<?xml version="1.0" encoding="UTF-8"?>
<zabbix_export>
  <version>5.0</version>
  <date>2021-11-22T02:47:29Z</date>
  <groups>
    <group>
      <name>BlueCoat</name>
    </group>
  </groups>
  <templates>
    <template>
      <template>App BlueCoat AV</template>
      <name>App BlueCoat AV</name>
      <groups>
        <group>
          <name>BlueCoat</name>
        </group>
      </groups>
      <applications>
        <application>
          <name>Antivirus Related Info</name>
        </application>
        <application>
          <name>CPU</name>
        </application>
        <application>
          <name>Memory</name>
        </application>
        <application>
          <name>Network</name>
        </application>
      </applications>
      <items>
        <item>
          <name>AV engine version</name>
          <type>SNMP_AGENT</type>
          <snmp_oid>BLUECOAT-AV-MIB::avEngineVersion.0</snmp_oid>
          <key>avEngineVersion</key>
          <delay>3600</delay>
          <history>180d</history>
          <trends>0</trends>
          <value_type>TEXT</value_type>
          <description>AV engine version.</description>
          <applications>
            <application>
              <name>Antivirus Related Info</name>
            </application>
          </applications>
        </item>
        <item>
          <name>Number of files scanned using all protocols</name>
          <type>SNMP_AGENT</type>
          <snmp_oid>BLUECOAT-AV-MIB::avFilesScanned.0</snmp_oid>
          <key>avFilesScanned</key>
          <delay>60</delay>
          <history>180d</history>
          <description>Sum of number of files scanned using all protocols. An archive containing multiple files will count as one file.</description>
          <applications>
            <application>
              <name>Antivirus Related Info</name>
            </application>
          </applications>
          <preprocessing>
            <step>
              <type>SIMPLE_CHANGE</type>
              <params></params>
            </step>
          </preprocessing>
          <triggers>
            <trigger>
              <expression>{max(5m)}=0</expression>
              <name>Number of files scanned equal 0</name>
              <priority>AVERAGE</priority>
              <description>Кол-во отсканированных файлов за последние 5 минут равно 0.</description>
            </trigger>
          </triggers>
        </item>
        <item>
          <name>Number of files scanned using the ICAP protocol</name>
          <type>SNMP_AGENT</type>
          <snmp_oid>BLUECOAT-AV-MIB::avICAPFilesScanned.0</snmp_oid>
          <key>avICAPFilesScanned</key>
          <delay>60</delay>
          <history>180d</history>
          <description>Number of files scanned using the ICAP protocol. An archive containing multiple files will count as one file.</description>
          <applications>
            <application>
              <name>Antivirus Related Info</name>
            </application>
          </applications>
        </item>
        <item>
          <name>Number of infected files detected using the ICAP protocol</name>
          <type>SNMP_AGENT</type>
          <snmp_oid>BLUECOAT-AV-MIB::avICAPVirusesDetected.0</snmp_oid>
          <key>avICAPVirusesDetected</key>
          <delay>60</delay>
          <history>180d</history>
          <description>Number of infected files detected using the ICAP protocol. A file containing multiple infections will count as one infected file.</description>
          <applications>
            <application>
              <name>Antivirus Related Info</name>
            </application>
          </applications>
        </item>
        <item>
          <name>Currently installed ProxyAV firmware version</name>
          <type>SNMP_AGENT</type>
          <snmp_oid>BLUECOAT-AV-MIB::avInstalledFirmwareVersion.0</snmp_oid>
          <key>avInstalledFirmwareVersion</key>
          <delay>3600</delay>
          <history>180d</history>
          <trends>0</trends>
          <value_type>TEXT</value_type>
          <description>Currently installed ProxyAV firmware version.</description>
          <applications>
            <application>
              <name>Antivirus Related Info</name>
            </application>
          </applications>
        </item>
        <item>
          <name>AV license days remaining</name>
          <type>SNMP_AGENT</type>
          <snmp_oid>BLUECOAT-AV-MIB::avLicenseDaysRemaining.0</snmp_oid>
          <key>avLicenseDaysRemaining</key>
          <delay>3600</delay>
          <history>180d</history>
          <description>AV license days remaining.</description>
          <applications>
            <application>
              <name>Antivirus Related Info</name>
            </application>
          </applications>
          <triggers>
            <trigger>
              <expression>{last()}&lt;30</expression>
              <name>AV license days remaining less than 30 days</name>
              <priority>WARNING</priority>
            </trigger>
          </triggers>
        </item>
        <item>
          <name>Release date and time of the av pattern</name>
          <type>SNMP_AGENT</type>
          <snmp_oid>BLUECOAT-AV-MIB::avPatternDateTime.0</snmp_oid>
          <key>avPatternDateTime</key>
          <delay>3600</delay>
          <history>180d</history>
          <trends>0</trends>
          <value_type>TEXT</value_type>
          <description>Release date and time of the av pattern.</description>
          <applications>
            <application>
              <name>Antivirus Related Info</name>
            </application>
          </applications>
        </item>
        <item>
          <name>AV pattern version</name>
          <type>SNMP_AGENT</type>
          <snmp_oid>BLUECOAT-AV-MIB::avPatternVersion.0</snmp_oid>
          <key>avPatternVersion</key>
          <delay>3600</delay>
          <history>180d</history>
          <trends>0</trends>
          <value_type>TEXT</value_type>
          <description>AV pattern version.</description>
          <applications>
            <application>
              <name>Antivirus Related Info</name>
            </application>
          </applications>
        </item>
        <item>
          <name>Version published on the automatic update location</name>
          <type>SNMP_AGENT</type>
          <snmp_oid>BLUECOAT-AV-MIB::avPublishedFirmwareVersion.0</snmp_oid>
          <key>avPublishedFirmwareVersion</key>
          <delay>3600</delay>
          <history>180d</history>
          <trends>0</trends>
          <value_type>TEXT</value_type>
          <description>ProxyAV version published on the automatic update location.</description>
          <applications>
            <application>
              <name>Antivirus Related Info</name>
            </application>
          </applications>
        </item>
        <item>
          <name>Number of files scanned using the Secure ICAP protocol</name>
          <type>SNMP_AGENT</type>
          <snmp_oid>BLUECOAT-AV-MIB::avSecureICAPFilesScanned.0</snmp_oid>
          <key>avSecureICAPFilesScanned</key>
          <delay>60</delay>
          <history>180d</history>
          <description>Number of files scanned using the Secure ICAP protocol. An archive containing multiple files will count as one file.</description>
          <applications>
            <application>
              <name>Antivirus Related Info</name>
            </application>
          </applications>
        </item>
        <item>
          <name>Number of infected files detected using the Secure ICAP protocol</name>
          <type>SNMP_AGENT</type>
          <snmp_oid>BLUECOAT-AV-MIB::avSecureICAPVirusesDetected.0</snmp_oid>
          <key>avSecureICAPVirusesDetected</key>
          <delay>60</delay>
          <history>180d</history>
          <description>Number of infected files detected using the Secure ICAP protocol. A file containing multiple infections will count as one infected file.</description>
          <applications>
            <application>
              <name>Antivirus Related Info</name>
            </application>
          </applications>
        </item>
        <item>
          <name>Number of slow ICAP connections</name>
          <type>SNMP_AGENT</type>
          <snmp_oid>BLUECOAT-AV-MIB::avSlowICAPConnections.0</snmp_oid>
          <key>avSlowICAPConnections</key>
          <delay>60</delay>
          <history>180d</history>
          <description>The number of ICAP connections that are considered 'slow' - receiving data for more than the configured time threshold (by default 60 seconds).</description>
          <applications>
            <application>
              <name>Antivirus Related Info</name>
            </application>
          </applications>
        </item>
        <item>
          <name>Number of infected files detected using all protocols</name>
          <type>SNMP_AGENT</type>
          <snmp_oid>BLUECOAT-AV-MIB::avVirusesDetected.0</snmp_oid>
          <key>avVirusesDetected</key>
          <delay>60</delay>
          <history>180d</history>
          <description>Sum of number of infected files detected using all protocols. A file containing multiple infections will count as one infected file.</description>
          <applications>
            <application>
              <name>Antivirus Related Info</name>
            </application>
          </applications>
        </item>
        <item>
          <name>Percent of CPU in use</name>
          <type>SNMP_AGENT</type>
          <snmp_oid>BLUECOAT-AV-USAGE-MIB::deviceUsagePercent.1</snmp_oid>
          <key>deviceUsagePercentCPU</key>
          <delay>60</delay>
          <history>180d</history>
          <units>%</units>
          <description>Percent of CPU in use.</description>
          <applications>
            <application>
              <name>CPU</name>
            </application>
          </applications>
          <triggers>
            <trigger>
              <expression>({min(15m)}>95 and {TRIGGER.VALUE}=0) or ({max(7m)}>90 and {TRIGGER.VALUE}=1)</expression>
              <name>Processor load is too high</name>
              <priority>AVERAGE</priority>
            </trigger>
          </triggers>
        </item>
        <item>
          <name>Percent of Interface 0 in use</name>
          <type>SNMP_AGENT</type>
          <snmp_oid>BLUECOAT-AV-USAGE-MIB::deviceUsagePercent.3</snmp_oid>
          <key>deviceUsagePercentInterface0</key>
          <delay>60</delay>
          <history>180d</history>
          <units>%</units>
          <description>Percent of Interface 0 in use.</description>
          <applications>
            <application>
              <name>Network</name>
            </application>
          </applications>
        </item>
        <item>
          <name>Percent of memory in use</name>
          <type>SNMP_AGENT</type>
          <snmp_oid>BLUECOAT-AV-USAGE-MIB::deviceUsagePercent.2</snmp_oid>
          <key>deviceUsagePercentMemory</key>
          <delay>60</delay>
          <history>180d</history>
          <units>%</units>
          <description>Percent of memory in use.</description>
          <applications>
            <application>
              <name>Memory</name>
            </application>
          </applications>
        </item>
      </items>
    </template>
  </templates>
</zabbix_export>