Zabbix

# Arquitectura Zabbix:
#
# ┌──────────────────────────────────────────────────┐
# │              ZABBIX SERVER                       │
# │   Trapper | Poller | IPMI | SNMP | JMX           │
# └──────────────────┬───────────────────────────────┘
#                    │
#       ┌────────────┴────────────┐
#       ▼                         ▼
# ┌───────────────┐     ┌─────────────────────┐
# │  DATABASE     │     │   WEB FRONTEND      │
# │ MySQL/PgSQL   │     │  PHP + Nginx        │
# │ (métricas)    │     │  (dashboards)       │
# └───────────────┘     └─────────────────────┘
#
# Flujo de datos:
# Host con Agent → envía métricas cada 30s
# → Zabbix Server las recibe y guarda en BD
# → Evalúa triggers (condiciones de alerta)
# → Si trigger activo → acción (email, script, webhook)
# → Web frontend muestra gráficas en tiempo real

# Modos de recolección:
# PASSIVE: Zabbix Server consulta al agente (por defecto)
# ACTIVE:  El agente envía datos al servidor (mejor para firewalls)

mkdir -p ~/zabbix && cd ~/zabbix

cat > docker-compose.yml << 'EOF'
version: '3.8'

services:
  zabbix-db:
    image: mysql:8.0
    container_name: zabbix-mysql
    restart: unless-stopped
    environment:
      MYSQL_DATABASE: zabbix
      MYSQL_USER: zabbix
      MYSQL_PASSWORD: zabbix_secure_2024
      MYSQL_ROOT_PASSWORD: root_secure_2024
    volumes:
      - zabbix-db:/var/lib/mysql
    command: >
      --character-set-server=utf8mb4
      --collation-server=utf8mb4_bin
      --default-authentication-plugin=mysql_native_password
    networks: [zabbix-net]

  zabbix-server:
    image: zabbix/zabbix-server-mysql:ubuntu-6.4-latest
    restart: unless-stopped
    ports: ["10051:10051"]
    environment:
      DB_SERVER_HOST: zabbix-db
      MYSQL_DATABASE: zabbix
      MYSQL_USER: zabbix
      MYSQL_PASSWORD: zabbix_secure_2024
      ZBX_CACHESIZE: 256M
      ZBX_HISTORYCACHESIZE: 64M
    depends_on: [zabbix-db]
    networks: [zabbix-net]

  zabbix-web:
    image: zabbix/zabbix-web-nginx-mysql:ubuntu-6.4-latest
    restart: unless-stopped
    ports: ["8080:8080"]
    environment:
      DB_SERVER_HOST: zabbix-db
      MYSQL_DATABASE: zabbix
      MYSQL_USER: zabbix
      MYSQL_PASSWORD: zabbix_secure_2024
      ZBX_SERVER_HOST: zabbix-server
      PHP_TZ: America/Mexico_City
      ZBX_SERVER_NAME: "Mi Monitoring"
    depends_on: [zabbix-server]
    networks: [zabbix-net]

  zabbix-agent:
    image: zabbix/zabbix-agent2:ubuntu-6.4-latest
    restart: unless-stopped
    environment:
      ZBX_HOSTNAME: "zabbix-server-host"
      ZBX_SERVER_HOST: zabbix-server
    networks: [zabbix-net]

volumes:
  zabbix-db:
networks:
  zabbix-net:
    driver: bridge
EOF

docker-compose up -d
docker-compose logs -f zabbix-server   # Ver logs
# Acceder a http://localhost:8080  |  Admin / zabbix

# ── INSTALAR AGENTE EN HOST REMOTO (Ubuntu 22.04) ─────
wget https://repo.zabbix.com/zabbix/6.4/ubuntu/pool/main/z/zabbix-release/zabbix-release_6.4-1+ubuntu22.04_all.deb
sudo dpkg -i zabbix-release_6.4-1+ubuntu22.04_all.deb
sudo apt update && sudo apt install -y zabbix-agent2

sudo nano /etc/zabbix/zabbix_agent2.conf
# Cambiar:
# Server=192.168.1.10           ← IP de tu Zabbix Server
# ServerActive=192.168.1.10     ← Para modo activo
# Hostname=mi-servidor-web      ← Debe coincidir en Zabbix UI

sudo systemctl enable --now zabbix-agent2

# ── AÑADIR HOST EN WEB UI ──────────────────────────────
# Configuration → Hosts → Create host
# Host name:    mi-servidor-web
# Groups:       Linux servers
# Interface → Type: Agent | IP: 192.168.1.100 | Port: 10050
# Templates → Add: "Linux by Zabbix agent"
# → Update

# ── CREAR TRIGGERS PERSONALIZADOS ─────────────────────
# Configuration → Hosts → [host] → Triggers → Create trigger

# Trigger 1: CPU alta sostenida
# Expression: avg(/mi-servidor/system.cpu.util,10m)>85
# Recovery:   avg(/mi-servidor/system.cpu.util,5m)<70
# Severity: High

# Trigger 2: Disco crítico
# Expression: last(/mi-servidor/vfs.fs.size[/,pfree])<5
# Severity: Disaster

# Trigger 3: Apache caído
# Expression: last(/mi-servidor/net.tcp.service[http,,80])=0
# Severity: High

# ── API REST ZABBIX ────────────────────────────────────
# Obtener token de autenticación:
curl -s -X POST http://localhost:8080/api_jsonrpc.php \
  -H "Content-Type: application/json-rpc" \
  -d '{"jsonrpc":"2.0","method":"user.login",
       "params":{"username":"Admin","password":"zabbix"},"id":1}'

# ── API REST: Operaciones comunes ──────────────────────

# 1. Login y obtener token
AUTH=$(curl -s -X POST http://localhost:8080/api_jsonrpc.php \
  -H "Content-Type: application/json-rpc" \
  -d '{"jsonrpc":"2.0","method":"user.login",
       "params":{"username":"Admin","password":"zabbix"},"id":1}' \
  | python3 -c "import sys,json; print(json.load(sys.stdin)['result'])")

# 2. Listar hosts activos
curl -s -X POST http://localhost:8080/api_jsonrpc.php \
  -H "Content-Type: application/json-rpc" \
  -d "{"jsonrpc":"2.0","method":"host.get",
       "params":{"output":["hostid","host","status"]},
       "auth":"$AUTH","id":2}" | python3 -m json.tool

# 3. Obtener alertas activas
curl -s -X POST http://localhost:8080/api_jsonrpc.php \
  -H "Content-Type: application/json-rpc" \
  -d "{"jsonrpc":"2.0","method":"problem.get",
       "params":{"output":"extend","sortfield":["eventid"],
       "sortorder":"DESC","limit":10},
       "auth":"$AUTH","id":3}" | python3 -m json.tool

# ── SCRIPT PYTHON PARA CREAR HOST ─────────────────────
cat > create_host.py << 'PYEOF'
import requests

URL = "http://localhost:8080/api_jsonrpc.php"
HDR = {"Content-Type": "application/json-rpc"}

# Login
token = requests.post(URL, headers=HDR, json={
    "jsonrpc":"2.0","method":"user.login",
    "params":{"username":"Admin","password":"zabbix"},"id":1
}).json()["result"]

# Crear host
result = requests.post(URL, headers=HDR, json={
    "jsonrpc":"2.0","method":"host.create",
    "params":{
        "host":"nuevo-servidor",
        "interfaces":[{"type":1,"main":1,"useip":1,
                       "ip":"192.168.1.200","dns":"","port":"10050"}],
        "groups":[{"groupid":"2"}],
        "templates":[{"templateid":"10001"}]
    },
    "auth":token,"id":2
}).json()
print("Creado:", result)
PYEOF
python3 create_host.py