> ## Documentation Index
> Fetch the complete documentation index at: https://docs.cloudthinker.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Zabbix

> Connect Zabbix monitoring to CloudThinker for infrastructure monitoring, alerting, and performance analysis

Connect your Zabbix monitoring platform to enable CloudThinker agents to manage hosts, analyze problems, handle maintenance windows, and perform infrastructure monitoring operations.

Zabbix authenticates with **username and password** (Zabbix 4.4+) or an **API token** (Zabbix 5.4+). API token authentication is preferred for production use.

***

## Supported platforms

| Platform         | Support                                              |
| ---------------- | ---------------------------------------------------- |
| **Zabbix**       | 4.4+ (username/password auth), 5.4+ (API token auth) |
| **Zabbix Cloud** | All tiers                                            |

***

## Prerequisites

* A **Zabbix frontend** (version 4.4 or later) accessible from CloudThinker.
* A **dedicated Zabbix user** with API access enabled, or an **API token** (Zabbix 5.4+).
* Your **Zabbix frontend URL**.

***

## Setup

<Steps>
  <Step title="Sign in to Zabbix">
    Sign in to your Zabbix frontend as an administrator.
  </Step>

  <Step title="Create a dedicated user">
    Go to **Users → Users** and create a new user:

    * **Username**: `cloudthinker`
    * **Password**: a strong, unique password
    * **Role**: Super Admin role (required for full API access) or a custom role with API access enabled
  </Step>

  <Step title="Generate an API token (recommended for Zabbix 5.4+)">
    Go to **Administration → General → API Tokens** and click **Create API token**:

    * **Name**: `cloudthinker`
    * **User**: select the user created above
    * **Expires at**: set an appropriate expiration date

    Copy the token — it will not be shown again.
  </Step>

  <Step title="Find your Zabbix URL">
    Your Zabbix URL is the address of your Zabbix frontend, e.g. `https://zabbix.your-domain.com`.
  </Step>

  <Step title="Add the connection in CloudThinker">
    Navigate to **Connections → Zabbix** and enter:

    * **Zabbix URL**: your Zabbix frontend URL
    * **Auth Type**: select **Username & Password** or **API Token**
    * **Username / Password** or **API Token**: the credentials created above

    Click **Connect**. CloudThinker verifies the credentials and shows a **Connected** status.
  </Step>
</Steps>

<Warning>
  API tokens require Zabbix 5.4 or later. For earlier versions, use username and password authentication.
</Warning>

***

## Connection details

| Field                  | Description                        | Example                          |
| ---------------------- | ---------------------------------- | -------------------------------- |
| **ZABBIX\_URL**        | Your Zabbix frontend URL           | `https://zabbix.your-domain.com` |
| **ZABBIX\_AUTH\_TYPE** | Authentication method              | `credentials` or `token`         |
| **ZABBIX\_USERNAME**   | Zabbix username (credentials auth) | `cloudthinker`                   |
| **ZABBIX\_PASSWORD**   | Zabbix password (credentials auth) | —                                |
| **ZABBIX\_TOKEN**      | Zabbix API token (token auth)      | —                                |

***

## Required permissions

**Minimum (read-only monitoring):**

* User role with Zabbix API access enabled
* Read access to host groups you want to monitor

**Recommended (full operations):**

* Super Admin role or a custom role with API access enabled, read/write access to hosts, templates, triggers, and events, and permission to create and modify maintenance windows

<Tip>
  Follow least privilege: grant only the host groups and permissions CloudThinker needs for your use case.
</Tip>

***

## Agent capabilities

Once connected, agents can perform monitoring and operational tasks across your Zabbix environment.

| Capability              | Description                                                  |
| ----------------------- | ------------------------------------------------------------ |
| **Host management**     | List, inspect, enable, and disable monitored hosts           |
| **Problem analysis**    | Retrieve active problems, analyze patterns, correlate events |
| **Trigger management**  | View and modify alert trigger configurations                 |
| **Maintenance windows** | Create and manage maintenance periods to suppress alerts     |
| **Template operations** | Inspect and apply monitoring templates across hosts          |
| **Dashboard access**    | Retrieve Zabbix dashboards and graph data                    |

### Verify the connection

```text theme={null}
@alex list Zabbix hosts and summarize active problem count by severity
```

### Example prompts

```text theme={null}
@alex list all Zabbix hosts with active problems and their severity
@alex analyze active Zabbix problems with severity >= High and #recommend remediation steps
@oliver review Zabbix trigger configurations for security-related alerts
```

***

## Troubleshooting

<Accordion title="Connection refused">
  Verify the Zabbix URL is accessible from CloudThinker. Check firewall rules to ensure inbound connections are allowed on port 80 or 443, and confirm the Zabbix frontend is running.
</Accordion>

<Accordion title="Authentication failed">
  Verify the username and password are correct and the user account is not locked or disabled. For API token auth, verify the token has not expired and the user has API access enabled in their role.
</Accordion>

<Accordion title="Permission denied">
  Verify the user has sufficient permissions for the requested operations. Check that host group access is granted to the user. For write operations, confirm the role permits API write access.
</Accordion>

<Accordion title="API token expired">
  Go to **Administration → API Tokens** in Zabbix, delete the expired token, and create a new one. Update the token in the CloudThinker connection settings.
</Accordion>

***

## Security

* **Least privilege** — grant only the permissions the agents need for your use case; start read-only and widen later.
* **Read-only by default** — use read-only credentials unless you want agents to make changes through this connection.
* **Rotate credentials** — rotate keys and tokens on your normal schedule; CloudThinker picks up the new value when you update the connection.
* **Revoke on offboarding** — remove the credential at the provider when you delete a connection or a teammate leaves.

- **API token over credentials** — use API token authentication (Zabbix 5.4+) instead of username/password for better auditability.
- **Set token expiration** — configure an appropriate expiration date on API tokens and rotate them on schedule.

***

## Related

<CardGroup cols={2}>
  <Card title="Grafana Connection" icon="https://mintcdn.com/cloudthinker/aLd-ttc-SCW-aFky/images/icons/grafana.svg?fit=max&auto=format&n=aLd-ttc-SCW-aFky&q=85&s=c1329049025cd3c3a0909b400baef7be" href="/guide/connections/grafana" width="24" height="24" data-path="images/icons/grafana.svg">
    Visualize Zabbix metrics in Grafana
  </Card>

  <Card title="Elasticsearch Connection" icon="https://mintcdn.com/cloudthinker/aLd-ttc-SCW-aFky/images/icons/elasticsearch.svg?fit=max&auto=format&n=aLd-ttc-SCW-aFky&q=85&s=c7389cfcd0bc8d303aeeb68bd19199ca" href="/guide/connections/elasticsearch" width="24" height="24" data-path="images/icons/elasticsearch.svg">
    Forward Zabbix logs to Elasticsearch
  </Card>
</CardGroup>