7.4846977d1dfed4968bc5f8bdb363285bcTemplates/Operating systems13b06904a6bf41cbb795e3193d896340Windows by Zabbix agentWindows by Zabbix agentOfficial Windows template. Requires agent of Zabbix 7.0 and newer.
You can discuss this template or leave feedback on our forum https://www.zabbix.com/forum/zabbix-suggestions-and-feedback/387224-discussion-thread-for-official-zabbix-template-for-windows
Generated by official Zabbix template tool "Templator" 2.0.0Zabbix7.0-0Templates/Operating systems- af550a1bfe74428eb24492d8af3b405eWindows: Host name of Zabbix agent runningagent.hostname1h7dCHARDISCARD_UNCHANGED_HEARTBEAT1dcomponentsystem
- f81e2ce0d1104f9aaf1fc49284ed0ed4Windows: Zabbix agent pingagent.ping7dThe agent always returns 1 for this item. It could be used in combination with nodata() for availability check.Zabbix agent ping statuscomponentsystem
- 5707443d739d4689bde192e75ff4bd0fWindows: Version of Zabbix agent runningagent.version1h7dCHARDISCARD_UNCHANGED_HEARTBEAT1dcomponentapplication
- 5219a246de0641a89685a961cdd08c0bWindows: Cache bytesperf_counter_en["\Memory\Cache Bytes"]7dBCache Bytes is the sum of the Memory\\System Cache Resident Bytes, Memory\\System Driver Resident Bytes,
Memory\\System Code Resident Bytes, and Memory\\Pool Paged Resident Bytes counters. This counter displays
the last observed value only; it is not an average.componentmemory
- 2ea74fafb9334de095adcb47cced578dWindows: Free system page table entriesperf_counter_en["\Memory\Free System Page Table Entries"]7dThis indicates the number of page table entries not currently in use by the system. If the number is less
than 5,000, there may well be a memory leak or you running out of memory.componentmemorye3118e2e6109460f80cc2d56795ed42fmax(/Windows by Zabbix agent/perf_counter_en["\Memory\Free System Page Table Entries"],5m)<{$MEM.PAGE_TABLE_CRIT.MIN}Windows: Number of free system page table entries is too lowWindows: Number of free system page table entries is too low (less {$MEM.PAGE_TABLE_CRIT.MIN} for 5m)WARNINGThe Memory Free System Page Table Entries is less than {$MEM.PAGE_TABLE_CRIT.MIN} for 5 minutes. If the number is less than 5,000, there may well be a memory leak.Windows: High memory utilizationmin(/Windows by Zabbix agent/vm.memory.util,5m)>{$MEMORY.UTIL.MAX}scopecapacity
- 6c41d254585a4d7b81a0c5766a8913c1Windows: Memory page faults per secondperf_counter_en["\Memory\Page Faults/sec"]7dFLOATPage Faults/sec is the average number of pages faulted per second. It is measured in number of pages
faulted per second because only one page is faulted in each fault operation, hence this is also equal
to the number of page fault operations. This counter includes both hard faults (those that require
disk access) and soft faults (where the faulted page is found elsewhere in physical memory.) Most
processors can handle large numbers of soft faults without significant consequence. However, hard faults,
which require disk access, can cause significant delays.componentmemory
- 287163bc5b0441c4bf51489432a278ebWindows: Memory pages per secondperf_counter_en["\Memory\Pages/sec"]7dFLOATThis measures the rate at which pages are read from or written to disk to resolve hard page faults.
If the value is greater than 1,000, as a result of excessive paging, there may be a memory leak.componentmemoryab4c9a66d16f42e6a32f6144f4d2a3camin(/Windows by Zabbix agent/perf_counter_en["\Memory\Pages/sec"],5m)>{$MEM.PAGE_SEC.CRIT.MAX}Windows: The Memory Pages/sec is too highWindows: The Memory Pages/sec is too high (over {$MEM.PAGE_SEC.CRIT.MAX} for 5m)WARNINGThe Memory Pages/sec in the last 5 minutes exceeds {$MEM.PAGE_SEC.CRIT.MAX}. If the value is greater than 1,000, as a result of excessive paging, there may be a memory leak.Windows: High memory utilizationmin(/Windows by Zabbix agent/vm.memory.util,5m)>{$MEMORY.UTIL.MAX}scopecapacity
- fb822cb2a17948208a61bd6661c496dfWindows: Memory pool non-pagedperf_counter_en["\Memory\Pool Nonpaged Bytes"]7dBThis measures the size, in bytes, of the non-paged pool. This is an area of system memory for objects
that cannot be written to disk but instead must remain in physical memory as long as they are allocated.
There is a possible memory leak if the value is greater than 175MB (or 100MB with the /3GB switch).
A typical Event ID 2019 is recorded in the system event log.componentmemory
- b99a722d267d455fad3c07c53302b20fWindows: Used swap space in %perf_counter_en["\Paging file(_Total)\% Usage"]7dFLOAT%The used space of swap volume/file in percent.componentmemorycomponentstorage
- ee1f116fdab34969a6e6f5e1c25fc3d2Windows: CPU DPC timeperf_counter_en["\Processor Information(_total)\% DPC Time"]7dFLOAT%Processor DPC time is the time that a single processor spent receiving and servicing deferred procedure
calls (DPCs). DPCs are interrupts that run at a lower priority than standard interrupts. % DPC Time is a
component of % Privileged Time because DPCs are executed in privileged mode. If a high % DPC Time is
sustained, there may be a processor bottleneck or an application or hardware related issue that can
significantly diminish overall system performance.componentcpu
- e403552481b04ebdba2e8a019f114f20Windows: CPU interrupt timeperf_counter_en["\Processor Information(_total)\% Interrupt Time"]7dFLOAT%The Processor Information\% Interrupt Time is the time the processor spends receiving and servicing
hardware interrupts during sample intervals. This value is an indirect indicator of the activity of
devices that generate interrupts, such as the system clock, the mouse, disk drivers, data communication
lines, network interface cards and other peripheral devices. This is an easy way to identify a potential
hardware failure. This should never be higher than 20%.componentcpuf67bedcb282349b2aac052baf4963480min(/Windows by Zabbix agent/perf_counter_en["\Processor Information(_total)\% Interrupt Time"],5m)>{$CPU.INTERRUPT.CRIT.MAX}Windows: CPU interrupt time is too highWindows: CPU interrupt time is too high (over {$CPU.INTERRUPT.CRIT.MAX}% for 5m)WARNING"The CPU Interrupt Time in the last 5 minutes exceeds {$CPU.INTERRUPT.CRIT.MAX}%."
The Processor Information\% Interrupt Time is the time the processor spends receiving and servicing
hardware interrupts during sample intervals. This value is an indirect indicator of the activity of
devices that generate interrupts, such as the system clock, the mouse, disk drivers, data communication
lines, network interface cards and other peripheral devices. This is an easy way to identify a potential
hardware failure. This should never be higher than 20%.Windows: High CPU utilizationmin(/Windows by Zabbix agent/system.cpu.util,5m)>{$CPU.UTIL.CRIT}scopeperformance
- 37448f05afe340a3891d05528c9d1adcWindows: CPU privileged timeperf_counter_en["\Processor Information(_total)\% Privileged Time"]7dFLOAT%The Processor Information\% Privileged Time counter shows the percent of time that the processor is spent
executing in Kernel (or Privileged) mode. Privileged mode includes services interrupts inside Interrupt
Service Routines (ISRs), executing Deferred Procedure Calls (DPCs), Device Driver calls and other kernel-mode
functions of the Windows® Operating System.componentcpu4d099256b3ba42f1b90143e2014900ddmin(/Windows by Zabbix agent/perf_counter_en["\Processor Information(_total)\% Privileged Time"],5m)>{$CPU.PRIV.CRIT.MAX}Windows: CPU privileged time is too highWindows: CPU privileged time is too high (over {$CPU.PRIV.CRIT.MAX}% for 5m)WARNINGThe CPU privileged time in the last 5 minutes exceeds {$CPU.PRIV.CRIT.MAX}%.Windows: CPU interrupt time is too highmin(/Windows by Zabbix agent/perf_counter_en["\Processor Information(_total)\% Interrupt Time"],5m)>{$CPU.INTERRUPT.CRIT.MAX}Windows: High CPU utilizationmin(/Windows by Zabbix agent/system.cpu.util,5m)>{$CPU.UTIL.CRIT}scopeperformance
- 575912d512624143b564ca0fbfd0bb8fWindows: CPU user timeperf_counter_en["\Processor Information(_total)\% User Time"]7dFLOAT%The Processor Information\% User Time counter shows the percent of time that the processor(s) is spent executing
in User mode.componentcpu
- 2322a85bfc1049a3b5c892d83b5d5054Windows: Context switches per secondperf_counter_en["\System\Context Switches/sec"]7dFLOATContext Switches/sec is the combined rate at which all processors on the computer are switched from one thread to another.
Context switches occur when a running thread voluntarily relinquishes the processor, is preempted by a higher priority ready thread, or switches between user-mode and privileged (kernel) mode to use an Executive or subsystem service.
It is the sum of Thread\\Context Switches/sec for all threads running on all processors in the computer and is measured in numbers of switches.
There are context switch counters on the System and Thread objects. This counter displays the difference between the values observed in the last two samples, divided by the duration of the sample interval.componentcpu
- 002af28df72f4a788c88bc022d88c6ddWindows: CPU queue lengthperf_counter_en["\System\Processor Queue Length"]7dFLOATThe Processor Queue Length shows the number of threads that are observed as delayed in the processor Ready Queue
and are waiting to be executed.componentcpu
- 630b7b2af6274936ab80b1dd774113e5Windows: Number of threadsperf_counter_en["\System\Threads"]7dThe number of threads used by all running processes.componentos
- b305029532f84daf93c8da2d181ac3a1Windows: Number of processesproc.num[]7dThe number of processes.componentos
- c2ed8e2efab04564b6c70ee8ad14730fWindows: CPU utilizationsystem.cpu.util7dFLOAT%The CPU utilization expressed in %.componentcpu806aa232f56640ab98aacc79491fc4d7min(/Windows by Zabbix agent/system.cpu.util,5m)>{$CPU.UTIL.CRIT}Windows: High CPU utilizationWindows: High CPU utilization (over {$CPU.UTIL.CRIT}% for 5m)Current utilization: {ITEM.LASTVALUE1}WARNINGThe CPU utilization is too high. The system might be slow to respond.scopeperformance
- cb056886ce72426e833a0445f9263906Windows: System namesystem.hostname1h2wCHARThe host name of the system.NAMEDISCARD_UNCHANGED_HEARTBEAT1dcomponentsystem6b50d36a4e29468a9546e880f3004399change(/Windows by Zabbix agent/system.hostname) and length(last(/Windows by Zabbix agent/system.hostname))>0Windows: System name has changedWindows: System name has changed (new name: {ITEM.VALUE})INFOThe name of the system has changed. Acknowledge to close the problem manually.YESscopenotice
- 94c4dfe23e2e4c6e995a3a715941a8ebWindows: System local timesystem.localtime7dunixtimeThe local system time of the host.componentsystem37ca2366c8474cc8a49a605e93377601fuzzytime(/Windows by Zabbix agent/system.localtime,{$SYSTEM.FUZZYTIME.MAX})=0Windows: System time is out of syncWindows: System time is out of sync (diff with Zabbix server > {$SYSTEM.FUZZYTIME.MAX}s)WARNINGThe host's system time is different from Zabbix server time.YESscopenotice
- 7e8b3476db6d4322a10cd1a28cbdb7eaWindows: Operating system architecturesystem.sw.arch1h2wCHARThe architecture of the operating system.DISCARD_UNCHANGED_HEARTBEAT1dcomponentos
- c86dd0a8dbba468696cc09a9f9575769Windows: Operating systemsystem.sw.os1h2wCHAROSDISCARD_UNCHANGED_HEARTBEAT1dcomponentos9d5648eb580b41fca95d750113287567change(/Windows by Zabbix agent/system.sw.os) and length(last(/Windows by Zabbix agent/system.sw.os))>0Windows: Operating system description has changedINFOThe description of the operating system has changed. Possible reasons are that the system has been updated or replaced. Acknowledge to close the problem manually.YESWindows: System name has changedchange(/Windows by Zabbix agent/system.hostname) and length(last(/Windows by Zabbix agent/system.hostname))>0scopenotice
- 11cac38334544e5cbb028cfd473cb39eWindows: Free swap spaceCALCULATEDsystem.swap.free7dBlast(//system.swap.size[,total]) - last(//system.swap.size[,total]) / 100 * last(//perf_counter_en["\Paging file(_Total)\% Usage"])The free space of the swap volume/file expressed in bytes.componentmemorycomponentstorage
- 9c7e3c843a3045df81dddc5d18de267cWindows: Free swap space in %DEPENDENTsystem.swap.pfree7dFLOAT%The free space of the swap volume/file expressed in %.JAVASCRIPTreturn (100 - value)perf_counter_en["\Paging file(_Total)\% Usage"]componentmemorycomponentstorage
- f981835baf04494eaff2f33f159e0ab5Windows: Total swap spacesystem.swap.size[,total]7dBThe total space of the swap volume/file expressed in bytes.componentmemorycomponentstorage
- b103a2c22fe344f886e9dc9f4e4a65ecWindows: System descriptionsystem.uname15m2wCHARSystem description of the host.DISCARD_UNCHANGED_HEARTBEAT1dcomponentsystem
- 12503fbf4400488e9b5ff0488f164cb6Windows: Uptimesystem.uptime30s2w0uptimeThe system uptime expressed in the following format: "N days, hh:mm:ss".componentsystemd27b9eab4034439f91dff41fe6f043ablast(/Windows by Zabbix agent/system.uptime)<10mWindows: Host has been restartedWindows: Host has been restarted (uptime < 10m)WARNINGThe device uptime is less than 10 minutes.YESscopenotice
- f59d6794a6b94e93aced78a688507677Windows: Get filesystemsvfs.fs.get0TEXTThe `vfs.fs.get` key acquires raw information set about the file systems. Later to be extracted by preprocessing in dependent items.componentraw
- 09e9a345a0f445b1a65685911f5eb9b0Windows: Total memoryvm.memory.size[total]7dBThe total memory expressed in bytes.componentmemory
- 1cbf45e11dab453797fe291639aa0c01Windows: Used memoryvm.memory.size[used]7dBUsed memory in bytes.componentmemory
- 3b1e4ecaa04a46e9b0aee956918f0713Windows: Memory utilizationCALCULATEDvm.memory.util7dFLOAT%last(//vm.memory.size[used]) / last(//vm.memory.size[total]) * 100Memory utilization in %.componentmemoryb442993bb2a6404a8ebcb7be39d16ce6min(/Windows by Zabbix agent/vm.memory.util,5m)>{$MEMORY.UTIL.MAX}Windows: High memory utilizationWindows: High memory utilization (>{$MEMORY.UTIL.MAX}% for 5m)AVERAGEThe system is running out of free memory.scopecapacityscopeperformance
- 08b70a5b80fd435ba393e3deb3ca5adbWindows: Network interfaces WMI getwmi.getall[root\cimv2,"select Name,Description,NetConnectionID,Speed,AdapterTypeId,NetConnectionStatus,GUID from win32_networkadapter where PhysicalAdapter=True and NetConnectionStatus>0"]0TEXTRaw data of win32_networkadapter.DISCARD_UNCHANGED_HEARTBEAT1hcomponentraw
- 83c8c6f15b524a2fb04fc90d04d3e8a2Windows: Number of coreswmi.get[root/cimv2,"Select NumberOfLogicalProcessors from Win32_ComputerSystem"]7d0The number of logical processors available on the computer.componentcpu
- 3dcb0f79342b4ded97cdec0794472266Windows: Zabbix agent availabilityINTERNALzabbix[host,agent,available]7dMonitoring the availability status of the agent.zabbix.host.availablecomponentsystem05beb4500cae480892fad0739f99807dmax(/Windows by Zabbix agent/zabbix[host,agent,available],{$AGENT.TIMEOUT})=0Windows: Zabbix agent is not availableWindows: Zabbix agent is not available (for {$AGENT.TIMEOUT})AVERAGEFor passive only agents, host availability is used with {$AGENT.TIMEOUT} as time threshold.YESscopeavailability
ba19d6566fdb4a668d4363769d1fee01Network interfaces discoveryDEPENDENTnet.if.discoveryAND{#IFALIAS}{$NET.IF.IFALIAS.MATCHES}{#IFALIAS}{$NET.IF.IFALIAS.NOT_MATCHES}NOT_MATCHES_REGEX{#IFDESCR}{$NET.IF.IFDESCR.MATCHES}{#IFDESCR}{$NET.IF.IFDESCR.NOT_MATCHES}NOT_MATCHES_REGEX{#IFNAME}{$NET.IF.IFNAME.MATCHES}{#IFNAME}{$NET.IF.IFNAME.NOT_MATCHES}NOT_MATCHES_REGEX30dDISABLE_NEVERDiscovery of installed network interfaces.8a7bb1e8afd24d32a65fa2116ba439ceInterface {#IFNAME}({#IFALIAS}): Inbound packets discardednet.if.in["{#IFGUID}",dropped]3m7dThe number of incoming packets dropped on the network interface.CHANGE_PER_SECONDcomponentnetworkdescription{#IFALIAS}interface{#IFNAME}6e1f3dfb91024095a20870ee94d01822Interface {#IFNAME}({#IFALIAS}): Inbound packets with errorsnet.if.in["{#IFGUID}",errors]3m7dThe number of incoming packets with errors on the network interface.CHANGE_PER_SECONDcomponentnetworkdescription{#IFALIAS}interface{#IFNAME}82accc942f5747a2b399484466625051Interface {#IFNAME}({#IFALIAS}): Bits receivednet.if.in["{#IFGUID}"]3m7dbpsIncoming traffic on the network interface.CHANGE_PER_SECONDMULTIPLIER8componentnetworkdescription{#IFALIAS}interface{#IFNAME}9ddb9aaf863a45c0affbd90e4a6fa393Interface {#IFNAME}({#IFALIAS}): Outbound packets discardednet.if.out["{#IFGUID}",dropped]3m7dThe number of outgoing packets dropped on the network interface.CHANGE_PER_SECONDcomponentnetworkdescription{#IFALIAS}interface{#IFNAME}38c8a1aa95b343e39e23e7b508521dadInterface {#IFNAME}({#IFALIAS}): Outbound packets with errorsnet.if.out["{#IFGUID}",errors]3m7dThe number of outgoing packets with errors on the network interface.CHANGE_PER_SECONDcomponentnetworkdescription{#IFALIAS}interface{#IFNAME}3b090da19af842189bb6fa56d49ceec3Interface {#IFNAME}({#IFALIAS}): Bits sentnet.if.out["{#IFGUID}"]3m7dbpsOutgoing traffic on the network interface.CHANGE_PER_SECONDMULTIPLIER8componentnetworkdescription{#IFALIAS}interface{#IFNAME}0445b842d1ce4c7f9fd5716c78a079c4Interface {#IFNAME}({#IFALIAS}): SpeedDEPENDENTnet.if.speed["{#IFGUID}"]7d0bpsEstimated bandwidth of the network interface if any.JSONPATH$[?(@.GUID == "{#IFGUID}")].Speed.first()CUSTOM_VALUE0JAVASCRIPTreturn (value=='9223372036854775807' ? 0 : value)DISCARD_UNCHANGED_HEARTBEAT1hwmi.getall[root\cimv2,"select Name,Description,NetConnectionID,Speed,AdapterTypeId,NetConnectionStatus,GUID from win32_networkadapter where PhysicalAdapter=True and NetConnectionStatus>0"]componentnetworkdescription{#IFALIAS}interface{#IFNAME}c495bffb7e244e5caf5dc013d839b758Interface {#IFNAME}({#IFALIAS}): Operational statusDEPENDENTnet.if.status["{#IFGUID}"]7d0The operational status of the network interface.Win32_NetworkAdapter::NetConnectionStatusJSONPATH$[?(@.GUID == "{#IFGUID}")].NetConnectionStatus.first()DISCARD_UNCHANGED_HEARTBEAT1dwmi.getall[root\cimv2,"select Name,Description,NetConnectionID,Speed,AdapterTypeId,NetConnectionStatus,GUID from win32_networkadapter where PhysicalAdapter=True and NetConnectionStatus>0"]componentnetworkdescription{#IFALIAS}interface{#IFNAME}a9b1c61ac4a6481aab93d40c6fb93462{$IFCONTROL:"{#IFNAME}"}=1 and last(/Windows by Zabbix agent/net.if.status["{#IFGUID}"])<>2 and (last(/Windows by Zabbix agent/net.if.status["{#IFGUID}"],#1)<>last(/Windows by Zabbix agent/net.if.status["{#IFGUID}"],#2))RECOVERY_EXPRESSIONlast(/Windows by Zabbix agent/net.if.status["{#IFGUID}"])=2 or {$IFCONTROL:"{#IFNAME}"}=0Interface {#IFNAME}({#IFALIAS}): Link downCurrent state: {ITEM.LASTVALUE1}AVERAGEThis trigger expression works as follows:
1. It can be triggered if the operations status is down.
2. `{$IFCONTROL:"{#IFNAME}"}=1` - a user can redefine context macro to value - 0. That marks this interface as not important.
No new trigger will be fired if this interface is down.
3. `{TEMPLATE_NAME:METRIC.diff()}=1` - the trigger fires only if the operational status was up to (1) sometime before (so, do not fire for the 'eternal off' interfaces.)
WARNING: if closed manually - it will not fire again on the next poll, because of .diff.YESscopeavailability11ce3d38745a49f58f713fcef1a913c5Interface {#IFNAME}({#IFALIAS}): Interface typeDEPENDENTnet.if.type["{#IFGUID}"]7d0The type of the network interface.Win32_NetworkAdapter::AdapterTypeIdJSONPATH$[?(@.GUID == "{#IFGUID}")].AdapterTypeId.first()DISCARD_UNCHANGED_HEARTBEAT1dwmi.getall[root\cimv2,"select Name,Description,NetConnectionID,Speed,AdapterTypeId,NetConnectionStatus,GUID from win32_networkadapter where PhysicalAdapter=True and NetConnectionStatus>0"]componentnetworkdescription{#IFALIAS}interface{#IFNAME}b2191521a7a54985a19740e3ee2674f2change(/Windows by Zabbix agent/net.if.speed["{#IFGUID}"])<0 and
last(/Windows by Zabbix agent/net.if.speed["{#IFGUID}"])>0 and
last(/Windows by Zabbix agent/net.if.status["{#IFGUID}"])=2Interface {#IFNAME}({#IFALIAS}): Ethernet has changed to lower speed than it was beforeCurrent reported speed: {ITEM.LASTVALUE1}INFOThis Ethernet connection has transitioned down from its known maximum speed. This might be a sign of autonegotiation issues. Acknowledge to close the problem manually.YESInterface {#IFNAME}({#IFALIAS}): Link down{$IFCONTROL:"{#IFNAME}"}=1 and last(/Windows by Zabbix agent/net.if.status["{#IFGUID}"])<>2 and (last(/Windows by Zabbix agent/net.if.status["{#IFGUID}"],#1)<>last(/Windows by Zabbix agent/net.if.status["{#IFGUID}"],#2))last(/Windows by Zabbix agent/net.if.status["{#IFGUID}"])=2 or {$IFCONTROL:"{#IFNAME}"}=0scopecapacityc93048183c3942808c60d6dd61963bc0(avg(/Windows by Zabbix agent/net.if.in["{#IFGUID}"],15m)>({$IF.UTIL.MAX:"{#IFNAME}"}/100)*last(/Windows by Zabbix agent/net.if.speed["{#IFGUID}"]) or
avg(/Windows by Zabbix agent/net.if.out["{#IFGUID}"],15m)>({$IF.UTIL.MAX:"{#IFNAME}"}/100)*last(/Windows by Zabbix agent/net.if.speed["{#IFGUID}"])) and
last(/Windows by Zabbix agent/net.if.speed["{#IFGUID}"])>0RECOVERY_EXPRESSIONavg(/Windows by Zabbix agent/net.if.in["{#IFGUID}"],15m)<(({$IF.UTIL.MAX:"{#IFNAME}"}-3)/100)*last(/Windows by Zabbix agent/net.if.speed["{#IFGUID}"]) and
avg(/Windows by Zabbix agent/net.if.out["{#IFGUID}"],15m)<(({$IF.UTIL.MAX:"{#IFNAME}"}-3)/100)*last(/Windows by Zabbix agent/net.if.speed["{#IFGUID}"])Interface {#IFNAME}({#IFALIAS}): High bandwidth usageInterface {#IFNAME}({#IFALIAS}): High bandwidth usage (>{$IF.UTIL.MAX:"{#IFNAME}"}%)In: {ITEM.LASTVALUE1}, out: {ITEM.LASTVALUE3}, speed: {ITEM.LASTVALUE2}WARNINGThe utilization of the network interface is close to its estimated maximum bandwidth.YESInterface {#IFNAME}({#IFALIAS}): Link down{$IFCONTROL:"{#IFNAME}"}=1 and last(/Windows by Zabbix agent/net.if.status["{#IFGUID}"])<>2 and (last(/Windows by Zabbix agent/net.if.status["{#IFGUID}"],#1)<>last(/Windows by Zabbix agent/net.if.status["{#IFGUID}"],#2))last(/Windows by Zabbix agent/net.if.status["{#IFGUID}"])=2 or {$IFCONTROL:"{#IFNAME}"}=0scopeperformancea4fa6e161bb64b98b25b1a2a501a83f4min(/Windows by Zabbix agent/net.if.in["{#IFGUID}",errors],5m)>{$IF.ERRORS.WARN:"{#IFNAME}"}
or min(/Windows by Zabbix agent/net.if.out["{#IFGUID}",errors],5m)>{$IF.ERRORS.WARN:"{#IFNAME}"}RECOVERY_EXPRESSIONmax(/Windows by Zabbix agent/net.if.in["{#IFGUID}",errors],5m)<{$IF.ERRORS.WARN:"{#IFNAME}"}*0.8
and max(/Windows by Zabbix agent/net.if.out["{#IFGUID}",errors],5m)<{$IF.ERRORS.WARN:"{#IFNAME}"}*0.8Interface {#IFNAME}({#IFALIAS}): High error rateInterface {#IFNAME}({#IFALIAS}): High error rate (>{$IF.ERRORS.WARN:"{#IFNAME}"} for 5m)errors in: {ITEM.LASTVALUE1}, errors out: {ITEM.LASTVALUE2}WARNINGIt recovers when it is below 80% of the `{$IF.ERRORS.WARN:"{#IFNAME}"}` threshold.YESInterface {#IFNAME}({#IFALIAS}): Link down{$IFCONTROL:"{#IFNAME}"}=1 and last(/Windows by Zabbix agent/net.if.status["{#IFGUID}"])<>2 and (last(/Windows by Zabbix agent/net.if.status["{#IFGUID}"],#1)<>last(/Windows by Zabbix agent/net.if.status["{#IFGUID}"],#2))last(/Windows by Zabbix agent/net.if.status["{#IFGUID}"])=2 or {$IFCONTROL:"{#IFNAME}"}=0scopeavailability5cbfad75590746718cf4eabbeeea43f3Interface {#IFNAME}({#IFALIAS}): Network trafficGRADIENT_LINE199C0D- Windows by Zabbix agentnet.if.in["{#IFGUID}"]
