[comment]: # translation:outdated

[comment]: # attributes: notoc

[comment]: # aside:2

[comment]: # ({new-dbb2a1f5})
# Configuration parameters: Zabbix server

[comment]: # ({/new-dbb2a1f5})

[comment]: # ({new-16f1be5f})

### Overview

Configuration parameters allow customizing Zabbix server behavior. 

Specify parameter values in the configuration file (`zabbix_server.conf`). All parameters are **optional**, unless explicitly stated that the parameter is mandatory.

This page is structured as:

-   Parameter overview (to see full details of a parameter, click on its name)
-   [Parameter details](#parameter-details)

|Parameter|Description|
|--|--------|
|[AlertScriptsPath](#alertscriptspath)|Specify the alert script location.|
|[AllowRoot](#allowroot)|Allow server to run as `root`.|
|[AllowSoftwareUpdateCheck](#allowsoftwareupdatecheck)|Allow receiving information about software updates from `zabbix.com`.|
|[AllowUnsupportedDBVersions](#allowunsupporteddbversions)|Allow server to work with unsupported database versions.|
|[CacheSize](#cachesize)|Set the configuration cache size (in bytes).|
|[CacheUpdateFrequency](#cacheupdatefrequency)|Set the configuration cache update frequency (in seconds).|
|[DBHost](#dbhost)|Specify the database host (or socket directory).|
|[DBName](#dbname)|Specify the database name. **Mandatory**.|
|[DBPassword](#dbpassword)|Specify the database password.|
|[DBPort](#dbport)|Specify the port of the database host.|
|[DBSchema](#dbschema)|Specify the database schema name. Used for PostgreSQL.|
|[DBSocket](#dbsocket)|Specify path to the MySQL socket file.|
|[DBUser](#dbuser)|Specify the database user.|
|[DBTLSConnect](#dbtlsconnect)|Specify a value to enforce a TLS connection to the database.|
|[DBTLSCAFile](#dbtlscafile)|Specify full pathname of the file containing top-level CA(s) certificates for database-certificate verification.|
|[DBTLSCertFile](#dbtlscertfile)|Specify full pathname of the file containing the Zabbix server certificate for authenticating to database.|
|[DBTLSKeyFile](#dbtlskeyfile)|Specify full pathname of the file containing the private key for authenticating to database.|
|[DBTLSCipher](#dbtlscipher)|Specify the list of encryption ciphers that Zabbix server permits for TLS protocols up through TLS v1.2. Supported only for MySQL.|
|[DBTLSCipher13](#dbtlscipher13)|Specify the list of encryption ciphersuites that Zabbix server permits for the TLS v1.3 protocol. Supported only for MySQL, starting from version 8.0.16.|
|[DebugLevel](#debuglevel)|Set the debug level.|
|[EnableGlobalScripts](#enableglobalscripts)|Enable global scripts on Zabbix server.|
|[ExportDir](#exportdir)|Specify a directory to enable real-time export of events, history and trends.|
|[ExportFileSize](#exportfilesize)|Set the maximum export file size (in bytes).|
|[ExportType](#exporttype)|Specify entity types for real-time export (events, history, trends).|
|[ExternalScripts](#externalscripts)|Specify the external script location.|
|[Fping6Location](#fping6location)|Specify the fping6 location.|
|[FpingLocation](#fpinglocation)|Specify the fping location.|
|[FrontendAllowedIP](#frontendallowedip)|Specify IP addresses or CIDR ranges that are permitted to connect from the frontend.|
|[HANodeName](#hanodename)|Specify the node name in a high-availability cluster.|
|[HistoryCacheSize](#historycachesize)|Set the history cache size.|
|[HistoryIndexCacheSize](#historyindexcachesize)|Set the history-index cache size.|
|[HistoryStorageDateIndex](#historystoragedateindex)|Enable storing history values in different indices based on date.|
|[HistoryStorageURL](#historystorageurl)|Specify the history storage URL.|
|[HistoryStorageTypes](#historystoragetypes)|Specify value types to be sent to history storage.|
|[HousekeepingFrequency](#housekeepingfrequency)|Set the housekeeping procedure frequency (in hours).|
|[Include](#include)|Specify a directory or individual files to be included in the configuration file.|
|[JavaGateway](#javagateway)|Specify the Zabbix Java gateway IP address (or hostname).|
|[JavaGatewayPort](#javagatewayport)|Specify the Zabbix Java gateway port.|
|[ListenBacklog](#listenbacklog)|Set the maximum number of pending connections in the TCP queue.|
|[ListenIP](#listenip)|Specify the trapper listen IP address.|
|[ListenPort](#listenport)|Specify the trapper listen port.|
|[LoadModule](#loadmodule)|Specify the module to load at server startup.|
|[LoadModulePath](#loadmodulepath)|Specify full path to the location of server modules.|
|[LogFile](#logfile)|Specify the server log file.|
|[LogFileSize](#logfilesize)|Set the maximum log file size.|
|[LogSlowQueries](#logslowqueries)|Set the maximum duration a database query may take before being logged (in milliseconds).|
|[LogType](#logtype)|Specify the log output type.|
|[MaxConcurrentChecksPerPoller](#maxconcurrentchecksperpoller)|Set the maximum number of asynchronous checks that can be executed at once by each HTTP agent poller, agent poller, or SNMP poller.|
|[MaxHousekeeperDelete](#maxhousekeeperdelete)|Set the maximum number of rows to be deleted per task in one housekeeping cycle.|
|[NodeAddress](#nodeaddress)|Specify IP or hostname with optional port to override how the frontend connects to the server.|
|[PidFile](#pidfile)|Specify the PID file.|
|[ProblemHousekeepingFrequency](#problemhousekeepingfrequency)|Set the frequency of deleting problems for deleted triggers.|
|[ProxyConfigFrequency](#proxyconfigfrequency)|Set the frequency of sending configuration data to Zabbix proxy by the server.|
|[ProxyDataFrequency](#proxydatafrequency)|Set the frequency of requesting history data from Zabbix proxy by the server.|
|[ServiceManagerSyncFrequency](#servicemanagersyncfrequency)|Set the frequency of synchronizing the configuration of a service manager.|
|[SMSDevices](#smsdevices)|Specify modem files that are allowed to use Zabbix server.|
|[SNMPTrapperFile](#snmptrapperfile)|Specify the temporary file used for passing data from the SNMP trap daemon to the server.|
|[SocketDir](#socketdir)|Specify the directory for storing IPC sockets used by internal Zabbix services.|
|[SourceIP](#sourceip)|Specify the source IP address.|
|[SSHKeyLocation](#sshkeylocation)|Specify the location of public and private keys for SSH checks and actions.|
|[SSLCertLocation](#sslcertlocation)|Specify the location of SSL-client certificate files for client authentication.|
|[SSLKeyLocation](#sslkeylocation)|Specify the location of SSL private key files for client authentication.|
|[SSLCALocation](#sslcalocation)|Specify the location of certificate authority (CA) files for SSL-server certificate verification.|
|[StartAgentPollers](#startagentpollers)|Set the number of pre-forked instances of asynchronous Zabbix agent pollers.|
|[StartAlerters](#startalerters)|Set the number of pre-forked instances of alerters.|
|[StartBrowserPollers](#startbrowserpollers)|Set the number of pre-forked instances of browser item pollers.|
|[StartConnectors](#startconnectors)|Set the number of pre-forked instances of connector workers.|
|[StartDBSyncers](#startdbsyncers)|Set the number of pre-forked instances of history syncers.|
