自学Zabbix3.5.3-监控项item-key

1. 温习

Zabbix server是Zabbix软件的中心进程。

Server执行polling和trapping来采集数据，评估是否触发触发器，发送报警给用户。它是Zabbix agent和proxy用来报告关于系统可用性和完整性数据的中心组件，Server也可以通过简单服务检查(simple service check)来完成远程网络服务检测。

Server是所有配置、统计和操作数据的中心存储仓库，也是在所有的监控系统中扮演故障发生时通知管理员的角色

基础Zabbix server依据功能不同划分为三个部分，分别为: Zabbix server、web前端及数据库。

由于Zabbix的所有的配置信息保存在数据库中，server和web前端可以直接进行操作。比如，通过web前端(或者API)创建一个新的监控项时，它将创建的数据插入数据库。一分钟左右Zabbix                               server会查询监控项数据表，并将查询的监控项 列表保存在自己的缓存(cache)中。这也是为什么通过Zabbix前端进行的变更将在两分钟左右生效。

Zabbix agent部署在被监控机器上用来监控本地资源和应用（如硬盘、内存、处理器统计等）.

Zabbix agent聚合本地的运行信息并将数据发送给Zabbix server以进一步处理. 一旦出现异常(如硬盘空间满的情况或者服务进行宕掉),Zabbix server将会发送告警给管理员报告本次异常.

Zabbix agent利用本地系统调用完成统计信息收集，因此它非常的高效。
         
        被动(passive)和主动(active)检查

Zabbix agent提供被动和主动检查方式：

被动检查模式中agent应答数据请求，Zabbix server或者proxy询问agent数据,如CPU load, 然后Zabbix agent回送结果给server.

主动检查模式处理过程将相对复杂. agent必须首先进行一次请求Zabbix server索取监控项列表，然后发送对应的值给server.

选择是被动还是主动检查，需要在监控性类型中选择’Zabbix agent’或者’Zabbix agent (active)’
                  被动：zabbix server向zabbix agent讨要数据。
                  主动：zabbix agent提交数据给zabbix server。

Zabbix代理(proxy)

      通常用于替代server完成对多个监控设备收集监控信息并将数据发送给Zabbix server. 所有的收集数据会先存储在代理本地缓存中然后传送给Zabbix server.

代理是可选的,不过使用它可以有效的降低在分布式环境中单一的Zabbix server负载. 通过代理去收集收集，server可以有效降低CPU和磁盘I/O消耗.

Zabbix代理可以出色的完成远程区域、分支机构、没有本地管理员的网络的集中监控.

Zabbix代理使用独立的数据库

2. 监控项item 所有的key

Key	Name
agent.hostname	Agent host name. Returns string
agent.ping	Agent availability check. Returns nothing - unavailable; 1 - available
agent.version	Version of Zabbix agent. Returns string
kernel.maxfiles	Maximum number of opened files supported by OS. Returns integer
kernel.maxproc	Maximum number of processes supported by OS. Returns integer
net.dns[<ip>,name,<type>,<timeout>,<count>,<protocol>]	Checks if DNS service is up. Returns 0 - DNS is down (server did not respond or DNS resolution failed); 1 - DNS is up
net.dns.record[<ip>,name,<type>,<timeout>,<count>,<protocol>]	Performs a DNS query. Returns character string with the required type of information
net.if.collisions[if]	Number of out-of-window collisions. Returns integer
net.if.in[if,<mode>]	Incoming traffic statistics on network interface. Returns integer
net.if.list	Network interface list (includes interface type, status, IPv4 address, description). Returns text
net.if.out[if,<mode>]	Outgoing traffic statistics on network interface. Returns integer
net.if.total[if,<mode>]	Sum of incoming and outgoing traffic statistics on network interface. Returns integer
net.tcp.listen[port]	Checks if this TCP port is in LISTEN state. Returns 0 - it is not in LISTEN state; 1 - it is in LISTEN state
net.tcp.port[<ip>,port]	Checks if it is possible to make TCP connection to specified port. Returns 0 - cannot connect; 1 - can connect
net.tcp.service[service,<ip>,<port>]	Checks if service is running and accepting TCP connections. Returns 0 - service is down; 1 - service is running
net.tcp.service.perf[service,<ip>,<port>]	Checks performance of TCP service. Returns 0 - service is down; seconds - the number of seconds spent while connecting to the service
net.udp.listen[port]	Checks if this UDP port is in LISTEN state. Returns 0 - it is not in LISTEN state; 1 - it is in LISTEN state
net.udp.service[service,<ip>,<port>]	Checks if service is running and responding to UDP requests. Returns 0 - service is down; 1 - service is running
net.udp.service.perf[service,<ip>,<port>]	Checks performance of UDP service. Returns 0 - service is down; seconds - the number of seconds spent waiting for response from the service
perf_counter[counter,<interval>]	Value of any Windows performance counter. Returns integer, float, string or text (depending on the request)
proc.cpu.util[<name>,<user>,<type>,<cmdline>,<mode>,<zone>]	Process CPU utilisation percentage. Returns float
proc.mem[<name>,<user>,<mode>,<cmdline>,<memtype>]	Memory used by process in bytes. Returns integer
proc.num[<name>,<user>,<state>,<cmdline>]	The number of processes. Returns integer
proc_info[process,<attribute>,<type>]	Different information about specific process(es). Returns float
sensor[device,sensor,<mode>]	Hardware sensor reading. Returns float
service.info[service,<param>]	Information about a service. Returns integer with param as state, startup; string - with param as displayname, path, user; text - with param as description; Specifically for state: 0 - running, 1 - paused, 2 - start pending, 3 - pause pending, 4 - continue pending, 5 - stop pending, 6 - stopped, 7 - unknown, 255 - no such service; Specifically for startup: 0 - automatic, 1 - automatic delayed, 2 - manual, 3 - disabled, 4 - unknown
services[<type>,<state>,<exclude>]	Listing of services. Returns 0 - if empty; text - list of services separated by a newline
system.boottime	System boot time. Returns integer (Unix timestamp)
system.cpu.intr	Device interrupts. Returns integer
system.cpu.load[<cpu>,<mode>]	CPU load. Returns float
system.cpu.num[<type>]	Number of CPUs. Returns integer
system.cpu.switches	Count of context switches. Returns integer
system.cpu.util[<cpu>,<type>,<mode>]	CPU utilisation percentage. Returns float
system.hostname[<type>]	System host name. Returns string
system.hw.chassis[<info>]	Chassis information. Returns string
system.hw.cpu[<cpu>,<info>]	CPU information. Returns string or integer
system.hw.devices[<type>]	Listing of PCI or USB devices. Returns text
system.hw.macaddr[<interface>,<format>]	Listing of MAC addresses. Returns string
system.localtime[<type>]	System time. Returns integer with type as utc; string - with type as local
system.run[command,<mode>]	Run specified command on the host. Returns text result of the command; 1 - with mode as nowait (regardless of command result)
system.stat[resource,<type>]	System statistics. Returns integer or float
system.sw.arch	Software architecture information. Returns string
system.sw.os[<info>]	Operating system information. Returns string
system.sw.packages[<package>,<manager>,<format>]	Listing of installed packages. Returns text
system.swap.in[<device>,<type>]	Swap in (from device into memory) statistics. Returns integer
system.swap.out[<device>,<type>]	Swap out (from memory onto device) statistics. Returns integer
system.swap.size[<device>,<type>]	Swap space size in bytes or in percentage from total. Returns integer for bytes; float for percentage
system.uname	Identification of the system. Returns string
system.uptime	System uptime in seconds. Returns integer
system.users.num	Number of users logged in. Returns integer
vfs.dev.read[<device>,<type>,<mode>]	Disk read statistics. Returns integer with type in sectors, operations, bytes; float with type in sps, ops, bps
vfs.dev.write[<device>,<type>,<mode>]	Disk write statistics. Returns integer with type in sectors, operations, bytes; float with type in sps, ops, bps
vfs.file.cksum[file]	File checksum, calculated by the UNIX cksum algorithm. Returns integer
vfs.file.contents[file,<encoding>]	Retrieving contents of a file. Returns text
vfs.file.exists[file]	Checks if file exists. Returns 0 - not found; 1 - regular file or a link (symbolic or hard) to regular file exists
vfs.file.md5sum[file]	MD5 checksum of file. Returns character string (MD5 hash of the file)
vfs.file.regexp[file,regexp,<encoding>,<start line>,<end line>,<output>]	Find string in a file. Returns the line containing the matched string, or as specified by the optional output parameter
vfs.file.regmatch[file,regexp,<encoding>,<start line>,<end line>]	Find string in a file. Returns 0 - match not found; 1 - found
vfs.file.size[file]	File size (in bytes). Returns integer
vfs.file.time[file,<mode>]	File time information. Returns integer (Unix timestamp)
vfs.fs.inode[fs,<mode>]	Number or percentage of inodes. Returns integer for number; float for percentage
vfs.fs.size[fs,<mode>]	Disk space in bytes or in percentage from total. Returns integer for bytes; float for percentage
vm.memory.size[<mode>]	Memory size in bytes or in percentage from total. Returns integer for bytes; float for percentage
vm.vmemory.size[<type>]	Virtual space size in bytes or in percentage from total. Returns integer for bytes; float for percentage
web.page.get[host,<path>,<port>]	Get content of web page. Returns web page source as text
web.page.perf[host,<path>,<port>]	Loading time of full web page (in seconds). Returns float
web.page.regexp[host,<path>,<port>,<regexp>,<length>,<output>]	Find string on a web page. Returns the matched string, or as specified by the optional output parameter
wmi.get[<namespace>,<query>]	Execute WMI query and return the first selected object. Returns integer, float, string or text (depending on the request)

