├── externalscript
    ├── check_graylog_node_creds.txt
    └── check_graylog_node
├── LICENSE.txt
├── README.md
└── template
    └── graylog2_server_template.xml


/externalscript/check_graylog_node_creds.txt:
--------------------------------------------------------------------------------
1 | USERNAME=monitoring
2 | PASSWORD=monitoring
3 | 


--------------------------------------------------------------------------------
/LICENSE.txt:
--------------------------------------------------------------------------------
 1 | The MIT License (MIT)
 2 | 
 3 | Copyright (c) [year] [fullname]
 4 | 
 5 | Permission is hereby granted, free of charge, to any person obtaining a copy
 6 | of this software and associated documentation files (the "Software"), to deal
 7 | in the Software without restriction, including without limitation the rights
 8 | to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
 9 | copies of the Software, and to permit persons to whom the Software is
10 | furnished to do so, subject to the following conditions:
11 | 
12 | The above copyright notice and this permission notice shall be included in all
13 | copies or substantial portions of the Software.
14 | 
15 | THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
16 | IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
17 | FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
18 | AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
19 | LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
20 | OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
21 | SOFTWARE.
22 | 


--------------------------------------------------------------------------------
/README.md:
--------------------------------------------------------------------------------
 1 | # graylog2-zabbix
 2 | > No longer actively maintained.
 3 | 
 4 | Basic Zabbix monitoring for Graylog2
 5 | 
 6 | Mainly written for my own use, please feel to fork/use and give feedback.
 7 | 
 8 | ### Branch pre-2.1 - Graylog 2.1 and below
 9 | 
10 | Written using Zabbix 2.4 and Graylog 1.3. Lightly tested, but does no harm anyway.
11 | Confirmed to work on Zabbix 3.0 and Graylog 2.0.3 as well.
12 | 
13 | ### Master branch - Graylog 2.1 and up
14 | 
15 | Tested using Zabbix 3.2 and Graylog 2.1.1, 2.2.3.
16 | 
17 | For specific Elasticsearch monitoring, please head over to Elastizabbix (https://github.com/mkhpalm/elastizabbix)
18 | 
19 | ## Requirements
20 |   * jq (https://github.com/stedolan/jq) 1.4+
21 |   * curl
22 | 
23 | This doesn't require anything on the agent. It is an external script curl'ing to the Graylog2 API.
24 | 
25 | Please note, if running by hand, that the `poll_data` item has to be run first.
26 | 
27 | ## How to install
28 |   * Create a Graylog2 user with the "reader" role
29 |   * Enter the credentials in the check_graylog_node_creds.txt file.
30 |   * Copy the 2 files to your zabbix's externalscripts directory.
31 |   * Make sure your files permissions are adequate.
32 |   * Import the XML template in Zabbix.
33 |   * Add template to graylog server and subscribe your graylog server hosts to it.
34 | 
35 | ## Usage
36 | 
37 | Note: As of 2.1, the default API port is 9000; It used to be 12900. You can change it back to the old behavior with ```rest_listen_uri```, pass port 9000 to the zabbix items (tedious) or simply modify the script at the top to change the port.
38 | 
39 | ```
40 | check_graylog_node -H <HOSTNAME> -a <ATTRIBUTE> [-p <GRAYLOG_API_PORT>] [-h] [-d]
41 | 
42 | Args:
43 |     -H : Hostname or IP address of graylog server
44 |     -a : Attribute to monitor. See list below.
45 |     -p : Graylog API port (default: 12900)
46 |     -d : Debug message to log file (default: false)
47 |     -h : Displays help
48 | 
49 | List of attributes:
50 |     - node_id : returns graylog node_id
51 |     - node_transport
52 |     - node_is_master
53 |     - node_cluster
54 |     - node_type
55 |     - node_throughput
56 |     - lb_status
57 |     - total_message_count
58 |     - es_cluster_health
59 |     - journal_size
60 |     - journal_num_segments
61 |     - journal_uncommitted_entries
62 |     - journal_events_read
63 |     - journal_events_append
64 |     - buffer_input_utilization
65 |     - buffer_output_utilization
66 |     - buffer_input_utilization_percent
67 |     - buffer_output_utilization_percent
68 |     - poll_data
69 |     - current_deflector (not yet supported, because not accessible via regular user)
70 |     - system_lifecycle
71 |     - system_isprocessing
72 |     - system_tz
73 |     - system_version
74 |     - system_startedat
75 |     - cluster_stream_count
76 |     - cluster_stream_rule_count
77 |     - cluster_user_count
78 |     - cluster_output_count
79 |     - cluster_dashboard_count
80 |     - cluster_input_count
81 |     - cluster_global_input_count
82 |     - cluster_extractor_count
83 |     - cluster_contentpack_count
84 |     - cluster_alerts_count
85 | ```
86 | 


--------------------------------------------------------------------------------
/externalscript/check_graylog_node:
--------------------------------------------------------------------------------
  1 | #!/bin/bash
  2 | 
  3 | # Debug override -- uncomment to write to $LOG, silent otherwise.
  4 | DEBUG=0
  5 | 
  6 | ## Defaults ##
  7 | CREDS_FILE=$(dirname $BASH_SOURCE)/check_graylog_node_creds.txt
  8 | source $CREDS_FILE
  9 | WORKDIR=/tmp
 10 | LOG=${WORKDIR}/$(basename $0).log
 11 | APIPORT=12900
 12 | ## End defaults  ##
 13 | 
 14 | 
 15 | usage() {
 16 |     cat <<EOF
 17 | Usage: $0 -H <HOSTNAME> -a <ATTRIBUTE> [-p <GRAYLOG_API_PORT>] [-h] [-d]
 18 | 
 19 | Args:
 20 |     -H : Hostname or IP address of graylog server
 21 |     -a : Attribute to monitor. See list below.
 22 |     -p : Graylog API port (default: 12900)
 23 |     -d : Debug message to log file (default: false)
 24 |     -h : Displays help
 25 | 
 26 | List of attributes:
 27 |     - node_id : returns graylog node_id
 28 |     - node_transport
 29 |     - node_is_master
 30 |     - node_cluster
 31 |     - node_type
 32 |     - node_throughput
 33 |     - lb_status
 34 |     - total_message_count 
 35 |     - es_cluster_health
 36 |     - journal_size
 37 |     - journal_num_segments
 38 |     - journal_uncommitted_entries
 39 |     - journal_events_read
 40 |     - journal_events_append
 41 |     - poll_data
 42 |     - current_deflector (not yet supported, because not accessible via regular user)
 43 |     - system_lifecycle                       
 44 |     - system_isprocessing
 45 |     - system_tz
 46 |     - system_version
 47 |     - system_startedat
 48 |     - cluster_stream_count
 49 |     - cluster_stream_rule_count
 50 |     - cluster_user_count
 51 |     - cluster_output_count
 52 |     - cluster_dashboard_count
 53 |     - cluster_input_count
 54 |     - cluster_global_input_count
 55 |     - cluster_extractor_count
 56 |     - cluster_contentpack_count              
 57 |     - cluster_alerts_count
 58 | EOF
 59 | }
 60 | 
 61 | while getopts hH:a:p::l:d opts; do
 62 |     case $opts in
 63 |         H)  HOSTNAME=$OPTARG
 64 |             ;;
 65 |         a)  ATTR=$OPTARG
 66 |             ;;
 67 |         p)  APIPORT=$OPTARG
 68 |             ;;
 69 |         h)  usage; exit 0
 70 |             ;;
 71 |         d)  DEBUG=1
 72 |             ;;
 73 |         :)  echo "Option -$OPTARG requires an argument."
 74 |             exit 1
 75 |             ;;
 76 |         *)  echo "Invalid option -${OPTARG}."
 77 |             exit 1
 78 |             ;;
 79 |     esac
 80 | done
 81 | if [ "$DEBUG" == 1 ]; then
 82 | 	exec > >(tee -a $LOG)
 83 | 	exec 2>&1
 84 | 	#set -x
 85 | fi
 86 | 
 87 | # exit if less than 2 attributes are passed in
 88 | [[ $OPTIND -lt 4 ]] && usage && exit 1
 89 | 
 90 | ##### BEGIN FLOCK CONVENIENCE FUNCTION DEFINITIONS ##### 
 91 | ### HEADER ###
 92 | LOCKFILE="${WORKDIR}/$(basename $0)-${HOSTNAME}.lock"
 93 | LOCKFD=99
 94 |  
 95 | # PRIVATE
 96 | _lock()             { flock -$1 $LOCKFD; }
 97 | _no_more_locking()  { _lock u; _lock xn && rm -f $LOCKFILE; }
 98 | _prepare_locking()  { eval "exec $LOCKFD>\"$LOCKFILE\""; trap _no_more_locking EXIT; }
 99 |  
100 | # ON START
101 | _prepare_locking
102 |  
103 | # PUBLIC
104 | exlock_now()        { _lock xn; }  # obtain an exclusive lock immediately or fail
105 | exlock()            { _lock x; }   # obtain an exclusive lock
106 | shlock()            { _lock s; }   # obtain a shared lock
107 | unlock()            { _lock u; }   # drop a lock
108 | ##### END FLOCK CONVENIENCE FUNCTION DEFINITIONS ##### 
109 | 
110 | #CURL_BASE_CMD="curl -u ${USERNAME}:${PASSWORD}  -D /dev/fd/4 -sS http://${HOSTNAME}:${APIPORT}"
111 | CURL_BASE_CMD="curl -u '${USERNAME}':'${PASSWORD}' -sS http://${HOSTNAME}:${APIPORT}/api"
112 | 
113 | get_json_info() {
114 |     # $1 = URI -- $2 filename
115 |     debug "[$FUNCNAME] [$(basename $2)] Pulling json data"
116 |     starttime=`date +%s%3N`
117 | 	#HEADERS_DEBUG=/dev/null
118 |     #if [ "$DEBUG" == 1 ]; then
119 | 	#	HEADERS_DEBUG=$LOG
120 | 	#fi
121 | 	#exec 4> >(tee -a $HEADERS_DEBUG >/dev/null)
122 | 	#set -x
123 |     ${CURL_BASE_CMD}${1} | jq '.' > $2
124 | 	#set +x
125 |     endtime=`date +%s%3N`
126 |     let runtime=${endtime}-${starttime}
127 |     debug "[$FUNCNAME] [$(basename $2)] --> $runtime ms"
128 | }
129 | 
130 | # Node related information -- /system/cluster/node
131 | NODE_INFO_FILE=${WORKDIR}/${HOSTNAME}-node.json
132 | get_node_info()           {                           get_json_info "/system/cluster/node" $NODE_INFO_FILE; }
133 | get_node_id()             { debug "[$FUNCNAME] Executing"; jq -e -r '.node_id'             $NODE_INFO_FILE; }
134 | get_node_transport_addr() { debug "[$FUNCNAME] Executing"; jq -e -r '.transport_address'   $NODE_INFO_FILE; }
135 | get_node_is_master()      { debug "[$FUNCNAME] Executing"; jq -e -r '.is_master'           $NODE_INFO_FILE; }
136 | get_node_cluster()        { debug "[$FUNCNAME] Executing"; jq -e -r '.cluster_id'          $NODE_INFO_FILE; }
137 | get_node_type()           { debug "[$FUNCNAME] Executing"; jq -e -r '.type'                $NODE_INFO_FILE; }
138 | 
139 | 
140 | # Journal related information -- /system/journal
141 | JOURNAL_INFO_FILE=${WORKDIR}/${HOSTNAME}-journal.json
142 | get_system_journal_info()                {                           get_json_info "/system/journal"              $JOURNAL_INFO_FILE; }
143 | get_system_journal_events_read()         { debug "[$FUNCNAME] Executing"; jq -e -r '.read_events_per_second'      $JOURNAL_INFO_FILE; }
144 | get_system_journal_events_append()       { debug "[$FUNCNAME] Executing"; jq -e -r '.append_events_per_second'    $JOURNAL_INFO_FILE; }
145 | get_system_journal_size()                { debug "[$FUNCNAME] Executing"; jq -e -r '.journal_size'                $JOURNAL_INFO_FILE; }
146 | get_system_journal_num_segments()        { debug "[$FUNCNAME] Executing"; jq -e -r '.number_of_segments'          $JOURNAL_INFO_FILE; }
147 | get_system_journal_uncommitted_entries() { debug "[$FUNCNAME] Executing"; jq -e -r '.uncommitted_journal_entries' $JOURNAL_INFO_FILE; }
148 | 
149 | # System overview
150 | SYSTEM_INFO_FILE=${WORKDIR}/${HOSTNAME}-system.json
151 | get_system_system_info()  {                           get_json_info "/system"        $SYSTEM_INFO_FILE; }
152 | get_system_lb_status()    { debug "[$FUNCNAME] Executing"; jq -e -r '.lb_status'     $SYSTEM_INFO_FILE; }
153 | get_system_lifecycle()    { debug "[$FUNCNAME] Executing"; jq -e -r '.lifecycle'     $SYSTEM_INFO_FILE; }
154 | get_system_isprocessing() { debug "[$FUNCNAME] Executing"; jq -e -r '.is_processing' $SYSTEM_INFO_FILE; }
155 | get_system_tz()           { debug "[$FUNCNAME] Executing"; jq -e -r '.timezone'      $SYSTEM_INFO_FILE; }
156 | get_system_version()      { debug "[$FUNCNAME] Executing"; jq -e -r '.version'       $SYSTEM_INFO_FILE; }
157 | get_system_startedat()    { debug "[$FUNCNAME] Executing"; jq -e -r '.started_at'    $SYSTEM_INFO_FILE; }
158 | 
159 | # Cluster overview
160 | CLUSTER_INFO_FILE=${WORKDIR}/${HOSTNAME}-cluster.json
161 | get_cluster_info()               {                           get_json_info "/system/cluster/stats"    $CLUSTER_INFO_FILE; }
162 | get_cluster_stream_count()       { debug "[$FUNCNAME] Executing"; jq -e -r '.stream_count'            $CLUSTER_INFO_FILE; }
163 | get_cluster_stream_rules_count() { debug "[$FUNCNAME] Executing"; jq -e -r '.stream_rule_count'       $CLUSTER_INFO_FILE; }
164 | get_cluster_user_count()         { debug "[$FUNCNAME] Executing"; jq -e -r '.user_count'              $CLUSTER_INFO_FILE; }
165 | get_cluster_output_count()       { debug "[$FUNCNAME] Executing"; jq -e -r '.output_count'            $CLUSTER_INFO_FILE; }
166 | get_cluster_dashboard_count()    { debug "[$FUNCNAME] Executing"; jq -e -r '.dashboard_count'         $CLUSTER_INFO_FILE; }
167 | get_cluster_input_count()        { debug "[$FUNCNAME] Executing"; jq -e -r '.input_count'             $CLUSTER_INFO_FILE; }
168 | get_cluster_global_input_count() { debug "[$FUNCNAME] Executing"; jq -e -r '.global_input_count'      $CLUSTER_INFO_FILE; }
169 | get_cluster_extractor_count()    { debug "[$FUNCNAME] Executing"; jq -e -r '.extractor_count'         $CLUSTER_INFO_FILE; }
170 | get_cluster_contentpack_count()  { debug "[$FUNCNAME] Executing"; jq -e -r '.content_pack_count'      $CLUSTER_INFO_FILE; }
171 | get_cluster_alerts_count()       { debug "[$FUNCNAME] Executing"; jq -e -r '.alarm_stats.alert_count' $CLUSTER_INFO_FILE; }
172 | get_cluster_es_state()           { debug "[$FUNCNAME] Executing"; jq -e -r '.elasticsearch.status'    $CLUSTER_INFO_FILE; }
173 | 
174 | # Various ungrouped checks
175 | get_total_message_count() { debug "[$FUNCNAME] Executing"; ${CURL_BASE_CMD}/count/total       | jq -e -r .events         ; }
176 | get_node_throughput()     { debug "[$FUNCNAME] Executing"; ${CURL_BASE_CMD}/system/throughput | jq -e -r .throughput     ; }
177 | get_current_deflector()   { debug "[$FUNCNAME] Executing"; ${CURL_BASE_CMD}/system/deflector  | jq -e -r .current_target ; }
178 | 
179 | poll_data() {
180 | 
181 |     debug "[$FUNCNAME] [$(basename $NODE_INFO_FILE)] Getting node info"; get_node_info &
182 |     debug "[$FUNCNAME] [$(basename $JOURNAL_INFO_FILE)] Getting journal info"; get_system_journal_info &
183 |     debug "[$FUNCNAME] [$(basename $SYSTEM_INFO_FILE)] Getting system info"; get_system_system_info &
184 |     debug "[$FUNCNAME] [$(basename $CLUSTER_INFO_FILE)] Getting cluster info"; get_cluster_info &
185 | 
186 |     wait
187 | 
188 |     [[ -s $NODE_INFO_FILE ]] && `cat $JOURNAL_INFO_FILE |jq -e '.' >/dev/null`      || fail "[$FUNCNAME] FAIL. Could not retrieve JSON for node info"
189 |     [[ -s $JOURNAL_INFO_FILE ]] && `cat $NODE_INFO_FILE |jq -e '.' >/dev/null`      || fail "[$FUNCNAME] FAIL. Could not retrieve JSON for journal info"
190 |     [[ -s $SYSTEM_INFO_FILE ]] && `cat $SYSTEM_INFO_FILE |jq -e '.' >/dev/null`     || fail "[$FUNCNAME] FAIL. Could not retrieve JSON for system info"
191 |     [[ -s $CLUSTER_INFO_FILE ]] && `cat $CLUSTER_INFO_FILE |jq -e '.' >/dev/null`   || fail "[$FUNCNAME] FAIL. Could not retrieve JSON for cluster info"
192 | 
193 |     sync
194 | }
195 | 
196 | fail() { 
197 |     # PPID should be the zabbix poller process and $$ the shell process
198 |     echo -e "$(date '+%Y%m%d %H:%M:%S.%3N') {$PPID} [$$] $@" >> $LOG
199 | }
200 | 
201 | debug() { 
202 |     if [ "$DEBUG" == "1" ]; then
203 |         # PPID should be the zabbix poller process and $$ the shell process
204 |         echo -e "$(date '+%Y%m%d %H:%M:%S.%3N') {$PPID} [$$] $@" 
205 |     fi
206 | }
207 | 
208 | case $ATTR in
209 |     total_message_count)                       get_total_message_count                     ;;
210 |     node_throughput)                           get_node_throughput                         ;;
211 |     current_deflector)                         get_current_deflector                       ;;
212 | 
213 |     poll_data)                         exlock; poll_data                                   ;;
214 | 
215 |     node_id)                           shlock; get_node_id                                 ;;
216 |     node_transport)                    shlock; get_node_transport_addr                     ;;
217 |     node_is_master)                    shlock; get_node_is_master                          ;;
218 |     node_cluster)                      shlock; get_node_cluster                            ;;
219 |     node_type)                         shlock; get_node_type                               ;;
220 |     journal_events_read)               shlock; get_system_journal_events_read              ;;
221 |     journal_events_append)             shlock; get_system_journal_events_append            ;; 
222 |     journal_size)                      shlock; get_system_journal_size                     ;; 
223 |     journal_num_segments)              shlock; get_system_journal_num_segments             ;; 
224 |     journal_uncommitted_entries)       shlock; get_system_journal_uncommitted_entries      ;;
225 |     lb_status)                         shlock; get_system_lb_status                        ;;
226 |     es_cluster_health)                 shlock; get_cluster_es_state                        ;;
227 |     system_lifecycle)                  shlock; get_system_lifecycle                        ;;
228 |     system_isprocessing)               shlock; get_system_isprocessing                     ;;
229 |     system_tz)                         shlock; get_system_tz                               ;;
230 |     system_version)                    shlock; get_system_version                          ;;
231 |     system_startedat)                  shlock; get_system_startedat                        ;;
232 |     cluster_stream_count)              shlock; get_cluster_stream_count                    ;;
233 |     cluster_stream_rule_count)         shlock; get_cluster_stream_rules_count              ;;
234 |     cluster_user_count)                shlock; get_cluster_user_count                      ;;
235 |     cluster_output_count)              shlock; get_cluster_output_count                    ;;
236 |     cluster_dashboard_count)           shlock; get_cluster_dashboard_count                 ;;
237 |     cluster_input_count)               shlock; get_cluster_input_count                     ;;
238 |     cluster_global_input_count)        shlock; get_cluster_global_input_count              ;;
239 |     cluster_extractor_count)           shlock; get_cluster_extractor_count                 ;;
240 |     cluster_contentpack_count)         shlock; get_cluster_contentpack_count               ;;
241 |     cluster_alerts_count)              shlock; get_cluster_alerts_count                    ;;
242 |     
243 |     *)  fail "[Attribute FAIL] Unknown attribute to monitor." && echo "Unknown attribute to monitor"                        ;;
244 | esac
245 | 
246 | 


--------------------------------------------------------------------------------
/template/graylog2_server_template.xml:
--------------------------------------------------------------------------------
   1 | <?xml version="1.0" encoding="UTF-8"?>
   2 | <zabbix_export>
   3 |     <version>2.0</version>
   4 |     <date>2015-12-28T06:02:39Z</date>
   5 |     <groups>
   6 |         <group>
   7 |             <name>Templates</name>
   8 |         </group>
   9 |     </groups>
  10 |     <templates>
  11 |         <template>
  12 |             <template>Template graylog2 server</template>
  13 |             <name>Template graylog2 server</name>
  14 |             <description/>
  15 |             <groups>
  16 |                 <group>
  17 |                     <name>Templates</name>
  18 |                 </group>
  19 |             </groups>
  20 |             <applications>
  21 |                 <application>
  22 |                     <name>Graylog</name>
  23 |                 </application>
  24 |             </applications>
  25 |             <items>
  26 |                 <item>
  27 |                     <name>API port status</name>
  28 |                     <type>3</type>
  29 |                     <snmp_community/>
  30 |                     <multiplier>0</multiplier>
  31 |                     <snmp_oid/>
  32 |                     <key>net.tcp.service[http,{HOST.CONN},12900]</key>
  33 |                     <delay>30</delay>
  34 |                     <history>90</history>
  35 |                     <trends>365</trends>
  36 |                     <status>0</status>
  37 |                     <value_type>3</value_type>
  38 |                     <allowed_hosts/>
  39 |                     <units/>
  40 |                     <delta>0</delta>
  41 |                     <snmpv3_contextname/>
  42 |                     <snmpv3_securityname/>
  43 |                     <snmpv3_securitylevel>0</snmpv3_securitylevel>
  44 |                     <snmpv3_authprotocol>0</snmpv3_authprotocol>
  45 |                     <snmpv3_authpassphrase/>
  46 |                     <snmpv3_privprotocol>0</snmpv3_privprotocol>
  47 |                     <snmpv3_privpassphrase/>
  48 |                     <formula>1</formula>
  49 |                     <delay_flex/>
  50 |                     <params/>
  51 |                     <ipmi_sensor/>
  52 |                     <data_type>0</data_type>
  53 |                     <authtype>0</authtype>
  54 |                     <username/>
  55 |                     <password/>
  56 |                     <publickey/>
  57 |                     <privatekey/>
  58 |                     <port/>
  59 |                     <description/>
  60 |                     <inventory_link>0</inventory_link>
  61 |                     <applications>
  62 |                         <application>
  63 |                             <name>Graylog</name>
  64 |                         </application>
  65 |                     </applications>
  66 |                     <valuemap>
  67 |                         <name>Service state</name>
  68 |                     </valuemap>
  69 |                     <logtimefmt/>
  70 |                 </item>
  71 |                 <item>
  72 |                     <name>Cluster alerts count</name>
  73 |                     <type>10</type>
  74 |                     <snmp_community/>
  75 |                     <multiplier>0</multiplier>
  76 |                     <snmp_oid/>
  77 |                     <key>check_graylog_node[&quot;-H&quot;,{HOST.CONN},&quot;-a&quot;,&quot;cluster_alerts_count&quot;]</key>
  78 |                     <delay>30</delay>
  79 |                     <history>90</history>
  80 |                     <trends>365</trends>
  81 |                     <status>0</status>
  82 |                     <value_type>3</value_type>
  83 |                     <allowed_hosts/>
  84 |                     <units/>
  85 |                     <delta>0</delta>
  86 |                     <snmpv3_contextname/>
  87 |                     <snmpv3_securityname/>
  88 |                     <snmpv3_securitylevel>0</snmpv3_securitylevel>
  89 |                     <snmpv3_authprotocol>0</snmpv3_authprotocol>
  90 |                     <snmpv3_authpassphrase/>
  91 |                     <snmpv3_privprotocol>0</snmpv3_privprotocol>
  92 |                     <snmpv3_privpassphrase/>
  93 |                     <formula>1</formula>
  94 |                     <delay_flex/>
  95 |                     <params/>
  96 |                     <ipmi_sensor/>
  97 |                     <data_type>0</data_type>
  98 |                     <authtype>0</authtype>
  99 |                     <username/>
 100 |                     <password/>
 101 |                     <publickey/>
 102 |                     <privatekey/>
 103 |                     <port/>
 104 |                     <description/>
 105 |                     <inventory_link>0</inventory_link>
 106 |                     <applications>
 107 |                         <application>
 108 |                             <name>Graylog</name>
 109 |                         </application>
 110 |                     </applications>
 111 |                     <valuemap/>
 112 |                     <logtimefmt/>
 113 |                 </item>
 114 |                 <item>
 115 |                     <name>Cluster content packs count</name>
 116 |                     <type>10</type>
 117 |                     <snmp_community/>
 118 |                     <multiplier>0</multiplier>
 119 |                     <snmp_oid/>
 120 |                     <key>check_graylog_node[&quot;-H&quot;,{HOST.CONN},&quot;-a&quot;,&quot;cluster_contentpack_count&quot;]</key>
 121 |                     <delay>60</delay>
 122 |                     <history>90</history>
