Áú»¢¶Ä²©

7 ÒÑÖªÎÊÌâ

È«¾Öʼþ¹ØÁª

Èç¹ûµÚÒ»´ÎºÍµÚ¶þ´ÎʼþÖ®¼äµÄʱ¼ä¼ä¸ô·Ç³£¶Ì£¬¼´°ëÃë»ò¸ü¶Ì£¬Ôòʼþ¿ÉÄÜÎÞ·¨ÕýÈ·¹ØÁª¡£

Events may not get correlated correctly if the time interval between the first and second event is very small, i.e. half a second and less.

IPMI ¼ì²é

ÔÚ Debian 9£¨stretch£©֮ǰºÍ Ubuntu16.04£¨xenial£©֮ǰʹÓà OpenIPMI ¿â£¬IPMI ¼ì²é¿ÉÄÜÎÞ·¨Õý³£¹¤×÷¡£ÈôÒª½â¾ö´ËÎÊÌ⣬ÐèÒªÖØбàÒë OpenIPMI ¿â²¢ÆôÓà OpenSSL£¬Ïê¼û¡£

IPMI checks will not work with the standard OpenIPMI library package on Debian prior to 9 (stretch) and Ubuntu prior to 16.04 (xenial). To fix that, recompile OpenIPMI library with OpenSSL enabled as discussed in .

Upgrade

SQL mode setting for successful upgrade

The sql_mode setting in MySQL/MariaDB must have the "STRICT_TRANS_TABLES" mode set. If it is absent, the Áú»¢¶Ä²© database upgrade will fail (see also ).

SSH ¼ì²é

һЩ Linux ·¢Ðа汾Èç Debian¡¢Ubuntu£¬Èç¹ûʹÓÃÁË°²×°°ü°²×°ÁË libssh2 Àà¿â£¬Ôòϵͳ½«²»Ö§³ÖʹÓÃÃÜÂë¼ÓÃÜ˽Կ£¬Ïê¼û »ñµÃ¸ü¶àÐÅÏ¢¡£

Some Linux distributions like Debian, Ubuntu do not support encrypted private keys (with passphrase) if the libssh2 library is installed from packages. Please see for more details.

ODBC ¼ì²é

ÓÉÓÚ £¬Èç¹û Áú»¢¶Ä²© server »ò proxy ʹÓà MySQL ×÷ΪÆäÊý¾Ý¿â£¬MySQL ODBC ¿â¿ÉÄÜÎÞ·¨Ê¹Óá£Óйظü¶àÐÅÏ¢ºÍ¿ÉÓõĽâ¾ö°ì·¨£¬Ïê¼û ¡£

Áú»¢¶Ä²© server or proxy that uses MySQL as its database may or may not work correctly with MySQL ODBC library due to an . Please see for more information and available workarounds.

ÓÉÓÚ Microsoft µÄ ¡£´Ó Microsoft SQL Server ²éѯµÄ XML Êý¾Ý¿ÉÄܻᱻ½Ø¶ÏΪ 2033 ¸ö×Ö·û¡£

XML data queried from Microsoft SQL Server may get truncated to 2033 characters due to a Microsoft .

HTTPS ¼ì²é

ÔÚʹÓà https ЭÒéµÄ Web ³¡¾°ºÍ HTTP agent ¼à¿ØÏÈç¹ûÄ¿±ê·þÎñÆ÷ÅäÖÃÁ˽ûÖ¹ TLS v1.0 »ò¸üµÍ°æ±¾µÄЭÒ飬Áú»¢¶Ä²© agent ¼ì²é net.tcp.service[https...] ºÍ net.tcp.service.perf[https...] ¿ÉÄÜ»áʧ°Ü¡£Óйظü¶àÐÅÏ¢ºÍ¿ÉÓõĽâ¾ö·½·¨£¬Ïê¼û¡£

Web scenarios and HTTP agent items using the https protocol, Áú»¢¶Ä²© agent checks net.tcp.service[https...] and net.tcp.service.perf[https...] may fail if the target server is configured to disallow TLS v1.0 protocol or below. Please see for more information and available workarounds.

