Zabbix: Data Sources

Overview

The Zabbix module collects data about hosts, interfaces, triggers, and events from the monitoring system to build dashboards, inventory, ASM, and analyze incidents.

The primary data sources are:

• the Zabbix monitoring system
• the Job Scheduler component for regular creation and updating of reference data and aggregates

---

List of Sources

Name	Source Type	Data Origin	Category	Description
zabbix-events	index	Zabbix	events	Events and alerts received from Zabbix triggers.
zabbix-items	index	Zabbix	metrics	Metrics and monitoring items collected from hosts.
zabbix-hosts	index	Zabbix	hosts	Zabbix hosts with basic characteristics.
zabbix-groups	index	Zabbix	groups	Zabbix host groups.
zabbix-triggers	index	Zabbix	events	Monitoring triggers with state and expression information.
zabbix_triggers_asset	reference data	Scheduled task	reference data	Triggers reference for building incidents and dashboards.
zabbix_text_metrics_table	reference data	Scheduled task	reference data	Text-type metrics for analytics and visualizations.
zabbix_numeric_metrics_table	reference data	Scheduled task	reference data	Numeric-type metrics for analytics and visualizations.
zabbix_services_asset	reference data	Scheduled task	reference data	Services reference, mapped to hosts.
zabbix_items_asset	reference data	Scheduled task	reference data	Monitoring items reference for inventory.
zabbix_interfaces_asset	reference data	Scheduled task	reference data	Host interfaces reference.
zabbix_hosts_asset	reference data	Scheduled task	reference data	Hosts reference with up-to-date characteristics.
zabbix_groups_link	reference data	Scheduled task	reference data	Links between groups and hosts.
zabbix_disks_asset	reference data	Scheduled task	reference data	Disks reference attached to hosts.
buffer-zabbix-alerts	reference data	Scheduled task	reference data	Temporary buffer for storing alerts before processing.

---

Notes

• the zabbix-* indexes are created automatically using SA Data Collector and the Zabbix API
• reference data is updated on a schedule via the module's internal tasks
• the data is used in dashboards, ASM, asset inventory, and incident creation