Key
功能	返回值		参数	描述
agent.hostname
			-
agent.ping
agent.version
zabbix agent版本	字符串		-	例如返回： 1.8.2
kernel.maxfiles
系统支持最大的openfiles	整数
kernel.maxproc
系统支持最大的进程数量	整数
监控日志文件	Log	file – 文件详细路径regexp – 正则encoding – 编码 maxlines – zabbix agent向server或者proxy发送最大的行数。这个参数覆盖配置文件zabbxi_agentd.conf中的’MaxLinesPerSecond’ mode – 可选值: all (默认), skip (跳过处理老数据).mode参数从2.0版本开始支持 output – 可选项，输出格式模板. The \0 escape sequence is replaced with the matched text while an \N(where N=1…9) escape sequence is replaced with Nth matched group (or an empty string if the N exceeds the number of captured groups). If <output> is left empty – the whole line containing the matched text is returned. Note that all global regular expression types except ‘Result is TRUE’ always return the whole matched line and the <output> parameter is ignored. output是2.2中新加入的功能		这个监控项只能设置为 active check（主动模式）.如果文件不存在或者没有相应的权限，那么监控项状态会转变为unsupported.示例: log[/var/log/syslog] log[/var/log/syslog,error] log[/home/zabbix/logs/logfile,,,100]
logrt[file_pattern,<regexp>,<encoding>,<maxlines>,<mode>,<output>]
监控支持轮转的日志	Log		file_pattern – 文件绝对路径regexp – 正则表达式encoding – 编码 maxlines – 客户端每秒发送给server的最大行数. 这个参数会覆盖客户端配置文件zabbix_agentd.conf中MaxLinesPerSecond的值 mode – 可选值: all (默认), skip (跳过老数据的处理). Mode参数从2.0开始支持 output – an optional output formatting template. The \0 escape sequence is replaced with the matched text while an \N(where N=1…9) escape sequence is replaced with Nth matched group (or an empty string if the N exceeds the number of captured groups). If <output> is left empty – the whole line containing the matched text is returned. Note that all global regular expression types except ‘Result is TRUE’ always return the whole matched line and the <output> parameter is ignored. The output parameter is supported from version 2.2.	The item must be configured as an active check. Log rotation is based on the last modification time of files.示例:logrt[“/home/zabbix/logs/^logfile[0-9]{1,3}$”,,,100] – will match a file like “logfile1″ (will not match “.logfile1″) logrt[“/home/user/logfile_.*_[0-9]{1,3}”,”pattern_to_match”,”UTF-8″,100] – will collect data from files such “logfile_abc_1” or “logfile__001”.
net.dns[<ip>,zone,<type>,<timeout>,<count>]
检测DNS服务是否开启	0 – DNS挂了 1 – DNS运行中		ip – DNS服务器的ip地址(留空表示使用本地DNS, ignored on Windows)zone – 需要测试的域名type – 记录类型 (默认为 SOA) timeout (ignored on Windows) – 超时时间(默认1秒) count (ignored on Windows) – 重试次数 (默认值2)	示例key:net.dns[8.8.8.8,zabbix.com,MX,2,1]type可选值: ANY, A, NS, CNAME, MB, MG, MR, PTR, MD, MF, MX, SOA, NULL, WKS (除了windows), HINFO, MINFO, TXT, SRV SRV记录从Zabbix agent versions 1.8.6 (Unix) and 2.0.0 (Windows)开始支持Zabbix 2.0 之前的命名方式: net.tcp.dns（目前依旧支持）
net.dns.record[<ip>,zone,<type>,<timeout>,<count>]
执行一个DNS查询	获取DNS查询数据		ip – DNS服务器的ip地址(留空表示使用本地DNS, ignored on Windows)zone – 需要测试的域名type – 记录类型 (默认为 SOA) timeout (ignored on Windows) – 超时时间(默认1秒) count (ignored on Windows) – 重试次数 (默认值2)	示例key:net.dns.record[8.8.8.8,ttlsa.com,MX,2,1]type的可选值: ANY, A, NS, CNAME, MB, MG, MR, PTR, MD, MF, MX, SOA, NULL, WKS (except for Windows), HINFO, MINFO, TXT, SRV SRV记录从Zabbix agent versions 1.8.6 (Unix) and 2.0.0 (Windows)开始支持Zabbix 2.0 之前的命名方式: net.tcp.dns（目前依旧支持）
