Now who did that? This is a question occasionally heard in many places, IT workplaces included. Weird configuration changes and unsolicited reboots; accountability and a trace of actions help a lot to determine whether the questioner was the one who made the change and then forgot about it. For Zabbix configuration changes, an internal audit log is available. Just like most functionality, it's conveniently accessible from the web frontend. During our configuration quest, we made quite a lot of changes; let's see what footprints we left. Navigate to Reports | Audit and set the filter time to a period that approximately matches the initial installation of this Zabbix instance. We're presented with a list of the things we did, although you can also only see logging in and out on the first page of the audit records:
And what if you set up Zabbix frontend...