The Zabbix API is really great, but there're a few issues with it worth knowing about:
- Audit: Many Zabbix API operations aren't registered in the Zabbix audit log, which can be accessed by going to Administration | Audit. That can make it really complicated to find out who made a particular change and when.
- Validation: Unfortunately, the API validation leaves a lot to be desired. For example, using the API, one could change a host to a proxy or vice versa, or even set the host status value to a completely bogus value, making that host disappear from the frontend, although no new host with that name could be created. Be very, very careful with the possibility of sending incorrect data to the Zabbix API. It might ...