Web ¼à¿ØºÍ HTTP agent

µ± "SSL verify peer" ÔÚ Web ³¡¾°»ò HTTP agent ÆôÓÃʱ£¬ÓÉÓÚ£¬Áú»¢¶Ä²© server ¿ÉÄÜÔÚ CentOS6¡¢CentOS7ºÍÆäËûÏà¹Ø Linux ·¢Ðа汾ÉÏ·¢ÉúÄÚ´æй¶¡£Óйظü¶àÐÅÏ¢ºÍ¿ÉÓõĽâ¾ö·½·¨£¬Ïê¼û¡£

Áú»¢¶Ä²© server leaks memory on CentOS 6, CentOS 7 and possibly other related Linux distributions due to an when "SSL verify peer" is enabled in web scenarios or HTTP agent. Please see for more information and available workarounds.

¼òµ¥¼ì²é

ÓÉÓÚÔçÓÚ v3.10 ºÍ 2.1.2 °æ±¾µÄ fping ´æÔÚÒ»¸ö BUG£¬¼´Ëü´íÎóµØ´¦ÀíÖظ´µÄ»Ø·ÅÊý¾Ý°ü¡£Õâ¿ÉÄÜ»áʹ¼à¿ØÏî icmpping¡¢icmppingloss¡¢icmppingsec µ¼ÖÂһЩÒâÍâµÄ½á¹û¡£½¨ÒéʹÓÃ×îа汾µÄfping¡£Ïê¼û »ñµÃ¸ü¶àÐÅÏ¢¡£

A bug exists in fping versions earlier than v3.10 release 2.1.2 that mishandles duplicate echo replay packets. This may cause unexpected results for icmpping, icmppingloss, icmppingsec items. It is recommended to use the latest version of fping. Please see for more details.

SNMP ¼ì²é

Èç¹ûʹÓà OpenBSD ²Ù×÷ϵͳ£¬²¢ÔÚ Áú»¢¶Ä²© server µÄÅäÖÃÎļþÖÐÉèÖÃÁË SourceIP ²ÎÊý£¬ÔòÔÚ 5.7.3 °æ±¾µÄ Net-SNMP ¿âÖеÄÒ»¸ö Use-After-Free£¨UAF£©Â©¶´¿ÉÄܵ¼ÖÂÁú»¢¶Ä²© server ±ÀÀ£¡£ ×÷Ϊ½â¾ö·½·¨£¬Çë²»ÒªÉèÖà SourceIP ²ÎÊý¡£ ͬÑùµÄÎÊÌâÒ²ÊÊÓÃÓÚLinux£¬µ«Ëü²»»áµ¼Ö Áú»¢¶Ä²© server Í£Ö¹¹¤×÷¡£Ó¦ÓÃÓë OpenBSD ÉÏ net-snmp Èí¼þ°üµÄ¾Ö²¿²¹¶¡£¬½«»áËæ OpenBSD 6.3 °æ±¾Ò»Æð·¢²¼¡£

If the OpenBSD operating system is used, a use-after-free bug in the Net-SNMP library up to the 5.7.3 version can cause a crash of Áú»¢¶Ä²© server if the SourceIP parameter is set in the Áú»¢¶Ä²© server configuration file. As a workaround, please do not set the SourceIP parameter. The same problem applies also for Linux, but it does not cause Áú»¢¶Ä²© server to stop working. A local patch for the net-snmp package on OpenBSD was applied and will be released with OpenBSD 6.3.

PHP 7.0 µÄ¼æÈÝÐÔÎÊÌâ

ÒѾ­¹Û²ìµ½£¬Ê¹Óà PHP 7.0 µ¼Èë¾ßÓÐ Web ¼à¿Ø´¥·¢Æ÷µÄÄ£°å£¬¿ÉÄÜ»áÒò´¥·¢Æ÷±í´ïʽÖÐµÄ Web ¼à¿ØÏîµÄË«ÒýºÅ´íÎó¶øµ¼Èëʧ°Ü¡£ µ«½« PHP Éý¼¶µ½ 7.1 ʱ£¬ÎÊÌâ¾ÍËæÖ®ÏûʧÁË¡£

It has been observed that with PHP 7.0 importing a template with web monitoring triggers may fail due to incorrectly added double quotes to the web monitoring items in the trigger expressions. The issue goes away when upgrading PHP to 7.1.