 123 |                     <trends>365</trends>
 124 |                     <status>0</status>
 125 |                     <value_type>3</value_type>
 126 |                     <allowed_hosts/>
 127 |                     <units/>
 128 |                     <delta>0</delta>
 129 |                     <snmpv3_contextname/>
 130 |                     <snmpv3_securityname/>
 131 |                     <snmpv3_securitylevel>0</snmpv3_securitylevel>
 132 |                     <snmpv3_authprotocol>0</snmpv3_authprotocol>
 133 |                     <snmpv3_authpassphrase/>
 134 |                     <snmpv3_privprotocol>0</snmpv3_privprotocol>
 135 |                     <snmpv3_privpassphrase/>
 136 |                     <formula>1</formula>
 137 |                     <delay_flex/>
 138 |                     <params/>
 139 |                     <ipmi_sensor/>
 140 |                     <data_type>0</data_type>
 141 |                     <authtype>0</authtype>
 142 |                     <username/>
 143 |                     <password/>
 144 |                     <publickey/>
 145 |                     <privatekey/>
 146 |                     <port/>
 147 |                     <description/>
 148 |                     <inventory_link>0</inventory_link>
 149 |                     <applications>
 150 |                         <application>
 151 |                             <name>Graylog</name>
 152 |                         </application>
 153 |                     </applications>
 154 |                     <valuemap/>
 155 |                     <logtimefmt/>
 156 |                 </item>
 157 |                 <item>
 158 |                     <name>Cluster extractor count</name>
 159 |                     <type>10</type>
 160 |                     <snmp_community/>
 161 |                     <multiplier>0</multiplier>
 162 |                     <snmp_oid/>
 163 |                     <key>check_graylog_node[&quot;-H&quot;,{HOST.CONN},&quot;-a&quot;,&quot;cluster_extractor_count&quot;]</key>
 164 |                     <delay>60</delay>
 165 |                     <history>90</history>
 166 |                     <trends>365</trends>
 167 |                     <status>0</status>
 168 |                     <value_type>3</value_type>
 169 |                     <allowed_hosts/>
 170 |                     <units/>
 171 |                     <delta>0</delta>
 172 |                     <snmpv3_contextname/>
 173 |                     <snmpv3_securityname/>
 174 |                     <snmpv3_securitylevel>0</snmpv3_securitylevel>
 175 |                     <snmpv3_authprotocol>0</snmpv3_authprotocol>
 176 |                     <snmpv3_authpassphrase/>
 177 |                     <snmpv3_privprotocol>0</snmpv3_privprotocol>
 178 |                     <snmpv3_privpassphrase/>
 179 |                     <formula>1</formula>
 180 |                     <delay_flex/>
 181 |                     <params/>
 182 |                     <ipmi_sensor/>
 183 |                     <data_type>0</data_type>
 184 |                     <authtype>0</authtype>
 185 |                     <username/>
 186 |                     <password/>
 187 |                     <publickey/>
 188 |                     <privatekey/>
 189 |                     <port/>
 190 |                     <description/>
 191 |                     <inventory_link>0</inventory_link>
 192 |                     <applications>
 193 |                         <application>
 194 |                             <name>Graylog</name>
 195 |                         </application>
 196 |                     </applications>
 197 |                     <valuemap/>
 198 |                     <logtimefmt/>
 199 |                 </item>
 200 |                 <item>
 201 |                     <name>Cluster global inputs count</name>
 202 |                     <type>10</type>
 203 |                     <snmp_community/>
 204 |                     <multiplier>0</multiplier>
 205 |                     <snmp_oid/>
 206 |                     <key>check_graylog_node[&quot;-H&quot;,{HOST.CONN},&quot;-a&quot;,&quot;cluster_global_input_count&quot;]</key>
 207 |                     <delay>60</delay>
 208 |                     <history>90</history>
 209 |                     <trends>365</trends>
 210 |                     <status>0</status>
 211 |                     <value_type>3</value_type>
 212 |                     <allowed_hosts/>
 213 |                     <units/>
 214 |                     <delta>0</delta>
 215 |                     <snmpv3_contextname/>
 216 |                     <snmpv3_securityname/>
 217 |                     <snmpv3_securitylevel>0</snmpv3_securitylevel>
 218 |                     <snmpv3_authprotocol>0</snmpv3_authprotocol>
 219 |                     <snmpv3_authpassphrase/>
 220 |                     <snmpv3_privprotocol>0</snmpv3_privprotocol>
 221 |                     <snmpv3_privpassphrase/>
 222 |                     <formula>1</formula>
 223 |                     <delay_flex/>
 224 |                     <params/>
 225 |                     <ipmi_sensor/>
 226 |                     <data_type>0</data_type>
 227 |                     <authtype>0</authtype>
 228 |                     <username/>
 229 |                     <password/>
 230 |                     <publickey/>
 231 |                     <privatekey/>
 232 |                     <port/>
 233 |                     <description/>
 234 |                     <inventory_link>0</inventory_link>
 235 |                     <applications>
 236 |                         <application>
 237 |                             <name>Graylog</name>
 238 |                         </application>
 239 |                     </applications>
 240 |                     <valuemap/>
 241 |                     <logtimefmt/>
 242 |                 </item>
 243 |                 <item>
 244 |                     <name>Cluster id</name>
 245 |                     <type>10</type>
 246 |                     <snmp_community/>
 247 |                     <multiplier>0</multiplier>
 248 |                     <snmp_oid/>
 249 |                     <key>check_graylog_node[&quot;-H&quot;,{HOST.CONN},&quot;-a&quot;,&quot;node_cluster&quot;]</key>
 250 |                     <delay>300</delay>
 251 |                     <history>90</history>
 252 |                     <trends>365</trends>
 253 |                     <status>0</status>
 254 |                     <value_type>4</value_type>
 255 |                     <allowed_hosts/>
 256 |                     <units/>
 257 |                     <delta>0</delta>
 258 |                     <snmpv3_contextname/>
 259 |                     <snmpv3_securityname/>
 260 |                     <snmpv3_securitylevel>0</snmpv3_securitylevel>
 261 |                     <snmpv3_authprotocol>0</snmpv3_authprotocol>
 262 |                     <snmpv3_authpassphrase/>
 263 |                     <snmpv3_privprotocol>0</snmpv3_privprotocol>
 264 |                     <snmpv3_privpassphrase/>
 265 |                     <formula>1</formula>
 266 |                     <delay_flex/>
 267 |                     <params/>
 268 |                     <ipmi_sensor/>
 269 |                     <data_type>0</data_type>
 270 |                     <authtype>0</authtype>
 271 |                     <username/>
 272 |                     <password/>
 273 |                     <publickey/>
 274 |                     <privatekey/>
 275 |                     <port/>
 276 |                     <description/>
 277 |                     <inventory_link>0</inventory_link>
 278 |                     <applications>
 279 |                         <application>
 280 |                             <name>Graylog</name>
 281 |                         </application>
 282 |                     </applications>
 283 |                     <valuemap/>
 284 |                     <logtimefmt/>
 285 |                 </item>
 286 |                 <item>
 287 |                     <name>Cluster inputs count</name>
 288 |                     <type>10</type>
 289 |                     <snmp_community/>
 290 |                     <multiplier>0</multiplier>
 291 |                     <snmp_oid/>
 292 |                     <key>check_graylog_node[&quot;-H&quot;,{HOST.CONN},&quot;-a&quot;,&quot;cluster_input_count&quot;]</key>
 293 |                     <delay>30</delay>
 294 |                     <history>90</history>
 295 |                     <trends>365</trends>
 296 |                     <status>0</status>
 297 |                     <value_type>3</value_type>
 298 |                     <allowed_hosts/>
 299 |                     <units/>
 300 |                     <delta>0</delta>
 301 |                     <snmpv3_contextname/>
 302 |                     <snmpv3_securityname/>
 303 |                     <snmpv3_securitylevel>0</snmpv3_securitylevel>
 304 |                     <snmpv3_authprotocol>0</snmpv3_authprotocol>
 305 |                     <snmpv3_authpassphrase/>
 306 |                     <snmpv3_privprotocol>0</snmpv3_privprotocol>
 307 |                     <snmpv3_privpassphrase/>
 308 |                     <formula>1</formula>
 309 |                     <delay_flex/>
 310 |                     <params/>
 311 |                     <ipmi_sensor/>
 312 |                     <data_type>0</data_type>
 313 |                     <authtype>0</authtype>
 314 |                     <username/>
 315 |                     <password/>
 316 |                     <publickey/>
 317 |                     <privatekey/>
 318 |                     <port/>
 319 |                     <description/>
 320 |                     <inventory_link>0</inventory_link>
 321 |                     <applications>
 322 |                         <application>
 323 |                             <name>Graylog</name>
 324 |                         </application>
 325 |                     </applications>
 326 |                     <valuemap/>
 327 |                     <logtimefmt/>
 328 |                 </item>
 329 |                 <item>
 330 |                     <name>Cluster outputs count</name>
 331 |                     <type>10</type>
 332 |                     <snmp_community/>
 333 |                     <multiplier>0</multiplier>
 334 |                     <snmp_oid/>
 335 |                     <key>check_graylog_node[&quot;-H&quot;,{HOST.CONN},&quot;-a&quot;,&quot;cluster_output_count&quot;]</key>
 336 |                     <delay>60</delay>
 337 |                     <history>90</history>
 338 |                     <trends>365</trends>
 339 |                     <status>0</status>
 340 |                     <value_type>3</value_type>
 341 |                     <allowed_hosts/>
 342 |                     <units/>
 343 |                     <delta>0</delta>
 344 |                     <snmpv3_contextname/>
 345 |                     <snmpv3_securityname/>
 346 |                     <snmpv3_securitylevel>0</snmpv3_securitylevel>
 347 |                     <snmpv3_authprotocol>0</snmpv3_authprotocol>
 348 |                     <snmpv3_authpassphrase/>
 349 |                     <snmpv3_privprotocol>0</snmpv3_privprotocol>
 350 |                     <snmpv3_privpassphrase/>
 351 |                     <formula>1</formula>
 352 |                     <delay_flex/>
 353 |                     <params/>
 354 |                     <ipmi_sensor/>
 355 |                     <data_type>0</data_type>
 356 |                     <authtype>0</authtype>
 357 |                     <username/>
 358 |                     <password/>
 359 |                     <publickey/>
 360 |                     <privatekey/>
 361 |                     <port/>
 362 |                     <description/>
 363 |                     <inventory_link>0</inventory_link>
 364 |                     <applications>
 365 |                         <application>
 366 |                             <name>Graylog</name>
 367 |                         </application>
 368 |                     </applications>
 369 |                     <valuemap/>
 370 |                     <logtimefmt/>
 371 |                 </item>
 372 |                 <item>
 373 |                     <name>Cluster streams count</name>
 374 |                     <type>10</type>
 375 |                     <snmp_community/>
 376 |                     <multiplier>0</multiplier>
 377 |                     <snmp_oid/>
 378 |                     <key>check_graylog_node[&quot;-H&quot;,{HOST.CONN},&quot;-a&quot;,&quot;cluster_stream_count&quot;]</key>
 379 |                     <delay>60</delay>
 380 |                     <history>90</history>
 381 |                     <trends>365</trends>
 382 |                     <status>0</status>
 383 |                     <value_type>3</value_type>
 384 |                     <allowed_hosts/>
 385 |                     <units/>
 386 |                     <delta>0</delta>
 387 |                     <snmpv3_contextname/>
 388 |                     <snmpv3_securityname/>
 389 |                     <snmpv3_securitylevel>0</snmpv3_securitylevel>
 390 |                     <snmpv3_authprotocol>0</snmpv3_authprotocol>
 391 |                     <snmpv3_authpassphrase/>
 392 |                     <snmpv3_privprotocol>0</snmpv3_privprotocol>
 393 |                     <snmpv3_privpassphrase/>
 394 |                     <formula>1</formula>
 395 |                     <delay_flex/>
 396 |                     <params/>
 397 |                     <ipmi_sensor/>
 398 |                     <data_type>0</data_type>
 399 |                     <authtype>0</authtype>
 400 |                     <username/>
 401 |                     <password/>
 402 |                     <publickey/>
 403 |                     <privatekey/>
 404 |                     <port/>
 405 |                     <description/>
 406 |                     <inventory_link>0</inventory_link>
 407 |                     <applications>
 408 |                         <application>
 409 |                             <name>Graylog</name>
 410 |                         </application>
 411 |                     </applications>
 412 |                     <valuemap/>
 413 |                     <logtimefmt/>
 414 |                 </item>
 415 |                 <item>
 416 |                     <name>Cluster streams rules count</name>
 417 |                     <type>10</type>
 418 |                     <snmp_community/>
 419 |                     <multiplier>0</multiplier>
 420 |                     <snmp_oid/>
 421 |                     <key>check_graylog_node[&quot;-H&quot;,{HOST.CONN},&quot;-a&quot;,&quot;cluster_stream_rule_count&quot;]</key>
 422 |                     <delay>30</delay>
 423 |                     <history>90</history>
 424 |                     <trends>365</trends>
 425 |                     <status>0</status>
 426 |                     <value_type>3</value_type>
 427 |                     <allowed_hosts/>
 428 |                     <units/>
 429 |                     <delta>0</delta>
 430 |                     <snmpv3_contextname/>
 431 |                     <snmpv3_securityname/>
 432 |                     <snmpv3_securitylevel>0</snmpv3_securitylevel>
 433 |                     <snmpv3_authprotocol>0</snmpv3_authprotocol>
 434 |                     <snmpv3_authpassphrase/>
 435 |                     <snmpv3_privprotocol>0</snmpv3_privprotocol>
 436 |                     <snmpv3_privpassphrase/>
 437 |                     <formula>1</formula>
 438 |                     <delay_flex/>
 439 |                     <params/>
 440 |                     <ipmi_sensor/>
 441 |                     <data_type>0</data_type>
 442 |                     <authtype>0</authtype>
 443 |                     <username/>
 444 |                     <password/>
 445 |                     <publickey/>
 446 |                     <privatekey/>
 447 |                     <port/>
 448 |                     <description/>
 449 |                     <inventory_link>0</inventory_link>
 450 |                     <applications>
 451 |                         <application>
 452 |                             <name>Graylog</name>
 453 |                         </application>
 454 |                     </applications>
 455 |                     <valuemap/>
 456 |                     <logtimefmt/>
 457 |                 </item>
 458 |                 <item>
 459 |                     <name>Cluster users count</name>
 460 |                     <type>10</type>
 461 |                     <snmp_community/>
 462 |                     <multiplier>0</multiplier>
 463 |                     <snmp_oid/>
 464 |                     <key>check_graylog_node[&quot;-H&quot;,{HOST.CONN},&quot;-a&quot;,&quot;cluster_user_count&quot;]</key>
 465 |                     <delay>60</delay>
 466 |                     <history>90</history>
 467 |                     <trends>365</trends>
 468 |                     <status>0</status>
 469 |                     <value_type>3</value_type>
 470 |                     <allowed_hosts/>
 471 |                     <units/>
 472 |                     <delta>0</delta>
 473 |                     <snmpv3_contextname/>
 474 |                     <snmpv3_securityname/>
 475 |                     <snmpv3_securitylevel>0</snmpv3_securitylevel>
 476 |                     <snmpv3_authprotocol>0</snmpv3_authprotocol>
 477 |                     <snmpv3_authpassphrase/>
 478 |                     <snmpv3_privprotocol>0</snmpv3_privprotocol>
 479 |                     <snmpv3_privpassphrase/>
 480 |                     <formula>1</formula>
 481 |                     <delay_flex/>
 482 |                     <params/>
 483 |                     <ipmi_sensor/>
 484 |                     <data_type>0</data_type>
 485 |                     <authtype>0</authtype>
 486 |                     <username/>
 487 |                     <password/>
 488 |                     <publickey/>
 489 |                     <privatekey/>
 490 |                     <port/>
 491 |                     <description/>
 492 |                     <inventory_link>0</inventory_link>
 493 |                     <applications>
 494 |                         <application>
 495 |                             <name>Graylog</name>
 496 |                         </application>
 497 |                     </applications>
 498 |                     <valuemap/>
 499 |                     <logtimefmt/>
 500 |                 </item>
 501 |                 <item>
 502 |                     <name>Current deflector</name>
 503 |                     <type>10</type>
 504 |                     <snmp_community/>
 505 |                     <multiplier>0</multiplier>
 506 |                     <snmp_oid/>
 507 |                     <key>check_graylog_node[&quot;-H&quot;,{HOST.CONN},&quot;-a&quot;,&quot;current_deflector&quot;]</key>
 508 |                     <delay>60</delay>
 509 |                     <history>90</history>
 510 |                     <trends>365</trends>
 511 |                     <status>1</status>
 512 |                     <value_type>4</value_type>
 513 |                     <allowed_hosts/>
 514 |                     <units/>
 515 |                     <delta>0</delta>
 516 |                     <snmpv3_contextname/>
 517 |                     <snmpv3_securityname/>
 518 |                     <snmpv3_securitylevel>0</snmpv3_securitylevel>
 519 |                     <snmpv3_authprotocol>0</snmpv3_authprotocol>
 520 |                     <snmpv3_authpassphrase/>
 521 |                     <snmpv3_privprotocol>0</snmpv3_privprotocol>
 522 |                     <snmpv3_privpassphrase/>
 523 |                     <formula>1</formula>
 524 |                     <delay_flex/>
 525 |                     <params/>
 526 |                     <ipmi_sensor/>
 527 |                     <data_type>0</data_type>
 528 |                     <authtype>0</authtype>
 529 |                     <username/>
 530 |                     <password/>
 531 |                     <publickey/>
 532 |                     <privatekey/>
 533 |                     <port/>
 534 |                     <description/>
 535 |                     <inventory_link>0</inventory_link>
 536 |                     <applications>
 537 |                         <application>
 538 |                             <name>Graylog</name>
 539 |                         </application>
 540 |                     </applications>
 541 |                     <valuemap/>
 542 |                     <logtimefmt/>
 543 |                 </item>
 544 |                 <item>
 545 |                     <name>ES cluster health</name>
 546 |                     <type>10</type>
 547 |                     <snmp_community/>
 548 |                     <multiplier>0</multiplier>
 549 |                     <snmp_oid/>
 550 |                     <key>check_graylog_node[&quot;-H&quot;,{HOST.CONN},&quot;-a&quot;,&quot;es_cluster_health&quot;]</key>
 551 |                     <delay>30</delay>
 552 |                     <history>90</history>
 553 |                     <trends>365</trends>
 554 |                     <status>0</status>
 555 |                     <value_type>4</value_type>
 556 |                     <allowed_hosts/>
 557 |                     <units/>
 558 |                     <delta>0</delta>
 559 |                     <snmpv3_contextname/>
 560 |                     <snmpv3_securityname/>
 561 |                     <snmpv3_securitylevel>0</snmpv3_securitylevel>
 562 |                     <snmpv3_authprotocol>0</snmpv3_authprotocol>
 563 |                     <snmpv3_authpassphrase/>
 564 |                     <snmpv3_privprotocol>0</snmpv3_privprotocol>
 565 |                     <snmpv3_privpassphrase/>
 566 |                     <formula>1</formula>
 567 |                     <delay_flex/>
 568 |                     <params/>
 569 |                     <ipmi_sensor/>
 570 |                     <data_type>0</data_type>
 571 |                     <authtype>0</authtype>
 572 |                     <username/>
 573 |                     <password/>
 574 |                     <publickey/>
 575 |                     <privatekey/>
 576 |                     <port/>
 577 |                     <description/>
 578 |                     <inventory_link>0</inventory_link>
 579 |                     <applications>
 580 |                         <application>
 581 |                             <name>Graylog</name>
 582 |                         </application>
 583 |                     </applications>
 584 |                     <valuemap/>
 585 |                     <logtimefmt/>
 586 |                 </item>
 587 |                 <item>
 588 |                     <name>Is master</name>
 589 |                     <type>10</type>
 590 |                     <snmp_community/>
 591 |                     <multiplier>0</multiplier>
 592 |                     <snmp_oid/>
 593 |                     <key>check_graylog_node[&quot;-H&quot;,{HOST.CONN},&quot;-a&quot;,&quot;node_is_master&quot;]</key>
 594 |                     <delay>30</delay>
 595 |                     <history>90</history>
 596 |                     <trends>365</trends>
 597 |                     <status>0</status>
 598 |                     <value_type>4</value_type>
 599 |                     <allowed_hosts/>
 600 |                     <units/>
 601 |                     <delta>0</delta>
 602 |                     <snmpv3_contextname/>
 603 |                     <snmpv3_securityname/>
 604 |                     <snmpv3_securitylevel>0</snmpv3_securitylevel>
 605 |                     <snmpv3_authprotocol>0</snmpv3_authprotocol>
 606 |                     <snmpv3_authpassphrase/>
 607 |                     <snmpv3_privprotocol>0</snmpv3_privprotocol>
 608 |                     <snmpv3_privpassphrase/>
 609 |                     <formula>1</formula>
 610 |                     <delay_flex/>
 611 |                     <params/>
 612 |                     <ipmi_sensor/>
 613 |                     <data_type>0</data_type>
 614 |                     <authtype>0</authtype>
 615 |                     <username/>
 616 |                     <password/>
 617 |                     <publickey/>
 618 |                     <privatekey/>
 619 |                     <port/>
 620 |                     <description/>
 621 |                     <inventory_link>0</inventory_link>
 622 |                     <applications>
 623 |                         <application>
 624 |                             <name>Graylog</name>
 625 |                         </application>
 626 |                     </applications>
 627 |                     <valuemap/>
 628 |                     <logtimefmt/>
 629 |                 </item>
 630 |                 <item>
 631 |                     <name>Is processing</name>
 632 |                     <type>10</type>
 633 |                     <snmp_community/>
 634 |                     <multiplier>0</multiplier>
 635 |                     <snmp_oid/>
 636 |                     <key>check_graylog_node[&quot;-H&quot;,{HOST.CONN},&quot;-a&quot;,&quot;system_isprocessing&quot;]</key>
 637 |                     <delay>30</delay>
 638 |                     <history>90</history>
 639 |                     <trends>365</trends>
 640 |                     <status>0</status>
 641 |                     <value_type>4</value_type>
 642 |                     <allowed_hosts/>
 643 |                     <units/>
 644 |                     <delta>0</delta>
 645 |                     <snmpv3_contextname/>
 646 |                     <snmpv3_securityname/>
 647 |                     <snmpv3_securitylevel>0</snmpv3_securitylevel>
 648 |                     <snmpv3_authprotocol>0</snmpv3_authprotocol>
 649 |                     <snmpv3_authpassphrase/>
 650 |                     <snmpv3_privprotocol>0</snmpv3_privprotocol>
 651 |                     <snmpv3_privpassphrase/>
 652 |                     <formula>1</formula>
 653 |                     <delay_flex/>
 654 |                     <params/>
 655 |                     <ipmi_sensor/>
 656 |                     <data_type>0</data_type>
 657 |                     <authtype>0</authtype>
 658 |                     <username/>
 659 |                     <password/>
 660 |                     <publickey/>
 661 |                     <privatekey/>
 662 |                     <port/>
 663 |                     <description/>
 664 |                     <inventory_link>0</inventory_link>
 665 |                     <applications>
 666 |                         <application>
 667 |                             <name>Graylog</name>
 668 |                         </application>
 669 |                     </applications>
 670 |                     <valuemap/>
 671 |                     <logtimefmt/>
 672 |                 </item>
 673 |                 <item>
 674 |                     <name>Journal events append</name>
 675 |                     <type>10</type>
 676 |                     <snmp_community/>
 677 |                     <multiplier>0</multiplier>
 678 |                     <snmp_oid/>
 679 |                     <key>check_graylog_node[&quot;-H&quot;,{HOST.CONN},&quot;-a&quot;,&quot;journal_events_append&quot;]</key>
 680 |                     <delay>30</delay>
 681 |                     <history>90</history>
 682 |                     <trends>365</trends>
 683 |                     <status>0</status>
 684 |                     <value_type>3</value_type>
 685 |                     <allowed_hosts/>
 686 |                     <units>events/s</units>
 687 |                     <delta>0</delta>
 688 |                     <snmpv3_contextname/>
 689 |                     <snmpv3_securityname/>
 690 |                     <snmpv3_securitylevel>0</snmpv3_securitylevel>
 691 |                     <snmpv3_authprotocol>0</snmpv3_authprotocol>
 692 |                     <snmpv3_authpassphrase/>
 693 |                     <snmpv3_privprotocol>0</snmpv3_privprotocol>
 694 |                     <snmpv3_privpassphrase/>
 695 |                     <formula>1</formula>
 696 |                     <delay_flex/>
 697 |                     <params/>
 698 |                     <ipmi_sensor/>
 699 |                     <data_type>0</data_type>
 700 |                     <authtype>0</authtype>
 701 |                     <username/>
 702 |                     <password/>
 703 |                     <publickey/>
 704 |                     <privatekey/>
 705 |                     <port/>
 706 |                     <description/>
 707 |                     <inventory_link>0</inventory_link>
 708 |                     <applications>
 709 |                         <application>
 710 |                             <name>Graylog</name>
 711 |                         </application>
 712 |                     </applications>
 713 |                     <valuemap/>
 714 |                     <logtimefmt/>
 715 |                 </item>
 716 |                 <item>
 717 |                     <name>Journal events read</name>
 718 |                     <type>10</type>
 719 |                     <snmp_community/>
 720 |                     <multiplier>0</multiplier>
 721 |                     <snmp_oid/>
 722 |                     <key>check_graylog_node[&quot;-H&quot;,{HOST.CONN},&quot;-a&quot;,&quot;journal_events_read&quot;]</key>
 723 |                     <delay>25</delay>
 724 |                     <history>90</history>
 725 |                     <trends>365</trends>
 726 |                     <status>0</status>
 727 |                     <value_type>3</value_type>
 728 |                     <allowed_hosts/>
 729 |                     <units>events/s</units>
 730 |                     <delta>0</delta>
 731 |                     <snmpv3_contextname/>
 732 |                     <snmpv3_securityname/>
 733 |                     <snmpv3_securitylevel>0</snmpv3_securitylevel>
 734 |                     <snmpv3_authprotocol>0</snmpv3_authprotocol>
 735 |                     <snmpv3_authpassphrase/>
 736 |                     <snmpv3_privprotocol>0</snmpv3_privprotocol>
 737 |                     <snmpv3_privpassphrase/>
 738 |                     <formula>1</formula>
 739 |                     <delay_flex/>
 740 |                     <params/>
 741 |                     <ipmi_sensor/>
 742 |                     <data_type>0</data_type>
 743 |                     <authtype>0</authtype>
 744 |                     <username/>
 745 |                     <password/>
 746 |                     <publickey/>
 747 |                     <privatekey/>
 748 |                     <port/>
 749 |                     <description/>
 750 |                     <inventory_link>0</inventory_link>
 751 |                     <applications>
 752 |                         <application>
 753 |                             <name>Graylog</name>
 754 |                         </application>
 755 |                     </applications>
 756 |                     <valuemap/>
 757 |                     <logtimefmt/>
 758 |                 </item>
 759 |                 <item>
 760 |                     <name>Journal number of segments</name>
 761 |                     <type>10</type>
 762 |                     <snmp_community/>
 763 |                     <multiplier>0</multiplier>
 764 |                     <snmp_oid/>
 765 |                     <key>check_graylog_node[&quot;-H&quot;,{HOST.CONN},&quot;-a&quot;,&quot;journal_num_segments&quot;]</key>
 766 |                     <delay>30</delay>
 767 |                     <history>90</history>
 768 |                     <trends>365</trends>
 769 |                     <status>0</status>
 770 |                     <value_type>3</value_type>
 771 |                     <allowed_hosts/>
 772 |                     <units/>
 773 |                     <delta>0</delta>
 774 |                     <snmpv3_contextname/>
 775 |                     <snmpv3_securityname/>
 776 |                     <snmpv3_securitylevel>0</snmpv3_securitylevel>
 777 |                     <snmpv3_authprotocol>0</snmpv3_authprotocol>
 778 |                     <snmpv3_authpassphrase/>
 779 |                     <snmpv3_privprotocol>0</snmpv3_privprotocol>
 780 |                     <snmpv3_privpassphrase/>
 781 |                     <formula>1</formula>
 782 |                     <delay_flex/>
 783 |                     <params/>
 784 |                     <ipmi_sensor/>
 785 |                     <data_type>0</data_type>
 786 |                     <authtype>0</authtype>
 787 |                     <username/>
 788 |                     <password/>
 789 |                     <publickey/>
 790 |                     <privatekey/>
 791 |                     <port/>
 792 |                     <description/>
 793 |                     <inventory_link>0</inventory_link>
 794 |                     <applications>
 795 |                         <application>
 796 |                             <name>Graylog</name>
 797 |                         </application>
 798 |                     </applications>
 799 |                     <valuemap/>
 800 |                     <logtimefmt/>
 801 |                 </item>
 802 |                 <item>
 803 |                     <name>Journal size</name>
 804 |                     <type>10</type>
 805 |                     <snmp_community/>
 806 |                     <multiplier>0</multiplier>
 807 |                     <snmp_oid/>
 808 |                     <key>check_graylog_node[&quot;-H&quot;,{HOST.CONN},&quot;-a&quot;,&quot;journal_size&quot;]</key>
 809 |                     <delay>30</delay>
 810 |                     <history>90</history>
 811 |                     <trends>365</trends>
 812 |                     <status>0</status>
 813 |                     <value_type>3</value_type>
 814 |                     <allowed_hosts/>
 815 |                     <units/>
 816 |                     <delta>0</delta>
 817 |                     <snmpv3_contextname/>
 818 |                     <snmpv3_securityname/>
 819 |                     <snmpv3_securitylevel>0</snmpv3_securitylevel>
 820 |                     <snmpv3_authprotocol>0</snmpv3_authprotocol>
 821 |                     <snmpv3_authpassphrase/>
 822 |                     <snmpv3_privprotocol>0</snmpv3_privprotocol>
 823 |                     <snmpv3_privpassphrase/>
 824 |                     <formula>1</formula>
 825 |                     <delay_flex/>
 826 |                     <params/>
 827 |                     <ipmi_sensor/>
 828 |                     <data_type>0</data_type>
 829 |                     <authtype>0</authtype>
 830 |                     <username/>
 831 |                     <password/>
 832 |                     <publickey/>
 833 |                     <privatekey/>
 834 |                     <port/>
 835 |                     <description/>
 836 |                     <inventory_link>0</inventory_link>
 837 |                     <applications>
 838 |                         <application>
 839 |                             <name>Graylog</name>
 840 |                         </application>
 841 |                     </applications>
 842 |                     <valuemap/>
 843 |                     <logtimefmt/>
 844 |                 </item>
 845 |                 <item>
 846 |                     <name>Journal uncommitted entries</name>
 847 |                     <type>10</type>
 848 |                     <snmp_community/>
 849 |                     <multiplier>0</multiplier>
 850 |                     <snmp_oid/>
 851 |                     <key>check_graylog_node[&quot;-H&quot;,{HOST.CONN},&quot;-a&quot;,&quot;journal_uncommitted_entries&quot;]</key>
 852 |                     <delay>30</delay>
 853 |                     <history>90</history>
 854 |                     <trends>365</trends>
 855 |                     <status>0</status>
 856 |                     <value_type>3</value_type>
 857 |                     <allowed_hosts/>
 858 |                     <units>entries</units>
 859 |                     <delta>0</delta>
 860 |                     <snmpv3_contextname/>
 861 |                     <snmpv3_securityname/>
 862 |                     <snmpv3_securitylevel>0</snmpv3_securitylevel>
 863 |                     <snmpv3_authprotocol>0</snmpv3_authprotocol>
 864 |                     <snmpv3_authpassphrase/>
 865 |                     <snmpv3_privprotocol>0</snmpv3_privprotocol>
 866 |                     <snmpv3_privpassphrase/>
 867 |                     <formula>1</formula>
 868 |                     <delay_flex/>
 869 |                     <params/>
 870 |                     <ipmi_sensor/>
 871 |                     <data_type>0</data_type>
 872 |                     <authtype>0</authtype>
 873 |                     <username/>
 874 |                     <password/>
 875 |                     <publickey/>
 876 |                     <privatekey/>
 877 |                     <port/>
 878 |                     <description/>
 879 |                     <inventory_link>0</inventory_link>
 880 |                     <applications>
 881 |                         <application>
 882 |                             <name>Graylog</name>
