Logstash-output-zabbix (question about multi_value)

Elastic Stack Logstash
1

Hello. I dont understand how use multi_value in logstash (zabbix output).

(Use logstash 5.5.2)

For example:
in filter:

filter {
    mutate {
        add_field => {
            "zabbix_key" => [ "zabbix.key.1", "zabbix.key.2", "zabbix.key.2", "zabbix.key.2" ]
            "zabbix_value" => [ "value.for.zabbix.key.1", "value.for.zabbix.key.1", "value.for.zabbix.key.1", "value.for.zabbix.key.1" ]
            "zabbix_host" => "HOSTNAME_IN_ZABBIX"
        }
    }
}

in output:

output {
    zabbix {
        zabbix_server_host => "<ZABBIX_SERVER_HOST>"
        multi_value => [ zabbix_key, zabbix_value ]
        zabbix_host => "zabbix_host"
    }
}

But in log i see:

[[main]>worker0] WARN logstash.outputs.zabbix - Zabbix server at <ZABBIX_SERVER_HOST> rejected all items sent. {:zabbix_host=>"HOSTNAME_IN_ZABBIX"}

I see it, because output config - wrong?

2

No. It's because the plugin needs to be updated to work with Zabbix 3.x. Something shifted between 2.x and 3.x, and the plugin needs patching.

3

oh damn...
Aaand... I cant send to zabbix (3.2.6) many data to 1 host?
Its imposible?

4

Not until the plugin is updated, no.

5

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.