|[StartDiscoverers](#startdiscoverers)|Set the number of pre-forked instances of discovery workers.|
|[StartEscalators](#startescalators)|Set the number of pre-forked instances of escalators.|
|[StartHistoryPollers](#starthistorypollers)|Set the number of pre-forked instances of history pollers.|
|[StartHTTPAgentPollers](#starthttpagentpollers)|Set the number of pre-forked instances of asynchronous HTTP agent pollers.|
|[StartHTTPPollers](#starthttppollers)|Set the number of pre-forked instances of HTTP pollers.|
|[StartIPMIPollers](#startipmipollers)|Set the number of pre-forked instances of IPMI pollers.|
|[StartJavaPollers](#startjavapollers)|Set the number of pre-forked instances of Java pollers.|
|[StartLLDProcessors](#startlldprocessors)|Set the number of pre-forked instances of low-level discovery (LLD) workers.|
|[StartODBCPollers](#startodbcpollers)|Set the number of pre-forked instances of ODBC pollers.|
|[StartPingers](#startpingers)|Set the number of pre-forked instances of ICMP pingers.|
|[StartPollersUnreachable](#startpollersunreachable)|Set the number of pre-forked instances of pollers for unreachable hosts (including IPMI and Java).|
|[StartPollers](#startpollers)|Set the number of pre-forked instances of pollers.|
|[StartPreprocessors](#startpreprocessors)|Set the number of pre-started instances of preprocessing workers.|
|[StartProxyPollers](#startproxypollers)|Set the number of pre-forked instances of pollers for passive proxies.|
|[StartReportWriters](#startreportwriters)|Set the number of pre-forked instances of report writers.|
|[StartSNMPPollers](#startsnmppollers)|Set the number of pre-forked instances of asynchronous SNMP pollers.|
|[StartSNMPTrapper](#startsnmptrapper)|Set to "1" to start an SNMP trapper process.|
|[StartTimers](#starttimers)|Set the number of pre-forked instances of timers.|
|[StartTrappers](#starttrappers)|Set the number of pre-forked instances of trappers.|
|[StartVMwareCollectors](#startvmwarecollectors)|Set the number of pre-forked VMware collector instances.|
|[StatsAllowedIP](#statsallowedip)|Specify IP addresses or DNS names of external Zabbix instances that are allowed to request stats.|
|[Timeout](#timeout)|Specify how long to wait (in seconds) for establishing connection and exchanging data with Zabbix proxy, agent, web service, and for SNMP checks (except SNMP `walk[OID]` and `get[OID]` items).|
|[TLSCAFile](#tlscafile)|Specify full pathname of the file containing the top-level CA(s) certificates for peer certificate verification, used for encrypted communications between Zabbix components.|
|[TLSCertFile](#tlscertfile)|Specify full pathname of the file containing the server certificate or certificate chain, used for encrypted communications between Zabbix components.|
|[TLSCipherAll](#tlscipherall)|Specify the GnuTLS priority string or OpenSSL (TLS 1.2) cipher string. Override the default ciphersuite selection criteria for certificate- and PSK-based encryption.|
|[TLSCipherAll13](#tlscipherall13)|Specify the cipher string for OpenSSL 1.1.1 or newer in TLS 1.3. Override the default ciphersuite selection criteria for certificate- and PSK-based encryption.|
|[TLSCipherCert](#tlsciphercert)|Specify the GnuTLS priority string or OpenSSL (TLS 1.2) cipher string. Override the default ciphersuite selection criteria for certificate-based encryption.|
|[TLSCipherCert13](#tlsciphercert13)|Specify the cipher string for OpenSSL 1.1.1 or newer in TLS 1.3. Override the default ciphersuite selection criteria for certificate-based encryption.|
|[TLSCipherPSK](#tlscipherpsk)|Specify the GnuTLS priority string or OpenSSL (TLS 1.2) cipher string. Override the default ciphersuite selection criteria for PSK-based encryption.|
|[TLSCipherPSK13](#tlscipherpsk13)|Specify the cipher string for OpenSSL 1.1.1 or newer in TLS 1.3. Override the default ciphersuite selection criteria for PSK-based encryption.|
|[TLSCRLFile](#tlscrlfile)|Specify full pathname of the file containing revoked certificates. This parameter is used for encrypted communications between Zabbix components.|
|[TLSFrontendAccept](#tlsfrontendaccept)|Specify encryption level for incoming connections from the frontend.|
|[TLSFrontendCertIssuer](#tlsfrontendcertissuer)|Specify the allowed frontend certificate issuer.|
|[TLSFrontendCertSubject](#tlsfrontendcertsubject)|Specify the allowed frontend certificate subject.|
|[TLSKeyFile](#tlskeyfile)|Specify full pathname of the file containing the server private key, used for encrypted communications between Zabbix components.|
|[TLSListen](#tlslisten)|Require TLS-only connections on the trapper socket.|
|[TmpDir](#tmpdir)|Specify the temporary directory.|
|[TrapperTimeout](#trappertimeout)|Specify trapper timeout in seconds for:<br>- retrieval of historical data from Zabbix proxy;<br>- sending configuration data to Zabbix proxy;<br>- global script execution or remote command execution on Zabbix server.|
|[TrendCacheSize](#trendcachesize)|Set the trend cache size.|
|[TrendFunctionCacheSize](#trendfunctioncachesize)|Set the trend-function cache size.|
|[UnavailableDelay](#unavailabledelay)|Set the frequency of checking host availability during the unavailability period.|
|[UnreachableDelay](#unreachabledelay)|Set the frequency of checking host availability during the unreachability period.|
|[UnreachablePeriod](#unreachableperiod)|Set after how many seconds of unreachability treat host as unavailable.|
|[User](#user)|Drop privileges to a specific, existing user on the system.|
|[ValueCacheSize](#valuecachesize)|Set the size of the history value cache.|
|[Vault](#vault)|Specify the vault provider.|
|[VaultDBPath](#vaultdbpath)|Specify the location for retrieving database credentials by keys.|
|[VaultPrefix](#vaultprefix)|Specify custom prefix for the vault path or query.|
|[VaultTLSCertFile](#vaulttlscertfile)|Specify the name of the SSL certificate file used for client authentication.|
|[VaultTLSKeyFile](#vaulttlskeyfile)|Specify the name of the SSL private key file used for client authentication.|
|[VaultToken](#vaulttoken)|Specify the HashiCorp vault authentication token.|
|[VaultURL](#vaulturl)|Specify the vault server URL.|
|[VMwareCacheSize](#vmwarecachesize)|Set the shared memory size for storing VMware data.|
|[VMwareFrequency](#vmwarefrequency)|Set the frequency of data gathering from a single VMware service in seconds.|
|[VMwarePerfFrequency](#vmwareperffrequency)|Set the frequency of retrieving performance counter statistics from a single VMware service in seconds.|
|[VMwareTimeout](#vmwaretimeout)|Set the maximum number of seconds a `vmware collector` will wait for a response from VMware service.|
|[WebDriverURL](#webdriverurl)|Specify the WebDriver interface URL.|
|[WebServiceURL](#webserviceurl)|Specify the web service URL in the format `http[s]://host:port/report`.|

Note that:

-   The default values reflect daemon defaults, not the values in the shipped configuration files.
-   Values support [environment variables](/manual/appendix/config/environment_variables).
-   Zabbix supports configuration files only in UTF-8 encoding without [BOM](https://en.wikipedia.org/wiki/Byte_order_mark).
-   Comments starting with `#` are only supported in the beginning of the line.