net.if.collisions[if]
Out-of-window collision	Number of collisions		数字	if – 网卡
net.if.discovery
列出网卡. 通常用于低级别的discovery	JSON对象			Zabbix agent 2.0开始支持 但是操作系统FreeBSD, OpenBSD and NetBSD上的 Zabbix agent 2.2开始支持
net.if.in[if,<mode>]
网卡入口流量	整数		if – 网卡名称mode – 可用值:bytes – 字节数 (默认) packets – 包数量 errors – 错误数量 dropped – 丢包数量	示例keys: net.if.in[eth0,errors] net.if.in[eth0]请使用增量存储方式
net.if.out[if,<mode>]
网卡出口流量	整数		if – 网卡名称mode – 可用值:bytes – 字节数 (默认) packets – 包数量 errors – 错误数量 dropped – 丢包数量	范例keys:net.if.out[eth0,errors] net.if.out[eth0]请使用增量存储方式
net.if.total[if,<mode>]
网卡进/出流量的总和	整数		if – 网卡名称mode – 可用值:bytes – 字节数 (默认) packets – 包数量 errors – 错误数量 dropped – 丢包数量	范例keys:net.if.total[eth0,errors] net.if.total[eth0]请使用增量存储方式
net.tcp.listen[port]
检测端口是否开启	0 – 未监听1 – 监听中		port – TCP端口	示例:net.tcp.listen[80]linux下的zabbix agent 1.8.4开始支持
net.tcp.port[<ip>,port]
是否可以连接到指定的TCP端口	0 – 无法连接1 – 可以连接		ip – IP地址(默认是 127.0.0.1)port – 端口	范例:net.tcp.port[,80]检测web服务器端口是否运行中 老命名方式: check_port[*]
net.tcp.service[service,<ip>,<port>]
检测服务是否开启，并且端口可用	0 – 服务挂了1 – 服务运行中		service – 如下: ssh, ntp, ldap, smtp, ftp, http, pop, nntp,imap, tcp, https, telnetip – IP地址 (默认127.0.0.1)port – 端口 (默认情况为标准端口号)	示例key:net.tcp.service[ftp,,45] – 检测45端口上得FTP是否运行中Zabbix 1.8.3 支持的版本请使用service.ntp 代替ntp. https 和telnet 服务从2.0和2.2开始支持
net.tcp.service.perf[service,<ip>,<port>]
检测服务器性能	0 – 服务挂了;seconds – 链接到服务器端口消耗的时间		service – 如下:ssh, ntp, ldap, smtp, ftp, http, pop, nntp,imap, tcp, https, telnetip – IP地址 (默认127.0.0.1)port – 端口 (默认情况为标准端口号)	示例key:net.tcp.service.perf[ssh] – 检测SSH服务器响应速度加密协议检测不被支持 (类似 IMAP端口 993或者POP端口995) .但是我们可以使用net.tcp.service.perf[tcp,<ip>,<port>] 来检测他们.Windows agent不能检测LDAP和HTTPS. Note that the telnet check looks for a prompt (‘:’ at the end).老命名方式: check_service_perf[*]注意：that before Zabbix 1.8.3 version service.ntp should be used instead of ntp. Zabbix 2.0支持 https和telnet服务
net.udp.listen[port]
检测UDP端口是否在监听	0 – 未监听1 – 监听中		port – udp端口	范例:net.udp.listen[68]linux系统的Zabbix agent 1.8.4开始支持
proc.mem[<name>,<user>,<mode>,<cmdline>]
用户进程消耗的内存	内存使用量 (字节单位).		name – 进程名 (默认值 “all processes”)user – 用户名 (默认值“all users”)mode – 可选值: avg, max, min, sum (默认) cmdline – 命令行过滤(正则表达时)	示例keys:proc.mem[,root]– root的进程消耗了多少内存 proc.mem[zabbix_server,zabbix] – zabbix用户运行的zabbix_server使用了多少内存 proc.mem[,oracle,max,oracleZABBIX] – memory used by the most memory-hungry process running under oracle having oracleZABBIX in its command line
proc.num[<name>,<user>,<state>,<cmdline>]
某用户某些状态的进程的数量	进程数量		name – 进程名称 (默认“all processes”)user – 用户名 (默认 “all users”)state – 可用值: all (默认), run,sleep, zomb cmdline – 命令行过滤(正则表达时)	示例keys: proc.num[,mysql]– MySQL用户运行的进程数量 proc.num[apache2,www-data] – www-data运行了多少个apache2进程proc.num[,oracle,sleep,oracleZABBIX] – number of processes in sleep state running under oracle having oracleZABBIX in its command line 备注：Windows系统只支持name和user两个参数
sensor[device,sensor,<mode>]
读取硬件传感器			device – 设备名称sensor – 传感器名称mode – 可选值: avg, max, min (if this parameter is omitted, device and sensor are treated verbatim). On Linux 2.4, 读取/proc/sys/dev/sensors.	示例key:sensor[w83781d-i2c-0-2d,temp1] Prior to Zabbix 1.8.4, the sensor[temp1] format was used. On Linux 2.6+, 读取/sys/class/hwmon. On OpenBSD, 读取hw.sensors MIB.示例keys: sensor[cpu0,temp0] – CPU0的温度 sensor[cpu[0-2]$,temp,avg] – cpu平均温度 Zabbix 1.8.4开始支持OpenBSD
system.boottime
系统启动的时间鹾	整数			unix时间戳
system.cpu.intr
设备中断	整数
system.cpu.load[<cpu>,<mode>]
CPU负载	浮点数		cpu – 可用值: all (默认), percpu (所有在线cpu的负载)mode – 可用值: avg1 (1分钟 默认值), avg5(5分钟平均), avg15 (15分钟平均值)	范例key:system.cpu.load[,avg5]老命令方式: system.cpu.loadX 参数percpu is Zabbix 2.0.0开始支持
system.cpu.num[<type>]
CPU数量	处理器个数		type – 可用值: online (默认值), max	范例:system.cpu.num
system.cpu.switches
上下文交换	交换次数			老命名方式: system[switches]
system.cpu.util[<cpu>,<type>,<mode>]
CPU利用率	百分比		cpu – cpu数量 (默认是所有cpu)type – 可用值: idle, nice, user (默认), system (windows系统默认值）, iowait, interrupt, softirq,stealmode – 可用值: avg1 (一分钟平均，默认值), avg5(5分钟平均, avg15 (15分钟平均值)	范例key:system.cpu.util[0,user,avg5]老命名方式: system.cpu.idleX, system.cpu.niceX, system.cpu.systemX, system.cpu.userX
system.hostname[<type>]
返回主机名	字符串		type (仅用于windows系统) – 可用值: netbios(默认) or host	例如:on Linux: system.hostname → linux-w7x1 system.hostname → www.zabbix.com on Windows: system.hostname → WIN-SERV2008-I6 system.hostname[host] → Win-Serv2008-I6LonG type参数从zabbix 1.8.6开始支持
system.hw.chassis[<info>]
返回机架信息	字符串		info – full (默认), model, serial, type 或vendor	例如: system.hw.chassis[full] Hewlett-Packard HP Pro 3010 Small Form Factor PC CZXXXXXXXX Desktop] 需要root权限，因为这些信息是从内存中读取的。 Zabbix agent version 2.0 开始支持
system.hw.cpu[<cpu>,<info>]
返回CPU信息	字符/数字		cpu – cpu数量或者all (默认)info – full (默认), curfreq, maxfreq, model 或者vendor	例如:system.hw.cpu[0,vendor]AuthenticAMD 从/proc/cpuinfo、/sys/devices/system/cpu/[cpunum]/cpufreq/cpuinfo_max_freq获取信息. 如果指定了CPU数量和 curfreq或者maxfreq, 将会返回数值(Hz). Zabbix agent 2.0 开始支持
system.hw.devices[<type>]
列出PCI或者USB	文本值		type – pci (默认) or usb	范例:system.hw.devices[pci]00:00.0 Host bridge: Advanced Micro Devices [AMD] RS780 Host Bridge [..] 返回lspci或者lsusb (不带参数) Zabbix agent 2.0开始支持
system.hw.macaddr[<interface>,<format>]
列出MAC地址	字符串		interface – all (默认) 或者正则表达式format – full (默认) 、short	范例:system.hw.macaddr[“eth0$”,full][eth0] 00:11:22:33:44:55 列出指定接口mac地址 如果format指定为short，MAC地址相同的将会被忽略掉 Zabbix agent 2.0开始支持
system.localtime[<type>]
系统时间	数字或者字符串		utc – (默认) (00:00:00 UTC, January 1, 1970)local – 本地时间格式 ‘yyyy-mm-dd,hh:mm:ss.nnn,+hh:mm’	zabbix 2.0开始支持带参数
system.run[command,<mode>]
在制定的主机上运行命令	文本		command – 命令mode – wait (默认值, 执行超时时间), nowait (不等待)       最大可用返回512KB数据，包含空白数据。命令输出数据必须是文本	例如:system.run[ls -l /]– 列出/的文件和目录. 备注: 启用这个方法, agent配置文件必须配置 EnableRemoteCommands=1选项
system.stat[resource,<type>]
虚拟内存状态	数字		ent - number of processor units this partition is entitled to receive (float)kthr,<type> - information about kernel thread states:r - average number of runnable kernel threads (float) b - average number of kernel threads placed in the Virtual Memory Manager wait queue (float) memory,<type> - information about the usage of virtual and real memory: avm - active virtual pages (integer) fre - size of the free list (integer) page,<type> - information about page faults and paging activity: fi - file page-ins per second (float) fo - file page-outs per second (float) pi - pages paged in from paging space (float) po - pages paged out to paging space (float) fr - pages freed (page replacement) (float) sr - pages scanned by page-replacement algorithm (float) faults,<type> - trap and interrupt rate: in - device interrupts (float) sy - system calls (float) cs - kernel thread context switches (float) cpu,<type> - breakdown of percentage usage of processor time: us - user time (float) sy - system time (float) id - idle time (float) wa - idle time during which the system had outstanding disk/NFS I/O request(s) (float) pc - number of physical processors consumed (float) ec - the percentage of entitled capacity consumed (float) lbusy - indicates the percentage of logical processor(s) utilization that occurred while executing at the user and system level (float) app - indicates the available physical processors in the shared pool (float) disk,<type> - disk statistics: bps - indicates the amount of data transferred (read or written) to the drive in bytes per second (integer) tps - indicates the number of transfers per second that were issued to the physical disk/tape (float) This item is supported starting from version 1.8.1.
system.sw.arch
返回软件信息	字符串			范例:system.sw.arch i686数据来自uname方法 Zabbix agent 2.0.开始支持
system.sw.os[<info>]
返回系统信息	字符串		info – full (default), short ,name	范例:system.sw.os[short]Ubuntu 2.6.35-28.50-generic 2.6.35.11 信息来自如下文件 [full] – /proc/version [short] – /proc/version_signature [name] – /etc/issue.net Zabbix agent version 2.0.开始支持
system.sw.packages[<package>,<manager>,<format>]
已安装软件列表	文本值		package – all (默认)或者正则表达式manager – all (默认) or a package managerformat – full (默认) ，short	范例:system.sw.packages[mini,dpkg,short] python-minimal, python2.6-minimal, ubuntu-minimal Lists (alphabetically) installed packages whose names match the given package regexp (“all” lists them all).包管理: manager (执行命令) dpkg (dpkg –get-selections) pkgtool (ls /var/log/packages) rpm (rpm -qa) pacman (pacman -Q) 如果format 为full, packages are grouped by package managers (each manager on a seperate line beginning with it’s name in square brackets). 如果format为short, 包不分组，并且都列在一行上. Zabbix agent 2.0开始支持
system.swap.in[<device>,<type>]
交换分区IN（磁盘交换到内存）	数字		device – 交换分区设备 (默认all)type – 可选值: count (swapins数量), sectors(sectors swapped in), pages (pages swapped in).	示例key:system.swap.in[,pages]数据采集自: Linux 2.4: /proc/swaps, /proc/partitions, /proc/stat Linux 2.6: /proc/swaps, /proc/diskstats, /proc/vmstat
system.swap.out[<device>,<type>]
Swap out (f内存到磁盘)	数字		device – swap设备 (默认all)type – possible values: count (number of swapouts), sectors(sectors swapped out), pages (pages swapped out). See supported by platformfor details on defaults.	示例key:system.swap.out[,pages]数据采集自: Linux 2.4: /proc/swaps, /proc/partitions, /proc/stat Linux 2.6: /proc/swaps, /proc/diskstats, /proc/vmstat
system.swap.size[<device>,<type>]
交换分区大小	字节或者百分比		device – 交换分区 (默认值 all)type – possible values: free (free swap space, default), pfree (free swap space, in percent), pused (used swap space, in percent), total (total swap space), used (used swap space)	示例 key:system.swap.size[,pfree]– 空闲swap百分比 老命名格式: system.swap.free, system.swap.total
