Zabbix

Connect Zabbix monitoring to CloudThinker for infrastructure monitoring, alerting, and performance analysis

Connect your Zabbix monitoring platform to enable CloudThinker agents to manage hosts, analyze problems, handle maintenance windows, and perform infrastructure monitoring operations.

Zabbix authenticates with username and password (Zabbix 4.4+) or an API token (Zabbix 5.4+). API token authentication is preferred for production use.

---

Supported platforms

Platform	Support
Zabbix	4.4+ (username/password auth), 5.4+ (API token auth)
Zabbix Cloud	All tiers

---

Prerequisites

• A Zabbix frontend (version 4.4 or later) accessible from CloudThinker.
• A dedicated Zabbix user with API access enabled, or an API token (Zabbix 5.4+).
• Your Zabbix frontend URL.

---

Setup

1. Sign in to Zabbix

   Sign in to your Zabbix frontend as an administrator.

2. Create a dedicated user

   Go to Users → Users and create a new user:

   • Username: cloudthinker
   • Password: a strong, unique password
   • Role: Super Admin role (required for full API access) or a custom role with API access enabled
3. Generate an API token (recommended for Zabbix 5.4+)

   Go to Administration → General → API Tokens and click Create API token:

   • Name: cloudthinker
   • User: select the user created above
   • Expires at: set an appropriate expiration date

   Copy the token — it will not be shown again.

4. Find your Zabbix URL

   Your Zabbix URL is the address of your Zabbix frontend, e.g. https://zabbix.your-domain.com.

5. Add the connection in CloudThinker

   Navigate to Connections → Zabbix and enter:

   • Zabbix URL: your Zabbix frontend URL
   • Auth Type: select Username & Password or API Token
   • Username / Password or API Token: the credentials created above

   Click Connect. CloudThinker verifies the credentials and shows a Connected status.

API tokens require Zabbix 5.4 or later. For earlier versions, use username and password authentication.

---

Connection details

Field	Description	Example
ZABBIX_URL	Your Zabbix frontend URL	https://zabbix.your-domain.com
ZABBIX_AUTH_TYPE	Authentication method	credentials or token
ZABBIX_USERNAME	Zabbix username (credentials auth)	cloudthinker
ZABBIX_PASSWORD	Zabbix password (credentials auth)	—
ZABBIX_TOKEN	Zabbix API token (token auth)	—

---

Required permissions

Minimum (read-only monitoring):

• User role with Zabbix API access enabled
• Read access to host groups you want to monitor

Recommended (full operations):

• Super Admin role or a custom role with API access enabled, read/write access to hosts, templates, triggers, and events, and permission to create and modify maintenance windows

Follow least privilege: grant only the host groups and permissions CloudThinker needs for your use case.

---

Agent capabilities

Once connected, agents can perform monitoring and operational tasks across your Zabbix environment.

Capability	Description
Host management	List, inspect, enable, and disable monitored hosts
Problem analysis	Retrieve active problems, analyze patterns, correlate events
Trigger management	View and modify alert trigger configurations
Maintenance windows	Create and manage maintenance periods to suppress alerts
Template operations	Inspect and apply monitoring templates across hosts
Dashboard access	Retrieve Zabbix dashboards and graph data

Verify the connection

@alex list Zabbix hosts and summarize active problem count by severity

Example prompts

@alex list all Zabbix hosts with active problems and their severity
@alex analyze active Zabbix problems with severity >= High and #recommend remediation steps
@oliver review Zabbix trigger configurations for security-related alerts

---

Troubleshooting

Connection refused

Verify the Zabbix URL is accessible from CloudThinker. Check firewall rules to ensure inbound connections are allowed on port 80 or 443, and confirm the Zabbix frontend is running.

Authentication failed

Verify the username and password are correct and the user account is not locked or disabled. For API token auth, verify the token has not expired and the user has API access enabled in their role.

Permission denied

Verify the user has sufficient permissions for the requested operations. Check that host group access is granted to the user. For write operations, confirm the role permits API write access.

API token expired

Go to Administration → API Tokens in Zabbix, delete the expired token, and create a new one. Update the token in the CloudThinker connection settings.

---

Security

• Least privilege — grant only the permissions the agents need for your use case; start read-only and widen later.
• Read-only by default — use read-only credentials unless you want agents to make changes through this connection.
• Rotate credentials — rotate keys and tokens on your normal schedule; CloudThinker picks up the new value when you update the connection.
• Revoke on offboarding — remove the credential at the provider when you delete a connection or a teammate leaves.

• API token over credentials — use API token authentication (Zabbix 5.4+) instead of username/password for better auditability.
• Set token expiration — configure an appropriate expiration date on API tokens and rotate them on schedule.

---

Related

Grafana Connection

Visualize Zabbix metrics in Grafana

Elasticsearch Connection

Forward Zabbix logs to Elasticsearch