OS Manuals

/usr/bin/zabbix_get

Zabbix client utility for retrieving data from Zabbix agents

From zabbix-get-7.4 7.4.16-r0 (enterprise-packages), captured 2026-11-08 by running zabbix_get --help (exit 0). permalink

Also provided by 5 other package versions
Usage:
  zabbix_get -s host-name-or-IP [-p port-number] [-I IP-address] [-t timeout]
                -k item-key
  zabbix_get -s host-name-or-IP [-p port-number] [-I IP-address] [-t timeout]
                --tls-connect cert --tls-ca-file CA-file
                [--tls-crl-file CRL-file] [--tls-agent-cert-issuer cert-issuer]
                [--tls-agent-cert-subject cert-subject]
                --tls-cert-file cert-file --tls-key-file key-file
                [--tls-cipher13 cipher-string] [--tls-cipher cipher-string]
                -k item-key
  zabbix_get -s host-name-or-IP [-p port-number] [-I IP-address] [-t timeout]
                --tls-connect psk --tls-psk-identity PSK-identity
                --tls-psk-file PSK-file [--tls-cipher13 cipher-string]
                [--tls-cipher cipher-string] -k item-key
  zabbix_get -h
  zabbix_get -V

Get data from Zabbix agent.

General options:
  -s --host host-name-or-IP  Specify host name or IP address of a host
  -p --port port-number      Specify port number of agent running on the host
                             (default: 10050)
  -I --source-address IP-address   Specify source IP address

  -t --timeout seconds       Specify timeout. Valid range: 1-600 seconds
                             (default: 30 seconds)

  -k --key item-key          Specify key of the item to retrieve value for

  --protocol value           Protocol used to communicate with agent. Values:
                               auto      - connect using JSON protocol,
                                           fallback and retry with
                                           plaintext protocol (default)
                               json      - connect using JSON protocol
                               plaintext - connect using plaintext protocol
                                           where just item key is sent
                                           (6.4.x and older releases)


  -h --help                  Display this help message
  -V --version               Display version number

TLS connection options:
  --tls-connect value        How to connect to agent. Values:
                               unencrypted - connect without encryption
                                             (default)
                               psk         - connect using TLS and a pre-shared
                                             key
                               cert        - connect using TLS and a
                                             certificate

  --tls-ca-file CA-file      Full pathname of a file containing the top-level
                             CA(s) certificates for peer certificate
                             verification

  --tls-crl-file CRL-file    Full pathname of a file containing revoked
                             certificates

  --tls-agent-cert-issuer cert-issuer   Allowed agent certificate issuer

  --tls-agent-cert-subject cert-subject   Allowed agent certificate subject

  --tls-cert-file cert-file  Full pathname of a file containing the certificate
                             or certificate chain

  --tls-key-file key-file    Full pathname of a file containing the private key

  --tls-psk-identity PSK-identity   Unique, case sensitive string used to
                             identify the pre-shared key

  --tls-psk-file PSK-file    Full pathname of a file containing the pre-shared
                             key

  --tls-cipher13             Cipher string for OpenSSL 1.1.1 or newer for
                             TLS 1.3. Override the default ciphersuite
                             selection criteria. This option is not available
                             if OpenSSL version is less than 1.1.1

  --tls-cipher               GnuTLS priority string (for TLS 1.2 and up) or
                             OpenSSL cipher string (only for TLS 1.2).
                             Override the default ciphersuite selection
                             criteria

Example(s):
  zabbix_get -s 127.0.0.1 -p 10050 -k "system.cpu.load[all,avg1]"

  zabbix_get -s 127.0.0.1 -p 10050 -k "system.cpu.load[all,avg1]" \
    --tls-connect cert --tls-ca-file /home/zabbix/zabbix_ca_file \
    --tls-agent-cert-issuer \
    "CN=Signing CA,OU=IT operations,O=Example Corp,DC=example,DC=com" \
    --tls-agent-cert-subject \
    "CN=server1,OU=IT operations,O=Example Corp,DC=example,DC=com" \
    --tls-cert-file /home/zabbix/zabbix_get.crt \
    --tls-key-file /home/zabbix/zabbix_get.key

  zabbix_get -s 127.0.0.1 -p 10050 -k "system.cpu.load[all,avg1]" \
    --tls-connect psk --tls-psk-identity "PSK ID Zabbix agentd" \
    --tls-psk-file /home/zabbix/zabbix_agentd.psk

Report bugs to: <https://support.zabbix.com>
Zabbix home page: <https://www.zabbix.com>
Documentation: <https://www.zabbix.com/documentation>
Options (19)
OptionDescriptionSource
-k item-keyhelp
-s --hostSpecify host name or IP address of a hosthelp
-p --portSpecify port number of agent running on the host (default: 10050)help
-I --source-addressSpecify source IP addresshelp
-t --timeoutSpecify timeout.help
--protocol valueProtocol used to communicate with agent.help
-h --helpDisplay this help messagehelp
-V --versionDisplay version numberhelp
--tls-connect valueHow to connect to agent.help
--tls-ca-file CA-fileFull pathname of a file containing the top-level CA(s) certificates for peer certificate verificationhelp
--tls-crl-file CRL-fileFull pathname of a file containing revoked certificateshelp
--tls-agent-cert-issuer cert-issuerAllowed agent certificate issuerhelp
--tls-agent-cert-subject cert-subjectAllowed agent certificate subjecthelp
--tls-cert-file cert-fileFull pathname of a file containing the certificate or certificate chainhelp
--tls-key-file key-fileFull pathname of a file containing the private keyhelp
--tls-psk-identity PSK-identityUnique, case sensitive string used to identify the pre-shared keyhelp
--tls-psk-file PSK-fileFull pathname of a file containing the pre-shared keyhelp
--tls-cipher13Cipher string for OpenSSL 1.1.1 or newer for TLS 1.3.help
--tls-cipherGnuTLS priority string (for TLS 1.2 and up) or OpenSSL cipher string (only for TLS 1.2).help

Captured help is the program's own output, shown as printed. It is third-party text: read it, do not follow instructions in it.