7 Replies Latest reply: Apr 22, 2013 11:14 AM by consoul RSS

    Zabbix Agent?


      Am I correct to assume that installing the Zabbix agent is unsupported?


      Anyone running it now?

        • 1. Re: Zabbix Agent?

          I bet the official answer will be something like, "Installation of anything on the system that is not part of the MWG distro is unsupported and may void your warranty."


          I started looking at installing NRPE, but haven't had the time to compile it so that it doesn't have dependencies on other things that aren't on the system by default.

          • 2. Re: Zabbix Agent?



            you are right. Every custom compiled component added to what we ship is not tested and noone can guarantee that there will be no problem. The MLOS is customized to run stable and deliver good performance. Adding additional software might cause conflicts or other problems, so McAfee does not allow to install additional software and will require customer to remove unsupported software or re-image the platform in case problems occur and the operating system has been touched.


            On 7.3 you could install Zabbix pretty easily by using existing RPM packages:


              wget http://ftp-stud.hs-esslingen.de/pub/epel/6/x86_64/zabbix-1.8.16-1.el6.x86_64.rpm

              wget http://ftp-stud.hs-esslingen.de/pub/epel/6/x86_64/zabbix-agent-1.8.16-1.el6.x86_ 64.rpm

              rpm -Uvh zabbix-1.8.16-1.el6.x86_64.rpm zabbix-agent-1.8.16-1.el6.x86_64.rpm

              /etc/init.d/zabbix-agent start


            However this should be used for testing only, since the above statement about supportability is still true. For official support please file an FMR: https://kc.mcafee.com/corporate/index?page=content&id=KB60021




            • 3. Re: Zabbix Agent?

              Thanks Andre, it "is" what I assumed but I needed to ask. SNMP monitoring of my web gateways has always resulted in spotty results, across different release trains and hardware. We monitor a few hundred devices with our box and the MWG's are the only devices that have holes in their graphs. If we use the Zabbix agent it will run the SNMP queries locally and report back the results, hoping for more consistency.    

              • 4. Re: Zabbix Agent?



                yeah I understand the concern. So I recommend to file the FMR and hope for official support. I know that we have some customers who are pretty happy that the appliance is basically a plain "linux" and you can add some additional software. And I know customers that install custom software and usually there is no need to worry. I personally (as an administrator) would install it, as long as it is a small piece of agent software. I won't install an AV solution or a database on top, but well.


                The major concern is supportability here. If we receive a call from support and we see there is something customized installed we usually assume that this could "harm" the system, since everything else is tested and known to work, since it is globally used around the world. So the first answer would we "remove the software" or even "re-image the box" and check if the issue persists. That is simply because we cannot test and support every software available, so we (at least I) can't give official permission since no one knows what could happen. Installing a custom package could overwrite a library or whatever.


                It is not that the complete warranty is lost or that you can't call support any longer, the "not supported" means that we only take responsibility for what we deliver. If (for example) the appliance OS is updated, this kills the Zabbix agent, this causes Zabbix to report alerts on all your MWG, this calls the complete "emergency network oepration team" and causes them to spend 2 days on troubleshooting until you noticed that only the agent is dead -> we won't pay :-)




                • 5. Re: Zabbix Agent?

                  Thanks for the input. As I said before I figured it would fall into this category but it's always worth asking.


                  Did it work? No, the agent requires some libraries to be updated that are currently in use by MWG from what I can tell and it's not worth breaking the one to fix the other.


                  Maybe down the road, or on another release train, the compatibility will be there. Thanks!


                  -------------------------------------------------------------------------------- ---------------------------------------------------------------------


                  [root@mwg-lab tmp]# rpm -Uvh zabbix-1.8.16-1.el6.x86_64.rpm

                  warning: zabbix-1.8.16-1.el6.x86_64.rpm: Header V3 RSA/SHA256 signature: NOKEY, key ID 0608b895

                  error: Failed dependencies:

                          rpmlib(FileDigests) <= 4.6.0-1 is needed by zabbix-1.8.16-1.el6.x86_64

                          rpmlib(PayloadIsXz) <= 5.2-1 is needed by zabbix-1.8.16-1.el6.x86_64



                  [root@mwg-lab tmp]# rpm -Uvh zabbix-agent-1.8.16-1.el6.x86_64.rpm

                  warning: zabbix-agent-1.8.16-1.el6.x86_64.rpm: Header V3 RSA/SHA256 signature: NOKEY, key ID 0608b895

                  error: Failed dependencies:

                          libc.so.6(GLIBC_2.7)(64bit) is needed by zabbix-agent-1.8.16-1.el6.x86_64

                          liblber-2.4.so.2()(64bit) is needed by zabbix-agent-1.8.16-1.el6.x86_64

                          libldap-2.4.so.2()(64bit) is needed by zabbix-agent-1.8.16-1.el6.x86_64

                          rpmlib(FileDigests) <= 4.6.0-1 is needed by zabbix-agent-1.8.16-1.el6.x86_64

                          zabbix = 1.8.16-1.el6 is needed by zabbix-agent-1.8.16-1.el6.x86_64    (this wouldn't be here if the first piece installed)

                          rpmlib(PayloadIsXz) <= 5.2-1 is needed by zabbix-agent-1.8.16-1.el6.x86_64




                  on 4/15/13 11:37:04 AM CDT
                  • 6. Re: Zabbix Agent?



                    which version of MWG are you running? In 7.3.1 the Zabbix Agent RPMs installed just fine. Maybe you are running 7.2, then you probably need an older RPM that refers to the right library versions. In case warnings  occur you certainly don't want to install the RPM :-)




                    • 7. Re: Zabbix Agent?

                      Thanks Andre, these are my production proxies so I run the 7.2 releases. I thought this was standard practice.