Uploaded image for project: 'ZABBIX FEATURE REQUESTS'
  1. ZABBIX FEATURE REQUESTS
  2. ZBXNEXT-9574

Add support of CyberArk Vault in LLD macros

XMLWordPrintable

    • Icon: Change Request Change Request
    • Resolution: Unresolved
    • Icon: Minor Minor
    • None
    • None
    • Server (S)
    • None

      Use Case:

      1. Discovery item is used to find database instances running on the server.
      2. Each discovered database instance has a corresponding set of credentials (username/password) stored in CyberArk Vault.
      3. LLD macros are required that can dynamically include secret credentials from CyberArk, based on attributes like the hostname and database instance name.
      4. These credentials can be used in item prototypes for monitoring discovered database instances.

      Current Limitation:

      Zabbix does not currently support using CyberArk Vault secrets in LLD macros.
      Secrets can only be defined statically at the host, template, or global level, which prevents dynamic assignment of credentials during the discovery process.

      Proposed Feature:

      • Introduce support for dynamic creation of LLD macros that pull secrets directly from CyberArk Vault.
      • During the discovery process, Zabbix should be able to query CyberArk using attributes such as {#HOSTNAME} and {#DB_INSTANCE_NAME} to generate a corresponding secret macro specific to each discovered entity.

            wiper Andris Zeila
            mkudlacz Michal Kudlacz
            Votes:
            2 Vote for this issue
            Watchers:
            2 Start watching this issue

              Created:
              Updated: