Hello there,
I'm trying send log from logstash to zabbix but i face a problem i can't solve.
so these are my conf files :
Input :
input {
udp {
port => 514
type => "syslog"
}
}
output :
output {
zabbix {
zabbix_server_host => "localhost"
zabbix_host => "host"
zabbix_key => "[@metadata][zabbix_key]"
zabbix_value => "host"
}
elasticsearch {
hosts => ["localhost:9200"]
}
}
EDIT : zabbix_value => "message" but the problem is still the same
filter : ATM (for testing) i just want to push everything from logstash to zabbix so i added this line at the bottom of the file
mutate {
add_field => {"[@metadata][zabbix_key]" => "logstash_syslog" }
}
On zabbix i set up a zabbix trapepr with the same key and when i restart every services i have those log :
{:timestamp=>"2016-07-19T17:11:00.552000+0200", :message=>"Zabbix server at 127.0.0.1 responded atypically.", :returned_data=>"ZBX_NOTSUPPORTED\x00Invalid item key format.", :level=>:error}
{:timestamp=>"2016-07-19T17:11:00.552000+0200", :message=>"Failed to send event to Zabbix", :zabbix_response=>"ZBX_NOTSUPPORTED\x00Invalid item key format.",
Do you have any idea how to fix this ?
Thanks for reading,
Josselin