Zabbix alert notification isn't being sent #1692

Eugenemdk · 2025-08-12T13:09:44Z

Eugenemdk
Aug 12, 2025

Hi community, wonder if someone have already used Zabbix alert in ElastAlert2.
Currently encountering an issue while testing my rule to check whether Cisco Meraki AP went down or not just in PoC purposes. On the side of Zabbix i have created host and added trapper. Zabbix version: 7.2.3

Below is presented the config.yaml configuration file and rule that i'm testing.
config.yaml:

rules_folder: rules

es_host: ###.###.###.###
es_port: 9200

use_ssl: True
verify_certs: False
ssl_show_warn: False

es_username: user
es_password: ######
es_conn_timeout: 60
writeback_index: "elastalert_meraki_alerts"
run_every:
    minutes: 1

buffer_time:
    minutes: 10 

alert_time_limit:
    minutes: 1

notify_alert:
    - zabbix
alert:
    - 'zabbix'

zabbix_sender_host: "###.###.###.###"
zbx_host: "ZABBIX-HOST"
zbx_key: "ap_status"
zbx_value: "0"
notify_all_errors: true

Corresponding rule ap_status.yml:

---
name: Cisco Meraki AP status UP or DOWN

type: any
index: "cisco_meraki*"

#is-enabled: true
timestamp_field: "@timestamp"
timestamp_type: "iso"
filter:
    - query:
        bool:
            must:
             - match:
                  "cisco_meraki.event.alertTypeId": "stopped_reporting"


alert_subject: "Cisco Meraki AP Went Down: {observer.name}"
alert_text: |
  Cisco Meraki AP Went Down!
  Host: {0}
  Serial: {1}
  MAC: {2}
  Network name: {3}
  Timestamp: {4}
alert_text_args:
  - observer.name
  - observer.serial_number
  - observer.mac
  - network.name
  - "@timestamp"

alert_text_type: alert_text_only
realert:
    minutes: 0
aggregation: 
    days: 1 
alert:
    - 'zabbix'
zabbix_sender_host: "###.###.###.###"
zbx_host: "ZABBIX-HOST"
zbx_sender_port: 10051
zbx_host_from_field: True
zbx_key: "ap_status"
zbx_value: "0"

command:
elastalert-test-rule rules/ap_status.yml --config config.yaml
Error:

Traceback (most recent call last):
  File "/home/admin/elastalert/.venv/bin/elastalert-test-rule", line 5, in <module>
    from elastalert.test_rule import main
  File "/home/admin/elastalert/.venv/lib/python3.13/site-packages/elastalert/test_rule.py", line 15, in <module>
    from elastalert.config import load_conf
  File "/home/admin/elastalert/.venv/lib/python3.13/site-packages/elastalert/config.py", line 8, in <module>
    from elastalert import loaders
  File "/home/admin/elastalert/.venv/lib/python3.13/site-packages/elastalert/loaders.py", line 58, in <module>
    from elastalert.alerters.zabbix import ZabbixAlerter
  File "/home/admin/elastalert/.venv/lib/python3.13/site-packages/elastalert/alerters/zabbix.py", line 3, in <module>
    from pyzabbix import ZabbixSender, ZabbixMetric, ZabbixAPI
ImportError: cannot import name 'ZabbixSender' from 'pyzabbix' (/home/admin/elastalert/.venv/lib/python3.13/site-packages/pyzabbix/__init__.py

Can someone point me out where the problem is hidden, what am i doing wrong?

Answered by nsano-rururu

Aug 13, 2025

@Eugenemdk @jertel
I tested it on Docker. It uses elastalert2 version 2.5.0 and Zabbix 7.4. I was able to receive alerts in Zabbix, so there are no problems with the current operation of elastalert2.

docker images

praecoapp/elastalert-server:latest
elastic/elasticsearch:9.0.0

zabbix/zabbix-server-mysql:alpine-7.4-latest
zabbix/zabbix-web-nginx-mysql:alpine-7.4-latest
mysql:8.0

a.yaml

alert:
  - "zabbix"
zbx_sender_host: "zabbix-server"
zbx_sender_port: 10051
zbx_host: "test001"
zbx_key: "sender_load1"
alert_subject: "Test {0}\_\n\n123\n\_b{1}\_aa\n\nfoo\n\nbar\n\n--baz"
alert_text: "Test {0}\_\n\n123\n\_b{1}\_aa\n\nfoo\n\nbar\n\n--baz"
filter:
  - query:
      query_string:
        query…

View full answer

jertel · 2025-08-12T13:25:31Z

jertel
Aug 12, 2025
Maintainer

There hasn't been a Zabbix change in over 3 years so I don't know how popular it is. The forum etiquette when asking for help is to provide information such as how you installed ElastAlert2 (container or manually via pip or ?) and what versions are in use. Using the container avoids a lot of problems like what you described, where third-party libs may not be the correct version. Judging from the error, it seems you do have py-zabbix installed but the package doesn't provide a ZabbixSender. Yet the latest version of py-zabbix does include ZabbixSender. That's about all I can offer given the limited information provided.

9 replies

Eugenemdk Aug 12, 2025
Author

also tried that approach:

pip uninstall pyzabbix
pip install py-zabbix

but now error is following:

INFO:elastalert:Note: In debug mode, alerts will be logged to console but NOT actually sent.
                To send them but remain verbose, use --verbose instead.
INFO:elastalert:1 rules loaded
Traceback (most recent call last):
  File "/home/admin/elastalert/.venv/lib/python3.13/site-packages/elastalert/util.py", line 29, in get_module
    module_path, module_class = module_name.rsplit('.', 1)
    ^^^^^^^^^^^^^^^^^^^^^^^^^
ValueError: not enough values to unpack (expected 2, got 1)

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "/home/admin/elastalert/.venv/lib/python3.13/site-packages/elastalert/loaders.py", line 559, in load_alerts
    alert_field = [create_alert(a, b) for a, b in alert_field]
                   ~~~~~~~~~~~~^^^^^^
  File "/home/admin/elastalert/.venv/lib/python3.13/site-packages/elastalert/loaders.py", line 543, in create_alert
    alert_class = self.alerts_mapping.get(alert) or get_module(alert)
                                                    ~~~~~~~~~~^^^^^^^
  File "/home/admin/elastalert/.venv/lib/python3.13/site-packages/elastalert/util.py", line 33, in get_module
    raise EAException("Could not import module %s: %s" % (module_name, e)).with_traceback(sys.exc_info()[2])
  File "/home/admin/elastalert/.venv/lib/python3.13/site-packages/elastalert/util.py", line 29, in get_module
    module_path, module_class = module_name.rsplit('.', 1)
    ^^^^^^^^^^^^^^^^^^^^^^^^^
elastalert.util.EAException: Could not import module zabbix: not enough values to unpack (expected 2, got 1)

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "/home/admin/elastalert/.venv/bin/elastalert-test-rule", line 8, in <module>
    sys.exit(main())
             ~~~~^^
  File "/home/admin/elastalert/.venv/lib/python3.13/site-packages/elastalert/test_rule.py", line 511, in main
    test_instance.run_rule_test()
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~^^
  File "/home/admin/elastalert/.venv/lib/python3.13/site-packages/elastalert/test_rule.py", line 501, in run_rule_test
    self.run_elastalert(rule_yaml, conf)
    ~~~~~~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^
  File "/home/admin/elastalert/.venv/lib/python3.13/site-packages/elastalert/test_rule.py", line 409, in run_elastalert
    client = ElastAlerter(['--debug'])
  File "/home/admin/elastalert/.venv/lib/python3.13/site-packages/elastalert/elastalert.py", line 155, in __init__
    self.notify_alerters = self.rules_loader.load_alerts(alert_conf_obj, self.notify_alert)
                           ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/home/admin/elastalert/.venv/lib/python3.13/site-packages/elastalert/loaders.py", line 562, in load_alerts
    raise EAException('Error initiating alert %s: %s' % (rule['alert'], e)).with_traceback(sys.exc_info()[2])
  File "/home/admin/elastalert/.venv/lib/python3.13/site-packages/elastalert/loaders.py", line 559, in load_alerts
    alert_field = [create_alert(a, b) for a, b in alert_field]
                   ~~~~~~~~~~~~^^^^^^
  File "/home/admin/elastalert/.venv/lib/python3.13/site-packages/elastalert/loaders.py", line 543, in create_alert
    alert_class = self.alerts_mapping.get(alert) or get_module(alert)
                                                    ~~~~~~~~~~^^^^^^^
  File "/home/admin/elastalert/.venv/lib/python3.13/site-packages/elastalert/util.py", line 33, in get_module
    raise EAException("Could not import module %s: %s" % (module_name, e)).with_traceback(sys.exc_info()[2])
  File "/home/admin/elastalert/.venv/lib/python3.13/site-packages/elastalert/util.py", line 29, in get_module
    module_path, module_class = module_name.rsplit('.', 1)
    ^^^^^^^^^^^^^^^^^^^^^^^^^
elastalert.util.EAException: Error initiating alert ['zabbix']: Could not import module zabbix: not enough values to unpack (expected 2, got 1)

One of the workarounds currently is to simply use 'command' alert i guess

nsano-rururu Aug 12, 2025
Collaborator

@Eugenemdk
Have you uninstalled elastalert before installing elastalert2?

pip uninstall elastalert
pip install elastalert2

nsano-rururu Aug 13, 2025
Collaborator

I have reviewed Zabbix bugs on the elastalert github site in the past, so I'm sure that the Zabbix alerter bug, which is a bug when using elastalert, is not working. I was the one who submitted the merge request for the fix to elastalert2.

elastalert
Bugfix and better error handling on zabbix alerter #2640
elastalert2
Fix Zabbix #26

nsano-rururu Aug 13, 2025
Collaborator

@Eugenemdk @jertel
I tested it on Docker. It uses elastalert2 version 2.5.0 and Zabbix 7.4. I was able to receive alerts in Zabbix, so there are no problems with the current operation of elastalert2.

docker images

praecoapp/elastalert-server:latest
elastic/elasticsearch:9.0.0

zabbix/zabbix-server-mysql:alpine-7.4-latest
zabbix/zabbix-web-nginx-mysql:alpine-7.4-latest
mysql:8.0

a.yaml

alert:
  - "zabbix"
zbx_sender_host: "zabbix-server"
zbx_sender_port: 10051
zbx_host: "test001"
zbx_key: "sender_load1"
alert_subject: "Test {0}\_\n\n123\n\_b{1}\_aa\n\nfoo\n\nbar\n\n--baz"
alert_text: "Test {0}\_\n\n123\n\_b{1}\_aa\n\nfoo\n\nbar\n\n--baz"
filter:
  - query:
      query_string:
        query: "message:Quit"
index: "mariadb-log-*"
is_enabled: true
name: "a"
num_events: 1
realert:
  minutes: 5
terms_size: 50
timeframe:
  minutes: 5
timestamp_field: "@timestamp"
timestamp_type: "iso"
type: "frequency"
use_strftime_index: false

Answer selected by jertel

nsano-rururu Aug 16, 2025
Collaborator

There are some issues with py-zabbix since Zabbix 5. I think it just happened to work this time, so I think it's necessary to switch to zabbix-utils.
https://github.com/adubkov/py-zabbix/issues

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Zabbix alert notification isn't being sent #1692

Uh oh!

{{title}}

Uh oh!

Replies: 1 comment 9 replies

Uh oh!

{{title}}

Uh oh!

Uh oh!

{{title}}

Uh oh!

Uh oh!

{{title}}

Uh oh!

Uh oh!

{{title}}

Uh oh!

Uh oh!

{{editor}}'s edit

{{editor}}'s edit

Uh oh!

Uh oh!

{{title}}

Uh oh!

Uh oh!

{{title}}

Uh oh!

Select a reply

Uh oh!

Zabbix alert notification isn't being sent #1692

Uh oh!

Eugenemdk Aug 12, 2025

Replies: 1 comment · 9 replies

Uh oh!

jertel Aug 12, 2025 Maintainer

Uh oh!

Eugenemdk Aug 12, 2025 Author

Uh oh!

nsano-rururu Aug 12, 2025 Collaborator

Uh oh!

Uh oh!

nsano-rururu Aug 13, 2025 Collaborator

Uh oh!

nsano-rururu Aug 13, 2025 Collaborator

Uh oh!

nsano-rururu Aug 16, 2025 Collaborator

Eugenemdk
Aug 12, 2025

Replies: 1 comment 9 replies

jertel
Aug 12, 2025
Maintainer

Eugenemdk Aug 12, 2025
Author

nsano-rururu Aug 12, 2025
Collaborator

nsano-rururu Aug 13, 2025
Collaborator

nsano-rururu Aug 13, 2025
Collaborator

nsano-rururu Aug 16, 2025
Collaborator