::: notewarning
Too many processes can exhaust the per-process file descriptor limit for the preprocessing manager.
:::

Such processes are data gathering by pollers, unreachable pollers, ODBC pollers, HTTP pollers, Java pollers, pingers, trappers, proxypollers together with IPMI manager, SNMP trapper, preprocessing workers, and discovery workers. Exhausting the file descriptor limit will cause Zabbix server to **stop**, typically shortly after startup but sometimes taking longer.

To avoid such issues, review the [Zabbix server configuration file](/manual/concepts/server/server_params) to optimize the number of concurrent checks and processes.
Additionally, if necessary, ensure that the file descriptor limit is set sufficiently high by checking and adjusting system limits.


[comment]: # ({/new-16f1be5f})

[comment]: # ({new-6428a44e})
### Parameter details

[comment]: # ({/new-6428a44e})

[comment]: # ({new-e273f2ed})
##### AlertScriptsPath

Specify the [alert script](/manual/config/notifications/media/script) location. 
Depends on the *datadir* compile-time installation variable.

Default: `/usr/local/share/zabbix/alertscripts`

[comment]: # ({/new-e273f2ed})

[comment]: # ({new-1edb700a})
##### AllowRoot

Allow server to run as `root`.
If disabled and the server is started by `root`, the server will try to switch to the `zabbix` user instead.
Has no effect if started under a regular user.

Default: `0`<br>
Values: 0 - do not allow; 1 - allow

[comment]: # ({/new-1edb700a})

[comment]: # ({new-11bebeca})
##### AllowSoftwareUpdateCheck

Allow Zabbix UI receiving information about software updates from `zabbix.com`.

Default: `1`<br>
Values: 0 - do not allow; 1 - allow

[comment]: # ({/new-11bebeca})

[comment]: # ({new-37f8828a})
##### AllowUnsupportedDBVersions

Allow  server to work with unsupported database versions.

Default: `0`<br>
Values: 0 - do not allow; 1 - allow

[comment]: # ({/new-37f8828a})

[comment]: # ({new-6c704994})
##### CacheSize

Set the configuration cache size (in bytes).
The shared memory size for storing host, item and trigger data.

Default: `32M`<br>
Range: 128K-64G

[comment]: # ({/new-6c704994})

[comment]: # ({new-2c956137})
##### CacheUpdateFrequency

Set the configuration cache update frequency (in seconds).
See also [runtime control](/manual/concepts/server#runtime-control) options.

Default: `10`<br>
Range: 1-3600

[comment]: # ({/new-2c956137})

[comment]: # ({new-d92a7b2b})
##### DBHost

Specify the database host (or socket directory).

For MySQL:

-   `localhost` or an empty string uses the default UNIX-domain socket.

For PostgreSQL:

-   `localhost` is resolved via DNS (typically to 127.0.0.1).
-   An empty string uses the default UNIX-domain socket.
-   A path (for example, `/var/run/pgbouncer`) results in using the UNIX socket at that path.
-   A comma-separated list can contain multiple `host:port` values. Each host is tried in order until a read-write connection is established.
Example: `DBHost=localhost:5431,127.0.0.1:20051,zabbix.domain,[::1]:30051,[12fc::1]`

Default: `localhost`

[comment]: # ({/new-d92a7b2b})

[comment]: # ({new-1058c650})
##### DBName

Specify the database name.

Mandatory: **Yes**

[comment]: # ({/new-1058c650})

[comment]: # ({new-479ee610})
##### DBPassword

Specify the database password.
Comment this line if no password is used.

[comment]: # ({/new-479ee610})

[comment]: # ({new-1b941880})
##### DBPort

Specify the port of the Zabbix database host (see [`DBHost`](#dbhost)).<br>
DBSocket and DBPort are mutually exclusive in server configuration. Specify only one, or leave both undefined.

Default for MySQL: `3306`

Default for PostgreSQL: `5432`

Range: 1024-65535

[comment]: # ({/new-1b941880})

[comment]: # ({new-abcff68d})
##### DBSchema

Specify the database schema name.
Used for PostgreSQL.

[comment]: # ({/new-abcff68d})

[comment]: # ({new-3a14461c})
##### DBSocket

Specify the path to the MySQL socket file.<br>
DBSocket and DBPort are mutually exclusive in server configuration. Specify only one, or leave both undefined.

[comment]: # ({/new-3a14461c})

[comment]: # ({new-94782f63})
##### DBUser

Specify the database user.

[comment]: # ({/new-94782f63})

[comment]: # ({new-500737d5})
##### DBTLSConnect

Specify a value to enforce a TLS connection to the database:<br>*required* - connect using TLS<br>*verify\_ca* - connect using TLS and verify certificate<br>*verify\_full* - connect using TLS, verify certificate and verify that database identity specified by DBHost matches its certificate<br><br>With MySQL, starting from 5.7.11, and PostgreSQL the follo/wing values are supported: `required`, `verify_ca`, `verify_full`.<br>With MariaDB, starting from version 10.2.6, the `required` and `verify_full` values are supported.<br>By default not set to any option and the behavior depends on database configuration.

[comment]: # ({/new-500737d5})

[comment]: # ({new-fc356178})
##### DBTLSCAFile

Specify full pathname of the file containing the top-level CA(s) certificates for database certificate verification.

Mandatory: no (yes, if DBTLSConnect set to *verify\_ca* or *verify\_full*)

[comment]: # ({/new-fc356178})

[comment]: # ({new-5f286da4})
##### DBTLSCertFile

Specify full pathname of the file containing the Zabbix server certificate for authenticating to database.

[comment]: # ({/new-5f286da4})

[comment]: # ({new-dd8b56f5})
##### DBTLSKeyFile

Specify full pathname of the file containing the private key for authenticating to database.

[comment]: # ({/new-dd8b56f5})

[comment]: # ({new-d8056d7a})
##### DBTLSCipher

Specify the list of encryption ciphers that Zabbix server permits for TLS protocols up through TLS v1.2.
Supported only for MySQL.

[comment]: # ({/new-d8056d7a})

[comment]: # ({new-a327c2f2})
##### DBTLSCipher13

Specify the list of encryption ciphersuites that Zabbix server permits for the TLS v1.3 protocol.
Supported only for MySQL, starting from version 8.0.16.

[comment]: # ({/new-a327c2f2})

[comment]: # ({new-d82f69fb})
##### DebugLevel

Set the debug level:<br>*0* - basic information about starting and stopping of Zabbix processes<br>*1* - critical information;<br>*2* - error information;<br>*3* - warnings;<br>*4* - for debugging (produces lots of information);<br>*5* - extended debugging (produces even more information).<br>See also [runtime control](/manual/concepts/server#runtime-control) options.

Default: `3`<br>
Range: 0-5

[comment]: # ({/new-d82f69fb})

[comment]: # ({new-662e1c94})
##### EnableGlobalScripts

Enable global scripts on Zabbix server.<br>
Note: Global script execution is enabled by default.
However, for new installations starting with Zabbix 7.0, EnableGlobalScripts is explicitly set to 0 (disabled).

Default: `1`<br>
Values: 0 - disable; 1 - enable

[comment]: # ({/new-662e1c94})

[comment]: # ({new-99815de4})
##### ExportDir

Specify a directory to enable [real-time export](/manual/config/export/files) of events, history and trends.

[comment]: # ({/new-99815de4})

[comment]: # ({new-965e757e})
##### ExportFileSize

Set the maximum export file size (in bytes).
Used for rotation if `ExportDir` is set.

Default: `1G`<br>
Range: 1M-1G

[comment]: # ({/new-965e757e})

[comment]: # ({new-5447304d})
##### ExportType

Specify entity types for [real-time export](/manual/config/export/files) (events, history, trends). A comma-delimited list.
All types are exported by default.
Valid only if ExportDir is set.<br>*Note* that if ExportType is specified, but ExportDir is not, then this is a configuration error and the server will not start.

Example for history and trends export:

```default
ExportType=history,trends
```

Example for event export only:

```default
ExportType=events
```

[comment]: # ({/new-5447304d})

[comment]: # ({new-d0a46edf})
##### ExternalScripts

Specify the external script location. 
Depends on the `datadir` compile-time installation variable.

Default: `/usr/local/share/zabbix/externalscripts`

[comment]: # ({/new-d0a46edf})

[comment]: # ({new-bdd6796f})
##### Fping6Location

Specify the fping6 location.
Make sure that the fping6 binary has root ownership and the SUID flag set.
Make empty ("Fping6Location=") if your fping utility is capable to process IPv6 addresses.

Default: `/usr/sbin/fping6`

[comment]: # ({/new-bdd6796f})

[comment]: # ({new-025648b5})
##### FpingLocation

Specify the fping location.
Make sure that the fping binary has root ownership and the SUID flag set.

Default: `/usr/sbin/fping`

[comment]: # ({/new-025648b5})

[comment]: # ({new-624a96b0})
##### FrontendAllowedIP

Specify IP addresses or CIDR ranges that are permitted to connect from the frontend. A comma-separated list.
By default all connections are accepted for frontend requests.
If IPv6 support is enabled then '127.0.0.1', '::127.0.0.1', '::ffff:127.0.0.1' are treated equally and '::/0' will allow any IPv4 or IPv6 address. 
'0.0.0.0/0' can be used to allow any IPv4 address.

Example: 

```default
FrontendAllowedIP=127.0.0.1,192.168.1.0/24,::1,2001:db8::/32,zabbix.example.com
```

[comment]: # ({/new-624a96b0})

[comment]: # ({new-8bb05e99})
##### HANodeName

Specify the node name in a high-availability cluster.
When empty the server is working in standalone mode and a node with empty name is created.

[comment]: # ({/new-8bb05e99})

[comment]: # ({new-c802a26c})
##### HistoryCacheSize

Set the history cache size (in bytes).
The shared memory size for storing history data.

Default: `16M`<br>
Range: 128K-16G

[comment]: # ({/new-c802a26c})

[comment]: # ({new-2753befa})
##### HistoryIndexCacheSize

Set the history-index cache size (in bytes).
The shared memory size for indexing the history data stored in history cache.
The index cache size needs roughly 100 bytes to cache one item.

Default: `4M`<br>
Range: 128K-16G

[comment]: # ({/new-2753befa})

[comment]: # ({new-b5dc4ecc})
##### HistoryStorageDateIndex

Enable storing history values in different indices based on date.

Default: `0`<br>
Values: 0 - disable; 1 - enable

[comment]: # ({/new-b5dc4ecc})

[comment]: # ({new-08949761})
##### HistoryStorageURL

Specify the history storage URL.
This parameter is used for [Elasticsearch](/manual/appendix/install/elastic_search_setup) setup.

[comment]: # ({/new-08949761})

[comment]: # ({new-131c3d46})
##### HistoryStorageTypes

Specify value types to be sent to history storage. A comma-delimited list.
This parameter is used for [Elasticsearch](/manual/appendix/install/elastic_search_setup) setup.

Default: `uint,dbl,str,log,text,json`

[comment]: # ({/new-131c3d46})

[comment]: # ({new-42928b03})
##### HousekeepingFrequency

Set the housekeeping procedure frequency (in hours).
Housekeeping is removing outdated information from the database.<br>*Note*: To prevent housekeeper from being overloaded (for example, when history and trend periods are greatly reduced), no more than 4 times HousekeepingFrequency hours of outdated information are deleted in one housekeeping cycle, for each item.
Thus, if HousekeepingFrequency is 1, no more than 4 hours of outdated information (starting from the oldest entry) will be deleted per cycle.<br>*Note*: To lower load on server startup housekeeping is postponed for 30 minutes after server start.
Thus, if HousekeepingFrequency is 1, the very first housekeeping procedure after server start will run after 30 minutes, and will repeat with one hour delay thereafter.<br>It is possible to disable automatic housekeeping by setting HousekeepingFrequency to 0.
In this case the housekeeping procedure can only be started by *housekeeper\_execute* runtime control option and the period of outdated information deleted in one housekeeping cycle is 4 times the period since the last housekeeping cycle, but not less than 4 hours and not greater than 4 days.<br>See also [runtime control](/manual/concepts/server#runtime-control) options and details on the [housekeeping procedure](/manual/concepts/server#housekeeping-procedure).

Default: `1`<br>
Range: 0-24

[comment]: # ({/new-42928b03})

[comment]: # ({new-5836e8ba})
##### Include

Specify a directory or individual files to be included in the configuration file.
To only include relevant files in the specified directory, the asterisk wildcard character is supported for pattern matching.
See [special notes](special_notes_include) about limitations.

Example:

```default
Include=/absolute/path/to/config/files/*.conf
```

[comment]: # ({/new-5836e8ba})

[comment]: # ({new-97c00865})
##### JavaGateway

Specify the IP address or hostname of Zabbix Java gateway.
Only required if Java pollers are started.

[comment]: # ({/new-97c00865})

[comment]: # ({new-fc4d246a})
##### JavaGatewayPort

Specify the Zabbix Java gateway port.

Default: `10052`<br>
Range: 1024-32767

[comment]: # ({/new-fc4d246a})

[comment]: # ({new-22241946})
##### ListenBacklog

Set the maximum number of pending connections in the TCP queue.<br>The default value is a hard-coded constant, which depends on the system.<br>The maximum supported value depends on the system, too high values may be silently truncated to the 'implementation-specified maximum'.

Default: `SOMAXCONN`<br>
Range: 0 - INT\_MAX

[comment]: # ({/new-22241946})

[comment]: # ({new-33f1aea9})
##### ListenIP

Specify the trapper listen IP address. A comma-delimited list.<br>Trapper will listen on all network interfaces if this parameter is not specified.

Default: `0.0.0.0`

[comment]: # ({/new-33f1aea9})

[comment]: # ({new-98e0be1b})
##### ListenPort

Specify the trapper listen port.

Default: `10051`<br>
Range: 1024-32767

[comment]: # ({/new-98e0be1b})

[comment]: # ({new-55309e9c})
##### LoadModule

Specify the module to load at server startup.
Modules are used to extend the functionality of the server.
The module must be located in the directory specified by LoadModulePath or the path must precede the module name.
If the preceding path is absolute (starts with '/') then LoadModulePath is ignored.<br>Formats:<br>LoadModule=<module.so><br>LoadModule=<path/module.so><br>LoadModule=</abs\_path/module.so><br>It is allowed to include multiple LoadModule parameters.

[comment]: # ({/new-55309e9c})

[comment]: # ({new-0c0c0723})
##### LoadModulePath

Specify full path to the location of server modules.
The default depends on compilation options.

[comment]: # ({/new-0c0c0723})

[comment]: # ({new-c650f3c9})
##### LogFile

Specify the server log file.

Mandatory: Yes, if LogType is set to *file*; otherwise no

[comment]: # ({/new-c650f3c9})

[comment]: # ({new-9c05648a})
##### LogFileSize

Set the maximum log file size (in MB).<br>0 - disable automatic log rotation.<br>*Note*: If the log file size limit is reached and file rotation fails, for whatever reason, the existing log file is truncated and started anew.

