Skip to header Skip to main navigation Skip to main content Skip to footer

Search form

Site branding

Home
What's up, home?

Main navigation

  • Home
  • Story mode
  • About
  • Features
  • Hardware list
  • Videos
  • GitHub (opens in new tab)
  • Daily AI generated stories (opens in new tab)

Zabbix 8.0 APM NetFlow & SIEM - What's up, home? part 152

Breadcrumbs

Breadcrumb

  • Home
  • Zabbix 8.0 APM NetFlow & SIEM - What's up, home? part 152

Main page content

By whatsuphome | 9:27 PM EEST, Wed October 21, 2026

TL;DR

Zabbix 8.0 can already provide NetFlow and SIEM with some help from LLMs.
Zabbix as SIEM and NetFlow - What's up, home? part 152

 

 

Zabbix 8.0 brings in APM, which according to Alexei Vladishev himself opens door to future applications, such as NetFlow and SIEM. Neither of these are yet present in Zabbix 8.0, but hey, we have our little AI with their little minds to help me out.

Here are my early tests what one can do with just prompting in Claude or Opencode. Note that these are not official Zabbix widgets or functionality in any way, just me prompting – I'm sure that whenever Zabbix actually ships with these features, they are more awesome than my morning coffee and nocturnal prompting.

NetFlow

I have had NetFlow at home before with ElastiFlow. However, now that we have Zabbix 8.0 approaching the first stable release, here's something I made. Not going to explain any further, just look at the screenshots. My ASUS AX-59U with Openwrt is sending NetFlow to my Zabbix proxy (which also has OTel-contrib and its NetFlow listener) with softflowd, and here's the parsed result.

NetFlow widgets page 1

 

 

NetFlow widgets page 2

 

NetFlow page 3

 

NetFlow widgets page 4

 

NetFlow widgets page 5, snarky AI chat agent

 

SIEM

And here's another one, SIEM. So far it's a primitive one, but goes as a PoC. Basically logs are ingested from various sources and used in APM logs, then converted to visualizations like this. Underneath my Raspberry Pi 5 runs syslog-ng, receiving logs from my network and shoveling them towards Zabbix proxy OTel collector.

SIEM dashbpard page 1

 

SIEM dashboard page 2

These simple PoCs prove that there's a bright new future ahead for Zabbix with its new APM!

whatsuphome
zabbix80
apm
siem
netflow
widgets
ai
llms
  • Allowed HTML tags: <a href hreflang> <em> <strong> <cite> <blockquote cite> <code> <ul type> <ol start type> <li> <dl> <dt> <dd> <h2 id> <h3 id> <h4 id> <h5 id> <h6 id>
  • Lines and paragraphs break automatically.
  • Web page addresses and email addresses turn into links automatically.
Zabbix 8.0 can already provide NetFlow and SIEM with some help from LLMs.

Search

Who am I?

  • Janne Pikkarainen from Finland 🇫🇮
  • Began with computers in 1986 with C64
  • Doing IT for living since 1999
  • Principal Site Reliability Engineer at Forcepoint
  • A Zabbix Summit speaker every year since 2022
  • Walking, talking Zabbix commercial

Support my project

Buy me a coffee 

Footer menu

  • Contact

What's up, home? | Janne Pikkarainen | contact(at)whatsuphome.fi | 2022 - 2026

Developed and Designed by Janne Pikkarainen