Zabbix Multi-Tenant Ticketing Integration

Need more extended monitoring for some devices, but don’t want to pay for Auvik yet? Surprisingly, you can get Zabbix to work in a multi-tenant setup. Here’s how we did it.

Multi-tenant Zabbix for MSPs

Tags can be used for many things, including clients. At each host, add a tag named customer. For all devices, put a unique identifier that can be looked up in your PSA in that tag. We use the Company ID.

The Workflow

Workflow Setup

Copy the workflow to your n8n instance and modify these items on the workflow below.

Open Get a company and change the lookup to match the tag name and lookup you are doing. By default we lookup by Company Identifier in the Zabbix tag customer.
Modify Filter Clients to only include customers you want alerts for.
Modify Create a ticket to use the correct Service Board and new Status.
Modify Resolve ticket to have the correct Service Board and resolved Status.

{
  "nodes": [
    {
      "parameters": {
        "httpMethod": "POST",
        "path": "00000000-bf3f-f3fc-3fcd-fcdd92c14a1e-zabbix",
        "responseMode": "responseNode",
        "options": {}
      },
      "type": "n8n-nodes-base.webhook",
      "typeVersion": 2.1,
      "position": [
        0,
        -80
      ],
      "id": "c5732ed0-39ac-4afd-85cc-d7f112044958",
      "name": "Webhook",
      "webhookId": "00000000-bf3f-f3fc-3fcd-fcdd92c14a1e"
    },
    {
      "parameters": {
        "dataToSave": {
          "values": [
            {
              "key": "=event_id",
              "value": "={{ $json.body.event_id }}"
            },
            {
              "key": "trigger_id",
              "value": "={{ $json.body.trigger_id }}"
            },
            {
              "key": "host_id",
              "value": "={{ $json.body.host_id }}"
            },
            {
              "key": "trigger_name",
              "value": "={{ $json.body.trigger_name }}"
            },
            {
              "key": "customer",
              "value": "={{ $json.body.event_tags.customer }}"
            },
            {
              "key": "ticket",
              "value": "={{ $json.body.event_tags.ticket }}"
            }
          ]
        }
      },
      "id": "e3791204-9cfd-48cf-b4dd-dfd9d7239613",
      "name": "Execution Data",
      "type": "n8n-nodes-base.executionData",
      "typeVersion": 1,
      "position": [
        448,
        -176
      ]
    },
    {
      "parameters": {
        "resource": "company",
        "operation": "get",
        "company": {
          "__rl": true,
          "value": "={{ $json.body.event_tags.customer }}",
          "mode": "identifier"
        },
        "fields": [
          "id",
          "identifier",
          "name",
          "__types,$$types"
        ]
      },
      "type": "@mspcopilot/n8n-nodes-connectwise.connectWisePsa",
      "typeVersion": 1,
      "position": [
        448,
        16
      ],
      "id": "b102ecd6-a7df-4884-a493-69d21e3999c1",
      "name": "Get a company",
      "alwaysOutputData": true,
      "credentials": {
        "connectWisePsaApi": {
          "id": "YOUR_CREDENTIAL_ID",
          "name": "API account"
        }
      }
    },
    {
      "parameters": {
        "conditions": {
          "options": {
            "caseSensitive": true,
            "leftValue": "",
            "typeValidation": "strict",
            "version": 2
          },
          "conditions": [
            {
              "id": "dd596163-a16d-46b0-b2fc-105921ff409d",
              "leftValue": "={{ $json.__types._1.value }}",
              "rightValue": "",
              "operator": {
                "type": "boolean",
                "operation": "true",
                "singleValue": true
              }
            }
          ],
          "combinator": "and"
        },
        "options": {}
      },
      "type": "n8n-nodes-base.filter",
      "typeVersion": 2.2,
      "position": [
        896,
        -80
      ],
      "id": "0833c813-c24c-4285-96cf-060aaa1a5af1",
      "name": "Filter Clients"
    },
    {
      "parameters": {
        "conditions": {
          "options": {
            "caseSensitive": true,
            "leftValue": "",
            "typeValidation": "strict",
            "version": 2
          },
          "conditions": [
            {
              "id": "3f22d9c3-6884-414b-8f19-d64091cd2a7f",
              "leftValue": "={{ $json.id }}",
              "rightValue": "",