Default: `1`<br>
Range: 0-1024<br>
Mandatory: Yes, if LogType is set to *file*; otherwise no

[comment]: # ({/new-9c05648a})

[comment]: # ({new-2f20d22f})
##### LogSlowQueries

Set the maximum duration a database query may take before being logged (in milliseconds).<br>0 - don't log slow queries.<br>This option becomes enabled starting with DebugLevel=3.

Default: `0`<br>
Range: 0-3600000

[comment]: # ({/new-2f20d22f})

[comment]: # ({new-926c45e2})
##### LogType

Specify the log output type:<br>*file* - write log to file specified by LogFile parameter;<br>*system* - write log to syslog;<br>*console* - write log to standard output.

Default: `file`

[comment]: # ({/new-926c45e2})

[comment]: # ({new-809662b4})
##### MaxConcurrentChecksPerPoller

Set the maximum number of asynchronous checks that can be executed at once by each HTTP agent poller, agent poller or SNMP poller.
See [StartHTTPAgentPollers](#starthttpagentpollers), [StartAgentPollers](#startagentpollers), and [StartSNMPPollers](#startsnmppollers).

Default: `1000`<br>
Range: 1-1000

[comment]: # ({/new-809662b4})

[comment]: # ({new-124ae689})
##### MaxHousekeeperDelete

Set the maximum number of rows to be deleted per task in one housekeeping cycle from `history`, `history_str`, `history_log`, `history_uint`, `history_text`, `history_bin`, `history_json`, `trends`, `trends_uint` and `problem` tables.<br>Housekeeping tasks exist in the `housekeeper` table in the format: `[housekeeperid]`, `[object]`, `[objectid]`.<br>
This parameter applies only to deleting data left behind by already deleted items.<br>
If set to `0` then no limit is used at all.<br>
In this case you must know what you are doing, so as not to overload the database.<br> 
When a lot of items are deleted it increases the load to the database, because the housekeeper will need to remove all the history data that these items had.<br>
For example, if we only have to remove 1 item prototype from the template, but this template is linked to 50 hosts and for every host the prototype is expanded to 100 real items, 5000 items in total have to be removed (1\*50\*100).<br>
If 500 is set for MaxHousekeeperDelete (MaxHousekeeperDelete=500), the housekeeper process will have to remove up to 2500000 values (5000\*500) for the deleted items from history and trends tables in one cycle.<br><br>

See also details on the [housekeeping procedure](/manual/concepts/server#housekeeping-procedure).

Default: `5000`<br>
Range: 0-1000000

[comment]: # ({/new-124ae689})

[comment]: # ({new-9cfb79d4})
##### NodeAddress

Specify IP or hostname with optional port to override how the frontend connects to the server.<br>Format: `<address>[:<port>]`<br><br>If IP or hostname is not set, the value of ListenIP will be used.
If ListenIP is not set, the value `localhost` will be used.<br>If port is not set, the value of ListenPort will be used.
If ListenPort is not set, the value `10051` will be used.<br><br>This option can be overridden by the address specified in the frontend configuration.<br><br>See also: [HANodeName](#hanodename) parameter; [Enabling high availability](/manual/concepts/server/ha#enabling-high-availability).

Default: `localhost:10051`

[comment]: # ({/new-9cfb79d4})

[comment]: # ({new-8153735c})
##### PidFile

Specify the PID file.

Default: `/tmp/zabbix_server.pid`

[comment]: # ({/new-8153735c})

[comment]: # ({new-b0d337ac})
##### ProblemHousekeepingFrequency

Set the frequency of deleting problems for deleted triggers (in seconds).<br>
See also details on the [housekeeping procedure](/manual/concepts/server#housekeeping-procedure).

Default: `60`<br>
Range: 1-3600

[comment]: # ({/new-b0d337ac})

[comment]: # ({new-b3642a43})
##### ProxyConfigFrequency

Set the frequency of sending configuration data to Zabbix proxy by the server.
Used only for proxies in the passive mode.

Default: `10`<br>
Range: 1-604800

[comment]: # ({/new-b3642a43})

[comment]: # ({new-3bb5827f})
##### ProxyDataFrequency

Set the frequency of requesting history data from Zabbix proxy by the server.
Used only for proxies in the passive mode.

Default: `1`<br>
Range: 1-3600

[comment]: # ({/new-3bb5827f})

[comment]: # ({new-7df5a0e9})
##### ServiceManagerSyncFrequency

Set the frequency of synchronizing the configuration of a service manager (in seconds).

Default: `60`<br>
Range: 1-3600

[comment]: # ({/new-7df5a0e9})

[comment]: # ({new-f2dfc72b})
##### SMSDevices

Specify modem files that are allowed to use Zabbix server. A comma-delimited list.<br>SMS sending is not possible if this parameter is not set.

Example:

```default
SMSDevices=/dev/ttyUSB0,/dev/ttyUSB1
```

[comment]: # ({/new-f2dfc72b})

[comment]: # ({new-9c385986})
##### SNMPTrapperFile

Specify the temporary file used for passing data from the SNMP trap daemon to the server.<br>Must be the same as in `zabbix_trap_receiver.pl` or SNMPTT configuration file.

Default: `/tmp/zabbix_traps.tmp`

[comment]: # ({/new-9c385986})

[comment]: # ({new-cd750f09})
##### SocketDir

Specify the directory for storing IPC sockets used by internal Zabbix services.

Default: `/tmp`

[comment]: # ({/new-cd750f09})

[comment]: # ({new-bf3120f2})
##### SourceIP

Specify the source IP address for:

-   outgoing connections to Zabbix proxy and Zabbix agent
-   agentless connections (VMware, SSH, JMX, SNMP, Telnet and simple checks)
-   HTTP agent connections
-   script item JavaScript HTTP requests
-   preprocessing JavaScript HTTP requests
-   sending notification emails (connections to SMTP server)
-   webhook notifications (JavaScript HTTP connections)
-   connections to the Vault

[comment]: # ({/new-bf3120f2})

[comment]: # ({new-8edbdae2})
##### SSHKeyLocation

Specify the location of public and private keys for SSH checks and actions.

[comment]: # ({/new-8edbdae2})

[comment]: # ({new-f14a0fc6})
##### SSLCertLocation

Specify the location of SSL-client certificate files for client authentication.<br>This parameter is used in web monitoring only.

[comment]: # ({/new-f14a0fc6})

[comment]: # ({new-d38d629d})
##### SSLKeyLocation

Specify the location of SSL private key files for client authentication.<br>This parameter is used in web monitoring only.

[comment]: # ({/new-d38d629d})

[comment]: # ({new-d4ecaa9a})
##### SSLCALocation

Specify the location of certificate authority (CA) files for SSL-server certificate verification.
If not set, system-wide directory will be used.<br>Note that the value of this parameter will be set as libcurl option `CURLOPT_CAPATH`.
For libcurl versions before 7.42.0, this only has effect if libcurl was compiled to use OpenSSL.
For more information see [cURL web page](http://curl.haxx.se/libcurl/c/CURLOPT_CAPATH.html).<br>This parameter is used in web monitoring and in SMTP authentication.

[comment]: # ({/new-d4ecaa9a})

[comment]: # ({new-206670d7})
##### StartAgentPollers

Set the number of pre-forked instances of Zabbix agent [pollers](/manual/concepts/server#server-process-types-and-threads).
See [MaxConcurrentChecksPerPoller](#maxconcurrentchecksperpoller).