system.uname
返回主机相信信息	字符串			示例值:FreeBSD localhost 4.2-RELEASEFreeBSD 4.2-RELEASE #0: Mon Nov i386 Since Zabbix 2.2.0, the value for this item is obtained by using the uname() system call, whereas previously it was obtained by invoking “uname -a” on Unix systems. Hence, the value of this item might differ from the output of “uname -a” and does not include additional information that “uname -a”
system.uptime
系统运行时长(秒)	多少秒			使用s/uptime来获取
system.users.num
登陆用户数量	多少用户			agent使用who命令获取
vfs.dev.read[<device>,<type>,<mode>]
磁盘读取状态	整数（如果type为如下）: sectors,operations,bytes 浮点数（如果type为如下）: sps, ops,bps		device – 磁盘设备 (默认值 “all”1)type – 可选值: sectors, operations, bytes, sps, ops, bps(必须指定, 不同操作系统下不同). sps, ops, bps stand for: sectors, operations, bytes per second, respectively mode – 可选值: avg1 (一分平均, 默认值), avg5(五分内平均), avg15 (15分内平均值). 备注: 只有type为sps, ops, bps的时候，第三个参数才被支持。不同操作系统的TYPE参数： FreeBSD – bps Linux – sps OpenBSD – operations Solaris – bytes	示例key:vfs.dev.read[,operations]老命名方式: io[*] Usage of the type parameters ops, bps and sps on supported platforms used to be limited to 8 devices (7 individual devices and one “all”). Starting with Zabbix 2.0.1 this limit has been increased to 1024 (1023 individual devices and one for “all”). Zabbix 1.8.6开始支持LVM Until Zabbix 1.8.6, only relative device names may be used (for example, sda), since 1.8.6 an optional /dev/ prefix may be used (for example, /dev/sda)
vfs.dev.write[<device>,<type>,<mode>]
磁盘写入状态	整数（如下类型）: sectors,operations,bytes 浮点型（如下类型）: sps, ops,bps		device – 磁盘设备 (默认值 “all”1)type – sectors, operations, bytes, sps, ops, bps (must specify exactly which parameter to use, since defaults are different under various OSes). sps, ops, bps means: sectors, operations, bytes per second respectively   mode – one of avg1 (default),avg5 (average within 5 minutes), avg15. Note: The third parameter is supported only if the type is in: sps, ops, bps.	Default values of ‘type’ parameter for different OSes: FreeBSD – bps Linux – sps OpenBSD – operations Solaris – bytes Example: vfs.dev.write[,operations] Old naming: io[*] The type parameters ops, bps and sps on supported platforms used to be limited to 8 devices (7 individual devices and one “all”). Starting with Zabbix 2.0.1 this limit has been increased to 1024 (1023 individual devices and one for “all”). Supports LVM since Zabbix 1.8.6. Until Zabbix 1.8.6, only relative device names may be used (for example, sda), since 1.8.6 optional /dev/ prefix may be used (for example, /dev/sda)
vfs.file.cksum
计算文件校验	File checksum, calculated by algorithm used by UNIX cksum		file – 文件完整路径	例如，返回值: 1938292000例如: vfs.file.cksum[/etc/passwd] 老命名规范: cksum
vfs.file.contents
获取文本内容	Contents of a file or empty string if it is empty or it contains only LF/CR characters		file – 文件完整路径	例如:vfs.file.contents[/etc/passwd]文件不可以超过64KB. Zabbix agent 2.0开始支持
vfs.file.exists
检测文件是否存在	1 – 文件/硬链接/软连接文件存在 0 – 不存在		file – 文件完整路径	例如:vfs.file.exists[/tmp/application.pid]
vfs.file.md5sum
文件MD5校验码	文件MD5哈希值		file – 完整路径	示例返回值:b5052decb577e0fffd622d6ddc017e82 示例:vfs.file.md5sum[/usr/local/etc/zabbix_agentd.conf] 1.8.6移除了64MB文件大小的限制
