Difference between revisions of "Zabbix Remote Commands"
Jump to navigation
Jump to search
| Line 22: | Line 22: | ||
zabbix_get -s txd1-sandbox.extendhealth.com -p 10050 -k "system.run[dir]" --tls-connect psk --tls | zabbix_get -s txd1-sandbox.extendhealth.com -p 10050 -k "system.run[dir]" --tls-connect psk --tls | ||
-psk-identity <MYID> --tls-psk-file <MYFILEPATH> | -psk-identity <MYID> --tls-psk-file <MYFILEPATH> | ||
| + | ``` | ||
| + | |||
| + | # Linux allow sudo nopasswd for commands you want to allow agent to run | ||
| + | |||
| + | /etc/sudoers.d/zabbix | ||
| + | ``` | ||
| + | # zabbix ALL=NOPASSWD: ALL | ||
| + | zabbix ALL=NOPASSWD: /usr/bin/systemctl restart* | ||
| + | zabbix ALL=NOPASSWD: /usr/bin/systemctl start zabbix-agent2 | ||
| + | ``` | ||
| + | |||
| + | test on zabbix agent host | ||
| + | ``` | ||
| + | sudo -u zabbix sudo systemctl restart zabbix-agent2 | ||
``` | ``` | ||
Revision as of 12:10, 23 July 2021
https://blog.zabbix.com/zabbix-remote-commands/7500/
Enable on Agent and Test from Server/Proxy
Client
- /etc/zabbix/zabbix_agent2.conf
- C:\Program Files\Zabbix Agent 2\zabbix_agent2.conf
# AllowKey=system.run[*] # AllowKey=system.run[hostname] AllowKey=system.run[dir]
Reload config
sudo systemctl restart zabbix-agent2 restart-service "zabbix agent 2"
Server
zabbix_get -s txd1-sandbox.extendhealth.com -p 10050 -k "system.run[dir]" --tls-connect psk --tls -psk-identity <MYID> --tls-psk-file <MYFILEPATH>
Linux allow sudo nopasswd for commands you want to allow agent to run
/etc/sudoers.d/zabbix
# zabbix ALL=NOPASSWD: ALL zabbix ALL=NOPASSWD: /usr/bin/systemctl restart* zabbix ALL=NOPASSWD: /usr/bin/systemctl start zabbix-agent2
test on zabbix agent host
sudo -u zabbix sudo systemctl restart zabbix-agent2