Default: `1`<br>
Range: 0-1000

[comment]: # ({/new-206670d7})

[comment]: # ({new-49587d38})
##### StartAlerters

Set the number of pre-forked instances of [alerters](/manual/concepts/server#server-process-types-and-threads).

Default: `3`<br>
Range: 1-100

[comment]: # ({/new-49587d38})

[comment]: # ({new-3a5cd4ee})
##### StartBrowserPollers

Set the number of pre-forked instances of browser item [pollers](/manual/concepts/server#server-process-types-and-threads).

Default: `1`<br>
Range: 0-1000

[comment]: # ({/new-3a5cd4ee})

[comment]: # ({new-4404a76d})
##### StartConnectors

Set the number of pre-forked instances of [connector workers](/manual/concepts/server#server-process-types-and-threads).
The connector manager process is started automatically when a connector worker is started.

Default: `0`<br>
Range: 0-1000

[comment]: # ({/new-4404a76d})

[comment]: # ({new-25c85aff})
##### StartDBSyncers

Set the number of pre-forked instances of [history syncers](/manual/concepts/server#server-process-types-and-threads).<br>*Note*: Be careful when changing this value, increasing it may do more harm than good.
Roughly, the default value should be enough to handle up to 4000 NVPS.

Default: `4`<br>
Range: 1-100

[comment]: # ({/new-25c85aff})

[comment]: # ({new-40a86c5a})
##### StartDiscoverers

Set the number of pre-forked instances of [discovery workers](/manual/concepts/server#server-process-types-and-threads)**^[1](zabbix_server#footnotes)^**.

Default: `5`<br>
Range: 0-1000

[comment]: # ({/new-40a86c5a})

[comment]: # ({new-5a8be3fd})
##### StartEscalators

Set the number of pre-forked instances of [escalators](/manual/concepts/server#server-process-types-and-threads).

Default: `1`<br>
Range: 1-100

[comment]: # ({/new-5a8be3fd})

[comment]: # ({new-97ad4fb5})
##### StartHistoryPollers

Set the number of pre-forked instances of [history pollers](/manual/concepts/server#server-process-types-and-threads).<br>Only required for calculated checks.

Default: `5`<br>
Range: 0-1000

[comment]: # ({/new-97ad4fb5})

[comment]: # ({new-bef8767a})
##### StartHTTPAgentPollers

Set the number of pre-forked instances of HTTP agent [pollers](/manual/concepts/server#server-process-types-and-threads).
See [MaxConcurrentChecksPerPoller](#maxconcurrentchecksperpoller).

Default: `1`<br>
Range: 0-1000

[comment]: # ({/new-bef8767a})

[comment]: # ({new-565030c6})
##### StartHTTPPollers

Set the number of pre-forked instances of [HTTP pollers](/manual/concepts/server#server-process-types-and-threads)**^[1](zabbix_server#footnotes)^**.

Default: `1`<br>
Range: 0-1000

[comment]: # ({/new-565030c6})

[comment]: # ({new-70082588})
##### StartIPMIPollers

Set the number of pre-forked instances of [IPMI pollers](/manual/concepts/server#server-process-types-and-threads).

Default: `0`<br>
Range: 0-1000

[comment]: # ({/new-70082588})

[comment]: # ({new-5dbd1f62})
##### StartJavaPollers

Set the number of pre-forked instances of [Java pollers](/manual/concepts/server#server-process-types-and-threads)**^[1](zabbix_server#footnotes)^**.

Default: `0`<br>
Range: 0-1000

[comment]: # ({/new-5dbd1f62})

[comment]: # ({new-d9d80e3e})
##### StartLLDProcessors

Set the number of pre-forked instances of low-level discovery (LLD) [workers](/manual/concepts/server#server-process-types-and-threads)**^[1](zabbix_server#footnotes)^**.<br>The LLD manager process is automatically started when an LLD worker is started.

Default: `2`<br>
Range: 1-100

[comment]: # ({/new-d9d80e3e})

[comment]: # ({new-79d5cf2e})
##### StartODBCPollers

Set the number of pre-forked instances of [ODBC pollers](/manual/concepts/server#server-process-types-and-threads)**^[1](zabbix_server#footnotes)^**.

Default: `1`<br>
Range: 0-1000

[comment]: # ({/new-79d5cf2e})

[comment]: # ({new-e788444b})
##### StartPingers

Set the number of pre-forked instances of [ICMP pingers](/manual/concepts/server#server-process-types-and-threads)**^[1](zabbix_server#footnotes)^**.

Default: `1`<br>
Range: 0-1000

[comment]: # ({/new-e788444b})

[comment]: # ({new-a12742d5})
##### StartPollersUnreachable

Set the number of pre-forked instances of [pollers for unreachable hosts](/manual/concepts/server#server-process-types-and-threads) (including IPMI and Java)**^[1](zabbix_server#footnotes)^**.<br>At least one poller for unreachable hosts must be running if regular, IPMI or Java pollers are started.

Default: `1`<br>
Range: 0-1000

[comment]: # ({/new-a12742d5})

[comment]: # ({new-5a731224})
##### StartPollers

Set the number of pre-forked instances of [pollers](/manual/concepts/server#server-process-types-and-threads)**^[1](zabbix_server#footnotes)^**.

Default: `5`<br>
Range: 0-1000

[comment]: # ({/new-5a731224})

[comment]: # ({new-bdcb0d21})
##### StartPreprocessors

Set the number of pre-started instances of preprocessing [worker](/manual/concepts/server#server-process-types-and-threads)**^[1](zabbix_server#footnotes)^** threads should be set to no less than the available CPU core count.
More workers should be set if preprocessing is not CPU-bound and has lots of network requests.

Default: `16`<br>
Range: 1-1000

[comment]: # ({/new-bdcb0d21})

[comment]: # ({new-d6d62537})
##### StartProxyPollers

Set the number of pre-forked instances of [pollers for passive proxies](/manual/concepts/server#server-process-types-and-threads)**^[1](zabbix_server#footnotes)^**.

Default: `1`<br>
Range: 0-250

[comment]: # ({/new-d6d62537})

[comment]: # ({new-469b0927})
##### StartReportWriters

Set the number of pre-forked instances of [report writers](/manual/concepts/server#server-process-types-and-threads).<br>If set to 0, scheduled report generation is disabled.<br>The report manager process is automatically started when a report writer is started.

Default: `0`<br>
Range: 0-100

[comment]: # ({/new-469b0927})

[comment]: # ({new-95051e96})
##### StartSNMPPollers

Set the number of pre-forked instances of SNMP [pollers](/manual/concepts/server#server-process-types-and-threads).
See [MaxConcurrentChecksPerPoller](#maxconcurrentchecksperpoller).

Default: `1`<br>
Range: 0-1000

[comment]: # ({/new-95051e96})

[comment]: # ({new-9cccc249})
##### StartSNMPTrapper

Set to `1` to start an [SNMP trapper](/manual/concepts/server#server-process-types-and-threads) process.

Default: `0`<br>
Range: 0-1

[comment]: # ({/new-9cccc249})

[comment]: # ({new-f1f30b44})
##### StartTimers

Set the number of pre-forked instances of [timers](/manual/concepts/server#server-process-types-and-threads).<br>Timers process maintenance periods.

Default: `1`<br>
Range: 1-1000

[comment]: # ({/new-f1f30b44})

[comment]: # ({new-368a443a})
##### StartTrappers

Set the number of pre-forked instances of [trappers](/manual/concepts/server#server-process-types-and-threads)**^[1](zabbix_server#footnotes)^**.<br>Trappers accept incoming connections from Zabbix sender, active agents and active proxies.

