Zabbix UserParameter PowerShell Script Not Supported – CPU Monitoring Fix

cpu-usagepowershellprocesswindowszabbix

I'm new to zabbix and I'm trying to create custom User Parameter to Monitor CPU utility per process(Windows Machine).

I have a powershell script and a user parameter, I also added a new item under zabbix -> Configuration -> hosts, but I keep getting the Not Supported status and I ran out of potential blogs/solutions to help me.

Does anyone have an idea on what I'm missing / doing wrong ?

My user Parameter : UserParameter=checkcpuperprocess[*], C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe -ExecutionPolicy Bypass -file C:\Zabbix\conf\CPUperProc.ps1

My powershell script :

    $properties=@(
        @{Name="Process Name"; Expression = {$_.name}},
        @{Name="CPU (%)"; Expression = {$_.PercentProcessorTime}},   
        @{Name="Memory (MB)"; Expression = {[Math]::Round(($_.workingSetPrivate / 1mb),2)}}
    )
    Get-WmiObject -class Win32_PerfFormattedData_PerfProc_Process |
        Select-Object $properties |
        Format-Table -AutoSize

Best Answer

Make sure that you have enabled UnsafeUserParameters in Zabbix Agent config file.

https://www.zabbix.com/documentation/current/manual/appendix/config/zabbix_agentd

Related Solutions

PowerShell script not completing what it should do when scheduled with Windows Task Scheduler

You need to Set-ExecutionPolicy so that the account running the scheduled task is allowed to execute PowerShell scripts:

Set-ExecutionPolicy -Scope LocalMachine Unrestricted

As per the help file for Set-ExecutionPolicy, a scope of LocalMachine sets the policy for all users of that computer. As opposed to if you just Set-ExecutionPolicy Unrestricted from your own user account, it only sets that policy for your own user account. Furthermore, there are also separate policies for 32-bit and 64-bit versions of PowerShell.

And if Set-ExecutionPolicy -Scope LocalMachine Unrestricted is too much of a security compromise to you, you could set it just for that one user by logging in as that user and doing it, or executing a process under that user's security context and setting the policy for that user.

Oh, and well, this probably doesn't need to be said, but we can't know if the user you've assigned to this scheduled task has the permissions necessary to delete stuff from those UNC paths.

Sql-server – Powershell execution policy within SQL Server

First, run the powershell command "Get-ExecutionPolicy -List" (as mentioned in the error message). This will give you a list of the different execution policy scopes and which setting is defined in which scope.

This list of scopes has an order of precedence (MachinePolicy, UserPolicy, Process, CurrentUser, LocalMachine). Each of these scopes can have a different setting;

Restricted
AllSigned
RemoteSigned
Unrestricted
Bypass
Undefined

Powershell will evaluate these scopes in the order listed and apply the first setting that is set to something other than 'Undefined'.

The error you're getting when running 'Set-ExecutionPolicy' indicates that you have a setting of 'Restricted' defined at a more specific scope than the default of LocalMachine. The Get-ExecutionPolicy -List cmdlet will tell you where.

If the Restricted setting is applied in either the LocalUser or Process scopes then you can change this. Use the Set-ExecutionPolicy cmdlet, but specify the scope using the -scope parameter. For example;

Set-ExecutionPolicy -Scope Process RemoteSigned

If the Restricted setting is defined at either the MachinePolicy or UserPolicy scopes then this indicates your domain administrators have configured a group policy that is overriding your local settings. This is where you would need to go and talk to them and see if you can have a less restrictive setting applied via GPO.

To the best of my knowledge you cannot easily override the GPO settings locally; however if I'm wrong on this then someone please do correct me! :)

Best Answer

Related Solutions

PowerShell script not completing what it should do when scheduled with Windows Task Scheduler

Sql-server – Powershell execution policy within SQL Server

Related Topic