zabbix_export: version: '6.2' date: '2023-04-19T20:31:13Z' template_groups: - uuid: 7df96b18c230490a9a0a9e2307226338 name: Templates templates: - uuid: b9aa94a3198a41719e701a12541060a9 template: Unbound-DNS name: Unbound-DNS description: 'This template provides monitoring for Unbound DNS resolver statistics. It includes metrics such as total number of queries, cache hits and misses, recursion times, response codes, and more. The metrics are collected using the Unbound-Control command-line tool and parsed using grep and cut.' groups: - name: Templates items: - uuid: 42fc5cc0ab9e45879458b056d09dc854 name: unbound.num.answer.rcode.NOTIMPL key: unbound.num.answer.rcode.NOTIMPL value_type: FLOAT description: | The Zabbix key unbound.num.answer.rcode.NOTIMPL is used to monitor the number of DNS responses returned by the Unbound server with a response code of NOTIMPL during a certain period of time. NOTIMPL is a DNS response code that indicates that the server does not support the requested type of DNS query. By monitoring this key, system administrators can detect potential issues with the Unbound server's configuration or capabilities in handling certain types of DNS queries. tags: - tag: DNS value: Unbound - uuid: 0770496617e04ba89fd3f8d68c133712 name: unbound.num.answer.rcode.NXDOMAIN key: unbound.num.answer.rcode.NXDOMAIN value_type: FLOAT description: | The Zabbix key unbound.num.answer.rcode.NXDOMAIN is used to monitor the number of DNS responses returned by the Unbound server with a response code of NXDOMAIN during a certain period of time. NXDOMAIN is a DNS response code that indicates that the requested domain name does not exist in the DNS system. By monitoring this key, system administrators can detect potential issues with DNS resolution, such as misspelled domain names or incorrect configuration of DNS zones. tags: - tag: DNS value: Unbound - uuid: b5c6184f6b984c0ca778be7a43f6e740 name: unbound.num.answer.rcode.REFUSED key: unbound.num.answer.rcode.REFUSED value_type: FLOAT description: | The Zabbix key unbound.num.answer.rcode.REFUSED is used to monitor the number of DNS responses returned by the Unbound server with a response code of REFUSED during a certain period of time. REFUSED is a DNS response code that indicates that the server refuses to process the DNS query. By monitoring this key, system administrators can detect potential issues with the Unbound server's configuration or security settings, such as firewall rules or access controls, that are blocking or denying DNS queries. tags: - tag: DNS value: Unbound - uuid: 6947329402af4918a4e01dafe588dd94 name: unbound.num.answer.rcode.SERVFAIL key: unbound.num.answer.rcode.SERVFAIL value_type: FLOAT description: | The Zabbix key unbound.num.answer.rcode.SERVFAIL is used to monitor the number of DNS responses returned by the Unbound server with a response code of SERVFAIL during a certain period of time. SERVFAIL is a DNS response code that indicates a temporary failure in the server. By monitoring this key, system administrators can detect potential issues with the Unbound server's performance or availability. tags: - tag: DNS value: Unbound - uuid: fdac3bb1568146e796c1b4a4d007b68d name: unbound.num.answer.secure key: unbound.num.answer.secure value_type: FLOAT description: | The Zabbix key unbound.num.answer.secure is used to monitor the number of DNS responses returned by the Unbound server that are cryptographically secure during a certain period of time. Unbound supports DNSSEC (Domain Name System Security Extensions), which is a set of extensions to DNS that provide authentication and integrity to DNS data. By monitoring this key, system administrators can measure the number of secure DNS responses returned by the Unbound server tags: - tag: DNS value: Unbound - uuid: f1f3064d865e44b689e80cf0a2bc2cb5 name: unbound.num.query.type.A key: unbound.num.query.type.A value_type: FLOAT description: 'Count of DNS queries for A record type. A records are used to map domain names to IPv4 addresses.' tags: - tag: DNS value: Unbound - uuid: 510be78db38b44859106d4a6b3d11e83 name: unbound.num.query.type.MX key: unbound.num.query.type.MX value_type: FLOAT description: 'Count of DNS queries for MX record type. MX records are used to specify mail servers responsible for a particular domain.' tags: - tag: DNS value: Unbound - uuid: 46d672e4d84449818987e003b695139a name: unbound.num.query.type.PTR key: unbound.num.query.type.PTR value_type: FLOAT description: 'Count of DNS queries for PTR record type. PTR records are used for reverse IP address to domain name lookup.' tags: - tag: DNS value: Unbound - uuid: 7490ba6d315e4ded9c1bdc28ae89e362 name: unbound.num.query.type.SRV key: unbound.num.query.type.SRV value_type: FLOAT description: 'Count of DNS queries for SRV record type. SRV records are used to specify the location of network services for a particular domain.' tags: - tag: DNS value: Unbound - uuid: 3af75934e9124199a892488e63239876 name: unbound.num.query.type.TXT key: unbound.num.query.type.TXT value_type: FLOAT description: 'Count of DNS queries for TXT record type. TXT records are used to store arbitrary text information in a domain.' tags: - tag: DNS value: Unbound - uuid: cc3676dcbc9f4ee9b4a72bcc128bd818 name: unbound.num.query.type.TYPE64 key: unbound.num.query.type.TYPE64 value_type: FLOAT description: 'Count of DNS queries for TYPE64 record type. This record type is defined in RFC 3597 as an extension mechanism to allow DNS clients to receive unknown record types.' tags: - tag: DNS value: Unbound - uuid: 4e43df6c08a04f44835fe7be6f9b8d78 name: unbound.num.query.type.TYPE65 key: unbound.num.query.type.TYPE65 value_type: FLOAT description: 'Count of DNS queries for TYPE65 record type. This record type is defined in RFC 3597 as an extension mechanism to allow DNS clients to receive unknown record types.' tags: - tag: DNS value: Unbound - uuid: 571ab37bee544900a4b96b19c33d44e5 name: unbound.num.rrset.bogus key: unbound.num.rrset.bogus value_type: FLOAT description: | The Zabbix key unbound.num.rrset.bogus is used to monitor the number of Resource Record Sets (RRsets) that fail DNSSEC validation and are deemed "bogus" by the Unbound server during a certain period of time. DNSSEC provides a mechanism to validate the authenticity and integrity of DNS data. If a DNS response fails validation, Unbound will mark the corresponding RRset as "bogus" and discard it. By monitoring this key, system administrators can measure the number of RRsets that are being discarded due to DNSSEC validation failures. This information can be used to identify and resolve issues with DNSSEC validation, such as misconfigured DNSSEC zones or missing DNSSEC trust anchors. By ensuring the integrity and authenticity of the DNS data, monitoring this key can help to prevent DNS cache poisoning attacks and other DNS-related security issues. tags: - tag: DNS value: Unbound - uuid: c7b6b0ce4d08472a82dda98a2004b357 name: unbound.total.num.cachehits key: unbound.total.num.cachehits value_type: FLOAT description: 'This parameter retrieves the total number of queries that resulted in a cache hit in the Unbound DNS resolver.' tags: - tag: DNS value: Unbound - uuid: 4e9c436855ec48bd943383a53f8aae8d name: unbound.total.num.cachemiss key: unbound.total.num.cachemiss value_type: FLOAT description: 'This parameter is used to monitor the total number of cache misses in the Unbound DNS resolver. A cache miss occurs when a DNS query is received, but the answer is not in the cache and must be fetched from an upstream DNS server. By monitoring this parameter, you can gain insight into the cache hit rate and the effectiveness of your DNS caching strategy.' tags: - tag: DNS value: Unbound - uuid: 6b18bc6b0f2041338753068575af83df name: unbound.total.num.queries key: unbound.total.num.queries value_type: FLOAT description: 'This user parameter retrieves the total number of DNS queries made by the Unbound DNS resolver' tags: - tag: DNS value: Unbound - uuid: 038e00bd4f9a4bfab956bfd042099672 name: unbound.total.num.recursivereplies key: unbound.total.num.recursivereplies value_type: FLOAT description: 'Fetches the number of recursive queries that were answered from cache or through recursion. This metric provides insights into the number of recursive queries and the efficiency of the recursive resolver.' tags: - tag: DNS value: Unbound - uuid: f1dcf616a9624490ad1aa927eeb3066a name: unbound.total.recursion.time.avg key: unbound.total.recursion.time.avg value_type: FLOAT description: 'This Zabbix item measures the average time taken by the Unbound DNS resolver to perform recursive queries over a certain time period' tags: - tag: DNS value: Unbound tags: - tag: DNS value: unbound graphs: - uuid: 0a3f67b1f5694bce85621be51c86ef0a name: 'Queries by type' graph_items: - color: 199C0D calc_fnc: ALL item: host: Unbound-DNS key: unbound.num.query.type.A - sortorder: '1' color: F63100 calc_fnc: ALL item: host: Unbound-DNS key: unbound.num.query.type.MX - sortorder: '2' color: 2774A4 calc_fnc: ALL item: host: Unbound-DNS key: unbound.num.query.type.PTR - sortorder: '3' color: F7941D calc_fnc: ALL item: host: Unbound-DNS key: unbound.num.query.type.SRV - sortorder: '4' color: FC6EA3 calc_fnc: ALL item: host: Unbound-DNS key: unbound.num.query.type.TXT - sortorder: '5' color: 6C59DC calc_fnc: ALL item: host: Unbound-DNS key: unbound.num.query.type.TYPE64 - sortorder: '6' color: C7A72D calc_fnc: ALL item: host: Unbound-DNS key: unbound.num.query.type.TYPE65