ͼ±í

Çл»µ½ÏÄÁîʱ£¨Daylight Saving Time£¬DST£©»áµ¼ÖÂÏÔʾ X Öá±êÇ©´íÎó£¨ÈçÈÕÆÚÖظ´£¬ÈÕÆÚȱʧµÈ£©¡£

Changes to Daylight Saving Time (DST) result in irregularities when displaying X axis labels (date duplication, date missing, etc).

ÈÕÖ¾Îļþ¼à¿Ø

µ±Îļþϵͳ¿Õ¼äΪ 100% ÒÑÂúʱ£¬Èç¹ûÈÕÖ¾ÎļþÈÔÈ»ÔÚ±»×·¼Ó£¬ÄÇô log[] ºÍ logrt[] ¼à¿ØÏë»á·´¸´´ÓÍ·ÖØжÁÈ¡ÈÕÖ¾Îļþ¡£Ïê¼û »ñµÃ¸ü¶àÐÅÏ¢¡£

log[] and logrt[] items repeatedly reread log file from the beginning if file system is 100% full and the log file is being appended (see for more information).

MySQL µÄÂý²éѯ

Èç¹û¼à¿ØÏîµÄÖµ²»´æÔÚ£¬ÄÇô Áú»¢¶Ä²© server ½«»áÉú³ÉÂý²éѯ£¨¶ÔÓÚ SELECT£©¡£ÕâÊÇÓÉÓÚ MySQL 5.6/5.7 °æ±¾ÖÐÒ»¸öÒÑÖªµÄÔì³ÉµÄ¡£½â¾ö´ËÎÊÌâµÄ°ì·¨ÊÇÔÚ MySQL ÖнûÓà index_condition_pushdown ÓÅ»¯Æ÷¡£Ïê¼û¡£

Áú»¢¶Ä²© server generates slow select queries in case of non-existing values for items. This is caused by a known in MySQL 5.6/5.7 versions. A workaround to this is disabling the index_condition_pushdown optimizer in MySQL. For an extended discussion, see .

API

Èç¹ûʹÓà history.get ·½·¨£¬Ôò output ²ÎÊý½«ÎÞ·¨Õý³£¹¤×÷¡£

The output parameter does not work properly with the history.get method.

API login

µ±Ê¹ÓôøÓÐ user.login ·½·¨ µÄ×Ô¶¨Òå½Å±¾Ê±£¬Ôò¿ÉÒÔ´´½¨´óÁ¿¿ª·ÅʽÓû§»á»°£¬¶øÎÞÐè×ñÑ­ user.logout¡£

A large number of open user sessions can be created when using custom scripts with the user.login method without a following user.logout.

Simple checks

There is a bug in fping versions earlier than v3.10 that mishandles duplicate echo replay packets. This may cause unexpected results for icmpping, icmppingloss, icmppingsec items. It is recommended to use the latest version of fping. Please see for more details.

SNMP checks

If the OpenBSD operating system is used, a use-after-free bug in the Net-SNMP library up to the 5.7.3 version can cause a crash of Áú»¢¶Ä²© server if the SourceIP parameter is set in the Áú»¢¶Ä²© server configuration file. As a workaround, please do not set the SourceIP parameter. The same problem applies also for Linux, but it does not cause Áú»¢¶Ä²© server to stop working. A local patch for the net-snmp package on OpenBSD was applied and will be released with OpenBSD 6.3.

SNMP data spikes

Spikes in SNMP data have been observed that may be related to certain physical factors like voltage spikes in the mains. See more details.

SNMP traps

The "net-snmp-perl" package, needed for SNMP traps, has been removed in RHEL/CentOS 8.0-8.2; re-added in RHEL 8.3.

So if you are using RHEL 8.0-8.2, the best solution is to upgrade to RHEL 8.3; if you are using CentOS 8.0-8.2, you may wait for CentOS 8.3 or use a package from EPEL.

Please also see for more information.

Alerter process crash in Centos/RHEL 7

Instances of a Áú»¢¶Ä²© server alerter process crash have been encountered in Centos/RHEL 7. Please see for details.

Compiling Áú»¢¶Ä²© agent on HP-UX

If you install the PCRE library from a popular HP-UX package site , for example from file pcre-8.42-ia64_64-11.31.depot, you get only the 64-bit version of the library installed in the /usr/local/lib/hpux64 directory.

