# Duplication data in Zabbix

**URL:** <https://discuss.elastic.co/t/duplication-data-in-zabbix/102922>\
**Category:** Logstash\
**Created:** [October 5, 2017, 9:47pm UTC](https://discuss.elastic.co/t/duplication-data-in-zabbix/102922 "2017-10-05T21:47:01Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![vl.zemtsov](https://avatars.discourse-cdn.com/v4/letter/v/eb9ed0/32.png) [@vl.zemtsov](https://discuss.elastic.co/u/vl.zemtsov)\
**Post date:** [October 5, 2017, 9:47pm UTC](https://discuss.elastic.co/t/duplication-data-in-zabbix/102922/1 "2017-10-05T21:47:01Z")

</div>

Hello.

I have dir '/tmp/dataForZabbix/'  
In that dir i have many files, for example consider 1 file: '/tmp/dataForZabbix/testFile'

In this file written lines, simultaneously, **every 15 sec** :

> ```
> ZabbixHost: <ZABBIX_HOST>
> <ZABBIX_KEY> <ZABBIX_VALUE>
> <ZABBIX_KEY> <ZABBIX_VALUE>
> <ZABBIX_KEY> <ZABBIX_VALUE>
> <ZABBIX_KEY> <ZABBIX_VALUE>
> 
> ```

(in each line ZABBIX\_KEY differend)

I have input:

> ```
> input {
> file {
> path => "/tmp/dataForZabbix/*"
> start_position => "end"
> }
> }
> 
> ```

Filter:

> ```
> filter {
> if "/tmp/dataForZabbix" in [path] {
> ruby {
> code => "    
> flag = event.get('message').split()
> event.set('[@metadata][zabbix_send]', 'true')
>  
> if flag[0] == 'zabbix_key1'
> event.set('[@metadata][zabbix_host]', IO.readlines(event.get('path'))[-5].split[1])
> event.set('[@metadata][zabbix_key]', flag[0])
> event.set('[@metadata][zabbix_value]', flag[1])
> elsif flag[0] == 'zabbix_key2'
> event.set('[@metadata][zabbix_host]', IO.readlines(event.get('path'))[-5].split[1])
> event.set('[@metadata][zabbix_key]', flag[0])
> event.set('[@metadata][zabbix_value]', flag[1])
> elsif flag[0] == 'zabbix_key3'
> event.set('[@metadata][zabbix_host]', IO.readlines(event.get('path'))[-5].split[1])
> event.set('[@metadata][zabbix_key]', flag[0])
> event.set('[@metadata][zabbix_value]', flag[1])
> elsif flag[0] == 'zabbix_key4'
> event.set('[@metadata][zabbix_host]', IO.readlines(event.get('path'))[-5].split[1])
> event.set('[@metadata][zabbix_key]', flag[0])
> event.set('[@metadata][zabbix_value]', flag[1])
> else
> event.set('[@metadata][zabbix_send]', 'false')
> end
> "
> }
> }
> }
> 
> ```

(for zabbix\_host read [-5] line, bc line recorded simultaneously)

And output:

> ```
> output {
> if [@metadata][zabbix_send] == "true" {
> zabbix {
> zabbix_server_host => "zabbix.server"
> zabbix_value => "[@metadata][zabbix_value]"
> zabbix_host => "[@metadata][zabbix_host]"
> zabbix_key => "[@metadata][zabbix_key]"
> }
> }
> }
> 
> ```

But in zabbix I see dublicate data for every key (zabbix\_key1(/2/3/4)... WHY?

![image](https://us1.discourse-cdn.com/elastic/original/3X/1/d/1d033e20c2c829972a05a8e1bb9de11d2e936628.png)

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [November 2, 2017, 9:47pm UTC](https://discuss.elastic.co/t/duplication-data-in-zabbix/102922/2 "2017-11-02T21:47:30Z")

</div>

Closed on November 2, 2017, 9:47pm UTC

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.