Zabbix is an open-source monitoring system for servers, networks, applications, databases, cloud services and everything else with an address. What distinguishes it from check-and-alert tools in the Nagios lineage is that Zabbix is metric-centric rather than state-centric: every monitored host has items, each item collects a value on its own interval, and every value is written to the Zabbix database as history and then aggregated into trends. A problem is not the exit code of a script — it is a trigger expression evaluated over that stored data, using functions such as last, avg, min, max, change, nodata and forecast.
Collection is deliberately broad because real estates are not homogeneous. The Zabbix agent works in passive mode, where the server polls it, and in active mode, where the agent opens the connection outward — which is what makes monitoring through firewalls and NAT practical. Beyond the agent there is SNMP v1, v2c and v3 with trap handling, IPMI for out-of-band hardware, JMX through the Java gateway, ODBC for databases, HTTP agent items for REST endpoints, external scripts, and script items. Calculated and dependent items derive new values from collected ones without touching the host at all.
The scale story is templates and discovery. A template carries items, triggers, graphs, dashboards, discovery rules and macros, and links to hosts, so configuration effort is spent per class of host rather than per host. Low-level discovery goes further: a discovery rule returns a JSON list, and item, trigger and graph prototypes are instantiated automatically for every filesystem, network interface, service, database or container found. Around that sit events and actions with multi-step escalations, media types for email, webhooks and scripts, maintenance windows, remote commands for automatic recovery, auto-registration for onboarding, permissions by user and host group, proxies for distributed collection, and an API that does everything the frontend can.
Why this skill matters now
Infrastructure monitoring did not disappear when Prometheus arrived; it moved out of fashion while remaining load-bearing. The estates that actually need it — network gear, storage arrays, hypervisors, Windows servers, appliances, IPMI-managed hardware, databases and the long tail of things that will never expose a metrics endpoint — are not Kubernetes-shaped, and a pull-based, label-oriented, short-retention time-series system is a poor fit for them. Zabbix covers that entire surface in one product with no per-node licence.
Cost is the second driver. Organisations re-examining a six- or seven-figure commercial monitoring renewal look hard at what they would lose by moving to Zabbix, and the honest answer is usually less than expected — provided they have engineers who can template properly. That proviso is the whole point. A Zabbix deployment configured host by host through the frontend becomes unmaintainable at a few hundred hosts; the same deployment built on templates, macros and low-level discovery scales to tens of thousands and is largely self-configuring as infrastructure changes.
So the demand is specifically for depth. Writing a trigger expression that fires once on a real problem rather than fifty times on a transient spike, sizing a database and its housekeeping for a stated retention, designing proxy topology across sites, and building templates other teams can reuse — those are the skills organisations hire for, and they are not learned by clicking through the interface.