vfs.file.regexp
文件中搜索字符串	包含字符串的行，或者为空		file – 文件完整路径regexp – GNU正则表达encoding – 编码 start line – 从哪一行开始，默认第一行 end line – 从哪一行结束，默认最后一行 output – an optional output formatting template. The \0 escape sequence is replaced with the matched text while an \N(where N=1…9) escape sequence is replaced with Nth matched group (or an empty string if the N exceeds the number of captured groups). 如果 <output> 为空， 所有包含搜索字符串的行都会被返回 start line和end line从zabbix 2.0开始支持	仅返回首先匹配的行例如:vfs.file.regexp[/etc/passwd,zabbix] vfs.file.regexp[/path/to/some/file,”([0-9]+)$”,,3,5,\1] vfs.file.regexp[/etc/passwd,^zabbix:.:([0-9]+),,,,\1] – getting the ID of user zabbix
vfs.file.regmatch
文件中搜索字符串	0 – 为找到1 – 找到		file – 文件完整路径regexp – GNU 正则表达式encoding – 编码 start line – 哪行开始，默认第一行 end line – 哪行结束，默认最后一行 上面两个参数从 2.0版本开始支持。	例如:vfs.file.regmatch[/var/log/app.log,error]
vfs.file.size
文件大小	字节		file – 完整路径	zabbix必须有可读此文件的权限例如:vfs.file.size[/var/log/syslog]
vfs.fs.discovery
列出挂载的文件系统	Used for low-level discovery		JSON对象	从zabbix agent 2.0开始支持
vfs.fs.inode[fs,<mode>]
inodes数量	数字		fs – 文件系统mode – total (默认), free, used, pfree (空闲百分比), pused (使用百分比)	例如:vfs.fs.inode[/,pfree]老命名规则: vfs.fs.inode.free[*], vfs.fs.inode.pfree[*], vfs.fs.inode.total[*]
vfs.fs.size[fs,<mode>]
磁盘空间	字节		fs – 文件系统mode – total (默认), free, used, pfree (空闲百分比), pused (使用百分比)	返回本地文件系统的使用量.例如: vfs.fs.size[/tmp,free]老命名规则: vfs.fs.free[*], vfs.fs.total[*], vfs.fs.used[*], vfs.fs.pfree[*], vfs.fs.pused[*],*是任意挂载点
vm.memory.size[<mode>]
内存大小	字节或者百分比		mode – total (默认), active, anon, buffers, cached, exec, file, free, inactive, pinned, shared, wired, used, pused, available, available其中挑一个	老命名规则: vm.memory.buffers, vm.memory.cached, vm.memory.free, vm.memory.shared, vm.memory.total监控项vm.memory.size[]允许三种类型的参数 第一类：包含total – 总内存 第二类： 系统指定内存类型:active, anon, buffers, cached, exec, file, free, inactive,pinned, shared, wired. 第三类：用户级别，一共使用了多少内存，还有多少内存可用: used, pused, available,pavailable.
web.page.get[host,<path>,<port>]
获取网页内容	网页源代码		host – 主机名/域名path – 文件地址，默认/port – 端口，默认80	返回空字符串表示失败. 例如:web.page.get[www.ttlsa.com,/,80]
web.page.perf[host,<path>,<port>]
获取完全加载网页消耗的时长	秒		host – 主机名/域名path – html地址，默认是/port – 端口,默认80	返回0表示失败. 例如: web.page.perf[www.ttlsa.com,/,80]
web.page.regexp[host,<path>,<port>,<regexp>,<length>,<output>]
在网页中搜索字符串	The matched string, or as specified by the optional<output>parameter. An empty string if no match was found.		host – 主机名path – html文件路径 (默认值 /)port – 端口 (默认80) regexp – GNU正则表达式 length – 返回的最大的字符串数量 output – 输出格式模板可选项. The \0 escape sequence is replaced with the matched text while an \N(where N=1…9) escape sequence is replaced with Nth matched group (or an empty string if the N exceeds the number of captured groups). If <output> is left empty – the whole line containing the matched text is returned. The output parameter is supported from version 2.2.	失败则返回空字符 (不匹配).示例:web.page.regexp[www.zabbix.com,index.php,80,OK,2]
vfs.file.time
文件时间	Unix时间戳.		file – 文件路径mode - one of modify (default, modification time), access - last access time, change - last change time	示例:vfs.file.time[/etc/passwd,modify] The file size limit depends on large file support.