Error in Zabbix Log

[stevefxp]

Hello all,

Why am I seeing this error message in the Zabbix log:

2024/07/13 15:09:23.565459 [Mysql] Cannot fetch data: Error 1227 (42000): Access denied; you need (at least one of) the SUPER, SLAVE MONITOR privilege(s) for this operation.

Thanks,
Steve

[NgRox]

Hello, basically there are problems with the user's performance, he cannot perform some operations due to lack of privileges.

Check the user's privileges in the database, anything sends the user's GRANTS for us to see

[stevefxp]

In doing some research on this the message is about database replication. I would expect to see this message in my SQL log, but there is nothing there. Has anyone been able to figure out why this is now happening?

FYI - I am running Zabbix 7.

[Markku]

What is your database (MySQL or MariaDB?) and do you have the "zabbix" user with all privileges as stated in the install instructions?

Markku

[stevefxp]

MariaDB and I followed the instructions in the Agent 2 document. What is missing is what is shown above. Once I added these the error msg goes away.

I really do not understand why this is not coming out on the mysql log. Better place for this but I guess there is no control over that.

[Markku]

Please confirm: are you talking about the agent logging the error?

I assumed that your Zabbix server was logging that error when talking about Zabbix+database.

Markku

[stevefxp]

The agent is logging the error on each of my MariaDB virtual machines.

[Markku]

Maybe if you tell about your configuration (= what are you trying to do with the agent) someone will be able to provide more insight for the required database permissions.

Markku

[stevefxp]

I am doing nothing with the agent, other than the normal out of the box monitoring. Any MariaDB monitored server is generating this message in the Zabbix log, at one hour intervals. If you look into the message it says you need a privilege added to the db user in question, which in my case is the Zabbix monitoring user. In order to get rid of these you need to add GRANT PROCESS, REPLICATION CLIENT, REPLICATION SLAVE, SLAVE MONITOR to the user.

The problem is that this is only used when there is MySQL replication in place, and I do not have this. Yes I can add these privileges but Zabbix should update their config doc about this. Users should not have to see this and figure it out. Zabbix should be doing this proactively.