868cebbffcbc8046 + name: 'Blockbit NGFW: Context switches per second' + type: SNMP_AGENT + snmp_oid: 1.3.6.1.4.1.2021.11.60.0 + key: 'system.cpu.switches[ssRawContexts.0]' + history: 7d + value_type: FLOAT + preprocessing: + - type: CHANGE_PER_SECOND + parameters: + - '' + tags: + - tag: component + value: cpu + - uuid: 14dfa166fbfb4fcaae2b8a0687d4e9ca + name: 'Blockbit NGFW: SNMP walk system CPUs' + type: SNMP_AGENT + snmp_oid: 'walk[1.3.6.1.2.1.25.3.3.1.1,1.3.6.1.4.1.2021.11.53.0,1.3.6.1.4.1.2021.11.52.0,1.3.6.1.4.1.2021.11.50.0,1.3.6.1.4.1.2021.11.64.0,1.3.6.1.4.1.2021.11.61.0,1.3.6.1.4.1.2021.11.51.0,1.3.6.1.4.1.2021.11.54.0,1.3.6.1.4.1.2021.11.56.0,1.3.6.1.4.1.2021.11.65.0,1.3.6.1.4.1.2021.11.66.0]' + key: system.cpu.walk + history: '0' + trends: '0' + value_type: TEXT + description: | + MIB: HOST-RESOURCES-MIB + Discovering system CPUs. + tags: + - tag: component + value: raw + - uuid: 8d460364eff6455c8eb8bfff1c35ee81 + name: 'Blockbit NGFW: System description' + type: SNMP_AGENT + snmp_oid: 1.3.6.1.2.1.1.1.0 + key: 'system.descr[sysDescr.0]' + delay: 15m + history: 2w + trends: '0' + value_type: CHAR + description: | + MIB: SNMPv2-MIB + A textual description of the entity. This value should + include the full name and version identification of the system's hardware type, software operating-system, and + networking software. + preprocessing: + - type: DISCARD_UNCHANGED_HEARTBEAT + parameters: + - 12h + tags: + - tag: component + value: system + - uuid: 12d6796fa43a4140ba828600dc8dc437 + name: 'Blockbit NGFW: Uptime (hardware)' + type: SNMP_AGENT + snmp_oid: 1.3.6.1.2.1.25.1.1.0 + key: 'system.hw.uptime[hrSystemUptime.0]' + delay: 30s + history: 2w + trends: '0' + units: uptime + description: | + MIB: HOST-RESOURCES-MIB + The amount of time since this host was last initialized. Note that this is different from sysUpTime in the SNMPv2-MIB [RFC1907] because sysUpTime is the uptime of the network management portion of the system. + preprocessing: + - type: CHECK_NOT_SUPPORTED + parameters: + - '' + error_handler: CUSTOM_VALUE + error_handler_params: '0' + - type: MULTIPLIER + parameters: + - '0.01' + tags: + - tag: component + value: system + - uuid: ed1603d39d5244b3ac1c69d1b145ad9f + name: 'Blockbit NGFW: System location' + type: SNMP_AGENT + snmp_oid: 1.3.6.1.2.1.1.6.0 + key: 'system.location[sysLocation.0]' + delay: 15m + history: 2w + trends: '0' + value_type: CHAR + description: | + MIB: SNMPv2-MIB + The physical location of this node (e.g., `telephone closet, 3rd floor'). If the location is unknown, the value is the zero-length string. + inventory_link: LOCATION + preprocessing: + - type: DISCARD_UNCHANGED_HEARTBEAT + parameters: + - 12h + tags: + - tag: component + value: system + - uuid: 0676ded8e95f4de288dec53aed33c87b + name: 'Blockbit NGFW: System name' + type: SNMP_AGENT + snmp_oid: 1.3.6.1.2.1.1.5.0 + key: system.name + delay: 15m + history: 2w + trends: '0' + value_type: CHAR + description: | + MIB: SNMPv2-MIB + An administratively-assigned name for this managed node.By convention, this is the node's fully-qualified domain name. If the name is unknown, the value is the zero-length string. + inventory_link: NAME + preprocessing: + - type: DISCARD_UNCHANGED_HEARTBEAT + parameters: + - 12h + tags: + - tag: component + value: system + triggers: + - uuid: 4727f8b153714ceaadee6bf8645ac59b + expression: 'last(/Blockbit NGFW by SNMP/system.name,#1)<>last(/Blockbit NGFW by SNMP/system.name,#2) and length(last(/Blockbit NGFW by SNMP/system.name))>0' + name: 'Blockbit NGFW: System name has changed' + event_name: 'Blockbit NGFW: System name has changed (new name: {ITEM.VALUE})' + priority: INFO + description: 'The name of the system has changed. Acknowledge to close the problem manually.' + manual_close: 'YES' + tags: + - tag: scope + value: notice + - tag: scope + value: security + - uuid: c37ad0a2874743b2a5c775ed4614c5a7 + name: 'Blockbit NGFW: Uptime (network)' + type: SNMP_AGENT + snmp_oid: 1.3.6.1.2.1.1.3.0 + key: 'system.net.uptime[sysUpTime.0]' + delay: 30s + history: 2w + trends: '0' + units: uptime + description: | + MIB: SNMPv2-MIB + The time (in hundredths of a second) since the network management portion of the system was last re-initialized. + preprocessing: + - type: MULTIPLIER + parameters: + - '0.01' + tags: + - tag: component + value: system + - uuid: e66f3e94f5b74ce287fd2687a91e2d5a + name: 'Blockbit NGFW: System object ID' + type: SNMP_AGENT + snmp_oid: 1.3.6.1.2.1.1.2.0 + key: 'system.objectid[sysObjectID.0]' + delay: 15m + history: 2w + trends: '0' + value_type: CHAR + description: | + MIB: SNMPv2-MIB + The vendor's authoritative identification of the network management subsystem contained in the entity. This value is allocated within the SMI enterprises subtree (1.3.6.1.4.1) and provides an easy and unambiguous means for determining`what kind of box' is being managed. For example, if vendor`Flintstones, Inc.' was assigned the subtree1.3.6.1.4.1.4242, it could assign the identifier 1.3.6.1.4.1.4242.1.1 to its `Fred Router'. + preprocessing: + - type: DISCARD_UNCHANGED_HEARTBEAT + parameters: + - 12h + tags: + - tag: component + value: system + - uuid: 23c26ba446274ada9d525e7f0c3b610e + name: 'Blockbit NGFW: Free swap space' + type: SNMP_AGENT + snmp_oid: 1.3.6.1.4.1.2021.4.4.0 + key: 'system.swap.free[memAvailSwap.0]' + history: 7d + units: B + description: | + MIB: UCD-SNMP-MIB + The amount of swap space currently unused or available. + preprocessing: + - type: MULTIPLIER + parameters: + - '1024' + tags: + - tag: component + value: memory + - tag: component + value: storage + - uuid: a07e0a41de0341c6b086a2bf4ec9eb70 + name: 'Blockbit NGFW: Free swap space in %' + type: CALCULATED + key: 'system.swap.pfree[snmp]' + history: 7d + value_type: FLOAT + units: '%' + params: 'last(//system.swap.free[memAvailSwap.0])/last(//system.swap.total[memTotalSwap.0])*100' + description: 'The free space of the swap volume/file expressed in %.' + tags: + - tag: component + value: memory + - tag: component + value: storage + - uuid: 0f5dcdfeaedd44d481459f458c7acea0 + name: 'Blockbit NGFW: Total swap space' + type: SNMP_AGENT + snmp_oid: 1.3.6.1.4.1.2021.4.3.0 + key: 'system.swap.total[memTotalSwap.0]' + history: 7d + units: B + description: | + MIB: UCD-SNMP-MIB + The total amount of swap space configured for this host. + preprocessing: + - type: MULTIPLIER + parameters: + - '1024' + tags: + - tag: component + value: memory + - tag: component + value: storage + - uuid: 153451f8d61a400b8a105f7985b5a728 + name: 'Blockbit NGFW: SNMP walk block devices' + type: SNMP_AGENT + snmp_oid: 'walk[1.3.6.1.4.1.2021.13.15.1.1.2,1.3.6.1.4.1.2021.13.15.1.1.5,1.3.6.1.4.1.2021.13.15.1.1.6,1.3.6.1.4.1.2021.13.15.1.1.9]' + key: vfs.dev.walk + history: '0' + trends: '0' + value_type: TEXT + description: 'Block devices are discovered from UCD-DISKIO-MIB::diskIOTable (http://net-snmp.sourceforge.net/docs/mibs/ucdDiskIOMIB.html#diskIOTable).' + tags: + - tag: component + value: raw + - uuid: cab97f88da1246b9b16a59c353171bf8 + name: 'Blockbit NGFW: SNMP walk mounted filesystems' + type: SNMP_AGENT + snmp_oid: 'walk[1.3.6.1.2.1.25.2.3.1.3,1.3.6.1.2.1.25.2.3.1.2,1.3.6.1.2.1.25.2.3.1.4,1.3.6.1.2.1.25.2.3.1.5,1.3.6.1.2.1.25.2.3.1.6]' + key: vfs.fs.walk + history: '0' + trends: '0' + value_type: TEXT + description: | + MIB: HOST-RESOURCES-MIB + HOST-RESOURCES-MIB::hrStorage discovery. + tags: + - tag: component + value: raw + - uuid: 725dd2b8c6a54cb8b5867083f6c09a60 + name: 'Blockbit NGFW: Available memory' + type: CALCULATED + key: 'vm.memory.available[snmp]' + history: 7d + units: B + params: 'last(//vm.memory.free[memAvailReal.0])+last(//vm.memory.buffers[memBuffer.0])+last(//vm.memory.cached[memCached.0])' + description: 'Please note that memory utilization is a rough estimate, since memory available is calculated as free+buffers+cached, which is not 100% accurate, but the best we can get using SNMP.' + tags: + - tag: component + value: memory + - uuid: d2b5edd367c3420f8af1460fd0892184 + name: 'Blockbit NGFW: Memory (buffers)' + type: SNMP_AGENT + snmp_oid: 1.3.6.1.4.1.2021.4.14.0 + key: 'vm.memory.buffers[memBuffer.0]' + history: 7d + units: B + description: | + MIB: UCD-SNMP-MIB + Memory used by kernel buffers (Buffers in /proc/meminfo). + preprocessing: + - type: MULTIPLIER + parameters: + - '1024' + tags: + - tag: component + value: memory + - uuid: b826963df90c40b19a1c9b18b6752b65 + name: 'Blockbit NGFW: Memory (cached)' + type: SNMP_AGENT + snmp_oid: 1.3.6.1.4.1.2021.4.15.0 + key: 'vm.memory.cached[memCached.0]' + history: 7d + units: B + description: | + MIB: UCD-SNMP-MIB + Memory used by the page cache and slabs (Cached and Slab in /proc/meminfo). + preprocessing: + - type: MULTIPLIER + parameters: + - '1024' + tags: + - tag: component + value: memory + - uuid: 97d0c84e6bce40028d1c4762adb8b8f6 + name: 'Blockbit NGFW: Free memory' + type: SNMP_AGENT + snmp_oid: 1.3.6.1.4.1.2021.4.6.0 + key: 'vm.memory.free[memAvailReal.0]' + history: 7d + units: B + description: 'MIB: UCD-SNMP-MIB' + preprocessing: + - type: MULTIPLIER + parameters: + - '1024' + tags: + - tag: component + value: memory + - uuid: 7cc7c2a5b350451181b26b470c9eb726 + name: 'Blockbit NGFW: Total memory' + type: SNMP_AGENT + snmp_oid: 1.3.6.1.4.1.2021.4.5.0 + key: 'vm.memory.total[memTotalReal.0]' + history: 7d + units: B + description: | + MIB: UCD-SNMP-MIB + The total memory expressed in bytes. + preprocessing: + - type: MULTIPLIER + parameters: + - '1024' + tags: + - tag: component + value: memory + - uuid: fdade418315a4aceb5055ae41e87eece + name: 'Blockbit NGFW: Memory utilization' + type: CALCULATED + key: 'vm.memory.util[snmp]' + history: 7d + value_type: FLOAT + units: '%' + params: '(last(//vm.memory.total[memTotalReal.0])-(last(//vm.memory.free[memAvailReal.0])+last(//vm.memory.buffers[memBuffer.0])+last(//vm.memory.cached[memCached.0])))/last(//vm.memory.total[memTotalReal.0])*100' + description: 'Please note that memory utilization is a rough estimate, since memory available is calculated as free+buffers+cached, which is not 100% accurate, but the best we can get using SNMP.' + tags: + - tag: component + value: memory + triggers: + - uuid: b082134e0dd64854b37855c80e39c158 + expression: 'min(/Blockbit NGFW by SNMP/vm.memory.util[snmp],5m)>{$MEMORY.UTIL.MAX}' + name: 'Blockbit NGFW: High memory utilization' + event_name: 'Blockbit NGFW: High memory utilization (>{$MEMORY.UTIL.MAX}% for 5m)' + priority: AVERAGE + description: 'The system is running out of free memory.' + dependencies: + - name: 'Blockbit NGFW: Lack of available memory' + expression: 'max(/Blockbit NGFW by SNMP/vm.memory.available[snmp],5m)<{$MEMORY.AVAILABLE.MIN} and last(/Blockbit NGFW by SNMP/vm.memory.total[memTotalReal.0])>0' + tags: + - tag: scope + value: capacity + - tag: scope + value: performance + - uuid: 02b719d4a60e46dfa3f0ce6b37b1f508 + name: 'Blockbit NGFW: SNMP agent availability' + type: INTERNAL + key: 'zabbix[host,snmp,available]' + history: 7d + description: | + Availability of SNMP checks on the host. The value of this item corresponds to availability icons in the host list. + Possible value: + 0 - not available + 1 - available + 2 - unknown + valuemap: + name: zabbix.host.available + tags: + - tag: component + value: health + - tag: component + value: network + triggers: + - uuid: 7d840bf33bdb48bd89ccf1098c9628c7 + expression: 'max(/Blockbit NGFW by SNMP/zabbix[host,snmp,available],{$SNMP.TIMEOUT})=0' + name: 'Blockbit NGFW: No SNMP data collection' + opdata: 'Current state: {ITEM.LASTVALUE1}' + priority: WARNING + description: 'SNMP is not available for polling. Please check device connectivity and SNMP settings.' + dependencies: + - name: 'Blockbit NGFW: Unavailable by ICMP ping' + expression: 'max(/Blockbit NGFW by SNMP/icmpping,#3)=0' + tags: + - tag: scope + value: availability + discovery_rules: + - uuid: 989533f531a24a59b36219b6be9928ce + name: 'CPU discovery' + type: DEPENDENT + key: 'cpu.discovery[snmp]' + delay: '0' + description: 'This discovery will create set of per core CPU metrics from UCD-SNMP-MIB, using {#CPU.COUNT} in preprocessing. That''s the only reason why LLD is used.' + item_prototypes: + - uuid: 7c2d5c0c5774499faf246a39e3644c78 + name: 'Blockbit NGFW: CPU guest time' + type: DEPENDENT + key: 'system.cpu.guest[ssCpuRawGuest.{#SNMPINDEX}]' + delay: '0' + history: 7d + value_type: FLOAT + units: '%' + description: | + MIB: UCD-SNMP-MIB + Guest time - the time spent on running a virtual CPU for a guest operating system. + preprocessing: + - type: SNMP_WALK_VALUE + parameters: + - 1.3.6.1.4.1.2021.11.65.0 + - '0' + - type: CHANGE_PER_SECOND + parameters: + - '' + - type: JAVASCRIPT + parameters: + - | + //to get utilization in %, divide by N, where N is number of cores. + return value/{#CPU.COUNT} + master_item: + key: system.cpu.walk + tags: + - tag: component + value: cpu + - uuid: 4db0942ab0c74156808ceb47b96b8ef0 + name: 'Blockbit NGFW: CPU guest nice time' + type: DEPENDENT + key: 'system.cpu.guest_nice[ssCpuRawGuestNice.{#SNMPINDEX}]' + delay: '0' + history: 7d + value_type: FLOAT + units: '%' + description: | + MIB: UCD-SNMP-MIB + The time spent on running a niced guest (a virtual CPU for guest operating systems under the control of the Linux kernel). + preprocessing: + - type: SNMP_WALK_VALUE + parameters: + - 1.3.6.1.4.1.2021.11.66.0 + - '0' + - type: CHANGE_PER_SECOND + parameters: + - '' + - type: JAVASCRIPT + parameters: + - | + //to get utilization in %, divide by N, where N is number of cores. + return value/{#CPU.COUNT} + master_item: + key: system.cpu.walk + tags: + - tag: component + value: cpu + - uuid: 07cd7de43c074bab930cc9197f6dc407 + name: 'Blockbit NGFW: CPU idle time' + type: DEPENDENT + key: 'system.cpu.idle[ssCpuRawIdle.{#SNMPINDEX}]' + delay: '0' + history: 7d + value_type: FLOAT + units: '%' + description: | + MIB: UCD-SNMP-MIB + The time the CPU has spent doing nothing. + preprocessing: + - type: SNMP_WALK_VALUE + parameters: + - 1.3.6.1.4.1.2021.11.53.0 + - '0' + - type: CHANGE_PER_SECOND + parameters: + - '' + - type: JAVASCRIPT + parameters: + - | + //to get utilization in %, divide by N, where N is number of cores. + return value/{#CPU.COUNT} + master_item: + key: system.cpu.walk + tags: + - tag: component + value: cpu + - uuid: 6c1d4716883e4a23860f5888acaee1cd + name: 'Blockbit NGFW: CPU interrupt time' + type: DEPENDENT + key: 'system.cpu.interrupt[ssCpuRawInterrupt.{#SNMPINDEX}]' + delay: '0' + history: 7d + value_type: FLOAT + units: '%' + description: | + MIB: UCD-SNMP-MIB + The amount of time the CPU has been servicing hardware interrupts. + preprocessing: + - type: SNMP_WALK_VALUE + parameters: + - 1.3.6.1.4.1.2021.11.56.0 + - '0' + - type: CHANGE_PER_SECOND + parameters: + - '' + - type: JAVASCRIPT + parameters: + - | + //to get utilization in %, divide by N, where N is number of cores. + return value/{#CPU.COUNT} + master_item: + key: system.cpu.walk + tags: + - tag: component + value: cpu + - uuid: f2fdfdd0fa444b4a8e1877a55be99628 + name: 'Blockbit NGFW: CPU iowait time' + type: DEPENDENT + key: 'system.cpu.iowait[ssCpuRawWait.{#SNMPINDEX}]' + delay: '0' + history: 7d + value_type: FLOAT + units: '%' + description: | + MIB: UCD-SNMP-MIB + The amount of time the CPU has been waiting for I/O to complete. + preprocessing: + - type: SNMP_WALK_VALUE + parameters: + - 1.3.6.1.4.1.2021.11.54.0 + - '0' + - type: CHANGE_PER_SECOND + parameters: + - '' + - type: JAVASCRIPT + parameters: + - | + //to get utilization in %, divide by N, where N is number of cores. + return value/{#CPU.COUNT} + master_item: + key: system.cpu.walk + tags: + - tag: component + value: cpu + - uuid: 6a4386dce10a44b1b4eef4d06419fac1 + name: 'Blockbit NGFW: CPU nice time' + type: DEPENDENT + key: 'system.cpu.nice[ssCpuRawNice.{#SNMPINDEX}]' + delay: '0' + history: 7d + value_type: FLOAT + units: '%' + description: | + MIB: UCD-SNMP-MIB + The time the CPU has spent running users' processes that have been niced. + preprocessing: + - type: SNMP_WALK_VALUE + parameters: + - 1.3.6.1.4.1.2021.11.51.0 + - '0' + - type: CHANGE_PER_SECOND + parameters: + - '' + - type: JAVASCRIPT + parameters: + - | + //to get utilization in %, divide by N, where N is number of cores. + return value/{#CPU.COUNT} + master_item: + key: system.cpu.walk + tags: + - tag: component + value: cpu + - uuid: b1663059ac544ec99423c02ec58e1aed + name: 'Blockbit NGFW: CPU softirq time' + type: DEPENDENT + key: 'system.cpu.softirq[ssCpuRawSoftIRQ.{#SNMPINDEX}]' + delay: '0' + history: 7d + value_type: FLOAT + units: '%' + description: | + MIB: UCD-SNMP-MIB + The amount of time the CPU has been servicing software interrupts. + preprocessing: + - type: SNMP_WALK_VALUE + parameters: + - 1.3.6.1.4.1.2021.11.61.0 + - '0' + - type: CHANGE_PER_SECOND + parameters: + - '' + - type: JAVASCRIPT + parameters: + - | + //to get utilization in %, divide by N, where N is number of cores. + return value/{#CPU.COUNT} + master_item: + key: system.cpu.walk + tags: + - tag: component + value: cpu + - uuid: 71d0fa8c80334cc9bc073c4f1e98d763 + name: 'Blockbit NGFW: CPU steal time' + type: DEPENDENT + key: 'system.cpu.steal[ssCpuRawSteal.{#SNMPINDEX}]' + delay: '0' + history: 7d + value_type: FLOAT + units: '%' + description: | + MIB: UCD-SNMP-MIB + The amount of "stolen" CPU from this virtual machine by the hypervisor for other tasks, such as running another virtual machine. + preprocessing: + - type: SNMP_WALK_VALUE + parameters: + - 1.3.6.1.4.1.2021.11.64.0 + - '0' + - type: CHANGE_PER_SECOND + parameters: + - '' + - type: JAVASCRIPT + parameters: + - | + //to get utilization in %, divide by N, where N is number of cores. + return value/{#CPU.COUNT} + master_item: + key: system.cpu.walk + tags: + - tag: component + value: cpu + - uuid: e0dcae886b4648149b7b5564164f9506 + name: 'Blockbit NGFW: CPU system time' + type: DEPENDENT + key: 'system.cpu.system[ssCpuRawSystem.{#SNMPINDEX}]' + delay: '0' + history: 7d + value_type: FLOAT + units: '%' + description: | + MIB: UCD-SNMP-MIB + The time the CPU has spent running the kernel and its processes. + preprocessing: + - type: SNMP_WALK_VALUE + parameters: + - 1.3.6.1.4.1.2021.11.52.0 + - '0' + - type: CHANGE_PER_SECOND + parameters: + - '' + - type: JAVASCRIPT + parameters: + - | + //to get utilization in %, divide by N, where N is number of cores. + return value/{#CPU.COUNT} + master_item: + key: system.cpu.walk + tags: + - tag: component + value: cpu + - uuid: 94214c0ac2fe4a17897b5dcf6c10ce55 + name: 'Blockbit NGFW: CPU user time' + type: DEPENDENT + key: 'system.cpu.user[ssCpuRawUser.