6.4

Zabbix Template: firewalld

Monitoring of firewalld.

This template is part of RaBe's Zabbix template and helpers collection.

Items

Item: firewalld: process summary

Get info about firewalld processes

proc.get[firewalld,root,,summary]

Settings:

Item Setting	Value
Type	ZABBIX_ACTIVE
Value type	TEXT

Item: firewalld: Unit active state

State value that reflects whether the unit is currently active or not. The following states are currently defined: "active", "reloading", "inactive", "failed", "activating", and "deactivating".

rabe.firewalld.active_state

Settings:

Item Setting	Value
Type	DEPENDENT
History	7d
Source item	systemd.unit.get["firewalld.service"]

Preprocessing steps:

Type	Parameters
JSONPATH	["$.ActiveState.state"]
DISCARD_UNCHANGED_HEARTBEAT	["30m"]

Item: firewalld: CPU seconds (system)

Total CPU seconds (system) of firewalld processes.

rabe.firewalld.cputime_system

Settings:

Item Setting	Value
Type	DEPENDENT
Value type	FLOAT
History	7d
Source item	proc.get[firewalld,root,,summary]

Preprocessing steps:

Type	Parameters
JSONPATH	["$[*].cputime_system.first()"]
SIMPLE_CHANGE	[""]
DISCARD_UNCHANGED_HEARTBEAT	["5m"]

Item: firewalld: CPU seconds (user)

Total CPU seconds (user) of firewalld processes.

rabe.firewalld.cputime_user

Settings:

Item Setting	Value
Type	DEPENDENT
Value type	FLOAT
History	7d
Source item	proc.get[firewalld,root,,summary]

Preprocessing steps:

Type	Parameters
JSONPATH	["$[*].cputime_user.first()"]
SIMPLE_CHANGE	[""]
DISCARD_UNCHANGED_HEARTBEAT	["5m"]

Item: firewalld: Service load state

State value that reflects whether the configuration file of this unit has been loaded. The following states are currently defined: "loaded", "error", and "masked".

rabe.firewalld.load_state

Settings:

Item Setting	Value
Type	DEPENDENT
History	7d
Source item	systemd.unit.get["firewalld.service"]

Preprocessing steps:

Type	Parameters
JSONPATH	["$.LoadState.state"]
DISCARD_UNCHANGED_HEARTBEAT	["30m"]

Item: firewalld: Number of processes

Number of firewalld processes.

rabe.firewalld.processes

Settings:

Item Setting	Value
Type	DEPENDENT
History	7d
Source item	proc.get[firewalld,root,,summary]

Preprocessing steps:

Type	Parameters
JSONPATH	["$[*].processes.first()"]
DISCARD_UNCHANGED_HEARTBEAT	["5m"]

Item: firewalld: Memory usage (RSS)

Memory usage of firewalld processes.

rabe.firewalld.rss

Settings:

Item Setting	Value
Type	DEPENDENT
History	7d
Source item	proc.get[firewalld,root,,summary]

Preprocessing steps:

Type	Parameters
JSONPATH	["$[*].rss.first()"]
DISCARD_UNCHANGED_HEARTBEAT	["5m"]

Item: firewalld: Swap usage

Swap usage of firewalld processes.

rabe.firewalld.swap

Settings:

Item Setting	Value
Type	DEPENDENT
History	7d
Source item	proc.get[firewalld,root,,summary]

Preprocessing steps:

Type	Parameters
JSONPATH	["$[*].swap.first()"]
DISCARD_UNCHANGED_HEARTBEAT	["5m"]

Item: firewalld: Number of threads

Number of firewalld threads.

rabe.firewalld.threads

Settings:

Item Setting	Value
Type	DEPENDENT
History	7d
Source item	proc.get[firewalld,root,,summary]

Preprocessing steps:

Type	Parameters
JSONPATH	["$[*].threads.first()"]
DISCARD_UNCHANGED_HEARTBEAT	["5m"]

Item: firewalld: Unit file state

Encodes the install state of the unit file of FragmentPath. It currently knows the following states: "enabled", "enabled-runtime", "linked", "linked-runtime", "masked", "masked-runtime", "static", "disabled", and "invalid".

rabe.firewalld.unitfile_state

Settings:

Item Setting	Value
Type	DEPENDENT
History	7d
Source item	systemd.unit.get["firewalld.service"]

Preprocessing steps:

Type	Parameters
JSONPATH	["$.UnitFileState.state"]
DISCARD_UNCHANGED_HEARTBEAT	["30m"]

Item: firewalld: Uptime

Number of seconds since unit entered the active state.

rabe.firewalld.uptime

Settings:

Item Setting	Value
Type	DEPENDENT
Value type	FLOAT in uptime
History	7d
Source item	systemd.unit.get["firewalld.service"]

Preprocessing steps:

Type	Parameters
JAVASCRIPT	["data = JSON.parse(value);\nif (data.ActiveEnterTimestamp > data.ActiveExitTimestamp) {\n return Math.floor(Date.now() / 1000) - Number(data.ActiveEnterTimestamp) / 1000000;\n}\nreturn null;\n"]

Item: firewalld: unit info

Get unit info from systemd

systemd.unit.get["firewalld.service"]

Settings:

Item Setting	Value
Type	ZABBIX_ACTIVE
Value type	TEXT

Triggers

Trigger: firewalld: Service is not running

Settings:

Trigger Setting	Values
Priority	WARNING
Manual close	YES

last(/firewalld/rabe.firewalld.active_state)<>1

Trigger: firewalld: No running processes

No running firewalld processes. Settings:

Trigger Setting	Values
Priority	HIGH

last(/firewalld/rabe.firewalld.processes)<{$FIREWALLD.THRESHOLD.MIN_PROC}

Trigger: firewalld: has been restarted

Settings:

Trigger Setting	Values
Priority	INFO
Manual close	YES

last(/firewalld/rabe.firewalld.uptime)<=10m

Macros

The following Zabbix macros are configured via this template.

Macro: {$FIREWALLD.THRESHOLD.MIN_PROC}

Minimum amount of processes expected to be running at all times.

Default:

1

Dashboards

The following Zabbix dashboards are included in this template.

• firewalld: Overview

License

This template is free software: you can redistribute it and/or modify it under the terms of the GNU Affero General Public License as published by the Free Software Foundation, version 3 of the License.

Copyright

Copyright (c) 2017 - 2024 Radio Bern RaBe