Functions to monitor system time:
Fuzztime (N) function:
Explanation: If the system time gap between the monitored host and the Zabbix is less than or equal to n seconds, then 1 is returned, otherwise 0
Zabbix Monitoring system time with the key is System.localtime, return the current system time, and configure Tigger Alarm is the Fuzzytime (N) method, the method is to return the system time and monitoring server time to compare, if the gap is greater than n the alarm.
An expression: {hsotname:system.localtime.fuzzytime (300)}=0
Explanation: If the system time and Zabbxi_server Gap is greater than 300s, then the alarm
However, there are two problems in the actual operation:
1. The monitoring server is not necessarily an NTP server: In this case, the system time is compared to the non-NTP server time.
2. Take the time to monitor the system, and then return to the monitoring server, Zabbix due to a large number of database writes, more than 2.0 version introduced the cache mechanism, that is, the system time back to put in the cache for a while to compare with the local system time. So when the number of monitoring items is large, or monitoring the delay queue. will produce false positives. Therefore, it is not recommended to use Zabbix's own system.localtime to monitor the time of the server when the server time requirement is high.
Zabbbix System time Monitoring