zabbix问题事件统计/按月统计/生成表格/Python调用Zabbix3.4api

背景：

    因业务需要，每月初需要为客户提供指定预警等级的事件，这里选择从evnet.get中进行获取。

发现的坑：

    目前维护多套zabbix服务,并且版本不同..， POC进行时使用的是5.4.2, 正式环境3.4.x， 3.4版本中的event.get是没有name属性的，

    最后我是通过trigger拿到的信息，但因为tigger中带着{HOST.NAME} 或 {HOST.CONN} 这块儿通过ip类的信息进行了正则替换，具体如代码，比较简单，主要是API使用思路。

目的：

    获取事件名称、开始时间、 主机名称和IP信息，整理后以表格展示

调取结构图 ：

代码环境：

    Python3.8

代码依赖包：

    pip install openpyxl

    pip install pandas

    pip install requests

代码： 

import requests
import json
import pandas as pd
import time
import re

def stamp2time(timestamp): #时间戳转日期函数
    time_local = time.localtime(int(timestamp))
    dt = time.strftime("%Y-%m-%d %H:%M:%S", time_local)
    return dt

class zabbix_api(object):
    def __init__(self):
        self.header = {"Content-Type": "application/json-rpc"}
        self.url = 'https://zabbix.xxx.com.cn/zabbix/api_jsonrpc.php'
        self.auth = self.zabbix_login()

    def zabbix_login(self):
        data = {
            "jsonrpc": "2.0",
            "method": "user.login",
            "params": {
                "user": "xxx",  # zabbix登录用户名
                "password": "xxxx"  # zabbix登录密码
            },
            "id": 1,
            "auth": None,
        }
        return self.requestJson(data)

    def getHostsip(self, hostid):
        data = {'jsonrpc': '2.0',
                  'method': 'host.get',
                  'params': {
                      'output': ["hostid", "host", "name"],
                      'selectInterfaces': ["ip"],
                      'hostids': hostid
                  },
                  'auth': self.auth,
                  'id': '10'
                  }
        output = self.requestJson(data)
        return {"hostname": output[0]['host'], "ip": output[0]['interfaces'][0]['ip']}

    def getHosts(self):
        hostsip = []
        data = host_data = {
            "jsonrpc": "2.0",
            "method": "host.get",
            "params": {},
            "auth": self.auth,
            "id": 1
        }
        output = self.requestJson(data)
        for hosts in output[0:]:
            hostsip.append(hosts['interfaces'])
        return hostsip

    def getEvents(self):
        hostsip = []
        data = {
            "jsonrpc": "2.0",
            "method": "event.get",
            "params": {
                "output": ["clock"],  # 输出内容, 这里原始数据只需要时间
                "time_from": "1625760000",  # 开始时间
                "time_till": "1628438400",     # 结束时间
                "selectHosts": "extend",         # 显示主机相关信息
                "value": 1,  # 只显示问题事件，不显示恢复时间（默认：都显示）
                # "select_alerts": "extend",  # 通过此参数获取次事件触发的报警信息
                "selectRelatedObject": "extend",   # 通过此参数扩展获得对应触发器信息
                "severities": [2, 3, 4, 5],    # 获取等级
                "sortfield": ["clock", "eventid"],  # 排序属性
                "sortorder": "desc"
            },
            "auth": self.auth,
            "id": 2
        }
        output = self.requestJson(data)
        return output

    def getTriggers(self, triggerid):
        data = {
            "jsonrpc": "2.0",
            "method": "trigger.get",
            "params": {
                "triggerids": triggerid,
                "output": [
                    "triggerid",
                    "description",
                    "name"
                ],
                "sortfield": "priority",
                "sortorder": "DESC"
            },
            "auth": self.auth,
            "id": 1
        }
        output = self.requestJson(data)
        return output

    def requestJson(self, json_values):
        r = json.loads(requests.post(self.url, data=json.dumps(json_values), headers=self.header).content.decode())
        return r["result"]


z = zabbix_api()
event_list = []
print(len(z.getEvents()))
data_lens = 0
for event in z.getEvents():
    data_lens += 1
    event_dict = {}
    if event['hosts']:
        # print(event)
        hostid = event['hosts'][0]['hostid']
        event_dict['clock'] = event['clock']
        event_dict['hostname'] = z.getHostsip(hostid)['hostname']
        event_dict['ip'] = z.getHostsip(hostid)['ip']
        trigger_name = event['relatedObject']['description']
        if re.findall("{HOST.NAME}", trigger_name):
            event_dict['name'] = trigger_name.replace("{HOST.NAME}", z.getHostsip(hostid)['hostname'])
        elif re.findall("{HOST.CONN}", trigger_name):
            event_dict['name'] = trigger_name.replace("{HOST.CONN}", z.getHostsip(hostid)['ip'])
        else:
            event_dict['name'] = trigger_name
        print(event_dict)
        # event_dict['name'] = event['name']
        event_list.append(event_dict)

df = pd.DataFrame(event_list)
print(df)
df['clock'] = df['clock'].apply(stamp2time)
df.to_excel("result_xlsx.xlsx", index=0)

有待改进：

    - 各个参数的传递

    - 事件数量过多的话，整个统计过程会非常缓慢，需要进行多线程优化

参考：

    - 获取zabbix 所有的hostid

    https://www.jianshu.com/p/7a8a765b5992?utm_campaign=maleskine&utm_content=note&utm_medium=seo_notes&utm_source=recommendation

    

    - zabbix3.4  event.get

    https://www.zabbix.com/documentation/3.4/manual/api/reference/event/get

    - zabbix3.4 host.get    

    https://www.zabbix.com/documentation/3.4/manual/api/reference/host/get

    - pandas 时间戳与日期互转方法

    https://zhuanlan.zhihu.com/p/138130809

    - python写入数据到csv或xlsx文件的3种方法

    https://www.jb51.net/article/168327.htm

    - 在线时间戳转换工具

    https://tool.lu/timestamp/