              "operator": {
                "type": "number",
                "operation": "exists",
                "singleValue": true
              }
            }
          ],
          "combinator": "and"
        },
        "options": {}
      },
      "type": "n8n-nodes-base.if",
      "typeVersion": 2.2,
      "position": [
        672,
        16
      ],
      "id": "f3bb5cfb-5071-440f-a5e2-e89a257ee0f9",
      "name": "If Company Found"
    },
    {
      "parameters": {
        "errorMessage": "Company ID Not Found"
      },
      "id": "bf2e0d72-8d6a-43bb-a55f-25e948ebeba8",
      "name": "Company ID Not Found",
      "type": "n8n-nodes-base.stopAndError",
      "typeVersion": 1,
      "position": [
        896,
        112
      ]
    },
    {
      "parameters": {
        "rules": {
          "values": [
            {
              "conditions": {
                "options": {
                  "caseSensitive": true,
                  "leftValue": "",
                  "typeValidation": "loose",
                  "version": 1
                },
                "conditions": [
                  {
                    "leftValue": "={{ $('Webhook').item.json.body.trigger_value }}",
                    "rightValue": "1",
                    "operator": {
                      "type": "string",
                      "operation": "equals"
                    },
                    "id": "54338069-b1c4-4be1-af0f-5f3a6837039e"
                  }
                ],
                "combinator": "and"
              },
              "renameOutput": true,
              "outputKey": "PROBLEM"
            },
            {
              "conditions": {
                "options": {
                  "caseSensitive": true,
                  "leftValue": "",
                  "typeValidation": "loose",
                  "version": 1
                },
                "conditions": [
                  {
                    "id": "cc3ee42c-37b2-483c-adc7-76fb0a946932",
                    "leftValue": "={{ $('Webhook').item.json.body.trigger_value }}",
                    "rightValue": "=0",
                    "operator": {
                      "type": "string",
                      "operation": "equals",
                      "name": "filter.operator.equals"
                    }
                  }
                ],
                "combinator": "and"
              },
              "renameOutput": true,
              "outputKey": "OK"
            }
          ]
        },
        "options": {
          "fallbackOutput": "extra",
          "looseTypeValidation": true
        }
      },
      "id": "41625223-e85b-4279-866b-1a2fcc6a6869",
      "name": "Switch",
      "type": "n8n-nodes-base.switch",
      "typeVersion": 3,
      "position": [
        1120,
        -96
      ],
      "notes": "Everything from Zabbix is a string."
    },
    {
      "parameters": {
        "errorMessage": "=Unknown Trigger Status: {{ $json.alert.trigger_status }}"
      },
      "id": "8405806a-d9a0-49b5-9e54-f0fafd0ad78e",
      "name": "Stop and Error",
      "type": "n8n-nodes-base.stopAndError",
      "typeVersion": 1,
      "position": [
        1344,
        112
      ]
    },
    {
      "parameters": {
        "resource": "ticket",
        "summary": "=Zabbix - {{ $('Parse event').item.json.body.host_name }} - {{ $('Parse event').item.json.body.event_name.substring(0,80) }}",
        "company": "={{ $json.id }}",
        "board": 32,
        "status": 119,
        "priority": "={{ $('Parse event').item.json.body.event_severity }}",
        "initialDescription": "={{ $('Parse event').item.json.body.alert_message.replace(/\\r\\n?/g, \"\\n\") }}\n{{ $('Parse event').item.json.zabbix_url }}",
        "additionalTicketFields": {}
      },
      "type": "@mspcopilot/n8n-nodes-connectwise.connectWisePsa",
      "typeVersion": 1,
      "position": [
        1792,
        -272
      ],
      "id": "1cdd5d81-9a2c-4e1f-ad42-96336ac38e2f",
      "name": "Create a ticket",
      "credentials": {
        "connectWisePsaApi": {
          "id": "YOUR_CREDENTIAL_ID",
          "name": "API account"
        }
      }
    },
    {
      "parameters": {
        "respondWith": "json",
        "responseBody": "={\n  \"tags\": {\n    \"ticket\": {{ $json.id }}\n  }\n}",
        "options": {}
      },
      "id": "6df74d5c-590f-4165-b6ea-44a1b1c07275",
      "name": "Return Tags",
      "type": "n8n-nodes-base.respondToWebhook",