{#SNMPINDEX}]' + delay: '0' + history: 7d + value_type: FLOAT + units: '%' + description: | + MIB: UCD-SNMP-MIB + The time the CPU has spent running users' processes that are not niced. + preprocessing: + - type: SNMP_WALK_VALUE + parameters: + - 1.3.6.1.4.1.2021.11.50.0 + - '0' + - type: CHANGE_PER_SECOND + parameters: + - '' + - type: JAVASCRIPT + parameters: + - | + //to get utilization in %, divide by N, where N is number of cores. + return value/{#CPU.COUNT} + master_item: + key: system.cpu.walk + tags: + - tag: component + value: cpu + - uuid: 17ad8e5999e34cd99392f056eece166c + name: 'Blockbit NGFW: CPU utilization' + type: DEPENDENT + key: 'system.cpu.util[snmp,{#SNMPINDEX}]' + delay: '0' + history: 7d + value_type: FLOAT + units: '%' + description: 'The CPU utilization expressed in %.' + preprocessing: + - type: JAVASCRIPT + parameters: + - | + //Calculate utilization + return (100 - value) + master_item: + key: 'system.cpu.idle[ssCpuRawIdle.{#SNMPINDEX}]' + tags: + - tag: component + value: cpu + trigger_prototypes: + - uuid: 10f4733c914545289d8ac412036c39ed + expression: 'min(/Blockbit NGFW by SNMP/system.cpu.util[snmp,{#SNMPINDEX}],5m)>{$CPU.UTIL.CRIT}' + name: 'Blockbit NGFW: High CPU utilization' + event_name: 'Blockbit NGFW: High CPU utilization (over {$CPU.UTIL.CRIT}% for 5m)' + opdata: 'Current utilization: {ITEM.LASTVALUE1}' + priority: WARNING + description: 'The CPU utilization is too high. The system might be slow to respond.' + tags: + - tag: scope + value: performance + graph_prototypes: + - uuid: fb5afa1264574563ade11740212cedf8 + name: 'Blockbit NGFW: CPU usage{#SINGLETON}' + type: STACKED + ymin_type_1: FIXED + ymax_type_1: FIXED + graph_items: + - color: 199C0D + item: + host: 'Blockbit NGFW by SNMP' + key: 'system.cpu.system[ssCpuRawSystem.{#SNMPINDEX}]' + - sortorder: '1' + color: F63100 + item: + host: 'Blockbit NGFW by SNMP' + key: 'system.cpu.user[ssCpuRawUser.{#SNMPINDEX}]' + - sortorder: '2' + color: 00611C + item: + host: 'Blockbit NGFW by SNMP' + key: 'system.cpu.nice[ssCpuRawNice.{#SNMPINDEX}]' + - sortorder: '3' + color: F7941D + item: + host: 'Blockbit NGFW by SNMP' + key: 'system.cpu.iowait[ssCpuRawWait.{#SNMPINDEX}]' + - sortorder: '4' + color: FC6EA3 + item: + host: 'Blockbit NGFW by SNMP' + key: 'system.cpu.steal[ssCpuRawSteal.{#SNMPINDEX}]' + - sortorder: '5' + color: 6C59DC + item: + host: 'Blockbit NGFW by SNMP' + key: 'system.cpu.interrupt[ssCpuRawInterrupt.{#SNMPINDEX}]' + - sortorder: '6' + color: C7A72D + item: + host: 'Blockbit NGFW by SNMP' + key: 'system.cpu.softirq[ssCpuRawSoftIRQ.{#SNMPINDEX}]' + - sortorder: '7' + color: BA2A5D + item: + host: 'Blockbit NGFW by SNMP' + key: 'system.cpu.guest[ssCpuRawGuest.{#SNMPINDEX}]' + - sortorder: '8' + color: F230E0 + item: + host: 'Blockbit NGFW by SNMP' + key: 'system.cpu.guest_nice[ssCpuRawGuestNice.{#SNMPINDEX}]' + - uuid: d641116e1dd64207aa4b5973046bbeb9 + name: 'Blockbit NGFW: CPU utilization{#SINGLETON}' + ymin_type_1: FIXED + ymax_type_1: FIXED + graph_items: + - drawtype: GRADIENT_LINE + color: 199C0D + item: + host: 'Blockbit NGFW by SNMP' + key: 'system.cpu.util[snmp,{#SNMPINDEX}]' + master_item: + key: 'system.cpu.num[snmp]' + preprocessing: + - type: JAVASCRIPT + parameters: + - | + //count the number of CPU cores + return JSON.stringify([{"{#CPU.COUNT}": value, "{#SNMPINDEX}": 0, "{#SINGLETON}":""}]) + - uuid: 00978e59a0c941c0a6da1bd8fc7a4d03 + name: 'Blockbit NGFW: CPU Temperature Discovery' + type: SNMP_AGENT + snmp_oid: 'discovery[{#SNMPVALUE},1.3.6.1.4.1.2021.13.16.2.1.2]' + key: lmsensors.cpu + filter: + conditions: + - macro: '{#SNMPVALUE}' + value: ^CPU + formulaid: A + - macro: '{#SNMPVALUE}' + value: ^Package + formulaid: B + - macro: '{#SNMPVALUE}' + value: ^Core + formulaid: C + description: 'Discover CPU temperature entities in Blockbit Sensors' + item_prototypes: + - uuid: 09774667763f46b7be37d926a41c19b2 + name: 'CPU Temperature {#SNMPVALUE}' + type: SNMP_AGENT + snmp_oid: '1.3.6.1.4.1.2021.13.16.2.1.3.{#SNMPINDEX}' + key: 'lmsensors.cpu[{#SNMPVALUE}]' + value_type: FLOAT + units: °C + preprocessing: + - type: MULTIPLIER + parameters: + - '0.001' + tags: + - tag: Application + value: CPU + trigger_prototypes: + - uuid: 3c1f39b156cf450a9e5f0e252fef60e8 + expression: 'last(/Blockbit NGFW by SNMP/lmsensors.cpu[{#SNMPVALUE}])>{$CPU_HIGH}' + name: 'CPU {#SNMPVALUE} temperature is higher than {$CPU_HIGH} °C currently {ITEM.VALUE}' + priority: HIGH + - uuid: ccb15bde38e8403a9b2b3a4536c70343 + expression: 'last(/Blockbit NGFW by SNMP/lmsensors.cpu[{#SNMPVALUE}])>{$CPU_WARN}' + name: 'CPU {#SNMPVALUE} temperature is higher than {$CPU_WARN} °C currently {ITEM.VALUE}' + priority: WARNING + - uuid: b9ee4744e1064d7fa292609e8e3df132 + name: 'Network interfaces discovery' + type: DEPENDENT + key: net.if.discovery + delay: '0' + filter: + evaltype: AND + conditions: + - macro: '{#IFADMINSTATUS}' + value: '{$NET.IF.IFADMINSTATUS.MATCHES}' + formulaid: A + - macro: '{#IFADMINSTATUS}' + value: '{$NET.IF.IFADMINSTATUS.NOT_MATCHES}' + operator: NOT_MATCHES_REGEX + formulaid: B + - macro: '{#IFOPERSTATUS}' + value: '{$NET.IF.IFOPERSTATUS.MATCHES}' + formulaid: I + - macro: '{#IFOPERSTATUS}' + value: '{$NET.IF.IFOPERSTATUS.NOT_MATCHES}' + operator: NOT_MATCHES_REGEX + formulaid: J + - macro: '{#IFNAME}' + value: '{$NET.IF.IFNAME.MATCHES}' + formulaid: G + - macro: '{#IFNAME}' + value: '{$NET.IF.IFNAME.NOT_MATCHES}' + operator: NOT_MATCHES_REGEX + formulaid: H + - macro: '{#IFDESCR}' + value: '{$NET.IF.IFDESCR.MATCHES}' + formulaid: E + - macro: '{#IFDESCR}' + value: '{$NET.IF.IFDESCR.NOT_MATCHES}' + operator: NOT_MATCHES_REGEX + formulaid: F + - macro: '{#IFALIAS}' + value: '{$NET.IF.IFALIAS.MATCHES}' + formulaid: C + - macro: '{#IFALIAS}' + value: '{$NET.IF.IFALIAS.NOT_MATCHES}' + operator: NOT_MATCHES_REGEX + formulaid: D + - macro: '{#IFTYPE}' + value: '{$NET.IF.IFTYPE.MATCHES}' + formulaid: K + - macro: '{#IFTYPE}' + value: '{$NET.IF.IFTYPE.NOT_MATCHES}' + operator: NOT_MATCHES_REGEX + formulaid: L + description: 'Discovering interfaces from IF-MIB.' + item_prototypes: + - uuid: defea1d9554b4ea2a4691f96b1b8a4e0 + name: 'Interface {#IFNAME}({#IFALIAS}): Inbound packets discarded' + type: DEPENDENT + key: 'net.if.in.discards[ifInDiscards.{#SNMPINDEX}]' + delay: '0' + history: 7d + description: | + MIB: IF-MIB + The number of inbound packets which were chosen to be discarded + even though no errors had been detected to prevent their being deliverable to a higher-layer protocol. + One possible reason for discarding such a packet could be to free up buffer space. + Discontinuities in the value of this counter can occur at re-initialization of the management system, + and at other times as indicated by the value of ifCounterDiscontinuityTime. + preprocessing: + - type: SNMP_WALK_VALUE + parameters: + - '1.3.6.1.2.1.2.2.1.13.{#SNMPINDEX}' + - '0' + - type: CHANGE_PER_SECOND + parameters: + - '' + - type: DISCARD_UNCHANGED_HEARTBEAT + parameters: + - 3m + master_item: + key: net.if.walk + tags: + - tag: component + value: network + - tag: description + value: '{#IFALIAS}' + - tag: interface + value: '{#IFNAME}' + - uuid: c94c6517fb0e4e4cb5c51b2c7a572543 + name: 'Interface {#IFNAME}({#IFALIAS}): Inbound packets with errors' + type: DEPENDENT + key: 'net.if.in.errors[ifInErrors.{#SNMPINDEX}]' + delay: '0' + history: 7d + description: | + MIB: IF-MIB + For packet-oriented interfaces, the number of inbound packets that contained errors preventing them from being deliverable to a higher-layer protocol. For character-oriented or fixed-length interfaces, the number of inbound transmission units that contained errors preventing them from being deliverable to a higher-layer protocol. Discontinuities in the value of this counter can occur at re-initialization of the management system, and at other times as indicated by the value of ifCounterDiscontinuityTime. + preprocessing: + - type: SNMP_WALK_VALUE + parameters: + - '1.3.6.1.2.1.2.2.1.14.{#SNMPINDEX}' + - '0' + - type: CHANGE_PER_SECOND + parameters: + - '' + - type: DISCARD_UNCHANGED_HEARTBEAT + parameters: + - 3m + master_item: + key: net.if.walk + tags: + - tag: component + value: network + - tag: description + value: '{#IFALIAS}' + - tag: interface + value: '{#IFNAME}' + - uuid: ceb29dbf4e9842e99402001883dca18f + name: 'Interface {#IFNAME}({#IFALIAS}): Bits received' + type: DEPENDENT + key: 'net.if.in[ifHCInOctets.{#SNMPINDEX}]' + delay: '0' + history: 7d + units: bps + description: | + MIB: IF-MIB + The total number of octets received on the interface, including framing characters. This object is a 64-bit version of ifInOctets. Discontinuities in the value of this counter can occur at re-initialization of the management system, and at other times as indicated by the value of ifCounterDiscontinuityTime. + preprocessing: + - type: SNMP_WALK_VALUE + parameters: + - '1.3.6.1.2.1.31.1.1.1.6.{#SNMPINDEX}' + - '0' + - type: CHANGE_PER_SECOND + parameters: + - '' + - type: MULTIPLIER + parameters: + - '8' + master_item: + key: net.if.walk + tags: + - tag: component + value: network + - tag: description + value: '{#IFALIAS}' + - tag: interface + value: '{#IFNAME}' + - uuid: 6dfef13c360941d9923060a0dba3c7ee + name: 'Interface {#IFNAME}({#IFALIAS}): Outbound packets discarded' + type: DEPENDENT + key: 'net.if.out.discards[ifOutDiscards.