Zabbix agent config for PVE 8

Aug 2, 2020
15
2
8
68
It's maybe me, but I find the instructions for adding a PVE host/agent to Zabbix confusing. I dont get the relation between the local user accounts and API keys/tokens in Zabbix vs Proxmox, and how they are supposed to be setup. I may have tested all permutations I can think of but I still get an error in the Zabbix dashboard "(Proxmox: API service not available)" for the PVE host.

The macros are defined in Zabbix, but maybe with the wrong API key (zabbix or pve ...)

Anyone? Pretent that I am 8 yo :). 1695833607221.png
 
You got a user on PVE. Then you can create a token associated with that user. Then you set the correct privileges in PVE for that token the zabbix template needs. Zabbix is then polling the data from PVE using PVEs API with that token from PVE. For testing purposes you could assign that token full admin privileges for "/" but later you really want the privileges as limited as possible for monitoring. See the templates repo: https://git.zabbix.com/projects/ZBX/repos/zabbix/browse/templates/app/proxmox?at=release/6.4

Setup​

Create an API token for the monitoring user. Important note: for security reasons, it is recommended to create a separate user (Datacenter - Permissions).

For the created API token and user, provide the necessary access levels:

  • Check: ["perm","/",["Sys.Audit"]]
  • Check: ["perm","/nodes/{node}",["Sys.Audit"]]
  • Check: ["perm","/vms/{vmid}",["VM.Audit"]]
Copy the resulting Token ID and Secret into host macros.
 
Last edited:
Ok, lets start from the beginning and see if I can follow you. I also found this page that was helpful but also a bit confusing

https://geekistheway.com/2022/12/31/monitoring-proxmox-ve-using-zabbix-agent/

This is what I have
  • Zabbix 6.4 appliance installed on PVE
  • Zabbix agent on PVE 8
On PVE/Datacenter:
  • Users: Added a user called zabbix@pam (enabled, no expiration)
  • API tokens: Added a new token called zabbix-api for user zabbix@pam (with priv separation enabled, no expiration)
  • Token Id zabbix@pam!zabbix-token created with value 9a7fdd9e-23da-450e-a7f4-f28c30797573
  • The permissions tab shows "/" as Path/Permisson. Nothing to add or change here? The guide I referred to says that I should create new permissions for the user, but there is no Add option...

On Zabbix web admin:
  • The guide says "Go to the Configuration/Hosts ..." but there is no such option
  • I used "Monitoring/Hosts" and Create host instead with "Proxmox VE by HTTP" used as template
  • Admin/Macros: Added the PVE.TOKEN.ID and PVE.TOKEN.SECRET with the values above
So now when I go to Monitoring/Latest data, and select the PVE host I see this

1695884841669.png

So there is something going on that I cant figure out. The agent on PVE is configured as "passive" and restarted.
 
Token Id zabbix@pam!zabbix-token created with value 9a7fdd9e-23da-450e-a7f4-f28c30797573
Thats your secret you should not tell anyone as then everyone can login to your PVE node and manage your PVE (with proper privileges hopefully only beimg able to monitor stuff)!


The permissions tab shows "/" as Path/Permisson. Nothing to add or change here? The guide I referred to says that I should create new permissions for the user, but there is no Add option...
I would create a new "zabbix" role, set the correct permissions for that role according to the template documentation and then assign your zabbix token the "zabbix" role so it's using these permissions/privileges.


  • The guide says "Go to the Configuration/Hosts ..." but there is no such option
  • I used "Monitoring/Hosts" and Create host instead with "Proxmox VE by HTTP" used as template
There are two "Hosts" menus. The monitoring one where you can also see existing hosts and the configuration one where you will find a "Add new host" button at the upper right.
Look again, it should be there.


Admin/Macros: Added the PVE.TOKEN.ID and PVE.TOKEN.SECRET with the values above
I think there are other Macros too like for setting the IP of your PVE host.
 
This whole thing is quite messed up - certainly the official "instructions" are. I have it running in an lxc on v8 and eventually after banging my head against the wall for hours:

On proxmox:

create a zabbix user
create a zabbix api token linked to the zabbix user (copy the secret)
create permission for the zabbix user at / level (admin for now)
create permmission for the zabbix@pam!zabbix token at / level (admin for now

On zabbix:

create host proxmox linked to the Proxmox HTTP template
create an interface with the proxmox IP address of type Zabbix agent - the port doesn't matter it seems - it gets the IP address from here but the port from the macro (8006) - that's obvious not.
in the macros tab on this screen, click to show host and inherited macros
change the token id to zabbix@pam!zabbix (assuming you used my naming convention)
change the secret to the one you copied above

That should set things off and in latest data for proxmox you should see stuff being collected. If will call out the vms and containers as tags.

But what I am not stuck on is getting any of the guests to appear as hosts themselves in zabbix. I had this problem with a bog standard ICMP ping discovery too until I realised that in zabbix, discovery is not enough - you have to go to Alerts > Actions > Discovery Actions and say "if you discover something, add it as a host". FFS - that's why I am discovering things!

I have managed to get my ICMP Ping hosts to start showing up gradually as it rediscovers things. But stuck on proxmox guests - there is a whole slew of enabled discovery rules attached to the host but god knows what they are doing or how you turn this into actions to add a host.

Any help in return gratefully appreciated!

I love how the Proxmox HTTP template uses the word "effortless"...
 
  • Like
Reactions: DNM
But what I am not stuck on is getting any of the guests to appear as hosts themselves in zabbix
Thats not how it works. If you want your guests as real zabbix hosts with all the additional data you have to install the zabbix agent within each guestOS.
The PVE Zabbix template will only discover guests and show them as a metric of your PVE host (and you are limited to the few metrics the PVE webUI is collecting likw CPU load, RAM and if the guest is running or not).
 
  • Like
Reactions: DNM and jsterr

About

The Proxmox community has been around for many years and offers help and support for Proxmox VE, Proxmox Backup Server, and Proxmox Mail Gateway.
We think our community is one of the best thanks to people like you!

Get your subscription!

The Proxmox team works very hard to make sure you are running the best software and getting stable updates and security enhancements, as well as quick enterprise support. Tens of thousands of happy customers have a Proxmox subscription. Get yours easily in our online shop.

Buy now!