Default: `5`<br>
Range: 0-1000

[comment]: # ({/new-368a443a})

[comment]: # ({new-16e17139})
##### StartVMwareCollectors

Set the number of pre-forked [VMware collector](/manual/concepts/server#server-process-types-and-threads) instances.

Default: `0`<br>
Range: 0-250

[comment]: # ({/new-16e17139})

[comment]: # ({new-0da7c397})
##### StatsAllowedIP

Specify IP addresses (optionally in CIDR notation) or DNS names of external Zabbix instances that are allowed to request stats. A comma-delimited list.<br>
If this parameter is not set no stats requests will be accepted.<br>If IPv6 support is enabled then '127.0.0.1', '::127.0.0.1', '::ffff:127.0.0.1' are treated equally and '::/0' will allow any IPv4 or IPv6 address.
'0.0.0.0/0' can be used to allow any IPv4 address.

Example:

```default
StatsAllowedIP=127.0.0.1,192.168.1.0/24,::1,2001:db8::/32,zabbix.example.com
```

[comment]: # ({/new-0da7c397})

[comment]: # ({new-db780aaa})
##### Timeout

Specify how long to wait (in seconds) for establishing connection and exchanging data with Zabbix proxy, agent, web service, and legacy SNMP checks (single OID number or string).<br>

This parameter defines the duration for various communication operations:

-   remote command execution on Zabbix agent
-   SSH/Telnet command execution
-   requests to Zabbix web service
-   communication timeout for mediatype test request and the `history.push` method
-   rescheduling of items when an IPMI interface becomes unavailable
-   sending response to Zabbix proxy when failing to exchange data due to rights or encryption issues
-   deadline for IPC asynchronous sockets and runtime control options
-   JMX connections
-   fetching statistics from a remote Zabbix proxy or server
-   sending responses to Zabbix frontend
-   asynchronous poller DNS requests
-   response for active check heartbeat
-   retrieval of Zabbix agent data (values) from active agents
-   retrieval of data from Zabbix sender
-   response when trapper fails to process a request
-   sending active check list to Zabbix agent

This timeout will **not** be used for those checks that have [flexible timeout](/manual/config/items/item#item-timeout) settings configured in the frontend (on global, proxy, or per-item level). 
For example, SNMP `walk[OID]` and `get[OID]` items use the configured timeout from the frontend; legacy SNMP checks still use the server timeout value.

Default: `3`<br>
Range: 1-30

[comment]: # ({/new-db780aaa})

[comment]: # ({new-68df390b})
##### TLSCAFile

Specify full pathname of the file containing the top-level CA(s) certificates for peer certificate verification, used for encrypted communications between Zabbix components.

[comment]: # ({/new-68df390b})

[comment]: # ({new-24534d6d})
##### TLSCertFile

Specify full pathname of the file containing the server certificate or certificate chain, used for encrypted communications between Zabbix components.

[comment]: # ({/new-24534d6d})

[comment]: # ({new-0c9251b8})
##### TLSCipherAll

Specify the GnuTLS priority string or OpenSSL (TLS 1.2) cipher string.
Override the default ciphersuite selection criteria for certificate- and PSK-based encryption.

Example:

```default
TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256:TLS_AES_128_GCM_SHA256
```

[comment]: # ({/new-0c9251b8})

[comment]: # ({new-74bef172})
##### TLSCipherAll13

Specify the cipher string for OpenSSL 1.1.1 or newer in TLS 1.3.
Override the default ciphersuite selection criteria for certificate- and PSK-based encryption.

Example for GnuTLS: 

```default
NONE:+VERS-TLS1.2:+ECDHE-RSA:+RSA:+ECDHE-PSK:+PSK:+AES-128-GCM:+AES-128-CBC:+AEAD:+SHA256:+SHA1:+CURVE-ALL:+COMP-NULL::+SIGN-ALL:+CTYPE-X.509
```

Example for OpenSSL: 

```default
EECDH+aRSA+AES128:RSA+aRSA+AES128:kECDHEPSK+AES128:kPSK+AES128
```

[comment]: # ({/new-74bef172})

[comment]: # ({new-a0eeb337})
##### TLSCipherCert

Specify the GnuTLS priority string or OpenSSL (TLS 1.2) cipher string.
Override the default ciphersuite selection criteria for certificate-based encryption.

Example for GnuTLS: 

```default
NONE:+VERS-TLS1.2:+ECDHE-RSA:+RSA:+AES-128-GCM:+AES-128-CBC:+AEAD:+SHA256:+SHA1:+CURVE-ALL:+COMP-NULL:+SIGN-ALL:+CTYPE-X.509
```

Example for OpenSSL: 

```default
EECDH+aRSA+AES128:RSA+aRSA+AES128
```

[comment]: # ({/new-a0eeb337})

[comment]: # ({new-07722feb})
##### TLSCipherCert13

Specify the cipher string for OpenSSL 1.1.1 or newer in TLS 1.3.
Override the default ciphersuite selection criteria for certificate-based encryption.

[comment]: # ({/new-07722feb})

[comment]: # ({new-b3e6744e})
##### TLSCipherPSK

Specify the GnuTLS priority string or OpenSSL (TLS 1.2) cipher string.
Override the default ciphersuite selection criteria for PSK-based encryption.

Example for GnuTLS: 

```default
NONE:+VERS-TLS1.2:+ECDHE-PSK:+PSK:+AES-128-GCM:+AES-128-CBC:+AEAD:+SHA256:+SHA1:+CURVE-ALL:+COMP-NULL:+SIGN-ALL
```

Example for OpenSSL: 

```default
kECDHEPSK+AES128:kPSK+AES128
```

[comment]: # ({/new-b3e6744e})

[comment]: # ({new-a67b06d2})
##### TLSCipherPSK13

Specify the cipher string for OpenSSL 1.1.1 or newer in TLS 1.3.
Override the default ciphersuite selection criteria for PSK-based encryption.

Example:

```default
TLS_CHACHA20_POLY1305_SHA256:TLS_AES_128_GCM_SHA256
```

[comment]: # ({/new-a67b06d2})

[comment]: # ({new-7b53bee4})
##### TLSCRLFile

Specify full pathname of the file containing revoked certificates.
This parameter is used for encrypted communications between Zabbix components.

[comment]: # ({/new-7b53bee4})

[comment]: # ({new-60062be9})
##### TLSFrontendAccept
Specify encryption level for incoming connections from the frontend.

Multiple values can be specified, separated by comma:

-   unencrypted - accept connections without encryption.
-   cert - accept connections secured with TLS and a certificate.

Default: `unencrypted`

[comment]: # ({/new-60062be9})

[comment]: # ({new-efc6faf7})
##### TLSFrontendCertIssuer

Specify the allowed frontend certificate issuer.

[comment]: # ({/new-efc6faf7})

[comment]: # ({new-fa8236e6})
##### TLSFrontendCertSubject

Specify the allowed frontend certificate subject.

[comment]: # ({/new-fa8236e6})

[comment]: # ({new-e236df69})
##### TLSKeyFile

Specify full pathname of the file containing the server private key, used for encrypted communications between Zabbix components.

[comment]: # ({/new-e236df69})

[comment]: # ({new-2c803715})
##### TLSListen

Require TLS-only connections on the trapper socket.

Supported values:

-   required - accept only TLS connections

[comment]: # ({/new-2c803715})

[comment]: # ({new-0b008346})
##### TmpDir

Specify the temporary directory.