{#SNMPINDEX}]' + delay: '0' + history: 7d + description: | + MIB: IF-MIB + The number of outbound packets which were chosen to be discarded + even though no errors had been detected to prevent their being deliverable to a higher-layer protocol. + One possible reason for discarding such a packet could be to free up buffer space. + Discontinuities in the value of this counter can occur at re-initialization of the management system, + and at other times as indicated by the value of ifCounterDiscontinuityTime. + preprocessing: + - type: SNMP_WALK_VALUE + parameters: + - '1.3.6.1.2.1.2.2.1.19.{#SNMPINDEX}' + - '0' + - type: CHANGE_PER_SECOND + parameters: + - '' + - type: DISCARD_UNCHANGED_HEARTBEAT + parameters: + - 3m + master_item: + key: net.if.walk + tags: + - tag: component + value: network + - tag: description + value: '{#IFALIAS}' + - tag: interface + value: '{#IFNAME}' + - uuid: c0f4f4f6281a4992a3ecea848e0c62b8 + name: 'Interface {#IFNAME}({#IFALIAS}): Outbound packets with errors' + type: DEPENDENT + key: 'net.if.out.errors[ifOutErrors.{#SNMPINDEX}]' + delay: '0' + history: 7d + description: | + MIB: IF-MIB + For packet-oriented interfaces, the number of outbound packets that contained errors preventing them from being deliverable to a higher-layer protocol. For character-oriented or fixed-length interfaces, the number of outbound transmission units that contained errors preventing them from being deliverable to a higher-layer protocol. Discontinuities in the value of this counter can occur at re-initialization of the management system, and at other times as indicated by the value of ifCounterDiscontinuityTime. + preprocessing: + - type: SNMP_WALK_VALUE + parameters: + - '1.3.6.1.2.1.2.2.1.20.{#SNMPINDEX}' + - '0' + - type: CHANGE_PER_SECOND + parameters: + - '' + - type: DISCARD_UNCHANGED_HEARTBEAT + parameters: + - 3m + master_item: + key: net.if.walk + tags: + - tag: component + value: network + - tag: description + value: '{#IFALIAS}' + - tag: interface + value: '{#IFNAME}' + - uuid: f70c3431a04b45f0b051a7f728b6d266 + name: 'Interface {#IFNAME}({#IFALIAS}): Bits sent' + type: DEPENDENT + key: 'net.if.out[ifHCOutOctets.{#SNMPINDEX}]' + delay: '0' + history: 7d + units: bps + description: | + MIB: IF-MIB + The total number of octets transmitted out of the interface, including framing characters. This object is a 64-bit version of ifOutOctets.Discontinuities in the value of this counter can occur at re-initialization of the management system, and at other times as indicated by the value of ifCounterDiscontinuityTime. + preprocessing: + - type: SNMP_WALK_VALUE + parameters: + - '1.3.6.1.2.1.31.1.1.1.10.{#SNMPINDEX}' + - '0' + - type: CHANGE_PER_SECOND + parameters: + - '' + - type: MULTIPLIER + parameters: + - '8' + master_item: + key: net.if.walk + tags: + - tag: component + value: network + - tag: description + value: '{#IFALIAS}' + - tag: interface + value: '{#IFNAME}' + - uuid: 02b30f3461fc4705a2d666a9cb46a8f7 + name: 'Interface {#IFNAME}({#IFALIAS}): Speed' + type: DEPENDENT + key: 'net.if.speed[ifHighSpeed.{#SNMPINDEX}]' + delay: '0' + history: 7d + trends: '0' + units: bps + description: | + MIB: IF-MIB + An estimate of the interface's current bandwidth in units of 1,000,000 bits per second. If this object reports a value of `n' then the speed of the interface is somewhere in the range of `n-500,000' to`n+499,999'. For interfaces which do not vary in bandwidth or for those where no accurate estimation can be made, this object should contain the nominal bandwidth. For a sub-layer which has no concept of bandwidth, this object should be zero. + preprocessing: + - type: SNMP_WALK_VALUE + parameters: + - '1.3.6.1.2.1.31.1.1.1.15.{#SNMPINDEX}' + - '0' + - type: MULTIPLIER + parameters: + - '1000000' + - type: DISCARD_UNCHANGED_HEARTBEAT + parameters: + - 1h + master_item: + key: net.if.walk + tags: + - tag: component + value: network + - tag: description + value: '{#IFALIAS}' + - tag: interface + value: '{#IFNAME}' + - uuid: ca9595d00e1d4c2db71d9dcbbff0f25c + name: 'Interface {#IFNAME}({#IFALIAS}): Operational status' + type: DEPENDENT + key: 'net.if.status[ifOperStatus.{#SNMPINDEX}]' + delay: '0' + history: 7d + trends: '0' + description: | + MIB: IF-MIB + The current operational state of the interface. + - The testing(3) state indicates that no operational packet scan be passed + - If ifAdminStatus is down(2) then ifOperStatus should be down(2) + - If ifAdminStatus is changed to up(1) then ifOperStatus should change to up(1) if the interface is ready to transmit and receive network traffic + - It should change todormant(5) if the interface is waiting for external actions (such as a serial line waiting for an incoming connection) + - It should remain in the down(2) state if and only if there is a fault that prevents it from going to the up(1) state + - It should remain in the notPresent(6) state if the interface has missing(typically, hardware) components. + valuemap: + name: 'IF-MIB::ifOperStatus' + preprocessing: + - type: SNMP_WALK_VALUE + parameters: + - '1.3.6.1.2.1.2.2.1.8.{#SNMPINDEX}' + - '0' + master_item: + key: net.if.walk + tags: + - tag: component + value: network + - tag: description + value: '{#IFALIAS}' + - tag: interface + value: '{#IFNAME}' + trigger_prototypes: + - uuid: 80394c9963924bcabb9dae345f2611be + expression: '{$IFCONTROL:"{#IFNAME}"}=1 and last(/Blockbit NGFW by SNMP/net.if.status[ifOperStatus.{#SNMPINDEX}])=2 and (last(/Blockbit NGFW by SNMP/net.if.status[ifOperStatus.{#SNMPINDEX}],#1)<>last(/Blockbit NGFW by SNMP/net.if.status[ifOperStatus.{#SNMPINDEX}],#2))' + recovery_mode: RECOVERY_EXPRESSION + recovery_expression: 'last(/Blockbit NGFW by SNMP/net.if.status[ifOperStatus.{#SNMPINDEX}])<>2 or {$IFCONTROL:"{#IFNAME}"}=0' + name: 'Interface {#IFNAME}({#IFALIAS}): Link down' + opdata: 'Current state: {ITEM.LASTVALUE1}' + priority: AVERAGE + description: | + This trigger expression works as follows: + 1. It can be triggered if the operations status is down. + 2. `{$IFCONTROL:"{#IFNAME}"}=1` - a user can redefine context macro to value - 0. That marks this interface as not important. No new trigger will be fired if this interface is down. + 3. `{TEMPLATE_NAME:METRIC.diff()}=1` - the trigger fires only if the operational status was up to (1) sometime before (so, do not fire for the 'eternal off' interfaces.) + + WARNING: if closed manually - it will not fire again on the next poll, because of .diff. + tags: + - tag: scope + value: availability + - uuid: 07b9effe0e7e42c581e53d1d5a222b8c + name: 'Interface {#IFNAME}({#IFALIAS}): Interface type' + type: DEPENDENT + key: 'net.if.type[ifType.{#SNMPINDEX}]' + delay: '0' + history: 7d + trends: '0' + description: | + MIB: IF-MIB + The type of interface. + Additional values for ifType are assigned by the Internet Assigned Numbers Authority (IANA), + through updating the syntax of the IANAifType textual convention. + valuemap: + name: 'IF-MIB::ifType' + preprocessing: + - type: SNMP_WALK_VALUE + parameters: + - '1.3.6.1.2.1.2.2.1.3.{#SNMPINDEX}' + - '0' + - type: DISCARD_UNCHANGED_HEARTBEAT + parameters: + - 1d + master_item: + key: net.if.walk + tags: + - tag: component + value: network + - tag: description + value: '{#IFALIAS}' + - tag: interface + value: '{#IFNAME}' + trigger_prototypes: + - uuid: 77ca3c7f08d047f993cf4f24e32318e2 + expression: | + change(/Blockbit NGFW by SNMP/net.if.speed[ifHighSpeed.{#SNMPINDEX}])<0 and last(/Blockbit NGFW by SNMP/net.if.speed[ifHighSpeed.{#SNMPINDEX}])>0 + and ( + last(/Blockbit NGFW by SNMP/net.if.type[ifType.{#SNMPINDEX}])=6 or + last(/Blockbit NGFW by SNMP/net.if.type[ifType.{#SNMPINDEX}])=7 or + last(/Blockbit NGFW by SNMP/net.if.type[ifType.{#SNMPINDEX}])=11 or + last(/Blockbit NGFW by SNMP/net.if.type[ifType.{#SNMPINDEX}])=62 or + last(/Blockbit NGFW by SNMP/net.if.type[ifType.{#SNMPINDEX}])=69 or + last(/Blockbit NGFW by SNMP/net.if.type[ifType.{#SNMPINDEX}])=117 + ) + and + (last(/Blockbit NGFW by SNMP/net.if.status[ifOperStatus.{#SNMPINDEX}])<>2) + recovery_mode: RECOVERY_EXPRESSION + recovery_expression: | + (change(/Blockbit NGFW by SNMP/net.if.speed[ifHighSpeed.{#SNMPINDEX}])>0 and last(/Blockbit NGFW by SNMP/net.if.speed[ifHighSpeed.{#SNMPINDEX}],#2)>0) or + (last(/Blockbit NGFW by SNMP/net.if.status[ifOperStatus.{#SNMPINDEX}])=2) + name: 'Interface {#IFNAME}({#IFALIAS}): Ethernet has changed to lower speed than it was before' + opdata: 'Current reported speed: {ITEM.LASTVALUE1}' + priority: INFO + description: 'This Ethernet connection has transitioned down from its known maximum speed. This might be a sign of autonegotiation issues. Acknowledge to close the problem manually.' + dependencies: + - name: 'Interface {#IFNAME}({#IFALIAS}): Link down' + expression: '{$IFCONTROL:"{#IFNAME}"}=1 and last(/Blockbit NGFW by SNMP/net.if.status[ifOperStatus.{#SNMPINDEX}])=2 and (last(/Blockbit NGFW by SNMP/net.if.status[ifOperStatus.{#SNMPINDEX}],#1)<>last(/Blockbit NGFW by SNMP/net.if.status[ifOperStatus.{#SNMPINDEX}],#2))' + recovery_expression: 'last(/Blockbit NGFW by SNMP/net.if.status[ifOperStatus.{#SNMPINDEX}])<>2 or {$IFCONTROL:"{#IFNAME}"}=0' + tags: + - tag: scope + value: performance + - uuid: 748d4eece8494d8a80bb942ea703d2f8 + expression: | + (avg(/Blockbit NGFW by SNMP/net.if.in[ifHCInOctets.{#SNMPINDEX}],15m)>({$IF.UTIL.MAX:"{#IFNAME}"}/100)*last(/Blockbit NGFW by SNMP/net.if.speed[ifHighSpeed.{#SNMPINDEX}]) or + avg(/Blockbit NGFW by SNMP/net.if.out[ifHCOutOctets.{#SNMPINDEX}],15m)>({$IF.UTIL.MAX:"{#IFNAME}"}/100)*last(/Blockbit NGFW by SNMP/net.if.speed[ifHighSpeed.{#SNMPINDEX}])) and + last(/Blockbit NGFW by SNMP/net.if.speed[ifHighSpeed.{#SNMPINDEX}])>0 + recovery_mode: RECOVERY_EXPRESSION + recovery_expression: | + avg(/Blockbit NGFW by SNMP/net.if.in[ifHCInOctets.{#SNMPINDEX}],15m)<(({$IF.UTIL.MAX:"{#IFNAME}"}-3)/100)*last(/Blockbit NGFW by SNMP/net.if.speed[ifHighSpeed.{#SNMPINDEX}]) and + avg(/Blockbit NGFW by SNMP/net.if.out[ifHCOutOctets.{#SNMPINDEX}],15m)<(({$IF.UTIL.MAX:"{#IFNAME}"}-3)/100)*last(/Blockbit NGFW by SNMP/net.if.speed[ifHighSpeed.{#SNMPINDEX}]) + name: 'Interface {#IFNAME}({#IFALIAS}): High bandwidth usage' + event_name: 'Interface {#IFNAME}({#IFALIAS}): High bandwidth usage (>{$IF.UTIL.MAX:"{#IFNAME}"}%)' + opdata: 'In: {ITEM.LASTVALUE1}, out: {ITEM.LASTVALUE3}, speed: {ITEM.LASTVALUE2}' + priority: WARNING + description: 'The utilization of the network interface is close to its estimated maximum bandwidth.' + dependencies: + - name: 'Interface {#IFNAME}({#IFALIAS}): Link down' + expression: '{$IFCONTROL:"{#IFNAME}"}=1 and last(/Blockbit NGFW by SNMP/net.if.status[ifOperStatus.{#SNMPINDEX}])=2 and (last(/Blockbit NGFW by SNMP/net.if.status[ifOperStatus.{#SNMPINDEX}],#1)<>last(/Blockbit NGFW by SNMP/net.if.status[ifOperStatus.{#SNMPINDEX}],#2))' + recovery_expression: 'last(/Blockbit NGFW by SNMP/net.if.status[ifOperStatus.{#SNMPINDEX}])<>2 or {$IFCONTROL:"{#IFNAME}"}=0' + tags: + - tag: scope + value: performance + - uuid: 18f58e7c67e346b1922e80feb040a94f + expression: | + min(/Blockbit NGFW by SNMP/net.if.in.errors[ifInErrors.{#SNMPINDEX}],5m)>{$IF.ERRORS.WARN:"{#IFNAME}"} + or min(/Blockbit NGFW by SNMP/net.if.out.errors[ifOutErrors.{#SNMPINDEX}],5m)>{$IF.ERRORS.WARN:"{#IFNAME}"} + recovery_mode: RECOVERY_EXPRESSION + recovery_expression: | + max(/Blockbit NGFW by SNMP/net.if.in.errors[ifInErrors.{#SNMPINDEX}],5m)<{$IF.ERRORS.WARN:"{#IFNAME}"}*0.8 + and max(/Blockbit NGFW by SNMP/net.if.out.errors[ifOutErrors.{#SNMPINDEX}],5m)<{$IF.ERRORS.WARN:"{#IFNAME}"}*0.8 + name: 'Interface {#IFNAME}({#IFALIAS}): High error rate' + event_name: 'Interface {#IFNAME}({#IFALIAS}): High error rate (>{$IF.ERRORS.WARN:"{#IFNAME}"} for 5m)' + opdata: 'errors in: {ITEM.LASTVALUE1}, errors out: {ITEM.LASTVALUE2}' + priority: WARNING + description: 'It recovers when it is below 80% of the `{$IF.ERRORS.WARN:"{#IFNAME}"}` threshold.' + dependencies: + - name: 'Interface {#IFNAME}({#IFALIAS}): Link down' + expression: '{$IFCONTROL:"{#IFNAME}"}=1 and last(/Blockbit NGFW by SNMP/net.if.status[ifOperStatus.{#SNMPINDEX}])=2 and (last(/Blockbit NGFW by SNMP/net.if.status[ifOperStatus.{#SNMPINDEX}],#1)<>last(/Blockbit NGFW by SNMP/net.if.status[ifOperStatus.{#SNMPINDEX}],#2))' + recovery_expression: 'last(/Blockbit NGFW by SNMP/net.if.status[ifOperStatus.{#SNMPINDEX}])<>2 or {$IFCONTROL:"{#IFNAME}"}=0' + tags: + - tag: scope + value: availability + - tag: scope + value: performance + graph_prototypes: + - uuid: 3f9c708d06964779bbc237de4f0c0a75 + name: 'Interface {#IFNAME}({#IFALIAS}): Network traffic' + graph_items: + - drawtype: GRADIENT_LINE + color: 199C0D + item: + host: 'Blockbit NGFW by SNMP' + key: 'net.if.in[ifHCInOctets.{#SNMPINDEX}]' + - sortorder: '1' + drawtype: BOLD_LINE + color: F63100 + item: + host: 'Blockbit NGFW by SNMP' + key: 'net.if.out[ifHCOutOctets.{#SNMPINDEX}]' + - sortorder: '2' + color: 00611C + yaxisside: RIGHT + item: + host: 'Blockbit NGFW by SNMP' + key: 'net.if.out.errors[ifOutErrors.{#SNMPINDEX}]' + - sortorder: '3' + color: F7941D + yaxisside: RIGHT + item: + host: 'Blockbit NGFW by SNMP' + key: 'net.if.in.errors[ifInErrors.{#SNMPINDEX}]' + - sortorder: '4' + color: FC6EA3 + yaxisside: RIGHT + item: + host: 'Blockbit NGFW by SNMP' + key: 'net.if.out.discards[ifOutDiscards.{#SNMPINDEX}]' + - sortorder: '5' + color: 6C59DC + yaxisside: RIGHT + item: + host: 'Blockbit NGFW by SNMP' + key: 'net.if.in.discards[ifInDiscards.{#SNMPINDEX}]' + master_item: + key: net.if.walk + preprocessing: + - type: SNMP_WALK_TO_JSON + parameters: + - '{#IFOPERSTATUS}' + - 1.3.6.1.2.1.2.2.1.8 + - '0' + - '{#IFADMINSTATUS}' + - 1.3.6.1.2.1.2.2.1.7 + - '0' + - '{#IFALIAS}' + - 1.3.6.1.2.1.31.1.1.1.18 + - '0' + - '{#IFNAME}' + - 1.3.6.1.2.1.31.1.1.1.1 + - '0' + - '{#IFDESCR}' + - 1.3.6.1.2.1.2.2.1.2 + - '0' + - '{#IFTYPE}' + - 1.3.6.1.2.1.2.2.1.3 + - '0' + - type: DISCARD_UNCHANGED_HEARTBEAT + parameters: + - 1h + - uuid: 5e782eb8595a497eb555e53b20eff4ad + name: 'Block devices discovery' + type: DEPENDENT + key: 'vfs.dev.discovery[snmp]' + delay: '0' + filter: + evaltype: AND + conditions: + - macro: '{#DEVNAME}' + value: '{$VFS.DEV.DEVNAME.MATCHES}' + formulaid: A + - macro: '{#DEVNAME}' + value: '{$VFS.DEV.DEVNAME.NOT_MATCHES}' + operator: NOT_MATCHES_REGEX + formulaid: B + description: 'Block devices are discovered from UCD-DISKIO-MIB::diskIOTable (http://net-snmp.sourceforge.net/docs/mibs/ucdDiskIOMIB.html#diskIOTable)' + item_prototypes: + - uuid: 101118484f2d4fa483617fc56c370ea5 + name: '{#DEVNAME}: Disk read rate' + type: DEPENDENT + key: 'vfs.dev.read.rate[diskIOReads.{#SNMPINDEX}]' + delay: '0' + history: 7d + value_type: FLOAT + units: '!r/s' + description: | + MIB: UCD-DISKIO-MIB + The number of read accesses from this device since boot. + preprocessing: + - type: SNMP_WALK_VALUE + parameters: + - '1.3.6.1.4.1.2021.13.15.1.1.5.{#SNMPINDEX}' + - '0' + - type: CHANGE_PER_SECOND + parameters: + - '' + master_item: + key: vfs.dev.walk + tags: + - tag: component + value: storage + - tag: disk + value: '{#DEVNAME}' + - uuid: 5778b7a1cb624cdc8ce4cc35995a638f + name: '{#DEVNAME}: Disk utilization' + type: DEPENDENT + key: 'vfs.dev.util[diskIOLA1.{#SNMPINDEX}]' + delay: '0' + history: 7d + value_type: FLOAT + units: '%' + description: | + MIB: UCD-DISKIO-MIB + The 1 minute average load of disk (%) + preprocessing: + - type: SNMP_WALK_VALUE + parameters: + - '1.3.6.1.4.1.2021.13.15.1.1.9.{#SNMPINDEX}' + - '0' + master_item: + key: vfs.dev.walk + tags: + - tag: component + value: storage + - tag: disk + value: '{#DEVNAME}' + - uuid: 74a1a1e345864308a4578790dc62e0ad + name: '{#DEVNAME}: Disk write rate' + type: DEPENDENT + key: 'vfs.dev.write.rate[diskIOWrites.{#SNMPINDEX}]' + delay: '0' + history: 7d + value_type: FLOAT + units: '!w/s' + description: | + MIB: UCD-DISKIO-MIB + The number of write accesses from this device since boot. + preprocessing: + - type: SNMP_WALK_VALUE + parameters: + - '1.3.6.1.4.1.2021.13.15.1.1.6.{#SNMPINDEX}' + - '0' + - type: CHANGE_PER_SECOND + parameters: + - '' + master_item: + key: vfs.dev.walk + tags: + - tag: component + value: storage + - tag: disk + value: '{#DEVNAME}' + graph_prototypes: + - uuid: bcdf78926fd54bb7825ae2c7216e02ac + name: '{#DEVNAME}: Disk read/write rates' + graph_items: + - color: 199C0D + item: + host: 'Blockbit NGFW by SNMP' + key: 'vfs.dev.read.rate[diskIOReads.{#SNMPINDEX}]' + - sortorder: '1' + drawtype: GRADIENT_LINE + color: F63100 + item: + host: 'Blockbit NGFW by SNMP' + key: 'vfs.dev.write.rate[diskIOWrites.{#SNMPINDEX}]' + master_item: + key: vfs.dev.walk + preprocessing: + - type: SNMP_WALK_TO_JSON + parameters: + - '{#DEVNAME}' + - 1.3.6.1.4.1.2021.13.15.1.1.2 + - '0' + - type: DISCARD_UNCHANGED_HEARTBEAT + parameters: + - 1h + - uuid: 58a35757ac80481aaa00863a04f79960 + name: 'Mounted filesystem discovery' + type: DEPENDENT + key: 'vfs.fs.discovery[snmp]' + delay: '0' + filter: + evaltype: AND + conditions: + - macro: '{#FSTYPE}' + value: '{$VFS.FS.FSTYPE.MATCHES}' + formulaid: C + - macro: '{#FSTYPE}' + value: '{$VFS.FS.FSTYPE.NOT_MATCHES}' + operator: NOT_MATCHES_REGEX + formulaid: D + - macro: '{#FSNAME}' + value: '{$VFS.FS.FSNAME.MATCHES}' + formulaid: A + - macro: '{#FSNAME}' + value: '{$VFS.FS.FSNAME.NOT_MATCHES}' + operator: NOT_MATCHES_REGEX + formulaid: B + description: 'HOST-RESOURCES-MIB::hrStorage discovery with storage filter' + item_prototypes: + - uuid: 77344c98aec845808904f1adf2daf0f3 + name: '{#FSNAME}: Space utilization' + type: CALCULATED + key: 'vfs.fs.pused[storageUsedPercentage.{#SNMPINDEX}]' + history: 7d + value_type: FLOAT + units: '%' + params: '(last(//vfs.fs.used[hrStorageUsed.{#SNMPINDEX}])/last(//vfs.fs.total[hrStorageSize.{#SNMPINDEX}]))*100' + description: 'The space utilization expressed in % for {#FSNAME}.' + tags: + - tag: component + value: storage + - tag: filesystem + value: '{#FSNAME}' + - uuid: da59bd09c66244cb8c6fff53989a2fa8 + name: '{#FSNAME}: Total space' + type: DEPENDENT + key: 'vfs.fs.total[hrStorageSize.