1BOLD_LINEF63100- Windows by Zabbix agentnet.if.out["{#IFGUID}"]
200611CRIGHT- Windows by Zabbix agentnet.if.out["{#IFGUID}",errors]
3F7941DRIGHT- Windows by Zabbix agentnet.if.in["{#IFGUID}",errors]
4FC6EA3RIGHT- Windows by Zabbix agentnet.if.out["{#IFGUID}",dropped]
56C59DCRIGHT- Windows by Zabbix agentnet.if.in["{#IFGUID}",dropped]
wmi.getall[root\cimv2,"select Name,Description,NetConnectionID,Speed,AdapterTypeId,NetConnectionStatus,GUID from win32_networkadapter where PhysicalAdapter=True and NetConnectionStatus>0"]JAVASCRIPToutput = JSON.parse(value).map(function(net){
return {
"{#IFNAME}": net.Name,
"{#IFDESCR}": net.Description,
"{#IFALIAS}": net.NetConnectionID,
"{#IFGUID}": net.GUID
}})
return JSON.stringify({"data": output})DISCARD_UNCHANGED_HEARTBEAT1h8f155ebc6fd045b3b7548010af1a73c7Physical disks discoveryperf_instance_en.discovery[PhysicalDisk]1hAND{#DEVNAME}{$VFS.DEV.DEVNAME.MATCHES}{#DEVNAME}{$VFS.DEV.DEVNAME.NOT_MATCHES}NOT_MATCHES_REGEX30dDISABLE_NEVERDiscovery of installed physical disks.821f46bbf9d7432e9ea0d5f93a868269{#DEVNAME}: Disk utilization by idle timeperf_counter_en["\PhysicalDisk({#DEVNAME})\% Idle Time",60]7dFLOAT%This item is the percentage of elapsed time that the selected disk drive was busy servicing read or writes requests based on idle time.JAVASCRIPTreturn (100 - value)componentstoragedisk{#DEVNAME}4777fa000fa9460baab1fd7bc7e40604min(/Windows by Zabbix agent/perf_counter_en["\PhysicalDisk({#DEVNAME})\% Idle Time",60],15m)>{$VFS.DEV.UTIL.MAX.WARN}{#DEVNAME}: Disk is overloaded{#DEVNAME}: Disk is overloaded (util > {$VFS.DEV.UTIL.MAX.WARN}% for 15m)WARNINGThe disk appears to be under heavy load.YES{#DEVNAME}: Disk read request responses are too highmin(/Windows by Zabbix agent/perf_counter_en["\PhysicalDisk({#DEVNAME})\Avg. Disk sec/Read",60],15m) > {$VFS.DEV.READ.AWAIT.WARN:"{#DEVNAME}"}{#DEVNAME}: Disk write request responses are too highmin(/Windows by Zabbix agent/perf_counter_en["\PhysicalDisk({#DEVNAME})\Avg. Disk sec/Write",60],15m) > {$VFS.DEV.WRITE.AWAIT.WARN:"{#DEVNAME}"}scopeperformance77e33448596a498ba211d23a1977e9ca{#DEVNAME}: Average disk read queue lengthperf_counter_en["\PhysicalDisk({#DEVNAME})\Avg. Disk Read Queue Length",60]7dFLOATAverage disk read queue, the number of requests outstanding on the disk at the time the performance data is collected.componentstoragedisk{#DEVNAME}7d91ed70bc3b4ef2a7991b3a5ba3bde4{#DEVNAME}: Disk read request avg waiting timeperf_counter_en["\PhysicalDisk({#DEVNAME})\Avg. Disk sec/Read",60]7dFLOATsThe average time for read requests issued to the device to be served. This includes the time spent by the requests in queue and the time spent servicing them.componentstoragedisk{#DEVNAME}85a8c002b3d84121ad2e73c8aced0987min(/Windows by Zabbix agent/perf_counter_en["\PhysicalDisk({#DEVNAME})\Avg. Disk sec/Read",60],15m) > {$VFS.DEV.READ.AWAIT.WARN:"{#DEVNAME}"}{#DEVNAME}: Disk read request responses are too high{#DEVNAME}: Disk read request responses are too high (read > {$VFS.DEV.READ.AWAIT.WARN:"{#DEVNAME}"}s for 15m)WARNINGThis trigger might indicate the disk {#DEVNAME} saturation.YESscopeperformance898784d050664f8eaf197ebebc16077e{#DEVNAME}: Disk write request avg waiting timeperf_counter_en["\PhysicalDisk({#DEVNAME})\Avg. Disk sec/Write",60]7dFLOATsThe average time for write requests issued to the device to be served. This includes the time spent by the requests in queue and the time spent servicing them.componentstoragedisk{#DEVNAME}db6809fd85e241948fb5ef76cb7cc17bmin(/Windows by Zabbix agent/perf_counter_en["\PhysicalDisk({#DEVNAME})\Avg. Disk sec/Write",60],15m) > {$VFS.DEV.WRITE.AWAIT.WARN:"{#DEVNAME}"}{#DEVNAME}: Disk write request responses are too high{#DEVNAME}: Disk write request responses are too high (write > {$VFS.DEV.WRITE.AWAIT.WARN:"{#DEVNAME}"}s for 15m)WARNINGThis trigger might indicate the disk {#DEVNAME} saturation.YESscopeperformance71a2c065efaa437fb7296972f516bd82{#DEVNAME}: Average disk write queue lengthperf_counter_en["\PhysicalDisk({#DEVNAME})\Avg. Disk Write Queue Length",60]7dFLOATAverage disk write queue, the number of requests outstanding on the disk at the time the performance data is collected.componentstoragedisk{#DEVNAME}b49884669dbf43cc95ea3d27fb23698c{#DEVNAME}: Disk average queue size (avgqu-sz)perf_counter_en["\PhysicalDisk({#DEVNAME})\Current Disk Queue Length",60]7dFLOATThe current average disk queue; the number of requests outstanding on the disk while the performance data is being collected.componentstoragedisk{#DEVNAME}390c6e4f2c134ae2939810892eefd6f7{#DEVNAME}: Disk read rateperf_counter_en["\PhysicalDisk({#DEVNAME})\Disk Reads/sec",60]7dFLOAT!r/sRate of read operations on the disk.componentstoragedisk{#DEVNAME}6353d621a9c4415c94247208fc996075{#DEVNAME}: Disk write rateperf_counter_en["\PhysicalDisk({#DEVNAME})\Disk Writes/sec",60]7dFLOAT!w/sRate of write operations on the disk.componentstoragedisk{#DEVNAME}6d37f811023b4f65a071b1deb9b1b8ec{#DEVNAME}: Disk average queue length199C0D- Windows by Zabbix agentperf_counter_en["\PhysicalDisk({#DEVNAME})\Avg. Disk Read Queue Length",60]