Default: `/tmp`

[comment]: # ({/new-0b008346})

[comment]: # ({new-621f6e9f})
##### TrapperTimeout

Specify trapper timeout in seconds for:

-   retrieval of historical data from Zabbix proxy
-   sending configuration data to Zabbix proxy
-   global script execution or remote command execution on Zabbix server

Default: `300`<br>
Range: 1-300

[comment]: # ({/new-621f6e9f})

[comment]: # ({new-02c73c1a})
##### TrendCacheSize

Set the trend cache size, in bytes.<br>The shared memory size for storing trends.

Default: `4M`<br>
Range: 128K-16G

[comment]: # ({/new-02c73c1a})

[comment]: # ({new-5eeafa8d})
##### TrendFunctionCacheSize

Set the trend-function cache size, in bytes.<br>The shared memory size for caching calculated trend function data.

Default: `4M`<br>
Range: 128K-2G

[comment]: # ({/new-5eeafa8d})

[comment]: # ({new-f61cf9e1})
##### UnavailableDelay

Set the frequency of checking host availability during the [unavailability](/manual/appendix/items/unreachability#unavailable-interface) period in seconds.

Default: `60`<br>
Range: 1-3600

[comment]: # ({/new-f61cf9e1})

[comment]: # ({new-98b994ea})
##### UnreachableDelay

Set the frequency of checking host availability during the [unreachability](/manual/appendix/items/unreachability#unreachable-interface) period in seconds.

Default: `15`<br>
Range: 1-3600

[comment]: # ({/new-98b994ea})

[comment]: # ({new-df350752})
##### UnreachablePeriod

Set after how many seconds of [unreachability](/manual/appendix/items/unreachability#unreachable-interface) treat host as unavailable.

Default: `45`<br>
Range: 1-3600

[comment]: # ({/new-df350752})

[comment]: # ({new-a9a2ec9d})
##### User

Drop privileges to a specific, existing user on the system.<br>Only has effect if run as 'root' and AllowRoot is disabled.

Default: `zabbix`

[comment]: # ({/new-a9a2ec9d})

[comment]: # ({new-20ddb562})
##### ValueCacheSize

Set the size of the history value cache (in bytes).<br>The shared memory size for caching item history data requests.<br>Setting to 0 disables the value cache (not recommended).<br>When the value cache runs out of the shared memory a warning message is written to the server log every 5 minutes.

Default: `8M`<br>
Range: 0,128K-64G

[comment]: # ({/new-20ddb562})

[comment]: # ({new-35521bcc})
##### Vault

Specify the vault provider:<br>*HashiCorp* - HashiCorp KV Secrets Engine version 2<br>*CyberArk*  - CyberArk Central Credential Provider<br>Must match the vault provider set in the frontend.

Default: `HashiCorp`

[comment]: # ({/new-35521bcc})

[comment]: # ({new-664924ee})
##### VaultDBPath

Specify the location for retrieving database credentials by keys. It is a Vault path or query, depending on the Vault.

The keys used for [HashiCorp](/manual/config/secrets/hashicorp#retrieving-database-credentials) are 'password' and 'username'.

Example path with VaultPrefix=/v1/secret/data/zabbix/:

```default
database
```

Example path without VaultPrefix:

```default
secret/zabbix/database
```

The keys used for [CyberArk](/manual/config/secrets/cyberark#database-credentials) are 'Content' and 'UserName'.

Example: 

```default
AppID=zabbix_server&Query=Safe=passwordSafe;Object=zabbix_server_database
```

This option can only be used if DBUser and DBPassword are not specified.

[comment]: # ({/new-664924ee})

[comment]: # ({new-2f778b45})
##### VaultPrefix

Specify custom prefix for the vault path or query, depending on the Vault.
The most suitable defaults will be used if not specified.<br>Note that 'data' is automatically appended after mountpoint for HashiCorp if VaultPrefix is not specified.

Example prefix for Hashicorp: 

```default
v1/secret/data/zabbix/
```

Example prefix for Cyberark: 

```default
/AIMWebService/api/Accounts?
```

[comment]: # ({/new-2f778b45})

[comment]: # ({new-778803e5})
##### VaultTLSCertFile

Specify the name of the SSL certificate file used for client authentication.
The certificate file must be in PEM1 format. <br> If the certificate file contains also the private key, leave the SSL key file field empty. <br> The directory containing this file is specified by the configuration parameter SSLCertLocation.<br>This option can be omitted but is recommended for CyberArkCCP vault.

[comment]: # ({/new-778803e5})

[comment]: # ({new-755d874e})
##### VaultTLSKeyFile

Specify the name of the SSL private key file used for client authentication.
The private key file must be in PEM1 format.<br>The directory containing this file is specified by the configuration parameter SSLKeyLocation.<br>This option can be omitted but is recommended for CyberArkCCP vault.

[comment]: # ({/new-755d874e})

[comment]: # ({new-cc25a6c8})
##### VaultToken

Specify the HashiCorp vault authentication token.
The HashiCorp Vault authentication token should have been generated exclusively for Zabbix server with read-only permission to the paths specified in [Vault macros](/manual/config/macros/user_macros#configuration) and read-only permission to the path specified in the optional VaultDBPath configuration parameter.<br>It is an error if VaultToken and `VAULT_TOKEN` environment variable are defined at the same time.

Mandatory: Yes, if Vault is set to *HashiCorp*; otherwise no

[comment]: # ({/new-cc25a6c8})

[comment]: # ({new-f46a0763})
##### VaultURL

Specify the vault server URL.
The system-wide CA certificates directory will be used if SSLCALocation is not specified.

Default: `https://127.0.0.1:8200`

[comment]: # ({/new-f46a0763})

[comment]: # ({new-854dfe73})
##### VMwareCacheSize

Set the shared memory size for storing VMware data.
A VMware internal check `zabbix[vmware,buffer,...]` can be used to monitor the VMware cache usage (see [Internal checks](/manual/config/items/itemtypes/internal)).<br>Note that shared memory is not allocated if there are no `vmware collector` instances configured to start.

Default: `8M`<br>
Range: 256K-2G

[comment]: # ({/new-854dfe73})

[comment]: # ({new-2a646d43})
##### VMwareFrequency

Set the frequency of data gathering from a single VMware service (in seconds).
This frequency should be set to the least update interval of any VMware monitoring item.

Default: `60`<br>
Range: 10-86400

[comment]: # ({/new-2a646d43})

[comment]: # ({new-cf5957ec})
##### VMwarePerfFrequency

Set the frequency of retrieving performance counter statistics from a single VMware service (in seconds).<br>This frequency should be set to the least update interval of any VMware monitoring [item](/manual/vm_monitoring/vmware_keys#footnotes) that uses VMware performance counters.

Default: `60`<br>
Range: 10-86400

[comment]: # ({/new-cf5957ec})

[comment]: # ({new-eefd2428})
##### VMwareTimeout

Set the maximum number of seconds a `vmware collector` will wait for a response from VMware service (vCenter or ESX hypervisor).

Default: `10`<br>
Range: 1-300

[comment]: # ({/new-eefd2428})

[comment]: # ({new-56fee0e5})
##### WebDriverURL

Specify the WebDriver interface URL.

Example (used with Selenium WebDriver standalone server):

```default
WebDriverURL=http://localhost:4444
```

[comment]: # ({/new-56fee0e5})

[comment]: # ({new-738954e5})
##### WebServiceURL

Specify the web service URL in the format `http[s]://host:port/report`.

Example: 

```default
WebServiceURL=http://localhost:10053/report
```

The `http://` scheme may be omitted for non-TLS (HTTP) connections only; with TLS configured, `https://` must be used.

[comment]: # ({/new-738954e5})
