Kindly suggest and provide clarification

[Abinash]

I am setting up an enterprise level project and want to use zabbix as monitoring tool.
i am confused b/w 7.0 vs 7.4 , which version to use.

I am using two servers for monitoring and using mariadb galera as a database and a galera arbitrator for quorum vote.
I am using keepalived and rsync process.

Kinldy suggest me any other information to make it more better and robust.

Also is there any vulnerability or loop hole in the code of zabbix that can be a threat for an enterprise level, as i am new to the tool.

[LenR]

Both are now actively being patched, but 8.0 is in Beta and may come out next month. Both are patched quickly if known vuls arise. See https://www.zabbix.com/life_cycle_and_release_policy

When 8.0 comes out, 7.4 will only be patched for 6 months.

I'd check the platform requirements for 8.0, if you can build Linux, DB and other things to 8.0, it should be able to run 7.0 or 7.4 and be easily upgraded to 8.0. Use 7.4 in you can go to 8.0 in 6 months, 7.0 if you need more time.

x.0 are their LTS (long term support), that's all we use in production. We started using the .2, .4's but after a 1..5 - 2 year life, you get burned needing to upgrade the base OS, politics sometimes got in our way doing that within 6 months, so we stick to LTS. We also pay for support.