-
Change Request
-
Resolution: Unresolved
-
Minor
-
None
-
None
-
None
Use Case:
- Discovery item is used to find database instances running on the server.
- Each discovered database instance has a corresponding set of credentials (username/password) stored in CyberArk Vault.
- LLD macros are required that can dynamically include secret credentials from CyberArk, based on attributes like the hostname and database instance name.
- These credentials can be used in item prototypes for monitoring discovered database instances.
Current Limitation:
Zabbix does not currently support using CyberArk Vault secrets in LLD macros.
Secrets can only be defined statically at the host, template, or global level, which prevents dynamic assignment of credentials during the discovery process.
Proposed Feature:
- Introduce support for dynamic creation of LLD macros that pull secrets directly from CyberArk Vault.
- During the discovery process, Zabbix should be able to query CyberArk using attributes such as {#HOSTNAME} and {#DB_INSTANCE_NAME} to generate a corresponding secret macro specific to each discovered entity.