Zabbix: настройка источника

SELECT 'zabbix_audit' AS appname,
auditid,
username,
clock,
ip,
action,
resourcename,
resourcetype,
details FROM auditlog WHERE clock > ?::integer ORDER BY clock ASC;

SELECT 'zabbix_alerts' AS appname,
alertid,
actionid,
eventid,
userid,
clock,
subject,
status,
message,
retries FROM alerts WHERE clock > ?::integer ORDER BY clock ASC;

SELECT
    'zabbix_triggers' AS appname,

    e.eventid AS event_id,
    e.objectid AS trigger_id,

    e.clock AS event_timestamp,
    to_timestamp(e.clock) AS event_datetime,

    e.value AS event_value,

    CASE
        WHEN e.value = 0 THEN 'OK'
        WHEN e.value = 1 THEN 'PROBLEM'
        ELSE 'UNKNOWN'
    END AS event_status,

    e.name AS event_name,
    e.acknowledged,

    t.description AS trigger_name,
    t.priority AS trigger_severity,

    f.itemid AS item_id,
    i.name AS item_name,
    i.key_ AS item_key,

    h.hostid AS host_id,
    h.host,
    h.name AS host_name,

    hi.ip AS host_ip,

    (
        SELECT al.ip
        FROM auditlog al
        GROUP BY al.ip
        ORDER BY COUNT(*) DESC
        LIMIT 1
    ) AS zabbix_ip

FROM events e

JOIN triggers t
    ON t.triggerid = e.objectid

LEFT JOIN LATERAL (
    SELECT
        f1.itemid
    FROM functions f1
    WHERE f1.triggerid = t.triggerid
    ORDER BY f1.itemid ASC
    LIMIT 1
) f
    ON TRUE

LEFT JOIN items i
    ON i.itemid = f.itemid

LEFT JOIN hosts h
    ON h.hostid = i.hostid

LEFT JOIN LATERAL (
    SELECT
        intf.ip
    FROM interface intf
    WHERE intf.hostid = h.hostid
      AND intf.main = 1
    ORDER BY intf.interfaceid
    LIMIT 1
) hi
    ON TRUE

WHERE e.source = 0
  AND e.object = 0
  AND e.eventid > CAST(? AS BIGINT)

ORDER BY e.eventid ASC

LIMIT 100;