Uploaded image for project: 'ZABBIX BUGS AND ISSUES'
  1. ZABBIX BUGS AND ISSUES
  2. ZBX-26967

Full connstring is logged into log file if connection to DB is not possible

XMLWordPrintable

    • Icon: Problem report Problem report
    • Resolution: Unresolved
    • Icon: Critical Critical
    • None
    • 7.0.19rc1, 7.4.3rc1, 8.0.0alpha1 (master)
    • None
    • None
    • 7.0.18 + PgSQL 17.3

      Hi,

      When working with Zabbix 7.0 it was discovered that if active checks are used, and active items used for DB monitoring would fail to get data, this entry would be logged to log file:

      check 'pgsql.dbstat.sum["tcp://dbhost:5432","zbx_monitor","secure-password","postgres"]' is not supported: Failed to create connection: failed to connect to `host=dbhost user=zbx_monitor database=postgres`:
      

      This log contains DB user details, and password for this user;

      To reproduce, simply configure any DB monitoring with use of active checks, and configure for example DB user with typo, to fail item.

      As expected it would be great to not log connstring with password into log file,

            zabbix.dev Zabbix Development Team
            tgrzechulski Tomasz Grzechulski
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

              Created:
              Updated: