Hide password from the trigger in the notification email

[dubenaex]

Hello,

I'm using external script for monitoring and the item looks like this:

esxi_snapshot_status.py["-s","{HOST.CONN}","-u","{$USERNAME}","-p","{$PASSWORD}"]

That means that trigger looks like this:

Problem: last(/Template ESXI Snapshot/esxi_snapshot_status.py["-s","{HOST.CONN}","-u","{$USERNAME}","-p","{$PASSWORD}"],#1)=1

When I receive the notification email, variables are replaced by actual values, what means that also username and password are in the email. Is it somehow possible, either not the send this at all, or without the values ?

Example:

Problem started at 17:46:25 on 2023.11.21
Problem name: VM on server-esxi-01 is running from snapshot older than 3 days
Host: server-esxi-01
Severity: Average
Item values:

1. Snapshot status (server-esxi-01:esxi_snapshot_status.py["-s","192.168.1.9","-u","zabbix","-p","zabbixpass"]): 1

[cyber]

Are they displayed even if they are "secret text" macros?

[dubenaex]

Thank you, that was so simple that I feel stupid

[cyber]

Don't feel stupid... I have no experience with similar situation, I was just thinking, that "maybe" secret text is not displayed... and if it is, it might be considered as bug, that noone stumbled on yet...