 883 |                         </application>
 884 |                     </applications>
 885 |                     <valuemap/>
 886 |                     <logtimefmt/>
 887 |                 </item>
 888 |                 <item>
 889 |                     <name>Lifecycle state</name>
 890 |                     <type>10</type>
 891 |                     <snmp_community/>
 892 |                     <multiplier>0</multiplier>
 893 |                     <snmp_oid/>
 894 |                     <key>check_graylog_node[&quot;-H&quot;,{HOST.CONN},&quot;-a&quot;,&quot;system_lifecycle&quot;]</key>
 895 |                     <delay>30</delay>
 896 |                     <history>90</history>
 897 |                     <trends>365</trends>
 898 |                     <status>0</status>
 899 |                     <value_type>4</value_type>
 900 |                     <allowed_hosts/>
 901 |                     <units/>
 902 |                     <delta>0</delta>
 903 |                     <snmpv3_contextname/>
 904 |                     <snmpv3_securityname/>
 905 |                     <snmpv3_securitylevel>0</snmpv3_securitylevel>
 906 |                     <snmpv3_authprotocol>0</snmpv3_authprotocol>
 907 |                     <snmpv3_authpassphrase/>
 908 |                     <snmpv3_privprotocol>0</snmpv3_privprotocol>
 909 |                     <snmpv3_privpassphrase/>
 910 |                     <formula>1</formula>
 911 |                     <delay_flex/>
 912 |                     <params/>
 913 |                     <ipmi_sensor/>
 914 |                     <data_type>0</data_type>
 915 |                     <authtype>0</authtype>
 916 |                     <username/>
 917 |                     <password/>
 918 |                     <publickey/>
 919 |                     <privatekey/>
 920 |                     <port/>
 921 |                     <description/>
 922 |                     <inventory_link>0</inventory_link>
 923 |                     <applications>
 924 |                         <application>
 925 |                             <name>Graylog</name>
 926 |                         </application>
 927 |                     </applications>
 928 |                     <valuemap/>
 929 |                     <logtimefmt/>
 930 |                 </item>
 931 |                 <item>
 932 |                     <name>Load balancer status</name>
 933 |                     <type>10</type>
 934 |                     <snmp_community/>
 935 |                     <multiplier>0</multiplier>
 936 |                     <snmp_oid/>
 937 |                     <key>check_graylog_node[&quot;-H&quot;,{HOST.CONN},&quot;-a&quot;,&quot;lb_status&quot;]</key>
 938 |                     <delay>30</delay>
 939 |                     <history>90</history>
 940 |                     <trends>365</trends>
 941 |                     <status>0</status>
 942 |                     <value_type>4</value_type>
 943 |                     <allowed_hosts/>
 944 |                     <units/>
 945 |                     <delta>0</delta>
 946 |                     <snmpv3_contextname/>
 947 |                     <snmpv3_securityname/>
 948 |                     <snmpv3_securitylevel>0</snmpv3_securitylevel>
 949 |                     <snmpv3_authprotocol>0</snmpv3_authprotocol>
 950 |                     <snmpv3_authpassphrase/>
 951 |                     <snmpv3_privprotocol>0</snmpv3_privprotocol>
 952 |                     <snmpv3_privpassphrase/>
 953 |                     <formula>1</formula>
 954 |                     <delay_flex/>
 955 |                     <params/>
 956 |                     <ipmi_sensor/>
 957 |                     <data_type>0</data_type>
 958 |                     <authtype>0</authtype>
 959 |                     <username/>
 960 |                     <password/>
 961 |                     <publickey/>
 962 |                     <privatekey/>
 963 |                     <port/>
 964 |                     <description/>
 965 |                     <inventory_link>0</inventory_link>
 966 |                     <applications>
 967 |                         <application>
 968 |                             <name>Graylog</name>
 969 |                         </application>
 970 |                     </applications>
 971 |                     <valuemap/>
 972 |                     <logtimefmt/>
 973 |                 </item>
 974 |                 <item>
 975 |                     <name>Message count</name>
 976 |                     <type>10</type>
 977 |                     <snmp_community/>
 978 |                     <multiplier>0</multiplier>
 979 |                     <snmp_oid/>
 980 |                     <key>check_graylog_node[&quot;-H&quot;,{HOST.CONN},&quot;-a&quot;,&quot;total_message_count&quot;]</key>
 981 |                     <delay>30</delay>
 982 |                     <history>90</history>
 983 |                     <trends>365</trends>
 984 |                     <status>0</status>
 985 |                     <value_type>3</value_type>
 986 |                     <allowed_hosts/>
 987 |                     <units>msg/s</units>
 988 |                     <delta>1</delta>
 989 |                     <snmpv3_contextname/>
 990 |                     <snmpv3_securityname/>
 991 |                     <snmpv3_securitylevel>0</snmpv3_securitylevel>
 992 |                     <snmpv3_authprotocol>0</snmpv3_authprotocol>
 993 |                     <snmpv3_authpassphrase/>
 994 |                     <snmpv3_privprotocol>0</snmpv3_privprotocol>
 995 |                     <snmpv3_privpassphrase/>
 996 |                     <formula>1</formula>
 997 |                     <delay_flex/>
 998 |                     <params/>
 999 |                     <ipmi_sensor/>
1000 |                     <data_type>0</data_type>
1001 |                     <authtype>0</authtype>
1002 |                     <username/>
1003 |                     <password/>
1004 |                     <publickey/>
1005 |                     <privatekey/>
1006 |                     <port/>
1007 |                     <description>Events from /count/total</description>
1008 |                     <inventory_link>0</inventory_link>
1009 |                     <applications>
1010 |                         <application>
1011 |                             <name>Graylog</name>
1012 |                         </application>
1013 |                     </applications>
1014 |                     <valuemap/>
1015 |                     <logtimefmt/>
1016 |                 </item>
1017 |                 <item>
1018 |                     <name>Node id</name>
1019 |                     <type>10</type>
1020 |                     <snmp_community/>
1021 |                     <multiplier>0</multiplier>
1022 |                     <snmp_oid/>
1023 |                     <key>check_graylog_node[&quot;-H&quot;,{HOST.CONN},&quot;-a&quot;,&quot;node_id&quot;]</key>
1024 |                     <delay>300</delay>
1025 |                     <history>90</history>
1026 |                     <trends>365</trends>
1027 |                     <status>0</status>
1028 |                     <value_type>4</value_type>
1029 |                     <allowed_hosts/>
1030 |                     <units/>
1031 |                     <delta>0</delta>
1032 |                     <snmpv3_contextname/>
1033 |                     <snmpv3_securityname/>
1034 |                     <snmpv3_securitylevel>0</snmpv3_securitylevel>
1035 |                     <snmpv3_authprotocol>0</snmpv3_authprotocol>
1036 |                     <snmpv3_authpassphrase/>
1037 |                     <snmpv3_privprotocol>0</snmpv3_privprotocol>
1038 |                     <snmpv3_privpassphrase/>
1039 |                     <formula>1</formula>
1040 |                     <delay_flex/>
1041 |                     <params/>
1042 |                     <ipmi_sensor/>
1043 |                     <data_type>0</data_type>
1044 |                     <authtype>0</authtype>
1045 |                     <username/>
1046 |                     <password/>
1047 |                     <publickey/>
1048 |                     <privatekey/>
1049 |                     <port/>
1050 |                     <description>Retrieves this node's id.</description>
1051 |                     <inventory_link>0</inventory_link>
1052 |                     <applications>
1053 |                         <application>
1054 |                             <name>Graylog</name>
1055 |                         </application>
1056 |                     </applications>
1057 |                     <valuemap/>
1058 |                     <logtimefmt/>
1059 |                 </item>
1060 |                 <item>
1061 |                     <name>Started at</name>
1062 |                     <type>10</type>
1063 |                     <snmp_community/>
1064 |                     <multiplier>0</multiplier>
1065 |                     <snmp_oid/>
1066 |                     <key>check_graylog_node[&quot;-H&quot;,{HOST.CONN},&quot;-a&quot;,&quot;system_startedat&quot;]</key>
1067 |                     <delay>30</delay>
1068 |                     <history>90</history>
1069 |                     <trends>365</trends>
1070 |                     <status>0</status>
1071 |                     <value_type>4</value_type>
1072 |                     <allowed_hosts/>
1073 |                     <units/>
1074 |                     <delta>0</delta>
1075 |                     <snmpv3_contextname/>
1076 |                     <snmpv3_securityname/>
1077 |                     <snmpv3_securitylevel>0</snmpv3_securitylevel>
1078 |                     <snmpv3_authprotocol>0</snmpv3_authprotocol>
1079 |                     <snmpv3_authpassphrase/>
1080 |                     <snmpv3_privprotocol>0</snmpv3_privprotocol>
1081 |                     <snmpv3_privpassphrase/>
1082 |                     <formula>1</formula>
1083 |                     <delay_flex/>
1084 |                     <params/>
1085 |                     <ipmi_sensor/>
1086 |                     <data_type>0</data_type>
1087 |                     <authtype>0</authtype>
1088 |                     <username/>
1089 |                     <password/>
1090 |                     <publickey/>
1091 |                     <privatekey/>
1092 |                     <port/>
1093 |                     <description/>
1094 |                     <inventory_link>0</inventory_link>
1095 |                     <applications>
1096 |                         <application>
1097 |                             <name>Graylog</name>
1098 |                         </application>
1099 |                     </applications>
1100 |                     <valuemap/>
1101 |                     <logtimefmt/>
1102 |                 </item>
1103 |                 <item>
1104 |                     <name>This script's data poller</name>
1105 |                     <type>10</type>
1106 |                     <snmp_community/>
1107 |                     <multiplier>0</multiplier>
1108 |                     <snmp_oid/>
1109 |                     <key>check_graylog_node[&quot;-H&quot;,{HOST.CONN},&quot;-a&quot;,&quot;poll_data&quot;]</key>
1110 |                     <delay>25</delay>
1111 |                     <history>90</history>
1112 |                     <trends>365</trends>
1113 |                     <status>0</status>
1114 |                     <value_type>4</value_type>
1115 |                     <allowed_hosts/>
1116 |                     <units/>
1117 |                     <delta>0</delta>
1118 |                     <snmpv3_contextname/>
1119 |                     <snmpv3_securityname/>
1120 |                     <snmpv3_securitylevel>0</snmpv3_securitylevel>
1121 |                     <snmpv3_authprotocol>0</snmpv3_authprotocol>
1122 |                     <snmpv3_authpassphrase/>
1123 |                     <snmpv3_privprotocol>0</snmpv3_privprotocol>
1124 |                     <snmpv3_privpassphrase/>
1125 |                     <formula>1</formula>
1126 |                     <delay_flex/>
1127 |                     <params/>
1128 |                     <ipmi_sensor/>
1129 |                     <data_type>0</data_type>
1130 |                     <authtype>0</authtype>
1131 |                     <username/>
1132 |                     <password/>
1133 |                     <publickey/>
1134 |                     <privatekey/>
