User macros are supported in Zabbix for greater flexibility, in addition to the macros supported out-of-the-box.
User macros can be defined on global, template and host level. These macros have a special syntax:
Zabbix resolves macros according to the following precedence:
In other words, if a macro does not exist for a host, Zabbix will try to find it in the host templates of increasing depth. If still not found, a global macro will be used, if exists.
If a macro with the same name exists on multiple templates of the same level, the macro from the template with the lowest ID will be used. Thus having macros with the same name in multiple templates is a configuration risk.
If Zabbix is unable to find a macro, the macro will not be resolved.
Macros (including user macros) are left unresolved in the Configuration section (for example, in the trigger list) by design to make complex configuration more transparent.
User macros can be used in:
To define user macros, go to the corresponding location in the frontend:
If a user macro is used in items or triggers in a template, it is suggested to add that macro to the template even if it is defined on a global level. That way, if the macro type is text exporting the template to XML and importing it in another system will still allow it to work as expected. Values of secret macros are not exported.
A user macro has the following attributes:
Parameter | Description |
---|---|
Macro | Macro name. The name must be wrapped in curly brackets and start with a dollar sign. Example: {$FRONTEND_URL}. The following characters are allowed in the macro names: A-Z (uppercase only) , 0-9 , _ , . |
Value | Macro value. Three value types are supported: Text (default) - plain-text value Secret text - the value is masked with asterisks, which could be useful to protect sensitive information such as passwords or shared keys. Vault secret - the value contains a reference path (as 'path:key', for example “secret/zabbix:password”) to a Vault secret Note that while the value of a secret macro is hidden from sight, the value can be revealed through the use in items. For example, in an external script an 'echo' statement referencing a secret macro may be used to reveal the macro value to the frontend because Zabbix server has access to the real macro value. To select the value type click on the button at the end of the value input field: icon indicates a text macro; icon indicates a secret text macro. Upon hovering, the value field transforms into a button, which allows to enter a new value of the macro (to exit without saving a new value, click the backwards arrow (). icon indicates a secret Vault macro. Maximum length of a user macro value is 2048 characters (255 characters in versions before 5.2.0). |
Description | Text field used to provide more information about this macro. |
URLs that contain a secret macro will not work as the macro in them will be resolved as "******".
In trigger expressions user macros will resolve if referencing a parameter or constant. They will NOT resolve if referencing a host, item key, function, operator or another trigger expression. Secret macros cannot be used in trigger expressions.
Use of host-level macro in the "Status of SSH daemon" item key:
net.tcp.service[ssh,,{$SSH_PORT}]
This item can be assigned to multiple hosts, providing that the value of {$SSH_PORT} is defined on those hosts.
Use of host-level macro in the "CPU load is too high" trigger:
last(/ca_001/system.cpu.load[,avg1])>{$MAX_CPULOAD}
Such a trigger would be created on the template, not edited in individual hosts.
If you want to use the amount of values as the function parameter (for example, max(/host/key,#3)), include hash mark in the macro definition like this: SOME_PERIOD => #3
Use of two macros in the "CPU load is too high" trigger:
min(/ca_001/system.cpu.load[,avg1],{$CPULOAD_PERIOD})>{$MAX_CPULOAD}
Note that a macro can be used as a parameter of trigger function, in this example function min().
Synchronize the agent unavailability condition with the item update interval:
nodata(/ca_001/agent.ping,{$INTERVAL})=1
Centralize configuration of working hours:
1-5,09:00-18:00
;Use host prototype macro to configure items for discovered hosts: