Integrations¶
Overview¶
Integrations connects MonsterOps to external monitoring and data services: Zabbix (metrics), Graylog (log/event forwarding over GELF), and MaxMind GeoIP2 (geolocation for the auth log and sessions).
Where things are¶
- Zabbix — send metrics to a Zabbix server (Zabbix sender).
- Graylog (GELF) — forward events to Graylog over GELF/UDP; pairs with Webhooks.
- Data Sources → MaxMind GeoIP2 — upload a local
GeoLite2-City.mmdb. Geolocation is resolved locally from the mmdb — no API calls at query time.
Common tasks¶
- Enable flags/city in the auth log — Data Sources → MaxMind GeoIP2 → create a free MaxMind
account, download
GeoLite2-City.mmdb, upload it via the guided modal. MonsterOps validates it and hot-reloads the reader with no restart. (Or setMONSTEROPS_GEOIP_DBto a file path.) - Ship events to Graylog — configure the GELF host/port; events flow from the event bus.
- Feed Zabbix — point the Zabbix integration at your server.
Problems you may hit¶
- GeoIP not resolving — the mmdb isn't loaded (upload it, or set
MONSTEROPS_GEOIP_DB) or the file is the wrong MaxMind edition (needs GeoLite2-City). - Graylog receives nothing — wrong host/port or UDP blocked in the path; confirm reachability.
- The public build has no bundled GeoIP database — MaxMind's license means you download your own; it's never shipped with MonsterOps.
Related¶
- Logs — where geolocation shows up
- Webhooks — the event source for GELF
- Configuration —
MONSTEROPS_GEOIP_DB
MonsterOps