      "typeVersion": 1,
      "position": [
        2016,
        -176
      ],
      "notesInFlow": true,
      "notes": "Send ticket number back to Zabbix"
    },
    {
      "parameters": {
        "conditions": {
          "options": {
            "caseSensitive": true,
            "leftValue": "",
            "typeValidation": "strict",
            "version": 2
          },
          "conditions": [
            {
              "id": "4346f584-40b7-4abe-a395-5544c5851b2e",
              "leftValue": "={{ $('Parse event').item.json.body.event_tags.ticket }}",
              "rightValue": "",
              "operator": {
                "type": "string",
                "operation": "notEmpty",
                "singleValue": true
              }
            }
          ],
          "combinator": "and"
        },
        "options": {}
      },
      "type": "n8n-nodes-base.if",
      "typeVersion": 2.2,
      "position": [
        1344,
        -80
      ],
      "id": "e4993a48-93c5-4af1-a7c2-f51d473b4c64",
      "name": "If Existing Ticket"
    },
    {
      "parameters": {
        "resource": "ticket",
        "operation": "update",
        "id": "={{ $json.ticketId }}",
        "board": 32,
        "status": 122,
        "additionalTicketFields": {}
      },
      "type": "@mspcopilot/n8n-nodes-connectwise.connectWisePsa",
      "typeVersion": 1,
      "position": [
        1792,
        -80
      ],
      "id": "88a7960d-a4a9-44d8-9620-c7d75e58d5dd",
      "name": "Resolve ticket",
      "credentials": {
        "connectWisePsaApi": {
          "id": "YOUR_CREDENTIAL_ID",
          "name": "API account"
        }
      }
    },
    {
      "parameters": {
        "assignments": {
          "assignments": [
            {
              "id": "3f06c98f-44ba-41ec-890e-db56e8d0012a",
              "name": "body.event_tags",
              "type": "object",
              "value": "={{ JSON.parse($json.body.event_tags).reduce((acc, { tag, value }) => ({ ...acc, [tag]: value }), {}); }}"
            },
            {
              "id": "f86db7d6-e0c1-4864-b4f6-8dfdd98bceac",
              "name": "body.event_recovery_tags",
              "type": "string",
              "value": "={{ JSON.parse($json.body.event_recovery_tags).reduce((acc, { tag, value }) => ({ ...acc, [tag]: value }), {}); }}"
            },
            {
              "id": "70857023-de1f-4d2e-be6b-53f6724d7ac2",
              "name": "ticket_note",
              "type": "string",
              "value": "={{ $json.body.alert_message.replace(/\\r\\n?/g, \"\\n\") + \"\\n\" + $json.body.zabbix_url + \"/zabbix/tr_events.php?triggerid=\" + $json.body.trigger_id + \"&eventid=\" + $json.body.event_id; }}"
            }
          ]
        },
        "includeOtherFields": true,
        "options": {}
      },
      "type": "n8n-nodes-base.set",
      "typeVersion": 3.4,
      "position": [
        224,
        -80
      ],
      "id": "9316e4ea-1583-4616-91e1-4233d18fdc42",
      "name": "Parse event",
      "notesInFlow": true,
      "notes": "Parse event_tags JSON into an object and reduce."
    },
    {
      "parameters": {
        "resource": "ticketNote",
        "parentId": "={{ $('Parse Event').item.json.body.event_tags.ticket }}",
        "text": "={{ $('Parse event').item.json.ticket_note }}",
        "detailDescriptionFlag": true,
        "resolutionFlag": true,
        "processNotifications": false
      },
      "type": "@mspcopilot/n8n-nodes-connectwise.connectWisePsa",
      "typeVersion": 1,
      "position": [
        1568,
        -80
      ],
      "id": "e2710520-f80c-4813-9983-18d85cac36db",
      "name": "Create a ticket note",
      "credentials": {
        "connectWisePsaApi": {
          "id": "YOUR_CREDENTIAL_ID",
          "name": "API account"
        }
      }
    }
  ],
  "connections": {
    "Webhook": {
      "main": [
        [
          {
            "node": "Parse event",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Get a company": {
      "main": [
        [
          {
            "node": "If Company Found",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Filter Clients": {
      "main": [
        [
          {
            "node": "Switch",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "If Company Found": {
      "main": [
        [
          {
            "node": "Filter Clients",
            "type": "main",
            "index": 0
          }
        ],
        [