1135 |                     <port/>
1136 |                     <description/>
1137 |                     <inventory_link>0</inventory_link>
1138 |                     <applications>
1139 |                         <application>
1140 |                             <name>Graylog</name>
1141 |                         </application>
1142 |                     </applications>
1143 |                     <valuemap/>
1144 |                     <logtimefmt/>
1145 |                 </item>
1146 |                 <item>
1147 |                     <name>Throughput</name>
1148 |                     <type>10</type>
1149 |                     <snmp_community/>
1150 |                     <multiplier>0</multiplier>
1151 |                     <snmp_oid/>
1152 |                     <key>check_graylog_node[&quot;-H&quot;,{HOST.CONN},&quot;-a&quot;,&quot;node_throughput&quot;]</key>
1153 |                     <delay>30</delay>
1154 |                     <history>90</history>
1155 |                     <trends>365</trends>
1156 |                     <status>0</status>
1157 |                     <value_type>3</value_type>
1158 |                     <allowed_hosts/>
1159 |                     <units>msg/s</units>
1160 |                     <delta>0</delta>
1161 |                     <snmpv3_contextname/>
1162 |                     <snmpv3_securityname/>
1163 |                     <snmpv3_securitylevel>0</snmpv3_securitylevel>
1164 |                     <snmpv3_authprotocol>0</snmpv3_authprotocol>
1165 |                     <snmpv3_authpassphrase/>
1166 |                     <snmpv3_privprotocol>0</snmpv3_privprotocol>
1167 |                     <snmpv3_privpassphrase/>
1168 |                     <formula>1</formula>
1169 |                     <delay_flex/>
1170 |                     <params/>
1171 |                     <ipmi_sensor/>
1172 |                     <data_type>0</data_type>
1173 |                     <authtype>0</authtype>
1174 |                     <username/>
1175 |                     <password/>
1176 |                     <publickey/>
1177 |                     <privatekey/>
1178 |                     <port/>
1179 |                     <description/>
1180 |                     <inventory_link>0</inventory_link>
1181 |                     <applications>
1182 |                         <application>
1183 |                             <name>Graylog</name>
1184 |                         </application>
1185 |                     </applications>
1186 |                     <valuemap/>
1187 |                     <logtimefmt/>
1188 |                 </item>
1189 |                 <item>
1190 |                     <name>Timezone</name>
1191 |                     <type>10</type>
1192 |                     <snmp_community/>
1193 |                     <multiplier>0</multiplier>
1194 |                     <snmp_oid/>
1195 |                     <key>check_graylog_node[&quot;-H&quot;,{HOST.CONN},&quot;-a&quot;,&quot;system_tz&quot;]</key>
1196 |                     <delay>30</delay>
1197 |                     <history>90</history>
1198 |                     <trends>365</trends>
1199 |                     <status>0</status>
1200 |                     <value_type>4</value_type>
1201 |                     <allowed_hosts/>
1202 |                     <units/>
1203 |                     <delta>0</delta>
1204 |                     <snmpv3_contextname/>
1205 |                     <snmpv3_securityname/>
1206 |                     <snmpv3_securitylevel>0</snmpv3_securitylevel>
1207 |                     <snmpv3_authprotocol>0</snmpv3_authprotocol>
1208 |                     <snmpv3_authpassphrase/>
1209 |                     <snmpv3_privprotocol>0</snmpv3_privprotocol>
1210 |                     <snmpv3_privpassphrase/>
1211 |                     <formula>1</formula>
1212 |                     <delay_flex/>
1213 |                     <params/>
1214 |                     <ipmi_sensor/>
1215 |                     <data_type>0</data_type>
1216 |                     <authtype>0</authtype>
1217 |                     <username/>
1218 |                     <password/>
1219 |                     <publickey/>
1220 |                     <privatekey/>
1221 |                     <port/>
1222 |                     <description/>
1223 |                     <inventory_link>0</inventory_link>
1224 |                     <applications>
1225 |                         <application>
1226 |                             <name>Graylog</name>
1227 |                         </application>
1228 |                     </applications>
1229 |                     <valuemap/>
1230 |                     <logtimefmt/>
1231 |                 </item>
1232 |                 <item>
1233 |                     <name>Transport address</name>
1234 |                     <type>10</type>
1235 |                     <snmp_community/>
1236 |                     <multiplier>0</multiplier>
1237 |                     <snmp_oid/>
1238 |                     <key>check_graylog_node[&quot;-H&quot;,{HOST.CONN},&quot;-a&quot;,&quot;node_transport&quot;]</key>
1239 |                     <delay>300</delay>
1240 |                     <history>90</history>
1241 |                     <trends>365</trends>
1242 |                     <status>0</status>
1243 |                     <value_type>4</value_type>
1244 |                     <allowed_hosts/>
1245 |                     <units/>
1246 |                     <delta>0</delta>
1247 |                     <snmpv3_contextname/>
1248 |                     <snmpv3_securityname/>
1249 |                     <snmpv3_securitylevel>0</snmpv3_securitylevel>
1250 |                     <snmpv3_authprotocol>0</snmpv3_authprotocol>
1251 |                     <snmpv3_authpassphrase/>
1252 |                     <snmpv3_privprotocol>0</snmpv3_privprotocol>
1253 |                     <snmpv3_privpassphrase/>
1254 |                     <formula>1</formula>
1255 |                     <delay_flex/>
1256 |                     <params/>
1257 |                     <ipmi_sensor/>
1258 |                     <data_type>0</data_type>
1259 |                     <authtype>0</authtype>
1260 |                     <username/>
1261 |                     <password/>
1262 |                     <publickey/>
1263 |                     <privatekey/>
1264 |                     <port/>
1265 |                     <description/>
1266 |                     <inventory_link>0</inventory_link>
1267 |                     <applications>
1268 |                         <application>
1269 |                             <name>Graylog</name>
1270 |                         </application>
1271 |                     </applications>
1272 |                     <valuemap/>
1273 |                     <logtimefmt/>
1274 |                 </item>
1275 |                 <item>
1276 |                     <name>Type</name>
1277 |                     <type>10</type>
1278 |                     <snmp_community/>
1279 |                     <multiplier>0</multiplier>
1280 |                     <snmp_oid/>
1281 |                     <key>check_graylog_node[&quot;-H&quot;,{HOST.CONN},&quot;-a&quot;,&quot;node_type&quot;]</key>
1282 |                     <delay>300</delay>
1283 |                     <history>90</history>
1284 |                     <trends>365</trends>
1285 |                     <status>0</status>
1286 |                     <value_type>4</value_type>
1287 |                     <allowed_hosts/>
1288 |                     <units/>
1289 |                     <delta>0</delta>
1290 |                     <snmpv3_contextname/>
1291 |                     <snmpv3_securityname/>
1292 |                     <snmpv3_securitylevel>0</snmpv3_securitylevel>
1293 |                     <snmpv3_authprotocol>0</snmpv3_authprotocol>
1294 |                     <snmpv3_authpassphrase/>
1295 |                     <snmpv3_privprotocol>0</snmpv3_privprotocol>
1296 |                     <snmpv3_privpassphrase/>
1297 |                     <formula>1</formula>
1298 |                     <delay_flex/>
1299 |                     <params/>
1300 |                     <ipmi_sensor/>
1301 |                     <data_type>0</data_type>
1302 |                     <authtype>0</authtype>
1303 |                     <username/>
1304 |                     <password/>
1305 |                     <publickey/>
1306 |                     <privatekey/>
1307 |                     <port/>
1308 |                     <description/>
1309 |                     <inventory_link>0</inventory_link>
1310 |                     <applications>
1311 |                         <application>
1312 |                             <name>Graylog</name>
1313 |                         </application>
1314 |                     </applications>
1315 |                     <valuemap/>
1316 |                     <logtimefmt/>
1317 |                 </item>
1318 |                 <item>
1319 |                     <name>Version</name>
1320 |                     <type>10</type>
1321 |                     <snmp_community/>
1322 |                     <multiplier>0</multiplier>
1323 |                     <snmp_oid/>
1324 |                     <key>check_graylog_node[&quot;-H&quot;,{HOST.CONN},&quot;-a&quot;,&quot;system_version&quot;]</key>
1325 |                     <delay>30</delay>
1326 |                     <history>90</history>
1327 |                     <trends>365</trends>
1328 |                     <status>0</status>
1329 |                     <value_type>4</value_type>
1330 |                     <allowed_hosts/>
1331 |                     <units/>
1332 |                     <delta>0</delta>
1333 |                     <snmpv3_contextname/>
1334 |                     <snmpv3_securityname/>
1335 |                     <snmpv3_securitylevel>0</snmpv3_securitylevel>
1336 |                     <snmpv3_authprotocol>0</snmpv3_authprotocol>
1337 |                     <snmpv3_authpassphrase/>
1338 |                     <snmpv3_privprotocol>0</snmpv3_privprotocol>
1339 |                     <snmpv3_privpassphrase/>
1340 |                     <formula>1</formula>
1341 |                     <delay_flex/>
1342 |                     <params/>
1343 |                     <ipmi_sensor/>
1344 |                     <data_type>0</data_type>
1345 |                     <authtype>0</authtype>
1346 |                     <username/>
1347 |                     <password/>
1348 |                     <publickey/>
1349 |                     <privatekey/>
1350 |                     <port/>
1351 |                     <description/>
1352 |                     <inventory_link>0</inventory_link>
1353 |                     <applications>
1354 |                         <application>
1355 |                             <name>Graylog</name>
1356 |                         </application>
1357 |                     </applications>
1358 |                     <valuemap/>
1359 |                     <logtimefmt/>
1360 |                 </item>
1361 |             </items>
1362 |             <discovery_rules/>
1363 |             <macros/>
1364 |             <templates/>
1365 |             <screens/>
1366 |         </template>
1367 |     </templates>
1368 |     <triggers>
1369 |         <trigger>
1370 |             <expression>{Template graylog2 server:net.tcp.service[http,{HOST.CONN},12900].last()}=0</expression>
1371 |             <name>API port is DOWN</name>
1372 |             <url/>
1373 |             <status>0</status>
1374 |             <priority>4</priority>
1375 |             <description/>
1376 |             <type>0</type>
1377 |             <dependencies/>
1378 |         </trigger>
1379 |         <trigger>
1380 |             <expression>{Template graylog2 server:check_graylog_node[&quot;-H&quot;,{HOST.CONN},&quot;-a&quot;,&quot;es_cluster_health&quot;].str(RED)}=1</expression>
1381 |             <name>ES cluster health is RED</name>
1382 |             <url/>
1383 |             <status>0</status>
1384 |             <priority>4</priority>
1385 |             <description/>
1386 |             <type>0</type>
1387 |             <dependencies>
1388 |                 <dependency>
1389 |                     <name>API port is DOWN</name>
1390 |                     <expression>{Template graylog2 server:net.tcp.service[http,{HOST.CONN},12900].last()}=0</expression>
1391 |                 </dependency>
1392 |             </dependencies>
1393 |         </trigger>
1394 |         <trigger>
1395 |             <expression>{Template graylog2 server:check_graylog_node[&quot;-H&quot;,{HOST.CONN},&quot;-a&quot;,&quot;es_cluster_health&quot;].str(YELLOW)}=1</expression>
1396 |             <name>ES cluster health is YELLOW</name>
1397 |             <url/>
1398 |             <status>0</status>
1399 |             <priority>2</priority>
1400 |             <description/>
1401 |             <type>0</type>
1402 |             <dependencies>
1403 |                 <dependency>
1404 |                     <name>API port is DOWN</name>
1405 |                     <expression>{Template graylog2 server:net.tcp.service[http,{HOST.CONN},12900].last()}=0</expression>
1406 |                 </dependency>
1407 |             </dependencies>
1408 |         </trigger>
1409 |         <trigger>
1410 |             <expression>{Template graylog2 server:check_graylog_node[&quot;-H&quot;,{HOST.CONN},&quot;-a&quot;,&quot;poll_data&quot;].str(FAIL)}=1</expression>
1411 |             <name>Fail to poll data</name>
1412 |             <url/>
1413 |             <status>0</status>
1414 |             <priority>3</priority>
1415 |             <description/>
1416 |             <type>0</type>
1417 |             <dependencies>
1418 |                 <dependency>
1419 |                     <name>API port is DOWN</name>
1420 |                     <expression>{Template graylog2 server:net.tcp.service[http,{HOST.CONN},12900].last()}=0</expression>
1421 |                 </dependency>
1422 |             </dependencies>
1423 |         </trigger>
1424 |         <trigger>
1425 |             <expression>{Template graylog2 server:check_graylog_node[&quot;-H&quot;,{HOST.CONN},&quot;-a&quot;,&quot;journal_events_append&quot;].avg(300)}&gt;1000</expression>
1426 |             <name>Journal append events stacking up</name>
1427 |             <url/>
1428 |             <status>1</status>
1429 |             <priority>3</priority>
1430 |             <description/>
1431 |             <type>0</type>
1432 |             <dependencies>
1433 |                 <dependency>
1434 |                     <name>API port is DOWN</name>
1435 |                     <expression>{Template graylog2 server:net.tcp.service[http,{HOST.CONN},12900].last()}=0</expression>
1436 |                 </dependency>
1437 |             </dependencies>
1438 |         </trigger>
1439 |         <trigger>
1440 |             <expression>{Template graylog2 server:check_graylog_node[&quot;-H&quot;,{HOST.CONN},&quot;-a&quot;,&quot;journal_events_read&quot;].avg(300)}&gt;1000</expression>
1441 |             <name>Journal read events stacking up</name>
1442 |             <url/>
1443 |             <status>1</status>
1444 |             <priority>2</priority>
1445 |             <description/>
1446 |             <type>0</type>
1447 |             <dependencies>
1448 |                 <dependency>
1449 |                     <name>API port is DOWN</name>
1450 |                     <expression>{Template graylog2 server:net.tcp.service[http,{HOST.CONN},12900].last()}=0</expression>
1451 |                 </dependency>
1452 |             </dependencies>
1453 |         </trigger>
1454 |         <trigger>
1455 |             <expression>{Template graylog2 server:check_graylog_node[&quot;-H&quot;,{HOST.CONN},&quot;-a&quot;,&quot;journal_uncommitted_entries&quot;].avg(300)}&gt;1000</expression>
1456 |             <name>Journal uncommitted entries are stacking up</name>
1457 |             <url/>
1458 |             <status>1</status>
1459 |             <priority>3</priority>
1460 |             <description/>
1461 |             <type>0</type>
1462 |             <dependencies>
1463 |                 <dependency>
1464 |                     <name>API port is DOWN</name>
1465 |                     <expression>{Template graylog2 server:net.tcp.service[http,{HOST.CONN},12900].last()}=0</expression>
1466 |                 </dependency>
1467 |             </dependencies>
1468 |         </trigger>
1469 |         <trigger>
1470 |             <expression>{Template graylog2 server:check_graylog_node[&quot;-H&quot;,{HOST.CONN},&quot;-a&quot;,&quot;node_cluster&quot;].change(0)}&lt;0</expression>
1471 |             <name>Node cluster ID changed</name>
1472 |             <url/>
1473 |             <status>0</status>
1474 |             <priority>1</priority>
1475 |             <description/>
1476 |             <type>0</type>
1477 |             <dependencies>
1478 |                 <dependency>
1479 |                     <name>API port is DOWN</name>
1480 |                     <expression>{Template graylog2 server:net.tcp.service[http,{HOST.CONN},12900].last()}=0</expression>
1481 |                 </dependency>
1482 |             </dependencies>
1483 |         </trigger>
1484 |         <trigger>
1485 |             <expression>{Template graylog2 server:check_graylog_node[&quot;-H&quot;,{HOST.CONN},&quot;-a&quot;,&quot;node_id&quot;].change(0)}&lt;0</expression>
1486 |             <name>Node ID changed</name>
1487 |             <url/>
1488 |             <status>0</status>
1489 |             <priority>1</priority>
1490 |             <description/>
1491 |             <type>0</type>
1492 |             <dependencies>
1493 |                 <dependency>
1494 |                     <name>API port is DOWN</name>
1495 |                     <expression>{Template graylog2 server:net.tcp.service[http,{HOST.CONN},12900].last()}=0</expression>
1496 |                 </dependency>
1497 |             </dependencies>
1498 |         </trigger>
1499 |         <trigger>
1500 |             <expression>{Template graylog2 server:check_graylog_node[&quot;-H&quot;,{HOST.CONN},&quot;-a&quot;,&quot;lb_status&quot;].str(alive)}=0</expression>
1501 |             <name>Node is marked as DOWN</name>
1502 |             <url/>
1503 |             <status>0</status>
1504 |             <priority>2</priority>
1505 |             <description/>
1506 |             <type>0</type>
1507 |             <dependencies>
1508 |                 <dependency>
1509 |                     <name>API port is DOWN</name>
1510 |                     <expression>{Template graylog2 server:net.tcp.service[http,{HOST.CONN},12900].last()}=0</expression>
1511 |                 </dependency>
1512 |             </dependencies>
1513 |         </trigger>
1514 |         <trigger>
1515 |             <expression>{Template graylog2 server:check_graylog_node[&quot;-H&quot;,{HOST.CONN},&quot;-a&quot;,&quot;system_isprocessing&quot;].str(false)}=1</expression>
1516 |             <name>Node is not processing</name>
1517 |             <url/>
1518 |             <status>0</status>
1519 |             <priority>3</priority>
1520 |             <description/>
1521 |             <type>0</type>
1522 |             <dependencies>
1523 |                 <dependency>
1524 |                     <name>API port is DOWN</name>
1525 |                     <expression>{Template graylog2 server:net.tcp.service[http,{HOST.CONN},12900].last()}=0</expression>
1526 |                 </dependency>
1527 |             </dependencies>
1528 |         </trigger>
1529 |         <trigger>
1530 |             <expression>{Template graylog2 server:check_graylog_node[&quot;-H&quot;,{HOST.CONN},&quot;-a&quot;,&quot;system_lifecycle&quot;].str(running)}=0</expression>
1531 |             <name>Node is not running</name>
1532 |             <url/>
1533 |             <status>0</status>
1534 |             <priority>3</priority>
1535 |             <description/>
1536 |             <type>0</type>
1537 |             <dependencies>
1538 |                 <dependency>
1539 |                     <name>API port is DOWN</name>
1540 |                     <expression>{Template graylog2 server:net.tcp.service[http,{HOST.CONN},12900].last()}=0</expression>
1541 |                 </dependency>
1542 |             </dependencies>
1543 |         </trigger>
1544 |         <trigger>
1545 |             <expression>{Template graylog2 server:check_graylog_node[&quot;-H&quot;,{HOST.CONN},&quot;-a&quot;,&quot;node_is_master&quot;].change(0)}&lt;0</expression>
1546 |             <name>Node master status changed</name>
1547 |             <url/>
1548 |             <status>0</status>
1549 |             <priority>1</priority>
1550 |             <description/>
1551 |             <type>0</type>
1552 |             <dependencies>
1553 |                 <dependency>
1554 |                     <name>API port is DOWN</name>
1555 |                     <expression>{Template graylog2 server:net.tcp.service[http,{HOST.CONN},12900].last()}=0</expression>
1556 |                 </dependency>
1557 |             </dependencies>
1558 |         </trigger>
1559 |         <trigger>
1560 |             <expression>{Template graylog2 server:check_graylog_node[&quot;-H&quot;,{HOST.CONN},&quot;-a&quot;,&quot;node_transport&quot;].change(0)}&lt;0</expression>
1561 |             <name>Node transport info changed</name>
1562 |             <url/>
1563 |             <status>0</status>
1564 |             <priority>1</priority>
1565 |             <description/>
1566 |             <type>0</type>
1567 |             <dependencies>
1568 |                 <dependency>
1569 |                     <name>API port is DOWN</name>
1570 |                     <expression>{Template graylog2 server:net.tcp.service[http,{HOST.CONN},12900].last()}=0</expression>
1571 |                 </dependency>
1572 |             </dependencies>
1573 |         </trigger>
1574 |     </triggers>
1575 |     <graphs>
1576 |         <graph>
1577 |             <name>Journal stack graph</name>
1578 |             <width>900</width>
1579 |             <height>200</height>
1580 |             <yaxismin>0.0000</yaxismin>
1581 |             <yaxismax>100.0000</yaxismax>
1582 |             <show_work_period>1</show_work_period>
1583 |             <show_triggers>1</show_triggers>
1584 |             <type>1</type>
1585 |             <show_legend>1</show_legend>
1586 |             <show_3d>0</show_3d>
1587 |             <percent_left>0.0000</percent_left>
1588 |             <percent_right>0.0000</percent_right>
1589 |             <ymin_type_1>0</ymin_type_1>
1590 |             <ymax_type_1>0</ymax_type_1>
1591 |             <ymin_item_1>0</ymin_item_1>
1592 |             <ymax_item_1>0</ymax_item_1>
1593 |             <graph_items>
1594 |                 <graph_item>
1595 |                     <sortorder>0</sortorder>
1596 |                     <drawtype>0</drawtype>
1597 |                     <color>00C800</color>
1598 |                     <yaxisside>0</yaxisside>
1599 |                     <calc_fnc>2</calc_fnc>
1600 |                     <type>0</type>
1601 |                     <item>
1602 |                         <host>Template graylog2 server</host>
1603 |                         <key>check_graylog_node[&quot;-H&quot;,{HOST.CONN},&quot;-a&quot;,&quot;journal_events_append&quot;]</key>
1604 |                     </item>
1605 |                 </graph_item>
1606 |                 <graph_item>
1607 |                     <sortorder>1</sortorder>
1608 |                     <drawtype>0</drawtype>
1609 |                     <color>C80000</color>
1610 |                     <yaxisside>0</yaxisside>
1611 |                     <calc_fnc>2</calc_fnc>
1612 |                     <type>0</type>
1613 |                     <item>
1614 |                         <host>Template graylog2 server</host>
1615 |                         <key>check_graylog_node[&quot;-H&quot;,{HOST.CONN},&quot;-a&quot;,&quot;journal_events_read&quot;]</key>
1616 |                     </item>
1617 |                 </graph_item>
1618 |                 <graph_item>
1619 |                     <sortorder>2</sortorder>
1620 |                     <drawtype>0</drawtype>
1621 |                     <color>0000C8</color>
1622 |                     <yaxisside>0</yaxisside>
1623 |                     <calc_fnc>2</calc_fnc>
1624 |                     <type>0</type>
1625 |                     <item>
1626 |                         <host>Template graylog2 server</host>
1627 |                         <key>check_graylog_node[&quot;-H&quot;,{HOST.CONN},&quot;-a&quot;,&quot;journal_uncommitted_entries&quot;]</key>
1628 |                     </item>
1629 |                 </graph_item>
1630 |             </graph_items>
1631 |         </graph>
1632 |     </graphs>
1633 | </zabbix_export>
1634 | 


--------------------------------------------------------------------------------