In this case, for successful agent compilation customized options need to be used for the "configure" script, e.g.:

CFLAGS="+DD64" ./configure --enable-agent --with-libpcre-include=/usr/local/include --with-libpcre-lib=/usr/local/lib/hpux64

Flipping frontend locales

It has been observed that frontend locales may flip without apparent logic, i. e. some pages (or parts of pages) are displayed in one language while other pages (or parts of pages) in a different language. Typically the problem may appear when there are several users, some of whom use one locale, while others use another.

A known workaround to this is to disable multithreading in PHP and Apache.

The problem is related to how setting the locale works : locale information is maintained per process, not per thread. So in a multi-thread environment, when there are several projects run by same Apache process, it is possible that the locale gets changed in another thread and that changes how data can be processed in the Áú»¢¶Ä²© thread.

For more information, please see related problem reports:

• (Problem with flipping frontend locales)
• (Problem with number processing in graphs using the bcdiv function of BC Math functions)

PHP 7.3 opcache configuration

If "opcache" is enabled in the PHP 7.3 configuration, Áú»¢¶Ä²© frontend may show a blank screen when loaded for the first time. This is a registered . To work around this, please set the "opcache.optimization_level" parameter to 0x7FFFBFDF in the PHP configuration (php.ini file).

Graphs

Changes to Daylight Saving Time (DST) result in irregularities when displaying X axis labels (date duplication, date missing, etc).

Log file monitoring

log[] and logrt[] items repeatedly reread log file from the beginning if file system is 100% full and the log file is being appended (see for more information).

Slow MySQL queries

Áú»¢¶Ä²© server generates slow select queries in case of non-existing values for items. This is caused by a known in MySQL 5.6/5.7 versions. A workaround to this is disabling the index_condition_pushdown optimizer in MySQL. For an extended discussion, see .

API login

A large number of open user sessions can be created when using custom scripts with the user.login method without a following user.logout.

IPv6 address issue in SNMPv3 traps

Due to a net-snmp bug, IPv6 address may not be correctly displayed when using SNMPv3 in SNMP traps. For more details and a possible workaround, see .

Trimmed long IPv6 IP address in failed login information

A failed login attempt message will display only the first 39 characters of a stored IP address as that's the character limit in the database field. That means that IPv6 IP addresses longer than 39 characters will be shown incompletely.

Áú»¢¶Ä²© agent checks on Windows

Non-existing DNS entries in a Server parameter of Áú»¢¶Ä²© agent configuration file (zabbix_agentd.conf) may increase Áú»¢¶Ä²© agent response time on Windows. This happens because Windows DNS caching daemon doesn't cache negative responses for IPv4 addresses. However, for IPv6 addresses negative responses are cached, so a possible workaround to this is disabling IPv4 on the host.

YAML export/import

There are some known issues with YAML export/import:

• Error messages are not translatable;
• Valid JSON with a .yaml file extension sometimes cannot be imported;
• Unquoted human-readable dates are automatically converted to Unix timestamps.

Setup wizard on SUSE with NGINX and php-fpm

Frontend setup wizard cannot save configuration file on SUSE with NGINX + php-fpm. This is caused by a setting in /usr/lib/systemd/system/php-fpm.service unit, which prevents Áú»¢¶Ä²© from writing to /etc. (introduced in ).

There are two workaround options available:

• Set the option to 'true' instead of 'full' in the php-fpm systemd unit.
• Manually save /etc/zabbix/web/zabbix.conf.php file.

Chromium for Áú»¢¶Ä²© web service on Ubuntu 20

Though in most cases, Áú»¢¶Ä²© web service can run with Chromium, on Ubuntu 20.04 using Chromium causes the following error:

Cannot fetch data: chrome failed to start:cmd_run.go:994:
       WARNING: cannot create user data directory: cannot create 
       "/var/lib/zabbix/snap/chromium/1564": mkdir /var/lib/zabbix: permission denied
       Sorry, home directories outside of /home are not currently supported. See https://forum.snapcraft.io/t/11209 for details.

This error occurs because /var/lib/zabbix is used as a home directory of user 'zabbix'.

MySQL custom error codes

If Áú»¢¶Ä²© is used with MySQL installation on Azure, an unclear error message [9002] Some errors occurred may appear in Áú»¢¶Ä²© logs. This generic error text is sent to Áú»¢¶Ä²© server or proxy by the database. To get more information about the cause of the error, check Azure logs.