Asus Merlin Router with Zabbix Agent

[ColinTaylor]

So, it makes even less sense to run it on the machine you're monitoring/saving the log files to. Yes?

This is perfectly normal practice for these sorts of software monitoring applications. Very common in enterprise networks.

 

[L&LD]

Then they must be also mirroring/forwarding the logging to another machine.

 

[ColinTaylor]

Then they must be also mirroring/forwarding the logging to another machine.

The server processes the information from the agents and typically sends it to some sort of DBMS.

 

[Ranger802004]

Who/why would anyone monitor this in real time? Sounds like an expensive (labor) project.

I like Zabbix and I can see value putting a Zabbix agent on the router for getting live alerts for issues like memory and CPU utilized. You can even monitor processes and services not running.

 

[L&LD]

Is it just when you're monitoring/diagnosing specific bugs/behaviors (and have the knowledge to fix them possibly)? I can't see any normal users using this on a regular basis.

 

[Ranger802004]

Is it just when you're monitoring/diagnosing specific bugs/behaviors (and have the knowledge to fix them possibly)? I can't see any normal users using this on a regular basis.

It's more of an enterprise tool but if someone wants to use it for their personal environment I don't see why not, it's free to use. No it can notify you in realtime of issues such as CPU overloaded and if it resolves itself or memory too full or if a service / process stopped and isn't running. It's fairly easy to set up and the agent is very lightweight.

 

[Markfree]

Is it just when you're monitoring/diagnosing specific bugs/behaviors (and have the knowledge to fix them possibly)? I can't see any normal users using this on a regular basis.

I often use it to monitor Internet usage or outages. I monitor some of the router resources, including temp, as well as some services like Adguard, Conmon and NTPMerlin.
Zabbix keeps a history and can plot some nice graphs, which helps to see some anomalous behavior as well.
The standard Entware implementation of the Zabbix Agent is very lightweight and I believe it has minimal impact on the router.

That's why I created the Asus Merlin Zabbix template.

 

[bigAboo]

Hi! I've installed zabbix agent from GitHub page for Merlin firmware-but agent did not start - reboot does't helped

sa@gtw:/tmp/mnt/IntelSSD/entware/etc/zabbix_agentd.conf.d# grep -v -e "^#" -e "^$" /opt/etc/zabbix_agentd.conf
LogFile=/opt/var/log/zabbix_agentd.log
Server=192.168.50.252
StartAgents=1
 AllowRoot=1
Include=/etc/zabbix_agentd.conf.d/

sa@gtw:/tmp/mnt/IntelSSD/entware/etc/zabbix_agentd.conf.d# zabbix_agentd -c /opt/etc/zabbix_agentd.conf
zabbix_agentd [7353]: /etc/zabbix_agentd.conf.d: [2] No such file or directory

ZABBIX AGENT LATEST VERSION: 7.0.0-1

INSTALLING...


Package zabbix-agentd-openssl (7.0.0-1) installed in root is up to date.
 Starting zabbix_agentd...              failed.
ZABBIX AGENT IS dead.

How I can check the logs for agent`?

 

[Markfree]

Hi @bigAboo
When you list the active parameters from the agent's configuration file, we see that the Include parameter is active and points to the /etc/zabbix_agentd.conf.d directory. However, the error message indicates that it does not exist.
The Include parameter allows you to add additional configuration files and, if I'm not mistaken, is active by default from the repository package.
The script uses the /opt/etc directory instead. So, I'm not sure why yours points directly to /etc. Is Entware installed?

To fix this, you can simply create this directory and run the script again.

I've just updated the script on Github to make sure the directory /opt/etc/zabbix_agentd.conf.d directory exists.
I added the following line (#58).

[[ ! -d $CONF_DIR/$CONF_FILE.d ]] && mkdir -v -p $CONF_DIR/$CONF_FILE.d

If you didn't configure anything else, you can try to remove previous configuration files, copy the script, and run it again.

 

[bigAboo]

Hi @bigAboo
When you list the active parameters from the agent's configuration file, we see that the Include parameter is active and points to the /etc/zabbix_agentd.conf.d directory. However, the error message indicates that it does not exist.
The Include parameter allows you to add additional configuration files and, if I'm not mistaken, is active by default from the repository package.
The script uses the /opt/etc directory instead. So, I'm not sure why yours points directly to /etc. Is Entware installed?

To fix this, you can simply create this directory and run the script again.

I've just updated the script on Github to make sure the directory /opt/etc/zabbix_agentd.conf.d directory exists.
I added the following line (#58).

[[ ! -d $CONF_DIR/$CONF_FILE.d ]] && mkdir -v -p $CONF_DIR/$CONF_FILE.d

If you didn't configure anything else, you can try to remove previous configuration files, copy the script, and run it again.

Hi,Thanx!
Entware is installed.

1. I removed zabbix-agentd.conf & zabbix_agentd.conf.d directory
2. Re-run script​

Now I have

sa@gtw:/tmp/mnt/IntelSSD/entware/sbin# grep -v -e "^#" -e "^$" /opt/etc/zabbix_agentd.conf
grep: /opt/etc/zabbix_agentd.conf: No such file or directory

sa@gtw:/tmp/mnt/IntelSSD/entware/sbin# opkg install zabbix-agentd
Installing zabbix-agentd (7.0.0-1) to root...
Downloading https://bin.entware.net/aarch64-k3.10/zabbix-agentd_7.0.0-1_aarch64-3.10.ipk
Collected errors:
 * check_data_file_clashes: Package zabbix-agentd wants to install file /opt/etc/init.d/S07zabbix_agentd
    But that file is already provided by package  * zabbix-agentd-openssl
 * check_data_file_clashes: Package zabbix-agentd wants to install file /opt/sbin/zabbix_agentd
    But that file is already provided by package  * zabbix-agentd-openssl
 * opkg_install_cmd: Cannot install package zabbix-agentd.
sa@gtw:/tmp/mnt/IntelSSD/entware/sbin#

???

 

[Markfree]

The error indicates that the application is already installed.

Sorry, I forgot to mention that you should remove the Zabbix Agent in addition to the configuration files.
Then try again.

 

[devoidx360]

About to give this a whirl.

Recently purchased an 8GB Pi 5 and have SNMPD and Zabbix 7.2 (with MariaDB) running on it.

I'm also planning to run Unbound and Pi-Hole and then remove Diversion and Unbound from the router, for no other reason than, I'm bored.

For those running Zabbix on a Pi, has nyone managed to get SHA256 to work with SNMPv3? I can only get SHA1 and AES to work.

 

[Markfree]

About to give this a whirl.
Recently purchased an 8GB Pi 5 and have SNMPD and Zabbix 7.2 (with MariaDB) running on it.
I'm also planning to run Unbound and Pi-Hole and then remove Diversion and Unbound from the router, for no other reason than, I'm bored.
For those running Zabbix on a Pi, has nyone managed to get SHA256 to work with SNMPv3? I can only get SHA1 and AES to work.

Typically, the authentication protocol is set by the monitored device.

For SNMPv3, you can test the device's SNMP response with something like this:

snmpbulkwalk -v 3 -u [USER] -l authPriv -n [CONTEXT_IF_USED] -a [AUTH_PROTO] -A [AUTH_PASS] -x [CRIPT_PROTO] -X [CRIPT_PASS] -On [MONITORED_HOST] [OID]

I often see people include a context value when there isn't one configured. Note that the -n [CONTEXT_IF_USED] parameter is optional, and should only be used if your device is configured with it.