1F63100- Windows by Zabbix agentperf_counter_en["\PhysicalDisk({#DEVNAME})\Avg. Disk Write Queue Length",60]
f54bdfb7e0c7471f80b8ca599bc4f904{#DEVNAME}: Disk average waiting time199C0D- Windows by Zabbix agentperf_counter_en["\PhysicalDisk({#DEVNAME})\Avg. Disk sec/Read",60]
1GRADIENT_LINEF63100- Windows by Zabbix agentperf_counter_en["\PhysicalDisk({#DEVNAME})\Avg. Disk sec/Write",60]
339a20ba0d3f4ba4a05aee0611124819{#DEVNAME}: Disk read/write rates199C0D- Windows by Zabbix agentperf_counter_en["\PhysicalDisk({#DEVNAME})\Disk Reads/sec",60]
1GRADIENT_LINEF63100- Windows by Zabbix agentperf_counter_en["\PhysicalDisk({#DEVNAME})\Disk Writes/sec",60]
bc71dc24634742028a5c8384dcaa0f32{#DEVNAME}: Disk utilization and queue199C0DRIGHT- Windows by Zabbix agentperf_counter_en["\PhysicalDisk({#DEVNAME})\Current Disk Queue Length",60]
1GRADIENT_LINEF63100- Windows by Zabbix agentperf_counter_en["\PhysicalDisk({#DEVNAME})\% Idle Time",60]
STR_REPLACE{#INSTANCE}{#DEVNAME}cabcad5c3520448f8e1bf222be348b81Windows services discoveryservice.discovery1hAND{#SERVICE.NAME}{$SERVICE.NAME.MATCHES}{#SERVICE.NAME}{$SERVICE.NAME.NOT_MATCHES}NOT_MATCHES_REGEX{#SERVICE.STARTUPNAME}{$SERVICE.STARTUPNAME.MATCHES}{#SERVICE.STARTUPNAME}{$SERVICE.STARTUPNAME.NOT_MATCHES}NOT_MATCHES_REGEX30dDISABLE_NEVERDiscovery of Windows services of different types as defined in template's macros.dd5a027d75fc4ff1a3bb6e69c0d8d592State of service "{#SERVICE.NAME}" ({#SERVICE.DISPLAYNAME})service.info["{#SERVICE.NAME}",state]7dWindows service statecomponentsystemname{#SERVICE.DISPLAYNAME}service{#SERVICE.NAME}4708592603db4577b26cb6daade41754min(/Windows by Zabbix agent/service.info["{#SERVICE.NAME}",state],#3)<>0"{#SERVICE.NAME}" ({#SERVICE.DISPLAYNAME}) is not running"{#SERVICE.NAME}" ({#SERVICE.DISPLAYNAME}) is not running (startup type {#SERVICE.STARTUPNAME})AVERAGEThe service has a state other than "Running" for the last three times.scopenoticec22b79b52f9148728095bda2796a753eMounted filesystem discoveryDEPENDENTvfs.fs.dependent.discoveryAND{#FSDRIVETYPE}{$VFS.FS.FSDRIVETYPE.MATCHES}{#FSDRIVETYPE}{$VFS.FS.FSDRIVETYPE.NOT_MATCHES}NOT_MATCHES_REGEX{#FSNAME}{$VFS.FS.FSNAME.MATCHES}{#FSNAME}{$VFS.FS.FSNAME.NOT_MATCHES}NOT_MATCHES_REGEX{#FSTYPE}{$VFS.FS.FSTYPE.MATCHES}{#FSTYPE}{$VFS.FS.FSTYPE.NOT_MATCHES}NOT_MATCHES_REGEX1dDISABLE_AFTER1hDiscovery of file systems of different types.7bf3bd42cdf444389e6953090900c620{#FSLABEL}({#FSNAME}): Space utilizationDEPENDENTvfs.fs.dependent.size[{#FSNAME},pused]7dFLOAT%Space utilization expressed in % for `{#FSNAME}`.JSONPATH$.bytes.pusedvfs.fs.dependent[{#FSNAME},data]componentstoragefilesystem{#FSNAME}69378521b7e844ec89afe753a7cba30e{#FSLABEL}({#FSNAME}): Total spaceDEPENDENTvfs.fs.dependent.size[{#FSNAME},total]7dBThe total space expressed in bytes.JSONPATH$.bytes.totalvfs.fs.dependent[{#FSNAME},data]componentstoragefilesystem{#FSNAME}a29509b4b7f24c25a768e88e0c23c154{#FSLABEL}({#FSNAME}): Used spaceDEPENDENTvfs.fs.dependent.size[{#FSNAME},used]7dBUsed storage expressed in bytes.JSONPATH$.bytes.usedvfs.fs.dependent[{#FSNAME},data]componentstoragefilesystem{#FSNAME}bf93dcebfe504ac0a45cf3ef76cd1dc7{#FSLABEL}({#FSNAME}): Get filesystem dataDEPENDENTvfs.fs.dependent[{#FSNAME},data]1hTEXTJSONPATH$.[?(@.fsname=='{#FSNAME}')].first()vfs.fs.getcomponentrawcomponentstoragefilesystem{#FSNAME}d3e99134a1d04894918f2c92ff38cb92last(/Windows by Zabbix agent/vfs.fs.dependent.size[{#FSNAME},pused])>{$VFS.FS.PUSED.MAX.CRIT:"{#FSNAME}"} and
((last(/Windows by Zabbix agent/vfs.fs.dependent.size[{#FSNAME},total])-last(/Windows by Zabbix agent/vfs.fs.dependent.size[{#FSNAME},used]))<{$VFS.FS.FREE.MIN.CRIT:"{#FSNAME}"} or timeleft(/Windows by Zabbix agent/vfs.fs.dependent.size[{#FSNAME},pused],1h,100)<1d){#FSLABEL}({#FSNAME}): Disk space is critically low{#FSLABEL}({#FSNAME}): Disk space is critically low (used > {$VFS.FS.PUSED.MAX.CRIT:"{#FSNAME}"}%)Space used: {ITEM.LASTVALUE3} of {ITEM.LASTVALUE2} ({ITEM.LASTVALUE1})AVERAGETwo conditions should match:
1. The first condition - utilization of the space should be above `{$VFS.FS.PUSED.MAX.CRIT:"{#FSNAME}"}`.
2. The second condition should be one of the following:
- the disk free space is less than `{$VFS.FS.FREE.MIN.CRIT:"{#FSNAME}"}`;
- the disk will be full in less than 24 hours.YESscopecapacity97115bbe4f6b4a8cb2873b8fa01f95d3last(/Windows by Zabbix agent/vfs.fs.dependent.size[{#FSNAME},pused])>{$VFS.FS.PUSED.MAX.WARN:"{#FSNAME}"} and
((last(/Windows by Zabbix agent/vfs.fs.dependent.size[{#FSNAME},total])-last(/Windows by Zabbix agent/vfs.fs.dependent.size[{#FSNAME},used]))<{$VFS.FS.FREE.MIN.WARN:"{#FSNAME}"} or timeleft(/Windows by Zabbix agent/vfs.fs.dependent.size[{#FSNAME},pused],1h,100)<1d){#FSLABEL}({#FSNAME}): Disk space is low{#FSLABEL}({#FSNAME}): Disk space is low (used > {$VFS.FS.PUSED.MAX.WARN:"{#FSNAME}"}%)Space used: {ITEM.LASTVALUE3} of {ITEM.LASTVALUE2} ({ITEM.LASTVALUE1})WARNINGTwo conditions should match:
1. The first condition - utilization of the space should be above `{$VFS.FS.PUSED.MAX.WARN:"{#FSNAME}"}`.
2. The second condition should be one of the following:
- the disk free space is less than `{$VFS.FS.FREE.MIN.WARN:"{#FSNAME}"}`;
- the disk will be full in less than 24 hours.YES{#FSLABEL}({#FSNAME}): Disk space is critically lowlast(/Windows by Zabbix agent/vfs.fs.dependent.size[{#FSNAME},pused])>{$VFS.FS.PUSED.MAX.CRIT:"{#FSNAME}"} and
((last(/Windows by Zabbix agent/vfs.fs.dependent.size[{#FSNAME},total])-last(/Windows by Zabbix agent/vfs.fs.dependent.size[{#FSNAME},used]))<{$VFS.FS.FREE.MIN.CRIT:"{#FSNAME}"} or timeleft(/Windows by Zabbix agent/vfs.fs.dependent.size[{#FSNAME},pused],1h,100)<1d)scopecapacityf80e47b8d4db4c378f25056c02b72382{#FSLABEL}({#FSNAME}): Disk space usage600340PIEYES969696LASTGRAPH_SUM- Windows by Zabbix agentvfs.fs.dependent.size[{#FSNAME},total]
1C80000LAST- Windows by Zabbix agentvfs.fs.dependent.size[{#FSNAME},used]
vfs.fs.get{#FSDRIVETYPE}$.fsdrivetype{#FSNAME}$.fsname{#FSTYPE}$.fstypeclassostargetwindows{$AGENT.TIMEOUT}3mTimeout after which agent is considered unavailable. Works only for agents reachable from Zabbix server/proxy (passive mode).{$CPU.INTERRUPT.CRIT.MAX}50The critical threshold of the % Interrupt Time counter.{$CPU.PRIV.CRIT.MAX}30The threshold of the % Privileged Time counter.{$CPU.QUEUE.CRIT.MAX}3The threshold of the Processor Queue Length counter.{$CPU.UTIL.CRIT}90The critical threshold of the CPU utilization expressed in %.{$IF.ERRORS.WARN}2{$IF.UTIL.MAX}90{$IFCONTROL}1{$MEM.PAGE_SEC.CRIT.MAX}1000The warning threshold of the Memory Pages/sec counter.{$MEM.PAGE_TABLE_CRIT.MIN}5000The warning threshold of the Free System Page Table Entries counter.{$MEMORY.UTIL.MAX}90The warning threshold of the Memory util item.{$NET.IF.IFALIAS.MATCHES}.*This macro is used in Network interface discovery. Can be overridden on the host or linked template level.{$NET.IF.IFALIAS.NOT_MATCHES}CHANGE_THISThis macro is used in Network interface discovery. Can be overridden on the host or linked template level.{$NET.IF.IFDESCR.MATCHES}.*This macro is used in Network interface discovery. Can be overridden on the host or linked template level.{$NET.IF.IFDESCR.NOT_MATCHES}CHANGE_THISThis macro is used in Network interface discovery. Can be overridden on the host or linked template level.{$NET.IF.IFNAME.MATCHES}.*This macro is used in Network interface discovery. Can be overridden on the host or linked template level.{$NET.IF.IFNAME.NOT_MATCHES}Miniport|Virtual|Teredo|Kernel|Loopback|Bluetooth|HTTPS|6to4|QoS|LayerThis macro is used in Network interface discovery. Can be overridden on the host or linked template level.{$SERVICE.NAME.MATCHES}^.*$This macro is used in Service discovery. Can be overridden on the host or linked template level.{$SERVICE.NAME.NOT_MATCHES}^(?:RemoteRegistry|MMCSS|gupdate|SysmonLog|clr_optimization_v.+|sppsvc|gpsvc|Pml Driver HPZ12|Net Driver HPZ12|MapsBroker|IntelAudioService|Intel\(R\) TPM Provisioning Service|dbupdate|DoSvc|CDPUserSvc_.+|WpnUserService_.+|OneSyncSvc_.+|WbioSrvc|BITS|tiledatamodelsvc|GISvc|ShellHWDetection|TrustedInstaller|TabletInputService|CDPSvc|wuauserv)$This macro is used in Service discovery. Can be overridden on the host or linked template level.{$SERVICE.STARTUPNAME.MATCHES}^(?:automatic|automatic delayed)$This macro is used in Service discovery. Can be overridden on the host or linked template level.{$SERVICE.STARTUPNAME.NOT_MATCHES}^(?:manual|disabled)$This macro is used in Service discovery. Can be overridden on the host or linked template level.{$SWAP.PFREE.MIN.WARN}20The warning threshold of the minimum free swap.{$SYSTEM.FUZZYTIME.MAX}60The threshold for difference of system time in seconds.{$VFS.DEV.DEVNAME.MATCHES}.*This macro is used in physical disks discovery. Can be overridden on the host or linked template level.{$VFS.DEV.DEVNAME.NOT_MATCHES}_TotalThis macro is used in physical disks discovery. Can be overridden on the host or linked template level.{$VFS.DEV.READ.AWAIT.WARN}0.02Disk read average response time (in s) before the trigger would fire.{$VFS.DEV.UTIL.MAX.WARN}95The warning threshold of disk time utilization in percent.{$VFS.DEV.WRITE.AWAIT.WARN}0.02Disk write average response time (in s) before the trigger would fire.{$VFS.FS.FREE.MIN.CRIT}5GThe critical threshold of the filesystem utilization.{$VFS.FS.FREE.MIN.WARN}10GThe warning threshold of the filesystem utilization.{$VFS.FS.FSDRIVETYPE.MATCHES}fixedThis macro is used in filesystems discovery. Can be overridden on the host or linked template level.{$VFS.FS.FSDRIVETYPE.NOT_MATCHES}^\s$This macro is used in filesystems discovery. Can be overridden on the host or linked template level.{$VFS.FS.FSNAME.MATCHES}.*This macro is used in filesystems discovery. Can be overridden on the host or linked template level.{$VFS.FS.FSNAME.NOT_MATCHES}^(?:/dev|/sys|/run|/proc|.+/shm$)This macro is used in filesystems discovery. Can be overridden on the host or linked template level.{$VFS.FS.FSTYPE.MATCHES}.*This macro is used in filesystems discovery. Can be overridden on the host or linked template level.{$VFS.FS.FSTYPE.NOT_MATCHES}^\s$This macro is used in filesystems discovery. Can be overridden on the host or linked template level.{$VFS.FS.PUSED.MAX.CRIT}90The critical threshold of the filesystem utilization in percent.{$VFS.FS.PUSED.MAX.WARN}80The warning threshold of the filesystem utilization in percent.49212562a208434d9766aa82240230fdNetwork interfacesOverviewgraphprototype725INTEGERcolumns1GRAPH_PROTOTYPEgraphidWindows by Zabbix agentInterface {#IFNAME}({#IFALIAS}): Network trafficSTRINGreferenceAABAKINTEGERrows15f494fac9dc94bf3827b67ea212240f2System performancegraph365GRAPHgraphidWindows by Zabbix agentWindows: CPU usageSTRINGreferenceAABALgraph5365GRAPHgraphidWindows by Zabbix agentWindows: Memory utilizationSTRINGreferenceAABANgraphprototype10725INTEGERcolumns1GRAPH_PROTOTYPEgraphidWindows by Zabbix agent{#FSLABEL}({#FSNAME}): Disk space usageSTRINGreferenceAABAPINTEGERrows1graphprototype15725INTEGERcolumns1GRAPH_PROTOTYPEgraphidWindows by Zabbix agent{#DEVNAME}: Disk read/write ratesSTRINGreferenceAABAQINTEGERrows1graphprototype20725INTEGERcolumns1GRAPH_PROTOTYPEgraphidWindows by Zabbix agent{#DEVNAME}: Disk utilization and queueSTRINGreferenceAABARINTEGERrows1graphprototype25725INTEGERcolumns1GRAPH_PROTOTYPEgraphidWindows by Zabbix agentInterface {#IFNAME}({#IFALIAS}): Network trafficSTRINGreferenceAABASINTEGERrows1graph36365ITEMitemidWindows by Zabbix agentperf_counter_en["\System\Processor Queue Length"]STRINGreferenceAABAMINTEGERsource_type1graph365365GRAPHgraphidWindows by Zabbix agentWindows: Swap usageSTRINGreferenceAABAO9b087b9bfa09434ea0d0b5c32577abccWin32_NetworkAdapter::AdapterTypeId0Ethernet 802.31Token Ring 802.52Fiber Distributed Data Interface (FDDI)3Wide Area Network (WAN)4LocalTalk5Ethernet using DIX header format6ARCNET7ARCNET (878.2)8ATM9Wireless10Infrared Wireless11Bpc12CoWan1313947e549195e83446228db8bf1101bea83dWin32_NetworkAdapter::NetConnectionStatus0Disconnected1Connecting2Connected3Disconnecting4Hardware Not Present5Hardware Disabled6Hardware Malfunction7Media Disconnected8Authenticating9Authentication Succeeded10Authentication Failed11Invalid Address12Credentials Required3f685167f97c492598ad445fc938560fWindows service state0Running1Paused2Start pending3Pause pending4Continue pending5Stop pending6Stopped7Unknown255No such servicec80233756c9d43769f334d632da07b8czabbix.host.available0not available1available2unknown5d3e53f3090448c7aaf081eb32b28cedZabbix agent ping status1Up8b1baeb26e154f99aefeaba3ea4fa63bmin(/Windows by Zabbix agent/perf_counter_en["\System\Processor Queue Length"],5m) - last(/Windows by Zabbix agent/wmi.get[root/cimv2,"Select NumberOfLogicalProcessors from Win32_ComputerSystem"]) * 2 > {$CPU.QUEUE.CRIT.MAX}Windows: CPU queue length is too highWindows: CPU queue length is too high (over {$CPU.QUEUE.CRIT.MAX} for 5m)WARNINGThe CPU Queue Length in the last 5 minutes exceeds {$CPU.QUEUE.CRIT.MAX}. According to actual observations, PQL should not exceed the number of cores * 2. To fine-tune the conditions, use the macro {$CPU.QUEUE.CRIT.MAX }.Windows: High CPU utilizationmin(/Windows by Zabbix agent/system.cpu.util,5m)>{$CPU.UTIL.CRIT}scopeperformance7c23e03060ce42b094aac2f8aea1a9admax(/Windows by Zabbix agent/system.swap.pfree,5m)<{$SWAP.PFREE.MIN.WARN} and last(/Windows by Zabbix agent/system.swap.size[,total])>0Windows: High swap space usageWindows: High swap space usage (less than {$SWAP.PFREE.MIN.WARN}% free)Free: {ITEM.LASTVALUE1}, total: {ITEM.LASTVALUE2}WARNINGThis trigger is ignored, if there is no swap configuredWindows: High memory utilizationmin(/Windows by Zabbix agent/vm.memory.util,5m)>{$MEMORY.UTIL.MAX}scopeperformance02ec085b49614b30a45287a7e88a8da1Windows: CPU jumps199C0D- Windows by Zabbix agentperf_counter_en["\System\Context Switches/sec"]
1F63100- Windows by Zabbix agentperf_counter_en["\Processor Information(_total)\% Interrupt Time"]
0c2db401fe574282ab0beb6955049330Windows: CPU usageSTACKEDFIXEDFIXED199C0D- Windows by Zabbix agentperf_counter_en["\Processor Information(_total)\% User Time"]
1F63100- Windows by Zabbix agentperf_counter_en["\Processor Information(_total)\% Privileged Time"]
5de711b16f3845659289483f6deb4761Windows: CPU utilizationFIXEDFIXEDGRADIENT_LINE199C0D- Windows by Zabbix agentsystem.cpu.util
1b86c8f6fe3343e6838c5d02f4f64b2bWindows: Memory utilizationFIXEDFIXEDGRADIENT_LINE199C0D- Windows by Zabbix agentvm.memory.util
518f6bcdcefc4cf493244798ccd09ec1Windows: Swap usage199C0D- Windows by Zabbix agentsystem.swap.free
1F63100- Windows by Zabbix agentsystem.swap.size[,total]