It's hard to identify which user is generating a lot of traffic on the Zabbix frontend, leading to database overload. The Apache/Nginx logs show IPs, but we have no way to associate them with specific users. It would be useful to have an option for Zabbix to be able to match user activity with HTTP requests and IPs. This would make it easier to find who is overloading the system.

This would help respond quickly and, most importantly, diagnose situations where one user is accidentally or intentionally sending too many requests.