          {
            "node": "Company ID Not Found",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Switch": {
      "main": [
        [
          {
            "node": "Create a ticket",
            "type": "main",
            "index": 0
          }
        ],
        [
          {
            "node": "If Existing Ticket",
            "type": "main",
            "index": 0
          }
        ],
        [
          {
            "node": "Stop and Error",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Create a ticket": {
      "main": [
        [
          {
            "node": "Return Tags",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "If Existing Ticket": {
      "main": [
        [
          {
            "node": "Create a ticket note",
            "type": "main",
            "index": 0
          }
        ],
        []
      ]
    },
    "Resolve ticket": {
      "main": [
        [
          {
            "node": "Return Tags",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Parse event": {
      "main": [
        [
          {
            "node": "Get a company",
            "type": "main",
            "index": 0
          },
          {
            "node": "Execution Data",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Create a ticket note": {
      "main": [
        [
          {
            "node": "Resolve ticket",
            "type": "main",
            "index": 0
          }
        ]
      ]
    }
  },
  "pinData": {
    "Webhook": [
      {
        "headers": {
          "host": "https://n8n.yourmsp.com/",
          "content-length": "1779",
          "accept": "*/*",
          "accept-encoding": "deflate, gzip, br, zstd",
          "content-type": "application/json",
          "x-forwarded-for": "192.168.1.100",
          "x-forwarded-host": "https://n8n.yourmsp.com/",
          "x-forwarded-proto": "https"
        },
        "params": {},
        "query": {},
        "body": {
          "webhook_url": "https://n8n.yourmsp.com/webhook/00000000-ea90-a90c-90c1-0c19db6d1696",
          "alert_message": "Problem started at 13:10:33 on 2025.02.04\r\nProblem name: Sonicwall CGM-WINCREST-SONICWALL - No SNMP Data Received for 5 Minutes\r\nHost: CGM-WINCREST-SONICWALL\r\nOperational data: 20:47:59\r\nOriginal problem ID: 3810487\r\n",
          "alert_subject": "Problem: Sonicwall CGM-WINCREST-SONICWALL - No SNMP Data Received for 5 Minutes",
          "alert_sendto": "n8n",
          "event_id": "3810487",
          "event_nseverity": "4",
          "event_source": "0",
          "zabbix_url": "https://zabbix.yourmsp.com/",
          "trigger_id": "37653",
          "trigger_url": "",
          "event_tags": "[{\"tag\":\"Application\",\"value\":\"System\"},{\"tag\":\"customer\",\"value\":\"CGM\"},{\"tag\":\"model\",\"value\":\"Sonicwall\"},{\"tag\":\"target\",\"value\":\"sonicwall\"},{\"tag\":\"device\",\"value\":\"firewall\"}]",
          "event_recovery_tags": "{EVENT.RECOVERY.TAGSJSON}",
          "item_value": "20:47:59",
          "item_lastvalue": "20:47:59",
          "host_id": "10751",
          "host_name": "CGM-WINCREST-SONICWALL",
          "event_value": "1",
          "event_status": "PROBLEM",
          "event_recovery_value": "{EVENT.RECOVERY.VALUE}",
          "trigger_status": "PROBLEM",
          "action_id": "17",
          "action_name": "Send P2 problems to ConnectWise Manage via n8n",
          "esc_history": "Problem started: 2025.02.04 13:10:33 Age: 2m 0s",
          "event_name": "Sonicwall CGM-WINCREST-SONICWALL - No SNMP Data Received for 5 Minutes",
          "event_update_action": "{EVENT.UPDATE.ACTION}",
          "event_update_status": "0",
          "event_update_message": "{EVENT.UPDATE.MESSAGE}",
          "inventory_asset_tag": "",
          "inventory_macaddress_a": "",
          "inventory_macaddress_b": "",
          "trigger_value": "1",
          "trigger_name": "Sonicwall CGM-WINCREST-SONICWALL - No SNMP Data Received for 5 Minutes",
          "event_severity": "P2",
          "event_cause_id": "{EVENT.CAUSE.ID}",
          "event_cause_name": "{EVENT.CAUSE.NAME}",
          "event_symptoms": "{EVENT.SYMPTOMS}"
        },
        "webhookUrl": "https://n8n.yourmsp.com/webhook/00000000-ea90-a90c-90c1-0c19db6d1696",
        "executionMode": "production"
      }
    ]
  },
  "meta": {
    "templateCredsSetupCompleted": true,
    "instanceId": "c184e9b4530d135cec93024f76caa53accab9229399f0cbe7ab0b73389a579ec"
  }
}

