System user adds interfaces and changes proxies on hosts

[RobertT13]

Good day,

I'm fairly new into Zabbix (did finish Zabbix Certified Specialist but miss the experience).
We have a brand new Zabbix environment on Kubernetes and are testing with it as we speak.

We've added a bunch of Linux servers, Windows servers and SNMP devices.
Since Friday last week we mentioned that for some Linux servers an additional interface was added.
They normally have one Agent interface which connects to IP.
The interface which was added, was an Agent interface, connecting over DNS and was set as Default interface.

Today we mentioned that on two Linux servers, the proxy was changed.
We changed it back to what it should be. Seconds later it was changed again.

Looking in Audit log, i found out it was the user "System" which performed all these unwanted changes.
I looked through all config and admin settings but have no idea where this comes from.

Which process in Zabbix can cause these actions?
(i already searched for it but googling on system user returns too many general items )

Regards,

Rob

[cyber]

Autoregistration actions maybe. If proxy value changes, then it means, that in agent config you have that proxy set and when host connects it is set to that proxy in its config.

[RobertT13]

This was the answer for the proxy changes, thanks.
We are still investigating the interface actions, but we have lead now.

Found another thread btw: https://www.zabbix.com/forum/zabbix-...-ip-to-dns-bug
But no specific answers here.