{#SNMPINDEX}]' + delay: '0' + history: 7d + units: B + description: | + MIB: HOST-RESOURCES-MIB + The size of the storage represented by this entry, in units of hrStorageAllocationUnits. + This object is writable to allow remote configuration of the size of the storage area in those cases where such an operation makes sense and is possible on the underlying system. + For example, the amount of main storage allocated to a buffer pool might be modified or the amount of disk space allocated to virtual storage might be modified. + preprocessing: + - type: SNMP_WALK_VALUE + parameters: + - '1.3.6.1.2.1.25.2.3.1.5.{#SNMPINDEX}' + - '0' + - type: MULTIPLIER + parameters: + - '{#ALLOC_UNITS}' + master_item: + key: vfs.fs.walk + tags: + - tag: component + value: storage + - tag: filesystem + value: '{#FSNAME}' + - uuid: 7bfbd2df11034c25a2d11b2adc3b63b3 + name: '{#FSNAME}: Used space' + type: DEPENDENT + key: 'vfs.fs.used[hrStorageUsed.{#SNMPINDEX}]' + delay: '0' + history: 7d + units: B + description: | + MIB: HOST-RESOURCES-MIB + The amount of the storage represented by this entry that is allocated, in units of hrStorageAllocationUnits. + preprocessing: + - type: SNMP_WALK_VALUE + parameters: + - '1.3.6.1.2.1.25.2.3.1.6.{#SNMPINDEX}' + - '0' + - type: MULTIPLIER + parameters: + - '{#ALLOC_UNITS}' + master_item: + key: vfs.fs.walk + tags: + - tag: component + value: storage + - tag: filesystem + value: '{#FSNAME}' + trigger_prototypes: + - uuid: 71b22cb230134191906265a6ae029db5 + expression: | + last(/Blockbit NGFW by SNMP/vfs.fs.pused[storageUsedPercentage.{#SNMPINDEX}])>{$VFS.FS.PUSED.MAX.CRIT:"{#FSNAME}"} and + ((last(/Blockbit NGFW by SNMP/vfs.fs.total[hrStorageSize.{#SNMPINDEX}])-last(/Blockbit NGFW by SNMP/vfs.fs.used[hrStorageUsed.{#SNMPINDEX}]))<{$VFS.FS.FREE.MIN.CRIT:"{#FSNAME}"} or timeleft(/Blockbit NGFW by SNMP/vfs.fs.pused[storageUsedPercentage.{#SNMPINDEX}],1h,100)<1d) + name: '{#FSNAME}: Disk space is critically low' + event_name: '{#FSNAME}: Disk space is critically low (used > {$VFS.FS.PUSED.MAX.CRIT:"{#FSNAME}"}%)' + opdata: 'Space used: {ITEM.LASTVALUE3} of {ITEM.LASTVALUE2} ({ITEM.LASTVALUE1})' + priority: AVERAGE + description: | + Two conditions should match: + 1. The first condition - utilization of the space should be above `{$VFS.FS.PUSED.MAX.CRIT:"{#FSNAME}"}`. + 2. The second condition should be one of the following: + - the disk free space is less than `{$VFS.FS.FREE.MIN.CRIT:"{#FSNAME}"}`; + - the disk will be full in less than 24 hours. + tags: + - tag: scope + value: availability + - tag: scope + value: capacity + - uuid: 5fe03de27f034a9ea7820c82603264f3 + expression: | + last(/Blockbit NGFW by SNMP/vfs.fs.pused[storageUsedPercentage.{#SNMPINDEX}])>{$VFS.FS.PUSED.MAX.WARN:"{#FSNAME}"} and + ((last(/Blockbit NGFW by SNMP/vfs.fs.total[hrStorageSize.{#SNMPINDEX}])-last(/Blockbit NGFW by SNMP/vfs.fs.used[hrStorageUsed.{#SNMPINDEX}]))<{$VFS.FS.FREE.MIN.WARN:"{#FSNAME}"} or timeleft(/Blockbit NGFW by SNMP/vfs.fs.pused[storageUsedPercentage.{#SNMPINDEX}],1h,100)<1d) + name: '{#FSNAME}: Disk space is low' + event_name: '{#FSNAME}: Disk space is low (used > {$VFS.FS.PUSED.MAX.WARN:"{#FSNAME}"}%)' + opdata: 'Space used: {ITEM.LASTVALUE3} of {ITEM.LASTVALUE2} ({ITEM.LASTVALUE1})' + priority: WARNING + description: | + Two conditions should match: + 1. The first condition - utilization of the space should be above `{$VFS.FS.PUSED.MAX.WARN:"{#FSNAME}"}`. + 2. The second condition should be one of the following: + - the disk free space is less than `{$VFS.FS.FREE.MIN.WARN:"{#FSNAME}"}`; + - the disk will be full in less than 24 hours. + dependencies: + - name: '{#FSNAME}: Disk space is critically low' + expression: | + last(/Blockbit NGFW by SNMP/vfs.fs.pused[storageUsedPercentage.{#SNMPINDEX}])>{$VFS.FS.PUSED.MAX.CRIT:"{#FSNAME}"} and + ((last(/Blockbit NGFW by SNMP/vfs.fs.total[hrStorageSize.{#SNMPINDEX}])-last(/Blockbit NGFW by SNMP/vfs.fs.used[hrStorageUsed.{#SNMPINDEX}]))<{$VFS.FS.FREE.MIN.CRIT:"{#FSNAME}"} or timeleft(/Blockbit NGFW by SNMP/vfs.fs.pused[storageUsedPercentage.{#SNMPINDEX}],1h,100)<1d) + tags: + - tag: scope + value: availability + - tag: scope + value: capacity + graph_prototypes: + - uuid: 82414c0eaa954ad4bc70aa357608385e + name: '{#FSNAME}: Disk space usage' + width: '600' + height: '340' + type: PIE + show_3d: 'YES' + graph_items: + - color: '969696' + calc_fnc: LAST + type: GRAPH_SUM + item: + host: 'Blockbit NGFW by SNMP' + key: 'vfs.fs.total[hrStorageSize.{#SNMPINDEX}]' + - sortorder: '1' + color: C80000 + calc_fnc: LAST + item: + host: 'Blockbit NGFW by SNMP' + key: 'vfs.fs.used[hrStorageUsed.{#SNMPINDEX}]' + master_item: + key: vfs.fs.walk + preprocessing: + - type: SNMP_WALK_TO_JSON + parameters: + - '{#FSNAME}' + - 1.3.6.1.2.1.25.2.3.1.3 + - '0' + - '{#FSTYPE}' + - 1.3.6.1.2.1.25.2.3.1.2 + - '0' + - '{#ALLOC_UNITS}' + - 1.3.6.1.2.1.25.2.3.1.4 + - '0' + - type: DISCARD_UNCHANGED_HEARTBEAT + parameters: + - 1h + tags: + - tag: class + value: os + - tag: target + value: linux + macros: + - macro: '{$CPU.UTIL.CRIT}' + value: '90' + - macro: '{$CPU_HIGH}' + value: '90' + description: 'High cpu temp for alert' + - macro: '{$CPU_WARN}' + value: '80' + description: 'Warn cpu temp for alert' + - macro: '{$ICMP_LOSS_WARN}' + value: '20' + - macro: '{$ICMP_RESPONSE_TIME_WARN}' + value: '0.15' + - macro: '{$IF.ERRORS.WARN}' + value: '2' + - macro: '{$IF.UTIL.MAX}' + value: '90' + - macro: '{$IFCONTROL}' + value: '1' + - macro: '{$LOAD_AVG_PER_CPU.MAX.WARN}' + value: '1.5' + description: 'Load per CPU considered sustainable. Tune if needed.' + - macro: '{$MEMORY.AVAILABLE.MIN}' + value: 20M + - macro: '{$MEMORY.UTIL.MAX}' + value: '90' + - macro: '{$NET.IF.IFADMINSTATUS.MATCHES}' + value: '^.*' + description: 'Ignore notPresent(6)' + - macro: '{$NET.IF.IFADMINSTATUS.NOT_MATCHES}' + value: ^2$ + description: 'Ignore down(2) administrative status' + - macro: '{$NET.IF.IFALIAS.MATCHES}' + value: '.*' + - macro: '{$NET.IF.IFALIAS.NOT_MATCHES}' + value: CHANGE_IF_NEEDED + - macro: '{$NET.IF.IFDESCR.MATCHES}' + value: '.*' + - macro: '{$NET.IF.IFDESCR.NOT_MATCHES}' + value: CHANGE_IF_NEEDED + - macro: '{$NET.IF.IFNAME.MATCHES}' + value: '^.*$' + - macro: '{$NET.IF.IFNAME.NOT_MATCHES}' + value: '(^Software Loopback Interface|^NULL[0-9.]*$|^[Ll]o[0-9.]*$|^[Ss]ystem$|^Nu[0-9.]*$|^veth[0-9a-z]+$|docker[0-9]+|br-[a-z0-9]{12})' + description: 'Filter out loopbacks, nulls, docker veth links and docker0 bridge by default' + - macro: '{$NET.IF.IFOPERSTATUS.MATCHES}' + value: '^.*$' + - macro: '{$NET.IF.IFOPERSTATUS.NOT_MATCHES}' + value: ^6$ + description: 'Ignore notPresent(6)' + - macro: '{$NET.IF.IFTYPE.MATCHES}' + value: '.*' + - macro: '{$NET.IF.IFTYPE.NOT_MATCHES}' + value: CHANGE_IF_NEEDED + - macro: '{$SNMP.TIMEOUT}' + value: 5m + - macro: '{$SWAP.PFREE.MIN.WARN}' + value: '50' + - macro: '{$VFS.DEV.DEVNAME.MATCHES}' + value: .+ + description: 'This macro is used in block devices discovery. Can be overridden on the host or linked template level' + - macro: '{$VFS.DEV.DEVNAME.NOT_MATCHES}' + value: '^(loop[0-9]*|sd[a-z][0-9]+|nbd[0-9]+|sr[0-9]+|fd[0-9]+|dm-[0-9]+|ram[0-9]+|ploop[a-z0-9]+|md[0-9]*|hcp[0-9]*|zram[0-9]*)' + description: 'This macro is used in block devices discovery. Can be overridden on the host or linked template level' + - macro: '{$VFS.FS.FREE.MIN.CRIT}' + value: 5G + description: 'The critical threshold of the filesystem utilization.' + - macro: '{$VFS.FS.FREE.MIN.WARN}' + value: 10G + description: 'The warning threshold of the filesystem utilization.' + - macro: '{$VFS.FS.FSNAME.MATCHES}' + value: .+ + description: 'This macro is used in filesystems discovery. Can be overridden on the host or linked template level' + - macro: '{$VFS.FS.FSNAME.NOT_MATCHES}' + value: ^(/dev|/sys|/run|/proc|/var/mnt/bkp|.+/shm$) + description: 'This macro is used in filesystems discovery. Can be overridden on the host or linked template level' + - macro: '{$VFS.FS.FSTYPE.MATCHES}' + value: '.*(\.4|\.9|hrStorageFixedDisk|hrStorageFlashMemory)$' + description: 'This macro is used in filesystems discovery. Can be overridden on the host or linked template level' + - macro: '{$VFS.FS.FSTYPE.NOT_MATCHES}' + value: ^\s$ + description: 'This macro is used in filesystems discovery. Can be overridden on the host or linked template level' + - macro: '{$VFS.FS.INODE.PFREE.MIN.CRIT}' + value: '10' + - macro: '{$VFS.FS.INODE.PFREE.MIN.WARN}' + value: '20' + - macro: '{$VFS.FS.PUSED.MAX.CRIT}' + value: '90' + - macro: '{$VFS.FS.PUSED.MAX.WARN}' + value: '80' + dashboards: + - uuid: d66d14bc7df94d8aab51bc3bfb1a366d + name: 'Network interfaces' + pages: + - widgets: + - type: graphprototype + width: '24' + height: '5' + fields: + - type: INTEGER + name: columns + value: '1' + - type: INTEGER + name: rows + value: '1' + - type: GRAPH_PROTOTYPE + name: graphid + value: + host: 'Blockbit NGFW by SNMP' + name: 'Interface {#IFNAME}({#IFALIAS}): Network traffic' + - uuid: ead66e0ed0c34ede8758c73a8a76d3f3 + name: 'System performance' + pages: + - widgets: + - type: graph + width: '12' + height: '5' + fields: + - type: GRAPH + name: graphid + value: + host: 'Blockbit NGFW by SNMP' + name: 'Blockbit NGFW: System load' + - type: graphprototype + x: '12' + width: '12' + height: '5' + fields: + - type: INTEGER + name: columns + value: '1' + - type: INTEGER + name: rows + value: '1' + - type: GRAPH_PROTOTYPE + name: graphid + value: + host: 'Blockbit NGFW by SNMP' + name: 'Blockbit NGFW: CPU usage{#SINGLETON}' + - type: graph + 'y': '5' + width: '12' + height: '5' + fields: + - type: GRAPH + name: graphid + value: + host: 'Blockbit NGFW by SNMP' + name: 'Blockbit NGFW: Memory usage' + - type: graph + x: '12' + 'y': '5' + width: '12' + height: '5' + fields: + - type: GRAPH + name: graphid + value: + host: 'Blockbit NGFW by SNMP' + name: 'Blockbit NGFW: Swap usage' + - type: graphprototype + 'y': '10' + width: '24' + height: '5' + fields: + - type: INTEGER + name: columns + value: '1' + - type: INTEGER + name: rows + value: '1' + - type: GRAPH_PROTOTYPE + name: graphid + value: + host: 'Blockbit NGFW by SNMP' + name: '{#FSNAME}: Disk space usage' + - type: graphprototype + 'y': '15' + width: '24' + height: '5' + fields: + - type: INTEGER + name: columns + value: '1' + - type: INTEGER + name: rows + value: '1' + - type: GRAPH_PROTOTYPE + name: graphid + value: + host: 'Blockbit NGFW by SNMP' + name: '{#DEVNAME}: Disk read/write rates' + - type: graphprototype + 'y': '20' + width: '24' + height: '5' + fields: + - type: INTEGER + name: columns + value: '1' + - type: INTEGER + name: rows + value: '1' + - type: INTEGER + name: source_type + value: '3' + - type: ITEM_PROTOTYPE + name: itemid + value: + host: 'Blockbit NGFW by SNMP' + key: 'vfs.dev.util[diskIOLA1.{#SNMPINDEX}]' + - type: graphprototype + 'y': '25' + width: '24' + height: '5' + fields: + - type: INTEGER + name: columns + value: '1' + - type: INTEGER + name: rows + value: '1' + - type: GRAPH_PROTOTYPE + name: graphid + value: + host: 'Blockbit NGFW by SNMP' + name: 'Interface {#IFNAME}({#IFALIAS}): Network traffic' + valuemaps: + - uuid: 7f78b76de56d4c47ad8714d1270b6470 + name: 'EtherLike-MIB::dot3StatsDuplexStatus' + mappings: + - value: '1' + newvalue: unknown + - value: '2' + newvalue: halfDuplex + - value: '3' + newvalue: fullDuplex + - uuid: e0a1f32f7a0946298afa0e81af8b52ad + name: 'IF-MIB::ifOperStatus' + mappings: + - value: '1' + newvalue: up + - value: '2' + newvalue: down + - value: '4' + newvalue: unknown + - value: '5' + newvalue: dormant + - value: '6' + newvalue: notPresent + - value: '7' + newvalue: lowerLayerDown + - uuid: 69653b062e794b668490263df46b2f19 + name: 'IF-MIB::ifType' + mappings: + - value: '1' + newvalue: other + - value: '2' + newvalue: regular1822 + - value: '3' + newvalue: hdh1822 + - value: '4' + newvalue: ddnX25 + - value: '5' + newvalue: rfc877x25 + - value: '6' + newvalue: ethernetCsmacd + - value: '7' + newvalue: iso88023Csmacd + - value: '8' + newvalue: iso88024TokenBus + - value: '9' + newvalue: iso88025TokenRing + - value: '10' + newvalue: iso88026Man + - value: '11' + newvalue: starLan + - value: '12' + newvalue: proteon10Mbit + - value: '13' + newvalue: proteon80Mbit + - value: '14' + newvalue: hyperchannel + - value: '15' + newvalue: fddi + - value: '16' + newvalue: lapb + - value: '17' + newvalue: sdlc + - value: '18' + newvalue: ds1 + - value: '19' + newvalue: e1 + - value: '20' + newvalue: basicISDN + - value: '21' + newvalue: primaryISDN + - value: '22' + newvalue: propPointToPointSerial + - value: '23' + newvalue: ppp + - value: '24' + newvalue: softwareLoopback + - value: '25' + newvalue: eon + - value: '26' + newvalue: ethernet3Mbit + - value: '27' + newvalue: nsip + - value: '28' + newvalue: slip + - value: '29' + newvalue: ultra + - value: '30' + newvalue: ds3 + - value: '31' + newvalue: sip + - value: '32' + newvalue: frameRelay + - value: '33' + newvalue: rs232 + - value: '34' + newvalue: para + - value: '35' + newvalue: arcnet + - value: '36' + newvalue: arcnetPlus + - value: '37' + newvalue: atm + - value: '38' + newvalue: miox25 + - value: '39' + newvalue: sonet + - value: '40' + newvalue: x25ple + - value: '41' + newvalue: iso88022llc + - value: '42' + newvalue: localTalk + - value: '43' + newvalue: smdsDxi + - value: '44' + newvalue: frameRelayService + - value: '45' + newvalue: v35 + - value: '46' + newvalue: hssi + - value: '47' + newvalue: hippi + - value: '48' + newvalue: modem + - value: '49' + newvalue: aal5 + - value: '50' + newvalue: sonetPath + - value: '51' + newvalue: sonetVT + - value: '52' + newvalue: smdsIcip + - value: '53' + newvalue: propVirtual + - value: '54' + newvalue: propMultiplexor + - value: '55' + newvalue: ieee80212 + - value: '56' + newvalue: fibreChannel + - value: '57' + newvalue: hippiInterface + - value: '58' + newvalue: frameRelayInterconnect + - value: '59' + newvalue: aflane8023 + - value: '60' + newvalue: aflane8025 + - value: '61' + newvalue: cctEmul + - value: '62' + newvalue: fastEther + - value: '63' + newvalue: isdn + - value: '64' + newvalue: v11 + - value: '65' + newvalue: v36 + - value: '66' + newvalue: g703at64k + - value: '67' + newvalue: g703at2mb + - value: '68' + newvalue: qllc + - value: '69' + newvalue: fastEtherFX + - value: '70' + newvalue: channel + - value: '71' + newvalue: ieee80211 + - value: '72' + newvalue: ibm370parChan + - value: '73' + newvalue: escon + - value: '74' + newvalue: dlsw + - value: '75' + newvalue: isdns + - value: '76' + newvalue: isdnu + - value: '77' + newvalue: lapd + - value: '78' + newvalue: ipSwitch + - value: '79' + newvalue: rsrb + - value: '80' + newvalue: atmLogical + - value: '81' + newvalue: ds0 + - value: '82' + newvalue: ds0Bundle + - value: '83' + newvalue: bsc + - value: '84' + newvalue: async + - value: '85' + newvalue: cnr + - value: '86' + newvalue: iso88025Dtr + - value: '87' + newvalue: eplrs + - value: '88' + newvalue: arap + - value: '89' + newvalue: propCnls + - value: '90' + newvalue: hostPad + - value: '91' + newvalue: termPad + - value: '92' + newvalue: frameRelayMPI + - value: '93' + newvalue: x213 + - value: '94' + newvalue: adsl + - value: '95' + newvalue: radsl + - value: '96' + newvalue: sdsl + - value: '97' + newvalue: vdsl + - value: '98' + newvalue: iso88025CRFPInt + - value: '99' + newvalue: myrinet + - value: '100' + newvalue: voiceEM + - value: '101' + newvalue: voiceFXO + - value: '102' + newvalue: voiceFXS + - value: '103' + newvalue: voiceEncap + - value: '104' + newvalue: voiceOverIp + - value: '105' + newvalue: atmDxi + - value: '106' + newvalue: atmFuni + - value: '107' + newvalue: atmIma + - value: '108' + newvalue: pppMultilinkBundle + - value: '109' + newvalue: ipOverCdlc + - value: '110' + newvalue: ipOverClaw + - value: '111' + newvalue: stackToStack + - value: '112' + newvalue: virtualIpAddress + - value: '113' + newvalue: mpc + - value: '114' + newvalue: ipOverAtm + - value: '115' + newvalue: iso88025Fiber + - value: '116' + newvalue: tdlc + - value: '117' + newvalue: gigabitEthernet + - value: '118' + newvalue: hdlc + - value: '119' + newvalue: lapf + - value: '120' + newvalue: v37 + - value: '121' + newvalue: x25mlp + - value: '122' + newvalue: x25huntGroup + - value: '123' + newvalue: trasnpHdlc + - value: '124' + newvalue: interleave + - value: '125' + newvalue: fast + - value: '126' + newvalue: ip + - value: '127' + newvalue: docsCableMaclayer + - value: '128' + newvalue: docsCableDownstream + - value: '129' + newvalue: docsCableUpstream + - value: '130' + newvalue: a12MppSwitch + - value: '131' + newvalue: tunnel + - value: '132' + newvalue: coffee + - value: '133' + newvalue: ces + - value: '134' + newvalue: atmSubInterface + - value: '135' + newvalue: l2vlan + - value: '136' + newvalue: l3ipvlan + - value: '137' + newvalue: l3ipxvlan + - value: '138' + newvalue: digitalPowerline + - value: '139' + newvalue: mediaMailOverIp + - value: '140' + newvalue: dtm + - value: '141' + newvalue: dcn + - value: '142' + newvalue: ipForward + - value: '143' + newvalue: msdsl + - value: '144' + newvalue: ieee1394 + - value: '145' + newvalue: if-gsn + - value: '146' + newvalue: dvbRccMacLayer + - value: '147' + newvalue: dvbRccDownstream + - value: '148' + newvalue: dvbRccUpstream + - value: '149' + newvalue: atmVirtual + - value: '150' + newvalue: mplsTunnel + - value: '151' + newvalue: srp + - value: '152' + newvalue: voiceOverAtm + - value: '153' + newvalue: voiceOverFrameRelay + - value: '154' + newvalue: idsl + - value: '155' + newvalue: compositeLink + - value: '156' + newvalue: ss7SigLink + - value: '157' + newvalue: propWirelessP2P + - value: '158' + newvalue: frForward + - value: '159' + newvalue: rfc1483 + - value: '160' + newvalue: usb + - value: '161' + newvalue: ieee8023adLag + - value: '162' + newvalue: bgppolicyaccounting + - value: '163' + newvalue: frf16MfrBundle + - value: '164' + newvalue: h323Gatekeeper + - value: '165' + newvalue: h323Proxy + - value: '166' + newvalue: mpls + - value: '167' + newvalue: mfSigLink + - value: '168' + newvalue: hdsl2 + - value: '169' + newvalue: shdsl + - value: '170' + newvalue: ds1FDL + - value: '171' + newvalue: pos + - value: '172' + newvalue: dvbAsiIn + - value: '173' + newvalue: dvbAsiOut + - value: '174' + newvalue: plc + - value: '175' + newvalue: nfas + - value: '176' + newvalue: tr008 + - value: '177' + newvalue: gr303RDT + - value: '178' + newvalue: gr303IDT + - value: '179' + newvalue: isup + - value: '180' + newvalue: propDocsWirelessMaclayer + - value: '181' + newvalue: propDocsWirelessDownstream + - value: '182' + newvalue: propDocsWirelessUpstream + - value: '183' + newvalue: hiperlan2 + - value: '184' + newvalue: propBWAp2Mp + - value: '185' + newvalue: sonetOverheadChannel + - value: '186' + newvalue: digitalWrapperOverheadChannel + - value: '187' + newvalue: aal2 + - value: '188' + newvalue: radioMAC + - value: '189' + newvalue: atmRadio + - value: '190' + newvalue: imt + - value: '191' + newvalue: mvl + - value: '192' + newvalue: reachDSL + - value: '193' + newvalue: frDlciEndPt + - value: '194' + newvalue: atmVciEndPt + - value: '195' + newvalue: opticalChannel + - value: '196' + newvalue: opticalTransport + - value: '197' + newvalue: propAtm + - value: '198' + newvalue: voiceOverCable + - value: '199' + newvalue: infiniband + - value: '200' + newvalue: teLink + - value: '201' + newvalue: q2931 + - value: '202' + newvalue: virtualTg + - value: '203' + newvalue: sipTg + - value: '204' + newvalue: sipSig + - value: '205' + newvalue: docsCableUpstreamChannel + - value: '206' + newvalue: econet + - value: '207' + newvalue: pon155 + - value: '208' + newvalue: pon622 + - value: '209' + newvalue: bridge + - value: '210' + newvalue: linegroup + - value: '211' + newvalue: voiceEMFGD + - value: '212' + newvalue: voiceFGDEANA + - value: '213' + newvalue: voiceDID + - value: '214' + newvalue: mpegTransport + - value: '215' + newvalue: sixToFour + - value: '216' + newvalue: gtp + - value: '217' + newvalue: pdnEtherLoop1 + - value: '218' + newvalue: pdnEtherLoop2 + - value: '219' + newvalue: opticalChannelGroup + - value: '220' + newvalue: homepna + - value: '221' + newvalue: gfp + - value: '222' + newvalue: ciscoISLvlan + - value: '223' + newvalue: actelisMetaLOOP + - value: '224' + newvalue: fcipLink + - value: '225' + newvalue: rpr + - value: '226' + newvalue: qam + - value: '227' + newvalue: lmp + - value: '228' + newvalue: cblVectaStar + - value: '229' + newvalue: docsCableMCmtsDownstream + - value: '230' + newvalue: adsl2 + - value: '231' + newvalue: macSecControlledIF + - value: '232' + newvalue: macSecUncontrolledIF + - value: '233' + newvalue: aviciOpticalEther + - value: '234' + newvalue: atmbond + - value: '235' + newvalue: voiceFGDOS + - value: '236' + newvalue: mocaVersion1 + - value: '237' + newvalue: ieee80216WMAN + - value: '238' + newvalue: adsl2plus + - value: '239' + newvalue: dvbRcsMacLayer + - value: '240' + newvalue: dvbTdm + - value: '241' + newvalue: dvbRcsTdma + - value: '242' + newvalue: x86Laps + - value: '243' + newvalue: wwanPP + - value: '244' + newvalue: wwanPP2 + - value: '245' + newvalue: voiceEBS + - value: '246' + newvalue: ifPwType + - value: '247' + newvalue: ilan + - value: '248' + newvalue: pip + - value: '249' + newvalue: aluELP + - value: '250' + newvalue: gpon + - value: '251' + newvalue: vdsl2 + - value: '252' + newvalue: capwapDot11Profile + - value: '253' + newvalue: capwapDot11Bss + - value: '254' + newvalue: capwapWtpVirtualRadio + - value: '255' + newvalue: bits + - value: '256' + newvalue: docsCableUpstreamRfPort + - value: '257' + newvalue: cableDownstreamRfPort + - value: '258' + newvalue: vmwareVirtualNic + - value: '259' + newvalue: ieee802154 + - value: '260' + newvalue: otnOdu + - value: '261' + newvalue: otnOtu + - value: '262' + newvalue: ifVfiType + - value: '263' + newvalue: g9981 + - value: '264' + newvalue: g9982 + - value: '265' + newvalue: g9983 + - value: '266' + newvalue: aluEpon + - value: '267' + newvalue: aluEponOnu + - value: '268' + newvalue: aluEponPhysicalUni + - value: '269' + newvalue: aluEponLogicalLink + - value: '270' + newvalue: aluGponOnu + - value: '271' + newvalue: aluGponPhysicalUni + - value: '272' + newvalue: vmwareNicTeam + - value: '277' + newvalue: docsOfdmDownstream + - value: '278' + newvalue: docsOfdmaUpstream + - value: '279' + newvalue: gfast + - value: '280' + newvalue: sdci + - value: '281' + newvalue: xboxWireless + - value: '282' + newvalue: fastdsl + - value: '283' + newvalue: docsCableScte55d1FwdOob + - value: '284' + newvalue: docsCableScte55d1RetOob + - value: '285' + newvalue: docsCableScte55d2DsOob + - value: '286' + newvalue: docsCableScte55d2UsOob + - value: '287' + newvalue: docsCableNdf + - value: '288' + newvalue: docsCableNdr + - value: '289' + newvalue: ptm + - value: '290' + newvalue: ghn + - uuid: d7d03118235a48c098a189429961eff6 + name: 'Service state' + mappings: + - value: '0' + newvalue: Down + - value: '1' + newvalue: Up + - uuid: f75f38ce48dc44918c1dc45b66145f68 + name: zabbix.host.available + mappings: + - value: '0' + newvalue: 'not available' + - value: '1' + newvalue: available + - value: '2' + newvalue: unknown + triggers: + - uuid: 2ea73d44f3cd4c92acf62a9b889c5605 + expression: 'max(/Blockbit NGFW by SNMP/system.swap.pfree[snmp],5m)<{$SWAP.PFREE.MIN.WARN} and last(/Blockbit NGFW by SNMP/system.swap.total[memTotalSwap.0])>0' + name: 'Blockbit NGFW: High swap space usage' + event_name: 'Blockbit NGFW: High swap space usage (less than {$SWAP.PFREE.MIN.WARN}% free)' + opdata: 'Free: {ITEM.LASTVALUE1}, total: {ITEM.LASTVALUE2}' + priority: WARNING + description: 'If there is no swap configured, this trigger is ignored.' + dependencies: + - name: 'Blockbit NGFW: High memory utilization' + expression: 'min(/Blockbit NGFW by SNMP/vm.memory.util[snmp],5m)>{$MEMORY.UTIL.MAX}' + - name: 'Blockbit NGFW: Lack of available memory' + expression: 'max(/Blockbit NGFW by SNMP/vm.memory.available[snmp],5m)<{$MEMORY.AVAILABLE.MIN} and last(/Blockbit NGFW by SNMP/vm.memory.total[memTotalReal.0])>0' + tags: + - tag: scope + value: capacity + - uuid: 74047500e066475dbe4e205e1ff29e18 + expression: '(last(/Blockbit NGFW by SNMP/system.hw.uptime[hrSystemUptime.0])>0 and last(/Blockbit NGFW by SNMP/system.hw.uptime[hrSystemUptime.0])<10m) or (last(/Blockbit NGFW by SNMP/system.hw.uptime[hrSystemUptime.0])=0 and last(/Blockbit NGFW by SNMP/system.net.uptime[sysUpTime.0])<10m)' + name: 'Blockbit NGFW: Host has been restarted' + event_name: 'Blockbit NGFW: {HOST.NAME} has been restarted (uptime < 10m)' + priority: WARNING + description: 'Uptime is less than 10 minutes.' + manual_close: 'YES' + dependencies: + - name: 'Blockbit NGFW: No SNMP data collection' + expression: 'max(/Blockbit NGFW by SNMP/zabbix[host,snmp,available],{$SNMP.TIMEOUT})=0' + tags: + - tag: scope + value: notice + - uuid: 2b3c7abbb5cc4b8c9bb4c57beda9984e + expression: 'max(/Blockbit NGFW by SNMP/vm.memory.available[snmp],5m)<{$MEMORY.AVAILABLE.MIN} and last(/Blockbit NGFW by SNMP/vm.memory.total[memTotalReal.0])>0' + name: 'Blockbit NGFW: Lack of available memory' + event_name: 'Blockbit NGFW: Lack of available memory (<{$MEMORY.AVAILABLE.MIN} of {ITEM.VALUE2})' + opdata: 'Available: {ITEM.LASTVALUE1}, total: {ITEM.LASTVALUE2}' + priority: AVERAGE + tags: + - tag: scope + value: capacity + - tag: scope + value: performance + - uuid: 10954d672bc746e2a1af219885d352bc + expression: | + min(/Blockbit NGFW by SNMP/system.cpu.load.avg1[laLoad.1],5m)/last(/Blockbit NGFW by SNMP/system.cpu.num[snmp])>{$LOAD_AVG_PER_CPU.MAX.WARN} + and last(/Blockbit NGFW by SNMP/system.cpu.load.avg5[laLoad.2])>0 + and last(/Blockbit NGFW by SNMP/system.cpu.load.avg15[laLoad.3])>0 + name: 'Blockbit NGFW: Load average is too high' + event_name: 'Blockbit NGFW: Load average is too high (per CPU load over {$LOAD_AVG_PER_CPU.MAX.WARN} for 5m)' + opdata: 'Load averages(1m 5m 15m): ({ITEM.LASTVALUE1} {ITEM.LASTVALUE3} {ITEM.LASTVALUE4}), # of CPUs: {ITEM.LASTVALUE2}' + priority: AVERAGE + description: 'The load average per CPU is too high. The system may be slow to respond.' + tags: + - tag: scope + value: capacity + - tag: scope + value: performance + graphs: + - uuid: 248a96d5d5364ecc827baa085083a04b + name: 'Blockbit NGFW: CPU jumps' + graph_items: + - color: 199C0D + item: + host: 'Blockbit NGFW by SNMP' + key: 'system.cpu.switches[ssRawContexts.0]' + - sortorder: '1' + color: F63100 + item: + host: 'Blockbit NGFW by SNMP' + key: 'system.cpu.intr[ssRawInterrupts.0]' + - uuid: bf1db51e279f475db77d269793738fd6 + name: 'Blockbit NGFW: Memory usage' + ymin_type_1: FIXED + graph_items: + - drawtype: BOLD_LINE + color: 199C0D + item: + host: 'Blockbit NGFW by SNMP' + key: 'vm.memory.total[memTotalReal.0]' + - sortorder: '1' + drawtype: GRADIENT_LINE + color: F63100 + item: + host: 'Blockbit NGFW by SNMP' + key: 'vm.memory.available[snmp]' + - uuid: 729b411241374ff8b90eb17e151f3193 + name: 'Blockbit NGFW: Memory utilization' + ymin_type_1: FIXED + ymax_type_1: FIXED + graph_items: + - drawtype: GRADIENT_LINE + color: 199C0D + item: + host: 'Blockbit NGFW by SNMP' + key: 'vm.memory.util[snmp]' + - uuid: aca5ea5bb2ac4acfbba80ad2aa6151f4 + name: 'Blockbit NGFW: Swap usage' + graph_items: + - color: 199C0D + item: + host: 'Blockbit NGFW by SNMP' + key: 'system.swap.free[memAvailSwap.0]' + - sortorder: '1' + color: F63100 + item: + host: 'Blockbit NGFW by SNMP' + key: 'system.swap.total[memTotalSwap.0]' + - uuid: 258a3c77ab3a4b0b95534c00163858b3 + name: 'Blockbit NGFW: System load' + ymin_type_1: FIXED + graph_items: + - color: 199C0D + item: + host: 'Blockbit NGFW by SNMP' + key: 'system.cpu.load.avg1[laLoad.1]' + - sortorder: '1' + color: F63100 + item: + host: 'Blockbit NGFW by SNMP' + key: 'system.cpu.load.avg5[laLoad.2]' + - sortorder: '2' + color: 00611C + item: + host: 'Blockbit NGFW by SNMP' + key: 'system.cpu.load.avg15[laLoad.3]' + - sortorder: '3' + color: F7941D + yaxisside: RIGHT + item: + host: 'Blockbit NGFW by SNMP' + key: 'system.cpu.num[snmp]'