How the Workflow Works

Looks up the company from the tag passed from Zabbix.
If it is in FAIL state, create a ticket.
Send the ticket# back to Zabbix.
If it is resolved (OK status), then add a note to that ticket.
Mark it resolved.

Notes

Depending on your setup, you may want to create a ticket even if no company is found. Add a step after If Company Found > False to set an ID and continue to Switch.

Zabbix Alerts Setup

Media Type/Webhook

Download this media type yaml to import: github.com/mspcopilot/zabbix-n8n-msp/zabbix_mediatypes.yaml.
Navigate to Alerts > Media types.
At the top right, choose Import and add the yaml file.
Open the media type named n8n and change these items:
1. webhook_url should be the n8n Webhook URL.
2. Menu entry name set to the name of your ticketing system. eg: ConnectWise, Nilear MTX, Open in Halo, etc.
3. If using ConnectWise PSA, set Menu entry URL to https://na.myconnectwise.net/v4_6_release/services/system_io/Service/fv_sr100_request.rails?service_recid={EVENT.TAGS.ticket}.

Under Administration > General > Trigger displaying options, set the classification/priorities to match your ConnectWise priorities. These are used in the workflow below to set the ticket priority.

Users

Under Users > Users add a user named n8n.
On the Media tab, add the n8n one you created earlier.
You can choose severities here, or select all and select them under Actions in the next step.

Actions

Under Alerts > Actions.
Create trigger actions to send alerts to your ticketing system via n8n. For example, we send P1-P3 to n8n.
Action tab may contain a condition where Trigger severity is greater than or equals P3.
On the Operations tab, add an operation step to Send message.
1. Steps: 2 - 2 This means it only fires on the second occurrence to reduce some noise.
2. Step duration: 1m Each step is 1 minute.
3. Send to users: n8n.
4. Send to media type: n8n.
To Recovery operations add Send message to the n8n user and media type.
Optional: Add the same to Update operations. (We don’t process these in the example below, but they can be processed.)